hei77 Privacy Policy — Your Data, Your Rights
hei77 is committed to protecting the privacy of every player. This Policy explains what personal data we collect, why we collect it, and how you can exercise your rights.
1. Introduction
This Privacy Policy ("Policy") describes how hei77 ("we", "us", "our") collects, uses, stores, and shares personal data when you access or use hei77.app and any related services. This Policy applies to all registered players, visitors, and any other individuals whose personal data hei77 processes in connection with the provision of its online gaming services in Bangladesh.
By registering an account on hei77 or using any hei77 service, you acknowledge that you have read and understood this Policy. If you do not agree with the terms of this Policy, please do not use hei77. We may update this Policy from time to time; when we do, we will update the "Last updated" date shown above and, where appropriate, notify you directly.
2. Data We Collect
hei77 collects personal data that you provide directly during account registration and through your ongoing use of the Platform, as well as data collected automatically through your device and browser interactions.
3. How We Use Your Data
hei77 uses your personal data only for purposes that are necessary to provide, operate, and improve our services, or where we have a legitimate business reason or a legal obligation to do so. The specific purposes for which we use your data are:
- Account creation and management: to register your hei77 account, verify your identity through KYC, and maintain your account in good standing.
- Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, and to maintain accurate transaction records.
- Fraud and money laundering prevention: to detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, multi-accounting, and money laundering in compliance with anti-financial crime obligations.
- Responsible gaming: to monitor gaming behaviour for signs of problem gambling, to apply deposit limits or self-exclusion periods where requested or where hei77 determines player protection measures are warranted.
- Customer support: to respond to your queries, complaints, and support requests submitted via [email protected] or through any platform support channel.
- Platform improvement and analytics: to analyse usage patterns, identify technical issues, and improve the hei77 user experience for all Bangladesh players.
4. Legal Basis for Processing
hei77 processes your personal data on the following legal bases: (a) contractual necessity — processing required to perform the account and gaming services contract you entered into when you registered; (b) legal obligation — processing required to comply with anti-money laundering, KYC, and responsible gaming obligations; (c) legitimate interests — processing for fraud prevention, platform security, and service improvement where such interests are not overridden by your data protection rights; and (d) consent — where you have given specific, informed consent, for example to receive promotional communications.
Withdrawing Consent
Where hei77 processes your data on the basis of your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawing consent will not affect the lawfulness of any processing hei77 carried out before the withdrawal. Note that withdrawing consent for certain processing (for example, KYC-related identity verification) may prevent hei77 from continuing to provide its services to you.
5. Sharing Your Data
hei77 does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
- Payment providers: we share transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners strictly for the purpose of processing your deposits and withdrawals.
- Game studios and technology providers: game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi receive session and gameplay data necessary to deliver their games through the hei77 platform.
- Fraud and compliance screening services: we use third-party identity verification and anti-fraud tools that may process your identity and device data to support our KYC and AML obligations.
- Legal and regulatory authorities: where required by applicable law or in response to a lawful request from a regulatory, law enforcement, or judicial authority, hei77 may be required to disclose personal data.
Any third party with whom we share your data is required to handle it securely and only for the purpose for which it was shared. hei77 does not permit third parties to use your data for their own marketing or commercial purposes without your explicit consent.
6. Cookies and Tracking
hei77 uses cookies and similar tracking technologies on hei77.app to enable essential platform functionality, remember your session and preferences, and analyse how the site is used. Cookies are small text files placed on your device when you visit the site. We use three categories of cookies: essential cookies (required for the platform to function — these cannot be disabled), analytics cookies (used to understand aggregate usage patterns and improve site performance), and preference cookies (used to remember your language and display settings).
Managing Cookie Preferences
You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please be aware that disabling essential cookies may impair the functionality of hei77.app and prevent you from logging in, placing bets, or accessing your account balance. Analytics and preference cookies can be disabled without affecting core platform functionality.
7. Data Retention
hei77 retains your personal data for as long as your account is active and for a period thereafter as required by our legal and regulatory obligations. The minimum retention periods that apply are: account and identity data — 5 years from the date of account closure; financial transaction records — 7 years from the date of each transaction (in compliance with anti-money laundering record-keeping requirements); gaming activity data — 3 years from the date of each session; customer support correspondence — 3 years from the date of each communication.
When personal data is no longer required for the purposes for which it was collected and the relevant retention period has expired, hei77 will securely delete or anonymise the data. Where full deletion is not technically feasible in the short term, the data will be isolated and protected until deletion is possible.
8. Your Data Rights
hei77 respects your rights in relation to your personal data. You may exercise any of the following rights by contacting our support team at [email protected]. We will acknowledge your request within 3 business days and respond substantively within 30 calendar days.
- Right of Access — Request a copy of the personal data hei77 holds about you, including what it is, where it came from, and with whom it has been shared.
- Right of Rectification — Request correction of any inaccurate or incomplete personal data hei77 holds about you. You can update certain account details directly through your hei77 account settings.
- Right of Erasure — Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to hei77's legal retention obligations described above.
- Right of Portability — Request a machine-readable copy of the personal data you provided to hei77 where that data is processed on the basis of your consent or on a contractual basis.
- Right to Object — Object to hei77's processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, though hei77 may be able to demonstrate compelling legitimate grounds that override your objection.
To exercise any of these rights, email [email protected] with the subject line "Data Rights Request" and describe your request clearly. hei77 may request proof of identity before processing a data rights request to ensure your data is not disclosed to an unauthorised person.
9. Data Security
hei77 implements technical and organisational security measures appropriate to the nature of the personal data we process and the risks involved. These measures include: SSL/TLS encryption for all data transmitted between your device and hei77.app; encrypted storage of sensitive account and payment data at rest; role-based access controls restricting internal access to personal data to authorised staff only; regular security testing of the hei77 platform and its underlying infrastructure; and monitoring for unauthorised access attempts and anomalous account activity.
Reporting a Security Concern
If you believe your hei77 account has been accessed without your permission, or if you suspect any other security incident involving your personal data, please contact us immediately at [email protected]. Include as much detail as possible about the suspected incident so we can investigate promptly. hei77 will acknowledge all security reports within 24 hours.
10. Children and Minors
hei77 is strictly an adult platform. The minimum age to register and use hei77 is 21 years. hei77 does not knowingly collect or process personal data from any individual under the age of 21. If we become aware that personal data relating to a person under the age of 21 has been collected, we will delete that data immediately and close the associated account. Parents and guardians who believe their child has registered on hei77 should contact us immediately at [email protected] so we can take prompt action.
11. Changes to This Policy
hei77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When we make material changes, we will update the "Last updated" date at the top of this page. Where the changes are significant, we will provide a more prominent notice, which may include an in-platform notification to your registered account. We encourage you to review this Policy periodically. Your continued use of hei77 after any update constitutes acceptance of the revised Policy.
12. Contact Us
If you have any questions about this Privacy Policy, wish to exercise a data right, or want to make a complaint about how hei77 handles your personal data, please contact us at [email protected]. Please include "Privacy" in your email subject line so your message is directed to the appropriate team. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).