hgvg Privacy Policy — How We Protect Your Data

Information We Collect

hgvg collects personal information from you through several channels: directly when you register an account, when you interact with the platform's features, and automatically as you navigate the site. We collect only the information that is reasonably necessary to operate the platform safely, process transactions accurately, and comply with our obligations as a responsible platform operator. The categories of information we collect are described below.

Information You Provide Directly

When you create a hgvg account or interact with our platform, you may provide the following categories of personal information:

• Identity information: Your full legal name, date of birth, and gender as recorded on your official identification documents.
• Contact information: Your email address, mobile phone number, and residential address including city, district, and postcode within Bangladesh.
• Account credentials: Your chosen username and encrypted password. Passwords are stored using one-way hashing and are never accessible to hgvg staff in plain text.
• Payment information: Your bKash, Nagad, Rocket, or Upay mobile wallet number, or bank account and card details used for deposits and withdrawals. Full card numbers are never stored on hgvg's servers; payment processing is handled by our certified payment partners.
• Identity verification documents: Copies of your National Identity Card, passport, driving licence, or proof of address submitted during KYC verification.
• Communications: Records of your correspondence with our support team, including chat transcripts, emails, and any attachments you send to [email protected].

Information Collected Automatically

When you access the hgvg platform — whether through a desktop browser or a mobile device — certain technical information is collected automatically by our systems:

• Device and browser data: Your device type, operating system, browser name and version, screen resolution, and language settings.
• Network data: Your IP address, approximate geographic location derived from IP, and internet service provider name.
• Usage data: Pages visited on the hgvg site, time and duration of visits, games launched, betting history, session lengths, and navigation paths through the platform.
• Transaction logs: A complete record of all deposits, withdrawals, wagers placed, game results, and bonus transactions associated with your account.
• Cookie and session data: Information stored by cookies and session tokens as described in Section 4 of this Privacy Policy.

How We Use Your Data

hgvg uses the personal information it collects for specific, defined purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises our primary data processing activities:

Marketing Communications

hgvg will only send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, and special offers if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your consent at any time by updating your notification preferences in your hgvg account dashboard or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to your withdrawal.

Automated Decision-Making

hgvg uses automated systems to detect unusual account activity, flag potential bonus abuse, and identify patterns consistent with fraudulent or problem gambling behaviour. Where such systems produce a consequential outcome for your account — such as a temporary suspension or a withdrawal hold — you have the right to request human review of that decision. Please contact our support team at [email protected] to exercise this right.

Data Sharing and Disclosure

hgvg does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

Trusted Service Partners

To operate the hgvg platform effectively, we engage a small number of carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include:

• Payment processors: Partners such as bKash, Nagad, Rocket, Upay, and card processing networks who require transaction data to execute deposits and withdrawals securely.
• KYC verification providers: Third-party identity verification services that help hgvg confirm the age and identity of its players in compliance with responsible gaming obligations.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi who may receive anonymised session data for game performance monitoring.
• Cloud infrastructure providers: Hosting and storage services that store encrypted account and transaction data on hgvg's behalf under strict data processing agreements.
• Fraud prevention and security services: Providers that analyse anonymised device and network data to detect and prevent unauthorised access and abuse.

All third-party service providers engaged by hgvg are bound by contractual data processing agreements that require them to handle your personal data solely in accordance with hgvg's instructions, to maintain appropriate security measures, and to delete or return data once their services are complete.

Legal Disclosure Obligations

hgvg may be required to disclose your personal information to law enforcement agencies, financial intelligence units, courts, or regulatory bodies where required by applicable law. This includes situations involving suspected money laundering, fraud investigations, child protection matters, or court orders. Where legally permitted to do so, hgvg will attempt to notify you of any such disclosure prior to it being made. In cases where prior notification is prohibited by law, we will inform you as soon as the restriction is lifted.

Cookies and Tracking Technologies

hgvg uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to remember your preferences, and to understand how players use the site so that we can continue to improve the experience. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files that are placed on your device — computer, smartphone, or tablet — when you visit a website. They allow the site to recognise your device on subsequent visits, remember your settings and preferences, and maintain your login session. Cookies do not contain executable code and cannot access other files stored on your device.

Types of Cookies Used by hgvg

Managing Your Cookie Preferences

You may configure your browser to refuse all cookies, to alert you when cookies are being set, or to delete existing cookies. Most modern browsers — including Chrome, Firefox, Safari, and Edge — provide accessible cookie management controls in their settings menus. Please note that disabling strictly necessary cookies will impair the functionality of the hgvg platform, including your ability to log in and maintain a session. Disabling functional cookies will mean that your preferences are not saved between visits.

Data Security and Storage

hgvg takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure. While no online platform can guarantee absolute security, hgvg's security programme is designed to reflect current best practice in the online gaming industry.

Technical Security Measures

• Transport layer encryption: All data transmitted between your browser or device and hgvg's servers is encrypted using TLS 1.2 or higher. The hgvg site operates exclusively over HTTPS; unencrypted HTTP connections are automatically redirected.
• Data-at-rest encryption: Sensitive personal data stored in hgvg's databases — including identity documents, payment details, and KYC records — is encrypted using AES-256 encryption.
• Password security: User passwords are stored exclusively as salted, one-way cryptographic hashes using bcrypt. hgvg staff cannot access your password in plain text under any circumstances.
• Access controls: Access to personal data within hgvg's internal systems is restricted on a strict need-to-know basis. Staff are granted only the minimum permissions required to fulfil their role, and all access events are logged and auditable.
• Two-factor authentication: hgvg's internal administrative systems require two-factor authentication for all staff. Two-factor authentication is also available to players for their own accounts.
• Penetration testing: hgvg's platform is subject to regular security assessments, including third-party penetration testing, to identify and remediate potential vulnerabilities before they can be exploited.

Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, hgvg will notify impacted account holders without undue delay via the email address associated with their account. Notification will include a description of the nature of the breach, the categories and approximate number of records affected, the likely consequences of the breach, and the measures hgvg has taken or proposes to take to address it.

Your Privacy Rights

As a player whose personal data is processed by hgvg, you hold a meaningful set of rights over your own information. hgvg is committed to honouring these rights promptly and without placing unnecessary barriers in your way. The following rights are available to all hgvg account holders:

• Right of access: You may request a copy of all personal data that hgvg holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of receiving your verified request.
• Right to rectification: If any personal data hgvg holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly through your hgvg account settings, or contact support for assistance with information that cannot be self-updated.
• Right to erasure: You may request that hgvg delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. Note that hgvg is required by law to retain certain categories of data — particularly transaction records and KYC documents — for a minimum statutory period even after account closure. In such cases, hgvg will delete all non-legally required data and restrict the processing of retained data to its legally mandated purpose only.
• Right to restriction of processing: You may request that hgvg restrict the processing of your personal data in certain circumstances, including where you contest the accuracy of the data or where you have objected to processing pending hgvg's determination of whether its legitimate interests override your own.
• Right to data portability: You may request that hgvg transfer a copy of the personal data you have provided to us directly to you or, where technically feasible, to another organisation of your choice, in a structured and machine-readable format.
• Right to object: You have the right to object at any time to processing of your personal data that is based on hgvg's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes, and hgvg will stop such processing immediately upon receipt of your objection.
• Right to withdraw consent: Where hgvg processes your data on the basis of your consent — for example, for the sending of promotional communications — you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights listed above, please submit a written request to our support team at [email protected]. hgvg will acknowledge your request within 48 hours and will provide a substantive response within 30 days. In complex cases we may extend this period by a further 30 days, and will notify you if this extension is required. We may ask you to verify your identity before processing your request to ensure that we do not disclose or alter data in response to an unauthorised third party.

Data Retention

hgvg retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. When data is no longer required, it is securely deleted or irreversibly anonymised in accordance with our internal data lifecycle management procedures.

Retention Periods by Data Category

Upon expiry of the applicable retention period, hgvg will permanently delete the data from all active systems and instruct any third-party processors holding the data to do the same. Backup copies maintained for disaster recovery purposes are subject to automatic overwrite cycles and will be purged within 90 days of the standard deletion date.

Policy Updates and Contact

Changes to This Privacy Policy

hgvg reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, changes in applicable law, or improvements to how we explain our approach to privacy. When we make material changes — meaning changes that significantly affect your rights or how your data is processed — we will notify all registered players by email at least 14 days before the updated policy takes effect.

The date on which the current version of this Privacy Policy came into effect is shown at the top of this document. We encourage you to review this policy periodically so that you remain informed about how hgvg handles your personal information. Continued use of the hgvg platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes.

Children's Privacy

The hgvg platform is intended exclusively for adults aged 18 and above. hgvg does not knowingly collect personal information from any person under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on hgvg, please notify us immediately at [email protected].

Contact Our Privacy Team

For any questions, concerns, or requests relating to this Privacy Policy or the way hgvg handles your personal data, please contact our dedicated privacy support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Language: English
• Response Commitment: Acknowledgement within 48 hours; full response within 30 days
• Hours of Operation: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)