hotbet Privacy Policy
At hotbet, we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect, how we use it, who we share it with, and what rights you have over your own information. We are committed to handling your data with care, transparency, and respect.
Data Never Sold
hotbet does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely to operate and improve your experience on the Platform.
SSL Encryption
All data transmitted between your device and hotbet is protected by TLS/SSL encryption. Sensitive fields including passwords and payment details are encrypted at rest using industry-standard protocols.
Your Rights Respected
You have the right to access, correct, and request deletion of your personal data held by hotbet. All data subject requests are handled within 30 days of receipt by our dedicated privacy team.
1. Data Controller Information
hotbet ("we", "us", "our") is the data controller responsible for the personal data processed through the online betting platform accessible at https://hotbet.im ("Platform"). As data controller, hotbet determines the purposes and means by which personal data collected through the Platform is processed.
This Privacy Policy applies to all personal data collected from users of the hotbet Platform, including data collected during account registration, during gameplay and wagering activity, during deposit and withdrawal transactions, and through any communications between you and hotbet's customer support team.
By creating a hotbet account or using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please do not create an account or use the Platform. For privacy-related enquiries, contact our support team at [email protected] — available 24 hours a day, seven days a week (BST, UTC+6).
Contact for Privacy Matters: All data subject access requests, correction requests, deletion requests, and privacy complaints should be submitted in writing to [email protected] with the subject line "Privacy Request". Our team will acknowledge your request within 24 hours and provide a substantive response within 30 calendar days.
2. Data We Collect
hotbet collects personal data through several channels: directly from you when you register and use the Platform, automatically through your device and browser when you access the Platform, and in limited circumstances from trusted third-party sources such as payment processors and identity verification providers. The categories of data we collect are set out below.
Data You Provide Directly
- Registration data: Full legal name, date of birth, residential address, email address, and mobile phone number provided when creating your account.
- Identity verification documents: Copies of government-issued identification (National ID card, passport, or driver's licence), proof of address, and payment method verification documents submitted during the KYC process.
- Financial data: Payment account identifiers associated with bKash, Nagad, Rocket, or Upay accounts; bank account details for bank transfer withdrawals; and card details for Visa or Mastercard transactions. Full card numbers are not stored by hotbet — card processing is handled by our certified payment processor.
- Communications data: The content of messages, emails, and live chat transcripts exchanged between you and the hotbet support team.
- Preference data: Responsible gaming settings, deposit limits, notification preferences, and any other account customisation choices you make.
Data Collected Automatically
- Device and browser data: IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL.
- Usage data: Pages visited on the Platform, games played, wagers placed, session duration, click paths, and feature interactions.
- Location data: Approximate geographic location derived from your IP address for the purpose of access control and regulatory compliance. We do not collect precise GPS location data.
- Cookie data: Data stored in cookies and similar tracking technologies as described in Section 5 of this Policy.
Data From Third Parties
hotbet may receive supplementary personal data from the following categories of third-party sources:
- Identity verification providers who confirm the authenticity of documents submitted during KYC
- Payment processors who confirm transaction status and flag potentially fraudulent payment activity
- Fraud prevention and anti-money laundering screening services
Data Minimisation: hotbet collects only the personal data that is necessary for the purposes set out in this Policy. We do not collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where identity verification requirements necessitate the review of a document that incidentally contains such information — in which case the document is reviewed solely for identity verification purposes and is not retained beyond the required regulatory period.
3. How We Use Your Data
hotbet processes personal data only where a lawful basis for processing exists. The table below summarises the primary purposes for which we use your data, the legal basis for each purpose, and the categories of data involved.
| Purpose | Legal Basis | Data Categories |
|---|---|---|
| Account registration and management | Contract performance | Registration data, identity documents |
| Processing deposits and withdrawals | Contract performance | Financial data, identity documents |
| Identity verification (KYC) | Legal obligation | Identity documents, registration data |
| Fraud prevention and security monitoring | Legitimate interest | Device data, usage data, financial data |
| Customer support communications | Contract performance | Communications data, registration data |
| Responsible gaming monitoring | Legal obligation / legitimate interest | Usage data, preference data, financial data |
| Promotional communications (opted-in) | Consent | Registration data, preference data |
| Platform analytics and improvement | Legitimate interest | Usage data, device data, cookie data |
Marketing Communications
hotbet may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, seasonal offers (such as BPL promotions or Eid reload bonuses), and platform updates. You will only receive marketing communications if you have opted in at registration or through your account settings. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences within your account settings or by contacting [email protected].
Withdrawing consent to marketing communications will not affect the lawfulness of processing carried out prior to withdrawal, and will not impact your ability to use the Platform or receive service-related communications such as transaction confirmations, KYC requests, or security alerts.
Automated Decision-Making: hotbet uses automated systems to monitor account activity for fraud detection, responsible gaming triggers, and bonus abuse patterns. Where an automated process leads to a decision that materially affects your account (such as a withdrawal hold or account suspension), you have the right to request human review of that decision by contacting [email protected].
4. Sharing and Disclosure
hotbet does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
Service Providers and Data Processors
hotbet engages carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include:
- Payment processors: Providers facilitating bKash, Nagad, Rocket, Upay, Visa, and Mastercard transactions. These providers receive only the data necessary to process each transaction and are contractually prohibited from using your data for their own purposes.
- Identity verification providers: Third-party KYC services that verify the authenticity of documents submitted during account verification. Document data is transmitted securely and is not retained by these providers beyond the verification review period.
- Cloud infrastructure providers: Hosting and database services used to store Platform data. All infrastructure providers are contractually bound to maintain data security standards consistent with this Policy.
- Game software providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers necessary for game delivery. These providers do not receive your name, address, or financial data.
- Analytics providers: Web analytics services that process aggregated, anonymised usage data to help us understand how players interact with the Platform. Where possible, hotbet configures analytics tools to minimise personal data collection.
Legal and Regulatory Disclosure
hotbet may disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies where we are legally required to do so — for example, in response to a lawful court order, to comply with anti-money laundering reporting obligations, or to cooperate with an investigation into suspected fraud or criminal activity. In all such cases, hotbet will disclose only the minimum data required to satisfy the legal obligation and will notify you of the disclosure where permitted by law.
Business Transfers
In the event that hotbet undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer by email or in-platform notification prior to its completion. The acquiring entity will be required to honour the terms of this Privacy Policy or provide you with a materially equivalent level of protection.
No Third-Party Marketing Sharing: hotbet does not share your personal data with third-party advertisers, data brokers, or marketing networks. Your data is used exclusively for the purposes of operating the hotbet Platform and the legitimate business functions described in this Policy.
5. Cookies and Tracking
hotbet uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the Platform, remember your preferences, maintain your login session, and analyse how users interact with our services. This section explains the types of cookies we use and how you can manage them.
Types of Cookies We Use
- Strictly necessary cookies: Essential for the operation of the Platform. These include session authentication cookies that keep you logged in during your visit, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
- Functional cookies: Remember your account preferences such as language settings, responsible gaming configurations, and notification preferences. Disabling these cookies may cause your preferences to reset between sessions.
- Analytics cookies: Collect anonymised data about how visitors navigate the Platform, which pages are most visited, and where users encounter errors. This data helps hotbet improve the Platform experience. Analytics cookies do not identify you personally.
- Security cookies: Used to detect and prevent fraudulent activity, bot access, and credential stuffing attacks. These cookies are strictly necessary for the security of your account and the Platform.
Managing Cookies
You can control and delete cookies through your browser settings. Most modern browsers allow you to block all cookies, block only third-party cookies, or delete existing cookies. Please note that blocking strictly necessary cookies will prevent you from logging into your hotbet account and using core Platform features. Detailed instructions for managing cookies are available in your browser's help documentation.
Cookie Lifespan: Session cookies are deleted automatically when you close your browser. Persistent cookies remain on your device for a defined period — typically between 30 days and 12 months depending on function — or until you delete them manually. The specific lifespan of each cookie category is documented in our Cookie Settings panel, accessible from your account settings after hotbet Login.
6. Data Retention
hotbet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applicable to each category of data are summarised below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Anti-money laundering obligations |
| Identity verification documents | Duration of account + 5 years post-closure | KYC regulatory requirements |
| Transaction records | Duration of account + 7 years post-closure | Financial record-keeping obligations |
| Betting and gaming history | Duration of account + 5 years post-closure | Dispute resolution, responsible gaming |
| Customer support communications | 3 years from last interaction | Service quality and dispute reference |
| Marketing consent records | Until consent withdrawn + 3 years | Proof of consent for compliance |
| Analytics and usage data (anonymised) | 26 months (rolling) | Platform analytics and improvement |
Upon expiry of the applicable retention period, hotbet will securely delete or irreversibly anonymise your personal data. In circumstances where deletion is not immediately technically feasible (for example, data held in encrypted backup archives), the data will be isolated from further processing until secure deletion can be completed in the normal course of system maintenance.
Self-Excluded Players: Where a player has requested permanent self-exclusion, hotbet retains a record of the self-exclusion decision — including the player's name, email address, and date of exclusion — beyond the standard retention period in order to enforce the exclusion if the player attempts to re-register. This processing is carried out on the basis of legitimate interest in protecting vulnerable players.
7. Your Privacy Rights
As a user of the hotbet Platform, you have the following rights in relation to your personal data. These rights may be exercised at any time by contacting our support team at [email protected]. hotbet will respond to all valid requests within 30 calendar days of receipt.
Right of Access
You have the right to request a copy of the personal data that hotbet holds about you, together with information about the purposes for which it is processed, the categories of data held, the recipients to whom it has been disclosed, and the retention period applicable to it. This is commonly known as a Subject Access Request (SAR). The first copy of your data will be provided free of charge. Additional copies may be subject to a reasonable administrative fee.
Right to Rectification
If any personal data that hotbet holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For changes to core account data such as your registered name or date of birth, hotbet may require supporting documentation before processing the correction.
Right to Erasure
You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis for processing exists), or where you object to processing and hotbet has no overriding legitimate interest. This right is not absolute — hotbet may be required to retain certain data to comply with legal obligations, as described in Section 6.
Right to Restrict Processing
You have the right to request that hotbet restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or pending the outcome of an objection to processing.
Right to Data Portability
Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.
Right to Object
You have the right to object to the processing of your personal data where that processing is based on hotbet's legitimate interests. Where you object, hotbet will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims. You have an unconditional right to object to the processing of your data for direct marketing purposes.
How to Exercise Your Rights: Submit your request in writing to [email protected] with the subject line "Privacy Request", your registered email address, and a description of the right you wish to exercise. To protect your data, hotbet will verify your identity before processing any request. We aim to respond to all requests within 30 calendar days. Complex or multiple requests may take up to 60 days, in which case you will be notified of the extension.
8. Security Measures
hotbet implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. While no digital platform can guarantee absolute security, hotbet applies industry best practices across all systems that process personal data.
Technical Safeguards
- Transport Layer Security (TLS/SSL): All data in transit between your device and hotbet servers is encrypted using TLS 1.2 or higher. HTTP connections are automatically redirected to HTTPS.
- Data encryption at rest: Sensitive data fields including passwords (stored as salted hashes), payment account identifiers, and identity document images are encrypted at rest using AES-256 encryption.
- Access controls: Access to production systems and databases containing personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
- Intrusion detection: hotbet operates automated intrusion detection and anomaly monitoring systems that alert the security team to suspicious access patterns in real time.
- Penetration testing: The Platform undergoes periodic security assessments conducted by independent security professionals to identify and remediate vulnerabilities.
Organisational Safeguards
- All hotbet staff with access to personal data receive data protection and privacy training as part of their onboarding and ongoing professional development.
- Contracts with all third-party service providers who process personal data on hotbet's behalf include data processing agreements specifying security obligations, data use restrictions, and breach notification requirements.
- hotbet maintains an internal incident response plan that defines procedures for detecting, containing, and reporting personal data breaches. Affected users will be notified without undue delay in the event of a breach that poses a significant risk to their rights and freedoms.
Your Role in Security
You play an important role in keeping your hotbet account secure. hotbet recommends that you use a strong, unique password for your account, enable any available two-factor authentication features, keep your login credentials confidential, and log out of your account when using a shared or public device. If you suspect that your account has been compromised, contact [email protected] immediately.
Breach Notification
In the event of a personal data breach that poses a risk to your rights, hotbet will notify affected users by email without undue delay, with details of the incident and recommended protective steps.
Encrypted Storage
All personal data at rest on hotbet's servers is protected by AES-256 encryption. Backups are encrypted using the same standard and stored in geographically separated, access-controlled locations.
Policy Updates
This Privacy Policy is reviewed and updated periodically to reflect changes in our data practices or applicable regulations. The effective date at the top of this page always reflects the most current version.
Have Questions About Your Privacy?
Our support team is available 24/7 to address any data privacy concerns. You can also explore our full legal documentation, check the FAQ for quick answers, or head back to the hotbet Casino to enjoy our games with confidence.