hj999 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how hj999 ("we", "us", "our", or "the Platform") collects, processes, stores, shares, and protects personal data relating to individuals who access or use the hj999 online betting and casino platform available at hj999.io ("the Platform").

hj999 is committed to protecting the privacy and personal data of all players, visitors, and users of the Platform, including those accessing from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and other cities across Bangladesh. We recognise the importance of privacy in the context of online gambling and handle all personal data with the highest degree of care and discretion.

By registering an account on the hj999 Platform, or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the hj999 Platform.

This Policy should be read alongside the hj999 Terms & Conditions and Responsible Gaming Policy. In the event of any conflict between these documents on a privacy matter, this Privacy Policy shall prevail.

2 Data We Collect

hj999 collects personal data in the categories listed below. We collect only the data that is necessary for the purposes described in this Policy. We do not collect sensitive categories of data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification.

The data types listed above are examples within each category. Additional specific data points may be collected where required by law, where necessary for a specific transaction, or where you voluntarily provide additional information to hj999 support or during promotional activities.

Your data is associated with the following illustrative labels on our systems:

3 How We Collect Data

hj999 collects personal data through the following channels and methods:

• Direct Registration: When you create an account on the hj999 Platform, you provide identity, contact, and account data directly via the registration form.
• KYC Verification: When you submit identity documents to fulfil age and identity verification requirements, hj999 receives and processes the personal data contained in those documents.
• Deposits and Withdrawals: When you initiate a financial transaction via bKash, Nagad, Rocket, Upay, or any supported bank channel, hj999 receives confirmation data including your payment account details and transaction reference from the payment provider.
• Platform Usage: hj999 automatically collects technical and usage data as you interact with the Platform through cookies, server logs, and session tracking technologies. See Section 7 for further detail.
• Customer Support Interactions: When you contact the hj999 support team by email, live chat, or any other channel, we collect and retain the content of that communication along with your account details and the date and time of contact.
• Promotions and Surveys: Where you choose to participate in a hj999 promotion, competition, or voluntary survey, we collect any additional data you provide in the course of participation.

hj999 does not purchase personal data from data brokers or other third-party list providers. All personal data held by hj999 is collected directly from players or from payment providers acting on a player's instruction in connection with a transaction.

4 How We Use Your Data

hj999 uses the personal data we collect for the following purposes. Each purpose is matched to a specific legal basis described in Section 5.

• Account Administration: Creating and maintaining your player account, authenticating logins, managing account preferences, and communicating important account notices such as security alerts and policy updates.
• Identity and Age Verification: Confirming that you meet the minimum age requirement of 21 years and that your identity matches the information provided at registration, in accordance with our responsible gaming obligations.
• Payment Processing: Facilitating deposits and withdrawals via your chosen payment method, verifying the ownership of payment accounts, and maintaining transaction records for accounting and audit purposes.
• Fraud Prevention and Platform Security: Detecting and investigating suspicious account activity, multiple account usage, collusion, bonus abuse, unauthorised access attempts, and other forms of fraud or prohibited conduct.
• Responsible Gaming Compliance: Monitoring betting patterns for indicators of problem gambling, enforcing deposit limits and self-exclusion arrangements, and contacting players where responsible gaming concerns are identified.
• Customer Support: Responding to your queries, resolving complaints, and maintaining records of support interactions to improve our service quality and ensure consistent handling of recurring issues.
• Platform Improvement: Analysing aggregated and anonymised usage data to understand how players interact with the Platform, identify popular features, and inform product development decisions.
• Legal and Regulatory Compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement bodies, and fulfilling anti-money-laundering obligations.
• Marketing Communications: Where you have given explicit consent, sending you promotional emails or SMS messages about hj999 offers, new games, and seasonal promotions relevant to the Bangladesh market. You may withdraw this consent at any time.

5 Legal Basis for Processing

hj999 processes your personal data only where a valid legal basis exists for doing so. The primary legal bases applicable to our processing activities are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between hj999 and the player — specifically the Terms & Conditions — including account creation, payment processing, and the delivery of betting and casino services.
• Legal Obligation: Processing required to comply with applicable law, including age verification requirements, anti-money-laundering record-keeping obligations, and the retention of financial transaction records.
• Legitimate Interests: Processing carried out in pursuit of hj999's legitimate business interests where those interests are not overridden by the player's rights. This includes fraud prevention, platform security monitoring, and aggregated analytics for product improvement.
• Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to optional marketing communications. You may withdraw consent at any time by contacting hj999 support or using the unsubscribe option in any marketing email.

Where hj999 relies on legitimate interests as the basis for processing, we carry out a balancing assessment to confirm that our interests do not override your fundamental rights. We are prepared to provide further detail on any such assessment upon written request to our support team.

6 Data Sharing & Disclosure

hj999 shares your personal data only with the categories of third parties described below, and only to the extent necessary for the stated purpose. All third parties engaged by hj999 who process personal data on our behalf are required to do so in accordance with this Policy and applicable data protection obligations.

• Payment Service Providers: hj999 shares the minimum data necessary with payment processors (including bKash, Nagad, Rocket, Upay, and partner banks) to facilitate deposit and withdrawal transactions. These providers process data under their own privacy policies and terms of service.
• Identity Verification Partners: Where hj999 uses a third-party KYC service provider to verify identity documents, your identity data is transmitted to that provider securely and is used solely for the purpose of verification.
• Game Software Providers: When you play a game provided by a third-party studio (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, or Spribe), your username and session data are shared with that provider to the extent required to operate the game. These providers do not receive your full identity or payment details.
• IT and Hosting Infrastructure: hj999 may engage infrastructure or cloud service providers to host the Platform, store data, or provide security monitoring services. These providers operate as data processors under strict contractual obligations.
• Legal and Regulatory Authorities: hj999 will disclose personal data to competent authorities — including law enforcement agencies and financial regulators — where required to do so by law, by court order, or where we believe disclosure is necessary to prevent fraud, money laundering, or harm to persons.
• Business Transfers: In the event of a merger, acquisition, or transfer of assets involving hj999, player data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

Beyond the categories listed above, hj999 will not disclose your personal data to any third party without your prior written consent, except where required by law.

7 Cookies & Tracking

hj999 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device by your browser when you visit the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as session authentication, login state persistence, and security token validation. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: These cookies remember your preferences — such as display language and preferred game categories — to provide a more personalised experience on subsequent visits.
• Analytics Cookies: hj999 uses aggregated analytics to understand how players navigate the Platform, which pages are most visited, and where technical issues may arise. Analytics data is processed in anonymised or pseudonymised form and is not used to identify individual players.
• Security Cookies: Used to detect and prevent fraudulent activity, multiple account access from a single device, and other forms of abuse. These cookies are strictly necessary for platform integrity and cannot be disabled.

You may configure your browser to refuse some or all cookies; however, disabling strictly necessary cookies will prevent you from logging into or using the hj999 Platform. hj999 does not use third-party advertising cookies or behavioural targeting cookies that track your activity across external websites.

8 Data Retention

hj999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines:

• Account and Identity Data: Retained for the duration of the active account relationship and for a minimum of five years following account closure, to satisfy anti-money-laundering record-keeping obligations and to facilitate the resolution of any post-closure disputes.
• Financial Transaction Records: Retained for a minimum of seven years from the date of each transaction in accordance with financial record-keeping requirements.
• KYC Documents: Retained for the duration of the account relationship and for five years following account closure. Original document images are deleted after verification is confirmed; verification status records are retained as described above.
• Customer Support Communications: Retained for three years from the date of the most recent interaction, to support complaint investigation and service improvement activities.
• Technical and Usage Data: Retained in identifiable form for up to 24 months for fraud detection and security purposes. Aggregated anonymised analytics data may be retained indefinitely.
• Marketing Consent Records: Retained for the duration of the consent and for one year following withdrawal of consent, to demonstrate compliance.

Where data is no longer required for any applicable purpose, hj999 will securely delete or irreversibly anonymise it. Deletion is carried out through secure erasure procedures that prevent recovery of the original data.

9 Data Security

hj999 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed on the Platform. Our security framework includes the following controls:

• SSL/TLS Encryption: All data transmitted between your device and the hj999 Platform is encrypted using 256-bit SSL/TLS protocols. This prevents interception of personal data, login credentials, and payment information during transmission.
• Password Hashing: User passwords are stored exclusively in hashed form using industry-standard cryptographic algorithms. hj999 staff cannot view your plain-text password. If you forget your password, a reset link is issued rather than a password being retrieved.
• Access Controls: Access to personal data within hj999 systems is restricted on a need-to-know basis. Staff members are granted access only to the data categories required for their specific role. All staff with data access undergo privacy training.
• Fraud Monitoring: hj999 operates continuous automated monitoring of account activity for indicators of fraud, unauthorised access, and suspicious financial patterns. Flagged activity is reviewed by our security team.
• Incident Response: hj999 maintains an incident response procedure for data security events. In the event of a material data breach affecting player data, hj999 will notify affected players and relevant authorities in accordance with applicable legal requirements.

While hj999 takes all reasonable steps to secure your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that your device is protected by appropriate security software.

10 Your Rights

As a player whose personal data is processed by hj999, you hold the following rights in relation to that data. To exercise any of these rights, please contact hj999 support at the email address provided in Section 14.

• Right of Access: You may request a copy of the personal data hj999 holds about you. hj999 will provide this information within a reasonable period following verification of your identity.
• Right to Rectification: If any personal data hj999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections may require submission of supporting documentation.
• Right to Erasure: You may request that hj999 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing. This right is subject to overriding legal retention obligations described in Section 8.
• Right to Restriction: You may request that hj999 restrict the processing of your data in certain circumstances — for example, while a correction request is under review.
• Right to Data Portability: Where processing is based on your consent or on contract, you may request that hj999 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. hj999 will cease such processing unless it can demonstrate compelling grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

hj999 will acknowledge all data rights requests within five business days and will endeavour to fulfil verified requests within 30 calendar days. Where a request cannot be fulfilled — for example, due to a conflicting legal obligation — hj999 will explain the reason in writing.

11 Children & Minors

The hj999 Platform is strictly intended for adults aged 21 years and above. hj999 does not knowingly collect personal data from individuals under the age of 21. Age verification is applied at registration and is enforced prior to the processing of any withdrawal request.

If hj999 becomes aware that personal data has been collected from a person under the age of 21 — whether through our own verification processes or through notification by a third party — we will immediately suspend the relevant account, refuse all pending transactions, and delete the data of the underage individual to the extent permitted by law.

Parents or guardians who believe that a minor may have registered an account on the hj999 Platform using false information are encouraged to contact hj999 support immediately at the address provided in Section 14. hj999 will prioritise the investigation and resolution of all such reports.

12 Third-Party Services

The hj999 Platform integrates services provided by third-party software and payment partners to deliver the full range of features available to players. When you interact with these integrated services, certain data may be transmitted to and processed by the relevant third-party provider.

Casino and live dealer games are powered by providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe. Each of these providers operates under its own privacy and data handling policies. hj999 ensures that data sharing agreements with game providers are limited in scope and that providers are contractually prohibited from using player data for purposes beyond game delivery.

Payment integrations with bKash, Nagad, Rocket, Upay, and banking partners involve the transmission of transaction data to the relevant provider solely to process the requested financial transaction. hj999 does not store full payment account credentials; only masked identifiers and transaction references are retained on hj999 systems.

hj999 is not responsible for the privacy practices of third-party providers. We recommend that you review the privacy policies of any third-party service with which you interact, including your chosen payment provider.

13 Policy Updates

hj999 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. The effective date at the top of this page indicates when the most recent revision took effect.

Where a material change is made to this Policy — particularly any change that affects the purposes for which your data is processed or the categories of third parties with whom it is shared — hj999 will notify registered players by email or by displaying a prominent notice on the Platform at least seven days before the amended Policy takes effect. For non-material changes (such as clarifications of existing text or formatting updates), the Policy will be updated with a revised effective date and no separate notification will be issued.

Your continued use of the hj999 Platform after any updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you do not agree with an updated Policy, you must cease using the Platform and may request account closure by contacting hj999 support.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data hj999 holds about you, please contact our support team. We aim to acknowledge all privacy-related enquiries within two business days and to resolve substantive requests within 30 calendar days.

Email: [email protected]

When contacting us about a data rights request, please include your registered username, the nature of your request, and sufficient detail to allow us to identify and locate your account data. Where identity verification is required before a request can be fulfilled, hj999 will advise you of the documentation needed.