hi888 Privacy Policy — Your Data, Your Rights

Introduction

hi888 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every player who accesses or registers on the hi888 platform at hi888.sbs. This Privacy Policy describes our practices regarding the collection, use, storage, sharing and protection of personal information. It applies to all users who access hi888 from Bangladesh or any other jurisdiction. By registering or continuing to use hi888, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy should be read in conjunction with hi888's Terms & Conditions, which are incorporated by reference. Terms not defined here have the meanings given to them in the Terms & Conditions. If you do not agree to this Privacy Policy, you must not use the hi888 platform. hi888 reserves the right to update this Privacy Policy at any time; material changes will be notified to registered players via the mobile number on file.

Our Privacy Commitments at a Glance

The six core principles that define how hi888 handles your personal information.

1. Information We Collect

hi888 collects personal information only to the extent necessary to operate the platform, verify player identities, process payments, and comply with applicable legal and regulatory obligations. We collect two categories of information: information you provide directly and information we collect automatically through your use of the platform.

Information you provide directly

• 1Registration data: your full name, date of birth, Bangladesh mobile number, and the payment wallet (bKash, Nagad, Rocket or Upay) you choose to link to your account at the time of registration.
• 2Identity verification documents: government-issued photo identification (such as a National ID card or passport) submitted during KYC verification. hi888 collects the minimum documentation required to verify your identity and age; copies are stored securely and not retained beyond the legally required period.
• 3Communications you send us: support enquiries, complaint submissions, and any other written communications sent to hi888 via email at [email protected]. These are retained to maintain a record of your service interactions.
• 4Responsible gaming preferences: deposit limits, session time limits, self-exclusion elections and other account restriction settings you configure through your account dashboard. These settings are treated as sensitive data and are subject to enhanced protection.

Information collected automatically

• 1Device and technical data: IP address, device type, operating system, browser type and version, mobile network operator, and device identifiers. This data is used for fraud detection, security monitoring, and ensuring platform compatibility.
• 2Usage and activity data: pages visited, games played, betting history, session duration, deposit and withdrawal timestamps, and interaction patterns within the hi888 platform. This data is used to personalise your experience and to detect anomalous activity.
• 3Cookie and tracking data: session cookies, analytics identifiers, and preference cookies. hi888 uses cookies to maintain session state, remember your preferences, and analyse aggregate usage patterns. See Section 5 (Cookies) for full details.

2. How We Use Your Information

hi888 uses the personal information it collects solely for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your explicit consent. The table below summarises the principal purposes for which we use your data and the corresponding legal basis for each.

3. Legal Basis for Processing

hi888 processes personal data only where a lawful basis exists. The four lawful bases on which hi888 relies are described below. Where processing is based on consent, you have the right to withdraw that consent at any time by contacting hi888 support, though withdrawal will not affect the lawfulness of any processing that took place prior to withdrawal.

• 1Contract performance: processing is necessary to provide the services you have requested — including account registration, game access, deposit and withdrawal processing, and customer support.
• 2Legal obligation: processing is required to comply with applicable laws and regulations, including age verification requirements, KYC and anti-money-laundering obligations, and data retention requirements imposed by applicable law.
• 3Legitimate interests: processing is necessary for hi888's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided that these interests are not overridden by your fundamental rights and freedoms.
• 4Consent: for processing activities not covered by the three bases above — such as sending you optional promotional communications — hi888 will ask for your explicit consent before proceeding. You may withdraw consent at any time without penalty.

4. Sharing Your Information

hi888 does not sell, rent, or trade your personal data to any third party. We share personal information only in the specific, limited circumstances described below, and only to the extent necessary for the described purpose.

• 1Payment processors: hi888 shares the minimum transaction data required with bKash, Nagad, Rocket and Upay to process your deposits and withdrawals. These payment partners process your data under their own privacy policies and are subject to applicable financial regulations in Bangladesh.
• 2Technology and infrastructure providers: hi888 uses third-party service providers for platform hosting, security services, and fraud detection tools. These providers act as data processors under written agreements with hi888 and are contractually prohibited from using your data for any purpose other than providing the contracted service.
• 3Game content providers: hi888 shares session identifiers and game activity data with licensed game providers (including Pragmatic Play, Evolution Gaming and others) to enable game functionality, RNG certification and technical support. Providers do not receive personally identifiable information beyond what is technically required for session management.
• 4Legal and regulatory authorities: hi888 will disclose personal data to law enforcement agencies, regulatory bodies, courts or other public authorities when required to do so by applicable law, court order, or regulatory direction — without prior notice to you where legally prohibited from doing so.

5. Cookies and Tracking Technologies

hi888 uses cookies and similar tracking technologies to operate the platform and improve your experience. Cookies are small text files stored on your device by your browser when you visit hi888. hi888 uses three categories of cookies: strictly necessary cookies (required for the platform to function and for session authentication — these cannot be disabled), functional cookies (used to remember your preferences such as language settings), and analytics cookies (used to understand how players use the platform in aggregate so we can improve it).

Analytics cookies used by hi888 collect aggregate, anonymised data only. hi888 does not use third-party advertising cookies, retargeting cookies, or tracking pixels that serve ads on other websites based on your hi888 activity. You may manage functional and analytics cookie preferences through your device browser settings. Disabling strictly necessary cookies will prevent the hi888 platform from functioning correctly.

6. Data Retention

hi888 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data and transaction records are retained for a minimum of five (5) years following account closure to satisfy anti-money-laundering and financial record-keeping obligations under applicable law. KYC documents are retained for the period required by applicable law from the date of their submission.

Support communications are retained for three (3) years from the date of the last communication. Analytics and usage data in anonymised, aggregated form may be retained indefinitely as it cannot be linked back to any individual. Where you request deletion of your personal data, hi888 will action that request within thirty (30) days, subject to any overriding legal retention obligations.

7. Data Security

hi888 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include industry-standard SSL/TLS encryption for all data transmitted between your device and the hi888 platform; encrypted storage of sensitive personal data including KYC documents and payment wallet identifiers; access controls that limit access to personal data to hi888 personnel who require it for their specific role; regular security assessments and monitoring of the hi888 platform infrastructure; and two-factor authentication options for account access.

While hi888 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, hi888 will notify affected players as soon as practicable, in accordance with applicable law. If you suspect that your account has been compromised, please contact hi888 support immediately at [email protected].

8. Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights with respect to the personal data that hi888 holds about you. To exercise any of these rights, please contact hi888 support in writing at [email protected]. hi888 will respond to all valid requests within thirty (30) days. In some cases, hi888 may need to verify your identity before processing your request.

• 1Right of access: you have the right to request a copy of the personal data that hi888 holds about you, together with information about how and why we process it. hi888 will provide this information in a structured, commonly used format within thirty (30) days of receiving a valid request.
• 2Right to rectification: if any personal data that hi888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Please contact hi888 support with the specific details you wish to correct.
• 3Right to erasure: you may request that hi888 delete your personal data. hi888 will honour erasure requests where there is no overriding legal obligation to retain the data. Note that transaction records and KYC documentation must be retained for legally prescribed periods even after account closure.
• 4Right to restrict processing: in certain circumstances you may request that hi888 restrict the processing of your personal data — for example, while a dispute about the accuracy of the data is being resolved.
• 5Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal, and it does not affect processing that continues on a different lawful basis.

hi888 will not charge a fee for handling any data rights request. If hi888 is unable to fulfil a request — for example because a legal retention obligation applies — hi888 will explain the reason in writing within thirty (30) days.

9. Children's Privacy

The hi888 platform is strictly intended for adults aged 21 years and above. hi888 does not knowingly collect, store or process personal data from any individual under the age of 21. If hi888 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and you believe that a minor in your care has provided personal data to hi888, please contact [email protected] immediately.

10. Third-Party Links and Services

The hi888 platform may reference or display the names of third-party payment providers (bKash, Nagad, Rocket, Upay), game studios (Pragmatic Play, Evolution Gaming, and others), and sports event organisers. hi888 is not responsible for the privacy practices of these third parties. When you interact with a third-party payment provider to process a deposit or withdrawal, your transaction is subject to that provider's own terms and privacy policy. hi888 recommends that you review the privacy policies of any third-party services you use in connection with your hi888 account.

11. Changes to This Privacy Policy

hi888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, hi888 will notify registered players by sending a message to the mobile number registered on the account, or by displaying a prominent notice on the hi888 platform at login. The date of the most recent revision is always displayed at the top of this page.

Your continued use of the hi888 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated policy. If you do not agree to any material change in this Privacy Policy, you must cease using the hi888 platform and may request account closure by contacting hi888 support.

12. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how hi888 handles your personal information, please contact the hi888 support team in writing. All privacy-related requests and complaints are handled confidentially and responded to within thirty (30) days.