he999 Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal information the he999 platform collects from players in Bangladesh, how that information is used and stored, who it may be shared with, and what rights you hold over your own data. We encourage every player to read this document before creating an account.
How he999 Protects Your Personal Data
A quick overview of our core privacy commitments to every he999 player in Bangladesh.
End-to-End Encryption
All data transmitted between your device and the he999 platform is protected by TLS/SSL encryption. Your login credentials, payment details, and personal information are never sent in plain text over the network.
Minimal Data Collection
he999 only collects the personal information that is strictly necessary to operate your account, process payments, verify your identity, and comply with applicable anti-money-laundering obligations. We do not collect data we do not need.
No Sale of Personal Data
he999 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely to operate and improve the he999 platform and services.
Secure Payment Data Handling
Payment transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard are processed through encrypted, tokenised payment gateways. he999 does not store full card numbers or mobile banking PINs on its servers.
Player Control Over Data
You have the right to access, correct, and request deletion of the personal data he999 holds about you. Submit a data request at any time via our 24/7 live chat or by emailing [email protected] — all requests are handled in English.
Bangladesh-Focused Compliance
The he999 privacy framework is designed with Bangladesh players in mind — covering locally relevant payment methods, BST time-zone data practices, and communications exclusively in English to serve players across Dhaka, Chittagong, Sylhet, and beyond.
1. Information We Collect
When you register, use, or interact with the he999 platform, we collect certain categories of personal information. This section details exactly what data is gathered, why it is needed, and through what mechanisms it is obtained.
1.1 Information You Provide Directly
The following personal data is collected when you register an account or interact with he999 support:
- Identity Information: Full legal name, date of birth, gender (optional), and nationality as it appears on your Bangladesh National Identity Card (NID) or passport.
- Contact Information: Mobile phone number (used for bKash, Nagad, or Rocket account matching), email address, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh).
- Account Credentials: Your chosen username and a hashed (non-reversible) version of your password. he999 never stores passwords in plain text.
- Identity Verification Documents: Scanned or photographed copies of your Bangladesh NID, passport, or other government-issued photo ID submitted during the KYC (Know Your Customer) verification process. Where requested, a selfie photograph holding your ID document may also be collected.
- Payment Information: Your registered mobile banking number (for bKash, Nagad, Rocket, or Upay), Visa or Mastercard last-four digits, and bank account name and number where bank transfer is selected as a withdrawal method. Full card numbers and mobile banking PINs are never stored by he999.
- Support Communications: The content of any messages, emails, or live-chat transcripts you exchange with the he999 support team, including any attachments submitted in connection with a support request.
1.2 Information Collected Automatically
When you access the he999 platform — whether via a web browser or a mobile browser — we automatically collect certain technical information to operate and secure the platform:
- Device & Browser Data: IP address, device type (mobile, desktop, tablet), operating system, browser type and version, screen resolution, and device language settings.
- Usage Data: Pages visited on the he999 platform, session start and end times (recorded in Bangladesh Standard Time, UTC+6), game sessions opened, bets placed, bet amounts, and game outcomes.
- Transaction Logs: A complete record of all deposits, withdrawals, bonus activations, wager placements, and account balance changes, timestamped and stored for a minimum of 5 years.
- Cookie & Tracking Data: See Section 4 (Cookies & Tracking) for full details on how cookies and similar technologies are used on the he999 platform.
1.3 Information from Third Parties
In limited circumstances, he999 may receive information about you from third-party sources, including:
- Payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming the status and outcome of deposit and withdrawal transactions.
- Identity verification and fraud-screening services used as part of the KYC process.
- Game studio partners (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and Ezugi) providing game session logs required for dispute resolution and payout verification.
2. How We Use Your Data
he999 processes your personal data only for lawful, specific purposes. The table below summarises the primary purposes for which your data is used, the categories of data involved, and the legal basis under which processing occurs.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact, credentials | Contractual necessity |
| Identity verification (KYC) | Identity documents, selfie photos | Legal obligation |
| Processing deposits and withdrawals | Payment information, transaction logs | Contractual necessity |
| Fraud prevention and security monitoring | Device data, IP address, usage logs | Legitimate interest |
| Responsible Gaming obligations | Usage data, betting history, account activity | Legal obligation / legitimate interest |
| Bonus and promotion administration | Account data, transaction history | Contractual necessity |
| Customer support and dispute resolution | Support communications, game logs | Contractual necessity / legitimate interest |
| Platform analytics and improvement | Usage data, device data, cookie data | Legitimate interest |
| Marketing communications (opted-in players only) | Email address, contact preferences | Consent |
| Anti-money-laundering compliance | Identity, transaction logs, payment data | Legal obligation |
Marketing Communications
he999 may send you promotional emails and notifications about new games, cricket betting markets (BPL, IPL, T20 World Cup), seasonal offers (Eid, Pohela Boishakh, Victory Day promotions), and platform updates — but only if you have explicitly opted in to receive such communications at the time of registration or subsequently through your account settings. You may withdraw your marketing consent at any time by contacting the he999 support team via live chat or email. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before withdrawal, and it does not affect the processing of your data for non-marketing purposes.
Automated Decision-Making
he999 uses automated systems for certain fraud-detection and responsible-gaming monitoring functions. These systems may flag your account for additional review if unusual patterns are detected — for example, rapid sequential deposits from multiple payment methods, or betting patterns inconsistent with recreational play. Where an automated check results in a restriction being placed on your account, you have the right to request a human review of that decision by contacting our support team.
3. Data Sharing & Disclosure
he999 does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes. Your data may, however, be shared with carefully selected third parties in the limited circumstances described below.
Payment Processors
To process deposits and withdrawals, he999 shares the minimum necessary payment and identity information with our integrated payment providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Each of these providers operates under its own privacy policy and data-security framework. he999 does not share more data with payment providers than is required to complete the specific transaction.
Identity Verification Partners
Where enhanced KYC checks are required — for example, before processing a withdrawal above ৳50,000 — he999 may share identity document images and related data with accredited third-party identity-verification service providers. These partners are contractually bound to process your data solely for identity-verification purposes and are prohibited from using it for any other purpose.
Game Studio Providers
Live casino and slot game sessions are provided by third-party studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, and Microgaming. These studios receive a session token and user identifier to facilitate gameplay. Game studios do not receive your full name, payment details, or contact information. Game session logs may be shared between he999 and the relevant studio for the purpose of resolving bet disputes or investigating technical errors.
Legal and Regulatory Disclosure
he999 may disclose your personal information where required to do so by applicable law, by a court order, or by a lawful request from a competent regulatory or law-enforcement authority. he999 will, where legally permissible, notify you of any such disclosure request prior to complying with it.
Business Transfers
In the event that he999 undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to the applicable privacy terms that result from it.
4. Cookies & Tracking
The he999 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session preferences, and to understand how players use the platform so we can continue to improve it. This section explains what cookies are, which types he999 uses, and how you can manage your cookie preferences.
What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language, whether you are logged in, and which pages you have viewed. Cookies do not contain your password, payment details, or other sensitive personal data.
Types of Cookies Used by he999
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for the platform to function — including maintaining your login session, processing deposits, and ensuring the security of your account. | Session / Up to 30 days |
| Functional Cookies | Remember your preferences such as display settings and notification preferences to provide a more personalised experience. | Up to 12 months |
| Analytics Cookies | Collect anonymised data about how players navigate the platform — pages visited, time spent, errors encountered — to help us identify and fix usability issues. | Up to 24 months |
| Security Cookies | Detect and prevent fraudulent login attempts, suspicious device changes, and unusual account activity patterns. | Session / Up to 90 days |
Managing Your Cookie Preferences
You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies. Note that disabling essential cookies will impair the functionality of the he999 platform — in particular, you will not be able to remain logged in or process financial transactions if essential session cookies are blocked. For guidance on managing cookies in your specific browser, refer to the browser's official help documentation.
5. Data Retention
he999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data held by he999:
- Account and Identity Data: Retained for the full duration of your account's active status, plus a minimum of 5 years following permanent account closure, to satisfy anti-money-laundering record-keeping requirements.
- Transaction Records: All deposit, withdrawal, and wagering records are retained for a minimum of 5 years from the date of the transaction.
- KYC Documents: Identity verification documents are retained for a minimum of 5 years from the date of submission, or longer where required by applicable law.
- Support Communications: Live-chat transcripts and email correspondence are retained for 3 years from the date of the last communication in a given support case.
- Analytics and Usage Data: Aggregated, anonymised analytics data may be retained indefinitely. Pseudonymised usage data linked to your account is retained for a maximum of 24 months following your last login to the platform.
- Marketing Preferences: Records of your marketing consent (or withdrawal of consent) are retained for 3 years to demonstrate compliance with applicable obligations.
When your personal data is no longer required for the applicable retention period, it is securely deleted or permanently anonymised so that it can no longer be associated with your identity. Deletion requests submitted before the end of a mandatory retention period will be processed to the maximum extent permitted by law — data that must be retained for legal reasons will be restricted from active use and flagged for deletion at the earliest permissible date.
6. Your Rights
As a he999 player, you have the following rights in respect of your personal data. he999 is committed to honouring these rights promptly and without unnecessary delay. All data rights requests should be submitted in English via the support channels listed in Section 8 of this Privacy Policy.
Right of Access
You have the right to request a copy of the personal data he999 holds about you. We will provide this information within 30 days of receiving a valid request, free of charge for the first request in any 12-month period.
Right to Rectification
If any personal data he999 holds about you is inaccurate or out of date, you have the right to request that it be corrected. You can update basic contact information directly from your account settings, or contact support for changes requiring document verification.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. Erasure requests are subject to mandatory legal retention obligations.
Right to Restriction
In certain circumstances — such as while a data accuracy dispute is being resolved — you may request that he999 restrict the processing of your personal data rather than delete it. Restricted data is retained but not actively used.
Right to Data Portability
Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another service provider of your choice.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interest, in which case he999 will assess whether its legitimate grounds override your individual rights.
To exercise any of the rights above, please contact the he999 privacy team by emailing [email protected] with the subject line "Data Rights Request" or by initiating a live-chat session and requesting to speak with the data team. he999 will verify your identity before processing any data rights request to ensure that personal data is not disclosed to or altered by unauthorised parties.
7. Data Security
he999 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, and destruction.
Technical Safeguards
- TLS/SSL Encryption: All data transmitted between your browser or mobile device and the he999 platform is encrypted using Transport Layer Security (TLS 1.2 or higher). The he999 platform operates exclusively over HTTPS.
- Password Hashing: Account passwords are stored exclusively as one-way cryptographic hashes using a modern hashing algorithm. he999 employees cannot view your password in plain text, and the hashed value cannot be reversed to reveal the original password.
- Payment Tokenisation: Payment transactions processed via bKash, Nagad, Rocket, Upay, Visa, and Mastercard use tokenisation — meaning that sensitive payment credentials are replaced by a non-sensitive token before being stored or transmitted by he999's systems.
- Access Controls: Access to personal data within he999's systems is restricted on a strictly need-to-know basis. Staff access rights are reviewed regularly and revoked immediately upon role change or departure.
- Intrusion Detection: he999's infrastructure is monitored continuously for suspicious access attempts, unusual data queries, and other indicators of compromise. Automated alerts trigger immediate investigation by the security team.
Organisational Safeguards
- All he999 employees and contractors who handle personal data are bound by confidentiality obligations and receive regular data-security training.
- Third-party service providers who process personal data on he999's behalf are evaluated for security compliance before onboarding and are contractually required to maintain appropriate security standards.
- he999 maintains an incident response plan. In the event of a data security breach that is likely to result in a risk to your rights, he999 will notify affected players without undue delay, providing details of the nature of the breach, the data affected, and the remedial steps taken.
Your Responsibility
While he999 implements robust security measures on the platform side, the security of your account also depends on the precautions you take. You should use a strong, unique password for your he999 account that is not shared with any other service. You should never disclose your he999 login credentials to any third party — including individuals claiming to be he999 staff. If you suspect that your account has been accessed without your authorisation, contact our support team immediately via live chat so that your account can be secured without delay.
8. Contact & Privacy Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data he999 holds about you, please contact the he999 privacy team using the details below. All communications are handled in English and will receive a response within 5 business days (Bangladesh Standard Time, UTC+6).
- Email: [email protected] — use subject line "Privacy Enquiry" for fastest routing
- Live Chat: Available 24/7 on the he999 platform — request to speak with the Privacy or Data team
- Response Time: Within 5 business days (BST, UTC+6). Urgent security or breach reports are escalated and actioned within 24 hours.
Changes to This Privacy Policy
he999 reviews and updates this Privacy Policy periodically to reflect changes in the platform, applicable legal requirements, or industry best practice. When material changes are made, registered players will be notified via the email address on file before the updated policy takes effect. The effective date at the top of this page will be updated to reflect the date of the latest revision. Continued use of the he999 platform following notification of a material policy change constitutes acceptance of the revised Privacy Policy.
We encourage all players to review this Privacy Policy regularly so that they remain informed about how he999 collects, uses, and protects their personal information. If you do not agree with any changes to this Privacy Policy, you should contact our support team to discuss your options, including account closure.
Ready to Play at he999?
Now that you understand how we protect your data, explore Bangladesh's favourite cricket betting and casino platform. From BPL live odds to thousands of slot games — he999 has it all, with instant deposits via bKash and Nagad.