hl999 Privacy Policy — How We Protect Your Data

1 Data We Collect

hl999 collects personal data from players at various stages of the account lifecycle — from initial registration through to ongoing gameplay, transactions, and customer support interactions. We collect only the minimum data necessary to fulfil the specific purpose for which it is required. The categories of personal data we collect are as follows:

1.1 Registration Data

When you create an hl999 account, we collect the following information: your full legal name, date of birth, residential address (including city and district within Bangladesh), email address, mobile phone number, and a username of your choosing. This data is mandatory — without it, an account cannot be created or maintained.

1.2 Identity Verification (KYC) Data

Before processing your first withdrawal, hl999 requires completion of a Know Your Customer (KYC) verification. This involves collecting a scanned or photographed copy of a valid government-issued identity document — typically your National Identity Card (NID), or alternatively a valid passport. We may also request a recent utility bill, bank statement, or official document confirming your residential address. KYC documents are stored in an encrypted document management system and accessed only by authorised compliance personnel.

1.3 Financial Data

When you make a deposit or request a withdrawal, hl999 collects transaction data including: your mobile wallet number (bKash, Nagad, Rocket, or Upay), the last four digits of any card used (Visa or Mastercard — full card numbers are never stored by hl999), bank account details where bank transfer is used, transaction reference numbers, and transaction timestamps. Full payment credentials are handled exclusively by our payment processing partners and are never stored on hl999 servers.

1.4 Gameplay and Betting Data

hl999 automatically records all gameplay and betting activity associated with your account, including: game sessions played, bet amounts, wagering history, outcomes, bonus usage, and session duration. This data is used for account management, dispute resolution, responsible gaming monitoring, and anti-fraud purposes.

1.5 Technical and Device Data

When you access hl999 via a browser or mobile device, we automatically collect certain technical data including: your IP address, device type and model, operating system and version, browser type and version, screen resolution, referring URL, pages visited within hl999, and session timestamps. This data is used for platform security, fraud detection, and performance optimisation.

1.6 Communications Data

If you contact hl999 customer support via live chat, email, or any other channel, we retain records of those communications — including the content of messages, timestamps, and the support agent's responses. This data is used to resolve disputes, improve service quality, and maintain an audit trail of support interactions.

1.7 Summary of Data Categories

2 How We Use Your Data

hl999 uses personal data solely for lawful, specified, and transparent purposes directly related to operating a secure and fair online gaming platform for players across Bangladesh. We do not use personal data for automated decision-making that produces legally significant effects without human review. The specific purposes for which we process your data are detailed below.

2.1 Account Operations

Your registration data is used to create and maintain your player account, authenticate your identity on login, enable account settings management (including deposit limits, self-exclusion, and responsible gaming tools), and communicate important account-related notifications such as security alerts, password resets, and withdrawal confirmations.

2.2 Payment Processing

Financial data is processed to facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to execute withdrawal requests to your verified payment method; to detect and prevent fraudulent transactions; and to maintain accurate financial records for accounting, audit, and Anti-Money Laundering (AML) compliance purposes.

2.3 Identity Verification and Regulatory Compliance

KYC data is processed to verify that you meet the minimum age requirement of 18 years, to confirm that your identity matches the payment methods registered on your account, and to comply with applicable AML standards and financial crime prevention obligations. Verified KYC records may be disclosed to relevant Bangladeshi regulatory or law enforcement authorities where we are legally compelled to do so.

2.4 Responsible Gaming

Gameplay and session data is analysed to support our responsible gaming obligations — including monitoring for signs of problem gambling behaviour, enforcing player-set deposit limits and session time reminders, processing cooling-off and self-exclusion requests, and identifying accounts that may require proactive outreach from our responsible gaming team.

2.5 Fraud Prevention and Platform Security

Technical and device data, combined with transaction and gameplay data, is processed by hl999's automated fraud monitoring system to identify suspicious account behaviour, detect duplicate account creation, flag unusual betting patterns, and prevent unauthorised access to player accounts. Where fraud is detected or suspected, we may escalate to manual review and may contact you for additional verification.

2.6 Customer Support

Communications data is used to respond to your enquiries and complaints, to investigate and resolve disputes relating to gameplay, transactions, and bonuses, and to maintain a record of support interactions for quality assurance and training purposes.

2.7 Marketing Communications

Where you have provided explicit consent to receive marketing communications at the time of registration (or via account settings), hl999 may use your email address and mobile number to send you promotional offers, bonus announcements, and information about new games and features. You may withdraw your marketing consent at any time by updating your account preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

3 Data Sharing & Third Parties

hl999 does not sell, rent, or trade personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described in this section, and only with parties who are contractually obligated to protect the data to the same standard as hl999.

3.1 Payment Processing Partners

To process deposits and withdrawals, hl999 shares the minimum necessary financial data with its authorised payment processing partners — including the operators of bKash, Nagad, Rocket, and Upay mobile wallet services, and card payment processors operating the Visa and Mastercard networks. These partners receive only the transaction data required to execute the specific payment instruction and are prohibited from using that data for any other purpose.

3.2 Game Technology Providers

hl999 integrates game content from third-party studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, Red Tiger, and Play'n GO. These providers may receive your player identifier and session data for the purpose of delivering game content, calculating outcomes, and returning results to your account. Game providers do not receive your full identity data, financial data, or contact information.

3.3 Legal and Regulatory Disclosure

hl999 may disclose personal data to Bangladeshi law enforcement agencies, financial intelligence units, or courts where we are legally required to do so by a valid court order, statutory obligation, or other binding legal process. In such cases, hl999 will disclose only the minimum data necessary to comply with the legal requirement and will, where permitted by law, notify the affected player of the disclosure.

3.4 Fraud Prevention Services

hl999 may share device fingerprint data, IP addresses, and transaction pattern data with specialist fraud prevention and identity verification service providers to support our AML and fraud detection obligations. These providers process data solely on hl999's instructions and are contractually bound by strict data protection obligations.

3.5 Corporate Transactions

In the event that hl999 undergoes a merger, acquisition, or sale of all or part of its assets, player data may be transferred to the successor entity as part of that transaction. In such circumstances, hl999 will provide advance notice to affected players via the email address registered to their account, and the successor entity will be required to honour the terms of this Privacy Policy or provide players with an opportunity to close their accounts before any material change to data handling practices takes effect.

4 Cookies & Tracking Technologies

hl999 uses cookies and similar tracking technologies — including web beacons and local storage objects — to ensure the proper functioning of the platform, to remember your preferences, to analyse how players use the site, and to detect and prevent fraudulent activity. This section explains what types of cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 Types of Cookies Used

4.2 What We Do Not Use Cookies For

hl999 does not use third-party advertising cookies, cross-site tracking pixels, social media tracking tags, or any cookie technology that shares your browsing behaviour with external advertising networks. We do not use cookies to build advertising profiles or to target you with personalised advertisements on other websites.

4.3 Managing Your Cookie Preferences

You may control cookie settings through your browser. Most modern browsers allow you to view, block, or delete cookies via the browser's settings or privacy menu. Please note that disabling strictly necessary cookies will impair the functionality of the hl999 platform — in particular, you will not be able to remain logged in or complete deposit and withdrawal transactions without session cookies active.

5 Data Security

hl999 employs a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, we are committed to maintaining industry-standard data protection practices at all times.

5.1 Technical Safeguards

• TLS/SSL Encryption: All data transmitted between your browser or mobile device and hl999 servers is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption strength.
• Encrypted Data Storage: Sensitive data fields — including KYC document files, payment reference data, and account passwords (stored as salted hashes) — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data on hl999 internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions and is subject to regular audit.
• Intrusion Detection: hl999 maintains automated intrusion detection and anomaly monitoring systems that flag unusual access patterns or attempts to access restricted data stores.
• Two-Factor Authentication: Two-factor authentication (2FA) is available for player accounts and is mandatory for all hl999 internal staff accounts with access to player data.

5.2 Organisational Safeguards

• All hl999 staff who handle personal data receive data protection training as part of their onboarding and annual refresher training.
• Third-party vendors with access to player data are required to enter into Data Processing Agreements (DPAs) that impose data protection obligations consistent with this Privacy Policy.
• hl999 conducts periodic internal security reviews and, where material changes to platform architecture occur, commissions independent security assessments.

5.3 Data Breach Response

In the event of a data breach that poses a material risk to player privacy — including unauthorised access to account credentials or financial data — hl999 will notify affected players via the email address registered to their account within a reasonable timeframe following discovery. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the remediation steps being taken. Players are advised to change their passwords immediately if they receive a breach notification.

6 Your Privacy Rights

As a player on hl999, you hold a number of rights with respect to the personal data we hold about you. These rights are outlined below. To exercise any of these rights, please contact hl999 in writing at [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise. hl999 will acknowledge your request within 5 business days and will fulfil it within a reasonable timeframe, subject to the exceptions noted.

6.1 Right to Access

You have the right to request a copy of the personal data hl999 holds about you. Upon a valid and verified request, we will provide you with a summary of your registration data, KYC records (redacted for security), transaction history, gameplay logs, and communications history associated with your account.

6.2 Right to Rectification

If any personal data hl999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections — such as updating your email address or phone number — you may do so directly via your account settings. For corrections to identity data (name, date of birth), you will be required to submit supporting documentation as part of the rectification process.

6.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other lawful basis for processing exists. Please note that hl999 is subject to legal obligations that require us to retain certain data categories — particularly KYC records, transaction history, and AML-related data — for a minimum period even after account closure. Erasure requests will be fulfilled to the maximum extent permitted by applicable law.

6.4 Right to Restrict Processing

You have the right to request that hl999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved. During a restriction period, we will continue to store your data but will not actively process it beyond what is required for storage and legal compliance.

6.5 Right to Object to Marketing

Where hl999 processes your data for direct marketing purposes, you have an absolute right to object to that processing at any time. Upon receipt of a valid objection, hl999 will cease processing your data for marketing purposes within 5 business days. Objecting to marketing processing will not affect your ability to use your hl999 account or receive transactional notifications.

6.6 Right to Data Portability

Where processing is based on your consent or on a contract between you and hl999, and where the processing is carried out by automated means, you have the right to receive a structured, machine-readable copy of the personal data you have provided to hl999. This right covers your registration data, transaction history, and gameplay records. Requests for data portability should be submitted to [email protected].

7 Data Retention

hl999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, and audit obligations. The following retention periods apply to the main categories of personal data we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with hl999's internal data disposal procedures. Anonymised or aggregated data (from which individual players cannot be identified) may be retained indefinitely for statistical and business analysis purposes.

8 Policy Updates & Contact

8.1 Updates to This Policy

hl999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. When material changes are made, we will publish the revised Privacy Policy at hl999.app/privacy-policy with an updated effective date. Where changes are significant and may materially affect your rights, we will notify registered players via the email address on their account, where reasonably practicable. Continued use of hl999 following publication of an updated Privacy Policy constitutes acceptance of the revised terms.

8.2 Children and Minors

hl999 is strictly an 18+ platform. We do not knowingly collect personal data from any person under the age of 18. If we become aware that a player account has been registered by a minor, we will immediately close the account, void all associated balances, and securely delete any personal data collected in connection with that account to the maximum extent permitted by law.

8.3 Contact the hl999 Privacy Team

For all privacy-related enquiries, including data subject rights requests, concerns about our data handling practices, or questions about this Privacy Policy, please contact hl999 in writing at:

• Email: [email protected]
• Response Time: Within 5 business days
• Serving players across Bangladesh (BST, UTC+6)
• Live Chat: Available 24/7 via the hl999 platform