hi99 Privacy Policy

hi99 collects personal information from you in the course of providing its platform services. The categories of information we collect, and the contexts in which they are collected, are described below.

Information You Provide Directly:

• Registration Data: Full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and Bangladeshi mobile phone number.
• Identity Verification (KYC) Documents: Copies of your Bangladesh National Identity Card (NID), valid passport, or government-issued driver's licence, submitted as part of the mandatory KYC process prior to withdrawal approval.
• Payment Information: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay, SureCash, Tap) used for deposits and withdrawals. hi99 does not store full payment credentials; transaction references are retained for audit and fraud prevention purposes only.
• Communications: The content of messages you send to hi99 support via email, live chat, or any other support channel, including your contact details and the substance of any complaints or enquiries.
• Responsible Gaming Declarations: Any self-exclusion requests, deposit limit preferences, or time-out elections you submit through the hi99 responsible gaming tools.

Information Collected Automatically:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on each page, games played, bets placed, deposit and withdrawal history, login timestamps, and session duration.
• Geolocation Data: Approximate location derived from your IP address, used to verify that you are accessing the platform from Bangladesh and to detect suspicious access from unexpected locations.
• Cookie and Tracking Data: Session identifiers, preference cookies, and analytics data as described in Section 4 of this Privacy Policy.

hi99 uses the personal information we collect for the following purposes. We process your data only where we have a legitimate basis to do so, which includes performing our contractual obligations to you, complying with legal requirements, and pursuing our legitimate business interests where these do not override your privacy rights.

Marketing Communications: hi99 will only send you promotional emails or SMS messages if you have explicitly opted in to receive them during registration or through your account settings. You may withdraw your consent to marketing communications at any time by contacting support at [email protected] or by adjusting your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing that took place prior to the withdrawal.

Automated Decision-Making: hi99 uses automated systems to detect fraud, monitor for responsible gaming indicators, and flag unusual betting patterns. Where an automated decision has a significant effect on your account (such as a temporary freeze pending investigation), you have the right to request a human review of that decision by contacting hi99 support.

hi99 does not sell or rent your personal data. We may share your information with carefully selected third parties only in the circumstances set out below.

Service Providers and Technology Partners: hi99 works with third-party vendors who process data on our behalf to deliver platform services. These include:

• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Spribe, and Ezugi receive pseudonymised session data necessary to deliver their games. They do not receive your full identity or payment information.
• Payment Processors: Mobile financial service providers (bKash, Nagad, Rocket, Upay, SureCash, Tap) receive only the transaction data required to process your deposit or withdrawal. hi99 does not share your full profile with payment partners.
• KYC and Identity Verification Vendors: Third-party identity verification services may process your KYC documents on hi99's behalf. These vendors are contractually bound to handle your documents securely and to use them solely for verification purposes.
• Analytics Providers: Platform performance and usage analytics are processed by contracted analytics vendors using anonymised or aggregated data that cannot be used to identify individual players.

Legal and Regulatory Disclosures: hi99 will disclose personal data to law enforcement, regulatory bodies, or financial intelligence units — including the Bangladesh Financial Intelligence Unit (BFIU) — when required to do so by applicable law, court order, or regulatory direction. Such disclosures are made in good faith and to the minimum extent necessary to comply with the relevant legal obligation.

Business Transfers: In the event that hi99 undergoes a merger, acquisition, or transfer of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.

hi99 uses cookies and similar tracking technologies on the hi99.im platform. Cookies are small text files stored on your device that help us recognise you, maintain your session, and understand how you use the platform. The types of cookies we use are described below.

Managing Cookies: You can control or disable cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, and set notifications when a cookie is placed. Please note that disabling strictly necessary cookies will affect the functionality of the hi99 platform — for example, you will not be able to remain logged in between pages if session cookies are blocked.

No Third-Party Advertising Cookies: hi99 does not use third-party advertising cookies or retargeting pixels on the hi99.im platform. We do not serve behavioural advertising based on your browsing activity across other websites.

hi99 does not use fingerprinting, supercookies, or any tracking technology designed to circumvent cookie controls you have applied in your browser.

hi99 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to, the following:

• Transport Layer Security (TLS): All data transmitted between your device and hi99.im is encrypted using TLS 1.2 or higher. The presence of "https://" in your browser's address bar confirms that your connection is secured.
• Data Encryption at Rest: Sensitive personal data — including KYC documents, payment references, and account credentials — is stored in encrypted form on hi99's servers. Encryption keys are managed using industry-standard key management practices.
• Access Controls: Access to personal data held by hi99 is strictly limited to authorised personnel who require the data to perform their job functions. All internal access is logged and audited regularly.
• Two-Factor Authentication (2FA): hi99 supports OTP-based two-factor authentication for player accounts, which we strongly encourage all players to activate through their account security settings.
• Intrusion Detection and Monitoring: hi99's infrastructure is monitored continuously for suspicious activity, anomalous login patterns, and potential security incidents.
• Penetration Testing: hi99 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Despite the measures described above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. hi99 takes its security obligations seriously, but we cannot provide an absolute guarantee against all possible security threats. You are encouraged to use a strong, unique password for your hi99 account and to enable OTP-based authentication to minimise personal risk.

hi99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, hi99 will securely delete or anonymise your personal data so that it can no longer be used to identify you. Where anonymisation is not technically feasible, data will be securely destroyed using industry-standard data destruction methods.

Where you request deletion of your account before the end of a statutory retention period, hi99 will close your account and restrict active use of your data, but will retain the minimum data required to meet its legal obligations for the remainder of the applicable retention period.

As a player on the hi99 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact hi99 support at [email protected] with the subject line "Privacy Rights Request". hi99 will respond to all valid requests within 30 days of receipt.

hi99 will not charge a fee for processing a privacy rights request unless the request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply. hi99 reserves the right to ask for proof of identity before processing any rights request to ensure that data is not disclosed to unauthorised parties.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way hi99 handles your personal data, please contact the hi99 Privacy team using the details below. We take all privacy enquiries seriously and aim to resolve them promptly and transparently.

Privacy Contact: [email protected]
Please include "Privacy Policy Enquiry" or "Privacy Rights Request" in the subject line of your message so that it is directed to the correct team. Our support team operates in English and responds during Bangladesh Standard Time (BST, UTC+6) business hours.

Response Timeframes: General privacy enquiries are acknowledged within 2 business days and resolved within 14 business days where possible. Formal rights requests (access, erasure, portability) are acknowledged within 5 business days and fulfilled within 30 days of receipt of a valid, verified request.

Policy Updates: hi99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform services. When material changes are made, registered players will be notified by email to their registered address. The "Effective Date" at the top of this document will be updated to reflect the date of the most recent revision. Continued use of the hi99 platform following notification of a policy update constitutes your acceptance of the revised Privacy Policy.

This Privacy Policy should be read together with the Terms & Conditions and the Responsible Gaming Policy, all of which form part of your agreement with hi99.