hb998 Privacy Policy — How We Handle Your Data

When you register for and use an hb998 account, we collect the following categories of personal data:

hb998 uses the personal data it collects for the following specific purposes:

• Account creation and management — to create and maintain your hb998 player account, verify your identity, and provide access to the platform's games and services.
• Payment processing — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records for your account.
• KYC and fraud prevention — to verify your age (21+ requirement) and identity in accordance with our Know Your Customer obligations, and to detect and prevent fraud, money laundering, and other prohibited activities.
• Customer support — to respond to your support requests, resolve account disputes, and maintain a record of your support interactions for quality assurance purposes.
• Responsible gaming compliance — to monitor gaming patterns that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to comply with our responsible gaming obligations under these Terms.
• Platform improvement and personalisation — to analyse how players use the hb998 platform in aggregate (not individual profiling for advertising), to fix bugs, improve game performance, and optimise the mobile experience for players in Bangladesh.

hb998 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contractual necessity — processing required to fulfil our obligations to you under the Terms and Conditions, including account management, payment processing, and access to games.
• Legal obligation — processing required to comply with applicable law, including KYC identity verification, age verification (21+ requirement), anti-money-laundering obligations, and record-keeping requirements.
• Legitimate interests — processing carried out for purposes that are in hb998's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and platform performance analysis, provided these interests are not overridden by your data protection rights.
• Consent — where you have provided explicit consent to a specific use of your data, such as receiving marketing communications. You may withdraw this consent at any time by contacting [email protected] or updating your account preferences.

hb998 does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment service providers — we share transaction data with payment processors such as the operators of bKash, Nagad, Rocket, Upay, Visa, and Mastercard gateway services, solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial data protection regulations.
• Game content providers — game studios including Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Ezugi may receive session data (such as your player ID and bet history) required to operate their games on the hb998 platform. These studios are contractually bound to use this data only for the purposes of providing their game services.
• Legal and regulatory authorities — where required by applicable law or a valid legal order, hb998 may disclose personal data to law enforcement agencies, regulatory bodies, or courts. We will notify you of such disclosures where legally permitted to do so.
• Professional advisors — we may share personal data with our legal, financial, or technical advisors where necessary for them to provide professional services to hb998, subject to confidentiality obligations.

In all cases where we share personal data with third-party service providers, we ensure that data sharing is limited to the minimum necessary for the relevant purpose, and that the recipient is bound by appropriate data protection obligations.

When you make a deposit or withdrawal using bKash, Nagad, Rocket, or Upay, the transaction is initiated through the respective mobile financial service provider's own interface and security infrastructure. hb998 receives confirmation of successful transactions and a transaction reference number, but we do not at any point receive, store, or process your mobile banking PIN, mobile banking password, or full account credentials for these services.

For card payments via Visa or Mastercard, card data is handled by our payment gateway partners in accordance with applicable payment card industry security standards. hb998 does not store your full card number on its own servers. If you believe any unauthorised transaction has been made on your payment method in connection with your hb998 account, please contact [email protected] immediately.

hb998 uses cookies and similar tracking technologies on the platform. We use three types of cookies:

• Strictly necessary cookies — these are essential for the platform to function. They maintain your login session, remember your language preference, and ensure the security of your account. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies — these help us understand how players use the hb998 platform in aggregate, which pages are most visited, and where technical errors occur. This data is used to improve platform performance and the mobile experience for players in Bangladesh. Analytics data is not linked to individual player identities.
• Functional cookies — these remember your preferences (such as your preferred deposit method) to provide a more personalised experience on subsequent visits. Functional cookies are not required for core platform operation and may be disabled through your browser settings.

Most modern mobile browsers allow you to control cookie settings. You can typically manage cookie preferences in your browser's Privacy or Settings menu. Disabling strictly necessary cookies will affect platform functionality and may prevent you from logging in or completing transactions.

hb998 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and our operational needs. Specifically: account and identity data is retained for a minimum of five years following account closure to comply with anti-money-laundering record-keeping requirements; transaction records are retained for a minimum of five years from the date of each transaction; gaming activity logs are retained for two years from the date of the relevant gaming session; support communication records are retained for two years from the date of the last interaction.

When personal data is no longer required for any purpose for which we may lawfully retain it, we will securely delete or anonymise it so that it can no longer be associated with you as an individual. Anonymised aggregate data (such as platform usage statistics) may be retained indefinitely as it no longer constitutes personal data.

As a user of the hb998 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with your registered mobile number and a clear description of your request. We will respond within a reasonable period and in any event within 30 days of receiving your request:

• Right of access — you have the right to request a copy of the personal data we hold about you. We will provide this in a commonly used electronic format within 30 days of your verified request.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure — subject to our legal retention obligations (including anti-money-laundering requirements), you may request deletion of your personal data by closing your account and submitting a written erasure request. We will delete data that we are not legally required to retain.
• Right to restrict processing — in certain circumstances (for example, where you contest the accuracy of data we hold) you may request that we restrict our processing of your personal data while the dispute is resolved.
• Right to withdraw consent — where our processing of your data is based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

hb998 will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive. In such cases we reserve the right to charge a reasonable administrative fee or to refuse to act on the request, with written reasons provided.

hb998 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our servers; access controls that restrict internal access to personal data to authorised personnel only; regular security assessments of our platform infrastructure; and secure storage of identity documents submitted during KYC verification.

While hb998 takes all reasonable steps to protect your personal data, no data transmission over the internet or mobile network can be guaranteed to be 100% secure. You are responsible for keeping your hb998 account password confidential. If you believe your account has been compromised, please contact us immediately at [email protected] so we can suspend the account and investigate.

The hb998 platform is strictly for adults aged 21 and above. hb998 does not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately close the relevant account, delete the personal data, and reverse any associated transactions where possible. If you believe that a person under 21 has registered an account on hb998, please contact us immediately at [email protected].

hb998 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make a material change to this policy, we will update the effective date at the top of this page and, where appropriate, notify registered players by displaying a notice on the platform or sending an email to the address on file. Your continued use of the hb998 platform following notification of a policy update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how we handle your personal data.