Your Privacy Matters at hi666

1 About This Policy

hi666 ("the Platform", "we", "us", "our") operates an online sports betting and casino gaming platform primarily serving players located in Bangladesh. We are committed to protecting the privacy and personal data of every player who registers and uses the hi666 platform. This Privacy Policy sets out in clear, plain English the types of personal data we collect, the purposes for which we use that data, the parties with whom we may share it, how long we retain it, and the rights that every player holds with respect to their own data.

This Policy applies to all personal data collected through the hi666 website at hi666.io, through any mobile-optimised interface or progressive web application associated with the hi666 brand, and through any direct communications between you and the hi666 support team (including emails, live chat transcripts, and support tickets). This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly.

The effective date of this version of the Policy is January 2026. The version number and effective date are always displayed at the top of this document. In the event of any conflict between this Policy and a prior version, the current version shall prevail.

2 Personal Data We Collect

hi666 collects several categories of personal data from players during registration, account use, and verification processes. The table below summarises the categories and examples of data collected in each category.

hi666 does not intentionally collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, health data, or political opinions. If any such data is incidentally included in documents you submit for verification purposes, it will be stored solely for KYC compliance and not processed for any other purpose.

3 How We Collect Your Data

3.1 Data You Provide Directly

The majority of personal data that hi666 holds about you is data that you provide to us directly. This includes the information you enter during the account registration process, the identity and address documents you submit during KYC verification, the financial details you provide when adding a payment method, and the messages you send to our support team.

3.2 Data Collected Automatically

When you access and use the hi666 platform, certain technical and usage data is collected automatically through the use of cookies, server log files, and similar tracking technologies. This includes your IP address, device fingerprint, browser configuration, and behavioural data such as which games you play and how you navigate the site. This automated data collection is necessary to operate the platform securely, detect fraud, and optimise your experience.

3.3 Data From Third Parties

hi666 may receive personal data about you from third-party sources in specific circumstances. These include payment service providers (such as bKash, Nagad, Rocket, and Upay) who confirm transaction details; identity verification services that cross-check your submitted documents against public databases; and fraud prevention partners who flag suspicious activity patterns associated with your device or IP address. Data received from third parties is used only for the purposes described in this Policy.

4 Why We Use Your Personal Data

hi666 uses your personal data for the following defined purposes. We do not use your data for any purpose other than those listed below without first obtaining your explicit consent or unless otherwise required by law.

• Account creation and management: To register your account, maintain your player profile, and administer your account settings and preferences.
• Identity verification and age checks: To confirm that you are who you say you are, that you are at least 21 years of age, and that you are eligible to use the platform.
• Transaction processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank accurately and securely.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, account takeovers, and other security threats.
• Legal and regulatory compliance: To fulfil our anti-money laundering (AML) obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required by applicable law.
• Customer support: To respond to your queries, resolve complaints, and provide assistance with account issues through our support channels.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling behaviour, to enforce self-exclusion requests, and to apply deposit or time limits requested by the player.
• Platform improvement: To analyse usage patterns and platform performance data in order to improve the user experience, optimise game offerings, and fix technical issues.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and news about hi666 services where you have opted in to receive such communications. You may opt out at any time.

5 Legal Basis for Processing

Every instance of personal data processing by hi666 rests on one of the following legal bases:

• Contract performance: Processing that is necessary to fulfil our contractual obligations to you as a registered player — including processing transactions, managing your account, and providing access to games.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for hi666's legitimate business interests — including fraud prevention, platform security, and internal analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing that relies on your freely given, specific, and informed consent — principally marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing based on consent given before withdrawal.

6 Sharing Your Personal Data

6.1 Payment Service Providers

hi666 shares the financial data necessary to process your transactions with the relevant payment service providers — bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. Each provider processes this data in accordance with their own privacy policy and applicable financial regulations.

6.2 Identity Verification Services

To carry out KYC checks, hi666 works with third-party identity verification providers who may cross-reference your submitted documents and personal details against public and commercial databases. These providers are bound by strict confidentiality obligations and are not permitted to use your data for any purpose other than the verification task.

6.3 Game Providers

When you access games provided by third-party studios — including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe — limited technical and session data may be shared with the relevant provider to load and operate the game. Game providers do not receive your full identity data.

6.4 Fraud Prevention and Security Partners

hi666 uses third-party fraud detection and cybersecurity services that process technical data (such as IP addresses and device fingerprints) to identify suspicious activity. These services operate under data processing agreements that restrict their use of your data to fraud prevention purposes only.

6.5 Legal and Regulatory Authorities

hi666 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by law, court order, or binding regulatory instruction. hi666 will, where legally permitted, notify affected players of such disclosures.

6.6 Business Transfers

In the event that hi666 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, personal data held by hi666 may be transferred to the successor entity as part of that transaction. Affected players will be notified of any such transfer and of any changes to this Policy that result from it.

7 Cookies & Tracking Technologies

hi666 uses cookies and similar tracking technologies on the hi666.io platform to deliver a functional, personalised, and secure user experience. The following categories of cookies are in use:

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the hi666 platform. hi666 does not use third-party advertising cookies or retargeting pixels.

8 Data Retention

hi666 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The table below sets out the standard retention periods for each category of personal data.

At the end of the applicable retention period, personal data is either securely deleted from hi666 systems or irreversibly anonymised such that it can no longer be associated with any individual player. Anonymised, aggregated data may be retained indefinitely for statistical and business analysis purposes.

9 Data Security

hi666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• 256-bit SSL/TLS encryption on all data transmissions between your browser or device and the hi666 servers;
• Encryption at rest for sensitive data stored on hi666 infrastructure, including identity documents and financial records;
• Access controls and role-based permissions ensuring that hi666 staff can only access personal data that is necessary for their specific job function;
• Two-factor authentication (2FA) available to players for account login, and enforced internally for all hi666 staff accessing personal data systems;
• Regular security audits and penetration testing conducted by qualified third-party security professionals;
• Intrusion detection systems and real-time monitoring for unusual access patterns or potential breaches;
• Segregated player funds held in accounts separate from hi666 operational funds, reducing financial risk in the event of a platform incident;
• Staff training on data protection and privacy obligations conducted on a regular basis.

Notwithstanding the above measures, no method of electronic transmission or storage is completely secure. While hi666 uses commercially reasonable means to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, hi666 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

10 Your Data Rights

As a registered player on hi666, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with your request. hi666 will acknowledge all data rights requests within 5 business days and will fulfil them within 30 calendar days of receipt.

hi666 will not charge a fee for processing data rights requests submitted in good faith. Where requests are manifestly unfounded or excessive, hi666 reserves the right to charge a reasonable administrative fee or decline to respond, providing written reasons for the refusal.

11 Children & Minors

hi666 employs active age verification procedures as part of the KYC process to prevent underage access. Any parent or guardian who becomes aware that a minor has registered on the hi666 platform should contact us immediately at [email protected] so that appropriate action can be taken without delay.

12 Third-Party Services & Links

The hi666 platform may contain references to third-party game providers and payment partners. While hi666 carefully selects its third-party partners and requires them to operate under data processing agreements consistent with this Policy, hi666 is not responsible for the privacy practices of third-party entities. Players who interact directly with a third-party service (for example, when opening a bKash wallet or using a bank's online portal) are subject to that third party's own privacy policy.

hi666 does not embed third-party social media widgets, advertising pixels, or affiliate tracking scripts on the platform that would transmit your personal data to external parties without your knowledge. All third-party integrations are limited to those necessary for game delivery, payment processing, and fraud prevention, as described in Section 6 of this Policy.

13 Updates to This Policy

hi666 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made — particularly changes that affect your rights or the categories of data we collect — hi666 will notify registered players via email and/or a prominent in-platform notification at least 7 days before the changes take effect.

The current version number and effective date are always displayed at the top of this document. The version history of this Policy is available on request. Continued use of the hi666 platform following the effective date of any updated Policy constitutes acceptance of the revised terms. If you do not agree with a material change, your remedy is to close your account and cease using the platform.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how hi666 has handled your personal data, please contact our Data Support team. All enquiries are handled in English and our team aims to respond within one business day during normal operating hours (Bangladesh Standard Time, UTC+6).

hi666 takes all privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you have the right to escalate the matter through appropriate legal channels available in your jurisdiction.