h999 Privacy Policy – How We Protect Your Personal Data on Bangladesh's Trusted Casino Platform

In this Privacy Policy, the following terms have the meanings set out below:

• "h999", "we", "us", or "our" refers to the operator of the h999 platform at h999.ws, providing online casino and sports betting services to the Bangladesh market.
• "Platform" means the h999 website at h999.ws, including all pages, features, games, betting markets, account management tools, and payment facilities accessible through it.
• "Player", "you", or "your" refers to any individual who registers an account on the h999 Platform or who accesses or uses the Platform in any capacity.
• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data held by h999.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, or deletion.
• "BDT" means Bangladeshi Taka, the sole transaction currency of the h999 Platform.
• "Third-Party Service Provider" means any external company or individual that processes Personal Data on behalf of h999 for a specific, contracted purpose, such as payment processing, identity verification, or fraud prevention.

h999 collects the following categories of Personal Data from Players and Platform visitors:

h999 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health information. If any such data is incidentally included in a document submitted for verification purposes, it will not be extracted or processed for any purpose other than confirming the authenticity of the document.

h999 collects Personal Data through the following methods:

• Direct Provision: Data you actively provide when registering an account, completing the identity verification process, making a deposit or withdrawal request, contacting customer support, or responding to a survey or promotion.
• Automated Collection: Technical data such as IP address, device identifiers, browser fingerprint, and session activity logs that are collected automatically when you access the h999 Platform.
• Cookies and Similar Technologies: Session and persistent cookies, local storage, and related browser-based tracking mechanisms as described in Section 8 of this Policy.
• Third-Party Sources: Identity verification and fraud-screening data received from licensed identity verification providers and payment processors as part of the h999 Know Your Customer (KYC) process. h999 ensures that any third party sharing data with us does so on a lawful basis.
• Payment Providers: Transaction confirmation and status data received from bKash, Nagad, Rocket, Upay, and affiliated Bangladesh banking partners when you initiate or complete a BDT deposit or withdrawal through the Platform.

h999 uses the Personal Data we collect for the following purposes:

• Account Administration: Creating, maintaining, and managing your h999 Account, including processing login requests, updating account preferences, and managing responsible gaming settings such as deposit limits and self-exclusion.
• Identity Verification (KYC): Verifying that you meet the minimum age requirement of 21 years and that the personal information you have provided is accurate, as required for the safe operation of the Platform.
• Payment Processing: Processing BDT deposits and withdrawals through bKash, Nagad, Rocket, Upay, and Bangladesh banking partners, and maintaining accurate transaction records.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the Platform. This includes analysing betting patterns, IP address behaviour, and device consistency.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and communicating service updates relevant to your Account.
• Legal and Regulatory Compliance: Meeting obligations under applicable law, including record-keeping requirements, and responding to lawful requests from competent authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, reliability, and user experience of the h999 Platform, including game loading speeds, navigation flows, and payment success rates.
• Marketing Communications: Sending promotional communications, bonus notifications, and seasonal offers by email or SMS, where you have provided consent to receive such communications. You may withdraw marketing consent at any time by contacting [email protected].
• Responsible Gaming: Monitoring gaming activity data to identify patterns that may indicate problem gambling behaviour, and proactively offering responsible gaming tools or interventions where appropriate.

h999 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between h999 and the Player — specifically, providing access to games, processing BDT transactions, and administering Account features. Without this processing, h999 cannot provide its Services.
• Legal Obligation: Processing required to comply with applicable law, including identity verification, anti-money laundering checks, and cooperation with lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in pursuit of h999's legitimate business interests, including fraud detection, platform security, and anonymised analytics for service improvement, provided such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in respect of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.1 h999 does not sell your personal data to any third party for commercial purposes. We share Personal Data only in the limited circumstances described below:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to the extent necessary to process your BDT transactions and confirm payment status.
• Identity Verification Providers: Licensed KYC and identity verification service providers engaged by h999 to confirm the accuracy of registration information and age eligibility as part of the account verification process.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Spribe, and Ezugi may receive limited technical session data (such as Player ID and session token) necessary to deliver game content. These providers do not receive full identity or financial data.
• Fraud Prevention and Security Partners: Third-party fraud detection and cybersecurity service providers engaged to help h999 identify and prevent prohibited activities on the Platform.
• Legal Authorities: h999 will disclose Personal Data to competent law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where h999 reasonably believes disclosure is necessary to protect the safety of individuals or to prevent financial crime.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of h999's business, Player data may be transferred to the successor entity, subject to equivalent privacy protections. Players will be notified of any such transfer via their registered email address.

6.2 Contracted Data Processors. Where h999 engages third parties to process Personal Data on its behalf, we do so under written data processing agreements that require those parties to maintain appropriate security standards and process data only for the purposes specified by h999.

7.1 Payment Channel Security. All BDT deposit and withdrawal transactions on the h999 Platform are processed through SSL 256-bit encrypted connections. h999 does not store full payment wallet credentials (such as bKash PINs or bank account passwords) on its servers. Payment method identifiers (such as registered mobile numbers linked to bKash or Nagad accounts) are stored in encrypted form.

7.2 Own-Name Payment Requirement. As set out in the h999 Terms & Conditions, all payment methods used on the Platform must be registered in the Player's own legal name. This requirement exists both for regulatory compliance and to ensure that personal financial data relates directly to the verified account holder.

7.3 Transaction Record Retention. h999 retains records of all BDT deposit and withdrawal transactions for the period required under applicable financial record-keeping obligations. These records are maintained in secure, access-controlled systems and are accessible only to authorised h999 personnel and, where legally required, to competent authorities.

7.4 Fraud Monitoring. h999 applies automated monitoring to BDT transaction patterns to detect indicators of fraudulent activity, money laundering, or misuse of payment systems. Where suspicious transaction patterns are identified, h999 may temporarily suspend transaction processing pending investigation and, where required by law, report findings to relevant authorities.

8.1 What Are Cookies. Cookies are small text files placed on your device by the h999 Platform when you visit or log in. They allow the Platform to recognise your device, remember your preferences, maintain your authenticated session, and collect anonymised usage analytics.

8.2 Types of Cookies Used by h999. h999 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your h999 Account during a browsing session. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Store your preferences such as language settings, responsible gaming display options, and last-visited game categories to improve your experience on return visits.
• Analytics Cookies: Collect anonymised data about how Players navigate the h999 Platform — such as most-visited pages, average session duration, and game load times — to help h999 identify areas for improvement.
• Security Cookies: Support h999's fraud detection and account security systems by tracking anomalous login behaviour and device consistency across sessions.

8.3 Managing Cookies. You may control cookie behaviour through your browser settings. Disabling strictly necessary cookies will affect your ability to log in to and use the h999 Platform. Disabling analytics or functional cookies will not prevent access but may reduce personalisation features. h999 does not currently use third-party advertising or retargeting cookies.

9.1 Retention Principles. h999 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. When data is no longer required, h999 securely deletes or anonymises it.

9.2 Active Accounts. Personal Data associated with an active h999 Account is retained for the duration of the account relationship and for a reasonable period thereafter to handle any post-closure disputes, regulatory enquiries, or legal claims.

9.3 Financial Records. BDT transaction records are retained for a minimum of five years from the date of the transaction, in compliance with applicable financial record-keeping requirements.

9.4 Identity Verification Documents. KYC documents submitted by Players are retained for a minimum of five years from the date of submission, or longer if required to satisfy an ongoing regulatory obligation or legal proceeding.

9.5 Marketing Data. Where Personal Data is held solely on the basis of marketing consent, h999 will delete or anonymise that data promptly upon receipt of a withdrawal of consent request.

9.6 Self-Excluded Players. Where a Player has requested self-exclusion, h999 retains sufficient account identifying data to enforce the exclusion and prevent re-registration for the duration of the exclusion period.

10.1 Technical Safeguards. h999 implements the following technical measures to protect Player Personal Data:

• SSL 256-bit encryption for all data transmitted between your device and h999 servers
• Encrypted storage of sensitive data fields including payment method identifiers and password credentials
• Role-based access controls ensuring that h999 personnel access only the data necessary for their specific function
• Regular automated and manual security assessments of Platform infrastructure
• Intrusion detection systems and real-time anomaly monitoring on h999 server environments

10.2 Organisational Safeguards. Access to Player Personal Data is restricted to h999 personnel with a legitimate operational need. All personnel with access to personal data receive training on data protection obligations. Third-party service providers are contractually required to maintain equivalent security standards.

10.3 Security Incidents. In the event of a data security incident that poses a risk to Player rights and freedoms, h999 will act promptly to contain the incident, assess its scope, and notify affected Players via their registered email address within a reasonable timeframe. h999 will also report the incident to relevant authorities as required by applicable law.

10.4 No Absolute Guarantee. While h999 takes security seriously and invests in robust protective measures, no electronic system is entirely immune to attack or accidental loss. h999 cannot guarantee absolute data security and encourages Players to also take personal responsibility for their account security — including using strong, unique passwords and not sharing login credentials.

As a Player on the h999 Platform, you have the following rights in respect of your Personal Data. To exercise any of these rights, contact h999 at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of the Personal Data h999 holds about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held about you.
• Right to Erasure: In certain circumstances — for example, where Personal Data is no longer necessary for the purpose for which it was collected — you may request that h999 delete your data. This right is subject to h999's legal obligations to retain certain records.
• Right to Restrict Processing: You may request that h999 limits its use of your Personal Data in certain circumstances, such as while a complaint is being investigated.
• Right to Object: You may object to h999's processing of your Personal Data where that processing is based on legitimate interests, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where processing is based on your consent — primarily marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Data Portability: Where technically feasible and legally applicable, you may request a structured, machine-readable copy of Personal Data you have provided to h999.

12.1 Minimum Age. The h999 Platform is strictly intended for individuals aged 21 years and above. h999 does not knowingly collect Personal Data from anyone under the age of 21. The Platform employs age-verification measures at registration and may request documentary proof of age at any time.

12.2 Discovery of Underage Access. If h999 discovers that Personal Data has been collected from a Player who is under 21 years of age, we will immediately suspend the associated Account, delete or anonymise the collected data to the extent legally permissible, and take appropriate steps in accordance with applicable law. Any funds deposited by an underage individual will be returned to the originating payment source.

12.3 Parental Controls. h999 encourages parents and guardians to use parental control software on shared devices to prevent underage individuals from accessing online gambling platforms. If you suspect that a minor in your household has accessed the h999 Platform, please contact [email protected] immediately.

The h999 Platform does not contain links to external third-party websites as a matter of policy. However, game content delivered through licensed game provider integrations (such as Pragmatic Play, Evolution Gaming, or Spribe) may be rendered within the Platform environment under those providers' own technical systems. h999 is not responsible for the privacy practices of game content providers in respect of any technical data they may collect as part of game session delivery. Players are encouraged to review the privacy documentation of relevant game studios if they have specific concerns.

14.1 Right to Amend. h999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The date of the most recent revision is displayed at the bottom of this Policy.

14.2 Notification of Material Changes. Where h999 makes a material change to this Privacy Policy — one that significantly affects how we collect, use, or share your Personal Data — we will notify registered Players via their registered email address at least 7 days before the change takes effect.

14.3 Continued Use as Acceptance. Your continued use of the h999 Platform following the effective date of any Policy amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendment, you should discontinue use of the Platform and contact [email protected] to request account closure.

For all privacy-related enquiries, data rights requests, or concerns about h999's handling of your Personal Data, please contact the h999 customer support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request"
• Subject Line for Security Concerns: "Data Security Concern"
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Acknowledgement within 5 business days; substantive response within 30 calendar days
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

h999 takes all privacy enquiries seriously and is committed to resolving your concerns promptly and transparently. If you are not satisfied with our response to a privacy complaint, you retain the right to seek further remedy through appropriate legal channels available in Bangladesh.