hb22 Privacy
Policy

1. Data We Collect

When you register for and use an hb22 account, we collect personal data across several categories. The data collected depends on how you interact with the platform — at a minimum, registration data is required to open an account; additional data may be collected as you use specific features or complete identity verification.

Registration and identity data

• Full legal name as it appears on your government-issued identification.
• Date of birth, collected to verify that you meet the minimum age requirement of 18 years.
• Email address, used as your primary account identifier and communication channel.
• Mobile phone number, used for account notifications and transaction alerts.
• Residential address, collected as part of Know Your Customer (KYC) verification.
• Copies of identity documents such as your National Identity Card (NID) or passport, submitted during KYC review.

Financial and transaction data

• Payment method details including your registered bKash, Nagad, Rocket, or Upay mobile number, and the last four digits of any linked Visa or Mastercard.
• Transaction history including deposit amounts, withdrawal requests, wagering activity, and bonus credits — all denominated in BDT (৳).
• Bank account details submitted when requesting withdrawals via Dutch-Bangla Bank, City Bank, BRAC Bank, or other supported institutions.

Technical and usage data

• IP address and approximate geographic location derived from your IP at the time of login and transaction.
• Device type, operating system, browser version, and screen resolution.
• Session duration, pages visited, games played, betting markets accessed, and navigation patterns within the hb22 platform.
• Log data including login timestamps, failed login attempts, and session termination records.

Communications data

• Content of emails and support messages you send to hb22 via [email protected].
• Live chat transcripts generated during support interactions.
• Records of any complaints, disputes, or bonus queries submitted through the platform.

2. How We Use Your Data

hb22 processes your personal data on the basis of contractual necessity (to deliver the services you signed up for), legal obligation (to comply with anti-money-laundering and age-verification requirements), and legitimate interest (to maintain platform security and improve user experience). The table below summarises the primary purposes for which your data is used.

hb22 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without human review. Where automated systems flag an account for risk or responsible gaming concerns, a member of our compliance team reviews the case before any material action is taken.

3. Data Sharing & Third Parties

hb22 does not sell your personal data to third parties. We share data only where necessary to deliver our services, meet legal obligations, or protect the integrity of the platform. The categories of third parties with whom data may be shared are set out below, along with the purpose and scope of each sharing arrangement.

• Payment processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay (UCB), and card networks (Visa, Mastercard) receive the minimum personal and financial data required to authorise and settle your transactions in BDT. These providers operate under their own privacy policies and data security frameworks.
• Game and platform providers: Live casino and slot game providers including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, and Microgaming may receive your account identifier and session token to facilitate game delivery. They do not receive your full name, NID, or financial details.
• Identity verification services: Where third-party KYC services are used to verify the authenticity of identity documents, your submitted documents and personal details are shared securely for that purpose only and are not retained by the verification provider beyond the review period.
• Fraud and risk analytics providers: IP intelligence, device fingerprinting, and transaction monitoring services may receive technical data to assist in identifying fraudulent activity and protecting the security of all hb22 accounts.
• Legal and regulatory authorities: hb22 will disclose personal data to law enforcement, financial intelligence units, or other competent authorities where required by law, court order, or where disclosure is necessary to prevent or investigate suspected criminal activity including money laundering.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by hb22 may access personal data to the extent necessary to provide their professional services and are bound by strict confidentiality obligations.

4. Cookies & Tracking

hb22 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform effectively, maintain your login session, and understand how players interact with the site. The following cookie categories are in use on hb22.bet.

• Strictly necessary cookies: These cookies are essential for the platform to function and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and security cookies that prevent unauthorised access to your account. No personally identifiable information is stored in these cookies beyond what is required for session management.
• Functional cookies: These cookies remember your preferences such as language settings, preferred game lobby layout, and notification preferences. They improve your experience on return visits but are not required for the platform to function.
• Analytics cookies: hb22 uses first-party analytics tools to understand aggregate user behaviour — such as which game categories are most popular among players in Dhaka, Chittagong, and Sylhet — in order to improve the platform. Analytics data is processed in aggregate and is not linked back to individual identities.
• Security and fraud prevention cookies: These cookies assist in identifying unusual login patterns, detecting bot activity, and flagging potentially fraudulent sessions. They are a core part of hb22's commitment to protecting every player's account.

Most web browsers allow you to control cookie settings through their privacy or settings menu. You may choose to disable non-essential cookies at the browser level; however, disabling strictly necessary cookies will prevent you from logging into your hb22 account and using the platform's core features. hb22 does not use third-party advertising cookies or cross-site tracking cookies.

5. Data Retention

hb22 retains personal data for different periods depending on the category of data and the purpose for which it was collected. The following retention periods apply as a general guide and may be extended where required by legal, regulatory, or dispute-resolution obligations.

When a retention period expires and there is no legal basis for continued storage, hb22 will securely delete or irreversibly anonymise the relevant data. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and platform-improvement purposes.

6. Data Security

hb22 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. Our security framework includes the following controls.

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and hb22.bet is encrypted using TLS. The padlock icon visible in your browser's address bar confirms that your connection is secure.
• Password hashing: Account passwords are never stored in plain text. hb22 uses a strong one-way hashing algorithm with per-user salting to store password credentials, meaning that even in the event of a data breach, raw passwords cannot be recovered.
• Access controls: Access to personal data within hb22's internal systems is restricted on a strict need-to-know basis. Staff members can only access the data categories required to perform their specific role. All internal data access is logged and subject to regular audit.
• Two-factor authentication (2FA): hb22 strongly recommends that all players enable 2FA on their accounts. When enabled, a one-time verification code is required in addition to your password at each login, significantly reducing the risk of unauthorised account access.
• Data breach response: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, hb22 will notify the affected individuals without undue delay and will take immediate steps to contain the breach and prevent further exposure.
• Third-party security standards: All third-party vendors (payment processors, game providers, KYC services) with whom personal data is shared are required to maintain security standards consistent with or exceeding those of hb22. Vendor security practices are reviewed as part of the due-diligence process before any data-sharing arrangement is established.

While hb22 takes every reasonable precaution to protect your data, no system is entirely immune to security risks. You play an important role in your own account security by choosing a strong, unique password, keeping your login credentials confidential, logging out of shared devices after each session, and notifying us immediately at [email protected] if you suspect any unauthorised activity on your account.

7. Your Privacy Rights

As an hb22 player, you hold a number of rights in relation to the personal data we hold about you. These rights are outlined below. To exercise any of these rights, please contact our data team at [email protected] with the subject line "Privacy Request" and a clear description of the right you wish to exercise.

• Right of access: You have the right to request a copy of the personal data that hb22 holds about you, along with information about how it is being used and with whom it has been shared. We will respond to access requests within 30 days of receipt.
• Right to rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information (such as your email address or phone number) directly through your account settings.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent was the basis for processing), or where the data has been unlawfully processed. This right is subject to any overriding legal retention obligations described in Section 5.
• Right to restriction of processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you have the right to request that we restrict the processing of your personal data.
• Right to object: Where hb22 processes your data on the basis of legitimate interest (for example, for platform analytics or fraud prevention), you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, for receiving promotional emails), you may withdraw that consent at any time by updating your communication preferences in your account settings or by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8. Policy Updates & Contact

hb22 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify registered players via the email address associated with their account.

We encourage all hb22 players to review this Privacy Policy periodically so that you remain informed about how your data is being handled. Continued use of the hb22 platform following notification of an updated Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which hb22 handles your personal data, please contact us using the following details. Our data team aims to respond to all privacy-related enquiries within 5 business days Bangladesh Standard Time (BST, UTC+6).

For concerns about responsible gaming and data relating to self-exclusion or deposit limits, please visit our Responsible Gaming page or contact [email protected] directly. For general questions about your account, our FAQ page covers the most common queries from players across Bangladesh.