ht999 Privacy Policy

1 Data We Collect

When you register and use the ht999 platform, we collect several categories of personal data. The scope of data collected depends on the stage of your relationship with us — for example, a player who has completed full KYC verification will have more data on file than one who has only browsed the site without registering.

Registration Data

When you create an account, we collect the following information:

• Full legal name as it appears on your government-issued identification
• Date of birth (used for mandatory age verification — you must be 18 or older)
• Residential address, including city and district (e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Email address
• Bangladeshi mobile phone number (used for account notifications and two-factor authentication)
• Username and encrypted password

Identity Verification (KYC) Data

As part of our Know Your Customer process, we may collect:

• Scanned or photographed copies of your National Identity Card (NID), passport, or driving licence
• Proof of address documents (utility bill, bank statement, or official correspondence dated within 90 days)
• Proof of payment method ownership (e.g., a screenshot of your bKash or Nagad wallet showing your registered mobile number)
• Selfie or liveness-check image for facial verification, where applicable

Financial Transaction Data

Each time you deposit or withdraw funds, we record:

• Transaction amount in BDT
• Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard)
• Transaction reference numbers and timestamps
• Wallet or account identifier associated with the payment method (e.g., your bKash or Nagad mobile number)

Gameplay & Betting Data

We maintain a full record of your activity on the Platform, including games played, wagers placed, odds accepted, wins and losses, bonus usage, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and improving our game and sports betting offering.

Technical & Device Data

When you access the Platform, our servers automatically collect:

• IP address and approximate geolocation
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Referring URL and pages visited within the Platform
• Session duration and clickstream data
• Device fingerprint (used for fraud detection and to enforce the one-account-per-player policy)

2 How We Use Your Data

ht999 processes your personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which we use each category of data and the legal basis for that processing.

Marketing Communications

ht999 will only send you promotional emails, SMS messages, or in-app notifications if you have explicitly opted in to receive them during registration or through your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account dashboard or by contacting our support team. Withdrawal of marketing consent does not affect our ability to send you transactional or account-related communications (such as deposit confirmations, withdrawal status updates, or security alerts).

Automated Decision-Making

ht999 uses automated systems for fraud detection, responsible gaming intervention triggers, and bonus eligibility assessments. These systems analyse patterns in gameplay and transaction data to flag accounts that may require human review. Where an automated process results in a decision that materially affects your account — such as a temporary suspension — you have the right to request human review of that decision by contacting our support team.

3 Data Sharing & Disclosure

ht999 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers (Data Processors)

We engage carefully selected third-party service providers to help us operate the Platform. These providers process your data strictly on our behalf and under our instructions, pursuant to data processing agreements that impose equivalent privacy and security obligations. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners for transaction processing
• Identity verification providers: Third-party KYC and age verification technology partners
• Game studios: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and other certified game providers receive session tokens but do not receive your full personal profile
• Cloud infrastructure: Server and storage providers who host Platform data under strict security controls
• Analytics providers: Aggregated, de-identified usage data may be shared with analytics partners to improve Platform performance

Legal & Regulatory Disclosure

ht999 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are legally compelled to do so — for example, in connection with an investigation into suspected money laundering, fraud, match-fixing, or other criminal activity. We will notify you of such disclosure where we are legally permitted to do so.

Business Transfers

In the event that ht999 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer and the privacy terms applicable to their data under the new entity before the transfer takes effect.

4 Cookies & Tracking Technologies

ht999 uses cookies and similar tracking technologies to maintain the functionality, security, and performance of the Platform. A cookie is a small text file placed on your device by our web server when you visit the Platform. Cookies allow us to recognise your browser across sessions and personalise your experience.

Types of Cookies We Use

No Third-Party Advertising Cookies

ht999 does not deploy third-party advertising or retargeting cookies. You will not be tracked across the web for advertising purposes as a result of visiting our Platform. The cookies we use are limited to those necessary for Platform operation, security, and internal analytics.

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies may impair Platform functionality — for example, your login session may not persist if session cookies are blocked. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

5 Data Retention

ht999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The table below provides indicative retention periods for each data category.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an identified individual. Anonymised, aggregated data (such as statistical reports on platform usage) may be retained indefinitely for business intelligence purposes, as it does not constitute personal data.

6 Your Privacy Rights

As a player on the ht999 Platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team via live chat or by emailing [email protected]. We will respond to all verified requests within 30 calendar days.

Right of Access

You have the right to request a copy of the personal data we hold about you. Upon receiving a verified access request, ht999 will provide a summary of the data categories held, the purposes for which they are processed, and the retention periods applicable.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields — such as your registered name or date of birth — correction may require submission of supporting documentation to comply with our KYC obligations.

Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you believe the data has been unlawfully processed. Please note that this right is not absolute — ht999 is required by law to retain certain financial and identity records for the periods stated in Section 5 above, and erasure requests cannot override these obligations.

Right to Restriction of Processing

You may request that we restrict processing of your personal data in certain circumstances — for example, while we investigate a rectification request you have raised, or while you contest the accuracy of data we hold. During a restriction period, we will continue to store the data but will not actively process it for other purposes.

Right to Data Portability

Where we process your data based on your consent or to fulfil a contract with you, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that we transmit it directly to another service provider where technically feasible.

Right to Object

You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.

7 Data Security

ht999 employs a multilayered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures are reviewed and updated on a regular basis to reflect evolving best practices and threat intelligence.

Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser or app and our servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms that your connection to ht999 is secure.
• Encryption at Rest: Sensitive data fields — including payment details, identity document images, and passwords — are encrypted at rest using AES-256 encryption.
• Password Hashing: Passwords are never stored in plain text. They are hashed using a strong, salted hashing algorithm before storage.
• Two-Factor Authentication (2FA): ht999 supports 2FA via SMS OTP for account login, providing an additional layer of protection against unauthorised access.
• Firewall & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and 24/7 intrusion detection and prevention systems.

Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Only staff members whose role requires access to specific data categories are granted that access.
• All staff with access to personal data complete mandatory privacy and data security training on joining and annually thereafter.
• Third-party service providers are required to demonstrate equivalent data security standards before being engaged.
• Regular internal audits are conducted to verify compliance with this Privacy Policy and our internal data handling procedures.

Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, ht999 will take immediate steps to contain the breach, assess its scope and impact, and notify affected players without undue delay. Notifications will be sent via your registered email address and, where appropriate, by in-app notification. ht999 will also comply with any statutory notification obligations applicable to the breach.

8 Policy Updates & Contact

Updates to This Privacy Policy

ht999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Where changes are material — meaning they significantly affect your privacy rights or our obligations — we will notify you by email and by prominent notice on the Platform at least 7 days before the updated policy takes effect.

Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should discontinue using the Platform and request account closure before the effective date.

Children's Privacy

ht999 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. Our registration process includes mandatory date-of-birth verification to screen out underage applicants. If you are a parent or guardian and believe that your child has registered on ht999, please contact us immediately at [email protected] and we will take prompt action to close the account and delete the associated data.

Third-Party Websites

The ht999 Platform does not contain links to external third-party websites for commercial or affiliate purposes. This Privacy Policy applies solely to data collected and processed by ht999 through the Platform at https://ht999.bio. ht999 is not responsible for the privacy practices of any third-party service providers whose interfaces you may access independently.

Contact Our Privacy Team

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 in English from within your ht999 account dashboard
• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

We aim to acknowledge all privacy-related correspondence within 48 hours and resolve queries within 30 calendar days. For formal data subject access requests or erasure requests, please include your registered account email address and a brief description of your request so that we can verify your identity promptly.