hba999 Privacy Policy

Introduction & Scope

hba999 is committed to protecting the privacy and personal data of all players across Bangladesh, including those accessing our Platform from Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We collect only the personal data that is necessary for us to provide our services, comply with applicable obligations, and deliver a safe and enjoyable gaming experience to adults aged 21 and above.

This Policy applies to all personal data we process in connection with your use of hba999, regardless of the device or method you use to access the Platform. It covers data collected directly from you, data generated through your use of the Platform, and data we may receive from third-party payment providers such as bKash, Nagad, Rocket, and Upay. Please read this Policy carefully alongside our Terms & Conditions and Responsible Gaming pages.

Our Privacy Principles

Data We Collect

When you register for and use hba999, we collect a number of categories of personal data. The table below summarises the main categories, together with examples of the specific data points involved and the primary reason we collect them.

• Directly from you — when you register, complete KYC, make a deposit or withdrawal, contact support, or respond to a survey.
• Automatically — through cookies, log files, and analytics tools when you access and navigate the Platform.
• From payment providers — bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank may share transaction confirmation data with us to verify payments.
• From fraud prevention partners — third-party services that help us detect duplicate accounts, suspicious betting patterns, and fraudulent transactions.

How We Use Your Data

hba999 processes personal data only where there is a lawful basis for doing so. The primary bases we rely on are: performing our contractual obligations to you as a registered player; complying with applicable legal and regulatory requirements; pursuing our legitimate interests in operating a safe and commercially viable platform; and, where required, your explicit consent.

• Creating and maintaining your hba999 player account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved methods.
• Verifying your identity and age (21+) through our KYC process.
• Providing access to live casino games, cricket betting, Dragon Tiger, slots, and all other Platform features.
• Communicating with you about your account, transactions, and any queries you raise with our support team.

• Detecting, investigating, and preventing fraud, money laundering, and other unlawful activity.
• Monitoring for responsible gaming indicators and applying player protection measures where appropriate.
• Complying with anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Maintaining audit records as required for dispute resolution and regulatory enquiries.

• Analysing aggregated, anonymised usage data to improve Platform performance and user experience.
• Sending you relevant promotional communications about hba999 offers, bonuses, and new game launches — you may opt out of marketing communications at any time by contacting [email protected].
• Conducting internal research and statistical analysis to understand player behaviour trends on the Platform.

Cookies & Tracking

hba999 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to gather analytics data that helps us improve the user experience. A cookie is a small text file placed on your device when you visit the Platform.

• Strictly Necessary Cookies — essential for the Platform to operate. These include session authentication cookies that keep you logged in securely. You cannot opt out of these.
• Functional Cookies — remember your preferences such as language settings, game display options, and deposit method selections.
• Analytics Cookies — collect anonymised data about how players navigate the Platform, which pages are most visited, and where errors occur. This data is used solely to improve the Platform.
• Security Cookies — help us detect and prevent fraudulent logins, bot activity, and suspicious session patterns.

You can control or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or accessing core Platform features. Disabling functional or analytics cookies will not affect your ability to play but may reduce the quality of your experience.

Data Sharing

hba999 does not sell or rent your personal data to third parties for commercial gain. We may share your data with carefully selected third parties only where necessary and only under strict confidentiality obligations. The categories of recipients are set out below.

• Payment Processors — bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank receive the minimum data necessary to process your deposits and withdrawals securely.
• Identity Verification Partners — third-party KYC and AML service providers who assist us in verifying player identities and monitoring for suspicious financial activity.
• Game Technology Providers — studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their games on our Platform.
• IT & Security Service Providers — cloud hosting, server management, and cybersecurity partners who process data on our behalf under binding data processing agreements.
• Legal & Regulatory Authorities — where required by applicable law, we may disclose personal data to relevant authorities to comply with legal obligations, court orders, or law enforcement requests.
• Fraud Prevention Networks — industry fraud-prevention services that enable us to share indicators of fraudulent or abusive behaviour across participating platforms.

Data Retention

hba999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The following general retention periods apply:

When personal data is no longer required, hba999 will securely delete or anonymise it in a manner that prevents reconstruction. Data that has been fully anonymised and cannot be linked back to an individual is no longer considered personal data and may be retained for analytical purposes without restriction.

Your Rights

As a player on the hba999 Platform, you have a number of rights in relation to your personal data. hba999 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, please contact us in writing at [email protected] with the subject line "Data Rights Request" and include your registered username.

• Right of Access — you may request a copy of the personal data hba999 holds about you at any time.
• Right to Rectification — if any personal data we hold is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure — in certain circumstances you may request that hba999 delete your personal data. Note that we may be legally required to retain certain data (e.g., transaction records) even after account closure.
• Right to Restrict Processing — you may request that we limit how we use your data in specific situations, such as while a dispute is being resolved.
• Right to Data Portability — you may request a structured, machine-readable copy of personal data you have provided to hba999, where technically feasible.
• Right to Withdraw Consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object — you may object to processing of your personal data where hba999 relies on legitimate interests as the legal basis, in circumstances where your individual situation justifies such an objection.

We aim to respond to all data rights requests within 30 calendar days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We will never charge a fee for handling legitimate data rights requests.

Data Security

hba999 implements robust technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes the following safeguards:

• SSL/TLS Encryption — all data in transit between your device and our servers is encrypted using industry-standard TLS protocols.
• Password Hashing — account passwords are stored using one-way cryptographic hashing algorithms. hba999 staff cannot read your password in plain text.
• Access Controls — access to personal data held on hba999 systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Intrusion Detection — automated systems monitor our infrastructure continuously for signs of unauthorised access or anomalous activity.
• Regular Security Reviews — we conduct periodic reviews of our data security practices and update our measures in line with evolving threats and industry best practice.

While hba999 takes every reasonable precaution to protect your personal data, no transmission over the internet and no method of electronic storage can be guaranteed as completely secure. You also play an important role in keeping your account secure — never share your password or OTP with anyone, including persons claiming to be hba999 staff. If you suspect your account has been compromised, contact [email protected] immediately.

Minors & Age Restriction

The hba999 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If you are under 21, you must not register an account or use the Platform in any way.

If hba999 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us at [email protected] immediately so we can investigate and act accordingly.

Changes & Contact Us

hba999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When we make significant changes, we will update the "Last Updated" date at the top of this page and, where required, provide additional notice to registered players.

If you have any questions, concerns, or complaints about this Privacy Policy or the way hba999 handles your personal data, please contact our support team. We take all privacy concerns seriously and will investigate any complaint thoroughly.