98hi Privacy Policy — Your Data, Handled With Care

1. Data Controller Information

For the purposes of this Privacy Policy, 98hi acts as the data controller in respect of all personal data collected through the 98hi.io platform. As data controller, 98hi determines the purposes and means of processing your personal information.

All data protection and privacy enquiries, including requests to exercise your rights under applicable privacy law, should be directed to the 98hi data team using the contact details set out in Section 14 of this policy. Our designated point of contact for data-related matters is the 98hi support team, reachable at [email protected].

The platform operates on Bangladesh Standard Time (BST, UTC+6) and is designed specifically to serve players located in Bangladesh. While the platform is accessible from other locations, players outside Bangladesh access the service at their own legal risk and 98hi makes no representation that its data practices are compliant with the privacy laws of jurisdictions other than its primary operating territory.

2. What Data We Collect

98hi collects personal data across several categories depending on your interaction with the platform. The following table provides a structured overview of the categories of personal data we hold:

3. How We Collect Your Data

3.1 Data You Provide Directly

The primary source of personal data is information you voluntarily submit to 98hi, including during the account registration process, KYC identity verification, financial transactions, support interactions, and when updating your account preferences.

3.2 Automated Collection

When you visit 98hi.io, our servers automatically collect technical data about your device and session. This includes your IP address, the type and version of browser you are using, the pages you visit on the platform, and the duration of your session. This data is collected through standard server logs and analytics tools and is used for platform security, fraud detection, and service optimisation.

3.3 Cookies and Tracking Technologies

98hi uses cookies and similar tracking technologies to recognise returning users, maintain session continuity, and collect aggregated usage analytics. Full details of our cookie practices are provided in Section 6 of this policy.

3.4 Third-Party Sources

In certain circumstances, 98hi may receive data about you from third parties, including identity verification providers engaged for KYC purposes, payment processors such as bKash, Nagad, and Rocket, and fraud prevention services. Data received from these sources is handled in accordance with this policy and only used for the purposes for which it was collected.

4. Why We Use Your Data

98hi uses the personal data it collects for the following specific and legitimate purposes:

• Account creation and management: To register your account, verify your identity and age (21+ requirement), and manage your ongoing relationship with the platform.
• Service delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to settle wagers; to credit bonuses; and to fulfil all other gaming-related services you access through your account.
• KYC and compliance: To meet our internal age and identity verification obligations, and to comply with anti-money laundering (AML) procedures.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, account breaches, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming: To monitor gaming activity patterns and proactively identify players who may be exhibiting signs of problem gambling, in order to provide appropriate support and tool access.
• Customer support: To respond to your queries, complaints, and requests through our support channels.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by your chosen channel, where you have opted in to receive such communications. You may opt out at any time.
• Platform improvement: To analyse aggregated usage data to understand how the platform is used, identify areas for improvement, and develop new features and game offerings.
• Legal obligations: To comply with any applicable laws, regulations, court orders, or requests from law enforcement authorities.

5. Legal Basis for Processing

98hi processes your personal data on one or more of the following legal grounds depending on the specific purpose:

• Contractual necessity: Processing required to deliver the services described in the 98hi Terms & Conditions, which constitutes the contract between you and 98hi. This covers account management, transaction processing, game provision, and support.
• Legal obligation: Processing required to comply with applicable law, including KYC identity verification, AML monitoring, and responding to lawful requests from regulatory or enforcement bodies.
• Legitimate interests: Processing carried out for the legitimate business interests of 98hi, including fraud detection, platform security, responsible gaming monitoring, and service analytics — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, primarily in the context of direct marketing communications and non-essential cookies. Where consent is the basis for processing, you retain the right to withdraw it at any time without detriment to your account standing.

6. Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, improve user experience, and provide website operators with analytical information about how their platform is being used.

6.2 Types of Cookies Used by 98hi

• Strictly Necessary Cookies: These are essential for the platform to function and cannot be disabled. They include session cookies that keep you logged in during a gaming session and security cookies that help detect fraudulent activity.
• Functional Cookies: These remember your preferences (such as language or account settings) so you do not have to re-enter them each time you visit. Disabling these may affect your experience on the platform.
• Analytical / Performance Cookies: These collect anonymised data about how visitors use 98hi.io — which pages are visited most, how long sessions last, and where users navigate from. This data helps us improve the platform. These cookies require your consent.
• Marketing Cookies: These track your activity across the platform to enable personalised promotional content. They are only activated if you have opted in to marketing communications and consented to this category of cookie.

6.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain parts of the 98hi platform, including your account. For guidance on managing cookies in popular browsers, refer to your browser's help documentation. 98hi does not currently respond to browser-level Do Not Track (DNT) signals, though we respect preferences communicated through our in-platform consent mechanisms.

7. Sharing Your Data with Third Parties

98hi does not sell your personal data. We may share data with the following categories of third parties, strictly on a need-to-know basis and subject to confidentiality obligations:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and applicable financial regulation.
• Identity verification providers: Third-party KYC service providers receive the identity documents you submit during verification. These providers are contractually bound to use your data solely for the purpose of verification on behalf of 98hi.
• Game studios and technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level data required to run game sessions. They do not receive your full identity profile.
• Fraud prevention and security services: Specialist fraud detection providers may receive anonymised or pseudonymised behavioural data to assist in identifying and preventing account abuse.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics platforms to support platform performance analysis. No personally identifying information is included in these transfers.
• Regulatory and law enforcement bodies: Where legally required, 98hi may disclose personal data to government authorities, financial intelligence units, or law enforcement agencies in response to lawful requests. 98hi will notify you of such disclosures where permitted by law.

8. Data Retention Periods

98hi retains personal data for defined periods that reflect the purpose of collection and any applicable legal obligations. The following retention schedule applies as a general guide:

At the end of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9. Data Security Measures

98hi takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and our servers.
• Encryption at rest for sensitive data categories stored in our databases, including identity documents and financial records.
• Role-based access controls ensuring that only authorised 98hi personnel with a legitimate operational need can access personal data.
• Regular security audits and penetration testing conducted on platform infrastructure to identify and remediate vulnerabilities.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Incident response procedures that establish clear protocols for detecting, containing, and notifying affected parties of any data security breach.

While 98hi employs robust security practices, no digital platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords, enable two-factor authentication on their accounts, and immediately report any suspicious activity to 98hi support.

10. Your Privacy Rights

As a 98hi account holder, you hold a set of rights in relation to the personal data we hold about you. These rights are outlined below. To exercise any of these rights, please contact the 98hi data team using the details in Section 14.

• Right of Access: You may request a copy of the personal data that 98hi holds about you. We will respond to verified access requests within 30 calendar days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a contact number) can be made directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful. This right is subject to any overriding legal obligations that require us to retain the data.
• Right to Restriction: You may request that 98hi restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data pending verification.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests grounds, though 98hi may be entitled to continue processing where it can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect processing already carried out on the basis of consent before withdrawal.

11. Children & Underage Protection

The 98hi platform is strictly for adults aged 21 and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21. The registration process includes age declaration and KYC verification steps specifically designed to prevent underage access.

If 98hi becomes aware or reasonably suspects that an account belongs to a person under the age of 21, the account will be immediately suspended, all personal data associated with that account will be reviewed, transactions will be reversed where possible, and any collected data will be deleted in accordance with our data retention policy.

If you are a parent or guardian and believe that your child has registered an account on 98hi, please contact us immediately at [email protected] so we can take prompt remedial action. 98hi takes its obligation to prevent underage gambling participation extremely seriously and treats all such notifications as a high-priority matter.

12. International Data Transfers

98hi's primary operations and the majority of its data processing activities are directed at users in Bangladesh. However, certain technical infrastructure components and third-party service providers (such as game studios and fraud prevention platforms) may be located outside Bangladesh.

Where personal data is transferred to service providers in other jurisdictions, 98hi takes steps to ensure that an adequate level of protection is applied to that data. This includes implementing contractual data protection clauses with all third-party data processors that receive your information, requiring them to handle your data in accordance with standards consistent with this Privacy Policy.

By using the 98hi platform, you acknowledge that your personal data may be processed in jurisdictions outside Bangladesh as a necessary aspect of service delivery. 98hi will not make international data transfers that are not covered by appropriate protective measures.

13. Changes to This Policy

98hi reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When a material change is made — meaning a change that significantly affects your rights or how your data is used — we will notify active account holders via their registered email address or through a prominent notice on the 98hi.io platform at least 7 calendar days before the change takes effect.

Non-material changes (such as minor wording clarifications or corrections) may be made without advance notice, though the updated date at the top of this policy will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically so you remain informed about how 98hi protects and uses your personal information.

Continued use of the 98hi platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you may close your account and request withdrawal of your balance in accordance with the procedures set out in the 98hi Terms & Conditions.

14. Contact & Data Requests

All privacy-related enquiries, data subject rights requests, and data security concerns should be directed to the 98hi data team using the contact details below. We are committed to responding to all data-related requests promptly and professionally.

• Email: [email protected] — please include "Privacy Request" in your subject line for faster routing
• Response Target: Initial acknowledgement within 48 hours; full response to data rights requests within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Language: English (all formal data requests should be submitted in English)

When submitting a data rights request, please include your full registered name, the email address associated with your 98hi account, and a clear description of the right you wish to exercise or the nature of your concern. This information is required to verify your identity and process your request accurately. 98hi will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.