hk77 Privacy Policy — How We Protect Your Personal Data

hk77 is an online casino and sports betting platform accessible at https://hk77.io, serving players primarily based in Bangladesh. The hk77 platform offers a wide range of gaming services including live casino games, sports betting markets, slot games, and table games, all denominated in Bangladeshi Taka (BDT).

For the purposes of this Privacy Policy, "hk77", "we", "us", and "our" refer to the operating entity responsible for the hk77 platform. We act as the data controller in respect of the personal information collected from players and visitors to the hk77 website.

If you have any questions about who controls your data or how to exercise your data rights, please contact us at [email protected] or via the Live Chat feature available 24/7 on the hk77 platform.

This Privacy Policy applies to all personal data processed by hk77 in connection with your use of the hk77 website, mobile site, and all associated services. It applies to:

• Registered account holders who have completed the hk77 sign-up process
• Visitors who browse the hk77 website without registering an account
• Individuals who contact hk77 support via email, live chat, or WhatsApp
• Former account holders whose data is retained in accordance with our data retention schedule

This Policy does not apply to third-party websites, services, or applications that may be linked to or from the hk77 platform. hk77 is not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any external service you access.

hk77 collects personal data in several categories depending on the nature of your interaction with the platform. The following table summarises the primary categories of data we collect and their purpose:

hk77 does not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where a player voluntarily discloses health-related information in connection with a responsible gaming request (for example, disclosing a gambling addiction diagnosis when requesting self-exclusion).

hk77 collects personal data through the following channels:

• Direct provision: Data you provide during account registration, KYC document submission, deposit or withdrawal requests, support contacts, and promotional opt-ins.
• Automated technical collection: Data collected automatically when you visit or use the hk77 platform, including IP address, browser fingerprint, session logs, and cookies (see Section 7 for full cookie details).
• Payment processor data: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or bank transfer, relevant transaction confirmation data is shared with hk77 by the payment processor to verify the transaction.
• KYC verification services: hk77 may use third-party identity verification providers to cross-reference the documents you submit. These providers may return data flags or verification status codes to hk77 as part of the verification process.
• Game providers: Third-party game studios integrated into the hk77 platform (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe) may share technical session data with hk77 to support dispute resolution and game integrity.
• Support communications: Any information you voluntarily share with the hk77 support team via live chat, email, or WhatsApp becomes part of your account record for the purposes of delivering and improving support services.

hk77 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to deliver the services you have registered for, including account management, game access, deposits, withdrawals, and customer support. Without this processing, hk77 cannot provide you with a functional account.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) requirements, identity verification obligations, and financial record-keeping standards. hk77 is obligated to conduct KYC verification and retain certain transaction records regardless of player preference.
• Legitimate interests: Processing carried out in pursuit of hk77's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and product improvement — provided these interests are not overridden by your fundamental rights.
• Consent: Processing based on explicit consent provided by you, most notably for the receipt of marketing communications such as promotional emails, SMS offers, and personalised bonus notifications. Consent-based processing may be withdrawn at any time.

The personal data hk77 collects is used for the following specific purposes:

• Account creation and management: Setting up and maintaining your player account, verifying your identity at registration, and managing account settings changes.
• Service delivery: Providing access to casino games, sports betting markets, live dealer tables, and all other platform features included in your account type.
• Financial transactions: Processing your BDT deposits via bKash, Nagad, Rocket, Upay, and bank transfer; verifying and processing withdrawal requests to your registered payment account.
• KYC and fraud prevention: Verifying the identity documents you submit, cross-checking against fraud watchlists, and monitoring transaction patterns for unusual activity indicative of money laundering or account compromise.
• Responsible gaming: Monitoring your gaming activity against your voluntarily set deposit limits, session time limits, and cooling-off periods; identifying signs of at-risk gaming behaviour and proactively reaching out in appropriate cases.
• Customer support: Responding to your queries, resolving disputes, and processing responsible gaming requests received through live chat, email, or WhatsApp.
• Platform improvement: Analysing aggregated usage data to understand how players interact with the hk77 platform and to guide feature development and game selection decisions.
• Marketing communications: Sending you personalised bonus offers, seasonal promotions (including Eid offers, Pohela Boishakh specials, and BPL-season promotions), and platform news — where you have provided consent to receive such communications.
• Legal compliance: Retaining records required by applicable law, cooperating with regulatory enquiries or court orders, and managing formal complaints or legal proceedings involving your account.

hk77 uses cookies and similar tracking technologies to operate core platform functions, improve your experience, and analyse platform usage. A cookie is a small text file stored on your device when you visit a website. The following categories of cookies are used on the hk77 platform:

• Strictly necessary cookies: Essential for platform operation. These include session authentication cookies that keep you logged into your account, security tokens that protect form submissions, and load-balancing cookies that direct your requests to the correct server. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Enhance your experience by remembering your preferences, such as your preferred language, display settings, and recently played games. Disabling these cookies will not prevent you from using the platform but may reduce personalisation.
• Analytics cookies: Allow hk77 to understand how players navigate the platform — which pages are visited most frequently, where sessions begin and end, and which game categories attract the most engagement. This data is aggregated and used solely to improve platform design and content.
• Fraud detection cookies: Support hk77's fraud prevention systems by identifying unusual patterns across multiple sessions or devices. These cookies help protect your account from unauthorised access attempts.

Most web browsers allow you to manage cookie preferences through browser settings. Blocking strictly necessary cookies will affect your ability to log into and use the hk77 platform. For all other cookie categories, you may adjust your preferences without losing access to core services.

hk77 does not sell your personal data to any third party. Data is shared only in the circumstances described below, and only to the minimum extent required for the specified purpose:

• Payment processors: Transaction data (including your registered mobile wallet number or bank account reference) is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank as necessary to process deposits and withdrawals.
• KYC verification providers: Identity documents submitted during the verification process may be shared with specialist third-party identity verification services to confirm authenticity and cross-reference against relevant databases.
• Game providers: Technical session data is shared with integrated game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe — to support game delivery, dispute resolution, and RNG audit functions.
• Fraud prevention services: Anonymised or pseudonymised technical data may be shared with fraud intelligence platforms to assist in identifying patterns associated with known fraud typologies.
• Legal and regulatory authorities: hk77 will disclose personal data to competent authorities where required by a valid legal obligation, court order, or regulatory direction. hk77 will notify affected players of such disclosures where legally permitted to do so.
• Professional advisers: Legal counsel, auditors, and insurers may access account data on a strictly confidential basis in connection with the provision of professional services to hk77.

The hk77 platform primarily serves players based in Bangladesh, and our core operational data is processed within systems designed to support the Bangladesh market. However, some of the third-party service providers we work with — including certain KYC verification platforms, game providers, and infrastructure hosting services — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, hk77 implements appropriate safeguards to ensure that the transfer complies with applicable data protection principles. These safeguards may include:

• Standard contractual clauses requiring the receiving party to maintain defined data protection standards
• Data processing agreements specifying the permitted purposes, retention periods, and security requirements applicable to transferred data
• Technical security controls including encryption of data in transit and at rest

If you would like further information about the specific safeguards applied to any international data transfer involving your personal data, please contact us at [email protected].

hk77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations. The following retention principles apply:

• Active account data: Retained for the duration of your account's active status and for a defined period following account closure, to allow for dispute resolution and regulatory compliance.
• KYC and identity documents: Retained for a minimum period following the closure of your account, in compliance with anti-money laundering record-keeping obligations. The specific retention period is determined by the applicable legal framework.
• Transaction records: All deposit and withdrawal records are retained for a minimum period to satisfy financial record-keeping requirements. These records may be required in the event of a regulatory enquiry or legal proceeding.
• Support communications: Live chat transcripts, email correspondence, and WhatsApp records are retained for a period sufficient to support dispute resolution and quality assurance purposes.
• Marketing consent records: Consent and opt-out records are retained indefinitely to demonstrate the legal basis for past communications and to prevent re-contact following a withdrawal of consent.
• Technical and analytics data: Anonymised or aggregated analytics data may be retained indefinitely as it no longer constitutes personal data. Identifiable technical logs are retained for a shorter period consistent with their security monitoring purpose.

When personal data is no longer required and its retention period has expired, hk77 deletes or irreversibly anonymises the data using secure disposal methods. You may request confirmation of the retention period applicable to your specific data by contacting the support team.

hk77 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data from unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the hk77 platform is encrypted using industry-standard SSL/TLS protocols, preventing interception in transit.
• Encryption at rest: Sensitive data stored in hk77 databases — including identity documents, payment details, and account credentials — is encrypted at the storage level.
• Access control: Access to personal data is restricted on a strict need-to-know basis. Staff and contractors who access player data are subject to confidentiality obligations and receive regular data protection training.
• Two-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication to prevent unauthorised internal access.
• Fraud detection systems: Automated monitoring systems analyse platform activity in real time to detect unusual patterns that may indicate account compromise, fraud, or attempted data breach.
• Regular security assessments: hk77 conducts periodic reviews of its data security posture, including vulnerability assessments and review of third-party data processor security standards.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, hk77 will notify affected players promptly and take immediate remedial action in accordance with applicable breach notification obligations.

As a player whose personal data is processed by hk77, you have the following rights in respect of your personal information. These rights may be exercised by contacting the hk77 support team at [email protected] or via Live Chat:

• Right of access: You may request a copy of the personal data hk77 holds about you. We will provide this in a commonly used format within a reasonable timeframe of receiving a valid request.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Core identity information changes require supporting documentation.
• Right to erasure: You may request the deletion of your personal data where it is no longer required for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to hk77's legal obligations to retain certain records, which may override erasure requests in specific circumstances.
• Right to restriction: You may request that hk77 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being investigated.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, machine-readable format suitable for transfer to another service provider.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for marketing personalisation purposes. hk77 will cease the relevant processing unless it can demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent — primarily for marketing communications — you may withdraw consent at any time without affecting the lawfulness of prior processing. Opt-out links are included in all hk77 marketing emails.

The hk77 platform is strictly for individuals aged 21 years and above. hk77 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21 — whether through a registration, deposit, or any other interaction — the account will be immediately suspended, all data associated with the underage registration will be securely deleted, and any funds will be returned to the payment source where technically possible.

Parents and guardians are strongly encouraged to use internet filtering and parental control software to prevent minors from accessing the hk77 website. If you believe that a person under the age of 21 has registered an account on the hk77 platform, please report this immediately to [email protected] so that the matter can be investigated and resolved as a priority.

The hk77 platform integrates with a number of third-party services to deliver its full range of features. These include game content providers, payment processors, KYC verification platforms, and customer support infrastructure. While hk77 carefully vets and contractually binds all third-party processors, each of these providers operates under its own privacy policy and data governance framework in respect of data they independently collect.

Specifically, the following third-party relationships involve some degree of data interaction:

• Game studios: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe receive technical session data to support game delivery and integrity verification.
• Payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank process payment transaction data in accordance with their own regulatory obligations as licensed financial service providers in Bangladesh.
• Customer support tools: The live chat infrastructure used on the hk77 platform is operated by a third-party provider and is subject to that provider's data processing terms, which are governed by a data processing agreement with hk77.

The hk77 platform does not contain links to external websites outside the hk77.io domain, so the risk of inadvertent third-party data collection via outbound links is minimised by design.

hk77 may send you promotional communications — including bonus offers, seasonal promotions, game launch notifications, and platform news — where you have provided explicit consent to receive such communications at the time of registration or through your account preferences settings.

Marketing communications from hk77 may be delivered via the following channels where consent has been given for each respective channel:

• Email (to your registered email address)
• SMS (to your registered Bangladeshi mobile number)
• On-platform notifications (displayed within your account dashboard when logged in)

You may withdraw consent for marketing communications at any time without providing a reason by:

• Clicking the unsubscribe link included in every hk77 marketing email
• Updating your communication preferences in your hk77 account settings
• Contacting the support team at [email protected] and requesting removal from all marketing lists

Withdrawing consent for marketing communications does not affect your ability to use the hk77 platform or receive transactional communications related to your account, such as deposit confirmations, withdrawal notifications, and security alerts. These service communications are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

hk77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform features. When material changes are made, hk77 will notify registered account holders via email to their registered address and by displaying a prominent notice on the hk77 platform at least 14 days before the revised policy takes effect.

The date of the most recent revision is always displayed at the top of this Privacy Policy. Continued use of the hk77 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with a revised Privacy Policy, you should cease using the platform and may request account closure by contacting the support team.

For minor, non-material changes — such as corrections to typographical errors, clarifications that do not affect the substance of any processing activity, or updated contact details — hk77 may update the policy without issuing a formal advance notification. The updated date at the top of this document will always reflect the most recent edit.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data hk77 holds about you, please reach out through any of the following channels:

• Email: [email protected] — for data subject rights requests, privacy queries, and formal complaints. hk77 aims to acknowledge all email enquiries within 24 hours and provide a substantive response within 14 days.
• Live Chat: Available 24/7 directly on the hk77 platform — best used for urgent account-related privacy concerns or to request escalation of a data rights request.
• WhatsApp: +880 1700 000000 — available for general support enquiries including privacy-related questions during standard support hours (Bangladesh Standard Time, UTC+6).

When submitting a data subject rights request, please include your registered account username and the email address associated with your hk77 account so that your identity can be verified before any personal data is accessed or disclosed. hk77 may request additional verification information where necessary to confirm your identity and protect against unauthorised data access requests.

If you are dissatisfied with how hk77 has handled a privacy concern or data rights request, you have the right to escalate the matter through appropriate legal channels available in your jurisdiction. hk77 takes all formal privacy complaints seriously and will cooperate fully with any legitimate regulatory or legal process arising from a privacy dispute.