Privacy Policy

1 Introduction

hk999 is Bangladesh's trusted online cricket betting and casino platform, accessible at hk999.io. We are committed to handling the personal data of our players with transparency, integrity, and respect. This Privacy Policy sets out the legal basis on which we process personal data, the categories of data we hold, the purposes for which it is used, and the rights available to you as a data subject.

We recognise that privacy is a fundamental right. Our approach to data handling is shaped by the principle that your personal information belongs to you — we act only as a steward of that data for clearly defined, legitimate purposes. We do not collect data speculatively, and we do not use it for purposes beyond those described in this document without first seeking your explicit consent.

This Policy applies to all players who have registered an account on hk999, all visitors to the hk999.io website, and all individuals who interact with hk999's support channels. If you access the Platform on behalf of another person, you represent that you have the authority to bind that person to this Policy and that they have been informed of its contents.

2 Data We Collect

The categories of personal data that hk999 may collect and process are described in the table below. Not all categories apply to every player — the data we hold depends on your level of account activity and the verification stage you have completed.

hk999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data beyond what is strictly required for age and identity verification under applicable KYC obligations.

3 How We Collect Data

hk999 collects personal data through the following channels:

• Direct submission: Data you provide when completing the registration form, KYC verification, support requests, or account settings updates.
• Automated technical collection: Data gathered automatically when you visit hk999.io, including IP address, browser type, referring URL, and session duration, via server logs and first-party analytics tools.
• Payment processors: Transaction confirmation data shared with hk999 by mobile money operators (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard) when you make a deposit or withdrawal.
• Identity verification providers: Where hk999 uses a third-party KYC or document verification service, that provider may return a verified identity result and confidence score to hk999 following your document submission.
• Fraud prevention tools: Risk signals and device fingerprint data generated by fraud detection systems that monitor for prohibited conduct as defined in the Terms & Conditions.
• Cookies and similar technologies: As described in Section 6 of this Policy.

4 How We Use Your Data

hk999 processes personal data only where a lawful basis exists. The primary lawful bases we rely on are: (a) contractual necessity — processing required to fulfil our obligations under the player agreement; (b) legal obligation — processing required to comply with applicable laws; and (c) legitimate interests — processing that serves a genuine operational need that does not override your fundamental rights.

The specific purposes for which we use your data are as follows:

• Account creation and management: To register your account, authenticate your identity at login, manage your wallet balance, and process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and USDT.
• KYC and age verification: To confirm that you are at least 21 years of age and that the payment methods registered to your account are owned by you, in fulfilment of our responsible gaming and anti-fraud obligations.
• Service delivery: To display your bet history, account statements, game history, and personalised account dashboard content.
• Customer support: To investigate and resolve complaints, process account queries, and maintain records of support interactions for quality assurance purposes.
• Fraud prevention and security: To detect, investigate, and prevent unauthorised account access, bonus abuse, multi-accounting, money laundering, and other forms of Prohibited Conduct as defined in the Terms & Conditions.
• Responsible gaming enforcement: To monitor for signs of problem gambling behaviour, enforce deposit limits and self-exclusion orders, and fulfil our duty of care toward players who may be at risk.
• Legal and regulatory compliance: To retain transaction records, respond to lawful requests from regulatory or law enforcement authorities, and comply with any applicable reporting obligations.
• Platform improvement: To analyse aggregate, anonymised usage patterns in order to improve site performance, game selection, and user experience. Individual player data is not used for this purpose without anonymisation.
• Promotional communications: Where you have opted in, to send you information about promotions, bonuses, and seasonal offers relevant to your gaming preferences. You may opt out at any time by contacting support.

5 Data Sharing

hk999 may share your personal data with the following categories of recipient:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and USDT processing partners receive transaction data necessary to confirm and execute deposits and withdrawals.
• KYC and identity verification providers: Document verification services receive scanned identity documents and return a verified identity result. These providers are contractually prohibited from using your documents for any other purpose.
• Game providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, and other licensed game studios receive the minimum data required to initialise a game session (typically an anonymised session token — not your name or payment details).
• Fraud detection and cybersecurity providers: Technical signals (IP address, device fingerprint, behavioural patterns) are shared with fraud prevention tools to identify and block Prohibited Conduct.
• Legal and regulatory authorities: hk999 will disclose personal data to law enforcement, courts, or regulatory bodies when required to do so by a valid legal process, court order, or applicable law. We will notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving hk999, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and given the opportunity to close their accounts before the transfer takes effect.

6 Cookies & Tracking Technologies

hk999 uses cookies and similar technologies on the hk999.io website. A cookie is a small text file placed on your device by the web server when you visit a site. Cookies allow the Platform to recognise your device across sessions, maintain your login state, and remember your preferences.

hk999 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for core Platform functionality including login session management, wallet balance display, and security token validation. These cookies cannot be disabled without breaking the Platform.
• Functional Cookies: Remember your language preference, currency display settings, and recently played games to improve your experience. These are not essential but enhance usability.
• Analytics Cookies: First-party analytics cookies collect anonymised, aggregated data about page views, session durations, and navigation paths. This data is used to improve site performance and does not identify you personally.
• Fraud Prevention Cookies: Assist our security systems in recognising trusted devices and detecting suspicious login attempts or automated access patterns.

hk999 does not use third-party advertising or retargeting cookies. No behavioural advertising profiles are created from your Platform activity. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will affect your ability to use the Platform.

7 Data Retention

hk999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods below represent our standard practice:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods. Anonymised data that can no longer be linked to an individual may be retained for statistical and analytical purposes without restriction.

8 Data Security

hk999 implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transport security: TLS 1.3 with 256-bit encryption on all data in transit between your device and hk999's servers.
• Data at rest encryption: Sensitive data fields including KYC documents, payment method identifiers, and authentication credentials are encrypted at rest using AES-256.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to player records undergo background screening and are bound by confidentiality agreements.
• Two-factor authentication (2FA): Available to all players via account settings. All internal hk999 staff accounts with access to player data require mandatory 2FA.
• Intrusion detection: Automated monitoring systems detect and alert on suspicious access patterns, including brute-force login attempts, unusual API call volumes, and anomalous data export requests.
• Regular security audits: hk999's infrastructure and application layer undergo periodic security assessments by independent security professionals to identify and remediate vulnerabilities.

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, hk999 will notify affected players without undue delay and take all reasonably practicable steps to contain and remediate the breach.

9 Your Rights

As a player on hk999, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 3 business days and provide a substantive response within 30 days.

Please note that some rights are subject to exceptions — for example, the right to erasure cannot override legal obligations that require us to retain financial transaction records for a minimum of 7 years. Where we are unable to fulfil a rights request in full, we will explain the specific reason in writing.

10 Minors

hk999 is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes date-of-birth verification, and KYC procedures are designed to confirm age eligibility before any wagering activity is permitted.

If hk999 becomes aware that personal data belonging to a person under 21 has been collected — whether through a misrepresentation during registration or any other means — we will immediately suspend the relevant account, initiate an investigation, delete the associated personal data to the extent legally permissible, and refund any real-money balance to the payment method from which it originated.

If you believe that a minor has registered an account on hk999, please contact us immediately at [email protected] with the subject line "Minor Account Report". We treat all such reports with the highest priority and will act within 24 hours of receiving a credible report.

11 International Data Transfers

hk999 primarily stores and processes player data on servers located within or serving the Asia-Pacific region. However, some of our third-party service providers — including game studios, fraud detection tools, and identity verification providers — may process data on servers located outside Bangladesh.

Where personal data is transferred internationally, hk999 ensures that appropriate safeguards are in place prior to the transfer. These safeguards include contractual data processing agreements that impose obligations on the recipient equivalent to those described in this Privacy Policy, and technical measures such as end-to-end encryption for data in transit.

By creating an account on hk999, you acknowledge that your personal data may be processed by service providers in jurisdictions outside Bangladesh as described in this section, and that hk999 will take all reasonable steps to ensure that such processing is conducted securely and only for the purposes described in this Policy.

12 Changes to This Policy

hk999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will update the effective date at the top of this document and, where the change significantly affects how we use your data, notify you via the mobile number or email address registered to your account.

We encourage all players to review this Policy periodically. The current version of this Privacy Policy is always accessible at hk999.io/privacy-policy. Continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms. If you disagree with any change, you should cease using the Platform and contact support to arrange account closure.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hk999 handles your personal data, please reach out to our dedicated privacy support team using the contact details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

For data rights requests — including access, rectification, erasure, portability, or objection — please use the subject line "Data Rights Request" and include your registered email address or mobile number so we can verify your identity before processing your request. We do not charge any fee for handling data rights requests made in good faith.

hk999 takes every privacy complaint seriously. If you are not satisfied with our response to a privacy concern, you may escalate the matter by writing to the same email address and marking your message "Privacy Escalation". A senior member of our compliance team will review the matter independently and provide a final written response within 10 business days.