hb33 Privacy
Policy
At hb33, your privacy matters. This Privacy Policy sets out exactly what personal data we collect when you use our platform, how we use it, who we share it with, and the rights you hold over your own information. We are committed to handling your data with transparency and care.
How hb33 Protects Your Data
These six points summarise our core data protection commitments. The full legal text is set out in the sections that follow.
Every connection between your device and hb33.io is protected by 256-bit SSL encryption. Your personal details, payment information, and account credentials are never transmitted in plain text.
hb33 collects only the personal data that is strictly necessary to provide our services, process payments in ৳ BDT, verify your identity, and keep your account secure. We do not collect data speculatively.
hb33 will never sell, rent, or share your personal data with third parties for marketing or advertising purposes. Your information is used solely to operate and improve the hb33 platform.
You have the right to access, correct, or request deletion of the personal data hb33 holds about you. Submit a request at any time by emailing [email protected] and our team will respond within 30 days.
Payment data shared with processors such as bKash, Nagad, Rocket, and Upay is transmitted only as required to complete your transaction. hb33 does not store full card numbers or mobile banking PINs.
hb33 retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy. Account data is retained for a minimum of five (5) years following account closure, in line with our record-keeping obligations.
Introduction
hb33 ("we", "us", "our") operates the online betting and casino platform accessible at hb33.io. This Privacy Policy describes how hb33 collects, uses, stores, and shares personal data relating to individuals ("you", "your") who access or use the hb33 platform, whether as a registered player or as a visitor browsing the website.
We take data privacy seriously. Our approach is to collect the minimum personal data required to provide a safe, functional, and compliant service to players across Bangladesh, including those located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.
By creating an hb33 account, making a deposit, or otherwise using the hb33 platform, you acknowledge that you have read and understood this Privacy Policy. This policy is incorporated by reference into the hb33 Terms & Conditions. Where a conflict exists between this policy and the Terms & Conditions on a data-specific matter, this Privacy Policy prevails.
Plain-English Summary: This Privacy Policy tells you what data we collect about you, why we need it, who we might share it with, and what rights you have. If you have any questions, email us at [email protected] at any time.
Personal Data We Collect
hb33 collects personal data across several categories depending on your interaction with the platform. The table below summarises the categories of data we may collect and why.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, passport number | Account registration; age verification (21+); KYC compliance |
| Contact Data | Email address, mobile phone number, home address | Account communication; support; transaction notifications |
| Financial Data | bKash/Nagad/Rocket mobile number used for transactions, transaction reference IDs, deposit and withdrawal history in ৳ BDT | Payment processing; fraud prevention; withdrawal verification |
| Verification Documents | Scanned copies of government-issued ID, proof of address documents | KYC compliance; age and identity verification |
| Usage Data | IP address, device type, browser, pages visited, session duration, bet history, game activity logs | Platform security; fraud detection; service improvement; responsible gaming monitoring |
| Communications Data | Support chat transcripts, emails sent to [email protected], customer feedback | Customer support; dispute resolution; quality assurance |
| Preference Data | Preferred games, responsible gaming tool settings, marketing opt-in status | Personalisation; responsible gaming tool management |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where health-related information is voluntarily disclosed in the context of a responsible gaming request (for example, a self-exclusion application citing a gambling problem).
How We Collect Your Data
hb33 collects personal data through the following channels:
- Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or responding to a survey or promotion.
- Automated collection: Technical data collected automatically when you visit hb33.io, including IP address, browser type, operating system, referring URL, pages visited, time spent on pages, and device identifiers. This data is collected via server logs and cookies (see Section 7).
- Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners following a deposit or withdrawal. hb33 receives only the data necessary to confirm the transaction and credit your account — we do not receive your full mobile banking credentials.
- Identity verification providers: Where hb33 uses a third-party identity verification service to conduct KYC checks, we may receive a verification result and a risk score from that provider.
- Fraud prevention services: hb33 may receive risk indicators and flagging information from third-party fraud prevention systems to protect the integrity of the platform.
How We Use Your Data
hb33 uses your personal data for the following purposes. We will not use your data for any purpose that is incompatible with the purposes listed below without first notifying you and, where required, obtaining your consent.
- Account creation and management: To register your account, verify your identity and age (21+), and manage your account settings throughout the relationship.
- Service delivery: To process bets, settle winnings, manage your ৳ BDT balance, and deliver the full range of hb33 games including cricket betting, live casino, slots, and arcade titles.
- Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and linked bank accounts, and to maintain accurate transaction records in Bangladeshi Taka.
- Security and fraud prevention: To monitor account activity for signs of fraud, money laundering, account takeover, and prohibited conduct as defined in the hb33 Terms & Conditions.
- Responsible gaming: To monitor gambling patterns and flag potential problem gambling behaviour, to administer deposit limits, time-out periods, and self-exclusion requests, and to contact players who may be at risk.
- Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support service.
- Legal and compliance obligations: To maintain records required by applicable law and to cooperate with lawful requests from competent authorities.
- Platform improvement: To analyse anonymised or aggregated usage data to understand how players interact with hb33 and to improve our games, features, and user experience.
- Marketing communications (opt-in only): To send promotional emails, bonus offers, and event notifications — but only to players who have expressly opted in to receive such communications. You may opt out at any time by emailing [email protected].
Legal Basis for Processing
hb33 processes your personal data on one or more of the following legal bases:
- Contract performance: Processing necessary to register your account, deliver betting and gaming services, process payments, and fulfil our obligations under the hb33 Terms & Conditions.
- Legal obligation: Processing necessary to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and record-keeping duties.
- Legitimate interests: Processing carried out for purposes that are in hb33's or a third party's legitimate interests, provided those interests are not overridden by your rights. Legitimate interests include fraud prevention, platform security, responsible gaming monitoring, and service improvement through aggregated analytics.
- Consent: Where no other legal basis applies — in particular for optional marketing communications — hb33 will request your explicit consent before processing. You may withdraw consent at any time without affecting the lawfulness of prior processing.
If you wish to understand the specific legal basis applied to any particular processing activity, or if you wish to object to processing conducted on the basis of legitimate interests, please contact [email protected].
Data Sharing and Disclosure
hb33 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive only the transaction data necessary to process your deposit or withdrawal.
- Identity and age verification providers: Third-party KYC service providers receive the identity documents you submit in order to verify your age and identity. These providers are bound by strict data processing agreements.
- Fraud prevention and security services: Anonymised or pseudonymised risk indicators may be shared with fraud prevention platforms to protect the hb33 platform and its player community.
- Game technology providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your account identifier and game session data necessary to deliver their games. These providers process data as independent data controllers under their own privacy policies and are not granted access to your full identity profile.
- Professional advisers: Lawyers, auditors, and accountants who are bound by professional confidentiality obligations may access data as needed in connection with their services.
- Law enforcement and regulators: hb33 will disclose personal data to competent authorities when required to do so by law, court order, or other legal process.
- Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of hb33's assets, your personal data may be transferred as part of that transaction. We will notify registered players by email in advance of any such transfer taking effect.
No marketing data sales: hb33 will never share your personal data with third-party advertisers, data brokers, or affiliate marketers for their own marketing purposes. Any such use of your data is expressly prohibited under our data sharing agreements.
Cookies and Tracking Technologies
hb33.io uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience on the platform. The following types of cookies may be set when you visit hb33.io:
- Strictly necessary cookies: These cookies are essential for the website to function correctly. They enable core features such as session management, account login state, and security tokens. These cookies cannot be disabled without rendering the platform non-functional.
- Functional cookies: These cookies remember your preferences — such as your preferred language (English) and responsible gaming settings — so that you do not need to re-enter them on each visit.
- Analytics cookies: hb33 uses anonymised analytics data to understand how players navigate the platform, which games are most popular, and where technical issues may occur. This data is used exclusively to improve the hb33 service and is not linked to your personal identity.
- Security cookies: These cookies help hb33 detect and prevent fraudulent account activity, including credential stuffing, session hijacking, and suspicious login patterns.
hb33 does not use third-party advertising cookies, retargeting pixels, or social media tracking cookies. Your browsing activity on hb33.io is not shared with any advertising network.
Most web browsers allow you to manage cookie preferences through their settings. Disabling strictly necessary cookies may prevent you from logging into your hb33 account or using certain platform features.
Data Security
hb33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption on all data in transit between your device and hb33 servers.
- Encryption at rest for sensitive data fields including identity documents, national ID numbers, and financial reference data.
- Access controls: Personal data is accessible only to hb33 personnel and authorised service providers who have a documented need to process the data for a specified purpose. All staff with data access are subject to confidentiality obligations.
- Multi-factor authentication for internal hb33 systems that store or process player personal data.
- Regular security assessments including vulnerability scanning and penetration testing of the hb33 platform infrastructure.
- Incident response procedures: In the event of a data breach that is likely to affect your rights, hb33 will notify affected players by email to the address on file without undue delay and will take immediate steps to contain the breach.
While hb33 takes all reasonable steps to protect your data, no internet-based system can be guaranteed to be 100% secure. You are responsible for keeping your hb33 account password and login credentials confidential. If you believe your account has been compromised, contact [email protected] immediately.
Data Retention
hb33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our record-keeping obligations. The following retention periods apply as a general guide:
- Active account data (identity, contact, financial, preference): Retained for the duration of your account plus a minimum of five (5) years following account closure.
- Transaction records (deposit and withdrawal history in ৳ BDT): Retained for a minimum of five (5) years from the date of each transaction.
- KYC and verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant KYC process, whichever is later.
- Customer support communications: Retained for three (3) years from the date of the communication, unless the communication relates to a dispute or legal matter, in which case it is retained until the matter is fully resolved plus an additional two years.
- Marketing preference records (opt-in/opt-out logs): Retained for the duration of the account relationship plus two (2) years to demonstrate consent history.
- Server logs and usage data: Retained for a maximum of twelve (12) months in identifiable form, after which they are anonymised or deleted.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.
Your Data Rights
As a player on the hb33 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please email [email protected] with the subject line "Data Rights Request" and a description of your request.
- Right of access: You may request a copy of the personal data hb33 holds about you. We will respond within 30 days of receiving a valid request.
- Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For identity data, we may require supporting documentation.
- Right to erasure ("right to be forgotten"): You may request that we delete your personal data where we no longer have a lawful basis to retain it. Note that this right is subject to our legal and regulatory retention obligations — we cannot delete data that we are required by law to keep, such as transaction records and KYC documentation.
- Right to restrict processing: You may request that we temporarily halt processing of your data while a rectification or erasure request is under review.
- Right to data portability: You may request a copy of the personal data you provided to us in a structured, commonly used, machine-readable format (such as CSV or JSON), where processing is based on your consent or on a contract.
- Right to object: You may object at any time to processing carried out on the basis of legitimate interests. hb33 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent: Where processing is based on your consent — for example, for marketing communications — you may withdraw your consent at any time by emailing [email protected]. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.
hb33 will verify your identity before processing any data rights request to protect against unauthorised access. We aim to respond to all data rights requests within 30 calendar days. If your request is complex or high in volume, we may extend this period by a further 30 days and will notify you of the extension.
Children and Minors
The hb33 platform is strictly intended for adults aged 21 years and above. hb33 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not create an account, make a deposit, or place a bet on hb33.io.
If hb33 discovers that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, void all bets and bonuses, return any real-money deposits through the original payment method where possible, and permanently delete the personal data in question from our systems.
If you believe that a person under the age of 21 has registered on hb33.io using your payment details or personal information, please contact [email protected] immediately so that we can investigate and take appropriate action.
Parents and guardians who are concerned about a minor's access to online gambling platforms are encouraged to use parental control software to restrict access to gambling websites. hb33 fully supports these protective measures.
Third-Party Links and Game Providers
The hb33 platform may contain links to third-party websites or integrate games provided by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This Privacy Policy applies only to data collected and processed by hb33 directly.
hb33 is not responsible for the privacy practices of third-party game providers or any external websites linked from the platform. When you play a game provided by a third-party studio, that studio may process session data as an independent data controller under its own privacy policy. We encourage you to review the privacy policy of any third-party service with which you interact.
hb33 does not embed third-party social media plugins, advertising widgets, or external tracking scripts on hb33.io. Any data collected on hb33.io is collected solely by hb33 and its approved service providers.
Amendments to This Privacy Policy
hb33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by email to the address on file and will display a prominent notice on the hb33 platform for a reasonable period prior to the changes taking effect.
The "Last updated" date at the top of this document indicates when this Privacy Policy was most recently revised. We encourage you to review this policy periodically to stay informed about how hb33 handles your personal data.
Your continued use of the hb33 platform following the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. If you do not accept a proposed amendment, you should cease using the platform and contact [email protected] to request account closure and the return of any undisputed real-money balance.
Contact Us & Complaints
If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a complaint about how hb33 has handled your personal data, please contact our support team using the details below. We take all privacy concerns seriously and will investigate and respond to every complaint.
- Email: [email protected] (plain text — not a clickable link)
- Subject line for data rights requests: "Data Rights Request"
- Subject line for privacy complaints: "Privacy Complaint"
- Support hours: 24 hours a day, 7 days a week, including all public holidays
- Response time: We aim to acknowledge all privacy-related contacts within 24 hours and to provide a substantive response within 30 calendar days.
- Timezone: Bangladesh Standard Time (BST, UTC+6)
We are committed to resolving privacy concerns promptly and fairly. If you remain dissatisfied with our response to your complaint after engaging with our support team, you may wish to seek advice from a qualified legal adviser in your jurisdiction.
Ready to Play at hb33?
Your privacy is protected. Now explore everything hb33 has to offer — from live cricket betting to top-rated slots and arcade games, all in Bangladeshi Taka.