hbh99 Privacy Policy

This Privacy Policy ("Policy") is issued by hbh99 ("we", "us", "our", "the Platform") and governs the collection, use, storage, and disclosure of personal data relating to all registered players and visitors of the hbh99 website at hbh99.app. We are committed to handling your personal information responsibly and in a manner consistent with fair data-protection principles.

By accessing hbh99 and registering an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

1. Data We Collect

hbh99 collects personal data through several channels: directly from you when you register or use our services, automatically through your device and browser when you interact with the platform, and from trusted third-party sources where permitted and necessary.

1.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile phone number, and preferred username and password.
• Identity verification (KYC) data: Copies of government-issued identity documents such as National Identity Card (NID), passport, or birth certificate; proof of address documents; and, where relevant, source-of-funds documentation.
• Payment data: Mobile banking account identifiers (bKash number, Nagad number, Rocket number, Upay number), bank account details (BRAC Bank, Dutch-Bangla Bank, City Bank, Islami Bank, Sonali Bank), and cryptocurrency wallet addresses. Full card numbers are not stored by hbh99 — card transactions are tokenised by our payment processor.
• Communications data: Messages you send to our support team via live chat, email ([email protected]), or any other channel, including the content of those messages and any attachments.
• Responsible gaming preferences: Self-exclusion requests, deposit limits, session time limits, and cooling-off period preferences you set on your account.

1.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage and behavioural data: Pages visited, time spent on each page, games played, bets placed, deposit and withdrawal history, session duration, and navigation paths through the platform.
• Cookie and tracking data: Session cookies, persistent cookies, and similar technologies as described in Section 5 of this Policy.
• Geolocation data: Approximate geographic location derived from your IP address, used to apply regional settings and detect access from restricted jurisdictions.

1.3 Data from Third Parties

• Payment processors: Transaction confirmation, payment status, and fraud-screening results from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks.
• Identity verification providers: Results of automated KYC checks carried out by third-party verification services to confirm document authenticity and identity matches.
• Anti-fraud and AML services: Risk scores and watchlist-screening results used to meet our anti-money-laundering obligations.

2. How We Use Your Data

hbh99 uses the personal data we hold for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, contact details
Identity verification and KYC compliance	Identity documents, date of birth, NID data
Processing deposits and withdrawals	Payment data, transaction history
Customer support and dispute resolution	Communications data, account history
Fraud prevention and anti-money laundering	Device data, IP address, transaction patterns
Responsible gaming monitoring	Betting behaviour, session data, self-set limits
Platform improvement and analytics	Usage data, cookie data (anonymised where possible)
Sending service notifications and account alerts	Email address, mobile number
Sending promotional communications (where consented)	Email address, mobile number, game preferences

hbh99 does not use your personal data to make fully automated decisions that have a significant legal or similarly significant effect on you without providing an opportunity for human review.

3. Legal Basis for Processing

We process your personal data on the following legal bases, depending on the specific processing activity in question:

• Contractual necessity: Processing required to fulfil our contract with you as a registered player — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and record-keeping duties.
• Legitimate interests: Processing carried out to pursue hbh99's legitimate business interests, such as fraud prevention, platform security, and internal analytics, where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to direct marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Data Sharing & Third Parties

hbh99 does not sell or rent your personal data to any third party. We may, however, share your data with carefully selected third parties in the following circumstances:

4.1 Service Providers

We engage trusted third-party service providers to assist in operating the hbh99 platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification providers, cloud hosting infrastructure providers, customer support software vendors, and cybersecurity specialists. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data-protection standards.

4.2 Game and Software Providers

The casino games available on hbh99 are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive certain anonymised session and game-round data for the purpose of game integrity, RNG certification, and dispute resolution. They do not receive your full personal profile unless required to resolve a specific dispute.

4.3 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities if we are legally required to do so, or if disclosure is necessary to prevent or detect crime, protect the rights of hbh99 or third parties, or enforce our Terms & Conditions.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of hbh99's business assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and any changes to this Privacy Policy that result from it.

5. Cookies & Tracking Technologies

hbh99 uses cookies and similar technologies (such as web beacons and local storage) to enhance your experience on the platform, maintain secure sessions, and gather aggregated analytics data. The types of cookies we use are described below:

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, prevent cross-site request forgery (CSRF), and ensure the platform functions correctly. These cannot be disabled.	Session / up to 24 hours
Functional	Remember your language preferences, game lobby layout, and responsible gaming limit settings between visits.	Up to 90 days
Analytics	Collect anonymised data on platform usage, popular games, and navigation patterns to help us improve hbh99. No personally identifiable information is included in analytics reports.	Up to 12 months
Security	Detect and mitigate fraudulent sessions, bot activity, and suspicious login attempts. These are essential for platform integrity.	Session / up to 7 days

You can control and manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. For guidance on managing cookies in popular browsers, refer to the help documentation provided by your browser vendor.

6. Data Retention & Storage

hbh99 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required or permitted by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account relationship with hbh99, plus a minimum of five (5) years following account closure, in order to meet AML and financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of your last transaction or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for three (3) years from the date of the last communication in a support thread.
• Marketing consent records: Retained for the duration of the consent period and for one (1) year thereafter as evidence of consent.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked back to any individual.

All personal data is stored on secure servers. Where data is transferred outside Bangladesh for processing by service providers, we ensure that appropriate contractual safeguards are in place to protect your information to an equivalent standard.

7. Your Privacy Rights

As a player on hbh99, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our privacy team at [email protected]. We will respond to all verified requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You can update most account details directly through your account settings page.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we temporarily restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for direct marketing purposes. You can withdraw consent to marketing communications at any time by contacting support or by using the unsubscribe link in any marketing email.
• Right not to be Subject to Automated Decision-Making: You have the right to request human review of any automated decision that significantly affects you.

8. Data Security Measures

hbh99 takes the security of your personal data seriously. We have implemented a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in transit: All data exchanged between your browser or app and hbh99 servers is encrypted using 256-bit TLS/SSL. Our SSL certificate is validated and renewed regularly.
• Encryption at rest: Sensitive data fields — including identity document scans and payment identifiers — are encrypted at rest within our database infrastructure.
• Access controls: Access to personal data within hbh99's systems is granted on a strict need-to-know basis. All staff with access to personal data undergo regular data-protection training.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their hbh99 account. All administrative access to our internal systems requires 2FA.
• Penetration testing: hbh99 commissions regular third-party penetration tests and vulnerability assessments to identify and address security weaknesses proactively.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, hbh99 will notify affected players without undue delay and take all reasonable steps to mitigate the impact.

9. Changes to This Policy

hbh99 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, send a notification to your registered email address.

We encourage you to review this Policy periodically to stay informed about how we protect your personal information. Your continued use of the hbh99 platform after any changes have been posted constitutes your acceptance of the revised Policy. The most current version will always be accessible at hbh99.app/privacy-policy.

10. Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or the way hbh99 handles your personal data, please contact us using the details below. We are committed to resolving all privacy-related enquiries promptly and fairly.

• Email: [email protected]
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
• Response Time: We aim to acknowledge all privacy requests within 3 business days and provide a full response within 30 calendar days.