hi71 Privacy Policy — How We Collect, Use & Protect Your Data

1 Who We Are

hi71 is an online casino and sports betting platform operating at hi71.io, serving players in Bangladesh. References to "hi71", "we", "us", and "our" in this Privacy Policy refer to the hi71 platform and its operating entity. References to "you" and "your" refer to any individual who accesses, registers on, or uses the hi71 platform in any capacity.

hi71 acts as the data controller in respect of the personal information you provide when registering an account, making deposits or withdrawals, placing wagers, or contacting our support team. As data controller, hi71 is responsible for deciding how and why your personal data is processed and for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, you may contact our dedicated data privacy team at [email protected]. Contact details are also provided in Section 13 of this policy.

2 Data We Collect

2.1 Information You Provide Directly

When you register an account on hi71, deposit funds, place wagers, claim promotions, or contact our support team, you may provide the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, nationality, and national identification number.
• Contact data: Email address, mobile phone number, and residential address (including city, district, and postcode within Bangladesh).
• Account credentials: Username and hashed password (we never store your password in plain text).
• Financial data: Payment method details including bKash account numbers, Nagad wallet identifiers, Rocket account references, bank account details, and Visa/Mastercard partial card numbers retained for withdrawal processing.
• KYC verification documents: Copies of government-issued identification (National ID card, passport, or driver's licence), proof of address documents, and payment method ownership evidence submitted during account verification.
• Communications data: Records of your correspondence with hi71 support via live chat, email, or any other communication channel.

2.2 Data Collected Automatically

When you access the hi71 platform, we automatically collect certain technical data about your device and browsing behaviour:

• Device & technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, time spent on the platform, games played, betting history, session duration, login timestamps, and navigation patterns.
• Location data: Approximate geographic location derived from your IP address, used to verify that you are not accessing hi71 from a prohibited territory.
• Cookie data: Data collected via cookies and similar tracking technologies as described in Section 6 of this policy.

2.3 Data from Third Parties

hi71 may receive personal data about you from third-party sources in limited circumstances, including identity verification service providers used during KYC processing, payment processors such as bKash, Nagad, Rocket, and Upay who confirm transaction status, and fraud prevention services that flag suspicious activity associated with your identity or payment methods.

3 How We Use Your Data

hi71 uses your personal data for the following purposes. The table below summarises each processing purpose alongside the type of data used and the legal basis on which we rely:

hi71 will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice of the new purpose and, where required by applicable law, obtaining your prior consent.

4 Legal Basis for Processing

hi71 processes your personal data on the following legal grounds depending on the specific processing activity:

• Contract performance: Processing that is necessary to deliver the services you have requested, including account management, payment processing, and providing access to games and betting markets.
• Legal obligation: Processing required to comply with applicable laws and regulations, including age verification, anti-money laundering checks, responsible gaming obligations, and record-keeping requirements.
• Legitimate interest: Processing that serves hi71's legitimate business interests without overriding your privacy rights, including fraud prevention, platform security, internal analytics, and service improvement activities.
• Consent: Processing based on your freely given, specific, and informed consent, primarily relating to direct marketing communications and personalised promotional offers. You may withdraw your consent at any time by contacting [email protected] or updating your account notification preferences.

5 Data Sharing

5.1 Service Providers

hi71 shares personal data with carefully selected third-party service providers who assist us in operating the platform. These providers are contractually bound to process your data only on hi71's instructions and to maintain appropriate security standards. Categories of service providers who may receive your data include:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for the sole purpose of processing your deposit and withdrawal transactions.
• KYC and identity verification service providers — to verify your age, identity, and payment method ownership as required by our age verification and anti-fraud obligations.
• Game studios and content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others — limited technical data is shared to facilitate game session management and dispute resolution.
• IT infrastructure and cloud hosting providers — who store and process data on our behalf under strict data processing agreements.
• Customer support platform providers — who power our live chat and ticketing systems.

5.2 Legal and Regulatory Disclosures

hi71 may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are legally required or compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of hi71, its players, or the public. hi71 will, where permitted by law, notify you of any such disclosure request before complying.

5.3 No Sale of Personal Data

hi71 does not sell, rent, lease, or otherwise transfer your personal data to any third party for that third party's own marketing or commercial purposes. Any data sharing described in this section is strictly limited to the purposes for which your data was originally collected.

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit the hi71 platform. They allow hi71 to recognise your device across visits, remember your preferences, and collect analytical information about how you use the platform. hi71 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

6.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These enable account login, session management, security features, and payment processing. They cannot be disabled without affecting platform functionality.
• Analytical cookies: Used to understand how players interact with the hi71 platform — which pages are most visited, where users drop off, and how navigation flows are used. This data is used exclusively to improve the platform experience.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and recently played games to personalise your experience on return visits.
• Marketing cookies: Used, with your consent, to deliver relevant promotional content within the hi71 platform based on your gaming history and preferences. hi71 does not use cross-site marketing cookies or share cookie data with advertising networks.

6.3 Managing Cookies

You may configure your browser to refuse all cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will impair your ability to use core hi71 platform features including account login and payment processing. Instructions for managing cookies are available in your browser's help documentation.

7 Data Retention

hi71 retains your personal data for as long as your account remains active and for a defined period following account closure. The specific retention periods that apply to different categories of data are as follows:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Betting and gaming history: Retained for the lifetime of your account and for two (2) years following account closure for responsible gaming monitoring purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the communication relates to a formal dispute, in which case it is retained until the dispute is fully resolved plus one (1) year.
• Marketing consent records: Retained until consent is withdrawn plus one (1) year to demonstrate compliance.
• Analytical and cookie data: Retained in anonymised or aggregated form indefinitely; identifiable session data is retained for a maximum of thirteen (13) months.

When your data is no longer required for the purpose for which it was collected and the applicable retention period has expired, hi71 will securely delete or anonymise your personal data in accordance with our internal data destruction procedures.

8 Data Security

hi71 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the hi71 platform.
• Industry-standard bcrypt password hashing — your password is never stored in readable form.
• Firewall and intrusion detection systems monitoring network traffic in real time.
• Role-based access controls ensuring hi71 staff can only access personal data that is necessary for their specific job function.
• Regular third-party security audits and penetration testing of the hi71 platform infrastructure.
• Encrypted storage for all KYC documents and sensitive financial data at rest.
• Automated alerts for unusual login activity, including logins from new devices or unexpected geographic locations.

Despite these measures, no online platform can guarantee absolute security. If you become aware of any suspected security breach affecting your hi71 account, please contact our support team immediately at [email protected]. In the event of a data breach that is likely to result in a risk to your rights and freedoms, hi71 will notify affected players without undue delay.

9 Your Rights

As a player on the hi71 platform, you have the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". hi71 will respond to your request within thirty (30) days of receipt.

• Right of access: You have the right to request a copy of the personal data hi71 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or completed without undue delay.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to our legal obligations to retain certain data as described in Section 7.
• Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately.
• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

10 Children's Privacy

The hi71 platform is strictly intended for adults aged 21 years and above. hi71 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to use the hi71 platform or provide any personal information to hi71.

If hi71 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that information from our records and close the associated account. If you believe that a person under 21 has provided personal data to hi71, please contact us immediately at [email protected].

11 Third-Party Links

The hi71 platform may contain references to third-party services, game studios, or payment providers. This Privacy Policy applies solely to personal data collected and processed by hi71 in connection with your use of the hi71 platform. hi71 is not responsible for the privacy practices of third-party services, even where those services are integrated into or accessible from the hi71 platform.

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate under their own privacy policies in respect of game session data processed on their certified gaming servers. Payment processors including bKash, Nagad, Rocket, and Upay also operate under their own privacy policies in respect of payment transaction data processed through their systems. hi71 encourages you to review the privacy policies of any third-party services you interact with.

12 Changes to This Privacy Policy

hi71 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. Where changes are material — meaning they significantly affect how we use your personal data or the rights available to you — hi71 will notify you by email to your registered address or by a prominent notice on the hi71 platform at least fourteen (14) days before the changes take effect.

Non-material updates such as minor clarifications, typographical corrections, or formatting improvements may be made without prior notice. The effective date at the top of this policy will always reflect when it was last updated. We encourage you to review this policy periodically to stay informed about how hi71 protects your personal data.

Your continued use of the hi71 platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised policy, you must cease using the platform and may request account closure and data deletion in accordance with Section 9.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hi71 handles your personal data, please contact our privacy team using the details below. All privacy-related enquiries and data rights requests are handled by our dedicated support team.

• Email: [email protected] (plain text only — not a clickable link)
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy queries: "Privacy Policy Enquiry"
• Support availability: 24 hours a day, 7 days a week
• Response time: Within 30 days for formal data rights requests; within 48 hours for general privacy enquiries
• Language: English