hyplay Privacy Policy

Information We Collect

hyplay collects personal data from players in Bangladesh through several channels: directly when you register an account or contact support, automatically when you browse and interact with the platform, and from third-party payment providers when you deposit or withdraw funds. The categories of data we collect are described below.

Account Registration Data

When you create a hyplay account, you are required to provide the following information:

• Full legal name — as it appears on your Bangladesh National Identity Card (NID) or passport.
• Date of birth — used to verify that you meet the 18+ age requirement.
• Email address — used for account communications, security alerts, and optional promotional messages.
• Mobile phone number — used for two-factor authentication and, where applicable, mobile money payment matching (bKash, Nagad, Rocket).
• Residential address in Bangladesh — including district (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code.
• Username and password — your chosen login credentials for hyplay Login access.

KYC Verification Documents

Prior to processing any withdrawal, hyplay's compliance team requires documentary proof of identity and address. Acceptable KYC documents include a scanned copy or photograph of your Bangladesh NID, valid passport, or driving licence. You may also be asked to provide a recent utility bill, bank statement, or mobile operator statement as proof of your current address. All KYC documents are stored securely and used solely for identity verification purposes.

Payment & Transaction Data

When you make a deposit or request a withdrawal, hyplay records the transaction amount, date, time, payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank), and a transaction reference number. hyplay does not store full card numbers or mobile banking PINs; payment processing for card transactions is handled by PCI-DSS-compliant third-party payment gateways that transmit only tokenised data to hyplay's systems.

Usage & Behavioural Data

hyplay automatically collects certain technical and behavioural data when you use the platform, including your IP address, device type, operating system, browser type and version, session duration, pages visited, games played, bet amounts and outcomes, and in-game navigation patterns. This data is used for platform security monitoring, responsible gaming assessments, and improving the overall user experience.

Customer Support Records

If you contact the hyplay support team via live chat or email, a transcript of that interaction is retained for quality assurance, staff training, and dispute resolution purposes. Support records may include any personal details you voluntarily share during the course of the conversation.

How We Use Your Data

hyplay processes personal data on one of four lawful bases: (a) the performance of a contract — processing necessary to operate your account and deliver the services you have signed up for; (b) legal obligation — processing required to comply with KYC, anti-money laundering (AML), and responsible gaming laws; (c) legitimate interests — processing that serves hyplay's reasonable operational interests without overriding your privacy rights; and (d) consent — processing that you have explicitly opted into, such as marketing communications.

hyplay does not use automated decision-making processes that produce legally significant outcomes for players without human oversight. Where automated tools are used in fraud detection or responsible gaming monitoring, any consequential action (such as account suspension) is reviewed by a qualified member of the hyplay compliance or security team before being enforced.

Data Sharing & Third Parties

hyplay does not sell your personal data. We share personal information with third parties only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

Payment Service Providers

To process deposits and withdrawals, hyplay shares transaction data with payment partners including bKash, Nagad, Rocket, Upay, and card processing gateways connected to Visa and Mastercard. Sharing is limited to the data required to authenticate and settle each individual transaction. These providers operate under their own privacy policies and are contractually bound to use your data only for payment processing purposes.

Game Software Providers

hyplay's casino games are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and others. These providers may receive anonymised session identifiers and technical parameters necessary to load and operate the game environment. They do not receive your full name, NID details, or financial account information.

Compliance and Law Enforcement

hyplay may disclose personal data to financial intelligence units, law enforcement agencies, or regulatory authorities in Bangladesh and internationally where it is legally required to do so — for example, in connection with an AML investigation, a court order, or a formal regulatory inquiry. Such disclosures are made strictly on a need-to-know basis and only to the extent required by law.

Service Providers and Technology Partners

hyplay engages specialist service providers to support platform operations, including cloud hosting infrastructure, cybersecurity services, and customer communication platforms. These providers process personal data as data processors acting under hyplay's instruction and are contractually prohibited from using that data for any purpose beyond the specific service they provide.

Cookies & Tracking Technologies

hyplay uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate the platform, maintain your logged-in state, personalise your experience, and gather analytics data about how the site is used. The table below summarises the categories of cookies we deploy.

hyplay does not deploy third-party advertising cookies or cross-site tracking pixels. Analytics data collected via cookies is aggregated and does not identify individual players by name. You may control non-essential cookies through your browser settings at any time. Note that disabling functional cookies may affect certain platform features such as saved preferences.

Session Tokens and hyplay Login

When you authenticate via hyplay Login, a secure session token is stored in your browser. This token expires automatically after a period of inactivity and is invalidated immediately upon logout. Session tokens are cryptographically signed and cannot be forged or reused across devices. If you use a shared device, always log out after your session to prevent unauthorised access.

Data Retention & Storage

hyplay retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise in connection with your account. The retention periods we apply to the main categories of data are as follows:

• Account registration data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by applicable law or an ongoing compliance investigation.
• Transaction records: Retained for seven (7) years from the date of each transaction, consistent with financial record-keeping obligations.
• Betting and gameplay logs: Retained for three (3) years from the date of each session for responsible gaming monitoring and dispute resolution purposes.
• Customer support transcripts: Retained for two (2) years from the date of the interaction.
• Marketing consent records: Retained for as long as you remain opted in, and for one (1) year following withdrawal of consent as proof that hyplay honoured the opt-out request.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Physical documents (where applicable) are destroyed in a manner that prevents reconstruction.

Player data stored on hyplay's servers is hosted within access-controlled infrastructure. Access to production databases is restricted to a limited number of authorised personnel and is subject to audit logging. All storage environments are subject to regular security assessments.

Your Privacy Rights

As a hyplay player in Bangladesh, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the hyplay support team via 24/7 live chat or email at [email protected]. hyplay will respond to all valid data rights requests within thirty (30) calendar days of receipt.

• Right of Access: You may request a copy of all personal data that hyplay holds about you. hyplay will provide this in a structured, readable format within the 30-day response window.
• Right to Rectification: If any personal data held by hyplay is inaccurate or out of date — for example, a change of address following a relocation within Bangladesh — you may request a correction at any time.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis applies. Note that erasure requests cannot be fulfilled where hyplay is legally required to retain the data (e.g., AML record-keeping obligations).
• Right to Restrict Processing: You may request that hyplay restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of that data.
• Right to Data Portability: For data processed on the basis of consent or contract, you may request that hyplay provide your data in a machine-readable format so that it can be transferred to another service provider.
• Right to Withdraw Marketing Consent: You may withdraw consent to receive promotional emails or SMS messages at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of any processing that occurred prior to the withdrawal.
• Right to Object: Where hyplay processes your data on the basis of legitimate interests, you have the right to object to that processing. hyplay will assess your objection and cease processing unless compelling legitimate grounds exist that override your interests.

Data Security Measures

hyplay implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security controls in place include:

• TLS/SSL encryption: All data in transit between your browser or device and hyplay's servers is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Encryption at rest: Sensitive fields in hyplay's databases — including KYC document references, payment tokens, and hashed passwords — are encrypted at rest using AES-256.
• Password hashing: Account passwords are never stored in plain text. hyplay uses a strong one-way hashing algorithm with salting so that even hyplay personnel cannot recover your original password.
• Role-based access control: Internal access to player data is governed by a strict role-based permissions model. Staff members can only access the data necessary for their specific function.
• Audit logging: All access to production databases containing personal data is logged with timestamps, user identifiers, and the nature of the access. Logs are reviewed regularly for anomalous activity.
• Vulnerability management: hyplay conducts regular security assessments and acts promptly to remediate any identified vulnerabilities in the platform's infrastructure or application code.
• Incident response: In the event of a confirmed data breach that affects player personal data, hyplay will notify affected players and take immediate remediation steps within the timeframes required by applicable law.

While hyplay maintains rigorous security standards, no online platform can guarantee absolute security against all possible threats. Players are encouraged to protect their own accounts by using a strong, unique password for hyplay Login, enabling any available two-factor authentication options, and logging out fully after each session — particularly when using shared or public devices.

Policy Updates & Contact

hyplay reviews this Privacy Policy periodically and may update it to reflect changes in data practices, legal requirements, or platform features. Where a revision involves a material change to how we process personal data, hyplay will notify registered players via the email address on file or through a prominent in-platform notice at least seven (7) days before the change takes effect. Minor corrections or clarifications that do not alter the substantive rights of players may be published without advance notice.

The effective date at the top of this document always reflects the date of the most recently published version. Your continued use of the hyplay platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

How to Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise a data rights request, or wish to raise a concern about how hyplay handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by trained staff and will receive a substantive response within thirty (30) calendar days.

• Live Chat: Available 24/7 in English and Bengali via the hyplay platform.
• Email: [email protected] — plain text, not a clickable link.
• Hours: All days of the year, Bangladesh Standard Time (BST, UTC+6).

hyplay is committed to resolving all privacy concerns fairly and promptly. If you are not satisfied with the outcome of a privacy enquiry, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.