Privacy Policy — nh999

1 Introduction

This Privacy Policy ("Policy") describes how nh999 ("we", "us", "the Company", "the Platform") collects, processes, stores, and shares the personal data of individuals ("you", "the Player", "the Member") who register for and use the nh999 website located at https://nh999.io and all associated services, including online casino games, sports betting markets, live dealer tables, promotional programmes, and customer support channels.

nh999 is an English-language online gaming platform designed for adult players in Bangladesh. All services are provided in English, and all communications regarding your personal data will be conducted in English. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference into the overall framework governing your use of the Platform.

By completing account registration on nh999, making a deposit, or otherwise accessing any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data processing activities described herein. If you do not agree with any aspect of this Policy, you should not use the Platform and should contact us to request account closure.

2 Data Controller

For the purposes of this Privacy Policy, nh999 acts as the data controller in respect of all personal data collected from players through the Platform. As data controller, nh999 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions, concerns, or requests relating to how nh999 processes your personal data, you may contact our Data Protection team directly using the contact details provided in Section 15 of this Policy. We are committed to responding to all data-related enquiries promptly and thoroughly.

3 Data We Collect

3.1 Registration Data

When you create an account on nh999, we collect the following personal information that you provide directly to us:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify that you are 21 years of age or older)
• Residential address, including district, city, and postcode
• Email address
• Mobile phone number (for SMS verification and two-factor authentication)
• Preferred username and encrypted account password

3.2 Identity Verification (KYC) Data

In accordance with our Know Your Customer obligations and responsible gaming commitments, we collect and process the following identity documents for all members:

• National ID card (NID), passport, or other government-issued photo identification
• Proof of residential address (utility bill, bank statement, or similar official document dated within the last three months)
• Proof of payment method ownership (screenshot or confirmation of bKash/Nagad/Rocket account in your name, or card front image with middle digits obscured)
• Source of funds documentation where requested for AML compliance purposes

3.3 Financial Transaction Data

We collect and retain records of all financial transactions conducted through your nh999 account, including deposit amounts, withdrawal amounts, payment method identifiers (such as the last four digits of a card, or the registered mobile number for a bKash/Nagad account), transaction timestamps, transaction reference numbers, and the currency amounts in BDT (৳).

3.4 Gaming and Betting Activity Data

We automatically record your activity on the Platform, including games played, bets placed, wager amounts, game outcomes, session duration, bonus usage, and sports betting selections. This data is used for account management, dispute resolution, fraud detection, and responsible gaming monitoring.

3.5 Technical and Device Data

When you access nh999, we automatically collect certain technical information, including:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Referring website URL (if you arrived at nh999 via a link)
• Pages visited, time spent on each page, and navigation path through the Platform
• Session timestamps and login/logout records

3.6 Communications Data

We retain records of all communications between you and nh999, including live chat transcripts, support emails, WhatsApp messages sent to our customer support number, and any written complaints or disputes you raise. These records are retained for quality assurance and dispute resolution purposes.

4 How We Use Your Data

nh999 uses your personal data only for defined, legitimate purposes. The following table sets out each purpose for which we process your data and the corresponding legal basis under which we do so:

4.1 Account Management

We use your registration data to create, maintain, and administer your nh999 player account. This includes processing your login credentials, maintaining your account balance, applying responsible gaming limits, and sending you transactional notifications (deposit confirmations, withdrawal updates, and security alerts).

4.2 Identity Verification and Fraud Prevention

We use your KYC data to verify your identity, confirm that you meet the minimum age requirement of 21 years, screen your account against self-exclusion registers, and detect fraudulent activity such as the use of stolen payment methods or the creation of duplicate accounts. This processing is necessary for legal compliance and the prevention of financial crime.

4.3 Payment Processing

We share your financial transaction data with our payment partners — including the operators of bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to the extent necessary to process your deposits and withdrawals. Payment processing is conducted exclusively in Bangladeshi Taka (BDT). We do not store your full card number or mobile banking PIN on our systems.

4.4 Customer Support

We use your communications data and account history to assist you when you contact our support team via live chat, email, or WhatsApp. Access to your account history allows our agents to resolve your query efficiently without requiring you to repeat information unnecessarily.

4.5 Responsible Gaming Monitoring

We analyse your gaming activity data to identify patterns that may indicate problem gambling behaviour, such as rapidly escalating wager amounts, unusually long session durations, or repeated deposits following significant losses. Where such patterns are detected, our responsible gaming team may reach out proactively to offer support tools including deposit limits, cooling-off periods, or self-exclusion. Full details of these tools are available on our Responsible Gaming page.

4.6 Legal and Regulatory Compliance

We process and retain certain categories of your personal data to fulfil our obligations under applicable anti-money-laundering (AML) regulations, counter-terrorism financing (CTF) requirements, and other applicable legal duties. This includes retaining transaction records and KYC documentation for legally mandated periods even after your account has been closed.

4.7 Platform Improvement and Analytics

We use aggregated and anonymised technical and gaming activity data to improve the performance, design, and functionality of the nh999 Platform. This analytics processing does not identify you personally. We use this data to understand which game categories are most popular among Bangladeshi players, how users navigate the site, and where technical issues are most commonly reported.

4.8 Marketing Communications

Where you have provided your explicit consent to receive marketing communications, we may send you promotional emails or SMS messages informing you of new games, seasonal offers (such as BPL season bonuses, Eid promotions, or Pohela Boishakh specials), and reload bonus opportunities. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting support at [email protected].

5 Legal Basis for Processing

nh999 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and nh999 — including account creation, payment processing, game delivery, and withdrawal fulfilment.
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC identity verification, AML transaction monitoring, and mandatory record-keeping obligations.
• Legitimate Interests: Processing carried out for nh999's legitimate business interests, including fraud detection, security monitoring, responsible gaming oversight, and platform improvement, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — principally in the context of optional marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on return visits and to store certain preferences or session information. nh999 uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the Platform.

6.2 Categories of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a gaming session and security cookies that protect your account against cross-site request forgery attacks. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences, such as your preferred game lobby view, language setting, and responsible gaming limit configurations. Disabling these cookies may affect your experience on the Platform.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the Platform — page views, session duration, error reports. This data is used solely for internal platform improvement and is not used to identify individual users.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your interests and past activity on the Platform. These cookies are only placed with your consent.

6.3 Managing Cookies

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may impair certain features of the Platform (including maintaining your login session). Instructions for managing cookies in common browsers are available via the help menus of those browsers. nh999 does not respond to browser "Do Not Track" signals at this time.

7 Sharing Your Personal Data

nh999 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

7.1 Payment Service Providers

We share the minimum necessary transaction data with our payment partners — bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and data protection commitments.

7.2 KYC and Identity Verification Providers

We use third-party identity verification services to validate your identity documents during the KYC process. These providers process your identity data on our behalf under data processing agreements that bind them to strict confidentiality and security obligations.

7.3 Game Content Providers

To deliver casino games and live dealer experiences, nh999 integrates with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the minimum session-level data required to authenticate your game session. They do not receive your full KYC documentation or financial records.

7.4 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or legal process. We will notify you of such disclosure wherever legally permitted to do so.

7.5 Business Transfers

In the event that nh999 undergoes a corporate transaction such as a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

8 International Data Transfers

nh999 operates as a platform serving players in Bangladesh. Some of our service providers — particularly game studios and KYC technology platforms — may be located in or process data from jurisdictions outside Bangladesh. Where personal data is transferred internationally, nh999 ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements that impose data protection standards equivalent to those applied within Bangladesh.

By using the Platform, you acknowledge that your personal data may be transferred to, stored on, and processed by systems located outside of Bangladesh, subject always to the safeguards described in this Policy.

9 Data Retention

nh999 retains your personal data only for as long as necessary to fulfil the purposes described in this Policy, subject to any longer retention periods required by applicable legal obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to any individual player.

10 Your Data Rights

As a player whose personal data is processed by nh999, you hold the following rights in respect of that data. To exercise any of these rights, please contact us at [email protected] or via live chat in your account dashboard.

• Right of Access: You have the right to request a copy of the personal data nh999 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it promptly.
• Right to Erasure: Subject to our legal retention obligations (particularly those relating to AML and KYC compliance), you may request that we delete your personal data. Where deletion is not immediately possible due to legal requirements, we will inform you of the applicable retention period.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your personal data — for example, while a correction request is being verified, or where you have objected to processing and we are assessing the grounds for that objection.
• Right to Data Portability: Where processing is based on your consent or is necessary for the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of our legitimate interests, though we may be entitled to continue such processing if we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

11 Security Measures

nh999 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the nh999 Platform is encrypted using industry-standard TLS protocols. The padlock icon in your browser confirms that your connection is secure.
• Encrypted Data Storage: Sensitive personal data, including KYC documents and financial records, is stored in encrypted format on access-controlled servers. Encryption keys are managed separately from the encrypted data.
• Two-Factor Authentication (2FA): We strongly recommend that all players enable SMS-based two-factor authentication on their nh999 account. 2FA provides an additional layer of protection against unauthorised access even if your password is compromised.
• Access Controls: Access to player data by nh999 staff is governed by role-based access control policies. Only personnel with a verified operational need may access personal data, and all such access is logged and audited.
• Fraud Detection Systems: We operate automated fraud detection tools that continuously monitor account activity for anomalous patterns, including unusual login locations, rapid payment cycling, and atypical betting behaviour.
• Regular Security Reviews: nh999 conducts periodic internal security reviews and vulnerability assessments to identify and remediate potential weaknesses in our data protection infrastructure.

While nh999 applies robust security measures, no online platform can guarantee absolute security against all threats. You are responsible for keeping your login credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

12 Children and Minors

nh999 is strictly an adult platform. Our services are intended exclusively for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. If you are under 21, you must not use this Platform, create an account, or provide any personal data to nh999 under any circumstances.

If nh999 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the personal data in question (subject to any mandatory retention obligations), and report the matter to our responsible gaming compliance team. Any deposits made by or on behalf of an underage individual will be returned and any associated winnings will be voided.

If you are a parent or guardian and believe that a person under your care has registered on nh999, please contact us immediately at [email protected] so that we can take appropriate action without delay.

13 Third-Party Links

The nh999 Platform may contain references to the game studios and payment providers that power our services. While nh999 does not embed external outbound links to third-party websites within its main content pages, the game launchers provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate under their own technical environments and privacy frameworks.

nh999 is not responsible for the privacy practices of any third-party game provider, payment processor, or technology partner operating their own independent systems. We encourage you to review the privacy policies of any third-party service you interact with through the Platform.

14 Changes to This Privacy Policy

nh999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes to this Policy, we will notify registered players via email and/or a prominent notice on the Platform at least 14 calendar days before the changes take effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. We recommend that you review this Policy periodically to stay informed about how nh999 protects your personal data. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

If you object to any changes made to this Privacy Policy, you should discontinue use of the Platform and may request account closure by contacting our support team. We will handle the closure of your account and the treatment of your personal data in accordance with the version of this Policy that was in effect at the time you last used the Platform, subject to our mandatory legal retention obligations.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way nh999 handles your personal data, please do not hesitate to get in touch with our Data Protection and Support team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through your nh999 account dashboard
• WhatsApp: +880 1800 000 999 (available 8AM–11PM BST)

When contacting us about a data rights request, please include your registered username and email address so that we can locate your account and respond to your request efficiently. For security purposes, we may ask you to complete a brief identity verification step before processing any request to access, amend, or delete your personal data.

We are committed to resolving all privacy-related enquiries promptly, professionally, and in strict accordance with the terms of this Policy. If you are unsatisfied with our response to a data rights request, you may have the right to escalate your concern to the appropriate regulatory authority in your jurisdiction.