ha77 Privacy Policy

1. Introduction

ha77 ("we", "us", "our") operates the ha77 online casino platform (the "Platform") and is the data controller in respect of personal data collected through the Platform. This Privacy Policy ("Policy") explains how we collect, use, disclose, and safeguard information about you when you access or use the Platform, including when you register an account, make deposits or withdrawals using bKash, Nagad, Rocket or other supported payment methods, place wagers, or contact our support team.

By using the Platform, you consent to the collection and use of your information as described in this Policy. If you do not agree with the terms of this Policy, please discontinue your use of the Platform. We may update this Policy periodically; we will post the revised Policy on this page with an updated effective date. Continued use of the Platform after the posting of an updated Policy constitutes your acceptance of the changes.

2. Information We Collect

ha77 collects personal data in three primary ways: information you provide to us directly, information generated automatically when you use the Platform, and information we receive from third-party payment providers and identity verification services. The categories of data we collect are as follows.

• Registration and identity data: full name, date of birth, nationality, residential address, email address, and mobile phone number provided when you create your ha77 account. This data is required to verify your identity and satisfy our KYC obligations.
• Financial data: payment method identifiers (such as your bKash or Nagad mobile wallet number), transaction amounts, deposit and withdrawal records, and bank or card details where used. We do not store full card numbers — card payments are processed through PCI-compliant third-party gateways.
• Technical and device data: IP address, device type, operating system, browser type and version, screen resolution, referring URL, and session duration. This data is collected automatically each time you access the Platform and is used for security, fraud prevention, and service optimisation.
• Gaming activity data: game history, wagering amounts, win and loss records, bonus usage, session times, and responsible gaming tool settings (such as deposit limits or self-exclusion status). This data is necessary to operate your account correctly and to comply with responsible gaming obligations.
• Communications data: records of any messages exchanged between you and ha77 support, including live chat transcripts, email correspondence, and any feedback or complaint you have submitted. We retain these records to manage your queries effectively and to maintain service quality standards.

3. How We Use Your Information

ha77 uses your personal data only for legitimate purposes that are necessary to provide you with the services you have requested, to comply with our legal obligations, or to protect the security and integrity of the Platform. We do not process your data for any purpose that is incompatible with the purposes listed below.

• Account creation and management: to register your account, verify your identity, process your KYC documentation, and maintain the accuracy of your account records throughout your time as a ha77 player.
• Payment processing: to process deposits and withdrawals through your selected payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa or Mastercard), to detect and prevent payment fraud, and to maintain transaction records as required by applicable law.
• Service delivery and improvement: to provide you with access to games, betting markets, bonuses, promotions, and all other features of the Platform; to personalise your experience where permitted; and to analyse aggregate usage patterns so that we can improve the Platform for all players.
• Legal and regulatory compliance: to satisfy our anti-money laundering (AML) obligations, to respond to lawful requests from regulatory or law enforcement authorities, to enforce our Terms and Conditions, and to defend legal claims brought against ha77.
• Customer support and communications: to respond to your support queries, to send you service-related notifications (such as deposit confirmations, withdrawal status updates, security alerts, and responsible gaming reminders), and to provide you with promotional communications where you have opted in to receive them.

4. Sharing Your Information

ha77 does not sell your personal data. We share your information only in the limited circumstances described below, and only with recipients who are bound by appropriate data protection obligations.

• Payment service providers: we share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, and other supported payment processors to execute your deposit and withdrawal requests. These providers operate under their own privacy policies and are independently responsible for their processing of your data.
• Identity verification providers: we share identity and document data with KYC verification partners to validate your identity and age as required by our responsible gaming and AML obligations. These partners are bound by strict data processing agreements.
• Regulatory and law enforcement authorities: we may disclose your personal data to competent regulatory or law enforcement authorities where we are required to do so by applicable law, court order, or binding legal process. We will notify you of any such disclosure where we are legally permitted to do so.
• Technical service providers: we use third-party service providers for hosting, analytics, fraud detection, and customer support infrastructure. These providers act as data processors under our instruction and are prohibited from using your data for their own purposes.

5. Payment Data and Financial Privacy

ha77 takes the security of financial data with particular seriousness. When you make a deposit using bKash, Nagad, Rocket, or Upay, your mobile wallet number is recorded for transaction matching, fraud detection, and the enforcement of our one-account-per-person policy. When you use Visa or Mastercard, card details are processed directly by our PCI DSS-compliant payment gateway and are not stored on ha77 servers. ha77 retains records of transaction amounts, dates, and outcomes as required by applicable financial regulations.

ha77 will never ask you to share your full bKash PIN, Nagad PIN, online banking password, or card CVV number with our support staff. If you receive any communication purporting to be from ha77 that asks for this information, do not respond and report it to [email protected] immediately. This is a security protocol to protect all players from phishing and social engineering attacks.

6. Cookies and Tracking Technologies

ha77 uses cookies and similar tracking technologies to make the Platform function correctly and to improve the user experience. A cookie is a small text file stored on your device when you visit the Platform. We use three categories of cookies.

• Essential cookies: required for the Platform to function. These include session management cookies, authentication tokens, and security cookies. You cannot opt out of essential cookies as they are strictly necessary for the services you have requested.
• Analytics cookies: help us understand how players navigate and use the Platform, which pages are visited most frequently, and where technical problems occur. This data is aggregated and anonymised wherever possible and is used solely to improve the Platform.
• Preference cookies: remember your account preferences, such as language settings and display options, so you do not need to re-enter them each time you visit. You may disable preference cookies in your browser settings, though doing so may affect the Platform's functionality.

7. Data Retention

ha77 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law. For financial transaction records, we are required to retain data for a minimum of five years following the closure of your account to comply with anti-money laundering regulations. For communications records, we retain data for two years after your last interaction with our support team.

When your personal data is no longer required for any lawful purpose, we will securely delete or anonymise it. Where full deletion is not immediately possible (for example, because data is stored in backup archives), we will isolate the data from further active processing until deletion becomes possible. You may request early deletion of non-legally-required data by contacting [email protected], subject to our legal retention obligations.

8. Your Rights Over Your Data

As a ha77 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 days. We may need to verify your identity before processing a request to protect against unauthorised access to another person's data.

• Right of access: you may request a copy of all personal data that ha77 holds about you, together with information about how and why we process it. We will provide this in a structured, commonly used format.
• Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you may ask us to correct or complete it. Where the inaccurate data has been shared with third parties, we will notify those parties of the correction where reasonably practicable.
• Right of erasure: you may ask us to delete personal data that we hold about you in circumstances where continued retention is no longer necessary, where you have withdrawn consent and there is no other legal basis for processing, or where we have processed data unlawfully. This right is subject to our legal retention obligations and cannot override them.
• Right to object: you may object to our processing of your personal data where that processing is based on legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: where our processing of your data is based on your consent (for example, for marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

9. Security Measures

ha77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls that limit staff access to data on a need-to-know basis, regular security audits and penetration testing, and multi-factor authentication requirements for administrative systems.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ha77 will notify affected users without undue delay and will take all appropriate remediation steps. You can help protect your account by using a strong, unique password and by enabling two-factor authentication from your account security settings.

10. Children's Privacy

The ha77 Platform is strictly intended for adults aged 21 and above. ha77 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21, we will delete that data immediately and close the associated account. If you believe that a minor has registered on the Platform, please contact us at [email protected] so we can investigate and take prompt action.

11. Changes to This Privacy Policy

ha77 may revise this Privacy Policy at any time. When we make material changes, we will update the effective date shown at the top of this page and post the revised Policy on the Platform. Where changes are significant, we will also notify registered users by email or by an in-platform notice. Your continued use of the Platform after the posting of a revised Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed of how we protect your data.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy concern, please contact the ha77 data support team. Email: [email protected] (plain text only — not a clickable link). We aim to respond to all privacy-related enquiries within 5 business days and will always acknowledge receipt of your request within 48 hours.