hi17 Privacy Policy

Registration and Identity Data

When you create an account on hi17, we collect the information you provide during registration. This includes your full legal name, date of birth, mobile phone number, email address, and your preferred payment method details. This data is required to create and administer your player account and to verify that you meet the minimum age requirement of 18 years.

KYC Verification Documents

As part of our Know Your Customer (KYC) process — which is mandatory before your first withdrawal — hi17 may collect copies of government-issued identity documents such as your National ID Card (NID), passport, or birth certificate. Where applicable, we may also request proof of ownership of your payment method, such as a screenshot showing your registered bKash or Nagad mobile number.

KYC documents are stored securely and accessed only by authorised personnel for the specific purposes of identity verification, fraud prevention, and Anti-Money Laundering (AML) compliance. They are not used for any marketing or profiling purpose.

Financial Transaction Data

hi17 records all deposits, withdrawals, and in-platform transactions associated with your account. This includes transaction amounts in Bangladeshi Taka (৳), timestamps, payment method references (e.g., bKash transaction IDs, Nagad reference numbers), and transaction status. This data is required for payment processing, dispute resolution, and regulatory compliance.

Gameplay and Betting Data

We record the bets you place, the games you play, the outcomes of those bets and games, and your account balance history. This data is used to settle bets accurately, detect unusual or fraudulent activity, and provide you with a complete account statement on request.

Technical and Device Data

When you access hi17 via a web browser or mobile device, we automatically collect certain technical information. This includes your IP address, device type, browser version, operating system, screen resolution, and general geographic location (country/region level — not precise GPS coordinates). This data is used for security monitoring, fraud detection, and platform optimisation.

Communication Data

If you contact hi17 via live chat, email, or any other support channel, we retain a record of that communication. This includes the content of your messages and any attachments you provide. Communication records are used for customer service purposes and may be reviewed in the event of a dispute or complaint.

hi17 uses the personal data we collect only for the purposes described below. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your consent or having a clear legal basis to do so.

Platform Operation

The primary use of your personal data is to operate the hi17 platform — to create and manage your account, process your deposits and withdrawals, settle your bets, provide access to casino games, and deliver customer support. Without this data, we simply cannot provide the services you have registered for.

Verification and Compliance

hi17 uses identity and KYC data to verify that you are at least 18 years of age and are who you claim to be. This is not optional — it is a fundamental obligation we take seriously to protect both players and the integrity of the platform. We also use transaction data to meet our Anti-Money Laundering (AML) obligations and to detect and prevent fraud.

Security and Fraud Prevention

Technical data such as IP addresses, device identifiers, and login timestamps are used to detect suspicious activity, identify potential account takeovers, and prevent the use of automated tools or bots on the platform. Where suspicious activity is detected, we may temporarily restrict account access while an investigation is conducted.

Service Improvement

Aggregated, anonymised gameplay and usage data helps hi17 understand how players interact with the platform — which game categories are most popular, which features are underused, and where technical performance can be improved. This data is anonymised before analysis and is never used to profile individual players for commercial purposes.

Marketing Communications

If you have opted in to marketing communications during registration or via your account settings, hi17 may send you promotional emails or in-platform notifications about new games, seasonal promotions (such as BPL, IPL, Eid, or Pohela Boishakh offers), and platform updates. You can unsubscribe from marketing communications at any time by updating your preferences in your account settings or by contacting support.

Legal and Regulatory Obligations

In certain circumstances, hi17 may be required to disclose your personal data to comply with a legal obligation, court order, or regulatory requirement. In such cases, hi17 will disclose the minimum amount of data necessary to satisfy the obligation and will notify you where it is legally permissible to do so.

hi17 operates with a network of trusted third-party service providers who help us deliver a safe and high-quality platform. In some cases, these providers may process your personal data on our behalf. Below we describe who these parties are and why we share data with them.

Payment Processors

To process your deposits and withdrawals, hi17 works with payment service providers including bKash, Nagad, Rocket, Upay, and card networks Visa and Mastercard. When you initiate a financial transaction, the relevant transaction data (amount, your account reference, and payment method details) is shared with the appropriate processor. These providers are independently regulated and maintain their own data protection standards.

Game Software Providers

Games on the hi17 platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. When you play a game from one of these providers, technical session data (such as game round IDs, bet amounts, and outcomes) may be transmitted to the provider's servers for the purpose of game operation and result certification. These providers do not receive your personally identifiable registration data.

Identity Verification Services

hi17 may use third-party KYC and identity verification services to assist with document validation. Any KYC documents shared with such services are processed under strict data processing agreements that prohibit secondary use of your data.

Legal and Regulatory Authorities

hi17 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, to investigate suspected fraud, money laundering, or other illegal activity, or to protect the rights and safety of our players and staff.

Data Processing Agreements

All third-party service providers who process personal data on behalf of hi17 are required to enter into data processing agreements that bind them to use the data only for the specified purpose, to maintain appropriate security standards, and to delete the data when it is no longer required for that purpose.

hi17 uses cookies and similar technologies to ensure the platform functions correctly, to keep your session secure, and to understand how players use the site so we can continuously improve it. This section explains what cookies we use and why.

What Are Cookies?

Cookies are small text files that a website places on your device when you visit it. They allow the site to remember information about your visit — such as your login session, language preference, or recently viewed pages — so you do not have to re-enter that information every time. Cookies cannot carry viruses and cannot access files on your device beyond what the website itself places there.

Third-Party Analytics

hi17 may use anonymised analytics tools to measure platform performance. Any data collected via analytics is aggregated and does not identify individual players. We do not use third-party advertising networks or behavioural ad-targeting cookies on hi17.app.

Managing Cookies

You can control cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is stored. Please be aware that disabling essential session cookies will prevent you from logging into your hi17 account, as they are required for secure authentication.

hi17 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.

Security Measures

• SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard TLS protocols.
• Encrypted Storage: Sensitive data fields including passwords and payment references are stored using strong cryptographic hashing and encryption at rest.
• Access Controls: Access to player data is restricted to authorised hi17 personnel who require it for their specific job function. Access is logged and audited.
• Secure Infrastructure: hi17's platform is hosted on infrastructure with firewall protection, intrusion detection systems, and regular security patching.
• Two-Factor Authentication: hi17 supports two-factor authentication (2FA) on player accounts as an optional security enhancement. We strongly encourage all players to enable 2FA.

Data Retention

hi17 retains your personal data for as long as your account is active and for a reasonable period thereafter as required by our legal and regulatory obligations. Specifically:

• Account and identity data is retained for the lifetime of your account plus a minimum of 5 years following account closure, in accordance with standard AML record-keeping requirements.
• Financial transaction records are retained for a minimum of 5 years from the date of the transaction.
• Support communication logs are retained for 2 years from the date of the last interaction.
• Anonymised, aggregated analytics data may be retained indefinitely as it contains no personally identifiable information.

Data Breach Response

In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, hi17 will notify affected players without undue delay. Our security team operates a documented incident response procedure to contain, assess, and remediate any security incident as rapidly as possible.

As a player on hi17, you have a number of rights in relation to the personal data we hold about you. hi17 is committed to honouring these rights promptly and without unnecessary barriers.

• Right of Access: You may request a copy of the personal data hi17 holds about you at any time. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly via your account settings.
• Right to Erasure: You may request the deletion of your personal data. We will comply where there is no overriding legal basis for retaining it (for example, AML record-keeping obligations may require us to retain certain data for a defined period even after account closure).
• Right to Restrict Processing: In certain circumstances, you may ask hi17 to restrict the processing of your data — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your data for marketing purposes at any time. You can exercise this right by updating your notification preferences in your account settings or by contacting our support team.
• Right to Withdraw Consent: Where hi17 processes your data on the basis of your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

How to Exercise Your Rights

To exercise any of the rights listed above, please contact the hi17 support team via live chat. For written requests, you may also send an email to [email protected] (plain text — not a clickable link). We may ask you to verify your identity before processing a request to ensure that we do not disclose personal data to an unauthorised third party.

The hi17 platform is intended exclusively for adults aged 18 and above. The collection and processing of personal data from minors is not permitted under any circumstances. Our registration process includes a date-of-birth declaration, and our KYC process includes mandatory identity document verification to confirm age eligibility before any withdrawal is processed.

If a parent or guardian believes that their child has created an account on hi17, they should contact our support team immediately via live chat or at [email protected]. hi17 will investigate promptly and, if confirmed, will close the account, void all bets, return any deposited funds via the original payment method, and securely delete all associated personal data without undue delay.

hi17 also encourages the use of parental control software and internet filtering tools for households where minors may have access to internet-enabled devices. Responsible gaming starts with access control at the household level.

hi17 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When a material change is made, we will notify registered players via their registered email address or via an in-platform notification before the change takes effect.

The effective date at the top of this page will be updated each time a revision is published. Your continued use of hi17 following notification of a change constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data hi17 holds about you, please reach out to our support team. We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 30 days.

Support is available 24/7 via live chat on hi17.app. For written enquiries, contact us at: [email protected] — displayed as plain text only; not a clickable link.