hb999 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how hb999 ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data relating to individuals ("you", "the Player") who access, register on, or use the hb999 platform at hb999.io and any associated mobile interfaces or subdomains operated under the hb999 brand.

hb999 is committed to handling your personal information responsibly and transparently. This Policy is intended to give you a clear understanding of what data we collect, why we collect it, how long we keep it, and what choices you have regarding your own data.

By registering an hb999 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should cease using the platform and contact [email protected] to arrange account closure.

2 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is hb999, operating the platform at hb999.io. As data controller, hb999 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to your personal data, you may contact the hb999 data privacy team at any time using the contact details provided in Section 14 of this Policy. We aim to respond to all data-related enquiries within 5 working days.

3 Data We Collect

3.1 Data You Provide Directly

When you register an hb999 account or interact with the platform, you may provide the following categories of personal data:

• Identity data: Full legal name, date of birth, nationality, and copies of government-issued identification documents such as your National Identity Card (NID) or passport.
• Contact data: Email address, mobile phone number (Bangladesh), and residential address.
• Financial data: Mobile wallet account details for bKash, Nagad, Rocket, or Upay used for deposits and withdrawals. We do not store full payment credentials; transaction data is processed through the respective payment service provider's secure infrastructure.
• Account credentials: Your chosen username and encrypted password. Passwords are stored using one-way cryptographic hashing and are never stored in plain text.
• Communications data: The content of emails, chat messages, or support tickets you submit to hb999 customer support.

3.2 Data Collected Automatically

When you access the hb999 platform, we automatically collect certain technical data, including:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, features accessed, games played, wagers placed (amounts, markets, outcomes), session start and end times, and navigation paths through the platform.
• Location data: Approximate geographic location derived from your IP address, used to verify that you are accessing the platform from Bangladesh and to detect suspicious login activity.
• Cookie data: Session cookies and persistent cookies as described in Section 7 of this Policy.

3.3 Data from Third Parties

In limited circumstances, hb999 may receive personal data about you from third parties, including:

• Identity verification service providers used to confirm the authenticity of identity documents submitted during the account verification process.
• Payment processors such as bKash, Nagad, Rocket, and Upay, who may confirm transaction completion or flag suspicious payment activity.
• Fraud prevention and anti-money-laundering screening services that cross-reference account data against watchlists and databases of known fraudulent actors.

4 How We Use Your Data

hb999 uses the personal data we collect for the following purposes:

hb999 will not use your personal data for any purpose that is incompatible with the purposes described in this section without first obtaining your explicit consent.

5 Legal Basis for Processing

hb999 processes your personal data under the following legal bases, as indicated in the table in Section 4:

• Contract performance: Processing is necessary to fulfil our contractual obligations to you as a registered hb999 player — including operating your account, processing your transactions, and providing customer support.
• Legal obligation: Processing is required for hb999 to comply with applicable legal obligations, including age verification requirements, anti-money-laundering regulations, and identity verification obligations.
• Legitimate interest: Processing is necessary for hb999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform performance improvement, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where hb999 relies on consent — for example, to send you promotional communications — you have the right to withdraw that consent at any time by contacting [email protected] or updating your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6 Sharing Your Data

6.1 Payment Service Providers

To process your deposits and withdrawals, hb999 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, and Upay. These providers process your payment data under their own privacy policies and are contractually bound to use your data only for the purpose of completing the relevant transaction.

6.2 Identity Verification Partners

hb999 works with authorised identity verification service providers to authenticate identity documents submitted during the account verification process. These partners process your identity data on our behalf and are contractually prohibited from using it for any other purpose.

6.3 Fraud Prevention and Compliance

hb999 may share personal data with fraud prevention agencies, anti-money-laundering screening services, and law enforcement authorities where required by applicable law or where hb999 reasonably believes that sharing is necessary to prevent fraud, money laundering, or other criminal activity.

6.4 Game Content Providers

When you play games powered by third-party studios — including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe — limited technical session data (such as an anonymised session token) may be transmitted to the relevant provider's platform. No directly identifying personal data is shared with game studios beyond what is technically necessary to authenticate your session.

6.5 No Sale of Data

hb999 does not sell, rent, or exchange your personal data with any third party for marketing or commercial profiling purposes. This commitment is unconditional and applies regardless of any commercial arrangement hb999 may have with its partners.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work efficiently and to provide information to the site operator. hb999 uses cookies and similar technologies including local storage and session tokens.

7.2 Types of Cookies We Use

• Essential cookies: These are strictly necessary for the platform to function. They maintain your login session, remember your account preferences, and ensure that transactions are processed correctly. You cannot disable essential cookies without disrupting the functionality of the hb999 platform.
• Analytics cookies: These cookies collect anonymised data about how Players navigate and use the hb999 platform — for example, which pages are visited most frequently and where users encounter errors. This information helps hb999 improve the platform experience. Analytics data is aggregated and does not identify individual users.
• Security cookies: These cookies support hb999's fraud detection systems by tracking unusual login patterns, device fingerprints, and geographic anomalies that may indicate account compromise or unauthorised access attempts.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling essential cookies will prevent you from logging in to your hb999 account and using the platform's core features. hb999 does not use advertising cookies or third-party cross-site tracking technologies.

8 Data Security

hb999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport encryption: All data transmitted between your browser or mobile device and hb999's servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
• Password security: Account passwords are stored exclusively as one-way cryptographic hashes using industry-standard algorithms. hb999 staff cannot access or view your password in plain text.
• Access controls: Access to systems that hold personal data is restricted to authorised hb999 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative accounts.
• Server security: hb999's servers are hosted in secure data centre facilities with physical access controls, 24/7 monitoring, redundant infrastructure, and regular security auditing.
• Incident response: hb999 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, hb999 will notify affected Players promptly and take immediate remedial action.

9 Data Retention

hb999 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required or permitted by applicable law. The following retention guidelines apply:

• Active account data: Personal data associated with an active hb999 account is retained for the duration of the account's active status and for a period of five (5) years following account closure, in compliance with applicable financial record-keeping obligations.
• Transaction records: Records of all deposits, withdrawals, wagers, and bonus transactions are retained for a minimum of five (5) years from the date of each transaction.
• Identity verification documents: Copies of identity documents provided for age and identity verification are retained for five (5) years following account closure or the most recent identity verification event, whichever is later.
• Customer support communications: Records of support tickets and communications are retained for three (3) years from the date of the most recent interaction.
• Analytics data: Anonymised platform usage data used for analytics purposes is retained for up to two (2) years, after which it is permanently deleted or further anonymised.
• Marketing consent records: Records of your marketing consent preferences are retained for as long as your account remains active and for one (1) year following account closure.

When data reaches the end of its applicable retention period, it is securely deleted from hb999's systems or rendered permanently anonymous through irreversible anonymisation techniques.

10 Your Data Rights

As an hb999 player, you have the following rights in relation to your personal data:

• Right of access: You have the right to request a copy of the personal data hb999 holds about you. We will respond to verified access requests within 30 calendar days.
• Right to rectification: You have the right to request correction of any personal data we hold that is inaccurate or incomplete. You can update certain account details directly from your account profile page.
• Right to erasure: In certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected — you have the right to request deletion of your personal data. Please note that this right is subject to limitations where hb999 is required to retain data to comply with a legal obligation.
• Right to restriction of processing: You have the right to request that hb999 restricts the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to hb999's processing of your personal data where that processing is based on legitimate interest. You also have the right to object at any time to the use of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact the hb999 data privacy team at [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing your request to ensure that data is not disclosed to unauthorised parties.

11 Children & Minors

The hb999 platform is strictly intended for adults aged 21 years and above. hb999 does not knowingly collect, store, or process personal data from individuals under the age of 21. Account registration requires explicit confirmation that the registering individual meets the minimum age requirement.

If hb999 becomes aware — through its age verification processes, a report from a third party, or any other means — that an account is registered to an individual under the age of 21, the account will be suspended immediately, all data associated with that account will be deleted, and any real-money balance will be returned to the payment method from which deposits were made.

If you are a parent or guardian and believe that your child has registered an hb999 account, please contact us immediately at [email protected] so that we can take prompt action to close the account and delete the associated data.

12 Third-Party Links

The hb999 platform may contain references to third-party payment service providers and game content studios whose names and branding appear within the platform interface. hb999 is not responsible for the privacy practices or content of any third-party services. When you interact with a third-party service — for example, completing a bKash or Nagad payment — you are subject to that third party's own privacy policy and terms of service.

hb999 encourages you to review the privacy policies of any third-party services you use in connection with the hb999 platform. The inclusion of a third-party service name or logo on the hb999 platform does not constitute an endorsement of that party's data practices.

13 Policy Updates

hb999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made to this Policy, we will notify registered Players by email or via a prominent notice on the hb999 platform prior to the changes taking effect.

The revised Privacy Policy will be effective from the date indicated at the top of this document. Your continued use of the hb999 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how hb999 is protecting your data.

If you disagree with any material change to this Policy, you should cease using the platform and contact [email protected] to arrange account closure prior to the revised Policy's effective date.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hb999 handles your personal data, please contact our data privacy team using the details below. All privacy-related correspondence should be submitted in English to ensure it is routed to the appropriate team member without delay.

hb999 takes all privacy-related enquiries seriously. We are committed to resolving any concerns about our data practices promptly and transparently. If you are not satisfied with our response to a privacy enquiry, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.