Your Privacy Matters
at hm999

1 Introduction

hm999 ("we", "us", "our") is committed to protecting the privacy and personal data of all players who access and use the hm999 online betting and casino platform (the "Platform"), available at https://hm999.io. This Privacy Policy ("Policy") sets out in clear and transparent terms what personal information we collect about you, how we use it, with whom we may share it, and how we keep it secure.

This Policy applies to all registered users and visitors of the hm999 Platform, including players from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and across Bangladesh. It covers all interaction channels through which you may engage with hm999 — the website, any associated mobile-optimised interface, and our customer support communication channels.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and hm999. If you do not agree with this Privacy Policy, you should cease use of the Platform and close your account. Continued use of the Platform constitutes your acknowledgment of and consent to the practices described in this Policy.

2 Data We Collect

hm999 collects personal data through a number of channels — directly from you when you register and use the Platform, automatically through your use of the site, and occasionally from third-party verification and payment service providers. The categories of personal data we collect include the following:

Registration & Identity Data

• Full legal name
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address, including city and district within Bangladesh
• Email address and mobile phone number
• Username and encrypted password
• National identity documentation (where requested for KYC verification)

Financial & Payment Data

• Mobile financial service account identifiers (e.g., bKash, Nagad, Rocket, Upay account numbers in masked form)
• Bank account details for Bangladeshi bank transfers (masked for security)
• Transaction history: deposits, withdrawals, and balance adjustments
• Records of bonus credits and promotional rewards applied to your account

Betting & Gaming Activity Data

• Sports bets placed, including market selections, stake amounts, and outcomes
• Casino games played, including session duration, wager amounts, and game titles
• Responsible gaming tool settings (e.g., deposit limits, session limits, self-exclusion status)

Technical & Usage Data

• IP address and approximate geolocation (country and region level)
• Device type, operating system, and browser information
• Pages visited, time spent on each page, and navigation flow
• Cookie identifiers and session tokens
• Referral source (how you arrived at the hm999 Platform)

Communications Data

• Records of your communications with the hm999 customer support team, including emails and chat transcripts
• Preferences for marketing communications (where you have opted in)
• Feedback and survey responses you choose to submit

3 How We Use Your Data

hm999 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose beyond what is described here without first obtaining your consent or where required by law.

Where you have opted in to receive marketing communications from hm999, you may receive emails or notifications about promotions, new game launches, cricket betting offers (including BPL, IPL, and T20 World Cup markets), and seasonal events relevant to Bangladesh players. You may withdraw your marketing consent at any time by contacting [email protected].

4 Legal Basis for Processing

hm999 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing is necessary to fulfil our contractual obligations to you under the hm999 Terms & Conditions — for example, to create your account, process transactions, and provide betting and casino services.
• Legal obligation: Processing is necessary to comply with applicable legal requirements, including identity verification, anti-money laundering obligations, and fraud prevention measures.
• Legitimate interests: Processing is necessary for the legitimate interests of hm999, including maintaining platform security, preventing fraud, improving our services, and communicating with you about your account. We ensure that our legitimate interests do not override your fundamental privacy rights.
• Consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Disclosure

hm999 does not sell your personal data to third parties. We may share your data with trusted third parties only in the specific circumstances described below:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and other financial institutions involved in processing your deposits and withdrawals. These providers receive only the minimum data necessary to complete the transaction.
• Identity verification providers: Third-party KYC and age verification service providers who assist hm999 in confirming your identity and age in accordance with our legal obligations.
• Game software providers: Providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level data (such as player ID and wager amounts) as part of delivering their games through the hm999 platform. These providers are bound by their own data protection obligations.
• IT and infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who support the technical operation of the hm999 platform. These providers process data only on our behalf and under strict contractual safeguards.
• Legal and regulatory authorities: Where required by law, court order, or to cooperate with an investigation by a competent authority, hm999 may disclose personal data to the relevant body. We will notify you of any such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or transfer of hm999's business assets, your personal data may be transferred to the successor entity. We will notify you of any such change and your continued use of the platform will constitute acceptance of the transfer.

6 Cookies & Tracking

hm999 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate and improve the Platform. Cookies are small text files stored on your device when you visit the hm999 website. They help us remember your preferences, maintain your login session, and understand how players use our platform.

The types of cookies used on the hm999 Platform are as follows:

You may control or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may affect the functionality of the hm999 Platform — in particular, you may be unable to maintain a logged-in session or use certain features of the betting interface.

7 Data Retention

hm999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering and record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
• Betting and gaming activity: Retained for a minimum of three (3) years to support dispute resolution, responsible gaming monitoring, and fraud prevention.
• Customer support communications: Retained for a minimum of two (2) years from the date of the final communication.
• Technical and usage data: Retained in aggregated or anonymised form for up to twelve (12) months for analytics purposes. Raw IP and device logs are retained for up to ninety (90) days.
• Marketing consent records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with consent requirements.

When your personal data is no longer required, hm999 will securely delete or anonymise it. Data that has been anonymised in a way that can no longer be linked to you is no longer considered personal data and may be retained indefinitely for statistical purposes.

8 Data Security

hm999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the hm999 Platform
• Industry-standard password hashing using modern cryptographic algorithms — hm999 does not store your password in plain text
• Access controls that restrict internal access to personal data to authorised personnel only, on a strict need-to-know basis
• Regular security audits and vulnerability assessments of the Platform infrastructure
• Intrusion detection systems and real-time monitoring for unusual activity
• Data backups stored in encrypted form on secure, geographically separated servers

While hm999 applies rigorous security practices, no online platform can guarantee absolute immunity from security breaches. You play an important role in keeping your account secure by choosing a strong, unique password, keeping your login credentials confidential, and notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

9 Your Rights

As a user of the hm999 Platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with your full registered name, username, and a description of your request.

• Right of Access: You have the right to request a copy of the personal data hm999 holds about you. We will provide this within a reasonable timeframe, ordinarily within thirty (30) days of a verified request.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. You may also update certain information (such as your email address or contact number) directly through your account settings.
• Right to Erasure: You have the right to request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain data as described in Section 7.
• Right to Restrict Processing: You have the right to request that we limit the ways in which we use your personal data while a dispute or verification request is pending.
• Right to Object: You have the right to object to our processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may have compelling grounds to continue processing in certain circumstances.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.

10 Children & Minors

The hm999 Platform is strictly for adults aged 21 years or older. hm999 does not knowingly collect personal data from anyone under the age of 21. If you are under 21, you must not register or attempt to use the Platform.

If hm999 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and forfeit any balance held in that account. We may also refer the matter to the appropriate authorities.

If you are a parent or guardian and believe that your child has registered with hm999 without your knowledge, please contact us immediately at [email protected] so we can take swift action to address the situation.

11 Third-Party Services

The hm999 Platform integrates with a number of third-party service providers to deliver a complete betting and casino experience. When you interact with games, payment systems, or other third-party features embedded within the hm999 Platform, those providers may collect certain technical or transactional data directly from your device or session.

Third-party game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi operate their own privacy practices and data processing standards. hm999 selects partners who meet recognised industry standards for data security and fair play. However, hm999 is not responsible for the privacy practices of these independent providers — we encourage you to review their respective privacy policies if you wish to understand how they process your data within their game environments.

Payment partners including bKash, Nagad, Rocket, Upay, and Bangladeshi banking institutions process payment data according to their own terms and privacy policies. hm999 shares only the minimum data required to initiate and verify your transactions, and does not retain full payment credentials on our servers.

12 Changes to This Policy

hm999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes to this Policy, we will notify registered users by email and/or by posting a prominent notice on the hm999 Platform prior to the changes taking effect.

The date at the top of this Privacy Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how hm999 collects, uses, and protects your personal data. Your continued use of the hm999 Platform following the publication of any changes constitutes your acceptance of the updated Privacy Policy.

If you disagree with any changes made to this Privacy Policy, you should stop using the Platform and may request the closure of your account by contacting [email protected]. We will process your request in accordance with our account closure procedures and applicable data retention obligations set out in Section 7.

13 Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 9, or want to report a privacy concern, please contact the hm999 data protection team using the details below. All communications are handled in English.

When submitting a data rights request, please include your full registered name, your hm999 username, your registered email address, and a clear description of the right you wish to exercise or the concern you wish to raise. This will allow us to locate your account and verify your identity before processing the request. hm999 may ask for additional verification in cases where we cannot confirm your identity from the information provided.

For general platform support, account queries, or payment assistance, please also contact [email protected] and our customer support team will be glad to help. hm999 is committed to responding to all legitimate privacy and support enquiries promptly and thoroughly.