hb22 Privacy Policy

1 Who We Are

hb22 ("the Platform", "we", "us", "our") operates the online betting and casino platform accessible at hb22.io. hb22 is the data controller responsible for the personal data you provide or that is generated through your use of the platform. We are committed to handling your personal information with the highest standards of care, transparency, and security.

hb22 serves the Bangladesh market, offering cricket betting, live casino games, slots, and specialty games to players aged 21 and above. Our platform is designed to provide a safe, fair, and responsible gaming environment. Protecting your personal data is an integral part of that commitment.

2 Data We Collect

hb22 collects the following categories of personal data in connection with your use of the platform. We collect only the data that is genuinely necessary for the purposes described in this policy.

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, national ID number, passport number	Account registration, age verification, KYC compliance
Contact Data	Email address, mobile phone number, residential address (Dhaka, Chittagong, Sylhet, etc.)	Account communication, support, promotional messages (with consent)
Financial Data	bKash account number, Nagad number, Rocket number, Upay number, Visa/Mastercard last four digits	Deposits, withdrawals, fraud prevention, AML compliance
Technical Data	IP address, device type, browser type, operating system, session duration, login timestamps	Platform security, fraud detection, performance optimisation
Usage Data	Games played, bet amounts, win/loss history, bonus usage, session activity	Responsible gaming monitoring, platform personalisation, analytics
Communications Data	Live chat transcripts, WhatsApp messages, support ticket content, email correspondence	Customer support, dispute resolution, quality assurance
Verification Documents	Scanned national ID card, passport, utility bill, bank statement	KYC/AML verification, withdrawal processing

hb22 does not intentionally collect or process special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If you voluntarily disclose such information in the course of a support interaction, we will handle it with particular care and delete it once the interaction is resolved.

3 How We Collect Data

hb22 collects personal data through the following means:

• Directly from you when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically through cookies, web beacons, server logs, and similar tracking technologies when you browse or use the hb22 platform.
• From third-party partners including payment processors (bKash, Nagad, Rocket, Upay), identity verification services, fraud prevention agencies, and analytics providers who may supply or confirm data about you.
• From publicly available sources where permitted by law, such as public records or sanction screening databases used for AML and compliance purposes.

4 Legal Basis for Processing

hb22 processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered hb22 player — including account management, processing deposits and withdrawals, and delivering game services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) laws, know-your-customer (KYC) obligations, and fraud prevention requirements.
• Legitimate interests: Processing carried out in pursuit of hb22's legitimate business interests, such as fraud detection, platform security, responsible gaming monitoring, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 How We Use Your Data

hb22 uses the personal data we collect for the following specific purposes:

• Creating, managing, and maintaining your hb22 account throughout its lifecycle.
• Verifying your identity and age (21+) in compliance with our KYC obligations.
• Processing deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and facilitating withdrawal transactions to your verified payment method.
• Detecting and preventing fraud, money laundering, bonus abuse, multi-accounting, and other prohibited activities as defined in our Terms & Conditions.
• Monitoring gameplay activity to support responsible gaming obligations, including the administration of deposit limits, loss limits, and self-exclusion requests.
• Personalising your experience on the hb22 platform, including recommending cricket betting markets (BPL, IPL, T20 World Cup) and casino games that match your stated preferences and gaming history.
• Sending you service-related communications including account notifications, transaction confirmations, and security alerts.
• Sending you marketing communications about hb22 promotions, bonuses, and seasonal offers — including during Eid, Pohela Boishakh, and major cricket tournament periods — where you have provided consent or we have a legitimate interest in doing so.
• Improving the hb22 platform through aggregated analytics, A/B testing, and performance monitoring.
• Resolving disputes, responding to customer support enquiries, and maintaining records for legal and regulatory purposes.

6 Data Sharing & Disclosure

hb22 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum transaction data required to process deposits and withdrawals. These providers operate under their own privacy policies and are not under hb22's direct control once data is transferred for transaction processing.
• Identity verification providers: Third-party KYC and AML service providers may receive copies of your identity documents and personal details to complete verification checks.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data required to deliver game content. These providers do not receive your financial details or full identity data.
• Technology and infrastructure partners: Cloud hosting, security, and analytics providers who process data on our behalf under strict data processing agreements that prohibit use of data for any purpose other than delivering the contracted service to hb22.
• Legal and regulatory authorities: hb22 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law or in response to a lawful request. We will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of hb22's business, your personal data may be transferred to the acquiring entity, subject to the same data protection obligations described in this policy.

7 Cookies & Tracking

hb22 uses cookies and similar tracking technologies to operate the platform effectively, enhance security, and improve your experience. The types of cookies we use include:

• Strictly necessary cookies: Essential for the platform to function, including session authentication cookies that keep you logged in during your hb22 session. These cannot be disabled without affecting platform functionality.
• Performance cookies: Used to collect anonymised information about how users interact with the hb22 platform — such as which game categories are most visited and how long sessions last — to help us improve platform performance and layout.
• Functionality cookies: Remember your preferences such as language settings, preferred game categories, and display options to provide a more personalised experience on return visits.
• Analytics cookies: Help us understand aggregate user behaviour through tools such as anonymised heatmaps and session recording. These do not identify individual users and the data is used solely for platform improvement purposes.

You can manage cookie preferences through your browser settings. Disabling certain categories of cookies may limit some functionality of the hb22 platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate. Most modern browsers allow you to view, delete, and block cookies through the browser's settings or privacy menu.

8 Data Security

hb22 implements a multi-layered security architecture to protect your personal data from unauthorised access, loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and hb22 servers, ensuring that your personal and financial information cannot be intercepted in transit.
• Encrypted storage of sensitive data at rest, including identity documents and financial identifiers, using industry-standard encryption algorithms.
• Password hashing using one-way cryptographic hashing functions, meaning that your password is never stored in a form that hb22 staff can read or recover.
• Role-based access controls that restrict employee access to personal data on a strict need-to-know basis, with all access events logged and audited.
• Two-step verification (2SV) available to all players to add an additional authentication layer to their hb22 account.
• Regular security audits and penetration testing conducted by independent security specialists to identify and address potential vulnerabilities before they can be exploited.
• Real-time fraud detection systems that monitor unusual activity patterns and trigger automatic alerts or account protections when anomalies are detected.

Despite our robust security measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, hb22 will notify affected users in a timely manner and take all reasonable steps to mitigate potential harm.

9 Data Retention

hb22 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data and identity documents: Retained for the duration of your account's active status and for a minimum of five years following account closure, as required by applicable anti-money laundering regulations.
• Financial transaction records: Retained for a minimum of seven years from the date of each transaction in accordance with standard financial record-keeping requirements.
• Customer support communications: Retained for a minimum of two years from the date of the last interaction, to support dispute resolution and quality assurance.
• Technical and usage data: Retained for up to 24 months in identifiable form for fraud detection and platform improvement purposes, after which it is anonymised or deleted.
• Marketing consent records: Retained for as long as you have an active marketing subscription and for up to three years following withdrawal of consent, to demonstrate compliance.

When personal data is no longer required and the applicable retention period has expired, hb22 will securely delete or anonymise it in a manner that ensures it cannot be reconstructed or re-identified.

10 Your Rights

As a user of the hb22 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact hb22 support via live chat or WhatsApp. We will respond to all data rights requests within 30 days.

• Right of access: You have the right to request a copy of the personal data hb22 holds about you and to receive information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update many details directly through your hb22 account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory obligations to retain certain data (see Section 9).
• Right to restrict processing: You have the right to request that we limit the processing of your personal data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling, at any time. You may also object to processing for direct marketing purposes at any time (see Section 11).
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11 Marketing Communications

hb22 may send you marketing communications about promotions, bonuses, new game launches, cricket betting opportunities (covering BPL, IPL, and T20 World Cup fixtures), and seasonal offers relevant to the Bangladesh market — including during Eid, Pohela Boishakh, and Victory Day periods.

We will only send you marketing communications where you have provided explicit consent at the time of account registration or at a later date, or where we have a legitimate interest in communicating with you as an existing player about closely related products and services.

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email.
• Updating your communication preferences in your hb22 account settings.
• Contacting hb22 customer support via live chat or WhatsApp and requesting removal from marketing lists.

Opting out of marketing communications will not affect the delivery of essential service communications such as transaction confirmations, security alerts, and account notifications, which are sent on the basis of contractual necessity and cannot be disabled while your account remains active.

12 Children & Minors

The hb22 platform is strictly intended for adults aged 21 years and above. hb22 does not knowingly collect personal data from individuals under the age of 21. We employ robust age verification procedures at the point of registration to prevent underage access.

If hb22 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will immediately close the associated account, return any deposits made, void any associated gameplay, and permanently delete all personal data relating to that individual from our systems.

If you believe that a minor has registered or is using the hb22 platform, please contact our support team immediately via live chat or WhatsApp so that we can investigate and take appropriate action without delay.

13 Third-Party Services

The hb22 platform may contain functional integrations with third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate their game content within the hb22 platform environment under licence agreements but maintain their own data processing practices for the purposes of delivering their game software.

Payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard operate independent payment infrastructure and are governed by their own privacy policies. hb22 does not control the data practices of these payment providers once a transaction has been initiated on their respective networks.

hb22 is not responsible for the privacy practices of any third-party service provider. We recommend that you review the privacy policies of any third-party service through which you interact in connection with your use of hb22. Our responsibility extends only to data processed within the hb22 platform itself and by our directly contracted data processors.

14 Changes to This Policy

hb22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The most current version of this policy will always be accessible at hb22.io/privacy-policy, and the "Last updated" date at the top of this document will be revised accordingly.

Where changes are material — for example, where we introduce a new purpose for processing personal data or a new category of data sharing — we will provide reasonable advance notice to registered users via email or a prominent notice on the platform prior to the changes taking effect. Your continued use of the hb22 platform following such notification constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to remain informed about how hb22 protects your personal data. If you have any concerns about a proposed change, please contact our support team before the effective date of the revision.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about how hb22 has handled your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the hb22 platform — the fastest route to our support team.
• WhatsApp: +880 1XXX-XXXXXX (available 24/7, Bangladesh Standard Time UTC+6).
• Email: [email protected] (plain text — not a clickable link). We aim to respond to all written privacy enquiries within 4 hours.

hb22 takes all privacy complaints seriously and will investigate each complaint thoroughly. We will provide a written response to your complaint within 10 business days of receipt. If you are not satisfied with our response, you may escalate the matter through any applicable legal channels available in your jurisdiction.