hybet Privacy Policy

1 Information We Collect

hybet collects personal data about you through several channels: directly from you when you register an account or use our services; automatically when you interact with the platform; and in limited cases from trusted third-party sources as part of our identity verification and fraud prevention processes. We collect only the information that is necessary and proportionate for the purposes described in this Policy.

1.1 Information You Provide Directly

When you register a hybet account, make a deposit or withdrawal, contact our support team, or participate in a promotion, you provide us with personal information. This includes:

• Registration details: Your full legal name, date of birth, gender, residential address (including district and division within Bangladesh), email address, and mobile phone number.
• Identity verification documents: Copies of your National Identity Card (NID), passport, or driver's licence submitted as part of the KYC process.
• Payment information: Your mobile financial service account references (bKash, Nagad, Rocket, Upay) or bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) used for deposits and withdrawals. hybet does not store full card numbers for Visa or Mastercard transactions — these are handled by our payment processors under their own security standards.
• Communications: Any messages, queries, complaints, or feedback you send to hybet through live chat, email, or our contact form.
• Responsible gaming preferences: Deposit limits, cool-off requests, self-exclusion requests, and any disclosures you make to our support team about your gaming behaviour.

1.2 Information Collected Automatically

When you access and use the hybet platform, we automatically collect certain technical and behavioural data through cookies, server logs, and similar tracking technologies:

• Device and technical data: IP address, device identifier, device type (mobile/desktop/tablet), operating system version, browser type and version, screen resolution, and time zone (displayed as Bangladesh Standard Time, BST UTC+6).
• Usage data: Pages and sections of the hybet platform you visit, games you launch and play (including studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe), duration of gaming sessions, betting history, wager amounts, and in-game decisions.
• Navigation data: Referring URLs (the website that directed you to hybet), click paths through the platform, and search queries made within the platform.
• Cookie data: Information stored by cookies and similar technologies as described in Section 4 of this Policy.

1.3 Information From Third Parties

In certain circumstances hybet may receive personal data about you from third parties, including:

• Identity verification providers: Third-party KYC and anti-money laundering (AML) screening services that help us confirm your identity and assess risk.
• Payment processors: Confirmation of transaction status from bKash, Nagad, Rocket, Upay, and banking partners to reconcile your account balance.
• Fraud prevention databases: Shared industry databases that flag accounts associated with fraudulent activity, chargeback abuse, or problem gambling self-exclusion schemes.

2 How We Use Your Data

hybet uses your personal data for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The following sets out the primary purposes for which we process your personal information and the legal basis for each.

2.1 Account Management and Service Delivery

We use your registration and identity data to create and manage your hybet account, authenticate your logins, process your deposits and withdrawals in Bangladeshi Taka (BDT), credit bonuses and promotional rewards to your account, provide access to casino games and sports betting markets, and deliver all other core platform services. This processing is necessary for the performance of the contract between you and hybet.

2.2 Identity Verification and Age Checking

hybet is committed to ensuring that only adults aged 18 and above use the platform. We use your identity data — including your NID, date of birth, and facial photograph where submitted — to verify that you meet the minimum age requirement and that your identity matches the account registration details. This processing is necessary both to fulfil our contractual obligations and to comply with our legal and ethical duty of care.

2.3 Fraud Prevention, Security, and AML Compliance

We process technical data, financial data, and usage data to detect and prevent fraud, money laundering, account takeover attempts, bonus abuse, and other prohibited activities described in our Terms & Conditions. This includes automated monitoring of betting patterns, transaction flows, and login behaviour. This processing is carried out in our legitimate interest as an operator and to meet applicable compliance obligations.

2.4 Responsible Gaming Monitoring

hybet uses your usage data and gaming history to monitor for indicators of problem gambling behaviour — such as rapid loss-chasing, sudden large deposits, or extended unbroken play sessions. Where such indicators are detected, our responsible gaming team may proactively contact you to offer support tools. This processing reflects both our legitimate interest in player welfare and our contractual obligation to promote responsible gaming.

2.5 Customer Support

We use your communications data and account history to respond to support queries, resolve disputes, investigate complaints, and provide assistance with deposits, withdrawals, and game issues. Support interactions may be recorded and retained for quality assurance and training purposes. This processing is necessary for the performance of our contract and our legitimate interest in maintaining service quality.

2.6 Marketing and Promotions

With your consent, hybet may use your contact data to send you information about promotions, bonuses, new games, seasonal offers (such as Eid specials, BPL cricket promotions, or Pohela Boishakh welcome offers), and other marketing communications. You may withdraw your consent to receive marketing messages at any time by contacting [email protected] or by updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

2.7 Platform Improvement and Analytics

We use aggregated and anonymised usage data to analyse how players interact with the hybet platform, identify technical issues, improve game navigation, optimise page loading performance, and develop new features. Where possible, analytics processing uses data that cannot be linked back to individual players.

3 Data Sharing & Disclosure

hybet does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

3.1 Service Providers and Technology Partners

We share personal data with carefully selected third-party service providers who assist us in operating the hybet platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum data necessary to process your transactions securely.
• Game studios: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other licensed game providers receive your session token and stake data to facilitate gameplay. They do not receive your full identity or payment details.
• KYC and AML providers: Third-party identity verification services receive the identity documents you submit to complete the KYC process.
• Customer support platforms: Our live chat and support ticketing systems store your support communications data.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics platforms to support platform improvement.

All third-party service providers are contractually required to process your data only on hybet's instructions, to maintain appropriate security standards, and not to use your data for their own purposes beyond those specified.

3.2 Legal and Regulatory Disclosure

hybet may disclose your personal data to law enforcement authorities, government agencies, regulatory bodies, or courts where we are legally required to do so, where disclosure is necessary to prevent or investigate fraud or other criminal activity, or where disclosure is required to protect the rights, property, or safety of hybet, its players, or the public. In all such cases, hybet will disclose only the minimum data necessary to fulfil the legal obligation.

3.3 Business Transfers

In the event that hybet undergoes a merger, acquisition, restructuring, or sale of all or part of its business, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances, you will be notified of any change in data controller and given the opportunity to request deletion of your data before any transfer takes effect.

4 Cookies & Tracking Technologies

hybet uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to keep your session secure, and to understand how the platform is used so we can improve the experience for all Bangladeshi players.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and store information about your preferences and interactions. Cookies can be session cookies (which expire when you close your browser) or persistent cookies (which remain on your device for a set period or until you delete them).

4.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the hybet platform to function. They enable core features such as account login, session management, and secure payment processing. Without these cookies, the platform cannot operate. No consent is required for these cookies as they are technically indispensable.
• Preference Cookies: These cookies remember your settings and preferences — such as your preferred language display or notification settings — so you do not have to re-enter them each time you visit.
• Analytics Cookies: These cookies collect anonymised information about how you use the hybet platform — which pages you visit most, how long sessions last, and which games you interact with. This data helps us identify improvements and understand overall usage patterns. These cookies require your consent.
• Security Cookies: These cookies support our fraud detection systems by helping us identify unusual patterns of access, multiple logins from different locations, and other security anomalies.

4.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse some or all cookies, delete existing cookies, and set preferences for specific websites. Please be aware that disabling strictly necessary cookies will prevent you from logging into or using the hybet platform. Analytics and preference cookies can be disabled without affecting core platform functionality.

For detailed instructions on managing cookies in your specific browser, consult the help documentation for your browser. Common browsers used by players in Bangladesh include Chrome for Android, Samsung Internet, and Firefox for Android — all of which provide accessible cookie management interfaces.

5 Data Retention

hybet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to meet our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following retention principles apply:

• Active account data: Personal data associated with your active hybet account is retained for the full duration of your account relationship with us.
• Financial transaction records: Records of all deposits, withdrawals, and betting transactions are retained for a minimum of five (5) years from the date of the transaction to meet financial record-keeping requirements.
• KYC and identity documents: Identity documents submitted for KYC verification are retained for a minimum of five (5) years following the closure of your account.
• Support communications: Customer support transcripts and correspondence are retained for three (3) years from the date of the interaction.
• Self-exclusion records: Records of self-exclusion requests are retained indefinitely to ensure that self-excluded players cannot re-register during their exclusion period and to facilitate re-enrolment requests where appropriate.
• Analytics data: Aggregated and anonymised analytics data may be retained indefinitely as it cannot be linked back to individual players.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our internal data deletion procedures. Where deletion is not immediately possible due to technical constraints, the data will be isolated and protected from further processing until deletion can be completed.

6 Data Security

hybet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework reflects industry best practices appropriate for an online gaming platform serving the Bangladesh market.

6.1 Technical Safeguards

• 256-bit SSL/TLS Encryption: All data transmitted between your device and hybet's servers is encrypted using industry-standard 256-bit SSL/TLS encryption. This ensures that your login credentials, payment information, and personal data cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal data — including identity documents and payment references — is stored in encrypted form on our servers. Encryption keys are managed under strict access controls.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and automated intrusion detection systems that monitor for and respond to anomalous access patterns in real time.
• Access Controls: Access to personal data within hybet is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate business reason may access your data, and all such access is logged and auditable.
• Vulnerability Management: hybet conducts regular security assessments and vulnerability scans to identify and remediate potential weaknesses in our platform and infrastructure.

6.2 Organisational Safeguards

• All hybet staff with access to personal data undergo regular data protection training.
• Third-party service providers are subject to contractual data security obligations and regular compliance reviews.
• hybet maintains an incident response plan to ensure that any personal data breach is identified, contained, and — where required — reported to affected players promptly.

6.3 Your Role in Security

While hybet takes every reasonable measure to protect your data, account security is a shared responsibility. You are strongly advised to use a strong, unique password for your hybet account, to enable two-factor authentication (2FA) where available, and never to share your login credentials with any other person. If you believe your account has been compromised, contact [email protected] immediately.

7 Your Privacy Rights

As a player on the hybet platform, you hold a number of rights with respect to your personal data. hybet is committed to honouring these rights and will respond to all valid requests within a reasonable timeframe. To exercise any of the rights described below, please contact our data team at [email protected] with the subject line "Privacy Rights Request".

hybet will respond to all privacy rights requests within 30 days of receipt. In cases of complex or multiple requests, the response period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your rights under normal circumstances. We may ask you to verify your identity before acting on a rights request to ensure we are responding to the correct individual.

8 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how hybet handles your personal data, please contact our team in writing at: [email protected] — using the subject line "Privacy Enquiry".

Our support team operates 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6) and will acknowledge your privacy enquiry within 5 business days. We aim to resolve all privacy-related queries and rights requests within 30 days.

8.1 Complaints

If you are not satisfied with hybet's response to a privacy enquiry or rights request, you have the right to escalate your complaint. hybet takes all privacy complaints seriously and will conduct a thorough internal review of any escalated matter. Please submit escalated complaints in writing to [email protected] with the subject line "Privacy Complaint — Escalation", including a description of your original request, our response, and the specific reason you are dissatisfied.

8.2 Policy Updates

hybet reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes to this Policy, we will notify active account holders via email or an in-platform notification at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of the hybet platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically so that you remain informed about how hybet protects your personal data. If you have concerns about any proposed changes, please contact us before the effective date and we will do our best to address them.