Privacy Policy for
hi111 Players

1. Data We Collect

When you interact with the hi111 platform — whether by registering an account, making a deposit, placing a bet, or contacting our support team — we collect certain categories of personal data. We collect only the information that is genuinely necessary to deliver our services, comply with applicable legal obligations, and maintain the security and integrity of the platform.

1.1 Registration & Identity Data

At the point of account registration, we collect your full legal name, date of birth, email address, and the mobile phone number you use for payment verification (e.g., your bKash or Nagad number). If we request identity verification at any stage — which we are entitled to do under our Terms & Conditions — we will also collect a copy of a government-issued identity document such as your National Identity Card (NID), passport, or driving licence, along with any selfie or liveness check we request to confirm the document belongs to you.

1.2 Financial & Transaction Data

We collect records of all financial transactions carried out through your hi111 account. This includes deposit amounts, withdrawal requests, payment methods used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction timestamps, and transaction reference numbers. We do not store full card numbers; card payment data is processed by PCI-DSS compliant payment gateways and only tokenised references are retained by hi111.

1.3 Gaming & Betting Activity Data

We maintain a detailed log of your gaming activity on the platform. This covers bets placed, games played, stakes, outcomes, bonus claims and wagering progress, session start and end times, and the device and browser used for each session. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

1.4 Technical & Device Data

When you access hi111, our servers automatically collect technical information including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, and pages visited. This data is used for security purposes (e.g., detecting unusual login locations), platform optimisation, and aggregate analytics.

1.5 Communications Data

If you contact our support team by email, live chat, or any other channel, we retain a record of that correspondence. This includes the content of your messages, timestamps, and our responses. These records are kept to maintain service quality, resolve disputes, and ensure continuity of support.

2. How We Use Your Data

hi111 processes your personal data only where we have a lawful basis for doing so. The following table summarises the main purposes for which we use your data and the corresponding legal basis.

Where we rely on consent as the legal basis for processing — for example, to send you promotional emails about upcoming BPL season offers, Eid specials, or new game launches — you may withdraw that consent at any time by contacting [email protected] or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

hi111 does not use your personal data for automated decision-making that produces legal or similarly significant effects without a human review step. Where automated tools flag an account for potential fraud or responsible gaming concerns, the final decision to restrict or close the account is always reviewed by a member of the hi111 compliance team.

3. Cookies & Tracking

hi111 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform correctly and to understand how players use the site. A cookie is a small text file placed on your device by your web browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include session authentication tokens (to keep you logged in), CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform — which pages are visited most, how long sessions last, and which features are used. This data helps hi111 improve the user experience. No personally identifiable information is contained in analytics cookie data.
• Preference cookies: Used to remember your display preferences (such as language or theme setting) across sessions, so you do not need to reconfigure them each visit.
• Security cookies: Used to detect and prevent fraudulent activity, such as recognising devices that have previously been flagged for suspicious behaviour.

hi111 does not deploy third-party advertising or retargeting cookies. We do not allow advertising networks to place cookies on our platform to track your behaviour across other websites for the purpose of serving you personalised ads.

You can manage or disable non-essential cookies through your browser's settings. Please note that disabling essential cookies will prevent you from logging in and using the platform. For detailed browser-specific instructions on managing cookies, refer to your browser's help documentation.

4. Data Sharing & Disclosure

hi111 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share data only where it is strictly necessary to deliver our services or to comply with legal requirements. The following categories of recipients may receive limited personal data from hi111 in the course of normal operations:

• Payment processors: When you make a deposit or request a withdrawal, transaction data is shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard network processors) solely to execute the transaction. These providers process data under their own privacy policies and are contractually bound to handle data securely.
• Identity verification providers: Where we use a third-party KYC service to verify your identity documents, the relevant document images and personal details are shared with that provider under a strict data-processing agreement. Verification providers may not use your data for any purpose other than identity verification on hi111's behalf.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session data in order to deliver and authenticate game sessions. These providers do not receive your full name, contact details, or financial data.
• Fraud and AML screening services: Transaction data and device identifiers may be shared with specialist fraud detection and anti-money laundering screening tools to protect the platform and comply with applicable regulations.
• Regulatory and law enforcement authorities: hi111 will disclose personal data to law enforcement, financial intelligence units, or other regulatory authorities when we are legally compelled to do so, or where we have a good-faith belief that disclosure is necessary to prevent or report a crime, protect the safety of any person, or comply with a legal process.

All third parties with whom hi111 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the specific, documented purposes for which it was shared. hi111 does not permit sub-processors to further share your data without our prior written authorisation.

5. Data Security

hi111 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to:

• TLS/SSL encryption on all data transmitted between your browser and our servers, protecting information in transit from interception.
• Encryption at rest for sensitive personal data fields including identity documents, payment references, and password hashes stored in our databases.
• Role-based access controls that ensure only authorised hi111 personnel can access player account data, and only to the extent required by their specific job function.
• Regular security assessments, including vulnerability scanning and penetration testing, carried out to identify and address potential security weaknesses before they can be exploited.
• Multi-factor authentication requirements for all hi111 internal staff accessing backend systems containing player data.
• Incident response procedures that govern how hi111 responds to potential data breaches, including our obligation to notify affected players and relevant authorities in a timely manner where required by applicable law.

Despite these measures, no online platform can guarantee absolute security. You are responsible for keeping your own hi111 account credentials confidential and for using a strong, unique password. If you believe your account has been compromised, contact us immediately at [email protected].

6. Data Retention

hi111 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum post-closure retention period of 5 years, to allow for the resolution of disputes, audits, and regulatory inquiries.
• Transaction records: Financial transaction logs are retained for a minimum of 5 years from the date of the transaction, in line with standard anti-money laundering record-keeping requirements.
• Identity verification documents: KYC documents are retained for the duration of the account plus 5 years after closure, unless a longer period is required by applicable law.
• Support communications: Customer support correspondence is retained for 2 years from the date of the last interaction, unless the matter relates to an ongoing dispute or legal proceeding.
• Analytics and technical logs: Anonymised or aggregated analytics data is retained indefinitely for platform improvement purposes. Raw technical logs containing IP addresses are retained for no longer than 90 days.
• Marketing consent records: Records of your marketing consent (or withdrawal of consent) are retained for the lifetime of your account to demonstrate compliance.

When the applicable retention period expires, personal data is either securely deleted (using data-sanitisation techniques that make recovery impossible) or irreversibly anonymised so that it can no longer be associated with any individual.

7. Your Privacy Rights

As a hi111 player, you hold a number of rights with respect to your personal data. hi111 respects and upholds these rights and will respond to any valid request within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

• Right of access: You may request a copy of the personal data hi111 holds about you, together with information about how and why it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. For data you can edit directly in your account settings, you may do so without needing to contact us.
• Right to erasure: You may request that hi111 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that this right is subject to our legal obligations to retain certain data (see Section 6).
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of hi111's legitimate interests, including profiling. You also have an absolute right to object to your data being used for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact the hi111 privacy team at [email protected]. We may ask you to verify your identity before acting on your request to prevent unauthorised access to another person's data. Requests are free of charge in most circumstances; where a request is manifestly unfounded or excessive, hi111 reserves the right to charge a reasonable administrative fee.

8. Policy Updates & Contact

hi111 reviews and updates this Privacy Policy periodically to reflect changes to our data-processing practices, new legal requirements, or improvements to the platform. When we make a material change to this policy — one that significantly affects how we collect or use your personal data — we will notify you via email to your registered address and/or by posting a prominent notice on the Platform at least 14 days before the change takes effect.

Minor updates (such as clarifications, typographical corrections, or changes that do not affect your rights) may be made without advance notice. The "Effective" date at the top of this page will always reflect the date on which the current version came into force. We encourage you to review this page periodically so that you remain informed about how hi111 protects your data.

Your continued use of the hi111 platform after any notified change to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with a change, you should stop using the platform and request account closure by contacting [email protected] before the effective date of the change.

For any privacy-related questions, data-subject rights requests, or concerns about how hi111 handles your personal information, please contact us at the details below. We are committed to resolving privacy concerns promptly and transparently.

• Email: [email protected] (use subject line: "Privacy Policy Enquiry")
• Response time: Initial acknowledgement within 2 business days (Bangladesh Standard Time, UTC+6)
• Full response: Within 30 calendar days of receipt of a valid request

For responsible gaming concerns — including self-exclusion requests, deposit limit settings, and problem gambling support — please visit our dedicated Responsible Gaming page. All responsible gaming requests are treated with strict confidentiality and are processed by a dedicated team separate from general customer support.