hi17 Privacy Policy

1 Who We Are

hi17 ("we", "us", "our", "the Platform") operates an online casino and sports betting platform accessible at https://hi17.io, serving players primarily located in Bangladesh. hi17 is the data controller responsible for the personal information collected through the platform.

For any privacy-related queries, data subject requests, or complaints, you may contact hi17's data team at the email address provided in Clause 15 of this policy. All correspondence should be directed in English for efficient processing. Our support team operates on Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week.

hi17 is committed to handling your personal data with the highest standard of care, consistent with our obligations under applicable data protection law and our internal data governance framework.

2 Data We Collect

hi17 collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarises the principal categories of data collected:

hi17 does not collect special category data (such as biometric data, health information, or racial/ethnic origin) unless specifically required for identity verification and only with your explicit consent.

3 How We Collect Your Data

hi17 collects personal data through several distinct channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or submitting a complaint.
• Automated technologies: Technical data collected automatically when you access the hi17 platform, including IP address, device identifiers, browser fingerprint, and session logs generated via cookies, server logs, and similar tracking technologies.
• Third-party identity verification providers: Where you submit identity documents for KYC verification, data may be cross-referenced with third-party identity verification services to confirm the authenticity of documents and the accuracy of the information provided.
• Payment service providers: Transaction reference data shared by payment processors including bKash, Nagad, Rocket, Upay, and banking partners, strictly as required to reconcile deposits and withdrawals on your account.
• Fraud prevention and analytics partners: Aggregated or anonymised signals from fraud detection tools used to identify suspicious account or payment activity on the platform.

hi17 does not purchase personal data from data brokers or third-party marketing lists. All data collected relates directly to your use of the hi17 platform.

4 Legal Basis for Processing

hi17 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to enter into or perform the contract between hi17 and the player — including account registration, payment processing, and the delivery of betting and gaming services.
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC/AML obligations, fraud prevention duties, and responding to lawful requests from competent authorities.
• Legitimate interests: Processing necessary for hi17's legitimate business interests, including platform security, fraud detection, responsible gaming monitoring, and improving the quality of our services — where these interests are not overridden by your data protection rights.
• Consent: Where processing is based on your freely given, specific, and informed consent — principally in respect of direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

5 How We Use Your Data

hi17 uses the personal data it collects for the following purposes:

• Creating and managing your hi17 player account, including identity and age verification (21+ requirement).
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported payment methods.
• Delivering sports betting markets, casino games, live dealer tables, slots, and all associated platform features.
• Detecting, preventing, and investigating fraudulent activity, account abuse, money laundering, and other prohibited conduct as defined in the hi17 Terms and Conditions.
• Monitoring responsible gaming indicators, enforcing account-level limits, processing cooling-off requests, and managing self-exclusion arrangements.
• Providing customer support and resolving account disputes, complaints, and queries submitted to our support team.
• Complying with applicable legal obligations, including responding to lawful requests from Bangladeshi authorities or other competent regulators.
• Sending transactional and account-related notifications such as deposit confirmations, withdrawal updates, security alerts, and changes to Terms or this Privacy Policy.
• Sending promotional offers, bonus notifications, and marketing communications where you have provided valid consent to receive them.
• Analysing aggregated, anonymised platform usage data to improve game offerings, platform performance, and the overall user experience for Bangladeshi players.

hi17 does not use automated decision-making that produces legal or similarly significant effects on players, except as required to comply with anti-fraud and AML obligations, in which case decisions are subject to human review upon request.

6 Sharing Your Data

hi17 does not sell your personal data to any third party for commercial gain. Data may be shared with third parties only in the following limited circumstances:

• Payment processors: Financial data is shared with bKash, Nagad, Rocket, Upay, and banking partners strictly as required to process your deposit and withdrawal transactions.
• Identity verification providers: Identity data may be shared with certified KYC/AML service providers to perform document authentication and fraud screening. These providers process data on behalf of hi17 under strict data processing agreements.
• Game content providers: Technical session data (such as game session identifiers and wager amounts) may be shared with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi solely to deliver and settle game rounds.
• Fraud prevention and security services: Anonymised or pseudonymised technical data may be shared with fraud detection platforms to protect the integrity of the hi17 platform and its players.
• Legal and regulatory authorities: hi17 will disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required or permitted by applicable law, including in response to lawful court orders or government requests.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by hi17 may access relevant personal data under strict confidentiality obligations in the course of their engagement.

7 Cookies & Tracking Technologies

hi17 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit hi17. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the operation of the hi17 platform. These cookies enable core functions such as session management, account security, and fraud prevention. They cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Collect anonymised data about how visitors interact with the hi17 platform — such as pages visited, session duration, and navigation paths — to help us improve site performance and the player experience.
• Functional cookies: Remember your account preferences, such as language settings, and tailor certain aspects of the platform experience to your previous interactions.
• Marketing cookies: Used where you have provided consent to receive personalised promotional content. These cookies track your interaction with hi17 promotions and help us deliver relevant offers.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to access certain platform features. Clearing cookies may also log you out of your hi17 account.

hi17 does not use tracking technologies to build profiles of users that are shared with third-party advertising networks for general commercial advertising purposes.

8 Data Retention

hi17 retains personal data for as long as is necessary to fulfil the purposes outlined in this policy, or for the periods required or permitted by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with hi17, plus a minimum of five (5) years following account closure. This retention period reflects standard AML and financial record-keeping obligations.
• Transaction and payment data: Retained for a minimum of five (5) years from the date of the relevant transaction, in accordance with financial compliance requirements.
• Communications and support records: Retained for up to three (3) years from the date of the relevant interaction, or longer if required in connection with an ongoing dispute or legal matter.
• Technical and log data: Retained for up to twelve (12) months for security and fraud analysis purposes, after which it is anonymised or deleted.
• Marketing preference data: Retained until you withdraw consent or request deletion, subject to a reasonable suppression period to prevent accidental re-contact.

After the applicable retention period has elapsed, personal data is securely deleted or anonymised in a manner that prevents re-identification. hi17 conducts periodic reviews of retained data to ensure that records no longer needed are disposed of promptly.

9 Security Measures

hi17 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the hi17 platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock indicator in your browser address bar when using hi17.
• Encrypted data storage: Sensitive personal and financial data stored on hi17's servers is encrypted at rest using robust encryption standards.
• Access controls: Access to personal data within hi17's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Multi-factor authentication: Administrative access to hi17's internal data management systems requires multi-factor authentication to prevent unauthorised internal access.
• Regular security audits: hi17 conducts periodic security assessments of its platform infrastructure and internal data processing systems to identify and remediate vulnerabilities.
• Incident response: hi17 maintains a data breach response procedure. In the event of a confirmed data breach that poses a risk to your rights, hi17 will notify affected players in a timely manner consistent with applicable notification obligations.

10 Your Data Rights

As a player on the hi17 platform, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, contact hi17 support using the details in Clause 15:

• Right of access: You have the right to request a copy of the personal data hi17 holds about you. hi17 will respond to verified data access requests within a reasonable timeframe.
• Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. For most account details, you can update your information directly within your account settings.
• Right to erasure: You may request that hi17 delete the personal data it holds about you. This right is not absolute — hi17 may be required to retain certain data for legal compliance purposes even after an erasure request is received. hi17 will inform you of any data that cannot be deleted and the reason for retention.
• Right to restriction of processing: In certain circumstances, you may request that hi17 restrict the processing of your personal data — for example, while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or a contract, you may request that hi17 provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to object: You may object to the processing of your personal data where hi17 relies on legitimate interests as the legal basis. hi17 will cease processing unless compelling legitimate grounds can be demonstrated that override your interests.
• Right to withdraw consent: Where processing is based on consent (principally marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

hi17 will acknowledge all data rights requests within 7 business days and aim to fulfil requests within 30 days. Where a request is complex or numerous, this period may be extended by a further 30 days, with prior notice provided to you.

11 Children & Minors

The hi17 platform is strictly intended for adults aged 21 years or older. hi17 does not knowingly collect personal data from any individual under the age of 21. The collection of personal data from minors is not permitted under any circumstances.

hi17 operates a rigorous age verification process at registration and throughout the KYC lifecycle. Any account found to be registered by a person under the age of 21 will be immediately suspended, all associated wagers voided, and the account permanently closed.

If you are a parent or guardian and believe that a minor has registered an account with hi17, please contact our support team immediately at [email protected]. hi17 will investigate the matter urgently and take all necessary steps to close the account and prevent further underage access.

12 Third-Party Links

The hi17 platform may contain references to or display content from third-party game providers, including but not limited to Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Game content delivered within the hi17 platform environment may be subject to the privacy practices of the relevant game studio in addition to this policy.

hi17 is not responsible for the privacy practices, content, or security of any third-party website, application, or service that is not part of the hi17 platform. This policy applies solely to the hi17 platform at https://hi17.io and does not extend to any third-party destination.

Players are encouraged to review the privacy policies of any third-party providers whose services they access in connection with their hi17 account.

13 Marketing Communications

hi17 may send you promotional communications about bonuses, new game releases, cricket and sports betting offers, seasonal promotions (including Eid, Pohela Boishakh, and BPL season specials), and other platform news — provided that you have given your consent to receive such communications at registration or at a later point through your account settings.

Marketing communications from hi17 may be delivered by the following channels, subject to your stated preferences:

• Email to your registered email address
• SMS to your registered mobile number
• In-platform notifications when you are logged into your hi17 account

You may unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from hi17
• Updating your communication preferences within your account settings
• Contacting hi17 support at [email protected] with a request to opt out

Opting out of marketing communications will not affect the delivery of transactional notifications (such as deposit confirmations, withdrawal updates, or security alerts), which are sent as part of your account service and are not marketing in nature.

14 Amendments to This Policy

hi17 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or our data processing practices. The effective date at the top of this policy will be updated each time a material change is made.

Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — hi17 will provide advance notice to registered players via email notification or a prominent in-platform announcement before the changes take effect.

For minor or clarificatory amendments that do not substantively alter your rights or hi17's obligations, the updated policy will be published on this page without separate prior notice. Your continued use of the hi17 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

Previous versions of this Privacy Policy are retained for reference purposes and may be provided upon request to hi17 support.

15 Contact & Complaints

For any privacy-related queries, data subject access requests, consent withdrawals, or complaints regarding hi17's handling of your personal data, please contact the hi17 data team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy Request" or "Data Rights" in the subject line of your email for efficient routing.
• Response language: English
• Operating hours: 24 hours a day, 7 days a week
• Time zone: Bangladesh Standard Time (BST, UTC+6)

When submitting a data rights request, please include your registered username and a clear description of your request. Identity verification may be required before hi17 can process requests to access, correct, or delete personal data, to ensure that data is not disclosed to or acted upon at the request of an unauthorised party.

If you are dissatisfied with hi17's response to a privacy complaint, you may escalate the matter through hi17's formal complaints process. Details of the escalation process are available upon request from the support team.

This Privacy Policy was last reviewed and updated on 1 January 2026. The version published on the hi17 website at any given time is the version in force.