ha9999 Privacy
Policy & Data Rights

ha9999 collects personal data from players at the point of account registration, during the course of platform use, and through technical systems that operate in the background when you visit our website. The categories of data we collect, and the circumstances under which each category is collected, are described in full below.

1.1 Registration Data

When you create a ha9999 account, we ask you to provide the following information: your full name, date of birth, mobile number, email address, and preferred payment method. This information is mandatory — without it, we cannot create a valid account, verify your age, or process payments on your behalf.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may ask you to submit copies of identity documents such as your National ID card (NID), passport, or birth certificate. We may also request a selfie or short video for facial verification purposes. KYC data is processed under our anti-money-laundering obligations and is stored securely in encrypted form.

1.3 Transaction Data

We record details of every financial transaction on your ha9999 account, including deposit amounts, withdrawal requests, bonus credits, and wagering activity. Transaction records include timestamps, amounts in BDT (Bangladeshi Taka), the payment method used (e.g., bKash, Nagad, Rocket, Upay), and the outcome. We do not store your full payment account PIN or password — only a masked reference is retained to match transactions.

1.4 Technical & Device Data

When you access ha9999 from a browser or mobile device, our systems automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, and the pages you visit on our platform. This data is used for security monitoring, fraud detection, and platform performance optimisation.

1.5 Communications Data

If you contact our support team via email or live chat, we retain a record of that correspondence, including the content of messages and any attachments you provide. This data is used to resolve your query and to improve the quality of our customer support service.

ha9999 uses the personal data it collects solely for the purposes described in this Privacy Policy. We do not use your data in ways that are incompatible with the purpose for which it was originally collected without first obtaining your explicit consent. The primary purposes for which ha9999 processes personal data are as follows:

• Account management: Creating and maintaining your player account, processing login requests, and enabling account recovery.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and maintaining accurate financial records for your account.
• Age verification and KYC compliance: Confirming that you meet the 18+ age requirement and fulfilling our obligations under anti-money-laundering regulations applicable to online gaming platforms operating in Bangladesh.
• Fraud and security monitoring: Detecting and preventing unauthorised account access, bonus abuse, multi-accounting, and other forms of platform misuse through automated and manual review systems.
• Customer support: Responding to your queries, processing complaints, and resolving account disputes in a timely manner.
• Responsible gaming monitoring: Tracking your gaming activity patterns to identify potential indicators of problem gambling and, where appropriate, reaching out proactively to offer self-exclusion or limit-setting tools.
• Platform improvement: Using aggregated, anonymised behavioural data to improve the user experience, optimise game performance, and develop new platform features.
• Marketing communications (consent only): Sending promotional offers, bonus announcements, and seasonal campaign messages to players who have explicitly opted in to receiving such communications. You may withdraw consent at any time.

ha9999 does not sell, rent, or trade your personal information. However, to operate the platform effectively and meet our legal obligations, we share limited categories of personal data with the following categories of third party:

3.1 Payment Service Providers

When you make a deposit or request a withdrawal, ha9999 transmits the minimum necessary transaction data to the relevant mobile financial service provider — bKash, Nagad, Rocket, or Upay — to initiate and confirm the payment. The data shared is limited to the transaction amount, your registered mobile number, and a platform-generated transaction reference. The payment providers' own privacy policies govern how they process this data on their end.

3.2 Game Technology Providers

Games available on ha9999 are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier to enable game loading and result recording. No directly identifiable personal data such as your full name, NID, or payment details is shared with game providers.

3.3 KYC and Identity Verification Services

ha9999 may use third-party identity verification services to assist with document authentication during the KYC process. These services process your submitted identity documents under strict data processing agreements and are not permitted to retain or use your data for any purpose beyond the verification service they provide to ha9999.

3.4 Fraud Prevention and Risk Analytics

We may share technical data — including IP addresses, device fingerprints, and behavioural signals — with fraud prevention and risk analytics partners to detect and block suspicious activity on the platform. This data sharing is conducted under our legitimate interest in maintaining platform security and protecting honest players.

3.5 Legal and Regulatory Disclosures

ha9999 will disclose personal data to competent authorities, law enforcement bodies, or financial regulators when required to do so by applicable law, court order, or official regulatory request. In such cases, we will disclose only the data specifically requested and will notify the affected player where we are legally permitted to do so.

ha9999 uses cookies and similar tracking technologies to operate core platform functionality, maintain your session while you are logged in, and — where you have consented — to collect anonymised usage analytics that help us improve the platform experience.

The categories of cookies used on ha9999 are as follows:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and enable secure page navigation. These cookies cannot be disabled without impairing the functionality of the platform.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate the platform — for example, which pages are visited most frequently and whether any page errors are encountered. This data is used exclusively to improve platform performance and is never linked to your personal identity.
• Functional cookies: These cookies remember your in-platform preferences, such as your preferred game category, notification settings, and display options, so that you do not need to re-configure them each time you log in.
• Security cookies: These cookies support our fraud detection systems by helping us identify unusual patterns in session behaviour, such as rapid account switching or atypical navigation sequences that may indicate bot activity or account compromise.

ha9999 does not use third-party advertising cookies or social media tracking pixels. No data collected via cookies on ha9999 is shared with advertising networks or used to build a marketing profile of your browsing behaviour outside the platform.

ha9999 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

When a retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an individual player. ha9999 conducts periodic data audits to ensure that data held beyond its retention period is identified and removed promptly.

Where a player submits a data deletion request under their privacy rights (see Section 6), ha9999 will process that request within 30 days. In cases where deletion is not immediately possible due to an active legal obligation to retain the data — for example, an ongoing regulatory investigation — we will inform you of the reason for the delay and confirm when deletion will be completed.

As a player on ha9999, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request" and a description of the specific right you wish to exercise. We will respond within 30 days of receipt of a valid request.

1. Right of Access: You may request a copy of all personal data ha9999 holds about you, together with an explanation of the purposes for which it is processed and the third parties with whom it has been shared.
2. Right to Rectification: If you believe that any personal data ha9999 holds about you is inaccurate or incomplete, you may request that it be corrected. Requests to change identity data (name, date of birth) will require supporting documentation.
3. Right to Deletion: You may request that ha9999 delete your personal data. We will comply with this request unless retention of the data is required by law — for example, to meet our AML record-keeping obligations.
4. Right to Restrict Processing: You may request that ha9999 temporarily suspend the processing of your personal data while a rectification request is under review, or if you have objected to processing and are awaiting our response.
5. Right to Data Portability: You may request that ha9999 provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
6. Right to Withdraw Marketing Consent: If you have previously opted in to receiving promotional communications from ha9999, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
7. Right to Object: You may object to the processing of your personal data where ha9999 relies on legitimate interest as its legal basis. ha9999 will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests.

ha9999 takes the security of your personal data seriously and implements a layered approach to data protection that encompasses technical, organisational, and procedural controls. While no digital platform can guarantee absolute security against all possible threats, the measures ha9999 has in place represent industry-standard practice for online gaming platforms operating in Bangladesh.

Our technical security measures include:

• TLS 1.3 encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security version 1.3, which is the current industry standard for secure communications.
• Encrypted data storage: Sensitive data at rest — including identity documents, KYC records, and password hashes — is stored using AES-256 encryption in access-controlled, segmented database environments.
• Password hashing: Player passwords are never stored in plain text. They are processed using a strong cryptographic hash function with unique per-user salting, meaning that even in the event of a data breach, your actual password cannot be recovered from our stored hash.
• Two-factor authentication (2FA): ha9999 offers two-factor authentication as an optional security layer for player accounts. We strongly encourage all players to enable 2FA via SMS to their registered mobile number.
• Intrusion detection systems: Our infrastructure is monitored around the clock by automated intrusion detection systems that flag unusual access patterns, high-volume login attempts, and other indicators of a potential breach for immediate review.
• Access controls: Access to production databases containing player personal data is restricted to a small number of authorised personnel. All access is logged and audited on a regular basis.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, ha9999 will notify affected players without undue delay, providing a description of the breach, the categories of data affected, the likely consequences, and the steps we have taken or intend to take to address it.

ha9999 reviews this Privacy Policy on a regular basis and may update it to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform that affect how personal data is handled. When material changes are made, we will update the "Last Updated" date at the top of this page. For significant changes that materially affect your rights, we will provide additional notice via email to your registered address.

Continued use of ha9999 following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must stop using the platform and may request account closure by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or wish to raise a concern about how ha9999 handles your personal data, please contact us using the details below:

• Email: [email protected] (subject line: "Privacy Request")
• Response time: We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 calendar days.
• Business hours: Monday to Sunday, 09:00 – 22:00 Bangladesh Standard Time (BST, UTC+6)

ha9999 is committed to resolving privacy complaints fairly and transparently. If you are not satisfied with our response to your privacy concern, you may escalate your complaint in writing, and it will be reviewed by a senior member of our compliance team within 14 calendar days.