hh77 Privacy Policy
At hh77, your privacy is a fundamental priority. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and the rights you hold as a registered player on Bangladesh's most trusted online casino platform.
How hh77 Protects Your Privacy
Six core principles guide the way hh77 handles your personal information. These reflect our commitment to transparency, security, and respect for your data rights.
SSL Encryption on Every Page
All data transmitted between your device and the hh77 platform is protected by industry-standard 256-bit SSL encryption. This ensures that your personal details, payment information, and account credentials cannot be intercepted in transit.
Secure Data Storage
Personal data collected by hh77 is stored on secured servers with access controls, firewalls, and regular security audits. Only authorised personnel with a defined business need are permitted access to player data, and all such access is logged.
No Sale of Personal Data
hh77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data is shared only with service providers who assist in operating the platform, and only to the extent strictly necessary for that purpose.
Your Rights Over Your Data
As a registered player, you have the right to access, correct, export, or request deletion of your personal data at any time. Submit a data rights request to our support team and we will respond within 30 calendar days in accordance with applicable data protection principles.
Transparent Cookie Use
hh77 uses cookies and similar technologies solely to improve platform functionality, maintain session state, and analyse aggregate usage patterns. We do not use third-party advertising cookies or behavioural tracking cookies that profile you across the web.
Opt-Out of Marketing
Promotional communications are sent only to players who have explicitly opted in. You may withdraw your marketing consent at any time by updating your account preferences or contacting our support team — and we will action your request within 48 hours.
Table of Contents
- Introduction and Scope
- Data Controller Information
- Personal Data We Collect
- How We Collect Your Data
- Legal Basis for Processing
- How We Use Your Personal Data
- Data Sharing and Third Parties
- International Data Transfers
- Data Retention
- Cookies and Tracking Technologies
- Your Data Protection Rights
- Children's Privacy
- Security Measures
- Third-Party Links and Services
- Changes to This Privacy Policy
- Contact and Data Requests
1 Introduction and Scope
This Privacy Policy sets out the basis on which hh77 ("hh77", "we", "us", "our") collects, processes, stores, and shares personal data relating to individuals who access or use the hh77 platform, available at hh77.io ("the Platform").
This policy applies to all personal data collected through the Platform, including data collected during account registration, identity verification, payment processing, customer support interactions, and use of casino games and sports betting features. It applies to all players based in Bangladesh and to any person who accesses the Platform from any location.
This Privacy Policy should be read alongside the hh77 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By creating an account or using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
2 Data Controller Information
hh77 acts as the data controller for all personal data collected through the Platform. As data controller, hh77 determines the purposes and means by which personal data is processed.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, you may contact us through the following channels:
- Email: [email protected]
- Live Chat: Available 24/7 via the Platform
- Subject line for data requests: "Data Privacy Request — [Your Username]"
3 Personal Data We Collect
hh77 collects only the personal data that is necessary for the operation of the Platform and the delivery of our services. The categories of personal data we may collect include:
3.1 Identity Data
Full legal name, date of birth, gender, nationality, national identity card number, passport number, and copies of government-issued identification documents where required for KYC (Know Your Customer) verification.
3.2 Contact Data
Email address, mobile phone number, and residential address (including city, district, and postcode). Players in Bangladesh may provide addresses in cities including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.
3.3 Account Data
Username, encrypted password, account registration date, account status, and player preferences saved within the Platform.
3.4 Financial Data
Payment method details (bKash account number, Nagad account number, Rocket account number, Upay account number, Visa or Mastercard card details), transaction history, deposit amounts, withdrawal requests, and balance history. Full payment card numbers are not stored by hh77 — card processing is handled by our PCI-DSS compliant payment partners.
3.5 Technical Data
IP address, device type and model, operating system, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6), and unique device identifiers.
3.6 Usage Data
Login timestamps, session duration, pages visited within the Platform, games played, bet history, wagering activity, bonus usage, and interaction logs with customer support.
3.7 Communications Data
Records of your correspondence with hh77 support, including live chat transcripts and email exchanges, retained for quality assurance and dispute resolution purposes.
3.8 Summary of Data Categories
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, national ID | KYC verification, fraud prevention |
| Contact Data | Email, mobile number, address | Account communication, support |
| Financial Data | bKash/Nagad number, transaction history | Payment processing, AML compliance |
| Technical Data | IP address, device type, browser | Security, fraud detection, analytics |
| Usage Data | Games played, bet history, session logs | Platform improvement, responsible gaming |
| Communications Data | Live chat transcripts, email records | Dispute resolution, quality assurance |
4 How We Collect Your Data
hh77 collects personal data through the following channels and interactions:
4.1 Direct Collection
Data you provide directly when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, responding to surveys, or participating in promotional activities.
4.2 Automated Collection
Data collected automatically as you interact with the Platform, including through cookies, web server logs, and session tracking technologies. This includes your IP address, browser characteristics, pages viewed, and the sequence of actions taken within the Platform.
4.3 Third-Party Sources
Data received from third-party service providers in connection with identity verification, payment processing, fraud detection, and anti-money laundering (AML) screening. For example, our payment partners may share transaction confirmation data, and our KYC verification provider may return identity match results.
5 Legal Basis for Processing
hh77 processes personal data only where a valid legal basis exists. The primary legal bases on which we rely are:
- Contractual Necessity: Processing required to enter into or perform the contract between hh77 and the player, including account management, payment processing, and delivery of gaming services.
- Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering requirements, fraud prevention, and identity verification mandates.
- Legitimate Interests: Processing carried out in the legitimate interests of hh77 or a third party, provided those interests are not overridden by the player's fundamental rights. This includes fraud detection, platform security, and improving the quality of our services.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for the sending of direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
6 How We Use Your Personal Data
hh77 uses the personal data we collect for the following specific purposes:
- Account Creation and Management: To register your account, verify your identity, manage your profile, and facilitate access to all Platform features.
- Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records.
- Identity Verification (KYC): To comply with anti-money laundering obligations and to confirm that you meet the minimum age requirement of 21 years.
- Customer Support: To respond to your queries, resolve disputes, and provide assistance through our live chat and email channels.
- Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account abuse, and unauthorised access attempts.
- Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour and to administer self-exclusion, deposit limit, and session reminder tools where requested.
- Platform Improvement: To analyse aggregate usage data, identify technical issues, and improve the performance, design, and content of the Platform.
- Marketing Communications (Consent-Based): To send promotional offers, bonus notifications, and news about new games or events — only where you have opted in to receive such communications.
- Legal Compliance: To fulfil regulatory obligations, respond to lawful requests from authorities, and maintain records as required by applicable law.
7 Data Sharing and Third Parties
hh77 does not sell personal data to third parties. We share personal data only in the following limited and controlled circumstances:
7.1 Payment Processors
We share necessary financial and identity data with our payment partners — including bKash, Nagad, Rocket, Upay, and card payment processors — solely for the purpose of completing your requested transactions. These partners are contractually bound to process your data only for that specified purpose.
7.2 Identity Verification Providers
We share identity documents and personal details with third-party KYC providers to facilitate account verification. These providers operate under strict data processing agreements and are not permitted to use your data for any purpose beyond the verification service.
7.3 Game Technology Providers
Game studios whose products are available on the Platform — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised or pseudonymised technical data (such as session tokens or player identifiers) necessary to operate their games within the Platform. These providers do not receive your full personal profile.
7.4 Fraud Prevention and AML Services
We may share data with fraud prevention agencies and anti-money laundering screening services where we have a legitimate interest or legal obligation to do so. This helps protect players and the Platform from financial crime.
7.5 Legal and Regulatory Authorities
hh77 will disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where required to do so by applicable law, court order, or regulatory directive. We will notify affected players of such disclosures where legally permitted to do so.
7.6 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of hh77's business, personal data held by hh77 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and of any change to the applicable Privacy Policy.
8 International Data Transfers
hh77 operates a platform directed at players in Bangladesh. Certain third-party service providers — including cloud infrastructure providers and game studios — may process data in countries outside Bangladesh. Where such transfers occur, hh77 ensures that appropriate safeguards are in place to protect the security and integrity of transferred data, including contractual data processing agreements with the relevant providers.
By using the Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries outside Bangladesh. hh77 takes reasonable steps to ensure that any such transfer is conducted lawfully and that your data continues to receive a comparable level of protection.
9 Data Retention
hh77 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | Legal and regulatory compliance |
| Financial transaction records | 7 years from date of transaction | Anti-money laundering obligations |
| KYC verification documents | 5 years after account closure | Regulatory record-keeping requirements |
| Customer support communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical and usage logs | 12 months on a rolling basis | Security monitoring, fraud detection |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of lawful marketing basis |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
10 Cookies and Tracking Technologies
10.1 What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function correctly, to remember user preferences, and to provide analytical information about how a site is used.
10.2 Cookies Used by hh77
hh77 uses the following categories of cookies on the Platform:
- Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing the Platform's core functionality.
- Functional Cookies: Used to remember your preferences — such as language selection, game settings, or preferred payment method — so that you do not have to re-enter them on each visit.
- Analytical Cookies: Used to collect aggregate, anonymised data about how players use the Platform. This information helps us identify areas for improvement and understand overall usage patterns. Individual players are not identified through analytical cookies.
10.3 What hh77 Does Not Use Cookies For
hh77 does not use advertising cookies, retargeting pixels, or cross-site behavioural tracking technologies. We do not allow third-party advertising networks to place cookies on the Platform.
10.4 Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when new cookies are set. Please note that disabling strictly necessary cookies will affect your ability to use key Platform features, including staying logged in to your account.
11 Your Data Protection Rights
As a player on the hh77 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Privacy Request".
- Right of Access: You have the right to request a copy of the personal data hh77 holds about you, along with information about how it is used.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
- Right to Erasure ("Right to be Forgotten"): You may request that hh77 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing and there are no overriding legitimate grounds. Please note that this right may be limited where hh77 is required to retain data for legal or regulatory reasons.
- Right to Restriction of Processing: You may request that hh77 temporarily restrict processing of your data — for example, while you contest its accuracy or while a request for erasure is being assessed.
- Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a machine-readable copy of your personal data for transfer to another service provider.
- Right to Object: You have the right to object to processing based on hh77's legitimate interests, including the use of your data for direct marketing purposes. Where you object to direct marketing, processing for that purpose will cease immediately.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
12 Children's Privacy
The hh77 Platform is strictly intended for adults aged 21 and above. hh77 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If you are under 21 years of age, you must not use the Platform or provide any personal data to hh77.
If hh77 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].
13 Security Measures
hh77 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it from unauthorised access, accidental loss, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between the player's device and the Platform is encrypted in transit using industry-standard SSL/TLS protocols.
- Encrypted Password Storage: Account passwords are stored using one-way cryptographic hashing. hh77 staff cannot view your plain-text password at any time.
- Access Controls: Access to personal data within hh77 is restricted to employees and contractors who require it to perform their job functions. All access is subject to role-based permissions and is logged for audit purposes.
- Firewall and Intrusion Detection: Our infrastructure is protected by firewalls and automated intrusion detection systems that monitor for and respond to suspicious activity in real time.
- Regular Security Audits: hh77 conducts periodic security reviews of its systems, processes, and third-party integrations to identify and address potential vulnerabilities.
- Incident Response Plan: In the event of a data breach, hh77 has a documented incident response plan. Affected players will be notified of any breach that is likely to result in a high risk to their rights or freedoms, without undue delay.
While hh77 employs robust security measures, no digital platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their hh77 accounts and to contact support immediately if they suspect unauthorised access.
14 Third-Party Links and Services
The hh77 Platform may contain references to third-party game providers and payment services. These third parties operate under their own privacy policies, which are independent of hh77's Privacy Policy. hh77 is not responsible for the privacy practices of third-party providers.
Game content provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi is delivered through secure API integrations. While these studios may process limited technical data (such as session tokens) to deliver their games, they do not receive your full personal profile from hh77.
Payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard operate under their own privacy and data security frameworks. You are encouraged to review the privacy policies of any third-party service you use in connection with the Platform.
15 Changes to This Privacy Policy
hh77 reserves the right to update or amend this Privacy Policy at any time. Where a change is material — such as a change to the categories of data collected, a new purpose for processing, or a new category of third-party recipient — hh77 will notify registered players by email to their registered address at least 14 days before the change takes effect.
For minor or administrative updates (such as clarifications of existing language or corrections of typographical errors), the policy will be updated with a revised effective date and players will not be individually notified.
The current version of the Privacy Policy, along with its effective date, is always available at hh77.io/privacy-policy. Continued use of the Platform after any updated policy becomes effective constitutes your acceptance of the revised terms.
16 Contact and Data Requests
For any questions, concerns, or requests relating to this Privacy Policy or the personal data hh77 holds about you, please reach out through the following channels:
- Email: [email protected] (subject line: "Data Privacy Request — [Your Username]")
- Live Chat: Available 24/7 via the Platform — average response time under 3 minutes
- Response Time: Within 30 calendar days for formal data rights requests; within 24 hours for general privacy queries
Your Privacy Is Protected. Now Let's Play.
Now that you understand how hh77 handles your data, explore our full game library, check our FAQ for common questions, or log in to your account and start enjoying Bangladesh's most trusted casino platform.