hb 999 Privacy Policy

1 Information We Collect

hb 999 collects personal data through a number of channels — primarily during account registration, during the KYC identity verification process, through your ongoing use of the platform, and through your communications with our customer support team. The categories of personal data we collect are described below.

Registration and Account Data

When you create an hb 999 account, we ask you to provide the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth — collected to verify that you meet the minimum age requirement of 18 years.
• Residential address — including district, division, and postal code within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Mobile phone number — used for account verification, two-factor authentication, and critical account notifications.
• Email address — used for account communications, bonus notifications, and support correspondence.
• Username and encrypted password — used to authenticate your identity when you access your account.

Identity Verification (KYC) Documents

Before processing your first withdrawal, hb 999 is required to verify your identity as part of its Know Your Customer (KYC) obligations. During this process, you may be asked to submit one or more of the following documents:

• National Identity Card (NID) — front and back.
• Valid passport — biographical data page.
• Driving licence — front and back.
• Proof of address document — such as a recent utility bill, bank statement, or official government letter dated within the past 90 days.

In higher-risk cases or for large withdrawal amounts, hb 999 may also request a source-of-funds declaration or supporting financial documentation in accordance with anti-money laundering obligations.

Financial and Payment Data

When you make a deposit or request a withdrawal, we collect the information necessary to process the transaction. This includes your mobile financial service account number (e.g., bKash, Nagad, Rocket, Upay), your bank account details where a bank transfer is used, and transaction reference numbers. hb 999 does not store full card numbers. Any card-based payment data is handled directly by PCI-DSS-compliant payment processors; hb 999 retains only a tokenised reference.

Usage and Technical Data

As you use the hb 999 platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geolocation (country and city level).
• Device type, operating system, and browser version.
• Pages visited, games played, bets placed, and time spent on each section of the platform.
• Session start and end timestamps, login history, and failed login attempts.
• Referral source (if you arrived via a link from another page).

This data is used for security monitoring, fraud detection, platform performance optimisation, and responsible gaming analysis.

Customer Support Communications

When you contact the hb 999 support team via email, live chat, or any other channel, we retain a record of those communications — including your messages, our responses, any attachments you provide, and the timestamps of the interaction. These records are kept to resolve disputes, improve service quality, and maintain an audit trail for compliance purposes.

2 How We Use Your Data

hb 999 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are as follows:

Account Management and Platform Operation

Your registration data is used to create and maintain your hb 999 account, authenticate your identity at login, process your deposits and withdrawals in BDT, calculate and credit bonus entitlements, and provide you with access to all casino and sports betting features on the platform. Without this data, we cannot deliver the core services of hb 999.

Identity Verification and Fraud Prevention

KYC documents and registration data are processed to verify that you are who you say you are, that you are at least 18 years of age, and that your use of the platform is consistent with our Terms & Conditions. Usage and technical data — including IP address, device fingerprint, and login history — are analysed by our security systems to detect suspicious activity, prevent unauthorised account access, identify multi-accounting, and flag potential fraud or money laundering patterns.

Payment Processing

Financial and payment data is used solely to execute deposit and withdrawal transactions via your chosen payment channel (bKash, Nagad, Rocket, Upay, or supported banks). Transaction records are retained for the period required by financial compliance obligations.

Customer Support and Dispute Resolution

Communications data is used to respond to your enquiries, investigate complaints, resolve disputes relating to bets, bonuses, or payments, and improve the overall quality of our customer support service.

Responsible Gaming Monitoring

Betting behaviour data, session data, and account history are analysed as part of hb 999's responsible gaming programme. This analysis allows us to identify players who may be exhibiting signs of problem gambling behaviour, apply player-requested deposit limits or self-exclusion periods, and comply with our duty of care obligations. For more information, visit our Responsible Gaming page.

Marketing and Promotions

With your consent, we may use your email address and platform preferences to send you information about bonuses, promotions, seasonal offers (such as Eid specials or BPL cricket promotions), and platform updates. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings or by contacting support at [email protected]. Withdrawing marketing consent does not affect the legality of processing that took place before withdrawal, nor does it affect your ability to continue using the platform.

3 Data Sharing and Disclosure

hb 999 does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Service Providers and Technology Partners

We engage trusted third-party service providers to support the operation of hb 999. These providers act as data processors under our instruction and are contractually bound to handle your data only for the specific purpose for which it was shared, using appropriate security standards. Categories of service providers include:

• Payment processors — to facilitate BDT deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and banking partners.
• KYC and identity verification providers — to cross-check identity documents against relevant databases.
• Cloud hosting and infrastructure providers — to securely host the hb 999 platform, player databases, and transaction logs.
• Customer support software providers — to manage live chat and email ticket systems.
• Analytics providers — to analyse aggregated, anonymised platform usage data for performance improvement purposes.
• Game content providers — studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive the minimum session data needed to deliver their games (e.g., player session token, wager amount). They do not receive your full identity profile.

Legal and Regulatory Disclosures

hb 999 may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to:

• Comply with a legal obligation or valid court order.
• Report suspected money laundering, terrorist financing, or other financial crime to the appropriate authorities.
• Investigate or prevent fraud, security breaches, or other illegal activity affecting the platform or its players.
• Protect the rights, property, or safety of hb 999, its players, or the public.

Where permitted by law, we will make reasonable efforts to notify you of any such disclosure, unless doing so would compromise an ongoing investigation or is prohibited by law.

Business Transfers

In the event that hb 999 is involved in a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the way your data is processed as a result of it, and you will be given the opportunity to close your account if you do not consent to the transfer.

4 Cookies and Tracking Technologies

hb 999 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to ensure the platform functions correctly, to maintain the security of your session, and to understand how players interact with the site so that we can continue to improve it.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the hb 999 platform to function. They maintain your login session, remember your language and currency preferences, and ensure that security measures work correctly. These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players navigate the platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data helps us prioritise improvements. No personally identifiable information is collected by these cookies.
• Functional Cookies: These cookies remember choices you have made on the platform, such as your preferred game view or notification settings, so that you do not need to set them again on your next visit.
• Marketing Cookies: Where you have consented, these cookies track your interaction with hb 999 promotional content so that we can measure the effectiveness of our campaigns and avoid showing you promotions you have already seen. hb 999 does not serve third-party advertising cookies.

Managing Your Cookie Preferences

You can control and delete cookies at any time through your browser's settings menu. Disabling strictly necessary cookies will affect your ability to log in and use the platform. Disabling performance and functional cookies will not prevent you from using hb 999 but may reduce the personalised experience of the platform. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and Edge.

5 Data Security Measures

hb 999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security practices include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and hb 999 servers is encrypted using SSL/TLS protocols. The padlock icon in your browser's address bar confirms that your connection to hb 999 is secure.
• Password Hashing: Passwords are never stored in plain text. They are processed using a strong one-way cryptographic hashing algorithm so that even in the unlikely event of a data breach, your actual password cannot be recovered from our records.
• Encrypted Data Storage: Sensitive personal data, including KYC documents and financial records, is stored in encrypted form on secure servers. Access to these data stores is restricted to authorised personnel on a strict need-to-know basis.
• Access Controls: Internal access to player data is governed by role-based access controls. Team members can only access the data that is necessary to perform their specific job function. All internal data access is logged and subject to audit.
• Intrusion Detection: Our infrastructure is monitored continuously by automated intrusion detection systems that alert our security team to unusual access patterns or potential threats in real time.
• Regular Security Reviews: hb 999 conducts periodic reviews of its security practices and infrastructure to identify and address vulnerabilities before they can be exploited.

While hb 999 takes all reasonable precautions to protect your data, no digital platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal information, hb 999 will notify you promptly by email and take all necessary steps to contain and remediate the breach.

6 Data Retention Policy

hb 999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold:

• Account data (name, date of birth, contact details): Retained for the duration of your active account plus a minimum of 5 years after account closure, in line with financial record-keeping requirements.
• KYC identity documents: Retained for the duration of your active account plus a minimum of 5 years after account closure, or longer if required by applicable anti-money laundering law.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 3 years from the date of the interaction, or longer if the communication is relevant to an open dispute or compliance matter.
• Usage and technical data (session logs, IP addresses): Retained for up to 12 months for security and fraud detection purposes, after which it is anonymised or deleted.
• Marketing consent records: Retained for as long as you have an active account, or until you withdraw your consent, whichever comes first.

When personal data is no longer required and the applicable retention period has expired, hb 999 will securely delete or irreversibly anonymise it so that it can no longer be attributed to you as an individual.

7 Your Data Rights

As a player on the hb 999 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a description of your request. We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.

8 Policy Updates and Contact

Changes to This Privacy Policy

hb 999 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to the platform. When material changes are made, we will notify active account holders by email at the address registered to their account and publish the updated policy at hb-999.app/privacy-policy with a revised effective date. For minor changes that do not materially affect your rights, we may update the policy without direct notification.

We encourage you to review this Privacy Policy periodically. Continued use of the hb 999 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept any revised Privacy Policy, you may close your account by contacting our support team.

How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about the way hb 999 handles your personal information, please contact our support team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.

• Email: [email protected]
• Platform: hb-999.app
• Response time: Within 5 business days for acknowledgement; full response within 30 calendar days.
• Working hours: Monday to Sunday, Bangladesh Standard Time (BST, UTC+6).

For questions about responsible gaming, deposit limits, or self-exclusion, please visit our dedicated Responsible Gaming page. For questions about account rules, bonus terms, or payment policies, please refer to our Terms & Conditions or our FAQ page.