Your Data, Your Rights — Transparency First
hg99 Privacy Policy
This Privacy Policy explains how hg99 collects, uses, stores, shares, and protects the personal information of players who register and use the hg99 platform at hg99.club. hg99 is committed to handling your personal data with care, transparency, and in full respect of your privacy rights. Please read this Policy carefully before creating an account or submitting any personal information to hg99.
Our Commitment
Privacy at a Glance
Before reading the full Policy, here are the six core privacy principles that guide how hg99 handles every player's personal information.
Secure by Design
All data transmitted between your device and hg99's servers is protected by SSL/TLS encryption. Account credentials are stored using industry-standard hashing. hg99 does not store plain-text passwords under any circumstances.
Purpose Limitation
hg99 collects only the personal data that is necessary for operating your account, processing payments, verifying identity, and complying with anti-money-laundering obligations. We do not collect data speculatively or for unrelated purposes.
No Sale of Personal Data
hg99 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is shared only with the service providers that are strictly necessary to operate the hg99 platform on your behalf.
Transparency
This Privacy Policy is written in plain English so you understand exactly what data hg99 holds about you, why we hold it, and how long we keep it. There are no hidden data practices. If our practices change materially, we will notify you via the contact details registered on your account.
Your Control
You have the right to access, correct, and request deletion of your personal data held by hg99, subject to our legal retention obligations. Requests can be submitted at any time by contacting [email protected] from your registered email address.
Payment Data Protection
hg99 does not store full card numbers or mobile banking PINs. Payment transactions are processed through secure, certified payment gateways. bKash, Nagad, Rocket, and Upay integrations comply with the security standards of those respective providers.
Section 1
Information We Collect
hg99 collects personal information from you in three primary ways: information you provide directly during registration and account use, information generated automatically through your interaction with the platform, and information received from third-party service providers such as payment processors and identity verification services.
Information You Provide Directly
When you register an hg99 account or use our services, you may provide the following categories of personal data:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, NID or passport number, photograph | Registration & KYC verification |
| Contact Data | Bangladesh mobile number, email address, city of residence | Registration |
| Financial Data | bKash/Nagad/Rocket/Upay wallet number, card type, last four digits of card | Deposit & withdrawal processing |
| Account Credentials | Username, hashed password, security preferences | Registration & account management |
| Communications Data | Support tickets, live chat transcripts, email correspondence | Customer support interactions |
Automatically Collected Information
When you access hg99.club, our systems automatically record certain technical and behavioural data to ensure the platform functions correctly, to detect fraud, and to improve the player experience. This data includes:
- Device information: device type, operating system, browser version, screen resolution, and device fingerprint.
- Network information: IP address, approximate geographic location derived from IP, internet service provider.
- Session data: pages visited, games launched, bet amounts placed, session duration, login timestamps, and logout timestamps.
- Cookie data: see the Cookies section of this Policy for full details of tracking technologies in use.
Section 2
How We Use Your Data
hg99 processes your personal data only where a lawful basis exists for doing so. The primary lawful bases hg99 relies upon are: performance of a contract with you (operating your account), compliance with legal obligations (KYC and AML requirements), and our legitimate interests in operating a secure, fraud-free gaming platform.
Account Creation & Management: Your identity and contact data are used to open and maintain your hg99 account, authenticate your logins, process your deposits and withdrawals, and send you transactional communications such as payment confirmations and security alerts.
Identity Verification & AML Compliance: hg99 is required to verify the identity of all players before processing withdrawals. Your identity documents and financial data are used to complete KYC checks and to fulfil our anti-money-laundering (AML) obligations. This processing is mandatory and your account cannot be fully activated without it.
Platform Improvement & Analytics: Anonymised and aggregated session data, game performance data, and navigation data help hg99 identify popular features, diagnose technical issues, and improve the overall player experience. This analysis does not identify you personally.
Marketing Communications: With your explicit consent at the time of registration, hg99 may send you promotional offers, bonus notifications, and updates about new games or cricket betting markets. You may withdraw your marketing consent at any time by contacting [email protected] or by following the unsubscribe link in any marketing email.
Fraud Prevention & Security: hg99 uses device fingerprinting, IP analysis, and behavioural monitoring to detect and prevent fraud, bonus abuse, money laundering, and multiple-account registration. This processing is in hg99's legitimate interest as a platform operator and in the interest of the broader player community.
Responsible Gaming: hg99 may use your gameplay data — including bet frequency, session duration, and deposit patterns — to identify indicators of problem gambling behaviour. This data may be used to trigger responsible gaming prompts, apply account-level limits, or contact you with welfare information. This processing is in your vital interest and in the interest of public health.
Section 4
Data Sharing & Third Parties
hg99 does not sell your personal data. We share personal information with third parties only where it is strictly necessary for the operation of the hg99 platform, where we are legally required to do so, or where you have given explicit consent. All third-party service providers who process personal data on hg99's behalf are bound by data processing agreements that require them to handle your data securely and only for the specific purposes authorised by hg99.
Categories of Third-Party Recipients
- Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your deposit and withdrawal transactions. Each provider operates under its own privacy policy.
- Identity verification services: hg99 may use third-party KYC verification providers to validate your National ID or passport. These providers receive your identity documents solely for the purpose of verification and are prohibited from using your data for any other purpose.
- Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated game studios may receive anonymised session tokens to enable game functionality. They do not receive your name, NID, or financial account details.
- IT and cloud infrastructure providers: hg99's platform is hosted on secure cloud infrastructure. The hosting provider processes server-level data (including IP logs) as a data processor acting on hg99's instructions.
- Legal and regulatory authorities: hg99 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required by applicable law, including disclosures required under anti-money-laundering legislation.
Section 5
Data Retention & Security
hg99 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following table summarises hg99's standard data retention periods by category.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years post-closure | AML compliance and dispute resolution |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| KYC Documents | 5 years from account closure | Regulatory compliance |
| Customer Support Logs | 3 years from last interaction | Dispute resolution and quality assurance |
| Analytical & Session Data | 13 months (anonymised thereafter) | Platform analytics and fraud detection |
| Marketing Consent Records | Until consent is withdrawn plus 2 years | Evidence of consent for compliance purposes |
Security Measures
hg99 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:
- SSL/TLS encryption for all data in transit between your browser and hg99's servers.
- AES-256 encryption at rest for sensitive stored data including identity documents and financial records.
- Role-based access controls ensuring that only authorised hg99 personnel can access personal data, and only to the extent required for their role.
- Regular security assessments and vulnerability testing of the hg99 platform and infrastructure.
- Two-factor authentication (2FA) available for all player accounts and enforced for hg99 administrative systems.
- Automated fraud monitoring systems that flag unusual access patterns or account behaviour for manual review.
Section 6
Your Privacy Rights
As a player registered on hg99, you have the following rights in relation to the personal data hg99 holds about you. To exercise any of these rights, contact hg99's support team at [email protected] from your registered email address. hg99 will respond to all valid privacy rights requests within 30 days of receipt.
Right of Access: You have the right to request a copy of the personal data hg99 holds about you, together with information about how it is used and with whom it is shared. This is sometimes referred to as a Subject Access Request (SAR). hg99 will provide this information free of charge in a structured, readable format within 30 days.
Right to Rectification: If you believe that any personal data hg99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact [email protected] with the correct information and supporting documentation where applicable.
Right to Erasure: You may request that hg99 delete your personal data. This right is subject to our legal retention obligations — hg99 is required to retain certain categories of data (such as KYC documents and financial records) for defined periods under applicable law. Where erasure is possible, hg99 will action your request promptly.
Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of data or where processing is unlawful — you may request that hg99 restrict the processing of your personal data while the matter is resolved.
Right to Object: Where hg99 processes your personal data on the basis of legitimate interests — such as for fraud prevention analytics or marketing communications — you have the right to object to that processing. hg99 will cease processing unless there are compelling legitimate grounds that override your objection.
Section 7
Children's Privacy
hg99 is strictly an 18+ platform. hg99 does not knowingly collect, process, or store personal data from individuals under the age of 18. Registration is prohibited for minors and age is verified as part of the mandatory KYC process.
If hg99 becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately and the associated account will be permanently closed. Any deposits made by a minor will be returned to the originating payment method after investigation, and any winnings will be forfeited.
Section 8
Policy Updates & Contact
hg99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our platform. When material changes are made, hg99 will update the effective date shown at the top of this page and, where the changes significantly affect players' rights, will send a notification to registered email addresses.
Your continued use of the hg99 platform after a Privacy Policy update has been posted constitutes your acceptance of the revised Policy. If you do not agree with any change to this Policy, you should contact [email protected] to request account closure before the revised Policy takes effect.
How to Contact hg99 About Privacy
For all privacy-related enquiries, requests to exercise your rights, or concerns about how hg99 handles your personal data, please contact the hg99 data team using the following details:
When submitting a privacy request, please include your registered username and the email address associated with your hg99 account so that we can locate your records and verify your identity before actioning your request. hg99 does not charge a fee for handling standard privacy rights requests.
Ready to Play on hg99?
Now that you understand how hg99 protects your data, you can explore our casino games, cricket betting markets, and slots with confidence. If you have questions, our support team is available around the clock. 18+ only. Please play responsibly.