hi97 Privacy Policy — How We Handle Your Personal Data

1. Introduction

hi97 (referred to in this Privacy Policy as "hi97", "we", "us", or "our") operates the online betting and casino platform at https://hi97.pro. This Privacy Policy describes how hi97 collects, uses, stores, discloses, and protects personal data relating to individuals who access, register with, or use the hi97 platform ("players" or "you"). This Privacy Policy forms part of hi97's Terms & Conditions and should be read alongside them.

hi97 is committed to protecting the privacy of its players and to handling all personal data lawfully, fairly, and transparently. We collect only the data we genuinely need to operate our platform, comply with our legal obligations, and deliver a safe and high-quality service to players across Bangladesh — including in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barishal, Rangpur, and Mymensingh.

2. Data We Collect

hi97 collects personal data through several channels: directly from you when you register an account, make deposits or withdrawals, contact customer support, or participate in promotions; and automatically when you use the platform. The categories of personal data we collect include:

• Identity data: full name, date of birth, and a copy of a government-issued identity document (such as a Bangladesh National Identity Card or passport) collected during the account verification (KYC) process.
• Contact data: mobile phone number and email address used to create and access your account, and used for account communications, support, and (where you have opted in) marketing messages.
• Financial data: transaction history (deposits and withdrawals), wallet balances, and payment method identifiers (e.g. the last four digits of a bKash or Nagad account number) used to verify payment ownership. hi97 does not store full payment credentials.
• Technical data: IP address, device type, operating system, browser type and version, session duration, pages visited within the platform, and clickstream data. This data is collected automatically via server logs and analytics tools.
• Usage and gaming data: betting history, game session data, bonus activity, loyalty programme participation, and responsible gaming tool settings (e.g. deposit limits and session timers you have configured on your account).
• Communications data: the content of any messages you send to hi97 via customer support channels, including live chat, email, and any written complaints or feedback submitted to hi97.

3. How We Use Your Data

hi97 uses the personal data we collect for the following purposes, each of which is supported by a lawful basis for processing as described in Section 4 below:

• Account management: to register, verify, and maintain your player account, including processing KYC documentation, managing your wallet balance, and updating your account preferences.
• Service delivery: to process your bets, game sessions, deposits, and withdrawals; to apply bonuses and promotions to your account; and to maintain accurate transaction records.
• Legal and regulatory compliance: to meet our anti-money laundering (AML), know-your-customer (KYC), and responsible gaming obligations, and to respond to lawful requests from law enforcement or regulatory authorities.
• Fraud prevention and security: to detect, prevent, and investigate fraud, money laundering, multiple account abuse, bonus abuse, and any other prohibited conduct outlined in hi97's Terms & Conditions.
• Customer support: to respond to your queries, complaints, and account requests via hi97's support channels, and to maintain records of support interactions for quality assurance purposes.
• Marketing and personalisation: to send you promotional communications about hi97 offers, bonuses, and seasonal promotions (such as BPL season offers, Eid specials, and Pohela Boishakh promotions) where you have consented to receive such communications; and to personalise your platform experience based on your usage history and preferences.

4. Legal Basis for Processing

hi97 processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform our contract with you — specifically, to provide the hi97 platform service, process your transactions, and manage your account. Without this processing, we cannot provide the service.
• Legal obligation: processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, responsible gaming rules, and obligations to respond to lawful requests from competent authorities.
• Legitimate interests: processing for fraud detection and prevention, platform security, improving our services, and internal analytics — where these interests are not overridden by your rights and interests as a player.
• Consent: processing for marketing communications and non-essential cookies, where we have obtained your prior consent. You may withdraw your consent at any time by contacting hi97 support or updating your account preferences.

5. Sharing Your Data

hi97 does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients, strictly to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and any other payment processors integrated on the hi97 platform, solely for the purpose of processing your deposits and withdrawals and verifying payment ownership.
• Technology and platform providers: third-party software providers whose products form part of the hi97 platform (such as game providers including Pragmatic Play, Evolution Gaming, Ezugi, and Spribe), where those providers process data on our behalf as data processors bound by contractual data protection obligations.
• Fraud prevention and compliance partners: identity verification services, AML screening tools, and fraud detection providers, where their services are required to meet hi97's legal and regulatory obligations.
• Law enforcement and regulatory authorities: where hi97 is legally required to disclose your personal data in response to a court order, law enforcement request, or regulatory investigation, we will comply with such requests to the extent required by applicable law.

All third parties with whom hi97 shares personal data are required to handle that data in accordance with applicable data protection laws and hi97's contractual requirements. hi97 does not permit any third-party service provider to use your personal data for their own independent marketing or commercial purposes.

6. Payment Data and Financial Privacy

hi97 handles financial transaction data with particular care. All deposit and withdrawal transactions processed through bKash, Nagad, Rocket, and Upay are conducted via those providers' own secure platforms. hi97 does not store full mobile wallet account numbers, full bank account numbers, or PIN codes. hi97 retains only the minimum payment identifiers required for transaction verification, record-keeping, and KYC compliance purposes — such as truncated account references and transaction IDs.

All financial data held by hi97 is stored in encrypted form and accessible only to authorised hi97 staff with a legitimate operational need. Transaction history is retained for the periods specified in Section 7 (Data Retention) of this policy to meet accounting, AML, and dispute resolution requirements.

7. Cookies and Tracking Technologies

hi97 uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device that allow the platform to recognise your browser, maintain your session, and remember your preferences. The cookies used on hi97 fall into the following categories:

• Strictly necessary cookies: required for the platform to function — for example, session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without breaking core platform functionality.
• Analytics and performance cookies: used to collect aggregated, anonymised data about how players use the platform — for example, which pages are visited most frequently, how long sessions last, and where navigation errors occur. This data helps hi97 improve the platform experience.
• Preference cookies: used to remember your platform settings and preferences — for example, language preferences — so you do not need to reconfigure them on each visit.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling certain cookies may affect the functionality of the hi97 platform and your ability to access some features.

8. Data Retention

hi97 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: active account data is retained for the duration of your account; transaction and financial records are retained for a minimum of five years following the date of the transaction to meet AML and accounting obligations; KYC identity documents are retained for a minimum of five years following account closure; communications and support records are retained for two years from the date of the interaction.

When the applicable retention period has expired, hi97 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Where complete deletion is not technically feasible (for example, where data exists in encrypted backup archives), hi97 will isolate the data from further active processing until deletion is possible.

9. Data Security

hi97 implements and maintains appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include 256-bit SSL encryption for all data in transit between your device and hi97's servers; encrypted storage of sensitive data at rest; access controls limiting staff access to personal data on a strict need-to-know basis; and regular security assessments of the platform and its infrastructure.

Despite these measures, no method of transmission over the internet or method of electronic storage is completely secure. hi97 cannot guarantee the absolute security of your data. In the event of a personal data breach that poses a risk to your rights and freedoms, hi97 will notify affected players without undue delay and take prompt remedial action.

10. Your Data Rights

As a player registered with hi97, you have the following rights in respect of your personal data. To exercise any of these rights, please contact hi97's support team at [email protected]. hi97 will respond to all verified data rights requests within 30 days of receipt.

• Right of access: you may request a copy of all personal data hi97 holds about you, together with information about how it is being used.
• Right to rectification: you may request that hi97 correct any inaccurate or incomplete personal data held about you.
• Right to erasure: you may request that hi97 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you believe the data has been processed unlawfully. This right is subject to hi97's legal obligations to retain certain data.
• Right to restriction: you may request that hi97 restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is resolved, or while an objection to processing is considered.
• Right to object: you may object to hi97 processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of hi97's legitimate interests, where you believe your interests, rights, or freedoms override those legitimate interests.

hi97 will verify your identity before processing any data rights request to protect the security of your personal data. In some cases, exercising a particular right may affect hi97's ability to continue providing you with the platform service — for example, requesting erasure of KYC data may require account closure.

11. Marketing Communications

hi97 may send you promotional communications about bonuses, platform updates, new game launches, and seasonal offers (such as IPL season promotions, Eid specials, and BPL tournament offers) where you have consented to receive such communications at the time of registration or through your account settings. These communications may be sent via SMS to your registered mobile number or via email to your registered email address.

You may opt out of marketing communications at any time by contacting hi97 support at [email protected] or by updating your communication preferences in your account settings. Opting out of marketing communications does not affect your receipt of transactional messages (such as deposit confirmations, withdrawal notifications, and account security alerts), which are sent as part of hi97's contractual service obligations.

12. Minors and Age Verification

hi97 operates a strict minimum age policy of 21 years for all registered players. The hi97 platform is not directed at, and must not be used by, any person under the age of 21. hi97 does not knowingly collect personal data from individuals under 21. Where hi97 discovers or reasonably suspects that an account has been registered by a person under 21, the account will be suspended immediately, any funds held in the account will be reviewed, and all personal data associated with that account will be deleted upon conclusion of any legally required retention obligations. Parents and guardians who become aware that a person under 21 in their care has registered with hi97 should contact hi97 support immediately at [email protected].

13. Changes to This Privacy Policy

hi97 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. When we make material changes to this Privacy Policy, we will notify registered players via the platform interface or via their registered contact details prior to the changes taking effect. The date of the most recent update is displayed at the top of this page.

Your continued use of the hi97 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the revised Privacy Policy, you should stop using the hi97 platform and contact support to request account closure.

14. Contact and Privacy Queries

If you have any questions, concerns, or requests regarding this Privacy Policy or hi97's handling of your personal data, please contact hi97's support team. We aim to respond to all privacy-related queries within 48 hours. For formal data rights requests, please allow up to 30 days for a full response.

You can reach hi97's support team by email at: [email protected]