hhbd2 Privacy Policy —
How We Handle Your Personal Data
At hhbd2, your privacy is treated with the same seriousness as your account security. This Privacy Policy explains exactly what personal information we collect, why we collect it, how we use and store it, who we share it with, and what rights you hold over your own data as a player on our platform.
Six Core Privacy Commitments
Who We Are
hhbd2 ("hhbd2", "we", "us", or "our") operates the online casino and sports betting platform accessible at hhbd2.io (the "Platform"). This Privacy Policy explains how hhbd2 collects, uses, stores, discloses, and protects the personal information of all individuals who register an account, make a deposit, place a bet, or otherwise interact with the Platform ("you", "your", "Player").
hhbd2 is the data controller for all personal data collected through the Platform. As data controller, hhbd2 determines the purposes for which personal data is processed and bears responsibility for ensuring that processing is conducted lawfully, transparently, and in accordance with this Privacy Policy.
If you have questions about this Privacy Policy or about how hhbd2 handles your personal data, you may contact our dedicated privacy team at any time by emailing [email protected]. Our support team operates 24 hours a day, seven days a week, in English and Bengali, from our operating hours in Bangladesh Standard Time (BST, UTC+6).
Data We Collect
hhbd2 collects personal data in the categories described below. We collect only the data that is necessary and proportionate to the purposes for which it is processed.
2.1 Identity & Registration Data
- Full legal name as it appears on your government-issued identity document
- Date of birth (used for age verification — the Platform is restricted to players aged 21 and above)
- Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or elsewhere in Bangladesh)
- Mobile phone number associated with your bKash, Nagad, Rocket, Upay, or other nominated payment account
- Email address (where provided)
- Username and hashed password credential
2.2 Identity Verification (KYC) Data
- Copy of Bangladesh National Identity Card (NID), passport, or other government-issued identity document
- Facial photograph or selfie (where required for enhanced verification)
- Proof of address documentation (where required)
- Source-of-funds documentation (where required for large transactions)
2.3 Financial & Transaction Data
- Deposit and withdrawal amounts, dates, and payment method identifiers (e.g., last four digits of a bKash or Nagad mobile number)
- Transaction reference numbers
- Account balance history
- Bonus and promotional credit history
2.4 Gameplay & Betting Activity Data
- Game sessions, bet amounts, outcomes, and timestamps
- Sports betting market selections, odds accepted, and settlement outcomes
- Responsible gaming tool configurations (deposit limits, session alerts, cooling-off periods, self-exclusion status)
2.5 Technical & Device Data
- IP address at the time of login and during active sessions
- Device type, operating system, and browser type and version
- Session duration and navigation activity within the Platform
- Cookie identifiers and session tokens (see Section 7)
- Geolocation data derived from IP address (country and city level only — precise GPS location is not collected)
2.6 Customer Support Data
- Content of live chat conversations with hhbd2 support agents
- Email correspondence sent to [email protected]
- Details of any complaint, dispute, or feedback you submit
How We Collect Data
hhbd2 collects personal data through the following channels:
3.1 Directly From You
The majority of the personal data we hold is provided directly by you during the account registration process, during KYC document submission, when you contact our support team, and when you use the Platform's responsible gaming tools. You are always aware when you are providing us with personal data directly.
3.2 Automatically Through Platform Use
When you access and use the Platform, our servers automatically record technical data including your IP address, device type, browser type, session start and end times, and navigation patterns within the Platform. This data is collected via server logs and session cookies and is used for security monitoring, fraud detection, and Platform performance analysis.
3.3 From Payment Providers
When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer partner, our payment processing systems receive confirmation data from the payment provider — including the transaction reference, the amount, and a partial identifier of the payment account (such as the last four digits of the registered mobile number). hhbd2 does not receive or store your full bKash or Nagad PIN or any full card numbers. Payment credentials are handled entirely by the respective payment providers and are subject to their own privacy and security policies.
3.4 From Identity Verification Partners
Where hhbd2 uses a third-party identity verification or KYC service provider to assist with document verification, that provider may process your identity document images on our behalf and return a verification result. The use of such providers is governed by appropriate data processing agreements, and the provider acts as a data processor under hhbd2's instruction.
How We Use Your Data
hhbd2 uses the personal data it collects for the following specific purposes:
- Account creation and management: To register your account, verify your identity, maintain your account balance, and administer your account settings and preferences.
- Age and identity verification (KYC): To confirm that you are 21 years of age or older, that your identity matches your registered details, and to fulfil our obligations under applicable anti-money laundering and know-your-customer requirements.
- Payment processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer partners, and to maintain accurate financial records associated with your account.
- Providing gaming services: To deliver the games, sports betting markets, and live casino services available on the Platform, and to record and settle your bets and gameplay sessions accurately.
- Responsible gaming compliance: To enforce the responsible gaming tools you have activated (deposit limits, cooling-off periods, self-exclusion), to monitor for signs of problem gambling behaviour, and to fulfil our duty of care obligations to players.
- Fraud prevention and security: To detect and prevent fraudulent transactions, account takeovers, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions. This includes IP-based geolocation checks and device fingerprinting.
- Customer support: To respond to your queries, resolve disputes, and maintain a record of support interactions for quality assurance and training purposes.
- Platform improvement: To analyse aggregate, anonymised usage data to improve the Platform's performance, navigation, and game offering. Individual player data used for this purpose is anonymised before analysis.
- Legal and regulatory compliance: To retain records as required by applicable law, to respond to lawful requests from regulatory or law enforcement authorities, and to defend hhbd2 in any legal proceedings.
- Promotional communications: Where you have opted in to receive marketing communications from hhbd2, to send you information about relevant promotions, bonuses, and platform updates. You may withdraw your marketing consent at any time by contacting [email protected].
Legal Basis for Processing
hhbd2 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing that is required to provide you with the Platform services you have registered for — including account management, payment processing, KYC verification, and gameplay delivery. Without this processing, hhbd2 cannot fulfil its obligations to you as a registered player.
- Legitimate interests: Processing that is necessary for hhbd2's legitimate business interests, including fraud prevention, security monitoring, Platform analytics, and responsible gaming monitoring — provided these interests are not overridden by your fundamental rights and freedoms.
- Legal obligation: Processing that is required to comply with applicable legal and regulatory obligations, including anti-money laundering record-keeping requirements and responses to lawful authority requests.
- Consent: Where hhbd2 relies on your consent as the legal basis for processing — such as sending optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.
Sharing Your Data
hhbd2 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:
6.1 Payment Providers
To process your deposits and withdrawals, hhbd2 shares the minimum necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or Visa/Mastercard as applicable. Each payment provider operates under its own privacy policy and is independently responsible for data it holds about you as their customer.
6.2 Game Providers
To deliver third-party casino games and sports betting markets on the Platform, hhbd2 shares a session token and anonymised player identifier with the relevant Game Provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) at the time you launch a game. Game Providers do not receive your name, address, or payment details through this process.
6.3 Identity Verification Providers
Where hhbd2 uses a third-party KYC or identity verification service, your identity document images and personal details are shared with that provider solely for the purpose of completing the verification process. Such providers are bound by data processing agreements and may not use your data for any other purpose.
6.4 Legal and Regulatory Authorities
hhbd2 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or a lawful regulatory request. In such cases, hhbd2 will disclose only the minimum information required to satisfy the legal obligation and will, where legally permitted, notify the affected player that such a disclosure has been made.
6.5 Business Transfers
In the event that hhbd2 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred as part of that transaction. In such circumstances, hhbd2 will notify affected players via the email address associated with their account before their data is transferred and becomes subject to a different privacy policy.
Cookies & Tracking Technologies
7.1 What Are Cookies
Cookies are small text files placed on your device when you access a website. They allow the website to recognise your device across pages within a session and, in some cases, across multiple visits. hhbd2 uses cookies and similar session technologies (including local storage tokens) exclusively for the operational purposes described below.
7.2 Cookies hhbd2 Uses
- Session cookies (strictly necessary): These cookies maintain your authenticated login session while you are active on the Platform. They are deleted automatically when you close your browser or log out. Without these cookies, the Platform cannot function.
- Security cookies: Used to detect fraudulent login attempts, unusual account activity, and bot-driven interactions. These cookies help protect your account from unauthorised access.
- Performance cookies: Used to collect anonymised, aggregated data about how players navigate the Platform — such as which pages load slowly or which features are most frequently used. This data is used internally to improve Platform performance. No individual player is identified from performance cookie data.
- Preference cookies: Used to remember your interface preferences, such as your selected language setting, for the duration of your session.
7.3 Cookies hhbd2 Does Not Use
hhbd2 does not use third-party advertising cookies, behavioural tracking pixels, social media tracking tags, or any cookie technology that shares your data with external advertising networks or data brokers. You will not receive targeted advertisements from hhbd2 on other websites as a result of visiting hhbd2.io.
7.4 Managing Cookies
You may configure your browser to block or delete cookies. Please note that blocking strictly necessary session cookies will prevent you from logging in to your hhbd2 account and using the Platform. Instructions for managing cookies in the most common browsers are available from the respective browser's help documentation.
Data Retention
hhbd2 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:
- Account and identity data: Retained for the full duration of your account's active status, plus a minimum of five years following account closure, to satisfy anti-money laundering record-keeping requirements.
- Transaction and financial records: Retained for a minimum of five years from the date of the relevant transaction, in accordance with applicable financial record-keeping obligations.
- KYC documents: Retained for a minimum of five years from the date of verification or from account closure, whichever is later.
- Gameplay and betting logs: Retained for a minimum of two years from the date of the relevant session or bet, for dispute resolution and audit purposes.
- Customer support records: Retained for a minimum of two years from the date of the relevant interaction.
- Technical and device logs: Retained for up to 12 months from the date of collection, unless a specific record is flagged as relevant to an ongoing security investigation or legal proceeding, in which case it is retained for the duration of that matter.
- Marketing consent records: Retained for as long as the consent is active, plus two years following withdrawal of consent, to demonstrate compliance with consent obligations.
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible. Anonymised or aggregated data may be retained indefinitely for analytical purposes, as it no longer constitutes personal data.
Your Data Rights
As a player on the hhbd2 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] from the email address associated with your hhbd2 account. hhbd2 will respond to all valid data rights requests within 14 calendar days of receipt.
| Right | What It Means | How to Exercise |
|---|---|---|
| Right of Access | Request a copy of all personal data hhbd2 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared. | Email [email protected] with the subject line "Data Access Request" |
| Right to Rectification | Request correction of any inaccurate or incomplete personal data held in your account. For basic details, you may also update them directly via your account settings panel. | Email [email protected] or update via account settings |
| Right to Erasure | Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and no legal retention obligation applies. Note: data subject to AML retention requirements cannot be deleted before the end of the applicable retention period. | Email [email protected] with the subject line "Data Erasure Request" |
| Right to Restriction | Request that hhbd2 restrict processing of your data while a correction or erasure request is being assessed, or where you have objected to processing pending verification of legitimate grounds. | Email [email protected] with details of the restriction requested |
| Right to Data Portability | Request a structured, machine-readable export of the personal data you provided directly to hhbd2 — such as your account registration details and transaction history. | Email [email protected] with the subject line "Data Portability Request" |
| Right to Object | Object to processing based on hhbd2's legitimate interests, including profiling for fraud detection purposes. hhbd2 will assess whether compelling legitimate grounds override your objection. | Email [email protected] describing the processing you object to |
| Right to Withdraw Consent | Where hhbd2 relies on your consent as the legal basis for processing (e.g., marketing emails), withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing. | Email [email protected] or use the unsubscribe link in any marketing email |
Data Security
hhbd2 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- Transport layer encryption: All data transmitted between your browser or device and hhbd2 servers is encrypted using 256-bit SSL/TLS protocols. Any attempt to intercept data in transit would encounter encrypted ciphertext unreadable without the server's private key.
- Password hashing: Account passwords are never stored in plain text. They are processed through a one-way cryptographic hash function with a unique salt per account before storage. Even hhbd2 support staff cannot view your password — only you know it.
- Access controls: Access to the databases holding personal data is restricted to authorised hhbd2 personnel who require that access to perform specific job functions. Access is governed by role-based permissions and is logged and audited.
- Server security: hhbd2 servers are hosted in secured data centre environments with physical access controls, intrusion detection systems, and regular security patch management.
- Fraud and anomaly detection: Automated systems monitor login activity, transaction patterns, and gameplay behaviour for anomalies indicative of account compromise, fraud, or money laundering. Suspicious activity triggers automatic account flags for manual review.
- Staff training: All hhbd2 staff with access to personal data receive privacy and security training as part of their onboarding and on a regular ongoing basis.
While hhbd2 takes all reasonable and proportionate steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, hhbd2 will notify affected players without undue delay.
Children & Minors
The hhbd2 Platform is strictly restricted to individuals who are 21 years of age or older. hhbd2 does not knowingly collect personal data from any person under the age of 21. If hhbd2 becomes aware that personal data has been collected from an individual who is under 21, the account will be immediately closed, the data will be deleted, any balance will be handled in accordance with applicable law, and the matter will be escalated in line with our underage gambling prevention procedures.
If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on hhbd2.io, please contact our support team immediately at [email protected]. We will investigate the matter and take prompt action.
Third-Party Services
The hhbd2 Platform integrates with a number of third-party service providers to deliver specific functions — including payment processing, identity verification, game content delivery, and customer support infrastructure. Each of these providers operates under its own privacy policy and data protection obligations. hhbd2 enters into data processing agreements with all third-party processors to ensure that your data is handled in a manner consistent with the commitments in this Privacy Policy.
The Platform may contain links to third-party websites or resources (for example, links to payment provider portals during a deposit or withdrawal flow). hhbd2 is not responsible for the privacy practices of any third-party website. Once you navigate away from hhbd2.io to a third-party site, this Privacy Policy no longer applies to data collected on that site. We encourage you to review the privacy policy of any third-party service you use in connection with your hhbd2 account.
Game content delivered by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi is subject to those providers' own data handling practices in respect of gameplay data processed on their systems. hhbd2 limits the data shared with Game Providers to the minimum necessary for game session delivery, as described in Section 6.2.
Changes to This Privacy Policy
hhbd2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. When material changes are made, the revised Privacy Policy will be published on this page with an updated effective date displayed at the top of the document.
Where a change is significant — such as a change to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — hhbd2 will provide advance notice to registered players via the email address associated with their account or via an in-platform notification, at least 14 days before the revised policy takes effect.
Your continued use of the Platform after the revised Privacy Policy takes effect constitutes your acknowledgement of the changes. If you disagree with a material change to this Privacy Policy, you may request account closure in accordance with Section 4.4 of the hhbd2 Terms & Conditions before the new policy takes effect.
We encourage you to review this Privacy Policy periodically to stay informed about how hhbd2 is protecting your personal data.
Contact & Data Requests
For any questions, concerns, or requests related to this Privacy Policy or to the personal data hhbd2 holds about you, please contact us using the details below. All privacy-related communications are handled by our support team, which includes personnel trained in data protection matters.
- Email: [email protected] (plain text — not a clickable link; please type this address into your email client)
- Subject line for data requests: Please include "Privacy Request" or the specific right you are exercising (e.g., "Data Access Request", "Data Erasure Request") in the subject line to ensure prompt routing
- Live Chat: Available directly within the Platform, 24/7 in English and Bengali
- Response Time: Privacy and data rights requests are responded to within 14 calendar days of receipt of a valid, identity-verified request
- Support Hours: 24 hours a day, 7 days a week, including all Bangladesh public holidays
- Time Zone: Bangladesh Standard Time (BST, UTC+6)
When submitting a data rights request, please provide your registered account username and the email address associated with your account so that we can verify your identity and locate your records promptly. hhbd2 does not charge any fee for processing legitimate data rights requests.
Built on Trust, Secured by Design
Every privacy measure at hhbd2 is designed with Bangladesh players in mind — fast, transparent, and held to the highest standard of data protection.
Ready to Play on a Platform You Can Trust?
Your privacy is protected. Your data is secure. Now explore Bangladesh's premier online casino and sports betting experience — from cricket betting to live slots, all powered by instant bKash and Nagad payments.