hitbet Privacy Policy

1. Data Controller

hitbet operates the platform at hitbet.onl and acts as the data controller in respect of all personal data collected through the platform. As data controller, hitbet determines the purposes and means of processing your personal data. All privacy-related enquiries, access requests, correction requests, erasure requests, and complaints should be directed to our support team at [email protected]. We will acknowledge your request within 5 business days and aim to resolve it within 30 calendar days.

2. Personal Data We Collect

hitbet collects personal data in the following categories, depending on your interaction with the platform:

hitbet does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data except where strictly required for age verification or fraud prevention purposes and only to the minimum extent necessary.

3. How We Use Your Personal Data

hitbet processes your personal data for the following specific purposes, each supported by a lawful basis:

• Account creation and management: Processing your registration, verifying your identity, and maintaining your Account in line with our Terms & Conditions. Lawful basis: contractual necessity.
• Payment processing: Handling deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; detecting fraudulent transactions; reconciling financial records. Lawful basis: contractual necessity and legal obligation.
• Age verification and KYC compliance: Confirming that players are aged 21 or above in accordance with our responsible gaming obligations. Lawful basis: legal obligation.
• Fraud prevention and security: Monitoring account activity for suspicious patterns, detecting duplicate accounts, and investigating potential money laundering. Lawful basis: legitimate interests and legal obligation.
• Customer support: Responding to your queries, resolving disputes, and processing complaints. Lawful basis: contractual necessity and legitimate interests.
• Promotional communications: Sending you information about bonuses, promotions, and seasonal offers (such as BPL season promotions, Eid special offers, and Pohela Boishakh campaigns) via SMS or email, where you have opted in to receive such communications. Lawful basis: consent. You may withdraw consent at any time by contacting support.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game selection, user experience, and platform performance. Lawful basis: legitimate interests.
• Legal compliance: Retaining records to meet applicable financial, anti-money-laundering, and regulatory reporting obligations. Lawful basis: legal obligation.

hitbet will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

4. Data Sharing and Third-Party Disclosure

hitbet does not sell your personal data. We share personal data with third parties only where it is necessary to deliver our services or comply with legal requirements. Categories of recipients include:

• Payment service providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, City Bank, BRAC Bank, Visa, and Mastercard receive the minimum financial data required to process your transactions. These providers operate under their own privacy policies and are contractually bound to protect your data.
• Identity verification providers: Third-party KYC and age-verification services may receive identity documents you submit during the verification process. These providers are contractually bound to use your data solely for verification purposes.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data for game performance monitoring. These providers do not receive your name, contact details, or financial data.
• Fraud prevention and analytics providers: Anonymised technical and usage data may be shared with security and analytics platforms to detect fraud, monitor platform integrity, and analyse aggregate user behaviour.
• Law enforcement and regulatory authorities: hitbet will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction.

All third-party data processors engaged by hitbet are subject to contractual data processing agreements requiring them to implement appropriate technical and organisational security measures and to process personal data only on hitbet's documented instructions.

5. Cookies and Tracking Technologies

hitbet uses cookies and similar client-side tracking technologies on the platform. The following cookie categories are in use:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Remember your preferences such as language settings and game lobby layout. These improve your experience but are not essential to platform operation.
• Analytics cookies: Collect anonymised data about page visits, session duration, and feature usage to help us understand how players interact with the platform. No personally identifiable information is transmitted in analytics events.
• Security cookies: Used to detect and prevent fraudulent account activity, suspicious login attempts, and automated bot interactions.

hitbet does not use third-party advertising or retargeting cookies. Your browsing activity on hitbet is not shared with advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will affect platform functionality.

6. Data Retention

hitbet retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of your Account plus a minimum of 5 years following Account closure, to meet anti-money-laundering and financial record-keeping obligations.
• Transaction data: Retained for a minimum of 5 years from the date of each transaction.
• Communications and support records: Retained for a minimum of 2 years from the date of the most recent interaction.
• Technical and usage data: Retained in anonymised or aggregated form for up to 24 months for analytical purposes.

Where personal data is no longer required and no legal retention obligation applies, hitbet will securely delete or irreversibly anonymise that data. Requests for early erasure are considered on a case-by-case basis against applicable legal retention obligations.

7. Data Security

hitbet implements a layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• TLS 1.2 / TLS 1.3 encryption for all data in transit between your browser or mobile device and hitbet servers.
• Encryption of sensitive data fields (including payment credentials and identity document references) at rest using AES-256 or equivalent standards.
• Role-based access controls ensuring that only authorised hitbet personnel with a demonstrated operational need can access personal data.
• Regular security assessments and vulnerability testing of the platform and its infrastructure.
• Automated anomaly detection systems monitoring for unusual login patterns, account takeover attempts, and large-value transaction irregularities.
• Secure disposal procedures for physical and digital records no longer required under retention schedules.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, hitbet will notify affected individuals without undue delay in accordance with applicable requirements.

8. Your Rights Over Your Personal Data

As a hitbet player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 calendar days.

• Right of access: You may request a copy of all personal data hitbet holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete. For account details, you can also update many fields directly in your Account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may prevent full erasure.
• Right to restriction of processing: You may request that hitbet restrict processing of your data in certain circumstances, for example where you contest the accuracy of the data or object to a specific processing purpose.
• Right to data portability: You may request that hitbet provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes. Where you object to marketing, we will stop processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

hitbet will not charge a fee for responding to a rights request unless the request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may apply.

9. Children and Underage Players

hitbet's platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you believe that a person under 21 has registered an Account or provided personal data to hitbet, please contact us immediately at [email protected]. Upon confirmation, we will close the relevant Account, delete the associated personal data to the fullest extent permitted by legal obligations, and refund any deposits to the originating payment method where technically possible.

hitbet employs age verification controls at registration and reserves the right to request identity documents at any stage to confirm a player's age. Accounts that cannot be verified as belonging to a person aged 21 or above will be suspended pending resolution.

10. Marketing Communications

hitbet may send you promotional communications — including bonus offers, seasonal campaign announcements (for example, BPL season promotions, Eid special offers, Victory Day promotions, and Pohela Boishakh campaigns), and new game launch notifications — via SMS, email, or in-platform notification, where you have opted in to receive such communications at registration or through your Account settings.

You may opt out of marketing communications at any time by updating your notification preferences in your Account settings or by contacting our support team. Opting out of marketing communications does not affect transactional messages, which hitbet may continue to send as they are necessary for the operation of your Account (for example, deposit confirmations, withdrawal notifications, and security alerts).

11. Links to Third-Party Content

The hitbet platform hosts games developed and operated by third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch and play a game, you interact with software served by that provider's infrastructure. Each provider operates under its own privacy practices. hitbet is not responsible for the data handling practices of game providers in respect of technical data generated during gameplay. hitbet does not transmit your name, email address, or financial data to game providers.

12. Changes to This Privacy Policy

hitbet reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered players via email or through a prominent notice on the platform. The updated Policy will take effect from the date stated at the top of the document. Your continued use of the platform following the effective date of any revision constitutes your acceptance of the updated Policy.

We recommend reviewing this Policy periodically to stay informed about how hitbet protects your information. The current version is always accessible from the footer of every page on hitbet.onl.

13. Contact and Privacy Enquiries

All privacy-related enquiries, requests to exercise your data rights, concerns about data handling practices, or complaints should be directed to hitbet's support team. Our team handles privacy requests with dedicated priority and will acknowledge your message within 5 business days.

Contact email (plain text — not a clickable link): [email protected]

Response language: English. Response time target: within 30 calendar days of receipt. All times referenced are Bangladesh Standard Time (BST, UTC+6).