nh999 Privacy Policy

nh999 ("we", "us", "our", "the Platform") operates the website at https://nh999.bio and provides online casino, sports betting, and related gaming services to players in Bangladesh and other eligible jurisdictions. In the course of operating the Platform and providing those services, nh999 collects and processes personal data about you ("Player", "User", "you"). This Privacy Policy describes what personal data we collect, why we collect it, how we use it, how long we keep it, who we share it with, and what rights you have in relation to it.

This Policy applies to all personal data processed by nh999 in connection with the Platform, whether collected via the website, mobile browser, email, live chat, or any other channel through which you interact with us. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

nh999 collects personal data from you directly when you register, use our services, make deposits or withdrawals, contact support, or interact with the Platform in any way. We also collect certain data automatically when you access the Platform, and in some cases we receive data about you from third parties such as payment processors and KYC verification service providers.

Data You Provide Directly

• Registration data: full name, date of birth, residential address, email address, mobile number, username, and password. This information is required to create and maintain your account and to fulfil our age verification and KYC obligations.
• Identity verification documents: copies of government-issued photo ID (National ID card, passport, or driving licence) and proof of address documents submitted as part of the KYC process. These documents are stored securely and used solely for the purpose of verifying your identity and age.
• Payment information: bKash account number, Nagad account number, Rocket account number, Upay account number, cryptocurrency wallet addresses, and card details (where applicable). nh999 does not store full card numbers — card transactions are processed by PCI-DSS compliant payment processors.
• Support communications: the content of messages, emails, and live chat transcripts you send to our support team, including any attachments or screenshots you provide when reporting an issue.

Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, device identifiers, and mobile carrier. This data is used to detect fraud, maintain platform security, and optimise the user experience.
• Session and activity data: pages visited, time spent on each page, game sessions played, bet amounts, game outcomes, deposit and withdrawal history, and clickstream data. This data is used to maintain your account history, resolve disputes, and improve our services.
• Cookie and tracking data: cookies, pixel tags, and similar tracking technologies set when you visit the Platform. See Section 5 (Cookies and Tracking Technologies) for full details of what we set and how to manage your preferences.

Data Received from Third Parties

• Payment processor confirmations: transaction status, payment method type, and fraud screening outcomes shared by bKash, Nagad, Rocket, Upay, and card-processing partners. nh999 uses this data solely to reconcile account balances and process withdrawals.
• KYC verification outcomes: the pass/fail result and verification reference number returned by our third-party identity verification partner after processing the documents you submit. nh999 does not receive the raw document images from the verification partner once verification is complete.
• Fraud prevention data: risk scores and flags shared by anti-fraud network partners when a new account is registered or an unusual transaction is flagged. This data helps us protect you and the Platform from fraudulent activity.

nh999 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing. We only process your data where we have a valid legal basis to do so.

• Contractual necessity: We process registration data, payment information, and account activity data because it is necessary to perform the contract we have with you — namely, the Terms and Conditions governing your use of the Platform. Without this processing, we cannot operate your account or provide services to you.
• Legal obligation: We process identity verification data, transaction records, and AML-related data because we are required to do so in order to comply with applicable legal obligations relating to know-your-customer verification, anti-money laundering, and responsible gaming requirements.
• Legitimate interests: We process device data, session data, and fraud-detection signals on the basis of our legitimate interest in maintaining the security and integrity of the Platform and protecting our business and players from fraud and abuse. We have assessed that this processing does not override your fundamental privacy rights.
• Consent: Where we send you marketing communications or promotional offers by email or in-platform notification, we do so on the basis of your consent. You may withdraw your consent to marketing at any time by adjusting your account notification preferences or by contacting support at [email protected].

nh999 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

Categories of Recipients

• Payment service providers: bKash, Nagad, Rocket, Upay, and card-processing partners receive your payment account identifiers and transaction amounts solely to process deposits and withdrawals on your behalf. These providers are independent data controllers governed by their own privacy policies and regulatory obligations.
• KYC and identity verification providers: your identity documents and personal details are shared with our third-party KYC partner for the sole purpose of verifying your identity and age. The KYC partner processes this data under a data processing agreement with nh999 and is prohibited from using it for any other purpose.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are required to do so by applicable law, court order, or where we believe disclosure is necessary to prevent imminent harm, fraud, or serious criminal activity.
• Service providers and data processors: Certain technical service providers (such as cloud hosting providers, platform infrastructure vendors, and customer support tools) may process personal data on our behalf as data processors. All such processors are bound by data processing agreements that restrict their use of your data to the specific purposes for which it is shared.

Subject to applicable law and certain limitations, you have the following rights in relation to the personal data nh999 holds about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request. We may need to verify your identity before we can action your request.

• Right of access: You have the right to request a copy of the personal data nh999 holds about you and information about how it is processed. We will provide this in a structured, commonly used format within 30 days of your verified request.
• Right to rectification: If any personal data nh999 holds about you is inaccurate or incomplete, you have the right to ask us to correct or complete it. Account holders may update basic profile information directly via account settings; for KYC-verified fields, please contact support.
• Right to erasure: In certain circumstances, you may request that nh999 delete the personal data it holds about you. This right is subject to limitations where retention is required for compliance with legal obligations (e.g., AML record-keeping), ongoing investigations, or unresolved disputes. Where deletion is not possible, we will explain why and confirm what data we continue to hold.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing and a determination is pending.
• Right to data portability: Where we process your data by automated means on the basis of a contract or your consent, you have the right to receive a copy of the data in a structured, commonly used, machine-readable format and to request that we transmit it to another data controller, where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal, nor does it affect processing carried out on other legal bases.

nh999 processes payment data in connection with deposits and withdrawals made via bKash, Nagad, Rocket, Upay, USDT, BTC, Visa, and Mastercard. All payment transactions are processed through secure, industry-compliant payment infrastructure. nh999 does not store full card numbers, card security codes (CVV), or bank account passwords. Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) are stored in encrypted form solely to facilitate withdrawal processing and account reconciliation.

All financial data processed by nh999 is subject to the same access controls, encryption at rest, and retention policies described in Sections 7 and 9 of this Policy. Where nh999 is required by law to report transaction data to financial intelligence units or regulatory bodies in connection with AML obligations, such reporting is carried out in accordance with applicable law and does not constitute a sale or commercial transfer of your data.

The nh999 Platform may contain links to or integrations with third-party services, including payment gateways (bKash, Nagad, Rocket, Upay), game content providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others), and analytics tools. When you interact with a third-party service through the Platform, you are subject to that service provider's own privacy policy and terms of use. nh999 is not responsible for the privacy practices of any third-party service. We encourage you to review the privacy policies of any third-party services you use in connection with the Platform before providing them with your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, want to make a complaint about how nh999 handles your personal data, or need to contact us for any privacy-related reason, please reach out to our support team. All privacy and data rights enquiries should be sent with the subject line "Privacy Enquiry" or "Data Rights Request" to ensure prompt routing to the appropriate team. Support is available 24 hours a day, 7 days a week.

We aim to respond to all privacy enquiries within 5 business days and to all formal data rights requests within 30 calendar days. If your complaint cannot be resolved by our support team to your satisfaction, you may escalate the matter through the applicable formal dispute resolution or legal process available in your jurisdiction, as described in the Terms and Conditions.