hi999 Privacy Policy

hi999 is Bangladesh's premier online betting and casino platform, accessible at hi999.im. We operate with a deep awareness that the personal data entrusted to us by our players is sensitive in nature — it relates to financial transactions, identity, and online behaviour — and we treat it accordingly.

This Privacy Policy applies to all personal data collected by hi999 through any channel, including the hi999 website, any associated mobile-optimised interface, customer support interactions (whether via live chat or email), and any promotional or bonus-related communications we send to registered players.

This policy is written in plain English to the greatest extent possible, consistent with the need for legal precision. Where technical or legal terminology is unavoidable, we have included explanations. If any part of this policy is unclear, please contact our support team — details are provided in Section 15.

For the purposes of this Privacy Policy, hi999 acts as the data controller in respect of all personal data collected from players and visitors to the hi999 platform. As the data controller, hi999 determines the purposes for which personal data is collected and the means by which it is processed.

The hi999 platform is operated under the brand name hi999 and is accessible at the domain hi999.im. All data-related queries, requests, and complaints should be directed to the hi999 data team via the contact details provided in Section 15 of this policy.

hi999 collects personal data in several ways: directly from you when you register an account or contact support; automatically when you use the platform; and from third-party sources such as payment processors. The categories of data we collect are set out below.

• Full legal name as it appears on your official government-issued identity document.
• Date of birth (used to verify that you meet the minimum age requirement of 21 years).
• Mobile phone number or email address used as your account contact method.
• Username and encrypted password chosen at registration.
• Residential address in Bangladesh (city and district).

• Copy of a government-issued photo identity document (National ID card, passport, or driving licence).
• Proof of address documentation where required.
• Selfie or facial photograph where identity document verification requires liveness confirmation.
• Proof of ownership of the payment method used (e.g., screenshot of bKash or Nagad account registered in your name).

• Details of all deposits and withdrawals including amounts in BDT, timestamps, and payment method reference numbers.
• Payment method identifiers (bKash wallet number, Nagad account number, Rocket or Upay reference) — stored in masked form.
• Transaction history including bet placement records, game session data, and bonus credit/debit events.

• IP address and approximate geolocation (country and city level) at the time of each login.
• Device type, operating system, and browser type and version.
• Session duration, pages visited, and in-platform navigation patterns.
• Game session logs including game title, provider, stake amount, outcome, and session start/end times.
• Cookie and tracking data as described in Section 8 of this policy.

• Content of live chat messages exchanged with hi999 customer support.
• Email correspondence sent to or received from hi999 support addresses.
• Records of promotional communications sent to you and whether they were opened or acted upon.

hi999 uses collected personal data for the following defined purposes only. We do not use personal data for purposes other than those stated below without first obtaining your explicit consent or unless required to do so by applicable law.

hi999 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable law — including age verification, anti-money laundering checks, and fraud reporting obligations.
• Legitimate interests: Processing carried out in the legitimate interests of hi999 or its players — including fraud prevention, platform security, and responsible gaming monitoring — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications. You may withdraw consent at any time without penalty (see Section 12).

hi999 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law. The following retention periods apply to each data category:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregated statistical analysis.

hi999 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. Your data may be shared with the following categories of third party, strictly on a need-to-know basis and subject to confidentiality obligations:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process your deposit or withdrawal transaction — typically your account reference and transaction amount. They act as independent data controllers in respect of their own platforms.
• Identity verification providers: Third-party KYC service providers may process identity document images and facial photographs on hi999's behalf to verify your age and identity. These providers operate under strict data processing agreements.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive anonymised session data (game ID, stake, outcome) required for their RNG certification and game integrity processes. No personally identifiable data is shared with game providers.
• Fraud prevention and security services: Specialist fraud detection providers may process technical data (IP address, device fingerprint) on hi999's behalf to identify and prevent fraudulent activity. They act as data processors under hi999's instruction.
• Law enforcement and regulatory authorities: hi999 will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory requirement. hi999 will notify affected players of such disclosure where legally permitted to do so.

hi999 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the platform to recognise your device on subsequent visits and to provide a more consistent, personalised experience.

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limit configurations, and preferred game lobby views. Disabling these cookies will not prevent platform access but may reduce your experience quality.
• Analytics cookies: Collect anonymised data about how players navigate the platform — which pages are visited most frequently, how long sessions last, and which features are used. This data is used to improve platform design and performance.
• Marketing cookies: Used to deliver promotional content relevant to your interests and to measure the effectiveness of hi999's promotional campaigns. These cookies are only placed with your consent.

You may manage cookie preferences through your browser settings at any time. Most browsers allow you to view, block, or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to your hi999 account. Detailed guidance on managing cookies is available through your browser's help documentation.

hi999 takes the security of your personal data seriously and has implemented a layered set of technical and organisational security measures designed to protect your data against unauthorised access, loss, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the hi999 platform is encrypted in transit using 256-bit SSL/TLS technology. The padlock icon in your browser's address bar confirms that an encrypted connection is active.
• Encrypted data storage: Sensitive data including passwords and payment method identifiers are stored in encrypted or hashed form. Plain-text passwords are never stored by hi999.
• Access controls: Access to personal data within hi999's systems is restricted to staff members who require it for their specific job function. All staff with data access are bound by confidentiality obligations and receive regular data protection training.
• Intrusion detection and monitoring: hi999's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and potential security incidents.
• Regular security assessments: hi999 conducts periodic security reviews and penetration testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

While hi999 employs robust security measures, no online platform can guarantee absolute security. In the event of a data security incident that poses a risk to your rights and interests, hi999 will notify affected players as promptly as practicable and will take all reasonable steps to contain and remediate the incident.

As a player whose personal data is processed by hi999, you have the following rights in respect of your data. To exercise any of these rights, please contact hi999 using the details in Section 15. hi999 will respond to all valid rights requests within a reasonable timeframe and at no charge.

• Right of access: You have the right to request a copy of the personal data hi999 holds about you. We will provide this in a clear, structured format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details, many fields can be updated directly in your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing exists. Note that certain data (such as transaction records) must be retained for the minimum periods set out in Section 6 regardless of an erasure request.
• Right to restriction: You may request that hi999 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling for personalisation purposes. You also have an unconditional right to object to direct marketing at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The hi999 platform is strictly intended for adults aged 21 and above. hi999 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted at the point of registration and at subsequent intervals as part of hi999's KYC process.

If hi999 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted immediately, the associated account will be closed, and any funds deposited by the underage individual will be returned to the originating payment method after any applicable deductions for bonus funds already used.

If you have reason to believe that a minor has registered or is using a hi999 account, please notify our support team immediately via live chat or by email so that we can investigate and take appropriate action without delay.

With your consent, hi999 may send you promotional communications about bonuses, new games, seasonal offers (such as Eid promotions, Pohela Boishakh offers, or BPL cricket specials), and other hi999 features. These communications may be delivered via SMS to your registered mobile number or via email.

You may withdraw consent for marketing communications at any time using any of the following methods:

• Logging in to your hi999 account and updating your communication preferences in the account settings section.
• Clicking the unsubscribe link included in any hi999 promotional email.
• Contacting hi999 customer support via live chat and requesting removal from the marketing list.
• Sending a written opt-out request to the hi999 support email address (plain text: [email protected]).

Opting out of marketing communications will not affect service-related communications such as transaction confirmations, account security alerts, or responsible gaming notifications. These service messages will continue to be sent as they are necessary for the operation of your account.

The hi999 platform does not contain links to external third-party websites. All navigation within the platform remains within the hi999 domain at hi999.im. This policy therefore governs all data processing carried out within the hi999 platform in its entirety.

In the event that hi999 introduces links to third-party content or partner sites in the future, this policy will be updated accordingly, and a clear notice will be displayed prior to any outbound link informing you that you are leaving the hi999 platform and that the third-party site's own privacy policy will apply.

hi999 reserves the right to update or amend this Privacy Policy at any time. Changes may be required to reflect updates to applicable law, new data processing activities introduced as the platform develops, or improvements to the clarity and accuracy of the policy text.

When a material change is made to this Privacy Policy, hi999 will notify registered players via a prominent notice on the platform and, where appropriate, via a direct communication to the registered contact method on your account. The updated policy will display a revised "Last Updated" date at the bottom of this page.

Your continued use of the hi999 platform following notification of a policy change constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you should discontinue use of the platform and contact support to request account closure. hi999 will handle your data in accordance with the version of the policy that was in effect at the time your data was collected, until such time as the updated policy takes effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way hi999 is handling your personal data, please contact us using the details below. Our team is available around the clock to assist with data-related queries.

• Live Chat: Available 24/7 directly on the hi999 platform — this is the fastest way to reach the team for account and data queries.
• Email (plain text — not a link): [email protected]
• Support Hours: All day, every day — Bangladesh Standard Time (BST, UTC+6).
• Languages: English and Bengali.

When contacting hi999 about a data rights request, please include your registered account username, a clear description of your request, and any relevant reference numbers or dates. This will help our team locate the relevant records and respond as efficiently as possible.