Privacy Policy — How hi877 Collects, Uses, and Protects Your Personal Data

This Privacy Policy ("Policy") explains how hi877 ("hi877", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", "Player", "User") who access or use the hi877 online betting and casino platform, including the website at https://hi877.io and all associated sub-domains and mobile interfaces (collectively, the "Platform").

By registering an account on the hi877 Platform, depositing funds, placing bets, or otherwise making use of any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must cease using the Platform immediately.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. Where there is a conflict between this Policy and any other document, this Policy governs with respect to data privacy matters.

hi877 is the operator of the online betting and casino platform available at https://hi877.io. hi877 acts as the data controller in respect of the personal information you provide when registering and using the Platform. As data controller, hi877 determines the purposes and means of processing your personal data and is responsible for ensuring that your data is handled in accordance with this Policy.

hi877 is a platform designed and built specifically for the Bangladesh market, offering cricket betting, live casino games, slot titles from leading providers, and crash games. All financial transactions on the Platform are denominated in Bangladeshi Taka (৳ BDT) and processed via local payment methods including bKash, Nagad, Rocket, and Upay, as well as international card networks Visa and Mastercard.

For all data privacy enquiries, you may contact hi877's designated support team at [email protected] (displayed as plain text — this is not a clickable link) or via live chat on the Platform. Our support team operates in English, 24 hours a day, 7 days a week, aligned with Bangladesh Standard Time (BST, UTC+6).

hi877 collects personal information from you in a number of ways depending on how you interact with the Platform. The categories of information we collect are described below.

3.1 Information You Provide Directly

• Registration Data: When you create a hi877 account, we collect your full legal name, date of birth, email address, mobile telephone number, and a password of your choosing.
• Identity Verification Documents: To comply with our age verification and anti-money-laundering obligations, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence, together with proof of address documents.
• Payment Information: When you make a deposit or request a withdrawal, we collect details of the payment method used, including mobile banking account identifiers (for bKash, Nagad, Rocket, Upay) and card details (for Visa and Mastercard). Full card numbers are not stored by hi877 — card data is handled directly by our certified payment processing partners.
• Support Communications: When you contact our support team via live chat or email, we retain records of those communications including the content of your messages and any attachments you provide.
• Responsible Gaming Requests: If you submit a self-exclusion request, deposit limit request, or any other responsible gaming tool activation, we record those preferences and the dates on which they were applied.

3.2 Information Collected Automatically

• Device and Technical Data: We automatically collect information about the device and browser you use to access the Platform, including your IP address, device type, operating system version, browser type and version, screen resolution, and time zone setting.
• Usage and Behavioural Data: We collect data about how you navigate and use the Platform, including pages visited, games played, betting patterns, session duration, deposit and withdrawal history, and feature interactions. This data is used to improve Platform functionality and to detect unusual activity patterns that may indicate fraud.
• Cookies and Tracking Technologies: hi877 uses cookies and similar technologies to maintain your session, remember your preferences, and gather aggregate analytics data. Please refer to Section 7 of this Policy for full details of our cookie practices.

hi877 uses the personal information we collect for the following specific purposes:

• Account Creation and Management: To register your account, authenticate your identity when you log in, and manage your account settings and preferences on the hi877 Platform.
• Age and Identity Verification: To verify that you meet the 21-year minimum age requirement and to confirm your identity as required for anti-money-laundering compliance. We will not process withdrawals until identity verification has been satisfactorily completed.
• Payment Processing: To facilitate BDT deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests back to your verified payment method. Transaction records are maintained for financial audit and dispute resolution purposes.
• Platform Delivery and Improvement: To provide you with access to cricket betting markets, live casino games, slot titles, and crash games, and to continually improve the performance, stability, and features of the Platform based on aggregate usage data.
• Fraud Prevention and Security: To monitor transactions and account activity for signs of fraud, money laundering, multi-accounting, bonus abuse, or other prohibited conduct as defined in our Terms & Conditions. Automated and manual review processes are used for this purpose.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and fulfil responsible gaming requests such as self-exclusion or deposit limit adjustments.
• Legal and Regulatory Compliance: To meet our obligations under applicable law, including responding to lawful requests from financial intelligence units, law enforcement authorities, and courts of competent jurisdiction.
• Marketing Communications (with consent): Where you have opted in to receive promotional communications, to send you relevant offers, bonus notifications, and platform updates. You may withdraw this consent at any time. See Section 11 for full details.

hi877 processes your personal data on the following legal bases:

• Contractual Necessity: The majority of data processing carried out by hi877 is necessary for the performance of the contract between you and hi877 — that is, your Terms & Conditions agreement. This includes account registration, payment processing, game delivery, and customer support.
• Legal Obligation: Certain processing activities are required by law, including identity verification, age verification, transaction record-keeping, and the reporting of suspicious financial activity to appropriate authorities.
• Legitimate Interests: hi877 processes some data on the basis of our legitimate business interests, including fraud detection, platform security monitoring, abuse prevention, and aggregate analytics for platform improvement. These interests are balanced against your rights and are not overridden by your privacy interests where we have applied appropriate safeguards.
• Consent: Where processing is not required by contract or law and is not covered by legitimate interests, we rely on your explicit consent. This applies primarily to the sending of optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

hi877 does not sell your personal data to any third party. We share personal information only in the following circumstances and only to the minimum extent necessary:

• Payment Processors: We share the financial data necessary to complete your deposit or withdrawal with the relevant payment service provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. Each of these providers operates under their own privacy policies and security standards.
• Game Providers: To deliver live casino games, slot titles, and crash games, hi877 works with licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Technical session data may be shared with these providers to the extent necessary to deliver the game experience and to certify fair play outcomes.
• Identity Verification Services: Where third-party KYC (Know Your Customer) or age verification services are used to assist with document checking, relevant identity data is shared with those providers under strict data processing agreements.
• Legal and Regulatory Authorities: hi877 will disclose personal data to law enforcement agencies, financial intelligence units, or courts of law where required to do so by a valid legal request, court order, or applicable law. hi877 will not notify you of such disclosures where prohibited from doing so by law.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of hi877's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the privacy practices of the successor entity prior to the transfer taking effect.

All third parties with whom hi877 shares personal data are required to maintain the confidentiality and security of that data and to use it only for the purpose for which it was shared. hi877 does not authorise any third party to use your personal data for their own independent marketing purposes.

hi877 uses cookies and similar tracking technologies — including web beacons and local storage objects — to operate and improve the Platform. Cookies are small text files stored on your device by your browser when you visit the Platform. They help hi877 remember your preferences, maintain your login session, and understand how the Platform is being used.

The types of cookies used by hi877 are described below:

You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including the ability to maintain your login session. hi877 does not use cookies to deliver third-party advertising or to track your activity on websites other than the hi877 Platform.

hi877 takes the security of your personal data seriously and employs a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, alteration, or disclosure.

• SSL/TLS Encryption: All data transmitted between your device and hi877's servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon displayed in your browser confirms that your connection to the Platform is secure.
• Password Security: Your account password is stored in a cryptographically hashed format. hi877 support staff cannot view your password in plain text. You are responsible for choosing a strong, unique password and keeping it confidential.
• Access Controls: Access to systems holding personal data is restricted to hi877 personnel and authorised partners on a strict need-to-know basis. All access is logged and subject to periodic review.
• Payment Data Handling: Full payment card numbers are not stored by hi877. Card transactions are processed by PCI-DSS-compliant payment partners. Mobile banking identifiers (bKash, Nagad, Rocket, Upay account numbers) are stored in encrypted form.
• Security Monitoring: hi877 operates continuous monitoring of its platform infrastructure for anomalous activity, attempted intrusions, and potential data security incidents.

While hi877 maintains robust security practices, no online platform can guarantee absolute security against all threats. You play an important role in protecting your account by using a strong password, keeping your credentials confidential, and notifying us immediately at [email protected] if you suspect unauthorised access to your account.

hi877 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law or legitimate operational need. The following retention principles apply:

• Active Accounts: Personal data associated with an active hi877 account is retained for the full duration of your account registration.
• Closed Accounts: Following account closure — whether initiated by you or by hi877 — we retain your account data for a minimum period required for legal compliance, financial audit, and dispute resolution. This period is determined by applicable financial regulations and anti-money-laundering requirements.
• Transaction Records: Records of all deposits, withdrawals, and wagering activity denominated in ৳ BDT are retained for the minimum period required under applicable financial record-keeping obligations.
• Support Communications: Live chat transcripts and email correspondence are retained for a period of time sufficient to resolve any disputes or complaints arising from the relevant interaction.
• Identity Verification Documents: Copies of identity documents submitted for KYC purposes are retained for the legally required period following account closure and are then securely deleted.
• Marketing Consent Records: Where you have provided consent to receive marketing communications, we retain a record of that consent and any subsequent withdrawal for as long as is necessary to demonstrate compliance.

When personal data is no longer required for any legitimate purpose, hi877 securely deletes or anonymises it in a manner that prevents reconstruction of the original personal information.

As a player on the hi877 Platform, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact hi877 support via live chat or email at [email protected]. We will acknowledge your request within 5 business days and fulfil it within 30 days, subject to identity verification.

• Right to Access: You have the right to request a copy of the personal data hi877 holds about you, together with information about how that data is used and shared. This is sometimes called a Subject Access Request.
• Right to Rectification: If any personal information hi877 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account settings.
• Right to Erasure: You may request that hi877 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to exceptions where retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to Restrict Processing: You may request that hi877 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on legitimate interests pending verification of whether hi877's interests override yours.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that hi877 provide your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on hi877's legitimate interests. hi877 will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for marketing communications does not affect your ability to use the Platform.

hi877 may send you promotional communications — including bonus offers, deposit match promotions, free spin notifications, tournament announcements, and platform update alerts — where you have provided your consent to receive such communications at the time of registration or subsequently through your account preferences.

Marketing communications from hi877 are sent by email to the address registered to your account and, where applicable, by SMS to your registered mobile number. We do not send marketing communications via messaging apps or social media platforms without your explicit opt-in to those specific channels.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by hi877;
• Updating your communication preferences in your hi877 account settings; or
• Contacting our support team via live chat or at [email protected] and requesting removal from marketing communications.

Following a valid opt-out request, hi877 will remove you from marketing distribution within 5 business days. Please note that you may continue to receive transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — even after opting out of marketing, as these are necessary for the operation of your account and are not subject to marketing consent rules.

hi877 is strictly an adults-only platform. Players must be 21 years of age or older to register an account and participate in any betting or gaming activity on the Platform. This minimum age requirement applies to all players regardless of their location within Bangladesh.

hi877 does not knowingly collect, process, or retain personal data from individuals under the age of 21. As part of our account registration process, all players are required to confirm that they meet the minimum age requirement. Where hi877 has reasonable grounds to suspect that a player may be under the age of 21, we will suspend the account and require the player to submit identity verification documents confirming their date of birth before access is restored.

If an account is found to belong to a person under the age of 21, that account will be permanently closed. Any funds deposited by a minor will be handled in accordance with our Terms & Conditions and applicable legal requirements. hi877 will not process any withdrawal to a verified minor's payment method.

If you believe that a minor may have registered an account on the hi877 Platform without authorisation, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

The hi877 Platform integrates third-party services to deliver its full range of features. These include game content providers, payment processors, identity verification services, and infrastructure and hosting providers. When you interact with these third-party services through the hi877 Platform, those providers may collect and process certain data in accordance with their own privacy policies.

hi877 selects third-party service partners that maintain appropriate data security and privacy standards. All third parties that process personal data on behalf of hi877 are required to do so only on hi877's documented instructions and under contractual data protection obligations that are at least as stringent as those described in this Policy.

The hi877 Platform does not include embedded third-party advertising networks, social media tracking pixels, or affiliate retargeting scripts that would transmit your personal data to advertising platforms without your knowledge. Any analytics tools used by hi877 are configured to collect only aggregate, anonymised usage data and do not create individual advertising profiles.

hi877 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services available on the Platform. The most current version of this Policy will always be accessible at https://hi877.io/privacy-policy.

Where changes to this Policy are material — meaning they significantly affect your rights or the way in which your personal data is used — hi877 will notify you by sending an email to your registered email address at least 14 days before the updated Policy takes effect. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

If you do not accept the updated Privacy Policy, you should cease using the Platform and may request closure of your account by contacting our support team. Any personal data collected prior to your account closure will continue to be held in accordance with the version of the Policy in effect at the time of collection, subject to mandatory legal retention obligations.

We encourage you to review this Policy periodically so that you remain informed about how hi877 protects your personal information. The "Last Updated" date displayed at the top of this page will always reflect the date on which the most recent changes were made.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which hi877 handles your personal data, please do not hesitate to contact our dedicated support team through any of the following channels:

• Live Chat: Available directly on the hi877 Platform, 24 hours a day, 7 days a week. Live chat is the fastest channel for urgent account, payment, and privacy queries and typically provides immediate responses during peak Bangladesh Standard Time (BST, UTC+6) hours.
• Email: Written privacy enquiries may be directed to [email protected] (plain text only — not a clickable link). Email responses are typically provided within 2 hours during peak hours and within 24 hours at all other times.

When submitting a data rights request or a privacy-related complaint by email, please include your registered account username and the email address associated with your hi877 account so that we can verify your identity and locate your records promptly. Do not include your full NID number or payment credentials in your email — our support team will request only the minimum information necessary for verification purposes.