hf77 Privacy Policy

hf77 ("we", "us", "our") operates the online betting and gaming platform accessible at https://hf77.io. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read this document carefully so that you understand our approach to your personal information and your privacy rights.

This Privacy Policy applies to all users of the hf77 platform, including visitors who browse without registering, users who create a player account, and all registered players based in Bangladesh and elsewhere. By accessing or using the hf77 platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference into our overall agreement with you as a registered hf77 player.

hf77 collects several categories of personal data depending on how you interact with our platform. The categories and specific data types we may collect are described in the table below.

hf77 does not collect or store complete card numbers for Visa or Mastercard transactions. Full card payment details are processed exclusively by certified payment gateway partners and are not transmitted to or retained on hf77 servers.

hf77 collects personal data through the following means:

• Direct interactions: Data you provide when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated technologies: Technical and usage data collected automatically when you visit the hf77 platform, via cookies, web beacons, server logs, and similar tracking technologies. See Section 7 for full details of our cookie practices.
• Third-party sources: Identity and age verification data from third-party verification service providers; fraud prevention data from anti-fraud service partners; payment confirmation data from bKash, Nagad, Rocket, Upay, and banking partners.
• Game providers: Game session data, bet result data, and RNG outcome records from certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.

hf77 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and securing your hf77 player account; verifying your identity and age; authenticating your login sessions.
• Service delivery: Processing your deposits and withdrawals in BDT; settling bets and gaming transactions; crediting bonus funds; delivering game content through our certified providers.
• Responsible gaming compliance: Applying deposit limits, cooling-off periods, and self-exclusion restrictions you have requested; monitoring account activity for indicators of problem gambling behaviour.
• Anti-fraud and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and any other conduct that violates our Terms & Conditions.
• Legal and regulatory compliance: Meeting our obligations under applicable law; responding to requests from courts, regulators, and law enforcement authorities.
• Customer support: Responding to your enquiries, resolving disputes, and processing account closure requests.
• Platform improvement: Analysing usage patterns to improve the performance, design, and content of the hf77 platform.
• Marketing communications: Sending you promotional offers, bonus notifications, and seasonal promotions (such as BPL, T20 World Cup, Eid, and Pohela Boishakh offers) — only where you have given us your consent to do so. You may withdraw consent at any time by contacting [email protected].

hf77 will not use your personal data for any purpose that is incompatible with the purposes listed above. If we intend to use your data for a materially new purpose, we will notify you and, where required, seek your consent before doing so.

hf77 processes personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual necessity: Processing that is necessary to perform the contract we have with you as a registered player — including account creation, bet settlement, financial transactions, and customer support.
• Legal obligation: Processing required to comply with our legal obligations — including identity verification, anti-money-laundering checks, and disclosures to regulatory authorities.
• Legitimate interests: Processing carried out for hf77's legitimate business interests — including fraud prevention, platform security, internal analytics, and responsible gaming monitoring — provided those interests are not overridden by your rights and interests.
• Consent: Processing carried out on the basis of your freely given, specific, informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

hf77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank receive the financial data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC (Know Your Customer) and age verification services receive identity documents and personal details for the sole purpose of verifying your account.
• Game providers: Certified providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session and player data necessary to deliver their game content and resolve game disputes.
• Fraud prevention and security partners: Anti-fraud service providers receive technical and transactional data to help identify and prevent fraudulent or criminal activity.
• Legal and regulatory authorities: Courts, law enforcement agencies, financial intelligence units, and regulatory bodies may receive account and transaction data where disclosure is required or permitted by applicable law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of hf77's business, your personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

hf77 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device by your web browser when you visit the hf77 platform. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the hf77 platform. Disabling other cookie categories will not affect your ability to place bets or access your account but may reduce the personalisation of your experience.

hf77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The key retention periods that apply to hf77 player data are as follows:

• Active account data: Retained for the full duration of your account plus a minimum of five years following account closure, to support legal compliance and dispute resolution obligations.
• Financial transaction records: Retained for a minimum of seven years following each transaction, in accordance with anti-money-laundering and financial record-keeping requirements.
• Identity verification documents: Retained for a minimum of five years following account closure or the last transaction on the account, whichever is later.
• Responsible gaming records: Self-exclusion requests, deposit limit configurations, and cooling-off period records are retained indefinitely to ensure that self-exclusion instructions are honoured in the event of a future registration attempt.
• Support communications: Email and live-chat records are retained for three years following the date of the last communication in each case.
• Marketing consent records: Retained for the duration of the consent and for three years following withdrawal of consent, to demonstrate compliance with consent requirements.

When personal data is no longer required, hf77 will securely delete or anonymise it in accordance with our internal data lifecycle procedures.

As a data subject, you hold the following rights in relation to your personal data held by hf77. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". hf77 will respond to all verified data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data that hf77 holds about you, together with information about how it is processed.
• Right to Rectification: You have the right to request that hf77 correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction of Processing: You have the right to request that hf77 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data carried out on the basis of hf77's legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

hf77 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. The key security measures in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the hf77 platform is encrypted using industry-standard Transport Layer Security (TLS) with a 256-bit key.
• Encrypted data storage: Sensitive personal data — including identity documents and financial account details — is stored in encrypted form on hf77 servers. Passwords are stored as salted cryptographic hashes and are never stored in plain text.
• Access controls: Access to personal data is restricted to hf77 employees and contractors who have a legitimate business need to access it. All access is logged, monitored, and subject to role-based permission controls.
• Regular security assessments: hf77 conducts periodic technical security reviews of its platform infrastructure to identify and remediate vulnerabilities.
• Incident response: hf77 maintains an internal data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, hf77 will notify affected users without undue delay.

While hf77 applies rigorous security measures, no digital platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own hf77 account credentials. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately.

The hf77 platform is strictly for individuals aged 21 and above. hf77 does not knowingly collect or process personal data belonging to anyone under the age of 21. Age verification is a mandatory step in the hf77 account registration process, and accounts cannot be fully activated until age has been confirmed.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing gambling platforms. hf77 supports and endorses responsible digital parenting practices as part of our broader commitment to player protection in Bangladesh.

The hf77 platform may contain references to or integrations with third-party services, including game providers, payment processors, and identity verification services. While hf77 carefully selects its third-party partners, we are not responsible for the privacy practices of those third parties.

Where you interact with a third-party service via the hf77 platform — for example, by initiating a bKash or Nagad payment — that service operates under its own privacy policy and data handling practices. hf77 encourages you to review the privacy policies of any third-party services you use in connection with your hf77 account.

hf77 does not include links to unrelated external websites on its platform. All links within the hf77 platform are to internal pages or to directly integrated third-party service providers that form part of the hf77 product offering.

hf77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our platform's functionality. When material changes are made, the "Last Updated" date at the top of this document will be revised, and registered players will be notified via the email address associated with their account where the changes are significant enough to affect your rights.

Your continued use of the hf77 platform following the publication of any revised Privacy Policy constitutes your acknowledgement of those changes. If you do not agree with any change to this Privacy Policy, you should cease using the platform and may request account closure in accordance with the hf77 Terms & Conditions.

Archived versions of previous Privacy Policy documents are available upon request. To request an archived version, contact [email protected] with the subject line "Privacy Policy Archive Request" and specify the date range you require.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hf77 handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled in English by our dedicated data and compliance team.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request"
• Subject Line for Policy Enquiries: "Privacy Policy Enquiry"
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Within 30 days for formal data rights requests; within 2 business days for general privacy enquiries

hf77 is committed to handling all privacy concerns with transparency and care. If you are not satisfied with our response to a privacy-related complaint, you have the right to escalate the matter through the dispute resolution process described in the hf77 Terms & Conditions.