hgxy Privacy Policy — How We Handle Your Personal Data

hgxy ("hgxy", "we", "us", "our") operates the online casino and sports betting platform available at hgxy.bet. We are committed to safeguarding the personal information of all users who access and use our platform, including registered players based in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and across Bangladesh. This Privacy Policy sets out the basis on which we collect, process, store, and share personal data in connection with your use of hgxy.

By registering an account on hgxy or by continuing to use the platform after this Privacy Policy has been published or updated, you acknowledge that you have read and understood this policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please do not use hgxy's services.

hgxy collects personal information through several channels during your use of the platform. The categories of data we collect include:

• Registration data: your mobile number, chosen username, password (stored in encrypted form), and date of birth. This data is provided directly by you when you create your hgxy account.
• Identity verification data: where hgxy requests KYC verification, you may be asked to provide a copy of a government-issued identity document (such as a National ID or passport) and a selfie or document photograph to verify your identity and age. This data is handled with the highest level of security and used solely for verification purposes.
• Transaction data: records of deposits made via bKash, Nagad, Rocket, or Upay; withdrawal requests and outcomes; bonus credits and debits; and your account balance history. This data is necessary for us to process payments, resolve disputes, and comply with anti-money laundering obligations.
• Gameplay and betting data: records of games played, bets placed, outcomes, and session durations. This data is used to run the platform, detect fraudulent activity, enforce responsible gaming limits, and improve our service offering.
• Device and technical data: your IP address, device type, operating system, browser type, and general location (country/region level). This data is collected automatically when you access hgxy and is used for security monitoring, fraud prevention, and platform performance optimisation.

hgxy does not collect data that is unnecessary for the purposes described in this policy. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health data, and we do not request financial data beyond what is required to process deposits and withdrawals via your chosen Bangladesh payment method.

hgxy uses the personal data collected for the following purposes, each of which is necessary to provide the services described on hgxy.bet:

• Account creation and management: to create and maintain your hgxy account, verify your identity and age, process your login, and manage your account settings and preferences.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, maintain transaction records, and comply with anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Platform security and fraud prevention: to monitor accounts and transactions for suspicious activity, detect and prevent fraud, enforce our Terms & Conditions, and protect the integrity of hgxy's games and betting markets.
• Responsible gaming: to monitor gambling activity for indicators of problematic behaviour, enforce deposit limits and self-exclusion requests, and comply with our commitment to responsible gaming as described in the hgxy Responsible Gaming page.
• Customer support: to respond to account queries, payment issues, complaints, and other support requests submitted via [email protected] or through the platform's support channels.
• Platform improvement and analytics: to analyse aggregated and anonymised usage data to understand how hgxy is used, identify areas for improvement, and optimise the platform experience for Bangladesh players. Analytics data does not identify individual users.

hgxy does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. We share your personal data only in the following limited circumstances:

• Payment processors: we share the transaction data necessary to process your deposit or withdrawal request with your chosen payment provider (bKash, Nagad, Rocket, or Upay). These providers operate under their own privacy policies and are not permitted to use your data for any purpose other than completing the transaction.
• Game providers: game studios such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and others receive the minimum session and account data required to deliver their games on the hgxy platform. They do not receive your payment data or full identity documents.
• Fraud prevention and security services: we may share limited technical data (such as IP address and device fingerprint) with specialist fraud prevention and security service providers to protect hgxy's platform from abuse and to comply with anti-money laundering obligations.
• Legal obligations: if required by applicable law, court order, or regulatory authority, hgxy may be required to disclose personal data. We will only make such disclosures to the extent required by law and will, where legally permissible, notify the affected account holder in advance.

hgxy does not share personal data with advertising networks, data brokers, or social media platforms. We do not use your personal data for targeted advertising outside of the hgxy platform itself.

When you make a deposit or withdrawal on hgxy using bKash, Nagad, Rocket, or Upay, your payment is processed directly by that payment provider. hgxy does not store your bKash PIN, Nagad PIN, Rocket PIN, Upay PIN, or any equivalent payment authentication credential. The payment provider's own privacy policy governs how they handle your payment authentication data during the transaction. hgxy receives only a transaction confirmation and the associated transaction reference number.

Transaction records held by hgxy (amounts, dates, payment method used, and transaction reference numbers) are retained as required to comply with financial record-keeping obligations and to handle any payment dispute or withdrawal verification request. These records are not accessible to third parties outside of the circumstances described in Section 4 of this policy.

hgxy uses cookies and similar tracking technologies on hgxy.bet. Cookies are small text files stored on your device when you visit the platform. hgxy uses three categories of cookies:

• Essential cookies: required for core platform functionality, including session management (keeping you logged in during a gaming session), security token validation, and responsible gaming tool enforcement. These cookies cannot be disabled without breaking core functionality.
• Analytics cookies: used to collect aggregated, anonymised data about how hgxy is used — for example, which pages are visited most frequently, how long sessions last, and which features are used. This helps us improve the platform for Bangladesh players. Analytics data does not identify individual users.
• Preference cookies: used to remember your platform settings and preferences between sessions, such as your language preference or notification settings, so you do not have to reconfigure these each time you log in.

You can manage or disable non-essential cookies through your device's browser settings. Note that disabling essential cookies will impair core platform functionality and may prevent you from logging in or accessing certain features. hgxy does not use third-party advertising cookies or share cookie data with advertising networks.

hgxy implements industry-standard security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL (Secure Socket Layer) encryption for all data transmitted between your device and hgxy.bet, encrypted storage of passwords and sensitive account data, role-based access controls that restrict which hgxy staff members can access personal data, and regular security audits and vulnerability assessments.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal data and poses a risk to your rights, hgxy will notify affected users promptly and take all reasonable steps to mitigate the impact. You can help protect your account by using a strong, unique password for your hgxy login and by logging out when using shared or public devices.

hgxy retains your personal data for as long as your account is active and for a period after account closure as required by applicable financial record-keeping obligations. Specifically: registration and identity data is retained for a minimum of five years following account closure; transaction records are retained for a minimum of five years following the date of each transaction; gameplay and session data is retained for a minimum of three years. These retention periods reflect standard financial compliance requirements and allow us to resolve any disputes that may arise following account closure.

When your personal data is no longer required for the purposes described in this policy and the applicable retention period has expired, hgxy will securely delete or anonymise your data. Anonymised data (data from which all identifying information has been permanently removed) may be retained indefinitely for aggregated analytics purposes.

hgxy respects your rights in relation to the personal data we hold about you. You may exercise the following rights at any time by contacting hgxy support at [email protected]:

• Right of access: you may request a copy of the personal data hgxy holds about you. We will provide this within a reasonable timeframe. Note that we may need to verify your identity before fulfilling an access request.
• Right of rectification: if the personal data hgxy holds about you is inaccurate or incomplete, you may request that we correct or update it. You may also update certain account details (such as your contact information) directly from within your hgxy account settings.
• Right of erasure: you may request deletion of your personal data. We will honour erasure requests subject to our legal obligation to retain certain financial and identity data for the retention periods described in Section 8 of this policy. Data that we are legally required to retain cannot be deleted until the applicable retention period has expired.
• Right to restrict processing: in certain circumstances — for example, if you contest the accuracy of data we hold — you may request that we restrict our processing of your personal data while the matter is resolved.
• Right to withdraw consent: where hgxy processes your personal data on the basis of your consent (for example, for non-essential analytics cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of the above rights, please contact hgxy support at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. hgxy will acknowledge receipt of your request within 5 business days and will respond fully within 30 days. In complex cases this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

hgxy is strictly for adults aged 21 and above. hgxy does not knowingly collect or process personal data from persons under the age of 21. Registration on hgxy requires users to confirm that they are 21 or older, and hgxy may request identity documents to verify this at any time. If hgxy discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be permanently closed.

If you believe that a person under 21 has registered on hgxy or has used an hgxy account without authorisation, please contact us immediately at [email protected] so that we can investigate and take appropriate action. We take the protection of minors very seriously and will act swiftly on any credible report.

hgxy may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy — changes that affect your rights or significantly alter how we use your data — we will notify registered users via a platform notification or by sending a message to the mobile number registered on the account. The updated policy will always be available at hgxy.bet/privacy-policy.

Your continued use of hgxy following the publication of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any changes, you must stop using hgxy and may request account closure by contacting [email protected]. The version of this policy in effect at the time any data was collected governs how that data is handled.

If you have any questions, concerns, or complaints about this Privacy Policy or about how hgxy handles your personal data, our support team is available 24 hours a day, 7 days a week. We serve Bangladesh players from Dhaka to Cox's Bazar and everywhere in between, and we take every privacy enquiry seriously. Please allow up to 5 business days for an initial response to privacy-related enquiries.

Email us at: [email protected]