hi97 Privacy Policy
— How We Handle Your Data

1. About This Policy

This Privacy Policy ("Policy") describes how hi97 ("hi97", "we", "us", "the Platform") collects, uses, stores, and discloses personal information about individuals ("you", "the Player", "the User") who access or use the hi97.io website, mobile platform, or any associated hi97 service.

This Policy applies to all personal data processed in connection with your use of hi97, including data collected during the account registration process, during the course of ongoing platform use, and after account closure where retention is legally required. By creating a hi97 account or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood its contents.

This Policy should be read together with the hi97 Terms & Conditions, available at /terms-conditions, which govern the contractual relationship between you and hi97. The Terms & Conditions incorporate this Privacy Policy by reference.

2. Data We Collect

hi97 collects personal data across several categories depending on how you interact with the platform. The table below summarises the primary categories of personal data we process:

2.1 Sensitive Data

hi97 does not seek to collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) as part of standard account registration or platform use. Where a player voluntarily discloses sensitive information in the context of a responsible gaming self-exclusion request or a support communication, that information will be handled with the highest degree of care and will only be used for the specific purpose for which it was shared.

3. How We Collect Data

hi97 collects personal data through the following means:

• Direct collection: Information you provide when completing the hi97 account registration form, submitting KYC documents, making a deposit or withdrawal request, contacting support, or completing any other platform form or process.
• Automated collection: Technical and usage data collected automatically when you access hi97.io, including IP address, device identifiers, browser information, and session activity logs collected through server logs and functional cookies.
• Third-party sources: Identity verification data returned by our KYC verification partners following document submission; fraud-risk signals provided by payment processors; and account-linking signals generated by our anti-multiple-account detection systems.
• Inferred data: Responsible gaming risk indicators derived by analysing your wagering patterns, deposit frequency, and session duration against established responsible gaming benchmarks.

4. How We Use Your Data

hi97 processes your personal data for the following purposes:

• Account creation and management: Creating and maintaining your hi97 player account, verifying your identity and age, processing login and session management, and communicating important account-related information.
• Payment processing: Crediting deposits made via bKash, Nagad, Rocket, Upay, bank transfer, USDT, or Visa/Mastercard; processing withdrawal requests; and maintaining financial records for accounting and compliance purposes.
• Legal and regulatory compliance: Meeting anti-money laundering (AML) obligations, responding to lawful requests from regulatory or law enforcement authorities, and maintaining the records required under applicable financial crime prevention standards.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other prohibited conduct as defined in the hi97 Terms & Conditions.
• Responsible gaming: Monitoring wagering activity to identify signs of problematic gambling behaviour, enforcing self-exclusion and deposit limit requests, and providing intervention support where appropriate.
• Customer support: Responding to support queries, resolving disputes, and maintaining records of communications for quality assurance purposes.
• Platform improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, user experience, and feature development.
• Direct communications: Sending transactional emails related to your account (e.g., deposit confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about hi97 offers and events.

5. Legal Basis for Processing

hi97 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between hi97 and the player — including account management, payment processing, bet settlement, and customer support — is carried out on the basis that it is necessary for the performance of that contract.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including AML record-keeping, age verification, and responding to lawful authority requests.
• Legitimate interests: Processing carried out to pursue hi97's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, where those interests are not overridden by your fundamental data protection rights.
• Consent: Where hi97 relies on your consent as the legal basis for processing — for example, for optional marketing communications — you have the right to withdraw that consent at any time by contacting [email protected] or by using the unsubscribe function in any marketing email.

6. Data Sharing

hi97 does not sell or rent your personal data to third parties. We share personal data with external parties only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard, and USDT network processors receive the minimum financial data required to execute your deposit and withdrawal transactions.
• Identity verification partners: KYC and document verification service providers receive identity documents and personal details necessary to complete the verification process on hi97's behalf.
• Anti-fraud and AML providers: Specialist fraud prevention and anti-money laundering screening services may receive transaction data and account risk indicators for the purpose of detecting and preventing financial crime.
• Game software providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum session data required to operate their games on the hi97 platform. These providers operate under data processing agreements with hi97.
• Legal and regulatory authorities: hi97 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or in response to a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of all or a substantial part of hi97's business assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the data protection terms applicable to the new entity prior to their data being transferred.

7. International Data Transfers

hi97 operates primarily for the Bangladesh market, and the majority of player data is processed on servers located in secure data centres in Asia. However, some of our third-party service providers — including game studios and identity verification partners — may process data on servers located outside Bangladesh.

Where personal data is transferred internationally, hi97 takes steps to ensure that appropriate safeguards are in place, including:

• Transferring data only to countries or organisations that provide an adequate level of data protection as assessed by hi97's data protection team.
• Entering into standard contractual clauses or equivalent data transfer agreements with international processors to ensure your data receives equivalent protections regardless of where it is processed.
• Implementing end-to-end encryption for all data in transit across international network segments.

8. Data Retention

hi97 retains personal data for the periods set out below. Retention periods are determined by the purpose of processing, the nature of the data, and applicable legal obligations:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is used, the resulting aggregated data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

9. Cookies & Tracking Technologies

hi97 uses cookies and similar technologies on the hi97.io website. Cookies are small text files stored on your device that help the platform function correctly and remember your preferences. The following categories of cookies are used on hi97.io:

• Strictly Necessary Cookies: These cookies are essential for the platform to operate. They manage your login session, maintain your account authentication state, and enable core security functions. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: These cookies remember your platform preferences such as language selection, display settings, and game lobby view options. Disabling them may affect your experience but will not prevent core platform access.
• Analytics Cookies (first-party only): hi97 uses first-party analytics cookies to collect aggregated, anonymised data about how players navigate the platform — including which pages are visited most frequently and where users encounter difficulties. This data is used solely to improve the platform and is not shared with third-party analytics providers.

hi97 does not deploy third-party advertising cookies, social media tracking pixels, or any cookie technology that enables cross-site behavioural profiling. You can manage cookie preferences in your browser settings. Instructions for the most common browsers are available at the respective browser vendor's support pages.

10. Your Data Rights

As a hi97 player whose personal data is processed under this Policy, you hold the following rights with respect to your information:

• Right of Access: You have the right to request a copy of the personal data hi97 holds about you, along with information about how it is being processed. Submit a Subject Access Request (SAR) to [email protected].
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held in your hi97 account. Minor corrections (such as updating your email address or phone number) can be made directly within your account settings.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected and no overriding legal retention obligation applies. Note that account closure does not automatically erase all data, as AML obligations require certain records to be retained for a minimum of five years.
• Right to Restrict Processing: You have the right to request that hi97 temporarily suspend processing of your personal data in certain circumstances, such as while the accuracy of disputed data is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of hi97's legitimate interests. hi97 will consider your objection and cease processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected]. hi97 aims to acknowledge all data rights requests within 5 business days and to provide a substantive response within 30 calendar days. Where requests are complex or numerous, hi97 may extend this period by a further 30 days with written notice to the requesting player.

11. Children & Minors

The hi97 platform is strictly intended for adults aged 21 and above. hi97 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account or attempt to use any hi97 service.

If hi97 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately closed, all associated balances will be forfeited in accordance with the hi97 Terms & Conditions, and all personal data associated with the underage account will be securely deleted, except where retention is required to fulfil our legal obligations under applicable law.

If you believe that a minor may have registered on the hi97 platform, please notify us immediately at [email protected]. hi97 takes all reports of underage access seriously and will investigate promptly.

12. Security Measures

hi97 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security: All data transmitted between your browser or device and hi97's servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Data Encryption at Rest: Sensitive personal data stored in hi97's databases — including financial records and identity documents — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within hi97's systems is restricted on a strict need-to-know basis. Only authorised personnel with a defined operational requirement may access player data, and all access is logged and audited.
• Intrusion Detection: hi97's infrastructure is monitored 24/7 by automated intrusion detection systems that alert the security team to anomalous activity in real time.
• Penetration Testing: hi97 conducts regular third-party penetration testing of its platform to proactively identify and remediate security vulnerabilities before they can be exploited.
• Password Security: Player passwords are stored as salted cryptographic hashes. hi97's systems never store or have access to your plain-text password at any point.

Notwithstanding the above measures, no internet-based system can guarantee absolute security. Players are encouraged to contribute to their own account security by using strong, unique passwords and enabling SMS two-factor authentication where available.

13. Third-Party Links

The hi97.io platform may contain references or links to third-party game providers, payment partners, or informational resources. This Privacy Policy applies solely to data collected and processed by hi97 directly. hi97 is not responsible for the privacy practices of third-party websites, services, or applications that may be accessible from or referenced on the hi97 platform.

Players who access third-party services — including game studios' own websites or mobile applications — are subject to those parties' own privacy policies and terms of service. hi97 encourages players to review the privacy policies of any third-party service they access.

14. Policy Updates

hi97 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to the email address registered on your hi97 account at least 14 days before the updated Policy takes effect, where the changes materially affect your rights or the way your data is processed.
• For minor, non-material changes (such as typographical corrections or clarifications that do not change the substance of data processing), the updated Policy will take effect immediately upon publication.

Your continued use of the hi97 platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should close your hi97 account before the effective date of the changes.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or hi97's data processing practices, please contact the hi97 data protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Privacy Request — [Your Account Username]"
• Response Time: hi97 aims to acknowledge all privacy-related communications within 2 business days and to provide a substantive response within 30 calendar days.

For formal data subject rights requests — including Subject Access Requests, erasure requests, and objections to processing — please include your full name, registered email address, and a clear description of the right you wish to exercise. hi97 may request additional information to verify your identity before processing a data rights request, in order to prevent unauthorised access to another player's personal data.