hhh5 Privacy Policy
This Privacy Policy explains how hhh5 collects, processes, stores, and protects the personal data of every player on the hhh5 platform. We are committed to handling your information transparently and responsibly, in a manner consistent with your rights as a Bangladesh-based user.
1 Introduction
hhh5 ("we", "us", "our", "the Platform") operates the online betting and casino platform accessible at hhh5.io, which is designed for and directed at adults aged 21 and above in Bangladesh. As the operator of this platform, hhh5 acts as the data controller in respect of all personal information collected from players and visitors through the hhh5.io website and associated services.
This Privacy Policy ("Policy") sets out the basis on which personal data is collected, processed, stored, and disclosed by hhh5. It applies to all users of hhh5.io, including registered account holders, visitors browsing the platform without an account, and anyone who contacts our support team at [email protected].
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and hhh5. Where there is any conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy shall prevail.
2 Data We Collect
hhh5 collects the following categories of personal data from players and platform visitors. The specific data collected depends on how you interact with the platform.
| Category | Examples | Collected When |
|---|---|---|
| Identity Data | Full legal name, date of birth, NID or passport number, photograph | Registration & KYC verification |
| Contact Data | Bangladesh mobile number, email address, residential address (division/district) | Registration & account updates |
| Financial Data | bKash/Nagad/Rocket wallet numbers, bank account details, transaction history, deposit and withdrawal records in BDT | Deposits, withdrawals, KYC |
| Account Data | Username, encrypted password, account balance, bonus balance, wagering history, bet records | Account creation & platform use |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, time zone (Bangladesh Standard Time) | Every platform visit |
| Usage Data | Pages visited, games played, bet amounts, game session durations, feature interactions | Active platform use |
| Communication Data | Support chat transcripts, emails sent to [email protected], feedback submissions | Customer support interactions |
| Responsible Gaming Data | Deposit limits set, cooling-off periods activated, self-exclusion requests | Use of responsible gaming tools |
hhh5 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data beyond what is strictly necessary for mandatory identity verification (e.g., a photograph on an NID document). Where such information appears incidentally in a document submitted for KYC purposes, it is not extracted, stored separately, or processed for any purpose other than identity confirmation.
3 How We Collect Your Data
hhh5 collects personal data through the following channels:
- Direct Collection: Information you provide directly when completing the registration form, submitting KYC documents, updating your account profile, making a deposit or withdrawal request, or contacting [email protected].
- Automated Technologies: Technical and usage data collected automatically when you visit hhh5.io, via server logs, session tracking, and first-party cookies and similar technologies described in Section 8 of this Policy.
- Payment Processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard when you initiate a financial transaction on the platform. We receive only the data necessary to confirm receipt or dispatch of funds; we do not receive full card numbers or mobile banking PINs.
- Identity Verification Services: Confirmation signals from third-party KYC and fraud-detection service providers used to validate the authenticity of identity documents you submit.
- Game Studios: Aggregate game-session data received from game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi as part of normal game operation and RTP reporting. This data is pseudonymised at the studio level and does not include your name or contact details.
4 Purpose and Legal Basis of Processing
hhh5 processes your personal data only for specific, legitimate purposes. The table below sets out each processing purpose and the corresponding legal basis.
| Purpose | Legal Basis |
|---|---|
| Creating and managing your hhh5 account | Performance of contract |
| Processing deposits and withdrawals in BDT | Performance of contract |
| Verifying your identity and age (KYC / 21+ compliance) | Legal obligation & legitimate interest |
| Detecting and preventing fraud, money laundering, and bonus abuse | Legal obligation & legitimate interest |
| Delivering responsible gaming tools and monitoring for problem gambling indicators | Legal obligation & legitimate interest |
| Responding to support queries and resolving disputes | Performance of contract & legitimate interest |
| Sending transactional notifications (deposit confirmations, withdrawal updates) | Performance of contract |
| Sending promotional communications about hhh5 bonuses and offers | Consent (you may opt out at any time) |
| Improving platform performance and user experience through analytics | Legitimate interest |
| Complying with applicable laws and regulatory obligations | Legal obligation |
Where hhh5 processes your data on the basis of consent (for example, sending marketing communications about promotions, seasonal offers such as Eid or Pohela Boishakh bonuses, or cricket BPL event promotions), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, email [email protected] with the subject line "Marketing Opt-Out".
5 Data Sharing and Disclosure
hhh5 does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality or data-processing agreements:
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to process transactions you have initiated.
- Identity Verification & KYC Providers: Third-party services engaged to validate identity documents and screen against sanctions lists, operating under strict confidentiality agreements with hhh5.
- Fraud Detection & Security Providers: Specialist analytics and threat-detection services that help hhh5 identify unauthorised access, bonus abuse, and automated bot activity on the platform.
- Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Habanero receive session tokens and pseudonymised player identifiers necessary to deliver game content. These providers do not receive your full name, mobile number, or financial details from hhh5.
- IT Infrastructure & Hosting Providers: Cloud hosting and content-delivery providers that store and serve the hhh5 platform under data-processing agreements requiring them to act solely on our instructions.
- Legal and Regulatory Authorities: Where required by applicable law, by court order, or by a competent regulatory or law-enforcement authority. hhh5 will, where legally permitted, notify you of any such disclosure request before complying.
6 Data Retention
hhh5 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply as general guidelines:
- Account and identity data: Retained for the duration of your active account, plus a minimum of 5 years following account closure, to satisfy anti-money-laundering record-keeping obligations.
- Financial transaction records: Retained for a minimum of 7 years from the date of each transaction, in accordance with standard financial record-keeping practice.
- KYC verification documents: Retained for 5 years from the date of verification or from account closure, whichever is later.
- Support correspondence: Retained for 3 years from the date of the last communication in each support thread.
- Technical and usage logs: Retained for 13 months from the date of collection, after which they are automatically deleted or anonymised.
- Marketing consent records: Retained for the duration of your consent plus 1 year after withdrawal, as evidence of lawful processing.
At the end of the applicable retention period, personal data is securely deleted or rendered permanently anonymous. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregate statistical and platform-improvement purposes.
7 Data Security
hhh5 applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures in place include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the hhh5 servers is encrypted in transit using 256-bit SSL/TLS protocols. Look for the padlock icon in your browser address bar when visiting hhh5.io.
- Encrypted Storage: Sensitive data fields — including passwords (stored as salted hashes, never in plain text), financial account references, and KYC document files — are encrypted at rest on hhh5 servers.
- Two-Factor Authentication (2FA): All registered players may enable SMS-based 2FA on their accounts from the account security settings panel. hhh5 strongly recommends enabling 2FA to protect against unauthorised login attempts.
- Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. hhh5 staff who handle player data are subject to confidentiality obligations and receive regular data-security training.
- Penetration Testing & Vulnerability Scanning: The hhh5 platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: In the event of a data security incident that poses a material risk to affected players, hhh5 will notify impacted users by email within 72 hours of becoming aware of the incident, and will take immediate remediation steps.
8 Cookies & Tracking Technologies
hhh5 uses cookies and similar local storage technologies on hhh5.io to provide core platform functionality and to understand how players use the site. The following categories of cookies are used:
- Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core platform functionality.
- Functional Cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming tool configurations so you do not need to re-enter them on each visit.
- Analytics Cookies: First-party analytics cookies that help hhh5 understand which pages and features are most used, how long sessions last, and where users encounter errors. This data is collected in aggregate and is used solely to improve the hhh5 platform. hhh5 does not use Google Analytics or other third-party analytics platforms that would transfer your data to external companies for their own purposes.
- Security Cookies: Short-lived tokens used by our fraud-detection systems to identify unusual access patterns, such as multiple rapid login attempts or access from a new device or IP address.
Cookies are stored on your device only for the duration necessary for their stated purpose. Session cookies are deleted when you close your browser. Persistent cookies have a maximum lifespan of 13 months from last activity. You may manage or delete cookies through your browser settings at any time; however, disabling strictly necessary cookies will prevent you from logging in to your hhh5 account.
hhh5 does not use advertising cookies, retargeting pixels, or any third-party tracking technology that shares your browsing behaviour with external advertisers or data brokers.
9 Your Data Rights
As a data subject, you have the following rights in relation to personal data held by hhh5. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". hhh5 will respond within 30 days of receipt.
Right of Access
Request a copy of all personal data hhh5 holds about you, including account records, transaction history, and KYC data, delivered in a readable format within 30 days.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your hhh5 account profile. Minor corrections (e.g., phone number updates) can be made directly in account settings.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected. Note: data subject to mandatory legal retention periods (e.g., financial records) cannot be deleted until those periods expire.
Right to Restriction
Request that hhh5 restricts processing of your data to storage only while a rectification or objection request is being assessed, or where you contest the accuracy of the data held.
Right to Portability
Receive a structured, machine-readable copy of data you have provided to hhh5 (account data, transaction history) for transfer to another service provider where technically feasible.
Right to Object
Object to processing carried out on the basis of legitimate interest, including direct marketing communications. Marketing objections are acted upon immediately upon receipt; other objections are reviewed within 30 days.
10 Minors and the 21+ Requirement
The hhh5 platform is strictly intended for adults aged 21 years and above. hhh5 does not knowingly collect or process personal data from individuals under the age of 21. All registration attempts are subject to age verification, and full KYC identity checks are required before any withdrawal can be processed.
If hhh5 becomes aware that personal data has been collected from an individual under the age of 21, all data associated with that individual will be permanently deleted, the account will be closed immediately, and any associated balance will be voided in accordance with our Terms & Conditions.
Parents and guardians who believe a minor may have accessed hhh5 are encouraged to contact [email protected] immediately. hhh5 will investigate and take appropriate action within 24 hours of receiving such a report.
11 International Data Transfers
The hhh5 platform is operated from servers and infrastructure that may be located in jurisdictions outside Bangladesh. When your personal data is transferred to or processed in a country outside Bangladesh, hhh5 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Such safeguards include contractual data-processing agreements with all sub-processors and hosting providers that require them to handle data in accordance with internationally recognised data protection principles.
Game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) operate their own infrastructure globally. hhh5 shares only pseudonymised session tokens with these providers — no full names, mobile numbers, or financial details are transmitted to game studios during normal game delivery.
Payment data associated with bKash, Nagad, Rocket, and other Bangladesh-based payment providers is processed within Bangladesh by those providers in accordance with Bangladesh Bank regulations and their own published privacy policies.
12 Changes to This Policy
hhh5 reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform operations, applicable laws, or best practice standards. When material changes are made, hhh5 will notify registered players by email to the address on file and will post a prominent notice on hhh5.io for a minimum of 14 days following the effective date of the change.
The "Last updated" date at the top of this document indicates the most recent revision. We encourage you to review this Policy periodically. Your continued use of the hhh5 platform after any amendment constitutes your acceptance of the revised Policy.
13 Contact Us
If you have any questions about this Privacy Policy, wish to exercise a data right, or want to report a privacy concern, please contact the hhh5 support team using the details below. All privacy-related requests and enquiries are handled by our dedicated support staff.
- Email: [email protected] (plain text — not a clickable link)
- Subject line for data rights requests: "Data Rights Request"
- Subject line for privacy concerns: "Privacy Concern"
- Response time: under 4 hours for general queries; within 30 days for formal data rights requests
- Hours: 24/7, Bangladesh Standard Time (UTC+6)
- Language: English
How hhh5 Protects Your Data
Six principles that guide every data decision we make at hhh5, from the moment you register to long after your last session.
256-bit SSL Encryption
All data transmitted between your device and hhh5.io is encrypted end-to-end. Passwords are stored as salted hashes — never in plain text — and sensitive fields are encrypted at rest on our servers.
No Data Sales, Ever
hhh5 does not sell, rent, or trade your personal data to advertisers, data brokers, or any third party for commercial gain. Your information is used solely to operate your account and the platform.
Mandatory KYC & 21+ Age Gate
Identity verification protects both the platform and its players. KYC data is handled with the highest level of care, shared only with accredited verification providers, and retained only for the legally required period.
Bangladesh Payment Privacy
Financial data related to bKash, Nagad, Rocket, and bank transfers is processed within Bangladesh by those providers. hhh5 never stores full wallet PINs, card CVVs, or one-time passwords on our systems.
Clear Retention Periods
We keep your data for defined, justified periods — no longer. Account data is held for 5 years post-closure; transaction records for 7 years per financial standards; technical logs for just 13 months before deletion.
Your Rights, Respected
Access, rectification, erasure, portability, restriction, and objection — all six data rights are honoured. Submit a request to [email protected] and receive a substantive response within 30 days, guaranteed.
Your Data is Safe at hhh5
We handle your personal information with care so you can focus on enjoying cricket betting, slots, and live casino games with complete peace of mind. Ready to explore the platform?