hitbet Privacy Policy

When you register for, access, or use the hitbet platform, we collect personal information that is necessary to deliver our services, comply with applicable legal obligations, and maintain the safety and integrity of our platform. The categories of personal data we collect are as follows:

Registration & Identity Data

When you create a hitbet account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to establish and manage your account, verify your identity, and communicate with you about your account activity.

Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) programme, we may request and retain copies of government-issued identification documents such as your National ID card, passport, or driving licence. We may also request proof of address (such as a utility bill or bank statement dated within the past 90 days) and proof of ownership of your payment method (such as a screenshot of your bKash or Nagad account). These documents are processed securely and accessed only by authorised compliance personnel.

Financial & Transaction Data

We record all deposits, withdrawals, and wagers made on your hitbet account, including the amounts in Bangladeshi Taka (BDT), timestamps, and the payment method used. This data is essential for account management, fraud prevention, and regulatory compliance. Payment method details such as bKash wallet numbers, Nagad account references, or masked card numbers may be stored for the purpose of processing withdrawals to a verified payment source.

Technical & Usage Data

When you visit or use the hitbet platform, we automatically collect certain technical information including your IP address, browser type and version, device type, operating system, screen resolution, referring URL, pages visited, time spent on pages, and session timestamps. This data helps us maintain platform security, detect fraudulent access, and improve the user experience.

Communications Data

If you contact the hitbet support team via email or live chat, we retain records of those communications, including the content of your messages and our responses, for quality assurance and dispute resolution purposes.

hitbet uses the personal data we collect for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are as follows:

• Account Management: To create, maintain, and close your hitbet player account; to process deposits and withdrawals; to apply bonuses and promotional offers; and to communicate important account-related updates to you.
• Identity Verification: To verify that you meet the eligibility requirements for using hitbet — particularly the 18+ age requirement and the requirement that you are not a restricted person — and to comply with our KYC and AML obligations.
• Fraud Prevention & Platform Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct. This includes automated monitoring of betting patterns and transaction behaviour.
• Customer Support: To respond to your enquiries, resolve disputes, and investigate complaints. Support communications are retained to ensure accountability and consistent service quality.
• Personalisation: To tailor your experience on the hitbet platform — for example, by surfacing games or promotions that are relevant to your play history and stated preferences, subject to your consent where required.
• Marketing & Promotions: Where you have given your consent, to send you promotional offers, bonus notifications, and news about new games or features at hitbet. You may withdraw your marketing consent at any time by contacting support or adjusting your account communication preferences.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable law, including responding to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.
• Platform Improvement: To analyse aggregated usage data to understand how players use the hitbet platform and to identify areas for technical improvement, new feature development, and content optimisation.

hitbet will only process your personal data on a valid legal basis. The legal bases we rely on include: performance of our contract with you; compliance with a legal obligation; our legitimate interests in operating a safe and commercially viable platform; and, where required, your freely given consent.

hitbet does not sell, rent, or otherwise trade your personal data to third parties for their own commercial purposes. However, in order to deliver our services effectively and comply with our legal obligations, we do share certain data with trusted third-party partners operating in specific, limited capacities:

• Payment Processors: When you make a deposit or request a withdrawal, relevant transaction data is shared with your chosen payment provider — such as bKash, Nagad, Rocket, Upay, or your bank — solely for the purpose of processing that specific transaction. These providers handle your data under their own privacy frameworks and regulatory obligations.
• Game Providers: hitbet offers games from third-party providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. Your player session data (such as a session token, player ID, and game history) may be shared with these providers to facilitate gameplay. Game providers are contractually prohibited from using your data for purposes beyond game delivery and fairness auditing.
• Identity Verification Services: We may use third-party KYC and identity verification platforms to assist with document review and age/identity verification. These providers process your KYC documents under strict data processing agreements and are not permitted to retain your data beyond the verification purpose.
• Analytics Providers: Aggregated and anonymised usage data may be shared with analytics service providers to help us understand platform performance. This data cannot be used to identify individual players.
• Legal & Regulatory Authorities: We are required by law to share certain information with regulatory bodies, law enforcement agencies, and courts when lawfully requested. Such disclosures are made only to the extent required by applicable law and are logged internally for accountability.

All third parties with whom hitbet shares personal data are required to implement appropriate technical and organisational security measures to protect that data, and to use it only for the specific purposes for which it was shared. hitbet maintains data processing agreements with all relevant third-party processors in accordance with applicable data protection standards.

The hitbet website uses cookies and similar tracking technologies to enable certain functionality, improve platform performance, and — where you have given your consent — personalise your experience. A cookie is a small text file placed on your device by a website you visit. It allows the website to recognise your device on subsequent visits and store certain preferences or session information.

hitbet uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the hitbet website to function correctly. They enable core features such as maintaining your login session, processing your deposits securely, and remembering your language and currency preferences. These cookies cannot be disabled without significantly impairing your use of the platform.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors use the hitbet website — such as which pages are visited most frequently and whether users encounter error messages. This data is used exclusively to improve platform performance and reliability.
• Functionality Cookies: These cookies remember choices you have made on the hitbet platform — such as your preferred game categories or notification settings — to provide a more personalised experience on your next visit.
• Marketing & Targeting Cookies: Where you have explicitly consented, these cookies track your browsing activity to deliver relevant promotional content. You may withdraw your consent for marketing cookies at any time.

Most web browsers allow you to control cookie settings through the browser's settings menu. You can choose to block all cookies, accept only certain types, or delete existing cookies at any time. Please note that blocking strictly necessary cookies may prevent you from logging in to your hitbet account or completing transactions. Blocking analytics or functionality cookies will not affect your access to core services but may result in a less personalised experience.

hitbet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold:

Once the applicable retention period has expired, hitbet will securely delete or anonymise your personal data so that it can no longer be associated with your identity. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical or analytical purposes without affecting your privacy rights.

hitbet stores personal data on secure servers. Data belonging to players registered in Bangladesh is primarily stored and processed within data centre facilities that implement physical, technical, and administrative security controls appropriate to the sensitivity of the information held. Where data is processed by third-party service providers located outside Bangladesh, hitbet ensures that adequate data protection safeguards are in place, including contractual data processing agreements.

hitbet takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our key security measures include:

• SSL/TLS Encryption: All data exchanged between your browser or mobile device and the hitbet platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when visiting hitbet.im — this confirms that your connection is secure.
• Encrypted Data Storage: Sensitive data including KYC documents and payment method references are stored in encrypted form in our databases. Encryption keys are managed using hardware security modules (HSMs) and are rotated periodically.
• Access Controls: Access to personal data within hitbet's systems is restricted to authorised personnel who require it to perform their job functions. Role-based access controls and multi-factor authentication are enforced for all staff accessing production data systems.
• Fraud Detection Systems: hitbet employs automated fraud detection and anomaly-detection tools that monitor login activity, transaction patterns, and session behaviour in real time. Unusual activity triggers alerts for manual review by our security team.
• Regular Security Audits: Our platform undergoes periodic security assessments including vulnerability scanning and penetration testing conducted by qualified security professionals. Findings are remediated promptly in accordance with a risk-based prioritisation framework.
• Incident Response: In the event of a data security incident that poses a risk to your personal data, hitbet will notify affected players without undue delay, providing details of the nature of the incident and the steps taken to address it.

Despite our best efforts, no method of electronic transmission or storage is 100% secure. While hitbet maintains robust security controls, we cannot guarantee absolute security of data transmitted over the internet. You are also responsible for keeping your account credentials safe. Use a strong, unique password for your hitbet account and do not share it with anyone.

As a hitbet player, you have the following rights with respect to your personal data. These rights are not absolute and may be subject to limitations imposed by applicable law or overriding legitimate interests, but hitbet is committed to honouring them to the fullest extent possible:

• Right of Access: You have the right to request a copy of the personal data that hitbet holds about you. We will provide this information within a reasonable timeframe following a verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly through your account settings, or contact support for assistance with more complex corrections.
• Right to Erasure: In certain circumstances — for example, where your data is no longer necessary for the purpose for which it was collected, or where you withdraw your consent and no other legal basis applies — you have the right to request that hitbet delete your personal data. Please note that this right does not apply where we are required by law to retain the data (such as KYC and financial records subject to regulatory retention obligations).
• Right to Restrict Processing: You may request that hitbet restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and we are considering your objection.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on our legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where hitbet relies on your consent as the legal basis for processing (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact the hitbet data team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 3 business days and aim to fulfil it within 30 days. In complex cases, we may require additional time, in which case we will notify you of the extension and the reason for it.

We may need to verify your identity before processing a privacy rights request. This is to ensure that we do not disclose or delete personal data at the request of someone who is not the account holder.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hitbet handles your personal data, please do not hesitate to get in touch. Our support and data team is available around the clock, including during Eid holidays and national observances, to assist you.

Primary Contact: [email protected] — For all privacy rights requests, data correction queries, consent withdrawal requests, and security incident reports.

When contacting us about a privacy matter, please include your registered hitbet username, the email address associated with your account, and a clear description of your request or concern. This will allow us to locate your records and respond to you as quickly as possible.

hitbet reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players by email and display a prominent notice on the platform. The effective date shown at the top of this document will always reflect the date of the most recent revision. We encourage you to review this page periodically to stay informed about how hitbet protects your data.

By continuing to use the hitbet platform after a revised Privacy Policy has been published, you acknowledge that you have read and accepted the updated policy. If you do not accept the revised terms, please discontinue use of the platform and contact support to arrange account closure.

This Privacy Policy should be read in conjunction with the hitbet Terms & Conditions and Responsible Gaming policy, which together form the full agreement governing your relationship with our platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.