Your Privacy Matters

1. Introduction

hot888 takes the privacy of its players seriously. As an online casino and sports betting platform serving players across Bangladesh, we are entrusted with personal and financial information that we have a legal and ethical obligation to handle responsibly.

This Policy applies to all personal data collected through the hot888 website at hot888.biz, including all associated pages, features, account areas, and communications sent by hot888 to registered players. It applies regardless of the device or method used to access the Platform.

We have written this Policy in plain, accessible English so that players can clearly understand their rights and our obligations. If you have any questions about how your data is handled, you are always welcome to contact our support team directly.

2. Data We Collect

2.1 Registration Data

When you create an account on hot888, we collect the following information:

• Full legal name as it appears on your government-issued identification;
• Date of birth, used to verify that you meet the minimum age requirement of 18 years;
• Mobile phone number used for account authentication and communications;
• Email address used for account correspondence and promotional messages (where opted in);
• A username and encrypted password chosen during registration.

2.2 Identity Verification Data

To comply with Know Your Customer (KYC) and anti-money laundering obligations, we may collect:

• Copies of government-issued identification, such as your National Identity Card (NID), Bangladesh passport, or driving licence;
• Proof of address documents, such as a recent utility bill or bank statement;
• Proof of payment method ownership, such as a screenshot confirming your bKash or Nagad account is registered in your name.

2.3 Financial Transaction Data

When you make deposits or withdrawals, we record transaction amounts, timestamps, payment method references, and transaction identifiers. We do not store complete payment card numbers. Mobile wallet transactions via bKash, Nagad, Rocket, or Upay are recorded by reference number only.

2.4 Technical & Usage Data

We automatically collect certain technical data when you access the Platform, including:

• IP address and approximate geographic location derived from it;
• Device type, operating system, and browser version;
• Pages visited, time spent on each page, and navigation paths through the Platform;
• Game session data including games played, stakes placed, and session duration;
• Login timestamps and session identifiers.

2.5 Communications Data

If you contact our support team via live chat or email, we retain records of those communications, including the content of messages exchanged, timestamps, and any resolution actions taken. This data is used for quality assurance and dispute resolution purposes.

3. How We Use Your Data

hot888 processes personal data for the following specific purposes:

We do not use your personal data for automated decision-making that produces significant legal effects without human review. Gaming outcomes are determined by certified random number generators operated by our third-party game providers, not by personal profile data.

4. Legal Basis for Processing

hot888 processes personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil the Terms & Conditions you agreed to when creating an account — including account management, transaction processing, and customer support;
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, identity verification obligations, and any lawful requests from competent authorities;
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and internal analytics that improve our services — provided these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications, which you may withdraw at any time without affecting the lawfulness of prior processing.

5. Sharing Your Data

hot888 does not sell, rent, or trade your personal data. We share data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

5.1 Payment Processors

To process deposits and withdrawals, we share necessary transaction information with approved payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers operate under their own privacy policies and are independently obligated to protect your financial data.

5.2 Identity Verification Providers

When we require KYC verification, your identity documents may be shared with our contracted verification service providers. These providers are bound by strict confidentiality and data security obligations and may not use your data for any purpose other than the verification task for which it was shared.

5.3 Game Providers

Casino game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level data necessary to deliver and certify game outcomes. These providers do not receive your full personal profile and process data under their own regulatory compliance frameworks.

5.4 Legal and Regulatory Authorities

hot888 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by applicable law, court order, or in connection with the investigation of suspected financial crime or fraud. We will notify you of such disclosure where we are legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the hot888 business, personal data held by the Platform may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is subsequently processed.

6. Payment Data

hot888 handles all financial transaction data with the highest level of care. The following specific measures apply to payment-related information:

• Full mobile wallet account numbers (bKash, Nagad, Rocket, Upay) are never stored in plain text on our servers. Only masked references and transaction IDs are retained;
• Payment card data (Visa, Mastercard) is processed via compliant payment gateways and is not stored on the hot888 Platform itself;
• All financial data in transit is protected by 256-bit SSL encryption;
• Access to financial records is restricted to authorised Platform personnel with a direct operational need;
• Transaction logs are retained for the period required to satisfy legal and anti-money laundering obligations, after which they are securely destroyed.

7. Cookies & Tracking Technologies

hot888 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small data file stored on your device when you visit our website. We use the following types of cookies:

• Essential cookies: Required for the Platform to function correctly, including maintaining your logged-in session and remembering your language and display preferences. These cannot be disabled without disrupting core functionality;
• Analytics cookies: Used to understand how players navigate the Platform, which pages are most visited, and where technical issues may occur. This data is aggregated and anonymised where possible;
• Security cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and other security threats;
• Functional cookies: Used to remember your game preferences, bet history display settings, and personalisation choices within the Platform.

hot888 does not use third-party advertising cookies or tracking pixels to build advertising profiles or share browsing data with external advertising networks. You may manage cookie preferences through your browser settings; however, disabling essential cookies will limit your ability to use the Platform.

8. Data Security

hot888 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage of sensitive data fields including passwords (using industry-standard hashing algorithms) and identity document references;
• Role-based access controls ensuring that Platform staff can only access data relevant to their specific job function;
• Regular security audits and vulnerability assessments conducted by our technical team;
• Intrusion detection systems monitoring for unusual access patterns or potential breaches in real time;
• Secure data centre facilities with physical access controls and environmental safeguards.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, hot888 will notify affected players without undue delay and take immediate remedial action. Players are also encouraged to maintain strong, unique passwords and to contact support immediately if they suspect their account has been accessed without authorisation.

9. Data Retention

hot888 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, taking into account applicable legal obligations. The following general retention guidelines apply:

• Account data (name, contact details, login history): Retained for the duration of the active account relationship and for a defined period following account closure, as required by anti-money laundering and fraud prevention obligations;
• Identity verification documents: Retained for a minimum of five years from the date of last account activity, in accordance with standard financial compliance requirements;
• Transaction records: Retained for a minimum of five years from the date of the transaction;
• Communications and support records: Retained for a period of two years from the date of the final communication in each case;
• Technical and usage data: Retained in anonymised or aggregated form for internal analytics purposes; personally identifiable technical data is deleted after twelve months.

When personal data is no longer required and its retention period has expired, it is securely deleted from our active systems and any backup archives within a reasonable operational window.

10. Your Rights

As a player on the hot888 Platform, you hold the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data hot888 holds about you at any time. We will provide this information in a clear, readable format within a reasonable timeframe;
• Right of Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For registered account details, many fields can be updated directly by contacting support;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations. We cannot delete data that we are legally required to retain;
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances, for example while a correction request is being investigated;
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including processing for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the hot888 support team via live chat or by emailing [email protected]. We will acknowledge your request promptly and aim to resolve it within 30 days. Complex requests may take longer, in which case we will keep you informed of the progress.

11. Marketing Communications

hot888 may send promotional messages, bonus offers, and platform news to players who have opted in to receive such communications. Marketing messages are sent via email or SMS to the contact details provided during registration.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email;
• Replying STOP to any promotional SMS message;
• Contacting the support team directly to update your communication preferences.

Opting out of marketing communications does not affect the delivery of transactional messages, such as deposit confirmations, withdrawal notifications, account security alerts, and responses to support queries. These service messages are sent regardless of marketing preferences as they are necessary for the operation of your account.

hot888 does not share your contact details with third-party marketers. Any promotional communication you receive will originate exclusively from hot888 and will relate solely to hot888 products and services.

12. Children's Privacy

The hot888 Platform is strictly restricted to individuals aged 18 years and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has registered on the Platform or provided personal data without appropriate parental oversight, please contact us immediately at [email protected].

Upon receiving a credible report of a minor's account, hot888 will immediately suspend the account pending investigation, delete all personal data associated with the minor, and void any transactions made from that account. Age verification procedures are in place at registration and during KYC review specifically to prevent underage access.

13. Third-Party Links

The hot888 Platform does not include links to external third-party websites. All navigation links within the Platform direct you to pages within the hot888 domain. As a result, the risk of your data being inadvertently shared with third-party sites through navigation on hot888.biz is minimised by design.

Should hot888 ever introduce links to external resources in future, this Policy will be updated accordingly. Any external sites would be subject to their own independent privacy policies, for which hot888 accepts no responsibility.

14. Updates to This Policy

hot888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players by email or via an in-platform notice at least 7 days before the changes take effect, except where immediate revision is required for legal or security reasons.

The current version of this Policy is always accessible on this page, identified by its effective date at the top of the document. Continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy. If you do not agree with any update, you may request account closure by contacting the support team.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please get in touch with the hot888 team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week — average response time under 5 minutes
• Email: [email protected] — typical response within 1–4 hours

For data rights requests specifically (access, correction, deletion), please include "Data Rights Request" in the subject line of your email along with your registered account username so that we can locate your records promptly.

hot888 treats all privacy enquiries with strict confidentiality. Our support team will never ask for your password, full payment card details, or full mobile wallet PIN when handling a privacy request.

Effective Date: 1 January 2026  |  Version: 1.0  |  Platform: hot888.biz