Privacy Policy — How hi177 Protects Your Personal Data
At hi177, the privacy and security of our players' personal information is a fundamental commitment. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and the rights you hold over your information as a player on Bangladesh's premier online gaming platform.
1. Data Controller
hi177 ("hi177", "we", "us", "our") is the data controller responsible for the personal information collected through the hi177 platform at hi177.app. As data controller, hi177 determines the purposes for which your personal data is processed and the means by which that processing is carried out.
This Privacy Policy applies to all personal data collected from players, prospective players, and visitors to hi177.app, regardless of the device or method of access used. It covers data collected through account registration, gameplay, financial transactions, customer support interactions, promotional participation, and general browsing of the platform.
By creating a hi177 account or using any feature of the hi177 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must refrain from using the hi177 platform and contact us at [email protected] to discuss account closure.
2. Information We Collect
hi177 collects personal information through several channels in the course of providing its gaming and betting services. The categories of data we collect are described below:
2.1 Information You Provide Directly
- Registration Data: Full legal name, date of birth, mobile phone number, and preferred payment method, provided when you create a hi177 account.
- Identity Verification Documents: Copies of government-issued identification (National ID Card, passport, or driving licence) and proof of address documents submitted in connection with our Know Your Customer (KYC) procedures.
- Payment Information: Mobile financial service account details (bKash, Nagad, Rocket, Upay) or bank account identifiers provided when making deposits or requesting withdrawals. hi177 does not store full card numbers; payment data is handled by our certified payment processing partners.
- Communications Data: Messages, enquiries, and documents submitted to our support team via email at [email protected] or through any in-platform support channel.
- Promotional Participation Data: Information provided when entering competitions, claiming bonuses, or responding to surveys on the hi177 platform.
2.2 Information Collected Automatically
- Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
- Usage Data: Pages visited on hi177.app, time and date of visits, session duration, game titles accessed, betting patterns, click-stream data, and referring URLs.
- Cookie Data: Data collected via cookies and similar tracking technologies as described in Section 6 of this Policy.
- Geolocation Data: Approximate geographic location derived from your IP address, used to verify access eligibility and comply with jurisdictional requirements.
2.3 Information from Third Parties
- Payment Provider Confirmation: Transaction status, reference numbers, and account ownership confirmation received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard in connection with deposit and withdrawal processing.
- Identity Verification Services: Results of automated identity and document verification checks carried out by our third-party KYC service providers.
- Fraud Prevention Data: Risk signals and fraud indicators provided by our anti-fraud partners to protect the integrity of the hi177 platform.
| Data Category | Source | Primary Purpose |
|---|---|---|
| Registration & Identity Data | Provided by you | Account creation, KYC compliance |
| Payment & Transaction Data | You & payment providers | Deposits, withdrawals, AML compliance |
| Device & Technical Data | Collected automatically | Security, fraud prevention, platform optimisation |
| Usage & Gameplay Data | Collected automatically | Service improvement, responsible gaming monitoring |
| Communications Data | Provided by you | Customer support, dispute resolution |
| Cookie & Tracking Data | Collected automatically | Session management, analytics, personalisation |
3. Lawful Basis for Processing
hi177 processes your personal data only where a valid lawful basis exists. The lawful bases we rely on are as follows:
- Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted when registering your hi177 account. This includes account management, payment processing, and game delivery.
- Legal Obligation: Processing necessary to comply with applicable legal requirements, including anti-money-laundering (AML) obligations, Know Your Customer (KYC) verification mandates, and any lawful requests from competent regulatory or law enforcement authorities.
- Legitimate Interests: Processing carried out in pursuit of hi177's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud detection and prevention, platform security, responsible gaming monitoring, and internal analytics used to improve platform quality.
- Consent: Where hi177 relies on your consent as the lawful basis for processing — for example, in connection with marketing communications or certain non-essential cookies — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
4. How We Use Your Information
hi177 uses the personal data we collect for the following specific purposes:
Account Management & Service Delivery
- Creating, verifying, and maintaining your hi177 player account
- Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer
- Delivering access to casino games, live dealer tables, slots, and sports betting markets
- Applying and tracking bonuses, promotions, and loyalty rewards to your account
Regulatory Compliance & Security
- Verifying your identity and age (18+) in compliance with our KYC obligations
- Monitoring transactions for signs of money laundering, fraud, or other financial crime
- Detecting and preventing the use of automated software, bots, or unfair advantage tools
- Enforcing self-exclusion requests and responsible gaming restrictions
- Responding to lawful requests from regulatory bodies and law enforcement agencies
Platform Improvement & Personalisation
- Analysing gameplay patterns and usage data to improve the hi177 platform and game offering
- Personalising your in-platform experience, such as surfacing games or promotions relevant to your interests
- Conducting internal research and analytics to understand player behaviour and platform performance
Marketing Communications
Where you have provided explicit consent, hi177 may send you promotional communications about new games, seasonal offers (for example, Eid specials, Pohela Boishakh promotions, or BPL cricket season offers), and platform updates. You may opt out of marketing communications at any time by contacting [email protected]. Opting out of marketing does not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts, which are sent on the basis of contractual necessity.
Customer Support
We use your contact details and the content of your support communications to respond to enquiries, investigate complaints, and resolve disputes in accordance with the complaints procedure set out in our Terms & Conditions.
5. Sharing Your Information
hi177 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Payment Processing Partners
Your payment details are shared with our certified payment processing partners — including the operators of bKash, Nagad, Rocket, Upay, Visa, and Mastercard gateway services — solely for the purpose of processing your deposits and withdrawals. Each payment partner operates under its own privacy policy and security standards.
Identity Verification & KYC Providers
Identity documents and personal details submitted for KYC verification are shared with our contracted identity verification service providers. These providers process your data on hi177's behalf and are bound by data processing agreements that prohibit them from using your information for any purpose other than verifying your identity on our behalf.
Game Content Providers
Technical identifiers (such as anonymised player IDs) may be shared with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of delivering and logging game sessions. These studios receive only the minimum data necessary to provide the game service and are contractually prohibited from using that data for their own commercial purposes.
Fraud Prevention & Security Partners
Device and behavioural data may be shared with our anti-fraud and cybersecurity partners for the purpose of detecting and preventing fraudulent activity on the hi177 platform. This processing is carried out in hi177's legitimate interests and in the interests of all honest players who use the platform.
Legal & Regulatory Disclosure
hi177 may disclose your personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of hi177, our players, or the public.
7. Data Retention
hi177 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods we apply to the main categories of personal data are as follows:
- Account & Registration Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with our anti-money-laundering record-keeping obligations.
- Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification, or for such longer period as may be required by applicable regulatory obligations.
- Transaction Records: All deposit and withdrawal records are retained for a minimum of five (5) years from the date of each transaction.
- Customer Support Communications: Retained for three (3) years from the date of the most recent communication in a given thread, unless the communication relates to an ongoing dispute, in which case it is retained until the dispute is fully resolved.
- Usage & Analytics Data: Aggregated, anonymised analytics data may be retained indefinitely. Identifiable usage logs are retained for a maximum of twenty-four (24) months.
- Marketing Consent Records: Retained for five (5) years from the date of consent or opt-out, as evidence of compliance with consent requirements.
At the end of the applicable retention period, hi177 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures. Where deletion is not immediately practicable due to technical constraints, the relevant data will be isolated and protected from further processing until deletion can be completed.
8. Your Privacy Rights
As a hi177 player, you hold a number of rights in relation to your personal data. hi177 is committed to honouring these rights promptly and transparently. Your rights are described below:
- Right of Access: You have the right to request a copy of the personal data hi177 holds about you. We will provide this information within a reasonable time frame and at no charge for the first request in any 12-month period.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain account details directly through your hi177 account settings.
- Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal obligations — for example, we are required to retain certain records for anti-money-laundering compliance and cannot delete them on request during the mandatory retention period.
- Right to Restriction of Processing: You may request that hi177 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to its processing on the basis of legitimate interests.
- Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to hi177 processing your data on the basis of legitimate interests, including profiling. You also have an unconditional right to object to the processing of your data for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, please contact our data privacy team at [email protected] with the subject line "Privacy Rights Request". Please include your full name, registered mobile number, and a description of the right you wish to exercise. hi177 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. If we require additional time or information to process your request, we will notify you accordingly.
9. Data Security
hi177 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes the following controls:
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and hi177's servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
- Secure Data Storage: Personal data stored on hi177's servers is encrypted at rest. Access to stored data is restricted to authorised personnel who require it to perform their job functions.
- Access Controls: Strict role-based access controls limit internal access to personal data. All staff access to player data is logged, monitored, and subject to regular audit.
- Penetration Testing: hi177's platform and infrastructure are subject to regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
- Fraud Monitoring: Automated and manual fraud monitoring systems operate continuously to detect suspicious account activity, unusual transaction patterns, and potential data security incidents.
- Incident Response: hi177 maintains a documented data breach response procedure. In the event of a confirmed data security incident that poses a risk to your rights and freedoms, we will notify you and the relevant authorities within the time frames required by applicable law.
While hi177 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying hi177 immediately if you suspect that your account has been compromised.
10. Third-Party Services
The hi177 platform integrates with third-party services — including game studios, payment processors, and identity verification providers — to deliver a complete gaming experience. While hi177 carefully vets all third-party partners and requires them to meet appropriate data protection standards through contractual obligations, each third-party service operates under its own independent privacy policy.
hi177 is not responsible for the data practices of third-party services once your data has been transferred to them in accordance with this Policy. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of hi177, including the payment providers you choose for deposits and withdrawals.
The hi177.app website does not contain links to external third-party websites for general browsing. All links on the hi177 platform direct users to internal pages of hi177.app. Payment method logos displayed on the platform are informational only and do not constitute endorsement or affiliation beyond the stated payment processing relationship.
11. Changes to This Policy
hi177 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. When material changes are made to this Policy, we will notify registered players via the email address associated with their account, or through a prominent notice on the hi177 platform upon their next login.
The effective date shown at the top of this Policy indicates when the current version was last updated. We encourage all players to review this Policy periodically to stay informed about how hi177 collects, uses, and protects their personal information. Your continued use of the hi177 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.
If you object to any changes made to this Privacy Policy, you should cease using the hi177 platform and contact us at [email protected] to request account closure and the deletion of your personal data, subject to any mandatory retention obligations described in Section 7 of this Policy.
12. Contact & Privacy Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or the way hi177 handles your personal data, please contact our data privacy team using the details below. All correspondence should be in English and directed exclusively to:
Email: [email protected]
Subject Line: "Privacy Policy Enquiry" or "Privacy Rights Request"
Response Time: Within 5 business days (Bangladesh Standard Time, BST UTC+6)
hi177 is committed to resolving all privacy-related enquiries fairly and transparently. If you submit a privacy rights request, we will acknowledge it within 5 business days and provide a full response within 30 calendar days. In complex cases where additional time is required, we will inform you of the extended timeline and the reason for the delay.
Players who are not satisfied with hi177's response to a privacy complaint are encouraged to escalate their concern by submitting a follow-up request to the same email address with the subject line "Privacy Complaint Escalation". hi177 will review all escalated complaints at a senior level and provide a final written decision within 14 calendar days of escalation.
Our Data Protection Commitments
Six practical ways hi177 keeps your personal information safe, private, and under your control.
End-to-End Encryption
Every byte of data exchanged between your device and hi177's servers is protected by 256-bit SSL/TLS encryption. Your credentials and payment details are never transmitted in plain text.
Strict KYC Compliance
We verify every player's identity before processing withdrawals. This protects you from unauthorised use of your account and helps hi177 meet its anti-money-laundering obligations.
No Data Selling — Ever
hi177 will never sell, rent, or trade your personal data to third parties for commercial purposes. Your information exists to serve you, not to generate revenue for data brokers.
Full Control Over Your Data
Access, correct, export, or request deletion of your personal data at any time by contacting our privacy team. Your rights over your information are real and actively honoured by hi177.
Clear Retention Limits
We retain your data only for as long as legally required or operationally necessary. Once the retention period ends, your data is securely deleted or anonymised — no unnecessary accumulation.
Breach Notification
In the unlikely event of a data security incident affecting your personal information, hi177 will notify you and the relevant authorities promptly, in accordance with applicable legal requirements.
Your Privacy Is Our Priority
We hope this Privacy Policy has given you a clear picture of how hi177 handles your data. If you have further questions, visit our FAQ page or explore the full hi177 platform with confidence.