hk99 Privacy
Policy

Introduction

hk99 is Bangladesh's trusted online betting and casino platform, accessible at hk99.biz. We understand that when you choose to share your personal information with us, you are placing a significant degree of trust in our organisation. We take that responsibility seriously and have built our data practices around the principles of transparency, purpose limitation, data minimisation, accuracy, security, and accountability.

This Privacy Policy applies to all personal data processed in connection with your use of hk99.biz, including data collected during account registration, identity verification (KYC), deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, participation in games and betting markets, and any communication you have with our customer support team.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming page, both of which form part of the overall agreement between you and hk99.

Data Controller

For the purposes of this Privacy Policy, hk99 acts as the data controller in respect of all personal data collected from players using the hk99.biz platform. As data controller, hk99 is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data-related queries, access requests, correction requests, and deletion requests should be directed to the hk99 data team via our support channel at [email protected]. We will acknowledge all formal data requests within 3 business days and respond in full within 14 business days of receipt.

Data We Collect

hk99 collects only the personal data that is necessary for us to provide, operate, and improve the services available on hk99.biz. The categories of data we may collect are set out in the table below:

How We Collect Your Data

hk99 collects personal data through the following channels and methods:

4.1 Direct Collection

Data you provide directly to us when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or respond to a survey. This is the primary source of the personal data we hold about you.

4.2 Automated Collection

When you visit and interact with hk99.biz, we automatically collect certain technical and usage data using cookies, log files, and similar tracking technologies. This includes your IP address, device fingerprint, browser information, pages viewed, session duration, and in-game activity. This data is collected automatically each time you access the platform and is used for security, fraud prevention, and service improvement purposes.

4.3 Third-Party Sources

hk99 may receive limited personal data about you from third-party sources in certain circumstances. For example, our payment partners (bKash, Nagad, Rocket, Upay) may share transaction confirmation data with us to reconcile deposits and withdrawals. Identity verification service providers may share verification outcome data (verified / not verified) in response to a KYC check initiated by us. hk99 does not purchase data lists from third-party data brokers.

4.4 Game Provider Data

When you play games on hk99 powered by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi, those providers may collect session-level gameplay data for the purpose of fair play assurance and RNG certification. This data is governed by the respective provider's own data practices and is shared with hk99 only in aggregate or anonymised form unless a specific player dispute or compliance investigation requires otherwise.

How We Use Your Data

hk99 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your hk99 player account, including processing login authentication and enforcing account security measures.
• Identity & Age Verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity as part of our KYC process, ensuring compliance with applicable regulations.
• Transaction Processing: To process deposits in BDT via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, and to process withdrawal requests to your verified payment method.
• Customer Support: To respond to your queries, complaints, and appeals submitted via live chat or email, and to maintain records of such communications for quality assurance and dispute resolution purposes.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the platform. We use automated systems alongside manual review processes for this purpose.
• Responsible Gaming: To monitor betting patterns and account activity for signs of problem gambling behaviour, to enforce deposit limits, loss limits, and self-exclusion restrictions set by you, and to proactively reach out where our responsible gaming algorithms flag a concern.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable laws, including financial record-keeping requirements, anti-money laundering (AML) obligations, and any lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse usage data in aggregate form to understand how players interact with hk99.biz and to continuously improve the performance, design, and content of the platform.
• Promotional Communications: Where you have opted in to receive marketing communications, to send you relevant promotional offers, bonus notifications, and platform updates by email or SMS. You may opt out of marketing communications at any time by contacting support.

Legal Basis for Processing

hk99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and hk99 — including account creation, transaction processing, and customer support — is carried out on the basis that it is necessary for the performance of that contract.
• Legal Obligation: Processing required to comply with applicable laws — including KYC/AML obligations, financial record retention, and lawful requests from authorities — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of hk99's legitimate interests in operating a safe, fair, and sustainable platform, provided those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

hk99 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

7.1 Payment Service Providers

We share transaction data with payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank solely for the purpose of processing your deposits and withdrawals. Each payment provider operates under their own privacy policy and security standards.

7.2 Identity Verification Providers

Where we use a third-party service to assist with KYC verification, we share the minimum necessary identity data (name, NID number, date of birth) with that provider. Verification providers are contractually bound to use this data only for the verification purpose and to maintain appropriate security standards.

7.3 Game Studios & Technology Providers

Game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive a player session token when you launch their games on hk99. This token allows the game to load your balance and record game outcomes in hk99's account system. The token does not expose your full personal data to the game provider.

7.4 Legal & Regulatory Authorities

hk99 may disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where required to do so by applicable law, court order, or other legal process. We will notify you of such disclosure where we are legally permitted to do so.

7.5 Business Transfers

In the event that hk99 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players in advance of any such transfer and the privacy terms applicable to their data following the transfer.

Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, language preference, and browsing activity — and are widely used to make websites function correctly and to provide analytics data to site operators.

8.2 How hk99 Uses Cookies

hk99 uses the following categories of cookies on hk99.biz:

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that maintain your login state, security cookies that prevent cross-site request forgery, and cookies that support the deposit and withdrawal flow. These cannot be disabled without breaking core platform functionality.
• Performance Cookies: Used to collect anonymised data about how visitors use hk99.biz — including which pages are visited most frequently and how long sessions last. This data is used to improve platform performance and content. No personally identifiable information is collected by performance cookies.
• Functional Cookies: Used to remember your preferences — such as your preferred game category, responsible gaming tool settings, and notification preferences — to personalise your experience across sessions.
• Analytics Cookies: Used to understand aggregate user behaviour on the platform. Analytics data is processed in aggregate and is not linked to individual player profiles for marketing purposes.

8.3 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of hk99.biz and may prevent you from logging in or completing transactions. Instructions for managing cookies are available in your browser's help documentation.

Data Security

hk99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and alteration. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and hk99.biz is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols. Look for the padlock icon in your browser address bar when using hk99.biz.
• Encrypted Data Storage: Sensitive personal data — including NID numbers, payment method references, and KYC documents — is stored in encrypted form on our servers. Encryption keys are managed separately from the encrypted data stores.
• Access Controls: Access to personal data within the hk99 organisation is restricted on a strict need-to-know basis. All internal data access events are logged and reviewed as part of our ongoing security audit programme.
• Two-Factor Authentication: hk99 supports SMS OTP two-factor authentication for player accounts. We strongly recommend that all players enable 2FA to add an additional layer of protection to their account credentials.
• Penetration Testing: hk99.biz undergoes periodic security assessments conducted by qualified security professionals to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that affects your personal data, hk99 will notify affected players within 72 hours of becoming aware of the breach, where required and feasible.

Data Retention

hk99 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, subject to any overriding legal, regulatory, or contractual retention obligations. The following retention periods apply as a general guide:

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with hk99's data disposal procedures.

Your Data Rights

As a player on hk99.biz, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond within 14 business days.

• Right of Access: You have the right to request a copy of the personal data that hk99 holds about you, along with information about how that data is being used and with whom it has been shared.
• Right to Rectification: If any personal data hk99 holds about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure: You may request that hk99 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that legal retention obligations may prevent full erasure in some cases.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transferred to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. hk99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Children's Privacy

hk99 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory date-of-birth verification, and all accounts are subject to identity verification to confirm age eligibility.

If hk99 becomes aware that personal data has been collected from an individual who does not meet the 21+ age requirement, that account will be closed immediately, all associated data will be deleted or anonymised as required, and any deposits made will be returned to the payment source. Parents or guardians who believe a minor has registered an account on hk99.biz should contact our support team immediately at [email protected].

Third-Party Links

hk99.biz may from time to time display references to or information about third-party services including payment providers and game studios. This Privacy Policy applies solely to personal data collected and processed by hk99 in connection with your use of hk99.biz. hk99 is not responsible for the privacy practices of third-party websites or services, even where those parties are referenced on the hk99 platform.

We encourage you to read the privacy notices of any third-party service you interact with — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to understand how those parties handle your personal data in the context of their own services.

Policy Updates

hk99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes to the services we offer. When material changes are made, we will update the "Last Updated" date at the top of this document and, where reasonably practicable, notify registered players by email or in-platform notification before the changes take effect.

Your continued use of hk99.biz following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to hk99's data practices generally, please contact us using the details below:

For urgent account security concerns — such as suspected unauthorised access to your hk99 account — please contact our live chat support directly on hk99.biz for an immediate response.