Privacy Policy
How hu77 Protects Your Data
At hu77, your personal data is handled with the same care we apply to your gaming experience. This Privacy Policy explains exactly what information we collect, how we use it , why we need it, and the controls you have over it — written in plain English for all Bangladesh players.
Overview
Our Commitment to Your Privacy
hu77 is Bangladesh's premier online casino and sports betting platform, serving players from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond. As a platform that handles financial transactions, account credentials, and personal identity information, we recognise that our data practices directly affect your safety and trust. This Privacy Policy sets out in clear, formal terms how hu77 collects, processes, stores, and protects the personal data of every registered player and site visitor.
This policy applies to all access points for the hu77 platform, including the website at hu77.bio, any mobile-optimised pages, and all associated support and communication channels. By registering an account on hu77 or by continuing to use the platform after this policy has been updated, you acknowledge that you have read and understood its contents.
Minimal Data Collection
hu77 collects only the personal data that is strictly necessary to operate the platform, verify player identity, process payments, and fulfil our responsible gaming obligations. We do not collect data speculatively.
No Sale of Personal Data
hu77 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is shared only with partners directly involved in operating the platform services you use.
SSL Encryption
All data transmitted between your device and the hu77 platform is protected by industry-standard SSL/TLS encryption. Sensitive data at rest — including payment details and identity documents — is stored using AES-256 encryption.
Your Data, Your Rights
Registered players have the right to access, correct, and request deletion of their personal data held by hu77. We respond to all verified data requests within 30 days and provide clear instructions on how to exercise your rights.
Transparent Cookie Use
hu77 uses cookies and similar tracking technologies only for essential platform functionality, security, and aggregate analytics. We do not deploy invasive third-party advertising trackers or behavioural profiling cookies.
Defined Retention Periods
Personal data is retained only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Data is securely deleted at the end of its defined retention period.
Section 1
Information We Collect
hu77 collects personal data through several channels: directly from you when you register an account or contact support; automatically when you use the platform; and, in limited cases, from third-party service providers involved in payment processing or identity verification. The categories of personal data we collect are set out below.
Registration and Identity Data
When you create a hu77 account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, email address, mobile phone number, and the details of the payment method you register for deposits and withdrawals. If identity verification is required — for example, before processing a withdrawal above a threshold amount — we may additionally collect a copy of your National Identity Card (NID), passport, or other government-issued identity document.
Financial Transaction Data
hu77 records the details of all financial transactions processed through your account, including deposit amounts, withdrawal requests, payment method references, transaction timestamps, and any relevant payment provider reference numbers. We do not store complete bKash, Nagad, Rocket, or Upay PIN numbers — payment authentication is handled entirely by the relevant mobile money provider within their own secure environment.
Platform Usage Data
We collect information about how you use the hu77 platform, including the games you play, the betting markets you access, your wagering history, the bonuses you claim, and the time and duration of your sessions. This data is used to administer your account, to detect unusual activity, and to fulfil our responsible gaming monitoring obligations.
Technical and Device Data
When you access hu77, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session duration. This information is used for security monitoring, fraud detection, and aggregate analytics. We do not use technical data to build individual behavioural profiles for commercial advertising purposes.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, NID / passport copy | Provided by you at registration or on request |
| Contact Data | Email address, mobile number | Provided by you at registration |
| Financial Data | Deposit/withdrawal amounts, payment method references, transaction IDs | Generated automatically during transactions |
| Usage Data | Games played, bets placed, bonus activity, session times | Collected automatically during platform use |
| Technical Data | IP address, browser type, device type, OS | Collected automatically via server logs and cookies |
| Communications Data | Support chat transcripts, email correspondence | Generated when you contact our support team |
hu77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health information, except where directly relevant to a responsible gaming self-exclusion request submitted by the player themselves.
Section 2
How We Use Your Data
hu77 processes your personal data only for the lawful purposes described in this section. Each processing activity is grounded in one of the following legal bases: performance of the contract between you and hu77; compliance with a legal obligation; our legitimate interests in operating a secure and compliant platform; or, in limited cases, your explicit consent.
Account Administration and Service Delivery
We use your registration data, contact data, and financial data to create and maintain your hu77 account, to process your deposits and withdrawals via bKash, Nagad, Rocket, and Upay, to deliver the games and betting markets you access, and to communicate with you regarding your account status. This processing is necessary for the performance of our contract with you.
Identity Verification and Fraud Prevention
hu77 uses identity data, financial transaction data, and technical data to verify player identities, to detect and prevent fraudulent activity, to identify potential money laundering, and to enforce our one-account-per-player policy. This processing is grounded in both our legal obligations and our legitimate interest in maintaining a safe platform for all users.
Responsible Gaming Monitoring
We analyse platform usage data — including session frequency, deposit patterns, wagering velocity, and self-reported concerns — to identify players who may be experiencing gambling-related difficulties. Where such patterns are identified, we may proactively contact the player to offer responsible gaming tools such as deposit limits, time-outs, or self-exclusion. This processing reflects both our legal obligations and our genuine commitment to player welfare.
Platform Security and Technical Operations
Technical and device data is used to monitor the security and integrity of the hu77 platform, to detect and respond to cyberattacks or unauthorised access attempts, to troubleshoot technical issues, and to maintain system performance. This processing is necessary for our legitimate interest in operating a secure and reliable platform.
Customer Support
When you contact the hu77 support team, we process the content of your communication and relevant account data in order to respond to your enquiry effectively. Support communications are retained to provide context for any subsequent enquiries and to train and quality-assure our support team. This processing is grounded in our legitimate interests and in our contractual obligation to support you as a registered player.
Legal and Regulatory Compliance
hu77 may process and retain certain categories of personal data for as long as is required by applicable legal obligations, including obligations related to anti-money laundering compliance, fraud investigation, and responding to lawful requests from regulatory or law enforcement authorities in Bangladesh or other relevant jurisdictions.
Marketing communications: hu77 may send you promotional emails or platform notifications about bonuses, new games, and seasonal offers if you have opted in to marketing communications during registration or subsequently through your account settings. You can withdraw your consent to marketing communications at any time by contacting [email protected] or by updating your communication preferences in your account dashboard.
Section 3
Data Sharing & Third Parties
hu77 does not sell your personal data. We share personal data with third parties only where strictly necessary to operate the platform and to fulfil our legal obligations. All third-party partners who receive personal data from hu77 are required to handle it securely and in accordance with contractual data protection obligations consistent with this policy.
Payment Service Providers
To process deposits and withdrawals, hu77 shares transaction-relevant data with the payment service providers you select, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. The data shared is limited to what is technically required to initiate and confirm the transaction. Each payment provider operates under its own privacy and security policies, which we encourage you to review.
Game Technology Providers
The casino games and live dealer experiences available on hu77 are powered by third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session-level technical data necessary to deliver and authenticate the game experience. They do not receive your full personal profile, financial history, or identity documents.
Identity Verification Partners
Where identity verification is required, hu77 may engage a third-party KYC (Know Your Customer) service provider to assist with document verification. Such providers receive only the identity documents and data points necessary to complete the verification check. They are contractually prohibited from using your data for any other purpose.
Legal and Regulatory Authorities
hu77 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities in Bangladesh or in other jurisdictions where we are legally required to do so — for example, in response to a valid court order, a statutory information request, or an anti-money laundering investigation. In such cases, we will disclose only the minimum data required to satisfy the legal obligation.
- No advertising networks: hu77 does not share your data with advertising networks, data brokers, or social media platforms for targeted advertising purposes.
- No cross-platform profiling: We do not combine your hu77 data with data from other platforms to build a cross-platform behavioural profile for commercial use.
- No third-party marketing: We do not share your contact details with third-party marketing companies or affiliate programmes.
- Business transfers: In the event of a corporate merger, acquisition, or asset sale involving hu77, player data may be transferred as part of the business assets. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.
Section 5
Data Security
hu77 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or disclosure. Our security infrastructure is reviewed and updated regularly to address evolving threats. The key measures in place are described below.
- SSL/TLS encryption in transit: All data transmitted between your browser or app and the hu77 servers is encrypted using TLS 1.2 or higher. This protects your login credentials, payment data, and personal information while it is in transit.
- AES-256 encryption at rest: Sensitive data stored on hu77 servers — including identity documents and payment references — is encrypted at rest using AES-256 encryption, the same standard used by major financial institutions worldwide.
- Access controls: Access to personal data is restricted on a strict need-to-know basis. hu77 staff members are granted access only to the data categories required for their specific role. All access is logged and audited.
- Intrusion detection: hu77's infrastructure is monitored 24/7 by automated intrusion detection systems designed to identify and respond to suspicious activity in real time.
- Password hashing: Player account passwords are never stored in plain text. They are hashed using a modern, salted hashing algorithm before storage, meaning that even in the event of a database breach, raw passwords cannot be recovered.
- Two-factor authentication: hu77 supports optional two-factor authentication (2FA) for player accounts. We strongly encourage all Bangladesh players to enable 2FA via their account security settings for an additional layer of protection.
Data Breach Response
In the event of a personal data breach that poses a risk to affected players, hu77 will act promptly to contain the breach, assess its scope and impact, and notify affected players via their registered email address. Notification will include a clear description of the nature of the breach, the categories of data affected, and the steps players should take to protect themselves. hu77 will also notify relevant authorities where required by applicable law.
Your Responsibility
While hu77 maintains strong platform-side security, the security of your account also depends on your own practices. You are responsible for keeping your password confidential, for not sharing your account credentials with others, and for ensuring that the devices you use to access hu77 are free from malware or keylogging software. If you suspect that your account has been compromised, contact [email protected] immediately.
Section 6
Data Retention
hu77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. When data is no longer required, it is securely deleted or irreversibly anonymised. The retention periods applicable to the main categories of personal data held by hu77 are summarised in the table below.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of active account + 5 years following account closure | Legal obligation / anti-money laundering compliance |
| Financial Transaction Records | 7 years from the date of each transaction | Legal / regulatory obligation |
| Platform Usage and Wagering Data | Duration of active account + 2 years | Responsible gaming monitoring / legitimate interest |
| Technical and Device Data (logs) | 90 days on a rolling basis | Security and fraud detection / legitimate interest |
| Support Communications | 3 years from the date of the communication | Contractual / legitimate interest |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Legal obligation to demonstrate consent |
| Self-Exclusion Records | Duration of exclusion + 7 years | Responsible gaming obligation |
Where a legal dispute or investigation is ongoing at the time a standard retention period expires, the relevant data will be retained until the matter is fully resolved and any applicable appeal period has passed. Following the end of any applicable retention period, data is deleted from active systems and any backup copies are overwritten on their normal rotation schedule.
Section 7
Your Rights & Choices
As a registered player on the hu77 platform, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 calendar days.
Right of Access
You have the right to request a copy of the personal data that hu77 holds about you. Upon receipt of a verified access request, we will provide you with a structured summary of the categories of data held, the purposes for which it is processed, and the retention period applicable to each category.
Right to Rectification
If you believe that any personal data held by hu77 is inaccurate or incomplete, you have the right to request that it be corrected. For most account data — such as your email address or phone number — you can update this directly through your account settings. For identity data such as your name or date of birth, please contact our support team with supporting documentation.
Right to Erasure
You may request that hu77 delete the personal data we hold about you. We will honour erasure requests where the data is no longer necessary for the purpose for which it was collected, where you withdraw your consent (if consent was the legal basis), or where the processing is found to be unlawful. Note that certain data categories — particularly financial transaction records and identity verification records — must be retained for the periods specified in Section 6 due to legal obligations and cannot be deleted on request during those retention periods.
Right to Restrict Processing
You have the right to request that hu77 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or while you are contesting the lawfulness of our processing. During a restriction, we will continue to store the data but will not actively process it for other purposes.
Right to Withdraw Marketing Consent
If you have previously opted in to receive marketing communications from hu77, you may withdraw that consent at any time. To opt out, either use the unsubscribe link included in any marketing email or contact [email protected]. Withdrawal of marketing consent does not affect the processing of data that is necessary for account administration or legal compliance.
How to submit a data rights request: Send an email to [email protected] with the subject line "Data Rights Request". Include your registered email address, a brief description of the right you wish to exercise, and a copy of a government-issued identity document so we can verify your identity before processing the request. We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.
Section 8
Contact & Data Enquiries
For any questions, concerns, or requests relating to this Privacy Policy or to the personal data hu77 holds about you, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated support staff who are available 24 hours a day, 7 days a week, and who communicate exclusively in English to serve our Bangladesh player base effectively.
Whether you are based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar, our team is equally accessible and committed to resolving your data-related concerns promptly. We aim to acknowledge all privacy enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days.
Contact Details
- General & Privacy Support Email: [email protected] (plain text — not a clickable link)
- Subject line for data rights requests: "Data Rights Request"
- Subject line for policy questions: "Privacy Policy Enquiry"
- Response window: Within 30 calendar days of verified request receipt
- Support availability: 24/7, English language
- Time zone: Bangladesh Standard Time (BST, UTC+6)
Updates to This Policy
hu77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When a material change is made, we will notify registered players via their registered email address and will update the "Last updated" date shown at the top of this page. The version of this policy published on hu77.bio at any given time is the current operative version. We encourage you to review this page periodically to stay informed about how we protect your data.
Related Policies
This Privacy Policy should be read in conjunction with the following documents, which together govern your use of the hu77 platform and our handling of your information:
- Terms & Conditions — the full legal agreement governing your use of hu77.
- Responsible Gaming Policy — our commitments on player welfare, self-exclusion, deposit limits, and time-out tools.
- Frequently Asked Questions — practical guidance on account management, payments, and platform use.
By using the hu77 platform, you confirm that you are aged 18 or above, that you have read and understood this Privacy Policy, and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the platform and contact [email protected] to request account closure and data erasure where applicable.
Explore hu77
Your Data Is Safe — Now Enjoy the Platform
Now that you understand exactly how hu77 handles your personal data, explore everything the platform has to offer — live BPL cricket betting, 700+ casino games, instant bKash and Nagad deposits, and 24/7 English support. Available to all Bangladesh players aged 18 and above.