hs999 Privacy Policy

The following categories of personal data may be collected and processed by hs999 in connection with your use of the Platform:

• Identity data: full name, date of birth, gender, and a copy of an identity document such as a National Identity Card (NID) or passport, collected for Know Your Customer (KYC) verification purposes.
• Contact data: mobile phone number, email address, and residential address in Bangladesh (e.g. Dhaka, Chittagong, Sylhet, or other divisions), provided during registration or account verification.
• Financial data: payment method details including bKash account number, Nagad account number, Rocket account number, Upay account number, bank account details (where applicable), and transaction history on the Platform.
• Gaming and betting data: account activity logs, game history, betting history, wagering amounts, win and loss records, bonus utilisation, and self-exclusion or responsible gaming tool usage.
• Technical data: IP address, device type and model, operating system version, browser type and version, time zone, language preferences, and session duration logs collected automatically each time you access the Platform.
• Communications data: the content of customer support interactions via live chat or email, including any attachments or supporting documents you submit to hs999 in connection with a query, complaint, or dispute.

hs999 does not collect sensitive personal data (such as health, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data) unless such collection is strictly required by applicable law — for example, in connection with a responsible gaming self-exclusion assessment or a statutory anti-money laundering obligation.

hs999 processes personal data only where a valid legal basis exists. The applicable legal bases for hs999's data processing activities are as follows:

• Contract performance: the processing is necessary to create and operate your player account, process your deposits and withdrawals, settle bets and gaming transactions, and fulfil all other obligations hs999 owes you under the Terms and Conditions.
• Legal obligation: hs999 is required by applicable law to collect, retain, and in some cases disclose certain personal data — particularly in connection with KYC verification, anti-money laundering obligations, age verification, and responses to lawful orders from competent authorities.
• Legitimate interests: hs999 processes certain technical and gaming activity data on the basis of its legitimate interest in operating a secure platform, preventing fraud, improving platform performance, and ensuring the integrity of all games and betting markets. Before relying on legitimate interests, hs999 conducts a balancing assessment to ensure those interests do not override your fundamental rights.
• Consent: where hs999 processes your personal data for marketing communications, the legal basis is your consent. You may withdraw your consent at any time by contacting customer support. Withdrawal of consent for marketing does not affect the lawfulness of any processing carried out before the withdrawal.

hs999 may share your personal data with the following categories of third parties, subject to appropriate confidentiality obligations:

• Payment processors and mobile banking partners: bKash, Nagad, Rocket, Upay, and card networks such as Visa and Mastercard, for the sole purpose of processing your deposit and withdrawal transactions. These partners receive only the financial data strictly necessary to execute the transaction.
• Identity verification and KYC providers: third-party identity verification services used to verify the authenticity of identity documents submitted by players during account registration or in response to a KYC request. These providers operate under strict data processing agreements with hs999.
• Fraud prevention and security agencies: specialist third-party fraud detection services used to identify suspicious account activity, detect multi-accounting, and flag potentially fraudulent transactions for review. Data shared is limited to technical and transactional identifiers.
• Regulatory and law enforcement authorities: hs999 will disclose personal data to competent authorities — including the Bangladesh Financial Intelligence Unit (BFIU) and relevant law enforcement bodies — where required by applicable law, court order, or regulatory instruction, or where hs999 has a good-faith belief that disclosure is necessary to prevent imminent harm or criminal activity.

hs999 requires all third-party service providers who receive personal data to maintain appropriate technical and organisational security measures and to use the data solely for the purpose for which it was shared. hs999 does not permit its service providers to use player data for their own independent commercial or marketing purposes.

hs999 implements and maintains appropriate technical and organisational security measures designed to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction, damage, or disclosure. Security measures currently in place include 256-bit SSL/TLS encryption for all data transmitted between your device and the hs999 Platform; one-way cryptographic hashing of account passwords using industry-standard algorithms; server-side access controls and role-based permission systems that restrict employee access to personal data on a strict need-to-know basis; continuous automated monitoring of Platform systems for suspicious or anomalous activity; and regular security testing and vulnerability assessments conducted by qualified security personnel.

While hs999 takes data security seriously and invests significantly in protective measures, no method of transmission over the internet and no method of electronic storage is completely secure. hs999 cannot guarantee the absolute security of your personal data. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, hs999 will notify you via your registered contact details without undue delay and will take all reasonable steps to contain the breach and mitigate its effects.

If hs999 becomes aware that personal data has been collected from an individual who has misrepresented their age during registration and is in fact under 21 years of age, hs999 will immediately suspend the relevant account, permanently delete all associated personal data to the extent permitted by applicable law, return any real-money deposits to the originating payment method (net of any promotional amounts), and report the matter to the relevant authorities where required by law. Parents and guardians who believe that a minor may have registered on hs999 are urged to contact hs999 customer support via live chat immediately.

When you make a deposit or withdrawal on hs999, you will be redirected to or interact directly with the relevant mobile banking interface (such as bKash or Nagad) or card payment gateway. hs999 does not store full card numbers, bKash PINs, Nagad PINs, or any other sensitive payment authentication credentials on its own servers. Payment authentication is handled exclusively by the relevant payment provider using their own secure infrastructure. hs999 retains only transaction reference identifiers, amounts, timestamps, and the last few digits of a relevant account number (where required for reconciliation purposes).

If you believe that a financial transaction on your hs999 account was made without your authorisation, you must contact hs999 customer support via live chat immediately. hs999 will investigate the matter and, where appropriate, liaise with the relevant payment provider on your behalf. hs999 strongly recommends that all players protect their mobile banking PINs and passwords and never share these credentials with any third party, including hs999 staff. hs999 will never ask you for your bKash PIN, Nagad PIN, or banking password under any circumstances.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a complaint about the way hs999 has handled your personal data, please contact the hs999 customer support and data team. Our team is available 24 hours a day, 7 days a week via live chat on the Platform, and will respond to all data-related enquiries within 30 days.

Email: [email protected]