ha99 Privacy Policy
At ha99, we take the privacy of every Bangladeshi player seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and the rights you hold over your own information. We are committed to full transparency — no jargon, no hidden practices.
How ha99 Protects Your Privacy
These six principles underpin the ha99 approach to data privacy. They apply to every player account across Bangladesh, from Dhaka and Chittagong to Sylhet and Cox's Bazar.
Every connection between your device and the ha99 platform is protected by 256-bit SSL encryption. This means that data transmitted during login, deposits via bKash or Nagad, withdrawals, and gameplay cannot be intercepted by third parties on the same network.
ha99 does not sell, rent, trade, or otherwise commercially transfer your personal information to any third party for marketing or commercial purposes. Your data is used solely to operate and improve your ha99 account experience, and to meet legal obligations where required by applicable law.
All ha99 player data is stored on encrypted servers with strict access controls. Passwords are stored as one-way cryptographic hashes — not in plain text — meaning that even ha99 employees cannot retrieve your password. Financial data is tokenised and never stored in raw form.
ha99 collects only the personal data that is strictly necessary to create and manage your account, process deposits and withdrawals, verify your identity for KYC purposes, and comply with anti-money-laundering requirements. We do not collect data speculatively or in excess of operational need.
As an ha99 player, you have the right to access, correct, and in certain circumstances request the deletion of your personal data. You may also object to certain types of processing or request that your data be restricted. ha99 will respond to all valid data rights requests within 30 days.
If you have opted in to receive promotional communications from ha99 — such as SMS alerts about BPL betting offers or Eid deposit bonuses — you may withdraw that consent at any time by contacting ha99 support. Opting out of marketing does not affect your ability to use the platform.
Contents
This policy applies to all ha99 accounts active from this date onwards.
ha99 Privacy Policy — Full Text
1 Introduction
ha99 ("the Platform", "we", "us", "our") operates the online betting and casino platform accessible at ha99.io, including any mobile-optimised version thereof. This Privacy Policy describes how ha99 collects, uses, stores, shares, and protects personal data belonging to registered players ("you", "your") and visitors to the ha99 platform.
ha99 is committed to handling personal data responsibly and transparently. This policy is written in plain English so that every player — whether based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or anywhere else in Bangladesh — can clearly understand their privacy rights and how those rights are upheld.
This Privacy Policy should be read in conjunction with the ha99 Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.
2 Personal Data We Collect
ha99 collects personal data through several means: directly from you when you register or use the platform, automatically through your device and browser when you visit the site, and from third-party sources such as payment processors and identity verification services. The categories of personal data we may collect include:
2.1 Identity and Contact Data
- Full legal name (as it appears on your national identity card or passport)
- Date of birth (to verify that you meet the 21+ age requirement)
- Mobile phone number registered to your bKash, Nagad, Rocket, or Upay account
- Email address (if provided during registration or support enquiries)
- Residential address (required for enhanced KYC verification)
- Government-issued identity document number (NID, passport, or driving licence)
2.2 Financial and Transaction Data
- Mobile wallet numbers used for deposits and withdrawals (bKash, Nagad, Rocket, Upay)
- Transaction amounts, dates, times, and reference numbers
- Deposit and withdrawal history associated with your ha99 account
- Bonus redemption history and wagering activity records
2.3 Technical and Usage Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser version
- Pages visited, time spent on each page, and navigation paths within ha99
- Game sessions played, bet amounts, game outcomes, and session durations
- Login timestamps and session activity logs
2.4 Communications Data
- Records of live chat conversations with ha99 support agents
- Email correspondence submitted via our support channels
- Feedback, complaints, and dispute records
- SMS communications sent to your registered mobile number
3 How We Use Your Personal Data
ha99 uses personal data only for the purposes set out below. We do not use your data in ways that are incompatible with the purpose for which it was originally collected.
| Purpose | Data Categories Used |
|---|---|
| Creating and managing your ha99 account | Identity, contact, and financial data |
| Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay | Financial and transaction data |
| Verifying your age and identity (KYC compliance) | Identity data, government ID documents |
| Detecting and preventing fraud, money laundering, and bonus abuse | Identity, financial, technical, and usage data |
| Providing customer support and resolving disputes | Identity, contact, and communications data |
| Personalising your platform experience and game recommendations | Technical and usage data |
| Sending promotional communications (with your consent) | Contact data |
| Improving platform performance and fixing technical issues | Technical and usage data |
| Complying with applicable legal and regulatory obligations | All categories as required by law |
4 Legal Basis for Processing
ha99 processes personal data on one or more of the following legal bases:
- Contractual necessity: Processing is necessary to fulfil our obligations to you under the ha99 Terms & Conditions, including account management, payments, and customer support.
- Legal obligation: Processing is required to comply with applicable anti-money-laundering laws, fraud prevention regulations, and identity verification requirements.
- Legitimate interests: Processing is necessary for ha99's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement, provided that such interests are not overridden by your rights and freedoms.
- Consent: Where ha99 processes data based on your consent — for example, sending marketing SMS messages about BPL betting promotions or Eid bonus offers — you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.
5 Data Sharing and Disclosure
ha99 does not sell, rent, or commercially share your personal data with third parties. We may share your data in the following limited circumstances:
5.1 Payment Processors
When you make a deposit or request a withdrawal, the minimum data necessary to complete the transaction is shared with the relevant mobile financial service provider (bKash, Nagad, Rocket, or Upay). These providers operate under their own privacy policies and are contractually obligated to handle your data securely.
5.2 Game Providers
To facilitate gameplay, ha99 shares a unique anonymised player token with certified third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. No directly identifiable personal information such as your name, mobile number, or NID number is passed to game providers.
5.3 Identity Verification Services
For KYC purposes, ha99 may share identity documents with accredited third-party identity verification service providers. These providers are bound by confidentiality agreements and are permitted to use your data solely for verification purposes on behalf of ha99.
5.4 Legal and Regulatory Disclosure
ha99 may disclose personal data where required to do so by applicable law, court order, or government authority. In such cases, ha99 will disclose only the minimum data required and will, where legally permissible, notify the affected player prior to disclosure.
5.5 Business Transfers
In the event of a merger, acquisition, or sale of all or part of ha99's business, personal data held by ha99 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and of any resulting changes to this Privacy Policy.
6 Cookies and Tracking Technologies
ha99 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit ha99.io. They allow the platform to remember your preferences, maintain your login session, and analyse how the site is used.
6.1 Types of Cookies Used
- Essential cookies: Required for core platform functionality such as login session management, game loading, and deposit flows. These cannot be disabled without breaking core features.
- Analytical cookies: Used to understand how players navigate the platform, which games are most popular, and where technical issues arise. Data collected is aggregated and anonymised.
- Preference cookies: Store your language preference, notification settings, and other personalisation choices.
- Marketing cookies: Used only where you have explicitly consented, to personalise promotional content and measure the effectiveness of campaigns. You may opt out at any time.
You may control cookie behaviour through your browser settings. Please note that disabling essential cookies will impair your ability to use the ha99 platform.
7 Data Retention
ha99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
- Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements.
- Transaction records: Retained for a minimum of seven (7) years from the date of the transaction, consistent with financial record-keeping obligations.
- KYC and identity documents: Retained for a minimum of five (5) years following the conclusion of the business relationship or the completion of the KYC process, whichever is later.
- Support communications: Retained for three (3) years from the date of the last interaction, to enable review of complaint histories and recurring issues.
- Marketing consent records: Retained until you withdraw your consent, and for one (1) year thereafter as evidence of the consent transaction.
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.
8 Data Security
ha99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and ha99 servers
- AES-256 encryption for personal data stored at rest on ha99 servers
- One-way cryptographic hashing (bcrypt) for all stored passwords — ha99 employees cannot view your password
- Tokenisation of financial data so that raw mobile wallet numbers are never stored in plaintext
- Role-based access controls ensuring that only authorised personnel can access personal data relevant to their specific function
- Regular internal security audits and penetration testing by qualified security professionals
- Automatic session timeouts after a period of inactivity to reduce the risk of unauthorised access on shared devices
While ha99 takes all reasonable precautions, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, ha99 will notify affected players without undue delay.
9 Your Privacy Rights
As an ha99 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ha99 support. We will respond to all valid requests within 30 days.
You may request a copy of the personal data ha99 holds about you, along with information about how it is used and with whom it is shared.
If any personal data ha99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected.
In certain circumstances you may request that ha99 delete your personal data. This right is subject to legal retention obligations that may override it.
You may request that ha99 restrict the processing of your data in certain situations, such as while a dispute about accuracy is being resolved.
Where processing is based on your consent or on a contract, you may request your data in a structured, machine-readable format for transfer to another service.
You may object to processing carried out on the basis of ha99's legitimate interests, including profiling for personalised game recommendations.
10 Children's Privacy
The ha99 platform is strictly for adults aged 21 years and above. ha99 does not knowingly collect, use, or retain any personal data from individuals under the age of 21. If ha99 becomes aware that personal data has been collected from an underage individual, that data will be permanently deleted and the associated account will be permanently closed.
If you are a parent or guardian and believe that a minor in your care has registered on ha99, please contact ha99 support immediately at [email protected] (plain text — not a clickable link) so that the matter can be investigated and resolved promptly.
11 Third-Party Services and Links
The ha99 platform may reference the names of third-party services such as bKash, Nagad, Rocket, Upay, Evolution Gaming, Pragmatic Play, and others in the context of payment methods and game providers. ha99 is not responsible for the privacy practices of these third-party services. We encourage you to review the privacy policies of any third-party service with which you share data independently of ha99.
ha99.io does not contain links to external third-party websites for commercial or advertising purposes. Any reference to a third-party brand name within ha99 content is solely for the purpose of identifying a payment method or game provider used on the ha99 platform.
12 Changes to This Privacy Policy
ha99 reserves the right to update this Privacy Policy at any time. When material changes are made — meaning changes that significantly affect how your personal data is collected, used, or shared — ha99 will notify registered players via the platform notification system, by SMS to your registered mobile number, or by email where an address has been provided. The updated policy will take effect no sooner than seven (7) days after notification.
Non-material changes, such as clarifications and typographical corrections, may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of ha99 after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.
13 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ha99, please contact us using the following details:
- Live Chat: Available 24/7 directly within the ha99 platform. Average response time: 2–5 minutes.
- Email: [email protected] (plain text — not a clickable link)
- Support Hours: 24 hours a day, 7 days a week, 365 days a year including all Bangladesh public holidays.
ha99 support agents handling data privacy requests are trained to process access, rectification, erasure, and objection requests in accordance with this policy. All privacy-related communications are treated with strict confidentiality.
Your Privacy Is Safe With ha99
Still have questions about how your data is protected? Our 24/7 support team is ready to help. You can also explore the full ha99 platform — from live cricket betting to premium casino games — knowing your personal information is secured at every step.
21+ only. Please play responsibly. For players in Bangladesh aged 21 and above.