999hb Privacy Policy

1. Introduction & Scope

999hb ("999hb", "we", "us", "our") operates the online casino and sports betting platform accessible at https://999hb.app. We are committed to protecting the privacy and personal data of all users ("you", "your", "Player") who access or register on the 999hb platform. This Privacy Policy sets out in clear, formal terms what personal data we collect, the lawful basis on which we process it, how we use and protect it, with whom we may share it, and the rights you hold over your own information.

This Privacy Policy applies to all data collected through the 999hb website, any mobile-optimised version of the site, and all communications between you and the 999hb customer support team. It applies to all registered players as well as unregistered visitors who browse the 999hb platform. It does not apply to third-party websites or services that may be linked from the 999hb platform — those services operate under their own independent privacy policies, and 999hb bears no responsibility for their data handling practices.

This policy is written in English. Where any translated summary is provided for convenience, the English-language version of this document is the authoritative text and shall prevail in any dispute over interpretation.

2. Data We Collect

999hb collects personal data from you in the following ways: directly from you when you register an account, make a deposit or withdrawal, contact customer support, or participate in a promotion; automatically when you use the platform via cookies and server-side logging; and from trusted third parties such as payment providers and identity verification services where this is necessary to comply with our obligations.

2.1 Data You Provide Directly

The following categories of data are collected directly from you at registration or during use of the platform:

Data Category	Specific Data Points	When Collected
Identity Data	Full legal name, date of birth, gender, NID or passport number	Registration & KYC verification
Contact Data	Email address, Bangladesh mobile number, residential address	Registration & account updates
Financial Data	bKash/Nagad/Rocket account reference, transaction history, deposit and withdrawal amounts in BDT	Deposits & withdrawals
Verification Documents	NID scan or photo, utility bill, bank/bKash statement (for KYC)	First withdrawal & ongoing compliance
Support Communications	Live chat transcripts, email correspondence	When you contact support
Promotional Data	Bonus preferences, opted-in promotion types	When you claim or opt in to offers

2.2 Data Collected Automatically

When you visit the 999hb platform, our servers automatically collect certain technical data. This includes your IP address, browser type and version, device type and operating system, referring URL, pages viewed within the platform, session duration, clickstream data, and login timestamps. This data is collected using server logs and cookies (see Section 5 for full cookie details). It is used primarily for platform security, fraud prevention, and aggregated analytics — it is not used to personally profile individual users for advertising purposes.

2.3 Data from Third Parties

In limited circumstances, 999hb may receive personal data about you from third parties, including: identity verification providers who cross-reference your NID details; payment processors who confirm the outcome of bKash, Nagad, or Rocket transactions; and fraud prevention services that flag high-risk account activity patterns. Data received from these sources is used solely for the purpose for which it was shared and is not used for unrelated secondary purposes.

3. How We Use Your Data

999hb processes your personal data only where we have a lawful basis to do so. The lawful bases we rely on are: (a) performance of the contract between you and 999hb (i.e., operating your account); (b) compliance with legal obligations (e.g., KYC and anti-money laundering requirements); (c) legitimate interests pursued by 999hb (e.g., fraud prevention, platform security, and service improvement); and (d) your consent, where explicitly given (e.g., opting in to marketing communications).

Specifically, your personal data is used for the following purposes:

• Account management: Creating, maintaining, and securing your 999hb player account.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Identity verification: Verifying your age, identity, and source of funds in compliance with our Know Your Customer (KYC) obligations and anti-money laundering (AML) commitments.
• Customer support: Responding to your queries, resolving disputes, and improving our support services.
• Responsible gaming: Monitoring gaming patterns to identify potentially problematic behaviour and to apply player-requested self-exclusion, deposit limits, or cooling-off periods.
• Fraud and security: Detecting and preventing fraudulent transactions, bonus abuse, multi-accounting, and unauthorised access attempts.
• Platform improvement: Analysing aggregated usage data to improve the design, performance, and game selection of the 999hb platform.
• Legal compliance: Retaining records as required by applicable financial regulations and responding to lawful requests from competent authorities.
• Marketing communications: Sending promotional offers, bonus notifications, and platform news to players who have opted in to such communications. You may opt out at any time by contacting support.

4. Data Sharing & Third Parties

999hb does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

4.1 Payment Service Providers

To process your financial transactions, 999hb shares necessary payment reference data with our approved payment service partners, including bKash, Nagad, Rocket, Upay, SureCash, and Visa/Mastercard acquiring banks. These providers receive only the minimum data required to authorise and settle transactions. They are contractually bound to process this data solely for payment purposes and may not use it for any other purpose.

4.2 Identity Verification Providers

To fulfil our KYC and AML obligations, 999hb may share identity data (such as your name, date of birth, and NID number) with certified identity verification service providers. These providers cross-reference your details against official databases and sanction lists. All verification providers engaged by 999hb are subject to data processing agreements that restrict further use of your data.

4.3 Technology and Platform Partners

The 999hb platform relies on third-party technology providers for services such as cloud hosting, database management, cybersecurity monitoring, and game delivery (including studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). These partners may process limited technical data (such as session tokens or game round identifiers) as part of service delivery. They do not receive personally identifiable information beyond what is technically necessary.

4.4 Legal and Regulatory Disclosure

999hb may disclose your personal data to competent law enforcement authorities, courts, or regulatory bodies where required to do so by applicable law, valid legal process, or in response to a verified court order. In such cases, 999hb will disclose only the minimum data required and, where permitted by law, will notify you of the disclosure request.

4.5 Business Transfers

In the event that 999hb undergoes a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, 999hb will ensure that the receiving party is bound by privacy obligations no less protective than those set out in this policy. You will be notified of any such transfer via the email address on your account.

5. Cookies & Tracking Technologies

999hb uses cookies and similar browser-based tracking technologies to ensure the platform functions correctly, to maintain your logged-in session, and to collect aggregated analytics about how players navigate the site. Cookies are small text files placed on your device by your browser when you visit the 999hb platform.

5.1 Types of Cookies Used

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, remember your language preference, and enable secure page transitions. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These remember your platform preferences (such as your preferred game category or notification settings) to personalise your experience. They do not track you across third-party websites.
• Analytics Cookies: These collect anonymised, aggregated data about how players use the 999hb platform — for example, which pages are visited most frequently, average session duration, and common navigation paths. This data is used exclusively to improve the platform and is never linked to your personal identity.
• Security Cookies: These help 999hb detect and prevent fraudulent login attempts, multi-accounting, and other security threats by identifying unusual patterns of device or browser behaviour.

5.2 Cookies We Do Not Use

999hb does not use third-party advertising or retargeting cookies. We do not share your browsing behaviour with advertising networks or allow ad-tech companies to place cookies on the 999hb platform. Your activity on 999hb is not used to serve you targeted advertisements on other websites.

5.3 Managing Cookies

You can control cookie behaviour through your browser settings. Most modern browsers allow you to view, block, or delete cookies from specific sites. Please note that disabling strictly necessary cookies will prevent the 999hb platform from functioning correctly, including maintaining your login session. Instructions for managing cookies are available in the help section of your browser's official documentation.

6. Data Retention & Deletion

999hb retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention periods apply as a general guideline:

• Account data (identity, contact, login history): Retained for the duration of your account and for a minimum of 5 years after account closure, in compliance with financial record-keeping obligations.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of 5 years from the date of each transaction.
• KYC verification documents: Retained for a minimum of 5 years from the date of submission, or longer if required by applicable regulations.
• Support communications: Retained for 2 years from the date of the last interaction, unless the communication relates to an unresolved dispute, in which case it is retained until final resolution.
• Analytics data: Aggregated and anonymised analytics data may be retained indefinitely. No personally identifiable information is retained in analytics records after the anonymisation process.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is technically complex (for example, due to backup rotation cycles), data will be isolated and excluded from active processing until secure deletion is confirmed.

7. Data Security Measures

999hb employs a multi-layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your browser and our servers.
• Encrypted storage of sensitive data fields including identity document scans and KYC records, using AES-256 encryption at rest.
• Two-factor authentication (2FA) available for player accounts via OTP to your registered Bangladesh mobile number.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific job function.
• Automated intrusion detection systems that monitor for unusual login patterns, brute-force attacks, and other security threats in real time.
• Regular security audits and vulnerability assessments conducted by qualified security professionals to identify and remediate potential weaknesses.
• Secure data centres with physical access controls, redundant power systems, and environmental monitoring for server infrastructure.

8. Your Rights Over Your Data

As a player registered on the 999hb platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the 999hb support team via live chat or submit a written request to [email protected]. We will acknowledge your request within 5 business days and aim to fully resolve it within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data that 999hb holds about you. We will provide this in a clear, structured format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic contact details directly within your account profile.
• Right to Erasure: You may request that 999hb delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data subject to regulatory retention requirements (e.g., transaction records) cannot be deleted until the applicable retention period expires.
• Right to Restriction of Processing: In certain circumstances (for example, while a data accuracy dispute is being resolved), you may request that 999hb restrict active processing of your data without deleting it.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request a machine-readable export of the personal data you provided to 999hb.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to processing of your data where it is based on legitimate interests, including for direct marketing purposes. We will cease such processing unless we can demonstrate a compelling legitimate ground that overrides your interests.

9. Children's Privacy

If you are a parent or guardian and believe that a minor in your care has registered an account on 999hb, please contact our support team immediately via live chat or at [email protected]. We take the protection of minors extremely seriously and will act promptly on any such report. We also encourage parents and guardians to use device-level parental control tools and safe-search filters to restrict access to gambling websites.

10. Changes to This Policy

999hb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the email address on file at least 14 days before the changes take effect, where practicable. The updated policy will also be published on this page with a revised effective date at the top of the document.

We encourage you to review this Privacy Policy periodically to stay informed of how 999hb handles your personal data. Your continued use of the 999hb platform after the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not agree with the revised policy, you must cease using the platform and request account closure.