hb33 Privacy Policy

1 Information We Collect

hb33 collects personal data that you provide directly when registering an account, making a deposit or withdrawal, contacting support, or participating in promotions. We also collect certain data automatically when you use the hb33 platform, including device and connection data generated during your session. The following table outlines the main categories of data we collect and the primary purpose for each.

hb33 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers. If you voluntarily disclose such information in a support conversation, it will be used only to address your specific query and will not be stored in your profile.

2 How We Use Your Data

hb33 processes your personal data only where we have a lawful basis to do so. The lawful bases we rely on are: contractual necessity (to deliver the services you have signed up for), legal obligation (to comply with anti-money-laundering, age verification, and other applicable requirements), legitimate interests (to operate and improve our platform, prevent fraud, and ensure security), and consent (for optional marketing communications, which you may withdraw at any time).

Specifically, hb33 uses your personal data to:

• Create and manage your account — verifying your identity, setting up your wallet, and maintaining your account preferences.
• Process transactions — facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card payment methods in Bangladeshi Taka (BDT).
• Deliver gaming services — connecting you to games provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated providers.
• Verify age and identity — confirming you are 18 years of age or older and that your identity documents are authentic, in compliance with our KYC procedures.
• Prevent fraud and money laundering — monitoring transactions and gameplay patterns for indicators of suspicious activity and reporting where legally required.
• Provide customer support — responding to queries submitted via live chat or email at [email protected], including resolving disputes and processing complaints.
• Enforce our Terms & Conditions — detecting breaches such as multi-accounting, bonus abuse, or use of prohibited software.
• Responsible gaming monitoring — tracking usage patterns to identify potentially problematic gambling behaviour and trigger appropriate interventions as described in our Responsible Gaming policy.
• Send service communications — delivering essential transactional notifications (deposit confirmations, withdrawal updates, security alerts) via SMS or email.
• Send marketing communications (with consent only) — informing you of promotions, bonuses, and seasonal offers. You may unsubscribe at any time by contacting [email protected].
• Improve the platform — using anonymised analytics data to understand usage trends and enhance site performance, navigation, and game selection.

hb33 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

3 Data Sharing & Disclosure

hb33 does not sell, rent, or trade your personal data. We share your information only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

• Game providers: Certain game providers (such as Evolution Gaming for live casino or Spribe for crash games) may receive your session identifier and country of access to deliver their games. These providers are contractually prohibited from using this data for any purpose beyond game delivery.
• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, and card payment networks solely to process your deposits and withdrawals. These partners operate under their own privacy policies and security standards.
• Identity verification services: Where third-party KYC or document verification services are used, your identity documents and data points are shared with those providers for the sole purpose of identity verification. Results are returned to hb33 and the documents are not retained by the verification provider beyond their stated retention period.
• Legal and regulatory authorities: hb33 may disclose personal data to law enforcement, financial intelligence units, or regulatory bodies when required to do so by applicable law, court order, or lawful authority. We will notify you of such disclosure where we are legally permitted to do so.
• Fraud prevention networks: In cases of suspected fraud, money laundering, or chargeback abuse, relevant data may be shared with fraud prevention services or shared databases used by the online gaming industry to protect players and operators alike.
• Business transfers: In the event of a merger, acquisition, or sale of hb33 assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. You will be notified of any such transfer.
• IT and hosting providers: hb33 uses trusted third-party cloud infrastructure and hosting providers. These providers process data on our behalf under strict data processing agreements and do not have independent access to your personal data.

4 Cookies & Tracking

hb33 uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and understand how users interact with the site. A cookie is a small text file placed on your device when you visit hb33. Cookies do not contain executable code and cannot harm your device.

hb33 does not use third-party advertising or retargeting cookies. We do not share cookie data with social media platforms or advertising networks. You can control cookies through your browser settings. Note that disabling strictly necessary or security cookies will prevent you from logging in and using the hb33 platform.

5 Data Retention

hb33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years following the date of each transaction.
• KYC and verification documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for two (2) years from the date of the final message in each support thread, to enable dispute resolution.
• Analytics data: Retained in anonymised, aggregated form for up to three (3) years. Raw session logs are deleted within 90 days.
• Marketing preferences: Retained until you withdraw your consent or request deletion, after which they are removed from active marketing lists within 30 days.

When the applicable retention period expires, hb33 will securely delete or irreversibly anonymise the relevant data. If you request deletion of your data before the retention period has expired, hb33 will delete all data that is not subject to a legal obligation to retain, and will restrict processing of any retained data to the minimum necessary to meet that obligation.

6 Data Security

hb33 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, hb33 takes reasonable and proportionate steps appropriate to the nature of the data we hold.

Our security measures include, but are not limited to:

• TLS 1.2+ encryption for all data in transit between your device and the hb33 platform.
• Encryption at rest for sensitive data fields including payment method identifiers and identity document data.
• Role-based access controls (RBAC) ensuring that staff can only access the personal data necessary for their specific role.
• Two-factor authentication (2FA) for all hb33 administrative and operational system access.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• 24/7 security monitoring with automated alerts for anomalous login patterns, unusual transaction volumes, and other indicators of compromise.
• Mandatory privacy and security training for all hb33 personnel with access to personal data systems.
• Incident response procedures covering detection, containment, assessment, notification, and post-incident review in the event of a data breach.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, hb33 will notify affected individuals without undue delay and take immediate steps to mitigate harm. Notification will be sent to the contact details registered on your hb33 account.

7 Your Privacy Rights

As an hb33 account holder, you have a number of rights in relation to the personal data we hold about you. hb33 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights listed below, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered account username or email address for identification purposes.

• Right of access: You may request a copy of the personal data hb33 holds about you, along with information about how it is used, where it came from, and with whom it has been shared. We will respond within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Minor corrections (such as contact number updates) can often be made directly through your hb33 account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where there is no overriding legal basis for continued processing. Note that hb33 may be required to retain certain data for legal compliance purposes even after a deletion request.
• Right to restrict processing: In certain circumstances you may request that hb33 limit how it uses your data — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that hb33 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object to marketing: You may opt out of marketing communications from hb33 at any time by emailing [email protected] with the subject line "Unsubscribe". Withdrawal of marketing consent does not affect your ability to use the hb33 platform.
• Right to withdraw consent: Where hb33 processes your data based on consent (for example, optional analytics cookies or marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

hb33 will not charge a fee for handling a rights request unless it is manifestly unfounded or excessive. We may ask you to verify your identity before processing a request to ensure we are dealing with the account holder and not a third party.

8 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or hb33's data practices, please contact the hb33 privacy team at [email protected]. Include your full name, your registered hb33 username or email address, and a clear description of your query. We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days.

If you are not satisfied with hb33's response to a privacy complaint, you have the right to escalate your complaint. hb33 takes all unresolved privacy complaints seriously and will work with you in good faith to reach a resolution. Where an issue cannot be resolved directly, you may seek independent advice or pursue other remedies available to you under the laws of your jurisdiction.

hb33 regularly reviews this Privacy Policy to ensure it accurately reflects our data practices and remains consistent with applicable legal standards. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered account holders through the hb33 platform notice system. We encourage you to review this page periodically to stay informed about how hb33 protects your information.