ha77 Privacy Policy
At ha77, your privacy is a core commitment, not an afterthought. This Privacy Policy explains precisely what personal data we collect when you use ha77, how we use it, who we may share it with, and what rights you hold over your information. We encourage every ha77 player in Bangladesh to read this document in full before registering or depositing.
256-Bit SSL Encryption
Every connection to ha77 is protected by industry-standard 256-bit SSL encryption. Your personal details, payment information, and account credentials are secured at every stage of transmission.
Your Data, Your Rights
ha77 players have the right to access, correct, export, and request deletion of their personal data at any time. Submit a request to our support team and we will respond within 30 days.
No Unauthorised Data Selling
ha77 does not sell, rent, or trade your personal data to third-party marketers. Data is only shared with essential service partners under strict contractual data protection obligations.
Transparent Cookie Use
We use cookies strictly for session management, analytics, and platform performance. No third-party advertising cookies are placed without your awareness. Cookie categories and purposes are fully disclosed in Section 6.
Defined Retention Periods
ha77 retains your personal data only for as long as legally required or operationally necessary. Retention schedules are outlined in Section 7 and are reviewed annually to ensure they remain proportionate.
KYC and AML Compliance
Identity verification and anti-money laundering checks are conducted in accordance with standard industry requirements. KYC data is handled with the highest level of confidentiality and stored securely.
1 Data Controller Information
ha77 (operating at ha77.ws) acts as the data controller for all personal information collected through its online casino and sports betting platform. As data controller, ha77 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that processing activities comply with applicable data protection standards.
If you have any questions, concerns, or requests regarding the processing of your personal data, you may contact the ha77 data protection team at any time using the support contact below. All data-related enquiries are handled within 30 calendar days of receipt.
Data Protection Contact: Support team available 24/7 at [email protected] — please use the subject line "Data Privacy Request" for faster routing. This is a plain text address; do not attempt to click it as a link.
2 Personal Data We Collect
ha77 collects personal data through several channels: directly from you when you register and use the platform, automatically through your device and browser interactions, and from trusted third-party verification and payment partners. The categories of personal data we collect are as follows:
2.1 Registration and Identity Data
- Full legal name — as provided during account registration and KYC verification
- Date of birth — collected to verify that you meet the 18+ age requirement
- Email address — used for account communications, transaction notifications, and support
- Bangladesh mobile number — used for OTP-based two-factor authentication and account recovery
- Residential address — collected as part of enhanced KYC where required
- Government-issued ID details — National ID card number, passport number, or driving licence number for identity verification
2.2 Financial and Transaction Data
- Payment method identifiers (bKash account number, Nagad account number, Rocket number, Upay ID, Visa/Mastercard last four digits)
- Deposit amounts, withdrawal amounts, and transaction timestamps
- Account balance history and wagering activity records
- Source-of-funds documentation where requested under enhanced due diligence
2.3 Technical and Usage Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser version
- Session duration, pages visited, features accessed, and click-path data
- Crash game and casino game round history
- Login timestamps and failed login attempts
2.4 Communications Data
- Content of support tickets, live chat transcripts, and email correspondence with the ha77 team
- Survey responses and feedback submissions where voluntarily provided
- Bonus opt-in records and promotional preference settings
Data Minimisation: ha77 applies the principle of data minimisation — we collect only the personal data that is strictly necessary for the purpose for which it is being collected. We do not collect sensitive categories of data (such as health data, biometric data, or political opinions) beyond what may be necessary in limited responsible gaming contexts.
2.5 Summary of Data Categories
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Name, DOB, National ID | Registration form, KYC upload |
| Contact Data | Email, mobile number | Registration form |
| Financial Data | bKash number, transaction history | Payment processor integration |
| Technical Data | IP address, device info | Automatic — server logs |
| Usage Data | Game history, session logs | Automatic — platform analytics |
| Communications Data | Support chat transcripts | Direct submission by user |
3 How We Use Your Data
ha77 uses the personal data we collect for clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected without first seeking your explicit consent. The primary purposes for which ha77 processes personal data are:
- Account creation and management: To register your ha77 account, authenticate your identity at login, and maintain your account in good standing throughout your relationship with us.
- Age and identity verification: To confirm that you are at least 18 years of age and that the information you have provided during registration is accurate and consistent with your submitted documents.
- Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate records of all financial transactions associated with your account.
- Platform delivery and personalisation: To operate the ha77 casino, sports betting, crash game, and slot game services, and to tailor your in-platform experience based on your preferences and activity history.
- Fraud prevention and anti-money laundering: To detect, investigate, and prevent fraudulent activity, money laundering, and any other financially criminal conduct on the ha77 platform, in accordance with standard AML compliance practices.
- Responsible gaming: To monitor wagering patterns and identify players who may be exhibiting signs of problem gambling, so that appropriate support tools or interventions can be offered proactively.
- Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide ongoing assistance via our 24/7 English-language support team.
- Legal compliance: To meet our obligations under applicable laws and regulations, including record-keeping requirements and responses to lawful requests from competent authorities.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your consent to receive such communications. You may withdraw marketing consent at any time.
- Platform improvement: To analyse aggregated, anonymised usage data in order to improve platform performance, fix bugs, and develop new features that better serve ha77 players across Bangladesh.
Marketing Opt-Out: If you no longer wish to receive promotional communications from ha77, you may opt out at any time by contacting [email protected] or by updating your notification preferences within your account dashboard. Opting out of marketing does not affect transactional or security-related communications.
4 Legal Basis for Processing
ha77 processes personal data only where a valid legal basis exists for doing so. The legal bases on which ha77 relies for different categories of processing activity are set out below:
- Contractual necessity: Processing required to perform our contractual obligations to you as a registered ha77 player — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of the contract between you and ha77.
- Legal obligation: Certain processing activities, including KYC identity verification, anti-money laundering checks, and transaction record-keeping, are carried out because ha77 is required to do so under applicable laws and industry standards.
- Legitimate interests: ha77 processes certain data — such as technical usage logs, fraud detection signals, and platform analytics — on the basis of legitimate interests. In each case, ha77 has assessed that these interests are not overridden by your rights and freedoms.
- Consent: Where ha77 relies on your consent as the legal basis for processing (such as for direct marketing communications or the placement of non-essential cookies), you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
5 Sharing of Personal Data
ha77 does not sell, rent, or trade your personal data to any third party. We share personal data with external parties only where strictly necessary and under circumstances that ensure your data remains protected. The categories of recipients with whom ha77 may share your data are:
5.1 Payment Service Providers
To process your deposits and withdrawals, ha77 shares the minimum necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and the relevant card processing networks for Visa and Mastercard. These providers operate under their own privacy policies and are bound by financial industry data protection standards.
5.2 Identity Verification and KYC Partners
ha77 uses trusted third-party KYC verification services to assist in validating identity documents submitted during account registration or enhanced due diligence. These partners process your document data solely for the purpose of verification and are bound by strict confidentiality agreements with ha77.
5.3 Game Content Providers
Game studios and platform providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited session and gameplay data necessary to deliver their games within the ha77 environment. These providers do not receive full identity data and are contractually prohibited from using any shared data for their own marketing purposes.
5.4 Analytics and Platform Infrastructure
ha77 uses third-party infrastructure and analytics service providers to host the platform, monitor performance, and analyse usage trends. These providers act as data processors on ha77's behalf and are bound by data processing agreements that restrict their use of your data to the purposes for which it was shared.
5.5 Regulatory and Law Enforcement Authorities
ha77 may disclose personal data to competent regulatory bodies, law enforcement agencies, or other public authorities where required by applicable law, court order, or where disclosure is necessary to protect the rights, property, or safety of ha77, its players, or the public.
Our Commitment: In all cases of data sharing, ha77 applies the principle of data minimisation — only the minimum data necessary for the specific purpose is shared, and all third-party recipients are subject to appropriate contractual or regulatory data protection obligations before any sharing takes place.
6 Cookies and Tracking Technologies
ha77 uses cookies and similar tracking technologies to operate and improve the platform experience. A cookie is a small text file placed on your device by the ha77 website when you visit it. Cookies help us recognise your device on return visits, maintain your logged-in session, and understand how different areas of the platform are used.
6.1 Cookie Categories Used by ha77
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security (CSRF protection) | Session only |
| Functional | Remembering language preference, display settings, game lobby state | Up to 12 months |
| Analytics | Aggregated, anonymised usage data — page views, feature usage, session depth | Up to 24 months |
| Performance | Load time monitoring, error reporting, CDN optimisation signals | Up to 12 months |
6.2 Managing Your Cookie Preferences
Strictly necessary cookies cannot be disabled as they are essential for the platform to function correctly. For all other cookie categories, you may manage your preferences through your browser settings. Most modern browsers allow you to block, delete, or receive warnings before cookies are placed. Please note that disabling functional or analytics cookies may affect the quality of your experience on ha77.
ha77 does not use third-party advertising cookies or cross-site tracking technologies that profile your behaviour across websites other than ha77.ws.
7 Data Retention Periods
ha77 retains your personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and identity data | Duration of account + 5 years after closure | Legal obligation (AML / KYC records) |
| Financial transaction records | 7 years from transaction date | Legal obligation (financial record-keeping) |
| KYC verification documents | Duration of account + 5 years after closure | Legal obligation |
| Support communications | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Technical and usage logs | Up to 24 months | Legitimate interests (security, fraud prevention) |
| Marketing consent records | Until consent is withdrawn + 1 year | Legal obligation (consent records) |
| Analytics data (anonymised) | Up to 36 months | Legitimate interests (platform improvement) |
When the applicable retention period expires, ha77 will securely delete or anonymise your personal data so that it can no longer be associated with your identity. Where full deletion is not immediately technically feasible (for example, in certain backup systems), ha77 will ensure the data is isolated and protected until it can be securely destroyed.
8 Your Privacy Rights
As an ha77 player, you hold a set of rights with respect to your personal data. ha77 is committed to facilitating the exercise of these rights promptly and without unnecessary obstruction. Your rights include:
- Right of access: You may request a copy of all personal data that ha77 holds about you. We will provide this in a structured, commonly used format within 30 days of receiving a verified request.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
- Right to erasure: You may request that ha77 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests and no overriding legitimate grounds apply. Note that this right may be limited where ha77 is required to retain data under legal obligations.
- Right to restriction of processing: You may request that ha77 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
- Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that ha77 provide your personal data in a machine-readable format suitable for transfer to another service provider.
- Right to object: You have the right to object to processing carried out on the basis of ha77's legitimate interests, including profiling. You also have an absolute right to object to direct marketing processing at any time.
- Right to withdraw consent: Where ha77 relies on your consent as the legal basis for any processing activity, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
To exercise any of the above rights, please contact the ha77 support team at [email protected] with the subject line "Privacy Rights Request". We may need to verify your identity before processing your request. We will respond within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.
No Fees for Standard Requests: ha77 will not charge a fee for processing standard data subject requests. In exceptional circumstances where requests are manifestly unfounded, excessive, or repetitive, a reasonable administrative fee may be applied or the request may be refused — in which case we will explain our reasoning clearly.
9 Data Security Measures
ha77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:
- 256-bit SSL/TLS encryption applied to all data transmitted between your device and ha77's servers, including login sessions, payment transactions, and personal data submissions
- Encrypted data storage for all sensitive data held at rest, including identity documents, payment method identifiers, and account credentials
- Two-factor authentication (2FA) available to all players via OTP sent to their registered Bangladesh mobile number, providing a critical additional layer of account security
- Role-based access controls within the ha77 internal team, ensuring that only authorised personnel with a legitimate operational need can access personal player data
- Regular security audits and penetration testing conducted by qualified third-party security specialists to identify and remediate vulnerabilities before they can be exploited
- Intrusion detection and monitoring systems that continuously monitor ha77 infrastructure for anomalous activity and potential security threats in real time
- Incident response procedures that define ha77's obligations and response timelines in the event of a data breach, including notification to affected players where legally required
While ha77 takes all reasonable and proportionate steps to protect your personal data, no digital platform can guarantee absolute security. You also have a role to play in keeping your account secure: use a strong, unique password for your ha77 account, enable 2FA, never share your login credentials with anyone, and access ha77 only from trusted, secured devices and networks.
Report a Security Concern: If you believe your ha77 account has been compromised or you have identified a potential security vulnerability on our platform, please contact us immediately at [email protected]. Prompt reporting helps us act quickly to protect all ha77 players.
10 Third-Party Services and Links
The ha77 platform may contain references to or integrations with third-party service providers, including game studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi, as well as payment processors such as bKash and Nagad. These third parties operate their own independent platforms, applications, and privacy policies.
ha77 is not responsible for the privacy practices of third-party providers. When you interact with a third-party game interface embedded within ha77 or complete a transaction through a third-party payment processor, that interaction is subject to the third party's own privacy policy. ha77 recommends that you review the relevant privacy documentation of any third-party service you interact with.
ha77 takes reasonable care to engage only with reputable third-party partners who maintain data protection standards consistent with industry norms. All third-party providers with access to any ha77 player data are bound by contractual data processing agreements that impose appropriate data protection obligations.
11 Minors and Privacy Protection
ha77 operates a strict 18+ policy. Our platform is not intended for, directed at, or designed to attract individuals under the age of 18. We do not knowingly collect, store, or process personal data belonging to persons under the age of 18.
During the registration process, ha77 collects date of birth information and may request government-issued identity documents to verify that all players meet the minimum age requirement. Where ha77 discovers or has reasonable grounds to believe that a registered account is operated by a person under the age of 18, the account will be immediately suspended, all personal data associated with the account will be deleted or returned as appropriate, and any funds deposited will be returned to the originating payment method following identity verification.
Parental Guidance: If you believe that a minor in your household has registered on or accessed the ha77 platform, please contact us immediately at [email protected]. We take underage access extremely seriously and will act without delay to close the account and delete associated data.
12 Policy Updates and Contact
12.1 Changes to This Privacy Policy
ha77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, ha77 will publish the revised policy on this page and update the "Last Updated" date at the top of the document. Where changes significantly affect your rights or the way we use your data, we will provide advance notice via your registered email address.
Your continued use of the ha77 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically so that you remain informed about how ha77 protects your personal data.
12.2 Contacting ha77 About Privacy
For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by ha77, please reach out to our support team. We are available 24 hours a day, 7 days a week, including Bangladesh public holidays such as Eid, Victory Day (December 16), and Independence Day (March 26).
Support contact: [email protected] — please mark your email with the subject line "Privacy Policy Enquiry" for the fastest response. This email address is displayed as plain text and is not a clickable link.
Final Note: This Privacy Policy was last reviewed and updated on 1 January 2026. All prior versions of this policy are superseded by this document. ha77 is committed to maintaining the highest practicable standards of data protection for all players across Bangladesh.
Ready to Play at Bangladesh's Premier Casino?
Your data is protected. Your experience is secure. Join thousands of players across Dhaka, Chittagong, Sylhet, and beyond who trust ha77 for cricket betting, live casino, and top-rated slots.