hd999 Privacy
Policy Statement
At hd999, protecting the personal data of every Bangladeshi player on our platform is a core commitment. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the rights you hold over your own data.
Minimal Data Collection
hd999 collects only the personal data strictly necessary to operate your account, process BDT transactions, and comply with applicable anti-money laundering obligations under Bangladesh law.
No Third-Party Sale
hd999 does not sell, rent, or trade your personal information to any third party for marketing purposes. Your data is shared only where required by law or to deliver core platform services.
256-Bit SSL Encryption
All data transmitted between your device and hd999 servers is protected by 256-bit SSL encryption. Your National ID details, Bangladeshi mobile number, and BDT payment records are secured to international financial-grade standards.
Your Data, Your Rights
You retain the right to access, correct, and request deletion of your personal data held by hd999 at any time. Requests are processed within 30 days. Full details are set out in the Your Rights section below.
Transparent Cookie Use
hd999 uses a limited set of functional and analytics cookies to keep your session active and improve Platform performance. No invasive third-party advertising trackers are embedded in the hd999 Platform.
Defined Retention Periods
hd999 retains personal data only for as long as it is necessary for the purpose it was collected, or as required by applicable legal obligations. Full retention periods are disclosed in Section 05 of this policy.
Data Collection
hd999 collects personal data from players in Bangladesh through several channels: directly when you register an account or complete KYC verification, automatically when you interact with the Platform, and occasionally from third-party service providers such as payment processors and identity verification partners. This section explains the specific categories of data we collect and the lawful basis on which each category is processed.
Data You Provide Directly
When you register an account with hd999, we ask you to supply a set of identification and contact details. These details are required to create and operate your account, verify your age and identity in accordance with applicable compliance obligations, and facilitate BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi bank channels. The categories of data you provide directly include:
- Full legal name as it appears on your Bangladesh National ID Card (NID) or valid passport
- Date of birth, for the purpose of confirming that you are 18 years of age or older
- Personal Bangladeshi mobile number used for account verification, bKash and Nagad payment linkage, and two-factor authentication
- A copy of your government-issued photo identification document during KYC verification
- Residential address in Bangladesh (city and district, as a minimum)
- Account password (stored in hashed, non-reversible form — never stored as plain text)
- Preferred currency selection (BDT — Bangladeshi Taka)
- Any correspondence you initiate with our support team via live chat or by email to [email protected]
Data Collected Automatically
When you access and use the hd999 Platform — whether on desktop via a browser in Dhaka, on mobile in Chittagong, or anywhere else across Bangladesh — certain technical data is collected automatically by our systems. This data is used to maintain platform security, detect fraudulent activity, and improve the quality and reliability of our services. Automatically collected data includes:
- IP address and approximate geographic location (city/region level)
- Device type, operating system, and browser version
- Date, time, and duration of Platform sessions
- Pages visited, game categories accessed, and in-Platform navigation paths
- Deposit and withdrawal transaction logs (amounts, timestamps, payment method used)
- Wagering activity records (game type, stake amount, outcome, session duration)
- Login timestamps and failed login attempt records
Data Received from Third Parties
In certain circumstances, hd999 receives personal data from trusted third-party service providers who assist in delivering the Platform. These include identity verification partners who confirm the authenticity of KYC documents, payment processors who confirm the status of bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer transactions, and fraud prevention services that assess transaction risk signals. Data received from third parties is used solely for the purposes described in this policy and is subject to the same security and retention standards as data collected directly.
Legal Basis for Processing. hd999 processes your personal data on the following lawful bases: (a) performance of a contract — processing necessary to create and operate your account and process your BDT transactions; (b) legal obligation — processing required to fulfil age verification, KYC, and anti-money laundering (AML) compliance obligations; (c) legitimate interests — processing for fraud prevention, platform security, and service improvement; and (d) consent — where you have given specific consent, such as opting in to promotional communications.
Use of Data
hd999 uses the personal data it collects exclusively for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The following table sets out the primary purposes for which your data is used and the corresponding category of data involved.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and management | Name, mobile number, password, date of birth | Contract performance |
| Age and identity verification (KYC) | Full name, date of birth, NID / passport copy, address | Legal obligation |
| Processing BDT deposits and withdrawals | Mobile number, payment method details, transaction logs | Contract performance |
| Fraud prevention and AML monitoring | IP address, device data, transaction history, login logs | Legal obligation / Legitimate interests |
| Platform security and abuse prevention | IP address, device fingerprint, session data, login history | Legitimate interests |
| Customer support | Name, account details, support correspondence | Contract performance |
| Promotional communications (opt-in only) | Mobile number, email address, game preference data | Consent |
| Responsible gaming monitoring | Wagering activity, session data, deposit patterns | Legal obligation / Legitimate interests |
| Platform analytics and improvement | Navigation data, device data, session duration (anonymised) | Legitimate interests |
Marketing Communications
hd999 will only send you promotional communications — including bonus offers, seasonal promotions aligned with Eid, Pohela Boishakh, or BPL cricket season, and new game announcements — where you have given explicit opt-in consent at the time of registration or through your account preferences. You may withdraw consent to marketing communications at any time by updating your notification preferences within your account settings or by contacting the support team via live chat.
Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, and does not restrict hd999 from sending you transactional communications that are necessary for the operation of your account (such as deposit confirmations, withdrawal status updates, and security alerts).
Automated Decision-Making
hd999 uses automated systems to assess certain account activities for fraud prevention and responsible gaming purposes. For example, automated monitoring may flag unusual deposit patterns or wagering behaviour that is inconsistent with your historical account activity. Where an automated process results in a material action being taken on your account — such as a temporary restriction or a request for additional verification — you have the right to request a human review of that decision by contacting our support team.
Data Sharing
hd999 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. Your data is shared with external parties only in the specific, limited circumstances described in this section, and only to the extent strictly necessary for the relevant purpose.
Service Providers
hd999 engages a limited number of carefully vetted third-party service providers who process personal data on our behalf to enable delivery of the Platform. These providers act as data processors under contractual terms that restrict their use of your data to the specified service purpose only. Categories of service provider include:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for the processing of BDT deposit and withdrawal transactions
- KYC and identity verification providers: For the validation of National ID documents and age confirmation
- Game content providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — who receive anonymised session identifiers for game integrity and RNG certification purposes
- Fraud prevention and risk management services: For the detection of suspicious account activity, duplicate accounts, and AML risk signals
- Platform infrastructure providers: Cloud hosting, content delivery, and database services that underpin the technical operation of hd999.net
Legal and Regulatory Disclosure
hd999 may be required to disclose personal data to competent authorities in Bangladesh in response to a lawful request, court order, or regulatory requirement. In such cases, hd999 will disclose only the minimum data necessary to satisfy the legal obligation and will, where permitted by law, inform the affected player of the disclosure request.
Business Transfers
In the event that hd999 undergoes a corporate restructuring, merger, acquisition, or sale of assets, personal data held by hd999 may form part of the transferred assets. In any such scenario, hd999 will ensure that the receiving entity is bound by privacy obligations at least equivalent to those set out in this policy, and will notify affected players prior to any transfer of their personal data to a new controlling entity.
No Data Sales. hd999 will never sell your personal data — including your Bangladeshi mobile number, National ID details, or financial transaction history — to data brokers, advertisers, or any third party for commercial gain. If you receive unsolicited contact claiming to be from hd999, please report it immediately to [email protected].
Cookies Policy
hd999 uses cookies and similar tracking technologies on the hd999.net Platform to maintain session continuity, support security functions, and gather anonymised analytics that help us improve the platform experience for players across Bangladesh. This section explains what types of cookies we use, the purpose of each, and how you can manage your cookie preferences.
What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language settings, Login session status, or items you have interacted with — so that the site functions correctly and your experience is consistent across pages and sessions.
Types of Cookies Used by hd999
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your authenticated Login session, enable secure page transitions, and support platform security functions (e.g., CSRF protection). These cookies cannot be disabled without breaking core Platform functionality. | Session / up to 24 hours |
| Functional | Remember your account preferences such as preferred game category, lobby layout, and notification settings so these do not need to be reconfigured on each visit. | Up to 30 days |
| Analytics | Collect anonymised, aggregated data about how players navigate the Platform — pages visited, time on page, error events — to help hd999 identify and resolve usability issues and improve overall platform quality. | Up to 12 months |
| Security / Fraud Prevention | Support device fingerprinting and session anomaly detection to identify suspicious login attempts, duplicate account creation, and automated bot activity targeting the hd999 Platform. | Up to 90 days |
Third-Party Cookies
hd999 does not embed third-party advertising networks or social media tracking pixels. Game content providers such as Evolution Gaming, Pragmatic Play, and Spribe may set their own functional cookies within their game iframes to support RNG integrity and game state persistence. These are strictly functional in nature and do not track your activity outside of the game session.
Managing Your Cookie Preferences
You can control non-essential cookies through your browser settings at any time. Most modern browsers — including Chrome, Firefox, Samsung Internet, and the browsers used on popular Android and iOS devices in Bangladesh — allow you to view, block, and delete cookies via the browser's privacy or settings menu. Please note that disabling strictly necessary cookies will prevent you from maintaining a Login session and will significantly impair your ability to use the hd999 Platform.
Data Retention
hd999 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal and regulatory obligations. Once the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be associated with an individual player.
Retention Periods by Data Category
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data (name, mobile number, date of birth) | Duration of account + 5 years post-closure | AML compliance and legal dispute resolution |
| KYC identity documents (NID / passport copy) | Duration of account + 5 years post-closure | Regulatory obligation under AML principles |
| BDT transaction records (deposits, withdrawals, wagers) | 7 years from transaction date | Financial record-keeping obligations |
| Customer support correspondence | 3 years from last interaction | Service quality and dispute resolution |
| Security logs (IP, device, login history) | 12 months from date of record | Fraud investigation and platform security |
| Marketing consent records | Duration of consent + 2 years | Proof of consent for regulatory purposes |
| Anonymised analytics data | Up to 36 months | Platform improvement (no personal identifiers) |
Following the expiry of the applicable retention period, personal data is either permanently deleted from all hd999 systems or, where technical constraints require it, anonymised by removing all identifiers so that the remaining data cannot be linked to any individual player. Anonymised data may be retained indefinitely for statistical and platform improvement purposes.
Account Closure and Data. If you close your hd999 account, your personal data is not deleted immediately. It is retained for the periods specified above to satisfy legal, regulatory, and compliance obligations. During this post-closure retention period, your data is not used for any active marketing or operational purpose — it is archived in restricted-access storage solely for compliance purposes.
Data Security
hd999 applies a multi-layered approach to data security, combining technical controls, operational procedures, and staff access management to protect the personal data of every player on our Bangladesh platform against unauthorised access, accidental loss, and misuse.
Technical Security Measures
The following technical safeguards are in place across the hd999 Platform and infrastructure:
- 256-bit SSL/TLS encryption: All data in transit between your device and hd999 servers is encrypted using TLS 1.2 or higher, making intercepted data unreadable to any third party
- Password hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. hd999 staff cannot view your password in plain text under any circumstances
- Two-factor authentication (2FA): Players are encouraged to enable 2FA via their registered Bangladeshi mobile number for an additional Login security layer
- Database encryption: Sensitive data fields — including KYC document references and payment identifiers — are encrypted at rest within hd999 databases
- Intrusion detection: Automated monitoring systems scan for anomalous access patterns, brute-force login attempts, and unusual API activity on a continuous basis
- Firewall and DDoS protection: Network-level protections are in place to prevent unauthorised external access and to maintain Platform availability under adverse conditions
Access Controls
Access to systems containing player personal data is restricted on a strict need-to-know basis. hd999 staff members are granted the minimum level of system access required to perform their specific job function. All staff access is logged, audited, and reviewed on a regular basis. Privileged access — such as access to KYC document stores or full transaction histories — requires additional authentication and managerial approval.
Security Incident Response
In the event of a personal data breach that poses a risk to affected players, hd999 will notify impacted players promptly via the contact details registered to their account. Notification will include a clear description of the nature of the breach, the categories of data affected, and the steps hd999 is taking to contain the incident and prevent recurrence. Where required by applicable law, relevant authorities will also be notified.
Your Role in Account Security
While hd999 implements robust platform-level security measures, the security of your individual account also depends on the steps you take as a player. hd999 strongly recommends: using a unique, strong password for your hd999 account that is not shared with any other service; enabling two-factor authentication on your account; never sharing your Login credentials with any other person; logging out of your account when using a shared or public device; and promptly reporting any suspicious account activity to the hd999 support team via live chat.
Your Rights
As a player on the hd999 platform, you hold a set of rights in relation to the personal data hd999 holds about you. hd999 is committed to honouring these rights promptly and transparently. To exercise any of the rights described in this section, please contact the hd999 support team via live chat on the platform or by sending a written request to [email protected]. All requests are acknowledged within 5 business days and resolved within 30 calendar days.
Right to Access
You have the right to request a copy of the personal data that hd999 holds about you. This is sometimes referred to as a Subject Access Request (SAR). Upon a verified request, hd999 will provide a structured summary of the data categories held, the purposes for which each category is processed, and the third parties with whom your data has been shared. Access requests are provided free of charge for the first request in any 12-month period.
Right to Rectification
If any of the personal data hd999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain account details — such as your registered email address or contact mobile number — directly via your account settings panel. For changes to KYC-verified data such as your legal name or date of birth, a formal rectification request must be submitted to the support team accompanied by the relevant supporting documentation.
Right to Erasure
You may request the deletion of your personal data in circumstances where the data is no longer necessary for the purpose it was collected, where you withdraw consent on which processing was based, or where the data has been processed unlawfully. Please note that the right to erasure is not absolute: where hd999 is required to retain data to comply with a legal obligation — such as AML record-keeping requirements — erasure requests for that specific data category will not be fulfilled until the mandatory retention period expires.
Right to Restriction
You have the right to request that hd999 restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data while hd999 verifies it, or where you have objected to processing based on legitimate interests while that objection is assessed. During a restriction period, hd999 will store the data but will not actively process it except for the purpose of the restriction itself.
Right to Object
Where hd999 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. hd999 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims. You have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
Right to Data Portability
Where hd999 processes your personal data on the basis of contract performance or consent, and that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format. This allows you to transmit the data to another service provider of your choosing.
How to Submit a Request. To exercise any of the rights described in this section, contact the hd999 support team via 24/7 live chat on the hd999 Platform, or send a written request to [email protected]. Please include your registered Bangladeshi mobile number and a brief description of the right you wish to exercise. hd999 may ask you to verify your identity before processing any data rights request to protect your account security.
Contact & Updates
If you have any questions about this Privacy Policy, the way hd999 handles your personal data, or wish to exercise any of your data rights, you are welcome to reach out to the hd999 privacy and support team at any time using the contact details below. All privacy-related enquiries are handled by a designated team member and receive a response within 5 business days, measured in Bangladesh Standard Time (BST, UTC+6).
Privacy Contact
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/ 7 via the hd999 Platform
- Response Time: Within 5 business days (BST, UTC+6)
Updates to This Policy
hd999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the introduction of new platform features. When a material change is made to this policy, hd999 will notify registered players via a prominent notice on the Platform and, where appropriate, via the mobile number registered to your account. The effective date at the top of this document will be updated to reflect the date of the most recent revision.
Continued use of the hd999 Platform following notification of a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should discontinue use of the Platform and may request account closure by contacting the support team. We encourage you to review this policy periodically to stay informed about how hd999 protects your personal data.
This Privacy Policy was last reviewed and updated in January 2026. Previous versions of the Privacy Policy are available on request by contacting [email protected].
Your Data is Safe at hd999
Now that you understand how hd999 handles your personal data, explore our full range of games and sports betting options — all secured by 256-bit SSL encryption and processed entirely in BDT. From live cricket betting and classic slots to immersive live casino tables, hd999 is built for players across Bangladesh.