Privacy Policy — hot777 Data Practices

1 Introduction

This Privacy Policy (hereinafter "the Policy") sets out the data practices of the hot777 online gaming platform, accessible at https://hot777.biz (hereinafter "the Platform", "hot777", "we", "us", or "our"). This Policy applies to all users who register an account, browse, access, or otherwise interact with any part of the Platform (hereinafter "the User", "you", or "your").

By using the hot777 Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection, storage, use, and disclosure of your personal data as described herein. If you do not agree with any part of this Policy, you must immediately discontinue use of the Platform.

This Policy is incorporated by reference into the hot777 Terms & Conditions and should be read alongside them. In the event of any conflict between this Policy and the Terms & Conditions with respect to data privacy matters, this Policy shall take precedence.

hot777 is committed to maintaining the highest standards of data privacy and security. We recognise that the personal information you entrust to us is sensitive, and we treat that responsibility with the seriousness it deserves. Our data practices are designed to be transparent, proportionate, and respectful of your rights.

2 Data We Collect

hot777 collects personal data in the following categories, depending on how you interact with the Platform:

hot777 does not intentionally collect special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes) unless such collection is strictly required by applicable law or by our anti-money-laundering obligations.

3 How We Use Your Data

hot777 uses personal data collected from users for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your account in good standing on the Platform.
• Transaction processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain accurate financial records.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) requirements.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other conduct that violates our Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform personalisation: To tailor the hot777 experience to your preferences, including game recommendations, language settings, and relevant promotional offers.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to facilitate the use of responsible gaming tools including deposit limits, session alerts, and self-exclusion.
• Marketing communications: To send you promotional emails, bonus offers, and platform news — subject to your communication preferences and applicable opt-out rights.
• Platform analytics and improvement: To analyse aggregate usage patterns, identify areas for improvement, and enhance the overall user experience on the Platform.

4 Legal Basis for Processing

hot777 processes your personal data on the following legal bases:

• Contractual necessity: The processing of identity, contact, and financial data is necessary to perform our contractual obligations to you as a registered user of the Platform, including account management and transaction processing.
• Legal obligation: Certain processing activities — particularly those related to KYC verification, AML checks, and the retention of financial records — are required by applicable laws and regulations binding on hot777 as an offshore gaming operator.
• Legitimate interests: hot777 processes technical and usage data on the basis of its legitimate interests in operating a secure and efficient platform, preventing fraud, and improving its services, provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where hot777 relies on your consent as the legal basis for processing — in particular for marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

5 Data Sharing & Disclosure

hot777 does not sell, rent, or otherwise trade your personal data to third parties for their own commercial purposes. We may share personal data with the following categories of recipients, strictly to the extent necessary for the purposes set out in this Policy:

• Payment processing partners: bKash, Nagad, Rocket, Upay, and international card networks (Visa, Mastercard) receive transactional data necessary to process your deposits and withdrawals.
• Game content providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens and game history) necessary to operate their games within the Platform environment.
• Identity verification services: Third-party KYC and AML service providers may receive identity and verification document data to conduct the checks required under our compliance obligations.
• Technology and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers may process data on our behalf under binding data processing agreements that require them to maintain appropriate security standards.
• Legal and regulatory authorities: hot777 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by law, court order, or legitimate legal process.
• Business transfers: In the event of a merger, acquisition, or sale of all or a material portion of hot777's assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party recipients with whom hot777 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond that for which it was disclosed.

6 Data Retention

hot777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your registered account plus a minimum of five (5) years following account closure, in order to satisfy AML record-keeping obligations.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
• KYC verification documents: Retained for the duration of the account and for a minimum of five (5) years post-closure, or longer if required by applicable law.
• Support and communications data: Retained for a period of three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and usage data: Typically retained in aggregate or anonymised form for up to two (2) years for analytics purposes. Identifiable technical data is deleted or anonymised sooner where practicable.
• Marketing consent records: Retained for as long as you are subscribed to marketing communications, plus a reasonable period thereafter to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately practicable due to technical constraints, the data will be isolated and protected from further processing until deletion can be completed.

7 Cookies & Tracking Technologies

hot777 uses cookies and similar technologies (including local storage objects and session tokens) to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core features such as user authentication, session management, and security controls. They cannot be disabled without severely impairing the functionality of the Platform.
• Functional cookies: These cookies remember your preferences — such as language settings, game display options, and notification preferences — to personalise your experience across sessions.
• Analytics cookies: hot777 uses anonymised analytics data to understand how users navigate the Platform, which games are most popular, and where technical issues may arise. This data is processed in aggregate form and is not used to identify individual users.
• Security cookies: These cookies assist in detecting and preventing fraudulent activity, multi-account behaviour, and other security threats.

hot777 does not use cross-site tracking cookies or third-party advertising cookies. No personal data is shared with advertising networks for the purpose of targeted advertising on external websites.

You may configure your browser settings to refuse or delete cookies, though doing so may affect the functionality of the Platform. For strictly necessary cookies, continued use of the Platform constitutes consent to their use.

8 Data Security

hot777 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and the hot777 Platform is encrypted using industry-standard TLS 1.2 or higher. The Platform operates exclusively over HTTPS.
• Data encryption at rest: Sensitive personal data stored on hot777's servers is protected using AES-256 encryption.
• Access controls: Access to personal data within hot777's internal systems is restricted on a strictly need-to-know basis. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Intrusion detection and monitoring: hot777 operates continuous network monitoring and intrusion detection systems to identify and respond to security incidents in a timely manner.
• Penetration testing: The Platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response: hot777 maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a high risk to your rights and freedoms, you will be notified without undue delay.

While hot777 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely infallible. You also have a responsibility to protect the security of your own account credentials and to notify us immediately of any suspected unauthorised access.

9 Your Rights Over Your Data

Subject to applicable law, you hold the following rights with respect to the personal data that hot777 holds about you:

• Right of access: You have the right to request a copy of the personal data that hot777 holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may update many of your account details directly through your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to hot777's legal obligations to retain certain data.
• Right to restriction of processing: You have the right to request that hot777 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to its processing.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to hot777 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where hot777 relies on legitimate interests as the legal basis, and where your fundamental rights and freedoms override those interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact the hot777 support team at [email protected]. We will respond to all requests within a reasonable timeframe, and no later than 30 days from receipt of the request. We may ask you to verify your identity before processing your request.

10 Children's Privacy

The hot777 Platform is strictly intended for adults aged 18 and above. We do not knowingly collect or process personal data from any individual under the age of 18. If we become aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and permanently close the associated account.

Parents and guardians who believe that their child may have registered an account on the Platform are urged to contact the hot777 support team immediately at [email protected]. hot777 takes the protection of minors with the utmost seriousness and maintains robust age verification procedures as part of the account registration process.

11 Third-Party Links

The hot777 Platform may contain references to third-party game providers and payment partners. While hot777 takes care to work only with reputable partners, we have no control over the data practices, privacy policies, or content of external entities. This Privacy Policy applies solely to the hot777 Platform at https://hot777.biz.

We strongly encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the hot777 Platform, including your payment provider (bKash, Nagad, Rocket, Upay, Visa, or Mastercard). hot777 accepts no responsibility or liability for the privacy practices of such third parties.

12 Policy Updates & Contact Information

hot777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services offered on the Platform. Where changes are material, we will provide reasonable notice to registered users via their registered email address or through an in-platform notification. The "Effective Date" at the top of this Policy will be updated to reflect the date on which any revised version comes into force.

Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. We encourage you to review this Policy periodically to remain informed about how hot777 manages and protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to hot777's data practices, please contact our support team. We are available 24 hours a day, 7 days a week.

Email: [email protected]

For formal data subject requests (access, erasure, portability, rectification), please include your registered email address and a description of your request. Identity verification will be required before any request is processed.