Your Privacy Matters at hit880
At hit880, we handle every piece of personal information you share with us as a serious responsibility. This Privacy Policy explains in plain terms what data we collect, how we use it, who we share it with, and the controls you have over it. We believe transparency is the foundation of trust.
Scope of This Policy: This Privacy Policy applies to all personal data processed by hit880 in connection with your use of the hit880 website, mobile interface, games lobby, sportsbook, live casino, customer support channels, and any associated services. By creating an account or continuing to use hit880 after this policy takes effect, you acknowledge that you have read and understood how your personal data is handled as described herein.
How hit880 Protects You
The following cards highlight the core pillars of the hit880 approach to data privacy. Detailed provisions for each topic appear in the full policy sections below.
SSL Encryption
All data transmitted between your device and hit880 is protected by industry-standard SSL/TLS encryption. This ensures that your personal details, payment information, and account credentials cannot be intercepted during transmission.
Minimal Data Collection
hit880 collects only the personal data that is strictly necessary to operate your account, process payments, verify your identity, and comply with legal obligations. We do not harvest data beyond what our stated purposes require.
No Sale of Personal Data
hit880 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used exclusively to deliver and improve the hit880 service for you.
Your Data Controls
Registered players on hit880 may request access to, correction of, or deletion of their personal data at any time by contacting our support team. We respond to all verified data requests within 30 days of receipt.
Cookie Transparency
hit880 uses cookies solely to keep your session active, remember your preferences, and analyse aggregated platform usage. We do not use tracking cookies to serve third-party advertising. You can manage cookie preferences through your browser settings.
Defined Retention Periods
Personal data is retained only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable law. Account data is held for a maximum of five years following account closure unless a longer period is mandated by anti-money-laundering regulations.
1. Data We Collect
hit880 collects personal data through several channels: directly from you during registration and account management, automatically through your interaction with the platform, and in limited cases from trusted third-party sources for identity verification purposes. The categories of data we collect are set out below.
Registration and Identity Data
- Full legal name as it appears on your government-issued identity document.
- Date of birth (used for age verification — players must be 18 or older).
- Residential address, including city, district, and postal code within Bangladesh.
- Bangladeshi mobile phone number (primary contact and two-factor authentication).
- Email address (used for account communications, security alerts, and promotional messages where consent is given).
- A copy of your National Identity Card (NID) or valid passport, submitted as part of the KYC process.
Financial and Transaction Data
- Mobile Financial Service account numbers (bKash, Nagad, Rocket, Upay) used for deposits and withdrawals.
- Bank account or card details where bank transfer or card payments are used.
- Full transaction history including deposit amounts, withdrawal requests, wager amounts, and bonus credits.
- Payment processing confirmation references provided by third-party payment providers.
Usage and Technical Data
- IP address and approximate geographic location derived from IP data.
- Device type, operating system, browser type and version.
- Pages visited, games played, time spent on platform, click-path data, and session duration.
- Login timestamps and logout events.
- Customer support interactions including chat transcripts and email correspondence.
Sensitive Data: hit880 does not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is inherent in a photographic identity document submitted for KYC purposes. If you believe you have shared sensitive data with us inadvertently, please contact [email protected] immediately.
2. How We Use Your Data
hit880 processes personal data only where there is a lawful basis for doing so. The table below summarises our primary processing purposes and the corresponding lawful basis for each.
| Processing Purpose | Lawful Basis | Details |
|---|---|---|
| Account registration and management | Contractual necessity | We need your data to create and operate your hit880 account and deliver the services you have requested. |
| Identity and age verification (KYC) | Legal obligation | We are required to verify player identity and age to prevent underage gambling and comply with anti-money-laundering obligations. |
| Processing deposits and withdrawals | Contractual necessity | Financial transaction data is required to credit your account, process withdrawals, and maintain accurate records. |
| Fraud prevention and platform security | Legitimate interests | We analyse usage patterns and transaction data to detect and prevent fraud, multi-accounting, and abuse of promotions. |
| Customer support | Contractual necessity | Support interactions are recorded to enable effective resolution of queries and to improve service quality. |
| Responsible gaming monitoring | Legal obligation / Legitimate interests | We monitor gambling behaviour to identify signs of problem gambling and to intervene with appropriate responsible gaming tools where warranted. |
| Marketing communications | Consent | We send promotional emails and SMS messages about bonuses, tournaments, and new games only where you have given explicit consent. You may withdraw consent at any time. |
| Platform analytics and improvement | Legitimate interests | Aggregated, anonymised usage data helps us understand how players interact with hit880 and guides product development decisions. |
hit880 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated systems flag an account for review (e.g., suspected multi-accounting or fraudulent activity), a qualified member of the hit880 compliance team reviews the case before any account action is taken.
3. Data Sharing & Disclosure
hit880 does not sell or rent personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Payment Service Providers
To process deposits and withdrawals, hit880 shares the minimum necessary financial data with trusted payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and international card processors operating Visa and Mastercard networks. These providers process your data strictly for payment execution purposes under their own privacy policies and are prohibited from using your data for any other purpose.
Identity Verification Partners
KYC document verification may be performed with the assistance of specialist identity verification technology providers. These providers process identity document images under strict data processing agreements with hit880 and are not permitted to retain or use your documents for any purpose beyond the single verification request.
Game Content Providers
Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate the games accessible through hit880. These providers may receive technical session data (such as a pseudonymous player token and bet amounts) necessary to deliver the game. They do not receive your full name, address, or payment details.
Legal and Regulatory Disclosure
hit880 may disclose personal data to relevant authorities, law enforcement agencies, or financial intelligence units where required by applicable law, a court order, or a lawful regulatory demand. We will notify you of any such disclosure to the extent permitted by law.
Business Transfers
In the event of a merger, acquisition, or sale of all or part of the hit880 business, personal data held by hit880 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any resulting changes to data processing practices prior to the transfer taking effect.
4. Cookies & Tracking
hit880 uses cookies and similar browser-storage technologies to provide a functional, personalised, and secure platform experience. We do not use third-party advertising cookies or cross-site tracking technologies. The cookies we use fall into the following categories:
Strictly Necessary Cookies
These cookies are essential for the hit880 platform to function. They keep you logged in during a session, maintain your game state, and protect against cross-site request forgery. These cookies cannot be disabled without rendering core platform features inoperable.
Preference Cookies
Preference cookies remember your language setting, display preferences, and last-visited game category so that your next session starts in a familiar state. These cookies are stored for up to 90 days and are reset each time you log in.
Analytics Cookies
hit880 uses first-party analytics to understand how players navigate the platform in aggregate. Data collected through analytics cookies is anonymised and used only to improve the product. We do not share analytics data with third-party advertising networks.
Managing Cookies
You can manage or delete cookies through your browser's privacy settings at any time. Disabling strictly necessary cookies will prevent you from logging in to your hit880 account. Disabling analytics or preference cookies will not affect your ability to use core platform features but may reduce the personalisation of your experience.
No Third-Party Ad Tracking: hit880 does not embed Facebook Pixel, Google Ads remarketing tags, or any other third-party behavioural advertising tracker on its platform. Your browsing activity on hit880 is not shared with advertising networks.
5. Data Retention
hit880 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, and no longer than is permitted or required by applicable law. The retention periods below represent our standard policy; longer retention may apply where required by financial regulation or ongoing legal proceedings.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Contractual and AML compliance obligations |
| KYC identity documents | Duration of account + 5 years post-closure | Anti-money-laundering record-keeping requirements |
| Financial transaction records | 7 years from transaction date | Financial record-keeping and audit trail obligations |
| Customer support records | 3 years from last interaction | Quality assurance and dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | Demonstration of lawful marketing basis |
| Analytics and usage data (anonymised) | 26 months rolling | Product improvement and trend analysis |
| Session and login logs | 12 months | Security monitoring and fraud investigation |
When a retention period expires, personal data is securely deleted or irreversibly anonymised. Deletion requests submitted by players are processed in accordance with applicable law; some data may be retained beyond the requested deletion date where a legal obligation requires it, in which case hit880 will notify you of the specific reason for the continued retention.
6. Your Privacy Rights
As a hit880 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please send a written request from your registered email address to [email protected]. We will respond within 30 days of receipt of a verified request.
Right of Access
You may request a copy of all personal data that hit880 holds about you. We will provide this in a structured, commonly used format. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For changes to core identity data (name, date of birth), supporting documentation may be required to verify the correction.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. This right is subject to legal retention obligations; we will inform you of any data that must be retained despite a deletion request and the reason for that retention.
Right to Restrict Processing
In certain circumstances — for example, where you contest the accuracy of data we hold or have objected to processing — you may request that we restrict our use of your data while the matter is resolved.
Right to Object to Marketing
You may withdraw consent for marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.
How to Submit a Request: Send your data rights request to [email protected] (plain text — not a clickable link) from the email address registered to your hit880 account. Include your full name, registered mobile number, and a clear description of the right you wish to exercise. We will acknowledge your request within 3 business days and complete it within 30 days.
7. Data Security
hit880 implements a layered approach to information security designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures in place include:
- Transport Layer Security (TLS 1.3): All data in transit between your device and hit880 servers is encrypted using TLS 1.3 or higher.
- Data at rest encryption: Personal data and financial records stored on hit880 infrastructure are encrypted using AES-256 or equivalent algorithms.
- Access controls: Access to personal data is restricted on a strict need-to-know basis. hit880 employees undergo background checks and are bound by confidentiality agreements. Access privileges are reviewed quarterly.
- Two-factor authentication: Player accounts support two-factor authentication via registered Bangladeshi mobile numbers. We strongly encourage all players to enable this feature.
- Penetration testing and vulnerability scanning: hit880's platform undergoes periodic security assessments by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
- Incident response: In the event of a data security incident that is likely to result in a risk to your rights and freedoms, hit880 will notify affected players promptly and take immediate steps to contain the incident and mitigate harm.
Your Responsibilities
While hit880 maintains robust technical and organisational security measures, the security of your account also depends on steps you take. You are responsible for keeping your password confidential, logging out after each session on shared devices, and reporting any suspected unauthorised access to your account to [email protected] without delay. hit880 will never ask you to share your password by email, chat, or any other channel.
8. Policy Updates & Contact
hit880 reviews this Privacy Policy periodically and updates it to reflect changes in our data processing practices, applicable law, or guidance from relevant data protection authorities. When we make material changes to this policy, we will:
- Update the "Last Updated" date at the top of this page.
- Send a notification to your registered email address summarising the key changes at least 14 days before they take effect.
- Display a prominent notice on the hit880 platform for a period of not less than 14 days following publication of the revised policy.
Your continued use of hit880 after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept a revised policy, you must cease using the platform and request account closure before the revised policy takes effect.
Contact for Privacy Enquiries
For questions, concerns, or requests related to this Privacy Policy or hit880's data processing practices, please contact our support team. All privacy-related enquiries are handled in English and are responded to within four business hours on Bangladesh Standard Time (BST, UTC+6) business days.
Email: [email protected] (plain text — not a clickable link). Please include "Privacy Enquiry" in the subject line of your message to ensure prompt routing to the appropriate team member.
Minors and Privacy: hit880 does not knowingly collect personal data from persons under the age of 18. If you believe that a person under 18 has registered an account on hit880, please contact [email protected] immediately so that we can investigate and close the account in accordance with our age verification policy. 18+ only.
Questions About Your Privacy?
Browse our FAQ for quick answers, explore the hit880 Casino games lobby, or visit our Responsible Gaming page for player protection tools. 18+ only. Play responsibly.
Visit the FAQ Explore hit880 Casino Responsible Gaming