ha999 Privacy Policy

1 Who We Are

ha999 is an online betting and casino platform operated at ha999.io, serving players across Bangladesh. The platform offers sports betting — with a particular focus on cricket including BPL, IPL, T20 World Cup, and ICC events — alongside live casino games, slot games, and Andar Bahar. All services are available in English and are designed specifically for the Bangladeshi market.

For the purposes of this Privacy Policy, ha999 acts as the data controller for all personal information collected from players who register and use the platform. As data controller, ha999 determines the purposes and means by which personal data is processed. If you have any questions about how your data is handled, please refer to Section 14 for contact details.

ha999 is committed to maintaining the confidentiality, integrity, and security of all player data. We do not sell, rent, or trade personal information to third parties for their own marketing use. All data processing activities are carried out for the specific, legitimate purposes described in this Privacy Policy.

2 Data We Collect

ha999 collects personal data that is necessary to provide our services, comply with regulatory obligations, prevent fraud, and deliver a secure and personalised experience to each player. The categories of data we collect are outlined in the table below.

ha999 does not intentionally collect sensitive personal data such as medical records, religious beliefs, or political opinions. If you voluntarily provide such information in a support communication, it will be used solely to address your query and will not be retained beyond what is necessary for that purpose.

3 How We Collect Data

ha999 collects personal data through the following channels and methods:

• Direct Submission: Information you provide when you register an account, complete identity verification, make a deposit or withdrawal request, contact our support team, or respond to a promotion.
• Automated Collection: Technical data such as IP addresses, device identifiers, and session activity are collected automatically when you access ha999.io. This is achieved through server logs, cookies, and similar tracking technologies as described in Section 8.
• Payment Processors: When you initiate a transaction via bKash, Nagad, Rocket, or Upay, our payment processing partners provide us with the transaction reference data needed to confirm and reconcile your deposit or withdrawal. ha999 does not have access to your full mobile banking PIN or password.
• Third-Party Verification Providers: To fulfil Know Your Customer (KYC) and age verification requirements, ha999 may use third-party identity verification services that cross-reference the documents you submit against available data sources. These providers are contractually bound to process your data only for the purposes instructed by ha999.
• Publicly Available Sources: In limited circumstances — particularly in fraud investigation or compliance contexts — ha999 may reference information that is lawfully available from public sources.

4 Why We Use Your Data

ha999 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose beyond what is described here without first obtaining your explicit consent or being required to do so by applicable law.

• Account Creation and Management: To register, verify, and maintain your ha999 player account, including processing deposits and withdrawals in BDT (৳) and delivering the full range of platform services.
• Identity and Age Verification: To confirm that you are at least 21 years of age and to verify your identity in compliance with our Know Your Customer obligations. ha999 enforces a strict 21+ policy across all its products.
• Transaction Processing: To process, reconcile, and record financial transactions including deposits via bKash, Nagad, and Rocket, and to authorise withdrawal payments to your registered wallet or card.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multiple-account abuse, bonus abuse, and any other prohibited activity as defined in the ha999 Terms & Conditions.
• Responsible Gaming: To monitor player activity for signs of problem gambling, to apply deposit limits and self-exclusion measures requested by players, and to comply with our responsible gaming obligations.
• Customer Support: To respond to enquiries, resolve complaints, process disputes, and maintain records of support interactions.
• Promotional Communications: Where you have opted in to receive marketing, to send you information about ha999 promotions, bonuses, and seasonal offers relevant to players in Bangladesh. You may opt out of marketing communications at any time by contacting support.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, reliability, and user experience of the ha999 platform.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from competent authorities where ha999 is legally obligated to disclose information.

5 Legal Basis for Processing

ha999 processes player personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing that is required to fulfil the agreement between ha999 and a player — including account registration, transaction processing, and service delivery — is carried out on the basis that it is necessary to perform the contract to which you are a party.
• Legal Obligation: Certain data processing activities — including KYC identity verification, age verification, and anti-money laundering checks — are carried out because ha999 is required to do so by applicable law or regulatory obligation.
• Legitimate Interests: ha999 processes some data on the basis of its legitimate business interests, including fraud prevention, security monitoring, platform analytics, and responsible gaming oversight, provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where ha999 relies on your consent as the legal basis for processing — such as for sending direct marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the consent was withdrawn.

6 Data Sharing & Disclosure

ha999 does not sell, rent, or trade your personal data with any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Service Providers and Data Processors

ha999 engages third-party service providers who process data on our behalf under binding data processing agreements. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification providers, game technology providers (including Pragmatic Play, Evolution Gaming, Ezugi, and Spribe), customer support platform providers, and IT infrastructure providers. All such providers are required to process player data strictly in accordance with ha999's instructions and for no other purpose.

Legal and Regulatory Disclosure

ha999 may be required to disclose personal data to law enforcement agencies, regulatory bodies, or judicial authorities in Bangladesh or internationally where we are legally compelled to do so — for example, in response to a lawful court order, subpoena, or regulatory investigation relating to fraud, money laundering, or other criminal activity.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, player data may be transferred as part of that transaction. ha999 will take reasonable steps to notify affected players of any such transfer and of any changes to the privacy terms that apply to their data.

7 Payment Data & bKash / Nagad

ha999 processes financial transactions exclusively in Bangladeshi Taka (BDT, ৳) through approved payment partners serving the Bangladesh market. When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, or Upay, your transaction is processed by the respective payment provider's own systems. ha999 receives only the transaction reference information necessary to confirm receipt and reconcile your account balance.

ha999 does not store your full bKash PIN, Nagad PIN, Rocket password, or any other payment authentication credential. These credentials are entered directly into your mobile banking application and are never transmitted to or stored by ha999. If you are ever asked to provide your full mobile banking PIN by someone claiming to represent ha999, this is fraudulent — please report it immediately.

For Visa and Mastercard transactions, ha999 works with PCI-DSS-compliant payment gateways. ha999 retains only tokenised or masked card references (e.g., last four digits and card type) for reconciliation and fraud prevention purposes. Full card numbers are never stored on ha999 servers.

Transaction records — including deposit amounts, withdrawal amounts, dates, and payment method references — are retained for a minimum of five years in accordance with financial record-keeping obligations applicable to online platforms operating in Bangladesh.

8 Cookies & Tracking

ha999.io uses cookies and similar tracking technologies to enable the platform to function correctly, to maintain your logged-in session, to detect fraudulent or suspicious access patterns, and to analyse aggregated usage data for platform improvement purposes.

The categories of cookies used on ha999.io are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to operate. They manage your session state, maintain your login authentication, and enable core features such as account navigation and transaction initiation. These cookies cannot be disabled without breaking platform functionality.
• Functional Cookies: These cookies remember your preferences — such as language settings and game display preferences — to provide a more personalised experience. They do not track your activity across third-party sites.
• Analytics Cookies: ha999 uses anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical issues may arise. This data is aggregated and does not identify individual players.
• Security Cookies: These cookies support fraud prevention and security monitoring by flagging unusual access patterns, detecting credential stuffing attempts, and helping verify that account access originates from a recognised device.

Most web browsers allow you to control cookie settings through the browser's privacy or settings menu. However, disabling strictly necessary cookies will prevent core platform functions — including login, deposits, and gameplay — from operating correctly. ha999 does not use third-party advertising cookies or cross-site tracking cookies for commercial advertising purposes.

9 Data Retention

ha999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and financial record-keeping obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's existence on the ha999 platform, plus a minimum period of five years following permanent account closure.
• Transaction and Financial Records: Retained for a minimum of five years from the date of each transaction, in accordance with financial compliance requirements.
• Identity Verification Documents: Retained for a minimum of five years following the completion of the KYC verification process or from the date of account closure, whichever is later.
• Support and Communications Records: Retained for a minimum of three years from the date of the communication, to support dispute resolution and service quality oversight.
• Self-Exclusion Records: Permanently retained to prevent self-excluded players from inadvertently re-registering. This is a responsible gaming obligation and cannot be waived.
• Marketing Preferences: Retained until you withdraw consent for marketing communications, at which point your data will be removed from active marketing lists within 30 days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

10 Data Security

ha999 employs a comprehensive set of technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and ha999.io is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms that your connection to ha999 is secure.
• Password Hashing: Player account passwords are stored as salted cryptographic hashes. ha999 staff cannot view your password in plain text. If you forget your password, it must be reset — it cannot be retrieved.
• Two-Step OTP Verification: ha999 provides optional two-step OTP (One-Time Password) verification for player accounts. We strongly recommend enabling this feature to add an additional layer of security beyond your password.
• Access Controls: Internal access to player data is strictly role-based. Only authorised ha999 personnel with a legitimate operational need can access personal data, and all such access is logged and audited.
• Intrusion Detection: ha999 employs automated monitoring systems to detect unusual access patterns, brute-force login attempts, and other indicators of potential security compromise.
• Regular Security Reviews: ha999 conducts periodic security assessments to identify and address vulnerabilities in platform infrastructure and data handling processes.

11 Your Rights

As a player on the ha999 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact ha999 support using the details in Section 14.

• Right of Access: You have the right to request a copy of the personal data that ha999 holds about you. We will provide this information in a clear, readable format within 30 days of receiving a verified request.
• Right to Rectification: If you believe that any personal data ha999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your registered name or date of birth, verification documents may be required to support the correction.
• Right to Erasure: You may request that ha999 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Note that this right is subject to overriding legal and regulatory retention obligations; ha999 cannot erase data that it is legally required to retain.
• Right to Restrict Processing: You may request that ha999 restrict the processing of your data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where ha999 processes your data on the basis of your consent or a contractual necessity, you may request a structured, machine-readable copy of your personal data for transfer to another service provider.
• Right to Withdraw Consent: Where ha999 relies on your consent as the legal basis for processing — such as for marketing communications — you may withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of prior processing.
• Right to Object: You may object to ha999 processing your data on the basis of legitimate interests where you believe your fundamental rights and freedoms outweigh those interests. ha999 will assess such objections on a case-by-case basis.

ha999 will respond to all data rights requests within 30 calendar days. In complex cases where additional time is required, we will notify you of the extension and the reason for it within the initial 30-day window.

12 Children & Minors

ha999 is strictly an adult platform. The minimum age to register and use ha999 is 21 years. ha999 does not knowingly collect or process personal data from any individual under the age of 21. Registration by persons under this age is prohibited, and any account found to belong to an underage player will be immediately suspended and permanently closed.

ha999 actively employs age verification measures during the registration process and reserves the right to request identity documents at any stage to confirm that a player meets the 21+ age requirement. Any winnings accumulated by an underage player are void and will not be paid out.

13 Changes to This Policy

ha999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. The most recent version of this policy will always be available at ha999.io/privacy-policy, and the "Last Updated" date at the top of this page will reflect when the current version came into effect.

Where changes to this Privacy Policy are material — for example, changes that affect how we use your personal data or that reduce your rights — ha999 will notify registered players by email to their registered address and/or by a notice displayed prominently on the platform. For non-material changes such as clarifications, corrections of typographical errors, or updates to contact information, no advance notice will be given.

Your continued use of the ha999 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any updated terms, you must cease using the platform and contact support to request account closure.

14 Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that ha999 holds about you, please contact our support team through the following channels. All data-related enquiries are handled by our dedicated privacy team.

• Live Chat: Available 24/7 directly from your ha999 account dashboard after logging in. Live chat is the fastest way to reach our team for urgent privacy or security concerns.
• Support Email: [email protected] — please include "Privacy Request" in the subject line so your enquiry is routed to the correct team. This email address is displayed as plain text only and is not a clickable link.
• Response Time: ha999 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.
• Operating Hours: Support is available 24 hours a day, 7 days a week, operating on Bangladesh Standard Time (UTC+6).