he777 Privacy Policy — How We Handle Your Data

1 Introduction

he777 is an English-language online betting and casino platform serving players in Bangladesh. We are committed to protecting the privacy and security of every player who entrusts us with their personal information. This Policy has been written in plain, accessible English so that you can understand exactly what we do with your data — not just in legal terms, but in practical terms.

We collect personal data because we are required to by law (for example, to verify your age and identity before processing withdrawals), because it is necessary to fulfil our contract with you (for example, to credit your BDT Account Balance after a bKash deposit), and because it serves our legitimate interest in keeping the platform safe and fraud-free. We do not collect data simply because we can, and we do not use it for purposes beyond those described in this Policy.

This Policy applies to all data collected through the he777 website at https://he777.io, including data collected during registration, account use, KYC verification, payment transactions, customer support interactions, and any marketing communications you have opted into. It does not apply to third-party websites or services that may be linked from the platform, each of which operates under its own privacy terms.

2 Personal Data We Collect

The categories of personal data we collect about you depend on how you interact with the he777 platform. The table below summarises the main data categories, the specific data items within each, and the context in which they are collected.

2.1 Data We Do Not Collect

he777 does not collect or process special category data (sometimes called sensitive personal data) such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (other than liveness check photos required for KYC), genetic data, health data, or data concerning sexual orientation. We do not collect data from social media profiles unless you have explicitly provided it to us.

3 How We Use Your Personal Data

he777 uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your account, maintain your account settings, process login authentication, and communicate account-related updates to you.
• Age and identity verification (KYC): To confirm that you are at least 21 years of age and that your identity matches the payment methods registered to your account, as required before any withdrawal is processed.
• Payment processing: To credit deposits made via bKash, Nagad, Rocket, Upay, Visa, or Mastercard to your BDT Account Balance, and to process withdrawal requests to your verified payment method.
• Anti-money laundering (AML) compliance: To monitor transaction patterns, investigate unusual activity, and report to relevant authorities where legally required.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent betting activity, account takeovers, bonus abuse, and other forms of platform misuse.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling and, where appropriate, to reach out proactively with responsible gaming resources or to enforce account restrictions requested by the player.
• Customer support: To investigate and resolve complaints, answer support queries, and maintain records of your interactions with the he777 support team.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the platform's performance, layout, game selection, and user experience.
• Marketing communications: To send promotional emails, SMS messages, or push notifications about bonuses, new games, and seasonal offers — only to players who have opted in to receive such communications.
• Legal obligations: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and exercise or defend legal claims.

4 Legal Basis for Processing

he777 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and KYC verification — is carried out because it is necessary to deliver the service you have signed up for.
• Legal obligation: Certain processing activities — including AML record-keeping and the retention of transaction histories — are required by applicable law and are carried out to fulfil those obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of our legitimate interests in operating a safe, fair, and commercially viable platform, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications (email, SMS, push notifications) is carried out only where you have given clear, informed consent at registration or subsequently through your account dashboard. You may withdraw this consent at any time.

5 Sharing Your Personal Data

he777 does not sell your personal data. We share personal data only in the circumstances described below, and only to the extent necessary for the specific purpose.

5.1 Payment Service Providers

To process your BDT deposits and withdrawals, he777 shares transaction data — including your account identifier, transaction amount, and payment method details — with the relevant payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard). These providers process your data under their own privacy policies and are contractually prohibited from using it for any purpose other than processing the specific transaction.

5.2 KYC and Identity Verification Partners

he777 uses third-party identity verification services to process KYC documentation. Your identity documents and liveness check photos are transmitted to these providers solely for the purpose of verifying your identity and age. Verification providers are subject to strict data processing agreements and are not permitted to retain your documents beyond the period required to complete the verification.

5.3 Game Content Providers

Game sessions played on he777 — including slots from Pragmatic Play and NetEnt, live casino tables from Evolution Gaming and Ezugi, and crash games from Spribe and Microgaming — are delivered through the providers' own gaming engines. These providers receive a session token and anonymised player identifier for the purpose of delivering and logging the game session. They do not receive your full identity or contact data.

5.4 Regulatory and Law Enforcement Authorities

he777 may disclose personal data to regulatory bodies or law enforcement agencies where required to do so by applicable law, by court order, or where we have a good-faith belief that disclosure is necessary to prevent or investigate fraud, money laundering, or other unlawful activity. We will notify you of such disclosure where legally permitted to do so.

5.5 Professional Advisers

he777 may share personal data with legal counsel, auditors, or other professional advisers in the context of legal proceedings, compliance audits, or corporate transactions, subject to confidentiality obligations.

6 Cookies & Tracking Technologies

he777 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse aggregate usage patterns. The cookies we use fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in during a betting or gaming session and security cookies that help detect fraudulent login attempts. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings, preferred games, and notification settings so the platform can personalise your experience across sessions.
• Analytics cookies: Collect anonymised data about how players interact with the platform — which pages are visited most, how long sessions last, which games are opened — to help us improve the platform. No personally identifiable information is included in analytics data sets.
• Marketing cookies: Used only if you have opted in to marketing communications. These cookies help us understand which promotions led to a deposit or game session so we can improve the relevance of future offers.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the he777 platform.

7 Data Security

he777 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The security measures in place include:

• 256-bit SSL/TLS encryption on all data in transit between your device and the he777 servers;
• AES-256 encryption for personal data and financial data stored in the he777 database;
• Two-factor authentication (2FA) available to all players for account login;
• Role-based access controls ensuring that only authorised he777 personnel can access personal data, and only to the extent required for their specific job function;
• Regular third-party penetration testing and vulnerability scanning of the platform infrastructure;
• Automated fraud and anomaly detection systems monitoring for suspicious account activity in real time;
• Secure, access-controlled data centre hosting with physical and logical security controls.

While he777 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for keeping your he777 login credentials confidential and for notifying us immediately at [email protected] if you suspect unauthorised access to your account.

8 Data Retention

he777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods for the main data categories are as follows:

Upon expiry of the applicable retention period, he777 will securely delete or anonymise the relevant personal data so that it can no longer be associated with an identifiable individual.

9 Your Data Rights

As a player registered on the he777 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact he777 at [email protected] with the subject line "Data Rights Request" and include your registered account username and email address for verification purposes.

• Right of Access: You may request a copy of all personal data he777 holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Contact support with the specific data item and the correct value, and we will update our records within 10 business days.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (for consent-based processing), or where you object to processing on legitimate interests grounds and no overriding interests apply. Note that this right is subject to legal retention requirements — we cannot erase transaction records during the applicable retention period.
• Right to Restrict Processing: You may request that he777 restricts its processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: For data processed on the basis of your consent or contractual necessity, you may request a machine-readable copy of your personal data for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of our legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

10 Children & Minors

he777 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes date-of-birth verification, and KYC verification requires submission of a government-issued identity document confirming the player's age before any withdrawal is approved.

If we become aware that personal data has been collected from an individual under 21, we will immediately close the relevant account, delete the associated personal data to the extent permitted by law, and handle any funds in the account in accordance with our Terms & Conditions and applicable legal requirements.

If you believe that a minor may have registered an account on he777 using false age information, please notify us immediately at [email protected]. We take underage access extremely seriously and will investigate all such reports promptly.

11 Third-Party Links

The he777 platform may contain references to third-party game providers, payment processors, and sports data partners. While he777 takes care to work only with reputable partners, we are not responsible for the privacy practices of third-party websites or services. Each third-party service operates under its own privacy policy, and we encourage you to read those policies before providing personal information to any third-party service.

Links to external websites or services are not endorsements of those services. he777 has no control over and accepts no responsibility for the content, privacy policies, or practices of any third-party website or service accessed from or referenced on the he777 platform.

12 Updates to This Privacy Policy

he777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When we make material changes to this Policy, we will notify registered players by email to the address registered on their account and display a prominent notice on the platform for at least 14 days following the update.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the he777 platform after an updated Policy has been published constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you may request account closure in accordance with the he777 Terms & Conditions.

13 Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern, please contact the he777 data protection team using the details below. All correspondence should be in English.

For general account queries, responsible gaming assistance, or deposit and withdrawal support, please visit our FAQ page or contact the he777 support team directly at [email protected]. For information about your responsible gaming options including self-exclusion and deposit limits, please visit the Responsible Gaming page.