hd999 Privacy Policy — How We Handle Your Personal Data

1. Introduction

hd999 operates the online casino and sports betting platform available at hd999.bio. As part of providing our services to registered players in Bangladesh, hd999 collects and processes certain personal data about you. This Privacy Policy ("Policy") describes what data we collect, how we use it, who we share it with, how long we keep it, and how you can exercise your rights over it. This Policy should be read alongside our Terms and Conditions, which govern the overall use of the hd999 platform.

By registering for an account at hd999, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the hd999 platform. This Policy applies to all users of hd999, including visitors who browse the site without registering and registered players who have created an account.

Your Privacy at a Glance

These six cards summarise hd999's core privacy commitments. Full details are in the clauses below.

Information We Collect

hd999 collects personal data from you directly (through registration and account use) and automatically (through your use of our platform). The table below sets out the categories of data we collect, the specific data points within each category, and the primary reason for collection.

How We Use Your Information

hd999 uses the personal data we collect for the following purposes. We will not use your data for any purpose incompatible with those listed below without obtaining your prior consent:

• To create, maintain, and administer your hd999 account, including verifying your identity and age during registration and at any point when required under our KYC policy.
• To process your deposits, withdrawals, and any other financial transactions through our payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• To provide customer support, respond to your queries and complaints, and communicate with you about your account, bonuses, and platform updates.
• To comply with our legal and regulatory obligations, including anti-money laundering (AML) checks, responsible gaming obligations, and reporting requirements imposed by applicable law.
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling and to activate responsible gaming tools where appropriate.
• To improve the hd999 platform through analysis of aggregated, anonymised usage data, helping us identify technical issues, optimise game loading performance, and develop new features.

hd999 does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent. Where automated processes are used (for example, fraud scoring), a human review is available upon request.

Legal Basis for Processing

hd999 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to deliver the gaming services you have registered for and to manage your account, including processing deposits, withdrawals, and bonus payments.
• Legal obligation: Processing required to comply with applicable laws, including identity verification (KYC), anti-money laundering obligations, and responsible gaming requirements.
• Legitimate interests: Processing for the purposes of fraud detection, platform security, technical performance optimisation, and analysis of anonymised usage data to improve our services, where these interests are not overridden by your privacy rights.
• Consent: Where hd999 relies on your consent to process your data (for example, for optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Sharing Your Information

hd999 does not sell your personal data. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: We share necessary financial data with payment processors (such as bKash, Nagad, and Rocket) to facilitate deposits and withdrawals. These providers process your data under their own privacy policies and are bound by contractual data protection obligations with hd999.
• Game providers: We share session and account identifiers with game software providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) to deliver game content. These providers receive only the minimum data required to operate their games within the hd999 platform.
• Regulatory and law enforcement authorities: We may disclose personal data to relevant authorities where required by applicable law, court order, or regulatory directive, including for the purposes of AML reporting and responsible gaming compliance.
• Technical service providers: We use third-party hosting, analytics, and security providers to operate the hd999 platform. These providers act as data processors under our instruction and are contractually prohibited from using your data for their own purposes.

Payment Data and Financial Information

When you make a deposit or withdrawal at hd999 using bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment service provider processes your financial credentials directly through their own secure systems. hd999 does not store your full card numbers, mobile banking PINs, or internet banking passwords on our servers. We receive only a transaction reference, the payment method type, the amount, and a confirmation status from the payment provider.

Transaction records — including the date, amount, payment method type, and outcome of each deposit and withdrawal — are retained by hd999 for a minimum of 5 years to comply with anti-money laundering record-keeping requirements. These records are accessible to you at any time through your account transaction history and, upon request, through a formal data access request to [email protected].

Cookies and Tracking Technologies

hd999 uses cookies and similar tracking technologies to operate the platform and improve your experience. The cookies we use fall into the following categories:

• Essential cookies: Required for the platform to function correctly. These cookies maintain your login session, remember your language preference, and ensure security features operate properly. Essential cookies cannot be disabled without preventing you from using hd999.
• Analytics cookies: Used to collect anonymised data about how players use the hd999 platform — for example, which games are most popular, how long sessions last, and which features are used most. This data helps us improve the platform. Analytics cookies do not identify you personally.
• Preference cookies: Store your platform settings such as display preferences and notification settings so that you do not need to re-configure them each time you log in. Preference cookies are optional and can be cleared via your browser settings.

You can manage or delete cookies at any time through your browser or device settings. Disabling analytics or preference cookies will not prevent you from using hd999, but some platform features may not work as intended. hd999 does not use third-party advertising cookies or sell cookie data to advertising networks.

Data Retention

hd999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The specific retention periods we apply are as follows:

• Account data (identity, contact, and account configuration information): Retained for the duration of your active account and for a minimum of 5 years following account closure, to meet AML and regulatory record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with anti-money laundering legislation. This period may be extended if a transaction is subject to investigation.
• Technical and behavioural data (logs, session data, IP records): Retained for up to 12 months for security and fraud-detection purposes, after which it is anonymised or deleted. Anonymised aggregated data may be retained indefinitely for platform analytics.

Your Rights Over Your Personal Data

As a player on the hd999 platform, you have the following rights over the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with your registered username and a description of your request. hd999 will respond within 30 days.

Security of Your Personal Data

hd999 implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL encryption on all data transmissions, secure server infrastructure with access controls, regular penetration testing and vulnerability assessments, and staff training on data handling and privacy obligations. hd999 also maintains an incident response procedure for the unlikely event of a data breach, and will notify affected users in accordance with applicable law if a breach occurs that is likely to result in a high risk to your rights and freedoms.

Despite these measures, no internet transmission or electronic storage system is completely secure. If you believe your hd999 account has been compromised, you must contact [email protected] immediately so that we can investigate and take protective action, including suspending your account if necessary to prevent further unauthorised access.

Minors and Age Restriction

The hd999 platform is strictly for adults aged 21 and above. hd999 does not knowingly collect personal data from any person under the age of 21. If you are a parent or guardian and believe that a person under 21 in your care has registered for an account at hd999 or provided us with personal data, please contact us immediately at [email protected]. Upon confirmation, hd999 will promptly delete all personal data associated with that account and suspend the account without notice. Age verification is conducted at the point of registration and may be repeated at any time at hd999's discretion.

Third-Party Links and Services

The hd999 platform may contain references to third-party game providers, payment services, or other service partners. These third parties operate under their own privacy policies, which hd999 does not control. When you interact with a third-party service (for example, when you access a game powered by Pragmatic Play or process a payment through bKash), that third party's own privacy terms apply to your interaction with them. hd999 recommends that you review the privacy policies of any third-party service before providing them with personal data. hd999 is not responsible for the privacy practices of third-party providers.

Changes to This Privacy Policy

hd999 reserves the right to update or amend this Privacy Policy at any time. Where a change is material — for example, if we intend to use your data for a new purpose that was not previously disclosed — we will notify you by email to your registered address or by a prominent notice on the hd999 platform before the change takes effect. Minor updates (such as clarifications of existing practices or corrections of typographic errors) may be made without advance notice. The date at the top of this Policy reflects when it was last updated.

Contact and Data Privacy Queries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how hd999 handles your personal data, please contact the hd999 support team. All data privacy queries are handled with priority and in confidence.

Email hd999 data privacy support at: [email protected]. Please use the subject line "Privacy Query" or "Data Rights Request" so your message is routed to the correct team. Include your registered username and a clear description of your query or request. hd999 aims to acknowledge all data privacy contacts within 2 business days (Bangladesh Standard Time, UTC+6) and to resolve them fully within 30 calendar days.