Introduction & Scope
This Privacy Policy (hereinafter "Policy") describes how hhdb (hereinafter "hhdb", "We", "Us", or "Our") collects, processes, stores, shares, and protects personal data belonging to individuals (hereinafter "Player", "User", or "You") who access or use the hhdb online gaming platform, accessible at hhdb.io and its associated subdomains (the "Platform").
This Policy applies to all personal data collected through the Platform, including data provided during registration, during the course of gameplay and betting activity, during financial transactions, via customer support interactions, and through your general browsing of the Platform. It applies regardless of whether you access the Platform via a desktop browser, mobile browser, or any other supported interface.
By creating an hhdb account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must stop using the Platform and may request account closure by contacting the hhdb support team.
This Privacy Policy should be read together with the hhdb Terms & Conditions, which govern the overall use of the Platform and form a single integrated agreement between hhdb and each registered Player.
hhdb is committed to processing personal data lawfully, fairly, and transparently. We collect only the data that is necessary for the purposes described in this Policy, and we do not sell your personal data to third parties under any circumstances.
What Personal Data We Collect
hhdb collects personal data in several ways depending on how you interact with the Platform. The categories of personal data we may collect include:
1.1 Registration Data
When you create an hhdb account, we collect the information you provide directly, including:
- Full legal name as it appears on your government-issued identification document.
- Date of birth (used to verify that you meet the 21+ age requirement).
- Residential address, including division, district, and postcode within Bangladesh.
- Mobile phone number registered in your name (used for account verification and communication).
- Email address (used for account notifications, promotional communications where opted in, and support correspondence).
- Preferred username and account password (stored in encrypted, salted form — never in plain text).
1.2 Identity Verification (KYC) Data
As part of our mandatory Know Your Customer process, we collect copies of documents that verify your identity and age. These may include:
- National ID Card (NID), passport, or driving licence — front and back images.
- Proof of address documents such as utility bills, bank statements, or official government correspondence dated within three (3) months.
- Proof of payment method ownership (e.g., screenshot of bKash, Nagad, or bank account registered in your name).
- Selfie photograph or short video clip for liveness verification, where requested by the hhdb compliance team.
1.3 Financial Transaction Data
Every financial transaction on the Platform generates a record. We collect and store data related to:
- Deposit transactions: amount in BDT, payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), transaction reference number, and timestamp (Bangladesh Standard Time, UTC+6).
- Withdrawal requests: amount, destination account details (mobile financial service number or bank account), approval status, and processing timestamp.
- Wallet balance history: credits, debits, bonus awards, and wagering activity over time.
1.4 Gameplay and Betting Activity Data
To operate the Platform, settle bets, and maintain accurate game histories, we record:
- Bet placement records: event or game selected, stake amount, odds accepted, and outcome.
- Casino game session logs: game title, provider (e.g., Pragmatic Play, Evolution Gaming, Microgaming, Spribe, NetEnt, Ezugi), session duration, rounds played, amounts wagered, and net result.
- Bonus and wagering requirement progress: bonus accepted, wager contributions, fulfilment status.
1.5 Technical and Device Data
When you access the Platform, our servers and analytics systems automatically collect certain technical data including:
- IP address at the time of login and key transactions (used for fraud detection and geolocation compliance checks).
- Device type, operating system, and browser version.
- Session start and end timestamps, pages visited, and navigation path within the Platform.
- Cookies and similar tracking technologies as described in Section 8 of this Policy.
1.6 Communications Data
When you contact the hhdb support team — whether via WhatsApp, live chat, or email — we retain records of those communications, including the content of messages, timestamps, and the resolution status of any support ticket or complaint raised.
Why We Collect Your Data — Purposes of Processing
hhdb processes personal data only for specific, clearly defined purposes. The table below summarises each category of data, the purpose for which it is processed, and the legal basis on which we rely:
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Registration Data | Account creation, authentication, account recovery, and personalised platform access. | Contractual necessity; consent at registration. |
| KYC / Identity Documents | Age verification (21+ requirement), identity confirmation, anti-fraud, and anti-money-laundering compliance. | Legal obligation; contractual necessity. |
| Financial Transaction Data | Processing deposits and withdrawals, maintaining financial records, resolving disputes, and detecting fraud or suspicious transactions. | Contractual necessity; legal obligation. |
| Gameplay & Betting Activity | Settling bets, calculating winnings, maintaining game fairness audits, identifying problem gambling patterns for Responsible Gaming interventions. | Contractual necessity; legitimate interests. |
| Technical & Device Data | Platform security, fraud prevention, geolocation compliance, platform optimisation, and load balancing. | Legitimate interests; legal obligation. |
| Communications Data | Customer support, dispute resolution, complaint handling, quality assurance, and staff training. | Contractual necessity; legitimate interests. |
hhdb does not use your personal data to make automated decisions that produce significant legal or similarly significant effects without human review. Our fraud detection and responsible gaming monitoring systems flag accounts for human review — they do not automatically restrict or terminate accounts without manual assessment.
Data Retention
hhdb retains personal data only for as long as it is necessary to fulfil the purposes outlined in this Policy, or for as long as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:
- Account and Registration Data: Retained for the lifetime of the active account, plus five (5) years following account closure, in compliance with anti-money-laundering record-keeping obligations.
- KYC Documents: Retained for five (5) years from the date of verification or from the date of account closure, whichever is later.
- Financial Transaction Records: Retained for seven (7) years from the date of the transaction to meet financial record-keeping requirements.
- Gameplay Logs: Retained for three (3) years from the date of the session or bet, after which they are aggregated and anonymised.
- Support Communication Records: Retained for two (2) years from the date of resolution, or for five (5) years where a formal complaint or legal dispute is involved.
- Technical and Device Logs: Retained for up to ninety (90) days for active fraud monitoring purposes, after which raw logs are deleted and only aggregated analytics are retained.
When personal data is no longer required for any legitimate purpose, hhdb securely deletes or anonymises it in accordance with industry-standard data destruction procedures.
Data Security
hhdb implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:
- SSL/TLS Encryption: All data transmitted between your device and the hhdb Platform is encrypted using TLS 1.2 or higher. This applies to every page of the Platform, including the login page, cashier, game lobby, and support chat.
- Password Hashing: Account passwords are stored using a strong, salted cryptographic hash function. hhdb staff cannot view your plain-text password under any circumstances.
- Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their hhdb account. 2FA adds a second layer of protection by requiring a one-time verification code in addition to your password on each login.
- Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Only hhdb team members whose job functions require access to specific categories of data are authorised to view it, and all such access is logged and audited.
- Secure Data Centres: Player data is stored on servers located in secure, access-controlled data centre facilities with physical security controls, environmental monitoring, and redundant infrastructure.
- Regular Security Reviews: hhdb conducts periodic internal security reviews and vulnerability assessments to identify and remediate potential weaknesses in our systems before they can be exploited.
Important: While hhdb takes all reasonable measures to secure your data, no system connected to the internet can guarantee absolute security. You are responsible for keeping your account credentials confidential, logging out of shared devices, and notifying hhdb immediately at [email protected] if you suspect any unauthorised access to your account.
Your Rights Over Your Personal Data
As a registered Player on the hhdb Platform, you hold the following rights with respect to your personal data. Requests to exercise any of these rights may be submitted to the hhdb support team via WhatsApp or email at [email protected]:
6.1 Right of Access
You have the right to request a copy of all personal data that hhdb holds about you. We will respond to verified access requests within thirty (30) calendar days. The data will be provided in a structured, commonly used, and machine-readable format.
6.2 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For registration details (name, address, contact information), you may update many fields directly within your account settings. For KYC-verified data fields, corrections require submission of updated supporting documentation.
6.3 Right to Erasure
You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no overriding legal basis for continued processing. Note that hhdb is legally required to retain certain data (particularly KYC and financial transaction records) for defined periods regardless of an erasure request; in such cases, we will inform you of the specific retention obligation.
6.4 Right to Restrict Processing
You may request that we restrict the processing of your personal data — for instance, while you contest the accuracy of data we hold, or while a complaint you have raised is under investigation. During a processing restriction, your data will be stored but not actively used beyond the minimum necessary for the restriction itself.
6.5 Right to Data Portability
Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a portable format and to request that it be transmitted directly to another service provider where technically feasible.
6.6 Right to Object
You have the right to object to the processing of your personal data where processing is based on hhdb's legitimate interests, including profiling for responsible gaming purposes. hhdb will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
6.7 Right to Withdraw Consent
Where processing is based solely on your consent (for example, receipt of promotional communications), you may withdraw that consent at any time by updating your marketing preferences within the account settings or by contacting the support team. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
hhdb will verify your identity before acting on any data rights request to protect your privacy and prevent fraudulent requests. We aim to respond to all verified requests within thirty (30) calendar days. If a request is complex or numerous, we may extend this period by a further two (2) months, with notification to you.
Marketing Communications
hhdb may send you promotional communications about new games, bonus offers, seasonal promotions (such as BPL season specials, Eid promotions, Pohela Boishakh offers, and T20 World Cup campaigns), and Platform updates. We will only send such communications if you have opted in to receiving them at the time of registration or subsequently via your account settings.
You may opt out of marketing communications at any time by:
- Clicking the "Unsubscribe" link included at the bottom of every promotional email.
- Adjusting your notification preferences within the account settings page.
- Contacting the hhdb support team and requesting removal from the marketing list.
Opting out of marketing communications does not affect your receipt of transactional and operational communications (such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts), which are sent regardless of marketing preferences as they are necessary for the operation of your account.
Cookies & Tracking Technologies
The hhdb Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. A cookie is a small text file stored on your device by your browser when you visit the Platform. The following categories of cookies are in use on hhdb:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication state, CSRF protection, load balancing. Cannot be disabled without breaking Platform functionality. | Session / up to 24 hours |
| Functional | Remembering language preferences, display settings, and recently played games for a more personalised experience. | Up to 90 days |
| Analytics | Aggregated, anonymised data on page visits, feature usage, and navigation paths to help hhdb improve the Platform. No personally identifiable data is retained in analytics cookies. | Up to 12 months |
| Security | Fraud detection signals — device fingerprint components, login attempt frequency, and geolocation consistency checks to protect your account. | Up to 30 days |
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features. hhdb does not use third-party advertising or retargeting cookies — we do not share browsing data with advertising networks.
Protection of Minors
The hhdb Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the KYC process, and any account found to belong to an under-21 individual will be immediately closed and all associated data securely deleted, with the exception of records required to be retained for legal compliance purposes.
If you are a parent or guardian and believe that a minor in your care has registered an account on hhdb, please contact our support team immediately at [email protected]. We will investigate and, where confirmed, close the account and delete all personal data within five (5) business days.
21+ Only: hhdb takes its obligation to prevent underage gambling extremely seriously. Providing false date-of-birth information during registration to circumvent the age check is a breach of our Terms & Conditions and may constitute fraud under applicable law.
International Data Transfers
hhdb is an offshore online gaming platform. Some of the third parties with whom we share data — including game providers such as Pragmatic Play, Evolution Gaming, and NetEnt — operate infrastructure in jurisdictions outside Bangladesh. Where personal data is transferred internationally, hhdb ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include:
- Contractual data processing agreements with third-party providers that mandate equivalent data protection standards.
- Transfer to jurisdictions that maintain recognised data protection frameworks or adequacy standards.
- Technical encryption and access-control measures applied at the point of transfer.
Players who wish to obtain further information about the specific safeguards in place for international data transfers may contact the hhdb support team at [email protected].
Changes to This Privacy Policy
hhdb may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will notify registered Players via email or an on-platform notification at least seven (7) days before the updated Policy takes effect, unless an immediate change is required by law or for security reasons, in which case the updated Policy takes effect immediately upon publication.
The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Policy periodically to stay informed about how hhdb protects your data. Your continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy.
Contact & Data Enquiries
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a data-related complaint, please contact the hhdb data team through the following channels:
- Email: [email protected] (plain text — not a clickable link)
- WhatsApp: +880-XXX-XXXXXX (available 24/7, 365 days a year)
- Live Chat: Available directly within the hhdb Platform when logged in
- Response Time: hhdb aims to acknowledge all privacy enquiries within 48 hours and provide a substantive response within 30 calendar days
For urgent security concerns such as suspected unauthorised account access or a potential data breach affecting your account, please contact support immediately via WhatsApp for the fastest response. Security-related concerns are treated as Priority 1 and escalated to our security team within one hour of receipt.
Privacy at a Glance
Six Ways hhdb Protects Your Data
Every page, every transaction, and every support message on hhdb is protected by TLS 1.2+ encryption. Data in transit between your device and our servers is unreadable to any third party.
Identity verification protects both you and the platform. KYC documents are processed by certified partners and never shared beyond what is strictly required for verification and regulatory compliance.
hhdb does not sell, rent, or trade your personal data to advertisers, data brokers, or any third party for commercial purposes. Your data is used only to operate and improve the hhdb service.
Access, rectify, delete, or export your data at any time. hhdb responds to all verified data rights requests within 30 days. Exercising your rights costs nothing and requires only identity verification.
Two-factor authentication is available on every hhdb account. Enable it in your account settings to add a second verification layer that prevents unauthorised login even if your password is compromised.
hhdb does not hold your data indefinitely. Clear retention periods apply to every data category. When data is no longer required, it is securely deleted or anonymised using industry-standard procedures.
Your Privacy Is Safe with hhdb
Now that you understand how hhdb handles your personal data, explore the platform with confidence — from cricket betting and live casino games to instant bKash withdrawals, all built for Bangladesh.