Privacy Policy — How 999hb Protects Your Data

1. Data Controller

999hb is the data controller responsible for the personal information we collect and process through the 999hb platform. As data controller, 999hb determines the purposes and means by which personal data is processed. If you have questions about how we handle your data, wish to exercise your data rights, or need to report a data concern, you may contact us at [email protected]. We are committed to responding to all data-related inquiries within a reasonable timeframe.

2. Information We Collect

999hb collects personal information in several ways: directly from you when you register an account or use our services, automatically when you use the platform, and from third parties where permitted by law. The categories of personal data we collect include:

2.1 Registration and Account Information

When you create a 999hb account, we collect information including your full legal name, date of birth, email address, mobile phone number, residential address (including city, district, and country), and your chosen username and password. This information is required to create and verify your account and to comply with our age verification and anti-money laundering obligations. Providing false or incomplete registration information is a violation of our Terms & Conditions.

2.2 Identity Verification Documents

To comply with Know Your Customer (KYC) requirements and to verify your identity before processing withdrawals, we may request copies of government-issued identity documents such as your National ID card, passport, or driving license. We may also request proof of address (such as a utility bill or bank statement) and proof of payment method ownership. These documents are processed securely and retained only for as long as required by applicable regulations.

2.3 Financial Information

When you make deposits or withdrawals, we collect financial transaction data including payment method details (bKash account number, Nagad number, Rocket number, Upay number, bank card details), transaction amounts in BDT, transaction reference numbers, and timestamps. We do not store complete card numbers or full payment credentials — sensitive payment data is processed via secure, encrypted payment gateways.

2.4 Gaming and Betting Activity

We maintain records of your gaming and betting activity on the 999hb platform, including games played, bets placed, amounts wagered, amounts won or lost, bonus usage, and session duration. This data is used for account management, dispute resolution, bonus administration, responsible gaming monitoring, and fraud prevention.

2.5 Technical and Device Data

When you access the 999hb platform, we automatically collect technical information including your IP address, browser type and version, operating system, device type and model, screen resolution, time zone setting, and pages visited. We also collect session data such as login timestamps, session duration, page interaction data, and referring URLs. This information helps us maintain platform security, optimize performance, and improve the user experience.

2.6 Communications Data

If you contact our customer support team, we retain records of those communications including the content of messages, email exchanges, and support tickets. This data is used to resolve your inquiries, improve our support quality, and maintain records of our interactions with you.

3. How We Use Your Information

999hb uses the personal data we collect for the following purposes:

Purpose	Legal Basis	Data Used
Account creation and management	Contractual necessity	Registration data, ID verification
Processing deposits and withdrawals	Contractual necessity	Financial data, identity data
Age and identity verification (KYC)	Legal obligation	ID documents, registration data
Fraud prevention and security	Legitimate interests	Technical data, transaction data
Responsible gaming monitoring	Legal obligation / Legitimate interests	Gaming activity, session data
Customer support	Contractual necessity	Communications data, account data
Bonus and promotion administration	Contractual necessity	Gaming activity, registration data
Platform performance and improvement	Legitimate interests	Technical data, usage data
Legal and regulatory compliance	Legal obligation	All categories as required
Personalized gaming recommendations	Consent	Gaming activity, preferences

4. Sharing Your Information

999hb does not sell your personal data to third parties. We may share your information in the following circumstances:

4.1 Gaming and Technology Partners

We share necessary data with our licensed game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — to facilitate game delivery and record game outcomes. These partners process data only as required to deliver their services and are bound by data protection agreements with 999hb.

4.2 Payment Processors

To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, we share necessary financial information with licensed payment service providers. These processors are subject to strict data security standards and only use your data to complete transactions.

4.3 Identity Verification Services

We may use third-party identity verification services to confirm your age and identity. These services receive only the minimum data required to perform verification checks and are contractually obligated to delete verification data after processing.

4.4 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement, regulatory authorities, courts, or government agencies when required by law, in response to valid legal requests, or when necessary to protect the rights, property, or safety of 999hb, our users, or the public. This includes sharing data to prevent fraud, money laundering, or other illegal activities.

4.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and ensure that the new data controller honors the commitments made in this Privacy Policy.

5. Data Security

999hb takes data security seriously and implements industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage of all sensitive personal data and financial information
• Multi-factor authentication options for account access
• Regular security audits and penetration testing of our platform
• Strict access controls limiting employee access to personal data on a need-to-know basis
• Secure data centers with physical security measures and environmental controls
• Data backup and disaster recovery systems to prevent data loss
• Regular staff training on data protection and security best practices

Despite these measures, no system is completely secure. We cannot guarantee the absolute security of your data. You are responsible for maintaining the confidentiality of your login credentials and for any activity that occurs under your account.

6. Data Retention

999hb retains your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of data:

• Account and registration data: Retained for the life of your account plus six years after closure for regulatory compliance purposes
• Identity verification documents: Retained for six years after account closure to comply with anti-money laundering regulations
• Transaction records: Retained for a minimum of six years after the transaction date as required by financial regulations
• Gaming activity data: Retained for six years to support dispute resolution and regulatory reporting
• Technical and session data: Retained for 12 months for security monitoring and platform optimization
• Communications data: Retained for three years after the last communication

If you request account deletion, we will delete or anonymize your personal data except where retention is required by law or to protect our legitimate interests (such as fraud prevention or dispute resolution).

7. Your Data Rights

Under applicable data protection laws, you have certain rights regarding your personal information. These rights include:

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within 30 days. You may be required to verify your identity before we process your request. You also have the right to lodge a complaint with your local data protection authority if you believe we have mishandled your personal data.

8. Cookies and Tracking Technologies

999hb uses cookies and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device by your web browser. We use the following types of cookies:

• Essential cookies: Required for the platform to function properly, including session management and authentication. These cannot be disabled.
• Performance cookies: Collect anonymous data about how users interact with the platform to help us improve functionality and identify technical issues.
• Functional cookies: Remember your preferences (such as language settings) to provide a more personalized experience.
• Analytics cookies: Help us understand user behavior and measure platform performance using analytics tools.

You can control cookie settings through your browser preferences, but disabling certain cookies may limit your ability to use some platform features. By continuing to use 999hb, you consent to our use of cookies as described in this policy.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside Bangladesh where our servers, service providers, or technology partners are located. These countries may have different data protection laws than Bangladesh. When we transfer your data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses, adequacy decisions, or other approved transfer mechanisms, to protect your personal information in accordance with this Privacy Policy and applicable data protection laws.

10. Third-Party Links

The 999hb platform may contain links to third-party websites, game providers, or payment processors. This Privacy Policy applies only to 999hb. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party services you access through our platform before providing them with any personal information.

11. Children's Privacy

The 999hb platform is strictly for users aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If we discover that we have inadvertently collected data from someone under 21, we will delete that information immediately and close the associated account. If you believe a minor has created an account on 999hb, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

999hb reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any changes will be posted on this page with an updated "Last Updated" date. Material changes that significantly affect how we handle your personal data will be communicated to you via email or prominent notice on the platform. Your continued use of 999hb after changes are posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your data.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how 999hb handles your personal data, please contact our data protection team at [email protected]. We are committed to addressing all privacy inquiries promptly and transparently. When contacting us, please provide sufficient detail about your inquiry so we can respond effectively. For data access requests or requests to exercise your data rights, we may require identity verification to protect your information from unauthorized access.