hi97 Privacy Policy — How We Protect Your Data

1. Information We Collect

hi97 collects personal information in order to provide a secure, personalised, and legally compliant gaming service to players in Bangladesh. We collect only the data that is genuinely necessary for the purposes described in this policy, and we do not engage in speculative data collection. The categories of personal information we collect are set out below.

1.1 Registration Information

When you create a hi97 account, we collect the following information directly from you:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (for age verification purposes)
• Residential address, including district, city, and postal code
• Email address
• Mobile phone number
• Username and encrypted password
• Mobile financial service account identifiers (e.g., bKash or Nagad wallet numbers) where provided for payment purposes

1.2 Identity Verification (KYC) Documents

To comply with our Know Your Customer obligations and to protect the integrity of the platform, we may request documentary evidence including:

• National Identity Card (NID) — front and back
• Passport biographical data page
• Proof of address (e.g., a recent utility bill or bank statement)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account showing the registered name)

These documents are submitted through our secure in-platform verification portal and are handled exclusively for identity and age verification purposes.

1.3 Transactional Data

hi97 automatically records financial transactions conducted through your account, including deposit amounts, withdrawal amounts, payment method references, transaction timestamps, and currency (BDT). This data is retained as part of our financial record-keeping obligations and is used to resolve disputes and investigate fraud.

1.4 Gaming Activity Data

We record data related to your gaming activity on the hi97 platform, including game sessions, bet amounts, game outcomes, session durations, and bonus usage. This data is used for platform analytics, responsible gaming monitoring, and to ensure the integrity of our gaming environment.

1.5 Technical & Device Data

When you access hi97, our systems automatically collect certain technical data, including your IP address, device type, operating system, browser type and version, screen resolution, and referring URL. This information helps us maintain platform security, detect fraud, and optimise the user experience across devices commonly used in Bangladesh.

2. How We Use Your Information

hi97 processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use the information we collect are described in the table below.

2.1 Marketing Communications

hi97 will only send promotional emails or SMS messages to users who have explicitly opted in to receive such communications. You may withdraw your consent and opt out of marketing communications at any time by contacting our support team or by using the unsubscribe mechanism in any marketing email. Opting out of marketing communications does not affect your ability to continue using the platform.

3. Data Sharing & Third Parties

hi97 does not sell or rent personal data to third parties. We share personal data with external parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Game Content Providers

To deliver live casino, slots, and sports betting services on the hi97 platform, we work with licensed game studios and content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive certain technical session data (such as a session token and bet history for the active session) in order to serve game content correctly. They do not receive your full personal profile or payment details.

3.2 Payment Processing Partners

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, necessary transactional data is shared with those payment service providers to complete the transaction. hi97 does not store full mobile financial service credentials on its own servers; payment data is transmitted directly between you and the payment provider through encrypted channels.

3.3 Identity Verification Services

hi97 may engage third-party identity verification technology providers to assist with the KYC process. Any such provider is contractually bound to use the data they access only for verification purposes and to apply security standards at least equivalent to those maintained by hi97.

3.4 Legal and Regulatory Disclosures

hi97 may be required to disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally compelled to do so. In such cases, we will disclose only the minimum information required to satisfy the legal obligation and, where permitted by law, will notify the affected user of the disclosure.

4. Cookies & Tracking Technologies

hi97 uses cookies and similar technologies to operate core platform functionality, maintain session security, and gather aggregated analytics about how users interact with our services. We do not use cookies to build advertising profiles or to track your behaviour across unrelated third-party websites.

4.1 Types of Cookies We Use

4.2 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will impair core platform functionality, including the ability to log in and maintain a session. Disabling functional or analytical cookies will not prevent you from using hi97 but may reduce the quality of your experience. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

5. Data Retention & Storage

hi97 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following general retention periods apply:

• Active account data: Retained for the lifetime of your account plus a minimum of five years following account closure, in accordance with financial record-keeping obligations.
• KYC documents: Retained for a minimum of five years following account closure or the completion of the last transaction, whichever is later.
• Transactional records: Retained for a minimum of seven years for financial compliance purposes.
• Gaming activity logs: Retained for up to three years from the date of the activity, after which they may be aggregated and anonymised for analytics purposes.
• Marketing consent records: Retained for as long as the consent remains active, plus two years following any withdrawal of consent.
• Technical/device logs: Retained for up to 12 months from collection, unless required for an active security investigation.

When the applicable retention period expires and there is no further lawful basis for continued storage, hi97 will securely delete or anonymise the relevant personal data. Anonymised data (from which no individual can be identified) may be retained indefinitely for analytical and business planning purposes.

5.1 Data Storage Location

Personal data collected from hi97 users is stored on access-controlled, encrypted servers. hi97 takes reasonable technical and organisational precautions to prevent unauthorised access, disclosure, alteration, or destruction of your personal information. Where data is processed by third-party service providers, those providers are contractually required to maintain equivalent security standards.

6. Your Rights Over Your Data

As a hi97 user, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or in writing at [email protected]. We will respond to verified requests within 30 days.

6.1 Right of Access

You have the right to request a copy of the personal data hi97 holds about you, along with information about how it is being used. We will provide this information in a clear, structured format. We may ask you to verify your identity before fulfilling an access request to ensure we do not disclose your data to an unauthorised party.

6.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain information (such as your contact email or address) directly through your account settings. For information that requires verification to amend (such as your legal name or date of birth), please contact our support team with supporting documentation.

6.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis for processing. Please note that we may be required to retain certain data for legal compliance purposes (such as transactional and KYC records) even following an erasure request. We will clearly explain the scope of any deletion carried out and identify any categories of data that must be retained.

6.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction to erasure — you have the right to request that we restrict our use of your personal data while the matter is resolved.

6.5 Right to Withdraw Consent

Where hi97 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of marketing consent does not affect your account or your ability to use the platform.

6.6 Right to Object

You have the right to object to processing of your personal data carried out on the basis of hi97's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

7. Data Security Measures

hi97 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or alteration. Key security measures in place include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or app and the hi97 platform is encrypted using 256-bit SSL/TLS protocols.
• Password hashing: User passwords are never stored in plain text. They are processed using a one-way cryptographic hashing algorithm with unique salts, so that even in the unlikely event of a data breach, passwords cannot be reverse-engineered.
• Access controls: Access to personal data within hi97's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their role.
• Two-factor authentication (2FA): hi97 offers optional two-factor authentication for player accounts and requires it for all internal administrative access to player data.
• Regular security audits: hi97's platform and data systems undergo periodic security reviews and penetration testing to identify and address vulnerabilities.
• Fraud detection systems: Automated systems monitor account activity and transactions in real time to detect patterns indicative of fraud, account takeover, or money laundering.

8. Contact & Policy Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data hi97 holds about you, please contact our support team. We are available 24/7 via the in-platform live chat, or you can reach us by writing to:

hi97 Privacy & Data Team
[email protected]
Support hours: Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week

8.1 Changes to This Privacy Policy

hi97 reviews this Privacy Policy regularly and will update it to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify registered users by email or via an in-platform notification. The effective date at the top of this policy will be updated accordingly. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

8.2 Minors

hi97 does not knowingly collect or process personal data belonging to individuals under the age of 18. The platform is strictly for adult players aged 18 and above. If we become aware that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on hi97, please contact us immediately at [email protected].