Privacy Policy — Your Data, Protected by hi33

About This Policy

1.1 This Privacy Policy applies to the hi33 online betting and gaming platform, accessible at hi33.io, and to all associated services, mobile experiences, and communication channels operated under the hi33 brand. It governs the personal data of all registered players, visitors, and prospective users who interact with the Platform in any capacity.

1.2 hi33 is operated as an online betting and gaming platform primarily serving players in Bangladesh. This Policy has been written in plain English to ensure all players, regardless of technical background, can understand how their personal information is handled.

1.3 This Policy should be read in conjunction with hi33's Terms & Conditions (available at /terms-conditions) and the Responsible Gaming page (available at /responsible-gaming). Together, these documents form the complete set of rules governing your use of the hi33 Platform.

1.4 Effective Date. This Privacy Policy is effective as of 1 January 2026. It supersedes all previous versions of the hi33 Privacy Policy.

Data We Collect

2.1 Registration Data. When you create an account with hi33, we collect the information you provide directly, including your full legal name, date of birth, email address, mobile telephone number, and residential address. This information is required to set up your Account and to perform mandatory age and identity verification.

2.2 Identity Verification (KYC) Data. In accordance with our Know Your Customer (KYC) policy, hi33 may request copies of identity documents such as your National Identity Card (NID), passport, or driving licence. For address verification, we may request a utility bill or bank statement issued within the past three months. Payment method ownership may be verified by requesting a screenshot of your mobile wallet registration.

2.3 Financial and Transaction Data. hi33 collects and processes financial data necessary to facilitate deposits and withdrawals. This includes mobile wallet numbers (bKash, Nagad, Rocket, Upay, SureCash), bank account details for bank transfer transactions, deposit and withdrawal amounts, transaction timestamps, and payment reference numbers. hi33 does not store full card numbers, CVV codes, or mobile banking PINs.

2.4 Technical and Device Data. When you access the hi33 Platform, our servers automatically record certain technical information, including your IP address, device type and model, operating system and version, browser type and version, screen resolution, language settings, and session start and end timestamps. This data is used for platform security, fraud detection, and to optimise your experience across different devices.

2.5 Usage and Behavioural Data. hi33 records your interactions with the Platform, including the pages and game categories you browse, the games you play, the amounts you wager, your betting history, session duration, features you use, and any responsible gaming tools you activate. This data helps us improve the Platform, personalise your experience, and fulfil our responsible gaming obligations.

2.6 Support and Communication Data. If you contact hi33 support via email or live chat, we retain records of your communications, including the content of your messages, timestamps, and the outcome of any support interaction. This data is used for quality assurance, dispute resolution, and staff training purposes.

How We Collect Your Data

3.1 Directly From You. The majority of personal data hi33 holds is provided directly by you — during account registration, when completing KYC verification, when making a deposit or withdrawal, when contacting our support team, or when updating your Account profile.

3.2 Automatically. Certain technical and usage data is collected automatically when you access the Platform. This is collected through server logs, session tracking systems, and cookies (see Section 6 for full details on our cookie practices).

3.3 Third-Party Verification Services. Where hi33 uses a third-party identity verification provider to validate documents submitted during KYC, that provider may supply hi33 with a verification status, confidence score, and any flags or alerts generated during the verification process. hi33 does not receive or retain raw personal data from that provider beyond what is necessary to record the outcome of the KYC check.

3.4 Payment Providers. When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer service, the relevant payment provider confirms the transaction outcome and reference number to hi33. hi33 does not have direct access to your full mobile wallet account details or banking credentials — only the information required to match and process the transaction on our end.

How We Use Your Data

4.1 hi33 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and secure your hi33 Account, including processing login requests, resetting passwords, and managing Account settings.
• Identity and Age Verification: To confirm that you are at least 21 years of age and that the details you have provided during registration are accurate and genuine.
• Transaction Processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, SureCash, or bank transfer), and to maintain accurate financial records of all transactions on your Account.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and provide assistance with any aspect of the Platform.
• Security and Fraud Prevention: To monitor for suspicious activity, detect and prevent fraud, money laundering, and unauthorised account access, and to protect the integrity of the Platform and its players.
• Responsible Gaming: To monitor your gambling behaviour over time, identify potential signs of problem gambling, apply any deposit limits or self-exclusion settings you have requested, and fulfil our duty of care obligations to players.
• Platform Improvement: To analyse usage patterns, identify popular features and game categories, and make evidence-based improvements to the hi33 Platform and user experience.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and maintain records required under applicable platform policies.
• Marketing (with Consent): Where you have opted in to receive promotional communications, to send you relevant offers, seasonal bonuses (such as BPL promotions, Eid special offers, and Pohela Boishakh bonuses), and Platform updates.

Legal Basis for Processing

5.1 hi33 processes your personal data on the following legal bases, depending on the nature and purpose of the processing:

• Contractual Necessity: Processing required to perform the contract between you and hi33 — including account creation, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable legal requirements, such as age verification, anti-money-laundering checks, and responding to lawful authority requests.
• Legitimate Interest: Processing carried out to pursue hi33's legitimate business interests — including fraud prevention, platform security, and usage analytics — provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — such as receiving marketing emails or SMS promotional messages. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5.2 Where hi33 relies on legitimate interest as a legal basis, we conduct a balancing test to ensure that our interests do not unjustifiably override your rights. You may request further information about these balancing tests by contacting [email protected].

Cookies & Tracking Technologies

6.1 hi33 uses cookies and similar tracking technologies to operate the Platform effectively, enhance your experience, and gather usage analytics. A cookie is a small text file stored on your device by your web browser when you visit a website.

6.2 Types of Cookies We Use:

• Strictly Necessary Cookies: These are essential for the Platform to function. They enable core features such as keeping you logged in, remembering your session, and securing your Account. These cookies cannot be disabled without breaking Platform functionality.
• Functional Cookies: These remember your preferences — such as your preferred language setting, game layout preferences, and notification settings — to personalise your experience across sessions.
• Analytics Cookies: These help hi33 understand how players use the Platform by collecting aggregated usage data such as page views, session duration, and click paths. This information is used solely for Platform improvement and is not linked to individual player profiles for marketing purposes.
• Security Cookies: These are used to detect and prevent fraudulent activity, including session hijacking, credential stuffing, and suspicious login behaviour. They are strictly necessary for Platform security.

6.3 hi33 does not use third-party advertising cookies or retargeting pixels. We do not allow advertising networks to place cookies on our Platform.

6.4 You may control cookie settings through your browser. Note that disabling strictly necessary cookies will affect your ability to use the Platform. Analytics and functional cookies can typically be disabled without affecting core Platform access.

Sharing Your Data

7.1 hi33 does not sell, rent, or trade your personal data. We may share your data with third parties only in the limited circumstances described below.

7.2 Payment Processors. To process deposits and withdrawals, hi33 shares the minimum necessary transaction data with the relevant payment provider — for example, bKash, Nagad, Rocket, Upay, SureCash, or the applicable bank. These providers process data strictly to complete the financial transaction and are bound by their own privacy and security obligations.

7.3 Identity Verification Providers. Where a third-party KYC service is used to verify your identity documents, hi33 shares the relevant document data with that provider for the sole purpose of completing the verification check. The provider returns a verification result to hi33 and is contractually prohibited from using your data for any other purpose.

7.4 Game Providers. The casino games available on the hi33 Platform are provided by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Play'n GO, Spribe, and Ezugi. When you play a game, your in-game actions and wagers are processed by the game provider's servers. These providers operate under their own privacy policies and are independent data controllers for in-game data.

7.5 Legal and Regulatory Authorities. hi33 may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or lawful authority request. hi33 will notify affected players of such disclosures unless prohibited from doing so by law.

7.6 Business Transfers. In the event of a merger, acquisition, or sale of all or a substantial portion of hi33's business assets, player data may be transferred to the acquiring entity as part of the transaction. Affected players will be notified of any such transfer and of any material changes to data handling practices that result from it.

Data Retention

8.1 hi33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, platform policy, or legitimate business need. The table below sets out our standard retention periods for the main categories of personal data.

8.2 When the applicable retention period expires, hi33 will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

Data Security

9.1 hi33 takes data security seriously and implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction.

9.2 Technical Measures. All data transmitted between your browser or device and hi33 servers is encrypted using TLS 1.3 (Transport Layer Security). Account passwords are stored using one-way cryptographic hashing algorithms. Access to personal data within hi33's internal systems is restricted to authorised personnel on a strict need-to-know basis and is protected by multi-factor authentication.

9.3 Organisational Measures. hi33 staff who handle personal data receive regular privacy and security training. Data access is subject to role-based permissions, and all access to sensitive player data is logged and audited. Third-party service providers who process data on hi33's behalf are subject to contractual data processing agreements that require equivalent security standards.

9.4 Two-Factor Authentication. hi33 strongly recommends that all players enable two-factor authentication (2FA) via SMS OTP on their Account. This provides a critical additional layer of security beyond your password. 2FA can be enabled from your Account Settings page.

9.5 Data Breach Response. In the event of a personal data breach that poses a risk to players, hi33 will notify affected players as promptly as practicable and will take immediate steps to contain the breach, assess its impact, and prevent recurrence. hi33 will also notify relevant authorities where required.

Your Rights Over Your Data

10.1 As a hi33 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a description of your request. hi33 will respond within 14 business days.

• Right of Access: You have the right to request a copy of the personal data hi33 holds about you, along with information about how it is being used. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data hi33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic account details directly from your Account Profile page.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that hi33 may be required to retain certain data for legal and compliance reasons even after an erasure request.
• Right to Restriction: You have the right to request that hi33 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Object: You have the right to object to hi33's processing of your personal data where that processing is based on legitimate interest. hi33 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
• Right to Data Portability: Where processing is carried out by automated means and based on your consent or a contract, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.

Children & Minors

11.1 The hi33 Platform is strictly intended for adults aged 21 and above. hi33 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated Account.

11.2 Registered players are responsible for ensuring that minors do not access their hi33 Account. This includes keeping login credentials confidential, logging out of shared devices after each session, and enabling device-level parental controls where appropriate.

11.3 If you believe a minor has registered an Account with hi33 or has gained access to a registered Account, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

Marketing Communications

12.1 hi33 may send you promotional communications — including bonus offers, seasonal promotions, and Platform updates — only where you have given your explicit consent to receive such communications during registration or through your Account Settings.

12.2 Marketing communications from hi33 may be delivered via email or SMS to the contact details registered on your Account. hi33 does not make unsolicited telephone calls for marketing purposes.

12.3 You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by hi33;
• Replying STOP to any marketing SMS sent by hi33;
• Updating your communication preferences in your Account Settings; or
• Contacting [email protected] with a request to be removed from all marketing lists.

12.4 Opting out of marketing communications will not affect your ability to receive essential Account communications such as deposit confirmations, withdrawal notifications, security alerts, and support responses. These transactional messages are not optional and will continue to be sent as they are necessary for the operation of your Account.

12.5 hi33 does not share your contact details with third-party marketers. All promotional communications you receive will originate exclusively from hi33 and relate solely to the hi33 Platform and its offers.

Third-Party Links

13.1 The hi33 Platform may contain references to third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Play'n GO, Spribe, and Ezugi. When you launch and play a game provided by one of these studios, your in-game data is processed on that provider's servers and is subject to the provider's own privacy policy. hi33 is not responsible for the data practices of third-party game providers.

13.2 hi33 does not embed third-party advertising widgets, social media trackers, or external analytics platforms (such as Google Analytics, Facebook Pixel, or similar) on the Platform without your knowledge. Any third-party technology used on the Platform is disclosed in this Policy and limited to what is operationally necessary.

13.3 Players are advised to exercise caution when visiting any external website and to review the privacy policy of that site independently. hi33 has no control over the content or data practices of any external website and accepts no responsibility for them.

Changes to This Privacy Policy

14.1 hi33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, Platform functionality, data processing practices, or business operations. The most current version of this Policy will always be available at hi33.io/privacy-policy.

14.2 Where a change to this Policy is material — meaning it significantly affects how hi33 collects, uses, or shares your personal data — hi33 will notify registered players by email at least 7 days before the change comes into effect. The notification will clearly describe what has changed and why.

14.3 Non-material changes — such as corrections to typographical errors, clarifications of existing language, or updates to contact details — may be made without prior notice. The effective date displayed at the top of this Policy will be updated to reflect the date of the most recent revision.

14.4 Your continued use of the hi33 Platform after any revised Privacy Policy has come into effect constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should stop using the Platform and may request closure of your Account by contacting [email protected].

Contact Us

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way hi33 handles your personal data, please contact our support team using the details below. All privacy-related correspondence must be submitted in English.

Support Email: [email protected]

Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays.

Response Time: hi33 aims to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 14 business days. Complex requests — such as full Subject Access Requests — may require up to 30 days where permitted by applicable law.

Language: All privacy correspondence is handled exclusively in English.