Data Protection
hba999 Privacy Policy
Your privacy is a fundamental commitment at hba999. This Privacy Policy explains precisely what personal information we collect, why we collect it, how it is stored and protected, who we share it with, and what rights you hold over your own data. We process all personal data in accordance with recognised data protection principles and best practices applicable to our Bangladesh operations.
End-to-End Encryption
All data transmitted between your device and the hba999 platform is protected by 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal information travel across encrypted channels at all times, preventing unauthorised interception.
We Never Sell Your Data
hba999 does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Your data is used solely to operate and improve your hba999 experience, process payments, and meet our compliance obligations.
KYC Data Handled Securely
Identity documents, National ID copies, and proof-of-address files submitted during KYC verification are stored in an access-controlled environment. Only authorised compliance personnel have access to these documents, and they are never shared beyond operational necessity.
Bangladesh Payment Privacy
Transaction data relating to bKash, Nagad, Rocket, Upay, and local bank transfers is processed strictly for payment verification and fraud prevention purposes. hba999 does not store full payment credentials on our servers — sensitive payment tokens are managed by the respective payment service providers.
Responsible Data Minimisation
hba999 applies the principle of data minimisation — we collect only the personal information that is strictly necessary for the specific purpose it is needed. We do not collect additional data speculatively or build behavioural profiles beyond what is required to operate the platform and meet legal obligations.
Your Rights, Clearly Stated
You have the right to access, correct, export, and request deletion of your personal data held by hba999. You also have the right to object to certain types of processing and to withdraw consent at any time where processing is based on consent. Section 6 of this policy sets out your rights in full detail.
1 Information We Collect
hba999 collects personal information from you in three principal ways: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from third-party payment and identity verification partners. The categories of information we collect are described below.
1.1 Information You Provide Directly
- Registration data: Full legal name, date of birth, email address, phone number, and chosen username at the time you create your hba999 account.
- KYC verification documents: Copies of your National Identity Card (NID), passport, birth certificate, proof of address (utility bill, bank statement), and any other documentation requested as part of our Know Your Customer process.
- Payment information: bKash account number, Nagad mobile number, Rocket wallet details, Upay reference, or bank account details (account holder name, bank name, branch, account number) provided when making deposits or requesting withdrawals.
- Communication data: Messages, queries, or complaints you send to hba999 via live chat, email at [email protected], or any other support channel.
- Responsible Gaming submissions: Information you voluntarily provide when requesting deposit limits, time-out periods, cooling-off arrangements, or self-exclusion, including the reasons you provide for making such requests.
1.2 Information Collected Automatically
- Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers collected each time you access the hba999 platform.
- Usage data: Pages visited, games played, betting history, session duration, navigation path, click events, search queries within the platform, and feature interactions.
- Transaction logs: A complete record of all deposits, withdrawals, bets placed, games played, bonuses claimed, and account balance movements associated with your player account.
- Cookies and tracking technologies: Session cookies, persistent cookies, and similar technologies as described in Section 4 of this policy.
- Location data: General geographic location inferred from your IP address, used solely for geo-compliance purposes (e.g., verifying Bangladesh access) and fraud detection. hba999 does not collect precise GPS location data.
1.3 Information from Third Parties
In certain circumstances, hba999 receives personal information from trusted third parties, including identity verification service providers who assist with KYC checks, payment processors who confirm the status and ownership of mobile money and bank accounts, fraud detection services that share risk signals associated with specific IP addresses or device fingerprints, and game providers (such as Evolution Gaming, Pragmatic Play, and Spribe) who may share gameplay session data to enable accurate game round settlement and dispute resolution.
| Data Category | Examples | Collection Method | Retention Period |
|---|---|---|---|
| Identity Data | Name, DOB, NID, passport | Direct submission | 5 years post-account closure |
| Contact Data | Email, phone number | Direct submission | Duration of account + 2 years |
| Financial Data | bKash/Nagad number, bank details | Direct submission / processor | 7 years (financial records) |
| Technical Data | IP address, device ID | Automatic collection | 12 months rolling |
| Usage Data | Betting history, game logs | Automatic collection | Duration of account + 3 years |
| Support Communications | Live chat transcripts, emails | Direct submission | 3 years from last interaction |
| Responsible Gaming Data | Limit settings, self-exclusion records | Direct submission | Minimum 5 years |
2 How We Use Your Data
hba999 processes your personal information only for clearly defined and legitimate purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which we process your personal data are as follows:
Account Management & Service Delivery
We use your registration and contact data to create and manage your hba999 player account, authenticate your identity when you log in, process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, settle your bets and game rounds, deliver bonuses and promotional credits, and respond to your support queries and complaints. This processing is necessary for the performance of the contract between you and hba999.
Identity Verification & Fraud Prevention
Your identity documents, payment account details, device data, and transaction history are used to verify your age (18+ requirement), confirm your identity as part of our KYC programme, detect and prevent fraud, money laundering, account takeover, and other prohibited conduct, and ensure compliance with our Terms & Conditions. This processing is necessary for compliance with legal obligations and for our legitimate interests in protecting the platform and its users.
Responsible Gaming Obligations
hba999 uses your usage data, betting history, session duration records, and any self-declared information to monitor for signs of problem gambling behaviour, enforce deposit limits and self-exclusion orders you have set, and proactively reach out if our monitoring systems identify patterns consistent with gambling harm. This processing serves both your vital interests and our legitimate obligations as a responsible gaming operator.
Platform Improvement & Analytics
Aggregated and anonymised usage data is analysed to understand how players navigate the hba999 platform, which games and markets are most popular, and where the user experience can be improved. This analysis is conducted on anonymised datasets where possible and does not result in decisions that individually affect you.
Marketing Communications
Where you have expressly opted in to receive promotional communications, hba999 may send you information about new games, upcoming BPL cricket betting markets, seasonal promotions for Eid, Pohela Boishakh, or other relevant events, and personalised bonus offers. You may withdraw your consent to marketing communications at any time by contacting [email protected] or updating your account preferences.
Legal basis summary: hba999 processes your data under four legal bases depending on context: (a) contractual necessity — to deliver the services you signed up for; (b) legal obligation — to meet KYC, anti-money-laundering, and age-verification requirements; (c) legitimate interests — for fraud prevention, platform security, and responsible gaming monitoring; and (d) consent — for optional marketing communications, which you may withdraw at any time.
3 Data Sharing & Disclosure
hba999 does not sell, rent, or otherwise trade your personal data with third parties for their own commercial purposes. We share your information only in the limited circumstances described below, and only to the extent strictly necessary for the specified purpose.
Payment Service Providers
To process deposits and withdrawals, hba999 shares the minimum necessary financial identifiers with payment service providers including bKash, Nagad, Rocket, Upay, and our banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), as well as card network processors for Visa and Mastercard transactions. These providers receive only the data required to execute and confirm the specific transaction and are contractually bound to protect your information.
Identity Verification Partners
hba999 engages reputable third-party identity verification and KYC service providers to assist with document verification and age-check processes. Identity documents shared with these providers are processed exclusively for verification purposes and are subject to strict contractual data processing agreements.
Game Technology Providers
To resolve game round disputes, process jackpot wins, and ensure accurate bet settlement, hba999 may share relevant game session identifiers and transaction references with game technology providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your full personal profile — only the session and account reference data necessary for technical reconciliation.
Legal & Regulatory Disclosure
hba999 may disclose your personal information to law enforcement agencies, financial intelligence units, or other governmental authorities where required by law, court order, or regulatory instruction. We may also disclose information where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of persons, or enforce our Terms & Conditions.
Business Transfers
In the event that hba999 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred as part of that transaction. In such circumstances, hba999 will notify affected players via their registered email address prior to any transfer and will ensure that equivalent privacy protections apply to your data under the new entity.
No overseas data selling: hba999 does not transfer your personal data to overseas data brokers, advertising networks, or social media platforms for targeting or profiling purposes. Any international data transfers that are technically necessary (e.g., to global game server infrastructure) are conducted under contractual safeguards that ensure your data receives a standard of protection equivalent to that described in this policy.
4 Cookies & Tracking Technologies
hba999 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, detect fraudulent access attempts, and understand how users interact with our pages and games. This section explains the types of cookies we use and how you can manage them.
Types of Cookies Used
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Session authentication, security tokens, anti-fraud fingerprinting, load balancing | Session / up to 24 hours | No — required for platform operation |
| Functional | Language preference, last-visited game category, display settings, responsible gaming reminder timers | Up to 12 months | Yes — affects user experience |
| Analytics | Aggregated page-view tracking, game popularity measurement, navigation path analysis (anonymised) | Up to 13 months | Yes — no impact on core functionality |
| Performance | Server response monitoring, error logging, platform stability diagnostics | Up to 30 days | Yes — minor impact on support capability |
Managing Your Cookie Preferences
You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by websites. Please note that disabling strictly necessary cookies will prevent you from logging into your hba999 account and using core platform features. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and Edge.
Local Storage & Session Storage
In addition to cookies, hba999 may use browser local storage and session storage to temporarily hold game state data, display preferences, and security tokens during your active session. This data is stored on your device and is cleared at the end of your browser session (session storage) or upon account logout (local storage items set by hba999). hba999 does not use local storage to persist advertising or tracking identifiers.
No cross-site tracking: hba999 does not participate in cross-site behavioural advertising networks. Our analytics and performance cookies collect data only about your interactions with hba999.net itself. We do not place tracking pixels or beacons that follow you to other websites after you leave the hba999 platform.
5 Data Security & Retention
hba999 maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include both technical and organisational controls appropriate to the sensitivity of the data we hold.
Technical Security Measures
- Transport encryption: All data in transit between your browser or mobile device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL certificates).
- Data-at-rest encryption: Personal data stored in hba999 databases — including KYC documents and financial records — is encrypted using AES-256 encryption at rest.
- Access controls: Access to systems holding personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication for all administrative access.
- Intrusion detection: hba999 operates continuous network monitoring and intrusion detection systems to identify and respond to security anomalies in real time.
- Vulnerability management: Our platform undergoes regular security assessments and penetration testing by qualified security professionals. Critical vulnerabilities are remediated on an accelerated schedule.
Organisational Security Measures
- All hba999 personnel with access to personal data are bound by confidentiality obligations and receive regular data protection and security awareness training.
- Third-party service providers who process personal data on hba999's behalf are subject to contractual data processing agreements that require equivalent security standards.
- hba999 maintains an incident response plan. In the event of a personal data breach that is likely to result in a risk to affected individuals, hba999 will take prompt remedial action and notify affected players via their registered email address without undue delay.
Data Retention Policy
hba999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, fraud prevention, or reporting requirements. Specific retention periods are set out in the data table in Section 1. Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Requests for early deletion are handled under the rights framework described in Section 6, subject to overriding legal obligations to retain certain records (particularly financial transaction records, which are retained for a minimum of 7 years).
Account security tip: While hba999 implements robust security measures to protect your data on our end, you also play an important role in keeping your account secure. Use a strong, unique password for your hba999 account that you do not reuse on other platforms. Never share your login credentials with anyone. hba999 support staff will never ask you for your password via any channel.
6 Your Privacy Rights
hba999 respects your rights over your personal data. The following rights are available to all hba999 players. To exercise any of these rights, please contact our data protection team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to resolve it within 30 calendar days of receipt.
Right of Access
You have the right to request a copy of the personal data hba999 holds about you, along with information about how it is being processed, the purposes of processing, the categories of data held, and any third parties with whom it has been shared. We will provide this in a clear, structured format.
Right to Rectification
If any personal data hba999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. Please note that corrections to identity data may require re-submission of supporting verification documents.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to overriding legal obligations — for example, financial transaction records required to be retained under applicable laws cannot be deleted on request.
Right to Restrict Processing
In certain circumstances — such as when you contest the accuracy of data we hold, or where you have objected to processing and we are assessing that objection — you may request that we restrict further processing of your data while the matter is resolved.
Right to Data Portability
Where processing is based on your consent or on a contractual basis, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you may transfer it to another service provider if you choose.
Right to Object
You have the right to object to the processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, hba999 will cease that processing immediately. Where you object to processing based on legitimate interests, we will cease unless we can demonstrate compelling grounds that override your interests.
Right to Withdraw Consent
Where hba999 processes your data based on your consent (primarily for marketing communications), you may withdraw that consent at any time by updating your account notification preferences or contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, contact hba999 at [email protected] with "Privacy Rights Request" in the subject line. We may ask you to verify your identity before processing your request to ensure we do not inadvertently disclose data to an unauthorised person. There is no charge for submitting a privacy rights request.
7 Third-Party Services
The hba999 platform integrates with a number of third-party service providers to deliver a complete gaming and betting experience. While hba999 carefully selects these providers and requires contractual data protection commitments from all of them, each provider operates under its own privacy policy for data processed within its own systems. The key categories of third-party services active on hba999 are outlined below.
Live Casino & Game Providers
hba999's live dealer casino tables and instant games are powered by technology from Evolution Gaming, Pragmatic Play Live, Ezugi, NetEnt, Microgaming, and Spribe. When you play games from these providers, basic session data (session ID, game round ID, bet amounts, and game outcomes) is exchanged with the provider's game servers to facilitate real-time gameplay and settlement. These providers do not receive your full personal profile. Each provider's own privacy policy governs their use of game session data within their infrastructure.
Payment Infrastructure
Payment processing for bKash, Nagad, Rocket, and Upay transactions is facilitated through their respective mobile financial service platforms. Bank transfer processing for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank is handled through those institutions' own payment infrastructure. Visa and Mastercard transactions are processed through a PCI DSS-compliant payment gateway. Each of these providers processes your payment data in accordance with their own privacy and security frameworks, which are separate from and in addition to this hba999 Privacy Policy.
Analytics & Performance Monitoring
hba999 may use privacy-respecting analytics tools to monitor platform performance and understand aggregate user behaviour. Any analytics data shared with such tools is anonymised or pseudonymised before transmission, and hba999 does not permit analytics providers to use this data for their own advertising or profiling purposes.
External Links Disclaimer
The hba999 platform does not contain links to external third-party websites. However, if you navigate away from hba999.net independently, please be aware that hba999 has no responsibility for the privacy practices of other websites and recommends that you review the privacy policy of any website you visit.
Third-party due diligence: Before engaging any new third-party data processor, hba999 conducts a data protection review to assess the provider's security practices and privacy commitments. All third-party processors are required to sign data processing agreements that restrict their use of your data to the specific purposes for which it was shared and that require them to apply security standards consistent with those described in Section 5 of this policy.
8 Policy Updates & Contact
hba999 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, platform features, applicable laws and regulations, or industry best practice standards. The effective date at the top of this policy indicates when the current version was last revised.
When we make material changes to this Privacy Policy — changes that significantly affect how we collect, use, or share your personal data — we will notify registered players via the email address associated with their hba999 account at least 14 days before the changes take effect. We will also update the version number and effective date displayed at the top of this page. For minor clarifications or non-material changes, we may update the policy without providing advance notice beyond updating this page.
Your continued use of the hba999 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes to this policy, you should cease using the platform and may request account closure in accordance with the procedures described in the Terms & Conditions.
How to Contact Us About Privacy
For any questions, concerns, or requests relating to this Privacy Policy or the way hba999 handles your personal data, please contact our support and data protection team using the details below. All privacy-related correspondence is treated as confidential and handled by personnel with specific data protection training.
- Email: [email protected] — use subject line "Privacy Rights Request" or "Privacy Enquiry" for fastest routing.
- Live Chat: Available 24/7 directly on the hba999 platform. Ask to speak with a data protection team member for privacy-specific queries.
- Response time: hba999 acknowledges all privacy correspondence within 5 business days and aims to provide a full response within 30 calendar days (Bangladesh Standard Time, UTC+6).
- Support hours: 24 hours a day, 7 days a week, including Bangladeshi public holidays.
Privacy commitment: hba999 is committed to resolving all privacy-related queries and complaints promptly and fairly. If you feel your privacy rights have not been adequately addressed after contacting us, you retain the right to escalate your concern through any available legal or regulatory channels applicable to your jurisdiction. hba999 takes all such escalations seriously and will cooperate fully with any legitimate investigation.
Continue Exploring
Your Privacy Protected — Now Play With Confidence
Now that you know how hba999 safeguards your data, explore our casino games, cricket betting markets, and slots — all on a platform built with your security in mind.