hl777 Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings given below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, date of birth, address, mobile number, email address, payment account details, device identifiers, and IP addresses.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, and destruction.
• "Data Controller" means hl777, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of hl777, such as payment service providers and fraud detection vendors.
• "Account" means the registered player account you hold on the hl777 platform.
• "Platform" means the hl777 website at hl777.io, its associated mobile-optimised interfaces, and any applications through which hl777 services are delivered.
• "BST" means Bangladesh Standard Time (UTC+6), the reference time zone used for all timestamps referenced in this Policy.

2 Scope of This Policy

This Policy applies to all Personal Data collected by hl777 in connection with the operation of its online betting and casino platform, including data collected from players based in Bangladesh and from visitors who browse the platform without registering an account.

This Policy does not apply to the data practices of third-party websites, payment processors, or game studios that may be accessible through or integrated with the hl777 platform. Where links or integrations exist to third-party services — such as bKash, Nagad, Rocket, Upay, Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — those parties operate under their own independent privacy policies. hl777 is not responsible for the privacy practices of those third parties.

3 Personal Data We Collect

hl777 collects Personal Data in the following categories. We collect only data that is necessary for the purposes described in this Policy and do not collect sensitive categories of data (such as biometric data, racial or ethnic origin, or health information) unless specifically required for age or identity verification.

3.1 Registration Data

• Full legal name
• Date of birth (used for age verification — players must be 21 or older)
• Residential address (city, district, and postal code within Bangladesh)
• Mobile phone number (used for SMS OTP verification and account communications)
• Email address (used for account notifications and support correspondence)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• National ID card number or passport number
• Photograph of government-issued identity document
• Proof of address document (e.g., utility bill, bank statement, mobile money statement)
• Selfie or facial photograph where requested for identity confirmation

3.3 Financial Data

• Mobile money account numbers (bKash, Nagad, Rocket, Upay) used for deposits and withdrawals
• Bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank) where bank transfer is used
• Masked card numbers for Visa and Mastercard transactions (hl777 does not store full card numbers)
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used

3.4 Betting and Gaming Activity Data

• Bet records including market, stake, odds, settlement outcome, and timestamp
• Casino session records including game title, provider, session duration, stake, and return
• Account balance history and bonus credit/debit records
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion requests)

3.5 Technical and Device Data

• IP address at the time of registration and at each login
• Device type, operating system, and browser version
• Geolocation data derived from IP address (country and city level only — not precise GPS coordinates)
• Session identifiers, authentication tokens, and activity logs
• Cookie identifiers and similar tracking technologies (see Section 8)

3.6 Communications Data

• Content of messages sent to hl777 via live chat, email ([email protected]), or the platform's internal messaging system
• Records of promotional communications sent to you and your interaction with those communications (e.g., email open or click events)

4 How We Collect Your Data

hl777 collects Personal Data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, place a bet, use a responsible gaming tool, or contact our support team.
• Automatically via the Platform: When you visit or use the Platform, our servers automatically log technical data including your IP address, device identifiers, browser type, pages visited, and timestamps. This data is collected whether or not you are logged in to an Account.
• Via cookies and similar technologies: hl777 uses first-party cookies and session storage to maintain login sessions, remember your platform preferences, and analyse aggregate usage patterns. Details are provided in Section 8.
• From payment service providers: When you initiate a deposit or withdrawal, hl777 receives transaction confirmation data from bKash, Nagad, Rocket, Upay, and bank/card processors to reconcile your Account balance. hl777 does not receive your full mobile money PIN or full card details from these providers.
• From identity verification services: Where hl777 uses a third-party KYC verification service to authenticate documents submitted during account verification, that provider returns a verification result (pass/fail) and a risk score to hl777.
• From fraud prevention and analytics services: hl777 may receive risk signals from third-party fraud detection vendors to identify suspicious account behaviour, bot activity, or multiple-account registrations.

5 Legal Basis for Processing

hl777 processes your Personal Data only where a valid legal basis exists. The applicable legal bases for our processing activities are as follows:

• Contractual necessity: The majority of our processing is necessary to perform the contract between hl777 and you as a registered player — including processing your deposits and withdrawals, settling your bets, maintaining your Account, and providing customer support.
• Legal obligation: hl777 processes certain data to comply with applicable anti-money-laundering obligations, fraud prevention requirements, and record-keeping duties under international gaming regulations. This includes KYC verification and transaction monitoring.
• Legitimate interests: hl777 processes technical and behavioural data to detect and prevent fraud, improve platform security, optimise user experience, and conduct anonymised analytics — provided these interests do not override your fundamental rights and freedoms.
• Consent: Where hl777 sends you marketing communications about promotions, new games, or seasonal offers (such as Eid or BPL season promotions), we rely on your consent. You may withdraw consent to marketing communications at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

6 How We Use Your Personal Data

hl777 uses the Personal Data collected for the following specific purposes:

6.1 Account Management

To create, maintain, and administer your registered Account, verify your identity and age (21+ requirement), reset login credentials, and process Account closure requests.

6.2 Payment Processing

To process deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard; to process withdrawal requests to your nominated payment account; and to maintain accurate financial records of all transactions in BDT.

6.3 Betting and Game Services

To accept and settle bets on cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers matches), slots, live casino, and all other markets available on the Platform; to calculate and credit winnings; and to apply wagering requirements to bonus funds.

6.4 Compliance and Fraud Prevention

To fulfil KYC obligations before processing withdrawals above ৳10,000; to screen transactions for money-laundering indicators; to detect and prevent bonus abuse and multi-account violations; and to respond to legally required information requests from regulatory or law enforcement authorities.

6.5 Responsible Gaming

To operate and enforce deposit limits, session time limits, loss limits, cooling-off periods, and self-exclusion requests that you have set on your Account. This processing is necessary to protect vulnerable players and is always carried out in your interest.

6.6 Customer Support

To respond to your enquiries submitted via live chat, email to [email protected], or the platform's messaging system; to investigate and resolve complaints about bet settlements, payment delays, or Account actions; and to maintain records of support interactions for quality assurance.

6.7 Marketing Communications (Consent-Based)

To send you information about current promotions, welcome bonuses, seasonal offers (Eid, Pohela Boishakh, BPL season, T20 World Cup), VIP programme updates, and new game launches — where you have given consent and have not subsequently withdrawn it.

6.8 Platform Improvement and Analytics

To analyse aggregate, anonymised usage data to improve Platform navigation, game discovery, payment flow design, and mobile responsiveness. Individual player data used for analytics purposes is anonymised before analysis; hl777 does not make automated decisions about individual players solely on the basis of analytics data.

7 Sharing Your Personal Data

hl777 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

7.1 Payment Service Providers

hl777 shares transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks (Visa, Mastercard) solely for the purpose of processing your deposits and withdrawals. Each of these providers is bound by its own data protection obligations and is contractually prohibited from using your data for any purpose beyond payment processing.

7.2 Game Studio Partners

Game sessions provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners require the transmission of a session token and your Account identifier to the studio's game server. hl777 does not transmit your full name, address, or payment details to game studios. Studio partners are contractually required to process this data only for game service delivery.

7.3 Identity Verification and Fraud Prevention Services

KYC document images and identity data may be shared with a third-party identity verification service for the purpose of document authentication and age verification. Risk scoring data may be shared with fraud prevention partners to identify suspicious activity. These processors are bound by contractual data processing agreements and are not permitted to retain or use your data independently.

7.4 Legal and Regulatory Disclosure

hl777 may disclose your Personal Data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law or a valid legal order. In such cases, hl777 will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify you of the disclosure.

7.5 Business Transfers

In the event that hl777 undergoes a merger, acquisition, or transfer of business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data will be processed as a result.

8 Cookies & Tracking Technologies

hl777 uses cookies and similar browser storage technologies to operate and improve the Platform. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are required for the Platform to function and cannot be disabled. They include session authentication tokens that keep you logged in, CSRF protection tokens, and load-balancing cookies. No personal betting or financial data is stored in strictly necessary cookies.
• Functional Cookies: These cookies remember your Platform preferences such as your preferred language setting (English), your display preferences, and the last game category you browsed. Disabling functional cookies may reduce your Platform experience but will not prevent access.
• Analytics Cookies: hl777 uses first-party analytics to measure page views, navigation paths, session duration, and feature usage in aggregate. Analytics data is anonymised before processing and is not linked to your registered Account for individual profiling purposes.
• Security Cookies: Short-lived cookies used to detect suspicious login patterns, multiple failed authentication attempts, and IP anomalies consistent with credential-stuffing attacks.

hl777 does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertisers. You may manage cookie preferences through your browser settings. Blocking all cookies will prevent the Platform from functioning correctly as session cookies are required for login.

9 Data Security

hl777 implements a layered approach to data security, applying technical and organisational measures appropriate to the sensitivity of the data held and the risks associated with its processing. Key security measures include:

• SSL/TLS Encryption: All data transmitted between your browser or device and the hl777 Platform is encrypted using TLS 1.2 or higher. The hl777.io domain enforces HTTPS at all times.
• Password Security: Player passwords are stored using a one-way cryptographic hashing algorithm with a unique per-account salt. hl777 staff cannot view or recover your plaintext password; only a password reset flow, authenticated via your registered mobile number, can restore access.
• Access Controls: Personal Data is accessible internally only to hl777 staff who require it for their specific job function (payments team, compliance team, customer support agents). Access is logged and subject to periodic audit.
• Server Security: hl777's servers are hosted in access-controlled data centre facilities with physical security, network firewalls, intrusion detection systems, and regular vulnerability assessments.
• Payment Data Handling: hl777 does not store full card numbers or mobile money PINs. Financial transaction data is handled exclusively through the APIs of the respective payment providers, all of which maintain their own security certifications.

Despite these measures, no internet transmission or electronic storage system is completely secure. If you have reason to believe that your Account has been compromised, please contact [email protected] immediately. hl777 will investigate promptly and, in the event of a confirmed data breach affecting your Personal Data, will notify you without undue delay.

10 Data Retention

hl777 retains your Personal Data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Active Account Data: Retained for the full duration of your Account's active status. If your Account is dormant (no login or transaction) for a continuous period of 24 months, hl777 may contact you to confirm whether you wish to keep the Account open.
• Closed Account Data: Following Account closure — whether initiated by you or by hl777 — hl777 retains your registration data, KYC documents, transaction history, and betting records for a minimum of five (5) years after closure. This retention is required to meet anti-money-laundering record-keeping obligations and to handle any post-closure disputes or regulatory investigations.
• Support Communications: Customer support correspondence is retained for three (3) years after the date of the last interaction.
• Marketing Consent Records: Records of your consent to or withdrawal from marketing communications are retained for the life of your Account and for five (5) years after Account closure.
• Technical Logs: Server access logs and security event logs are retained for thirteen (13) months on a rolling basis and then deleted, unless a specific log is required to be preserved for an ongoing security investigation.

Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised so that it can no longer be linked to any individual.

11 Your Rights Over Your Personal Data

Subject to applicable law and to limitations necessary for regulatory compliance, you hold the following rights in respect of the Personal Data that hl777 holds about you:

• Right of Access: You have the right to request a copy of the Personal Data hl777 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data. You may update most Account details directly through the Account settings panel; corrections to KYC-verified data (name, date of birth) require a support request and supporting documentation.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. Note that hl777 is unable to delete data that is required to be retained under our legal and regulatory obligations (see Section 10). In such cases, we will restrict processing to the minimum necessary for compliance purposes.
• Right to Restrict Processing: You may request that hl777 limit the processing of your Personal Data in certain circumstances — for example, while a rectification request is pending or where you have objected to processing and we are assessing your objection.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. hl777 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing. To withdraw consent, contact [email protected].
• Right to Data Portability: You may request a copy of your Personal Data in a structured, commonly used, machine-readable format (e.g., CSV) for Personal Data that you have provided to hl777 and that is processed on the basis of your consent or contractual necessity.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". hl777 will respond within 30 calendar days (BST). We may request verification of your identity before fulfilling the request to prevent unauthorised disclosure.

12 Children & Minors

The hl777 Platform is strictly intended for adults aged 21 and above. hl777 does not knowingly collect, process, or store Personal Data relating to any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process; accounts where the player is found to be under 21 are closed immediately.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered on hl777, please contact us immediately at [email protected]. Upon receiving and verifying such a report, hl777 will close the Account without delay and return any deposited funds to the payment method used, after deducting any bonuses that have been claimed.

13 Third-Party Links & Integrations

The hl777 Platform may contain references to or integrations with third-party services such as game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard). When you interact with these services, you are subject to their respective privacy policies and terms of service.

hl777 exercises reasonable care in selecting third-party service partners and requires all processors to enter into data processing agreements. However, hl777 does not control and is not responsible for the data handling practices of independent third-party services. We encourage you to review the privacy policies of any third-party service with which you interact through or in connection with hl777.

14 Updates to This Privacy Policy

hl777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made — for example, introducing a new category of data collection, a new processing purpose, or a new third-party processor — hl777 will:

• Update the "Last Updated" date displayed at the top of this Policy;
• Send a notification to the email address registered on your Account at least seven (7) days before the changes take effect;
• Display a prominent notice on the Platform homepage for a period of at least fourteen (14) days following the update.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acknowledgement of the changes. If you do not agree to the updated Policy, you must stop using the Platform and may request Account closure and withdrawal of your Balance before the effective date of the changes.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way hl777 processes your Personal Data, please contact us using the details below. All enquiries are handled by hl777's data and compliance team.

• Email (plain text — not a link): [email protected]
• Subject Line for Data Enquiries: "Privacy Policy Enquiry" or "Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Time Target: Within 24 hours for general privacy enquiries; within 30 calendar days for formal data rights requests
• Time Zone: All response times are measured in Bangladesh Standard Time (BST, UTC+6)

For responsible gaming support, self-exclusion requests, and deposit limit settings, please visit the Responsible Gaming page directly. For answers to common questions about accounts, deposits, and withdrawals, the FAQ page is a good starting point.