hb99 Privacy Policy

1 Introduction & Scope

This Privacy Policy sets out how hb99 (the "Platform", "we", "us", or "our") collects, processes, stores, and protects personal data belonging to users ("you", "your") who access and use the hb99 website and its associated services, including sports betting, casino games, crash games, slots, and live dealer products.

This policy applies to all individuals who visit hb99.im, register an account, deposit or withdraw funds, participate in promotions, or communicate with our support team — including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and other cities across Bangladesh.

By using the hb99 platform, you acknowledge that you have read and understood this Privacy Policy in full. If you do not agree with any part of this policy, please discontinue your use of the platform and contact support to request account closure.

2 Data Controller Information

hb99 acts as the data controller for all personal information collected via the hb99 platform. As data controller, hb99 is responsible for determining the purposes and means by which personal data is processed.

For all data-related enquiries, correction requests, erasure requests, or formal complaints regarding your privacy, please contact us at the following address. Note that this is a plain-text contact detail and is not a clickable link:

Support email: [email protected]

Our support team is available 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6), and will respond to formal data requests within 30 calendar days of receipt.

3 Data We Collect

hb99 collects several categories of personal data, each serving a specific and documented purpose. The categories we may collect include the following:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where expressly required by age-verification or anti-fraud obligations and only with your prior knowledge.

4 How We Collect Your Data

Personal data is collected through the following channels on the hb99 platform:

• Account Registration: When you complete the hb99 sign-up process, you provide your name, date of birth, email address, phone number, and preferred payment method.
• Identity Verification: When hb99 requests KYC (Know Your Customer) documents, you upload copies of government-issued identification such as a National Identity Card, passport, or driving licence.
• Deposits & Withdrawals: Transaction data — including payment method identifiers associated with bKash, Nagad, Rocket, Upay, Visa, or Mastercard — is recorded each time you move funds to or from your account.
• Gameplay: Bet placement records, game session logs, win/loss history, and bonus usage are generated automatically as you use the platform.
• Support Interactions: Any messages, emails, or live chat transcripts exchanged with our support team are stored to maintain an accurate record of your service history.
• Cookies & Device Data: Technical identifiers such as your IP address, browser type, operating system, device model, and session duration are collected automatically when you visit hb99.im. See Section 8 for full cookie details.
• Promotions & Surveys: If you participate in hb99 promotions, tournaments, or optional feedback surveys, any information you submit is collected and stored for the duration of that promotional period.

5 Legal Basis for Processing

hb99 processes your personal data under the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing your name, contact details, payment information, and transaction records is required to fulfil our contractual obligations to you as a registered hb99 account holder.
• Legal Obligation: Anti-money-laundering (AML) regulations, fraud prevention obligations, and age-verification requirements mandate that we collect, verify, and retain certain categories of personal data regardless of your preferences.
• Legitimate Interests: We process device data, IP addresses, and gameplay logs to detect fraudulent activity, prevent multi-accounting, maintain platform security, and improve user experience — activities that serve both hb99's operational interests and the interests of honest players.
• Consent: Where we send you optional promotional communications or non-essential cookies, we do so on the basis of your consent. You may withdraw consent at any time.

6 How We Use Your Data

The personal data hb99 collects is used exclusively for the following documented purposes:

• Creating, maintaining, and securing your hb99 account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment channels.
• Verifying your identity and age (21+ requirement) in compliance with responsible gaming obligations.
• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, multi-accounting, and money laundering.
• Providing customer support and resolving account disputes.
• Calculating and crediting bonus awards, free bets, and promotional incentives to your account.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.
• Sending optional promotional communications about new games, bonus offers, and hb99 events — only where you have not opted out.
• Complying with applicable legal retention and reporting obligations.
• Analysing aggregated, anonymised usage patterns to improve the platform's performance, game selection, and user interface.

7 Sharing Your Data

hb99 does not sell, rent, or share your personal data with third parties for their own commercial purposes. We share data with external parties only in the following limited and necessary circumstances:

• Payment Processors: Transaction data is shared with payment service providers (such as bKash, Nagad, Rocket, Upay, and card networks) solely to the extent required to process your financial transactions securely.
• Identity Verification Partners: KYC document data may be processed by trusted identity verification service providers who operate under strict data processing agreements with hb99.
• Game Content Providers: Platform providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers necessary to deliver their game content. These providers do not receive your name, address, or payment details.
• Fraud Prevention & Security: In cases of suspected fraud or money laundering, data may be shared with relevant financial intelligence bodies or law enforcement agencies as required by applicable law.
• Legal & Regulatory Disclosure: hb99 will disclose personal data to government authorities, courts, or regulatory agencies when compelled to do so by a valid legal order or statutory obligation.
• Business Transfers: In the event of a merger, acquisition, or restructuring of the hb99 business, personal data may be transferred to the successor entity, subject to the same privacy protections described in this policy.

All third parties with whom hb99 shares personal data are required to handle that data in a manner consistent with this Privacy Policy and to implement appropriate technical and organisational security measures.

8 Cookies & Tracking

hb99 uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a personalised, secure experience to each user. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These are essential for the platform to operate. They manage your login session, remember your account state, and prevent cross-site request forgery attacks. These cannot be disabled without impairing core platform functionality.
• Performance Cookies: These collect anonymised data about how users navigate hb99.im — including which pages are visited most frequently and how long sessions last — allowing us to identify and fix usability issues.
• Functional Cookies: These remember your preferences, such as your preferred language, display settings, and last-visited game category, so you do not need to reset them on each visit.
• Security Cookies: These help hb99 detect and block suspicious login attempts, bot traffic, and devices associated with prior fraudulent activity.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the hb99 platform. Note that strictly necessary and security cookies cannot be disabled via browser settings, as they are fundamental to safe platform operation.

9 Data Retention

hb99 retains personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable law. The following retention guidelines apply:

• Account Data: Retained for the duration of your active account and for a minimum of 5 years after account closure, in compliance with anti-money-laundering record-keeping requirements.
• Transaction Records: Deposit, withdrawal, and bet history records are retained for a minimum of 7 years to satisfy financial compliance obligations.
• KYC Documents: Identity verification documents are retained for 5 years from the date of verification or account closure, whichever is later.
• Support Communications: Customer support tickets, email threads, and live chat logs are retained for 3 years from the date of the last interaction.
• Device & Technical Logs: IP address logs and session records are retained for up to 12 months for security and fraud-detection purposes, after which they are anonymised.
• Marketing Preferences: Records of your consent or opt-out status for marketing communications are retained for the lifetime of your account to ensure compliance with your stated preferences.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10 Data Security

hb99 implements a layered approach to data security, combining technical, administrative, and physical safeguards to protect your personal information against unauthorised access, disclosure, alteration, and destruction.

• All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (SSL encryption).
• Passwords are stored using one-way hashing algorithms. hb99 staff cannot retrieve your plain-text password under any circumstances.
• Access to personal data within hb99 is restricted on a need-to-know basis. Employees who do not require access to personal data as part of their role are not granted it.
• Our infrastructure undergoes regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• In the event of a data breach that poses a risk to your rights or freedoms, hb99 will notify affected users without undue delay and take immediate remedial action.

11 Children's Privacy

The hb99 platform is strictly restricted to individuals who are 21 years of age or older. hb99 does not knowingly collect, process, or retain personal data from any person under the age of 21.

If hb99 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete all personal data related to that account, and return any deposited real-money funds in accordance with our account closure procedures.

If you are a parent or guardian and you believe your child has registered on hb99 without your knowledge, please contact us immediately at [email protected] so that we can take prompt action.

12 Third-Party Services

The hb99 platform integrates with third-party service providers to deliver a complete gaming experience. These integrations include payment gateways (bKash, Nagad, Rocket, Upay, Visa, Mastercard), game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), and operational support tools.

Each third-party provider operates under its own privacy policy. While hb99 selects partners who meet high data-protection standards and enters into data processing agreements with them, we encourage you to review the privacy policies of any third-party service you interact with independently. hb99 is not responsible for the privacy practices of external providers once data leaves our platform infrastructure.

hb99.im does not contain links to external websites for the purpose of advertising or affiliation. Any links present on the platform point exclusively to internal hb99 pages.

13 Exercising Your Rights

To exercise any of the data rights described in this policy — including access, rectification, erasure, restriction, portability, objection, or withdrawal of consent — please submit a written request to our support team using the contact details below. Note that this email address is displayed as plain text and is not a clickable link:

Support email: [email protected]

Please include the following information in your request to help us process it efficiently:

• Your full name as registered on hb99.
• Your registered email address or phone number.
• A clear description of the right you wish to exercise and the specific data it concerns.
• A copy of a valid government-issued photo ID to confirm your identity (required for all access, erasure, and portability requests).

hb99 will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by up to an additional 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

There is no charge for submitting a data rights request. However, if requests are manifestly unfounded, repetitive, or excessive, hb99 reserves the right to charge a reasonable administrative fee or to decline to act on the request, with written justification provided to you.

14 Policy Amendments

hb99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered users via the email address associated with their account at least 7 days before the updated policy takes effect.

The effective date displayed at the top of this page will be updated with each revision. Continued use of the hb99 platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with a revised policy, you may close your account and request erasure of your data in accordance with Section 13.

We encourage all hb99 players to review this page periodically to stay informed of how we handle their personal information. The most current version of this Privacy Policy is always available at hb99.im/privacy-policy.