hhbf Privacy Policy

This Privacy Policy (the "Policy") describes how hhbf ("hhbf", "we", "us", or "our") collects, processes, stores, and protects personal data relating to individuals who access or use the hhbf platform at hhbf.pro (the "Platform"), including all betting, casino, payment, and account services made available to players in Bangladesh.

By registering an account with hhbf or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy applies to all data collected through the Platform, including data submitted during account registration, data generated through your use of games and betting services, data provided when contacting hhbf support, and data collected automatically through cookies and similar technologies.

hhbf collects personal data in the following categories, depending on how you interact with the Platform:

hhbf does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, unless specifically required to do so for identity verification or responsible gaming compliance purposes.

hhbf uses the personal data it collects for the following purposes:

• Account management: To create, maintain, verify, and administer your hhbf player account, including processing deposits, withdrawals, and bonus allocations denominated in Bangladeshi Taka (৳ BDT).
• Identity and age verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in accordance with our obligations under applicable law and our internal Know Your Customer (KYC) procedures.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in the hhbf Terms & Conditions.
• Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank, and to process withdrawal requests to your verified payment method.
• Customer support: To respond to your support queries, resolve disputes, investigate complaints, and communicate important account-related notifications.
• Responsible gaming compliance: To monitor betting patterns, apply self-imposed deposit limits and time-outs, and identify potential problem gambling behaviour in order to fulfil our responsible gaming obligations.
• Platform improvement: To analyse aggregate usage data and improve the design, functionality, game selection, and performance of the hhbf Platform.
• Marketing communications: Where you have opted in to receive promotional communications, to send you information about hhbf offers, bonuses, and events relevant to Bangladesh players. You may opt out of marketing communications at any time by contacting support.
• Legal compliance: To meet record-keeping, reporting, and cooperation obligations under applicable law, including anti-money-laundering regulations.

hhbf will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or as otherwise permitted by law.

hhbf processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and hhbf — specifically, to operate your player account and deliver the betting and casino services described in the Terms & Conditions.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including identity verification, anti-money-laundering record-keeping, and responsible gaming obligations.
• Legitimate interests: Processing that is necessary for hhbf's legitimate business interests, including fraud prevention, Platform security, and service improvement — provided those interests are not overridden by your own privacy rights.
• Consent: Processing activities for which hhbf has sought and obtained your explicit, informed consent — primarily, the sending of optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before the withdrawal.

hhbf uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. The categories of cookies used by hhbf are as follows:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences, such as your preferred language and display settings, so you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform. This data helps hhbf identify usability issues and improve the overall experience.
• Security cookies: Used to support fraud detection and prevention functions, including identifying unusual login patterns or suspicious activity associated with your account.

Most web browsers allow you to control cookie settings through the browser's preferences or settings menu. Disabling strictly necessary cookies may prevent certain features of the Platform from functioning correctly. hhbf does not use cookies to track your behaviour across third-party websites.

hhbf does not sell, rent, or trade your personal data to any third party. hhbf may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank receive the payment data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are subject to applicable financial regulations.
• Identity verification providers: Third-party KYC vendors who assist hhbf in verifying the identity, age, and location of players as required by our internal policies.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, PG Soft, and Hacksaw Gaming may receive certain anonymised technical data to support game delivery and RNG audit functions. These providers do not receive personally identifiable player data beyond what is technically required for game delivery.
• IT and hosting providers: Secure cloud infrastructure and hosting providers who store hhbf Platform data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful regulatory request, hhbf may disclose personal data to competent authorities. hhbf will notify affected players of such disclosure where legally permitted to do so.

All third parties who process personal data on hhbf's behalf are contractually required to process such data only for the specified purpose, to maintain appropriate security measures, and to comply with applicable data protection standards. hhbf does not transfer personal data outside of its authorised processing infrastructure without implementing appropriate safeguards.

hhbf implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and hhbf's servers.
• Encryption of sensitive data at rest, including payment details and identity documents.
• Role-based access controls ensuring that only authorised hhbf personnel with a legitimate need can access player personal data.
• Two-factor authentication (2FA) options for player accounts to reduce the risk of unauthorised access.
• Regular security assessments and vulnerability testing of the Platform infrastructure.
• Internal data handling policies and staff training to ensure that all personnel who handle personal data understand their obligations.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, hhbf will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

hhbf retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as set out in this Policy, or as required by applicable law. The following retention guidelines apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years following permanent account closure, to meet anti-money-laundering and financial record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Identity verification documents: Retained for a minimum of five years following account closure or the completion of the KYC process, whichever is later.
• Support communications: Retained for a period of three years from the date of the last interaction, unless the subject matter requires longer retention for legal or dispute resolution purposes.
• Marketing preferences and consent records: Retained until you withdraw consent and for a reasonable period thereafter to demonstrate compliance.
• Technical and usage data: Retained in aggregated or anonymised form for platform analytics purposes indefinitely. Individual-level technical data is retained for up to 12 months.

When personal data is no longer required and the applicable retention period has expired, hhbf will securely delete or anonymise that data so that it can no longer be attributed to you as an individual.

Subject to applicable law, you have the following rights in relation to the personal data that hhbf holds about you:

• Right of access: You may request a copy of the personal data hhbf holds about you and information about how it is being processed.
• Right to rectification: You may request that hhbf corrects any personal data that is inaccurate, incomplete, or out of date. You may also update certain account details directly from within your account dashboard.
• Right to erasure: You may request that hhbf deletes your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations described in Section 8.
• Right to restrict processing: You may request that hhbf restricts the processing of your personal data in certain circumstances, such as while a rectification request is being investigated.
• Right to data portability: Where processing is carried out on the basis of your consent or contractual necessity and is performed by automated means, you may request that hhbf provides your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where that processing is based on hhbf's legitimate interests. hhbf will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to the withdrawal.

To exercise any of these rights, please contact hhbf's support team by email at [email protected]. hhbf will respond to verified requests within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing a data rights request.

The hhbf Platform is strictly intended for adults aged 21 years and above. hhbf does not knowingly collect, process, or retain personal data from any individual under the age of 21. The Platform employs age verification mechanisms at the point of registration to prevent access by persons who do not meet the minimum age requirement.

If hhbf becomes aware that personal data has been collected from an individual who is under the age of 21 without verifiable parental or guardian consent, hhbf will take immediate steps to delete that data and close the associated account. Any winnings or balances accumulated by an underage player will be forfeited in accordance with hhbf's Terms & Conditions.

If you are a parent or guardian and believe that a minor under your care has registered an account with hhbf, please contact our support team immediately at [email protected] so that appropriate action can be taken without delay.

hhbf reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, hhbf will update the effective date displayed at the top of this page. Where practicable and where required by law, hhbf will provide advance notice of significant changes via the Platform or by notification to the email address or mobile number registered on your account.

Your continued use of the hhbf Platform following publication of a revised Privacy Policy constitutes your acknowledgement of the changes and, where applicable, your consent to the updated processing activities described therein. We encourage you to review this Policy periodically to stay informed about how hhbf protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way hhbf handles your personal data, please contact our support team using the details below. hhbf's support team operates 24 hours a day, 7 days a week, in Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected] (plain text — not a clickable link)
• Platform: hhbf.pro
• Response time: We aim to respond to all privacy-related enquiries within 5 business days.