Privacy Policy —
Your Data, Protected by hu77
At hu77, protecting the personal data of our players is a core responsibility, not an afterthought. This Privacy Policy explains in plain English exactly what information we collect, why we collect it, how we use and store it, and what rights you hold as a player on the hu77 platform serving the Bangladesh market.
How hu77 Handles Your Data
A quick summary of our six core data-handling principles before you read the full policy below.
All data transmitted between your device and the hu77 platform is protected by 256-bit SSL encryption. Your login credentials, payment details, and personal information are never sent over the network in plain text.
hu77 follows a data-minimisation approach. We collect only the personal information that is strictly necessary to operate your account, process BDT transactions, verify your identity, and comply with legal obligations. We do not collect data for its own sake.
hu77 does not sell, rent, or trade your personal data to third-party marketing companies, data brokers, or advertising networks under any circumstances. Your information stays within the hu77 ecosystem and is shared only with essential service partners.
You have the right to access, correct, and request deletion of the personal data hu77 holds about you. You may also request a portable copy of your data or object to certain types of processing. Submit your request at any time via [email protected].
hu77 retains personal data only for as long as it is necessary for the purpose for which it was collected or as required by applicable law. Account data is typically retained for five years after account closure to satisfy anti-money-laundering obligations.
hu77 uses cookies and similar tracking technologies only to keep you logged in, remember your preferences, and measure platform performance. We do not use third-party advertising cookies. Full details are set out in Section 7 of this policy.
Complete Privacy Policy
This document forms part of the agreement between hu77 and its registered players and should be read alongside the Terms & Conditions.
Who We Are
This Privacy Policy is issued by the operator of the hu77 online betting and gaming platform, accessible at hu77.im. hu77 is an English-language betting platform built specifically for players in the Bangladesh market, offering cricket sports betting, live casino games, and slot titles with BDT (Bangladeshi Taka) deposits and withdrawals.
In this Privacy Policy, references to "hu77", "we", "us", or "our" mean the operator of the hu77 platform. References to "you" or "your" mean any individual who visits, registers on, or otherwise interacts with the hu77 platform.
For all data-related enquiries, you may contact our support team at [email protected]. We aim to respond to all privacy-related requests within 72 hours.
Data We Collect
hu77 collects personal data through several channels: directly from you when you register an account or contact support; automatically when you use the platform; and from third-party payment processors when you make deposits or withdrawals. The categories of personal data we collect are set out in the table below.
| Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national ID number (where provided for verification) | Account registration, KYC verification |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Dhaka, Chittagong, Sylhet) | Account registration, support interactions |
| Financial Data | bKash wallet number, Nagad number, Rocket number, Upay number, deposit/withdrawal amounts in BDT, transaction reference IDs | Payment processing, transaction records |
| Account Activity Data | Login timestamps, bet history, game session durations, bonus usage, wager amounts, win/loss records | Platform activity logging |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, referring URL | Automatic collection via server logs and cookies |
| Communication Data | Live chat transcripts, email correspondence content, support ticket content | Customer support interactions |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, session time preferences, problem gambling support interactions | Responsible gaming tool usage |
Data we do not collect: hu77 does not collect biometric data, sensitive health information, racial or ethnic origin, political opinions, religious beliefs, or trade union membership. We do not collect full payment card numbers — we do not offer card payment services and therefore have no mechanism to collect card data.
How We Use Your Data
hu77 uses personal data only for the specific purposes listed below. We do not use your data for any purpose incompatible with those stated at the time of collection.
- Account management: To create, maintain, and operate your hu77 account, including processing your login sessions, managing your BDT wallet balance, recording your betting history, and applying responsible gaming settings you have requested.
- Payment processing: To process BDT deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to match incoming payments to the correct player account; and to maintain accurate financial transaction records.
- Identity verification (KYC): To verify that you meet the 21+ age requirement and to confirm that your identity matches the payment accounts you use, in line with our Know Your Customer obligations and anti-money-laundering commitments.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, multi-accounting, money laundering, and any other prohibited conduct described in our Terms and Conditions.
- Customer support: To respond to your enquiries submitted via live chat, email, or WhatsApp; to maintain records of support interactions for quality assurance; and to follow up on unresolved issues.
- Responsible gaming: To monitor account activity for signs of problem gambling behaviour and to administer self-exclusion requests, deposit limits, and session time reminders in accordance with our Responsible Gaming commitments.
- Platform improvement: To analyse aggregated and anonymised usage data to improve platform performance, fix technical issues, optimise game loading speeds, and enhance the user experience for players in Bangladesh.
- Legal compliance: To meet our legal and regulatory obligations, including record-keeping requirements, responding to lawful requests from competent authorities, and enforcing our Terms and Conditions.
- Promotions and communications: To send you bonus offers, promotional updates, and platform news where you have not opted out of receiving such communications. You may unsubscribe from promotional emails at any time by contacting [email protected].
Legal Bases for Processing
hu77 processes personal data on the following legal bases, depending on the nature of the processing activity involved:
- Contractual necessity: Processing required to perform the contract between hu77 and you as a registered player — including account creation, payment processing, bet settlement, and customer support — is carried out because it is necessary to fulfil the services you have signed up for.
- Legal obligation: Certain processing activities are required by law, including identity verification for age compliance, anti-money-laundering transaction monitoring, and record retention following account closure.
- Legitimate interests: hu77 processes some data to pursue legitimate business interests, including fraud detection, platform security, abuse prevention, and internal analytics to improve service quality. We carry out a balancing assessment to ensure these interests do not override your rights.
- Consent: Where we rely on your consent — for example, to send you promotional communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Sharing Your Data
hu77 may share your personal data with the following categories of third party:
- Payment processors: bKash, Nagad, Rocket, and Upay receive transaction data (wallet number, amount, reference ID) necessary to process your BDT deposits and withdrawals. These processors have their own privacy policies governing their handling of your data.
- Game studios and content providers: When you play a live dealer game or an RNG slot title, the relevant studio (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, or Spribe) may receive a session token and anonymised player identifier necessary to initialise and operate the game session. Full personal identity data is not passed to game studios.
- Identity verification services: Where hu77 engages a third-party KYC service provider to assist with identity document verification, that provider will receive the identity data you submit for verification purposes only and is contractually prohibited from using it for any other purpose.
- IT and hosting providers: Infrastructure providers that host the hu77 platform and databases may have incidental access to personal data as part of their technical services. These providers are subject to strict data processing agreements.
- Legal and regulatory authorities: hu77 may be required to disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities where required by applicable law or pursuant to a valid legal order. hu77 will not voluntarily disclose player data to any authority without a lawful basis to do so.
- Professional advisers: Lawyers, auditors, and compliance consultants may access personal data on a strictly need-to-know basis and are bound by confidentiality obligations.
hu77 does not transfer personal data to any country outside the region in which its servers operate except where necessary to deliver the services described above and where appropriate data transfer safeguards are in place.
Data Retention
hu77 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected or to comply with legal retention obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account identity and registration data | 5 years after account closure | Anti-money-laundering compliance and legal record-keeping |
| Financial transaction records | 5 years after the transaction date | Financial record-keeping and dispute resolution |
| Bet and game session history | 3 years after the session date | Dispute resolution and responsible gaming monitoring |
| Customer support communications | 2 years after ticket closure | Quality assurance and dispute reference |
| Technical and access logs (IP, device) | 12 months | Fraud detection and security monitoring |
| Responsible gaming records | 5 years after self-exclusion ends or account closure | Compliance with responsible gaming obligations |
| Marketing consent records | Until consent is withdrawn, plus 1 year | Proof of consent for regulatory purposes |
Upon expiry of the applicable retention period, hu77 will securely delete or anonymise the relevant personal data so that it can no longer be associated with any identifiable individual.
Cookies and Tracking Technologies
hu77 uses cookies — small text files stored in your browser — and similar tracking technologies to operate the platform effectively. The following types of cookies are used:
- Strictly necessary cookies: These cookies are essential to platform function. They maintain your logged-in session, remember your account preferences, keep your BDT wallet session active, and prevent cross-site request forgery attacks. These cookies cannot be disabled without breaking core platform functionality.
- Performance and analytics cookies: These cookies collect anonymised information about how players use the hu77 platform — such as which pages are visited most frequently and whether any error messages are encountered — to help us improve performance. The data collected is aggregated and cannot be used to identify you individually.
- Functional cookies: These cookies remember choices you have made on the platform, such as your preferred language display settings, so that you do not need to re-enter preferences on each visit.
What we do not use: hu77 does not use third-party advertising or retargeting cookies. We do not allow any advertising network to set cookies on the hu77 platform. We do not use social media tracking pixels from any platform.
Managing cookies: You can control and delete cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent you from logging into your hu77 account. Disabling performance cookies will not affect your ability to use the platform but may result in a slightly reduced experience as your preferences will not be remembered.
Session storage and local storage: In addition to cookies, hu77 uses browser session storage and local storage to temporarily hold game state information and session tokens. This data is stored on your device and is not transmitted to third parties except as needed to run the game session.
Data Security
hu77 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:
- Transport security: 256-bit SSL/TLS encryption on all connections between player devices and hu77 servers, enforced via HTTPS-only access with HTTP Strict Transport Security (HSTS) headers.
- Access controls: Personal data is accessible only to hu77 staff and contractors who have a legitimate operational need. Access is controlled by role-based permissions, and all administrative access is logged and audited.
- Password storage: Player passwords are stored as salted cryptographic hashes. hu77 never stores passwords in plain text and cannot retrieve your password — only reset it.
- Infrastructure security: hu77's servers are hosted in data centres with physical access controls, 24/7 monitoring, and redundant network infrastructure.
- Incident response: In the event of a confirmed personal data breach that poses a risk to player rights, hu77 will notify affected players and take immediate remediation steps. Players are encouraged to report any suspected security issues to [email protected].
While hu77 applies robust security measures, no online platform can guarantee absolute security against all threats. You also bear responsibility for maintaining the security of your own account by keeping your password confidential and not sharing your account with others.
Your Rights
As a player whose personal data is processed by hu77, you hold the following rights with respect to your data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.
- Right of access: You may request a copy of the personal data hu77 holds about you, along with information about how and why it is being processed.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
- Right to erasure: You may request that we delete personal data we hold about you where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. Note that we may need to retain certain data to comply with legal obligations even after a deletion request.
- Right to restrict processing: You may request that we restrict our processing of your data in certain circumstances — for example, while a rectification request is being verified or while an objection is being assessed.
- Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a machine-readable copy of the data you provided to us.
- Right to object: You may object to processing carried out on the basis of legitimate interests. You also have an absolute right to object to processing for direct marketing purposes at any time.
- Rights related to automated decision-making: If we make any solely automated decisions that produce legal or similarly significant effects on you, you have the right to request human review of that decision. hu77 does not currently make solely automated decisions of this nature in relation to account management.
hu77 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive. We may need to verify your identity before fulfilling a request to ensure we do not disclose data to the wrong person.
Children and Minors
hu77 takes the protection of minors extremely seriously. Our platform is designed, marketed, and operated exclusively for adults who meet the 21+ age requirement. All registration flows include age verification steps, and we reserve the right to request government-issued identification to confirm age at any time.
If hu77 becomes aware that personal data has been collected from a person under the age of 21, that account will be closed immediately, all associated data will be deleted except where retention is required by law to manage the closure, and any real-money deposits will be returned to the payment source. Winnings generated during the underage period will be forfeited in accordance with our Terms and Conditions.
Parents and guardians who are concerned about minors accessing online gambling platforms are encouraged to use internet filtering software and to maintain open conversations with young people about responsible use of the internet and the risks associated with gambling.
Third-Party Links
The hu77 platform may contain references to third-party game studios, payment providers, and sports data sources. While hu77 takes care to work with reputable partners, we have no control over the privacy practices of third-party websites or services that operate independently of the hu77 platform.
This Privacy Policy applies solely to data processed by hu77 in connection with the hu77 platform. It does not apply to third-party websites or services that may be accessible from content or references within the hu77 platform. We encourage you to review the privacy policies of any third-party service you use independently of hu77, including your bKash, Nagad, Rocket, or Upay accounts.
Policy Updates
hu77 may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When we make material changes to this policy, we will notify registered players via email (to the address on your account) and display a notice on the hu77 platform for a reasonable period before the changes take effect.
The effective date at the top of this policy indicates when the current version came into force. We encourage you to review this Privacy Policy periodically. Continued use of the hu77 platform following notification of a policy update constitutes your acceptance of the revised terms. If you do not accept the changes, you may request account closure and withdrawal of your balance before the new policy takes effect.
Archived versions of previous Privacy Policy documents are available upon request by emailing [email protected] with the subject "Previous Privacy Policy Version".
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way hu77 handles your personal data, please contact our support team through any of the channels below. All privacy-related enquiries are handled with strict confidentiality.
- Email: [email protected] — for data rights requests, please use the subject line "Data Rights Request"
- WhatsApp: +880 1700 000000 (WhatsApp only, available 8 AM – 12 AM BST / UTC+6)
- Live Chat: Available 24/7 on every page of the hu77 platform
We aim to acknowledge all privacy enquiries within 24 hours and to provide a substantive response within 30 days of receiving a valid, verifiable request. Where a request is particularly complex or we have received a high volume of requests, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it.