hai77 Privacy Policy

1. Introduction

hai77 is committed to protecting the privacy and personal data of all individuals who interact with the platform. This Privacy Policy sets out, in formal English, the basis on which personal data collected from users — or provided by users — will be processed by hai77. It covers all services accessible via hai77.io, including the cricket sportsbook, live casino, slots, jackpot bingo, and account management functions.

This document should be read in conjunction with the hai77 Terms & Conditions, which are incorporated by reference. Where any conflict exists between this Privacy Policy and the Terms & Conditions on matters of data handling, this Privacy Policy shall prevail. Both documents are available in English, which is the binding language for all legal purposes.

hai77 serves players across Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. The privacy rights and obligations described in this policy apply equally to all users regardless of geographic location within Bangladesh.

---

2. Data Controller

For the purposes of this Privacy Policy, hai77 acts as the data controller in respect of personal data collected through the platform. As data controller, hai77 determines the purposes for which and the means by which personal data is processed. All queries relating to data processing or the exercise of data subject rights should be directed to the hai77 support team using the contact details provided in Section 15 of this policy.

---

3. Data We Collect

// 3.1 — Account Registration Data

When you create a hai77 account, we collect the following personal data as part of the registration process:

• Full legal name as it appears on your identity document
• Date of birth (used to verify you meet the 21+ age requirement)
• Email address (used for account communications and password recovery)
• Mobile phone number (used for account verification and transaction alerts)
• Residential address (required for identity verification and KYC compliance)
• Username and encrypted password

// 3.2 — Identity Verification (KYC) Data

To comply with Know Your Customer obligations and to verify your eligibility to use the platform, hai77 may request and collect:

• Copies of government-issued identification documents (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements dated within 90 days)
• Selfie photographs for liveness verification where required
• Source of funds documentation in cases of high-value transactions

// 3.3 — Financial Transaction Data

In connection with deposits and withdrawals, hai77 collects and retains:

• Payment method identifiers (bKash account numbers, Nagad numbers, Rocket numbers, Upay, bank account references)
• Transaction amounts, dates, times, and reference numbers
• Transaction status and processing outcomes
• Currency denomination (Bangladeshi Taka, ৳)

hai77 does not store full payment card numbers or mobile banking PINs. These are handled exclusively by certified third-party payment processors using PCI-DSS-compliant infrastructure.

// 3.4 — Gaming & Betting Activity Data

As part of operating a fair and secure gaming environment, hai77 records:

• Bets placed, including game type, market, stake, odds, and outcome
• Session data including login times, session duration, and logout events
• Game history across all product verticals including cricket, slots, jackpot bingo, and live casino
• Bonus claims, wagering progress, and promotional participation records

// 3.5 — Technical & Device Data

When you access the hai77 platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Screen resolution and language preferences
• Referring URL and pages visited within the platform
• Cookie identifiers and session tokens (see Section 10)

// 3.6 — Communications Data

When you contact hai77 support or engage in any written correspondence with us, we retain records of those communications, including the content of messages, the date and time of contact, and any resolution or outcome reached. This data is used to maintain service quality and to resolve disputes if they arise.

---

4. How We Collect Data

hai77 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, place bets, contact support, or respond to surveys or promotions.
• Automatically — through cookies, log files, session tracking, and analytics tools as you interact with the platform.
• From third parties — including identity verification service providers, payment processors, fraud prevention agencies, and, where applicable, publicly available sources used to verify your identity or financial standing.

---

5. Purposes of Processing

hai77 processes your personal data for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and securing your hai77 account throughout its lifecycle.
Transaction Processing	Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard.
Identity Verification	Verifying your age (21+) and identity to meet KYC obligations and prevent underage gambling.
Legal Compliance	Meeting obligations under applicable anti-money laundering, fraud prevention, and data protection frameworks.
Fraud & Security	Detecting and preventing fraudulent activity, cheating, money laundering, and Terms & Conditions violations.
Service Improvement	Analysing usage patterns to improve platform performance, game selection, and user experience.
Responsible Gaming	Monitoring betting patterns to identify potential problem gambling behaviour and provide appropriate support.
Customer Support	Responding to queries, resolving disputes, and maintaining support records.
Marketing (with consent)	Sending promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications.

---

6. Legal Basis for Processing

hai77 processes personal data only where a valid legal basis exists. The primary legal bases relied upon are:

• Contractual necessity — processing required to perform the contract between you and hai77, including account operation and transaction processing.
• Legal obligation — processing required to comply with applicable legal and regulatory requirements, including KYC, anti-money laundering checks, and age verification.
• Legitimate interests — processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent — processing based on your explicit consent, primarily for direct marketing communications. You may withdraw consent at any time by contacting support or updating your account preferences.

---

7. Data Sharing

// 7.1 — Third-Party Service Providers

hai77 may share your personal data with carefully selected third-party service providers who assist in operating the platform. These providers act as data processors on behalf of hai77 and are contractually bound to process data only on our instructions and to maintain appropriate security standards. Categories of third-party processors include:

• Payment processors and gateway providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard networks)
• Identity verification and KYC service providers
• Fraud detection and anti-money laundering screening services
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Analytics and performance monitoring tools

// 7.2 — Legal & Regulatory Disclosure

hai77 may disclose personal data to competent authorities, regulatory bodies, law enforcement agencies, or courts when required to do so by law, court order, or lawful governmental request. In such cases, hai77 will disclose only the minimum data necessary to satisfy the legal obligation.

// 7.3 — No Sale of Data

hai77 does not sell, rent, lease, or otherwise trade personal data to third-party marketers, data brokers, or any other commercial entity for their own marketing purposes. This prohibition applies without exception.

---

8. Data Retention

hai77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, regulatory, and operational obligations. As a general guide:

• Account data — retained for the duration of the account's active life and for a period thereafter as required by applicable record-keeping obligations.
• Transaction records — retained for a minimum of five years from the date of each transaction to satisfy financial record-keeping requirements.
• KYC documentation — retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Betting history — retained for a minimum of three years from the date of each bet for dispute resolution and responsible gaming purposes.
• Communications — retained for a minimum of two years from the date of last contact for support quality and dispute resolution purposes.
• Marketing consent records — retained for the duration of consent and for a reasonable period thereafter as evidence of consent status.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with hai77's internal data lifecycle procedures.

---

9. Security Measures

hai77 implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the hai77 platform
• Encryption of sensitive data fields at rest within our database infrastructure
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Two-factor authentication options for user accounts to reduce the risk of unauthorised access
• Automated session timeouts to protect idle logged-in sessions
• Incident response procedures for detection, containment, and notification in the event of a data security incident

While hai77 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is entirely free from risk. Users are advised to maintain the security of their own login credentials and to use strong, unique passwords for their hai77 accounts.

---

10. Cookies & Tracking Technologies

// 10.1 — What Are Cookies

Cookies are small text files placed on your device by the hai77 platform when you visit the site. They enable the platform to recognise your device on subsequent visits, maintain your session state, and collect usage analytics. Similar technologies including local storage, session storage, and pixel tags may also be used.

// 10.2 — Types of Cookies Used

• Strictly Necessary Cookies — essential for platform operation, including session management, login state maintenance, and security functions. These cannot be disabled without impairing core functionality.
• Analytical Cookies — used to understand how users interact with the platform, which pages are visited most frequently, and where errors occur. Data is aggregated and anonymised where possible.
• Functional Cookies — used to remember your preferences such as language settings and display preferences to personalise your experience.
• Marketing Cookies — used only where you have provided consent, to deliver relevant promotional communications and measure campaign effectiveness.

// 10.3 — Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the hai77 platform. Browser-level cookie controls vary by browser; consult your browser's help documentation for guidance.

---

11. Your Rights

Subject to applicable law, you hold the following rights in respect of your personal data held by hai77. To exercise any of these rights, contact the hai77 support team using the details in Section 15.

hai77 will respond to all verified data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, with notice provided to you within the initial 30-day period. There is no charge for exercising your rights, unless requests are manifestly unfounded or excessive.

---

12. Minors

The hai77 platform is strictly intended for individuals aged 21 years and above. hai77 does not knowingly collect, retain, or process personal data belonging to persons under the age of 21. If hai77 becomes aware that personal data has been collected from an individual under 21 without appropriate verification, that data will be deleted and the corresponding account will be closed immediately. If you believe a minor has created an account on the platform, please notify the support team immediately.

---

13. International Data Transfers

In the course of operating the hai77 platform, personal data may be transferred to or processed in countries outside Bangladesh — for example, by cloud infrastructure providers or identity verification partners whose servers are located overseas. Where such transfers occur, hai77 takes appropriate steps to ensure that adequate data protection safeguards are in place, including contractual data processing agreements that impose obligations equivalent to those described in this Privacy Policy. hai77 does not transfer personal data to jurisdictions that do not offer appropriate protections without ensuring suitable safeguards are established.

---

14. Changes to This Privacy Policy

hai77 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — meaning changes that significantly affect how your personal data is processed or your rights as a data subject — hai77 will notify registered users via email or a prominent in-platform notification at least 14 days prior to the changes taking effect. The "Effective Date" at the top of this policy will be updated to reflect the date the most recent version came into force. For non-material changes (such as corrections of typographical errors or minor clarifications), the policy may be updated without prior notice. We encourage you to review this page periodically to remain informed of how hai77 handles your personal data. Continued use of the platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.

---

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by hai77, you may contact the support team at any time. The hai77 support team is available 24 hours a day, 7 days a week, including public holidays in Bangladesh. All data-related enquiries are handled with strict confidentiality.

Contact email: [email protected]

Please include your registered username, the nature of your request, and any relevant details to help us respond promptly and accurately. hai77 aims to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 30 days.