hp9999 Privacy Policy

hp9999 ("we", "us", " "our") is the operator of the hp9999 Platform and acts as the data controller for all personal information collected through the Platform. We are committed to protecting the privacy and security of every player who uses our services. This Policy sets out a transparent account of how we handle personal data in connection with the operation of our online casino, sports betting, and gaming services for players based in Bangladesh and accessing our platform from other permitted locations.

This Policy should be read alongside the hp9999 Terms & Conditions, which are published separately at https://hp9999.pro/terms-conditions and incorporated herein by reference. Capitalised terms not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

When you register for an account, use the hp9999 Platform, or contact our support team, we may collect the following categories of personal data:

hp9999 processes personal data only for legitimate, specified purposes. The primary purposes for which we use your data are set out below:

• Account creation and management: To register your account, verify your identity and age (21+ requirement), maintain your player profile, and manage your account settings and preferences.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card), to verify that payment accounts are registered in your name, and to maintain accurate transaction records in BDT.
• Service delivery: To provide access to casino games, sports betting markets (including cricket — BPL, T20, IPL, Bangladesh Tigers), and promotional offers, and to ensure the integrity and fairness of all gaming activity.
• Legal compliance: To comply with applicable anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, fraud prevention duties, and any lawful requests from competent authorities.
• Responsible gaming: To monitor gaming patterns, enforce self-exclusion requests, apply deposit limits and cooling-off periods, and identify players who may be experiencing problem gambling behaviours.
• Customer support: To respond to your enquiries, complaints, and support requests, and to maintain records of communications for quality assurance.
• Security and fraud prevention: To detect and investigate suspicious activity, including unauthorised account access, bonus abuse, multi-accounting, and collusive betting behaviour.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, reliability, and usability of the hp9999 Platform.
• Direct communications: To send you transactional messages (deposit confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about bonuses and new games.

hp9999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations, KYC verification, and data retention rules.
• Legitimate interests: Processing carried out for the legitimate interests of hp9999 or third parties, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your privacy rights.
• Consent: Where processing is based on consent (for example, receiving promotional emails or SMS marketing), you may withdraw that consent at any time by contacting [email protected] or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

hp9999 does not sell or rent your personal data to any third party. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment service providers: Mobile financial service operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) receive only the data necessary to process your specific transaction. Card network operators (Visa, Mastercard) receive data via our PCI-compliant payment processor.
• Game studios and content providers: Studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Habanero, and Spribe may receive pseudonymised player session data necessary for game delivery and RNG auditing. They do not receive your full identity or payment data.
• Identity verification services: Third-party KYC and age verification providers may process your identity documents for the purpose of confirming your eligibility to play. These providers are contractually bound to use your data solely for the verification purpose.
• IT infrastructure and hosting providers: Our servers and platform infrastructure are managed by trusted hosting partners operating under strict confidentiality agreements. These providers have no independent right to access or use your data.
• Legal and regulatory authorities: hp9999 will disclose personal data to competent authorities where required to do so by law, court order, or in connection with an active investigation into suspected financial crime, fraud, or other unlawful activity.
• Professional advisers: Legal counsel, auditors, and accountants may access limited personal data in the course of providing professional services to hp9999, subject to professional confidentiality obligations.

In all cases of third-party data sharing, hp9999 applies appropriate contractual safeguards and shares only the minimum data necessary for the stated purpose.

The hp9999 Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without breaking core functionality.
• Functional cookies: Store your language preferences, game settings, and interface customisations so that your experience is consistent across sessions.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most, how long sessions last, and where users encounter errors. This data is used solely to improve the Platform and is never linked back to an identifiable individual.
• Security and fraud-detection cookies: Help detect unusual login patterns, multi-account behaviour, and automated bots by tracking device fingerprint signals across sessions.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your account and using core Platform features. hp9999 does not use third-party advertising or retargeting cookies.

hp9999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal retention obligations. Our standard retention schedule is as follows:

• Active account data: Retained for the full duration of your account's active status and for a period of five years following permanent account closure.
• Transaction and financial records: Retained for a minimum of seven years from the date of the transaction, consistent with standard financial record-keeping obligations.
• Identity verification documents: Retained for five years following the completion of the verification process or from the date of account closure, whichever is later.
• Support communications: Retained for three years from the date of the last communication in a given support thread.
• Device and technical data: Retained in aggregated, anonymised form for up to two years for platform analytics purposes.
• Self-exclusion records: Retained indefinitely to prevent re-registration by players who have permanently self-excluded.

When the applicable retention period expires, personal data is securely deleted or permanently anonymised. hp9999 conducts periodic reviews of stored data to ensure compliance with this retention schedule.

As a player on the hp9999 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected]:

• Right of access: You may request a copy of all personal data that hp9999 holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that some data may be retained beyond an erasure request where retention is required by law.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before the withdrawal.
• Right to object: You may object to processing of your personal data where hp9999 relies on legitimate interests as the legal basis, unless hp9999 can demonstrate compelling legitimate grounds that override your interests.

hp9999 will respond to all verified data rights requests within 30 calendar days. Where a request is complex or we receive a high volume of requests simultaneously, we may extend this period by a further 60 days, in which case we will notify you of the extension within the initial 30-day window.

hp9999 implements a layered approach to data security designed to protect personal information against unauthorised access, accidental loss, disclosure, destruction, or alteration. Our security measures include:

• 256-bit SSL/TLS encryption on all pages and all data transmission channels between your device and our servers.
• Encryption of sensitive data fields at rest within our databases, including identity document data and payment method identifiers.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular independent security audits and penetration testing of Platform infrastructure.
• Automated monitoring systems that detect and alert on unusual data access patterns or potential intrusion attempts.
• Formal incident response procedures in place to manage and contain any data security event in a timely manner.

In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, hp9999 will notify affected individuals without undue delay and in accordance with applicable data breach notification obligations.

While hp9999 takes all reasonable steps to protect your data, no system is completely immune from security risks. You also play a role in keeping your account secure — use a strong, unique password, do not share your credentials with anyone, and contact [email protected] immediately if you suspect any unauthorised activity on your account.

hp9999 may send you promotional communications about bonuses, new games, seasonal offers (such as Eid, Pohela Boishakh, or ICC tournament promotions), and platform news, provided you have opted in to receive such communications at the time of registration or subsequently through your account settings.

We may use the following channels for marketing communications, where consent has been obtained:

• Email messages sent to your registered email address.
• SMS messages sent to your registered mobile number.
• In-Platform notifications displayed when you are logged into your account.

You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting [email protected] with the subject line "Unsubscribe". Opting out of marketing communications will not affect the delivery of transactional messages (such as deposit confirmations, withdrawal updates, and security alerts), which are sent as an integral part of account operation.

The hp9999 Platform is strictly restricted to individuals who are 21 years of age or older. hp9999 does not knowingly collect, process, or retain personal data belonging to any person under the age of 21. Age verification is carried out as part of the account registration process, and additional verification may be requested at any time prior to withdrawal processing.

If hp9999 becomes aware that personal data has been collected from an individual who is under 21, that account will be suspended immediately, all associated data will be reviewed, and any real-money balance will be held pending investigation. Parents or guardians who believe that a minor has registered on the Platform should contact [email protected] immediately so that the account can be investigated and closed without delay.

hp9999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, or applicable legal requirements. When material changes are made to this Policy, we will notify registered players by posting a notice on the Platform homepage and, where contact information is on file, by sending an email to the registered address.

The "Last updated" date at the top of this Policy will be revised whenever the Policy is changed. We encourage you to review this Policy periodically to stay informed about how hp9999 protects your personal data. Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of the revised terms.