hy777 Privacy Policy — How We Handle Your Data

1. Introduction

This Privacy Policy ("Policy") describes how hy777 ("we", "us", "our") collects, uses, stores, shares and protects personal data relating to users ("you", "Player") of the hy777 website at hy777.ws and all associated gaming services (collectively, the "Services"). This Policy is incorporated by reference into our Terms and Conditions and forms part of the agreement between you and hy777. Please read this Policy carefully before using our Services.

hy777 is committed to handling your personal data responsibly and in accordance with applicable data protection principles. We collect only the data that is necessary to provide and improve our Services, to comply with our legal obligations, and to protect the safety of all players on the platform. We do not collect personal data speculatively or for purposes unrelated to the operation of hy777.

2. Data Controller

The data controller responsible for the personal data collected through the hy777 Services is hy777. You can contact us regarding any data privacy matter using the details below:

3. Personal Data We Collect

Depending on how you use the hy777 Services, we may collect the following categories of personal data:

• Identity data — full legal name, date of birth, gender, and a copy of a government-issued photo identification document provided during KYC verification.
• Contact data — Bangladesh mobile number, email address, and residential address (where provided during registration or KYC).
• Financial data — bKash, Nagad or Rocket mobile wallet numbers used for deposits and withdrawals; transaction amounts, dates and references; account balance history.
• Gaming data — bet history, game session logs, win and loss records, bonus usage, and responsible gaming tool settings (deposit limits, time-out periods, self-exclusion status).
• Technical data — IP address, device type and model, operating system, browser type and version, time zone, session duration, and pages visited within the hy777 platform.
• Communications data — the content and metadata of messages you send to hy777 customer support, including email correspondence and any chat transcripts.

We do not collect sensitive personal data (such as biometric data, health data, or political or religious views) unless specifically required by law or regulation. We do not knowingly collect data from anyone under the age of 21.

4. How We Collect Your Data

hy777 collects personal data through the following methods:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or set your responsible gaming preferences.
• Automatically — through server logs, cookies, and analytics tools that record your interaction with the hy777 platform each time you visit or use the Services.
• From payment processors — bKash, Nagad and Rocket provide transaction confirmation and reference data to hy777 when you make a deposit or withdrawal. hy777 does not receive your full bKash or Nagad account PIN or password.
• From third-party identity verification providers — where required for KYC, hy777 may engage a third-party identity verification service. Any such service provider is bound by confidentiality obligations and may only use your data for verification purposes.

5. How We Use Your Personal Data

hy777 uses the personal data we collect for the following purposes:

• Account management — to register your account, verify your identity, process your KYC documentation, and maintain your account in good standing.
• Provision of Services — to enable you to play games, place bets, make deposits and withdrawals via bKash and Nagad, and access all features of the hy777 platform.
• Financial processing — to process deposits and withdrawals, reconcile accounts, detect and prevent fraud, and comply with anti-money laundering obligations.
• Legal and regulatory compliance — to comply with applicable laws, to respond to lawful requests from regulatory authorities, and to fulfil our responsible gaming obligations including age verification and self-exclusion management.
• Customer support — to respond to your enquiries, resolve disputes, and investigate and remediate complaints in connection with the hy777 Services.
• Platform improvement — to analyse aggregated usage patterns, identify technical issues, and improve the performance, security and features of the hy777 platform for Bangladesh players.
• Marketing communications — where you have consented, to send you information about hy777 promotions, bonuses and seasonal offers relevant to Bangladesh players. You may withdraw your consent at any time by contacting [email protected].

6. Legal Basis for Processing

hy777 processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our obligations to you under the Terms and Conditions, including operating your account, processing transactions and providing gaming services.
• Legal obligation — processing required to comply with anti-money laundering laws, age verification requirements, and any other applicable legal or regulatory obligation binding on hy777.
• Legitimate interests — processing for the purposes of fraud prevention, platform security, responsible gaming enforcement, and improvement of the Services, where our legitimate interests are not overridden by your fundamental rights.
• Consent — processing for direct marketing purposes, where we have obtained your prior explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.

7. Payment Data and Mobile Wallets

When you deposit or withdraw funds using bKash, Nagad or Rocket, hy777 receives from those providers only the transaction reference, the amount, the timestamp, and the mobile number registered to the wallet used. hy777 does not at any point receive, store or have access to your bKash, Nagad or Rocket PIN, password, OTP, or any other authentication credential. All payment authentication takes place directly between you and your mobile wallet provider on their secure platform.

Your registered bKash or Nagad number is stored on hy777 servers in encrypted form and is used only to (a) verify that withdrawal requests are directed to the correct registered wallet and (b) comply with transaction reporting obligations under applicable law. Your mobile wallet number will never be used to contact you for marketing purposes without your explicit prior consent.

8. Sharing Your Personal Data

hy777 does not sell, rent or trade your personal data to third parties for their own commercial purposes. We may share your personal data only in the following limited circumstances:

• Service providers — third-party vendors engaged by hy777 to provide specific operational services (such as payment processing, identity verification, IT infrastructure, and data hosting). These vendors are contractually obligated to process your data only on our instructions and in accordance with this Policy.
• Regulatory and law enforcement authorities — where hy777 is required by applicable law, court order, or regulatory direction to disclose your personal data. In such cases hy777 will disclose only the minimum data required.
• Fraud prevention networks — where your data is shared (on an aggregated or pseudonymised basis where possible) with fraud prevention services to detect and prevent fraudulent transactions across the online gaming industry.
• Business transfers — in the event that hy777 undergoes a merger, acquisition, reorganisation or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify you via the hy777 website or by email if such a transfer occurs.

hy777 does not share your personal data with any third party for direct marketing purposes without your prior explicit consent. Where consent for marketing has been given, you may withdraw it at any time by contacting [email protected].

9. Cookies and Tracking Technologies

hy777 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device that help us recognise returning users, maintain session security, and understand how the platform is used. We use three categories of cookies:

• Essential cookies — strictly necessary for the operation of the hy777 platform. These include session authentication cookies that keep you logged in during your visit. Without these cookies the Services cannot function. These cookies cannot be disabled.
• Analytics cookies — used to collect anonymous, aggregated information about how players interact with the platform (pages visited, session length, error occurrences). This data is used solely to improve the platform and is never linked back to an identifiable individual.
• Preference cookies — used to remember your display and language preferences so you do not need to reset them on each visit. You may disable preference cookies in your browser settings without affecting your ability to use the core Services.

You may manage cookie settings through your browser preferences. Please note that disabling essential cookies will prevent you from accessing certain areas of the hy777 platform. For more information on managing cookies, refer to the help documentation of your browser.

10. Data Retention

hy777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any applicable legal, regulatory, accounting or reporting requirements. The following general retention periods apply: account and identity data is retained for the duration of your account plus a minimum of 5 years after account closure; financial transaction records are retained for a minimum of 7 years from the date of the transaction; customer support correspondence is retained for 3 years from the date of the final communication in a support thread; technical and log data is retained for 13 months on a rolling basis.

When the applicable retention period expires, hy777 will securely delete or anonymise your personal data so that it can no longer be associated with you. Where data cannot be immediately deleted due to technical constraints (for example, data in backup archives), it will be isolated and protected from any further processing until deletion is possible.

11. Data Security

hy777 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include: 256-bit SSL encryption for all data transmitted between your device and hy777 servers; encrypted storage of sensitive account data including payment method references; access controls that restrict internal access to personal data to authorised personnel only on a need-to-know basis; regular security reviews and vulnerability assessments of the hy777 platform.

Despite these measures, no method of electronic transmission or storage is completely secure. hy777 cannot guarantee the absolute security of your data. In the event of a data breach that is likely to result in a risk to your rights, hy777 will notify you without undue delay in accordance with applicable legal requirements.

12. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data hy777 holds about you:

• Right of access — you have the right to request a copy of the personal data hy777 holds about you, along with information about how it is processed.
• Right to rectification — you have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure — you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction — you have the right to request that we restrict the processing of your personal data in certain circumstances, for example where you contest its accuracy or object to its processing.
• Right to data portability — where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, commonly used and machine-readable format.
• Right to object — you have the right to object to processing of your personal data where it is based on legitimate interests, including profiling. You also have an unconditional right to object to processing for direct marketing purposes at any time.

To exercise any of the above rights, please contact us at [email protected]

13. Children and Minors

hy777 does not knowingly collect, process or retain personal data from individuals under the age of 21. Our Services are strictly intended for adults aged 21 and above. If hy777 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on hy777 or provided personal data to us, please contact us immediately at [email protected].

14. Changes to This Privacy Policy

hy777 reserves the right to update or amend this Privacy Policy at any time. When material changes are made to this Policy, we will publish the revised version on the hy777 website with an updated effective date. Where practicable, we will endeavour to provide advance notice of material changes via a notice on the platform or by email to the address registered on your account.

Your continued use of the hy777 Services after the updated Policy has been published constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must stop using the Services and request account closure by contacting [email protected].

15. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way hy777 handles your personal data, please contact our privacy team at [email protected]