Privacy Policy — How bh999h Collects, Uses, and Protects Your Personal Data
At bh999h, your privacy is treated with the same rigour we apply to platform security. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and used, and the rights you hold over that data as a player based in Bangladesh.
bh999h collects only the personal data that is necessary for account operation, identity verification, and regulatory compliance. We do not harvest data for resale or for purposes unrelated to platform operations.
All personal data held by bh999h is stored on secured servers with access controls, encryption at rest, and active intrusion monitoring. KYC documents are stored in isolated environments with restricted access.
This policy details every category of data collected, each purpose for which it is used, every third-party category it may be shared with, and how long it is retained. Nothing material is omitted or buried in footnotes.
Players have the right to access, correct, export, and in certain circumstances request deletion of their personal data. bh999h has a dedicated process for handling all data-related requests from registered players.
Data We Collect
bh999h collects personal data from players at multiple points throughout the account lifecycle — from initial registration through to account closure. The categories of data collected, and the circumstances in which each is collected, are described below.
Registration Data
When you create a bh999h account, we collect the following information directly from you: your full legal name, date of birth, residential address (including city, district, and postcode), email address, and mobile phone number. This data is required to establish your account, verify your identity, and maintain accurate records for compliance purposes. Providing false or incomplete registration data is a breach of our Terms & Conditions and may result in account closure.
Identity Verification (KYC) Data
As part of our Know Your Customer (KYC) programme, bh999h may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also request proof of address documents — such as a utility bill or bank statement — dated within the past three months. Where applicable, we may request evidence of ownership of the payment method used for deposits, such as a screenshot of your bKash or Nagad account showing your registered name.
Financial Transaction Data
bh999h records details of all financial transactions associated with your account, including deposits, withdrawals, bonus credits, and wagering activity. Transaction records include the amount in Bangladeshi Taka (৳), the payment method used, the date and time of the transaction, and a unique transaction reference. This data is retained for audit, fraud prevention, and dispute resolution purposes.
Technical and Device Data
When you access bh999h, our systems automatically collect certain technical data about your device and connection, including your IP address, browser type and version, device type (desktop, mobile, or tablet), operating system, screen resolution, and the date and time of each session. This data is used for security monitoring, fraud detection, platform optimisation, and to ensure that the platform renders correctly across different devices and connection types.
Behavioural and Usage Data
bh999h records platform usage data including which pages you visit, which games you play, how long you spend on each game, bet sizes, win/loss history, and the sequence of actions taken within a session. This data serves multiple purposes: it enables us to personalise your experience, identify potential responsible gaming concerns, monitor for unusual betting patterns, and improve the quality of our platform. Usage data is analysed at an aggregated level as well as at the individual account level.
Communications Data
If you contact bh999h support via email or any other platform communication channel, we retain a record of that communication including the content of your messages, the date and time of the exchange, and any documents or screenshots you share with us. This data is used to resolve your query, train support staff, and maintain a record of any representations made by either party in the context of a dispute.
Summary: Data Categories and Collection Points
| Data Category | When Collected | Required / Optional |
|---|---|---|
| Registration details (name, DOB, address, email, phone) | Account registration | Required |
| KYC identity documents | Verification request (pre-withdrawal or compliance trigger) | Required when requested |
| Payment method details and transaction records | Each deposit, withdrawal, or bonus credit event | Required |
| Device and connection data (IP, browser, OS) | Each platform session automatically | Automatic (cannot be disabled without leaving the platform) |
| Behavioural and gameplay data | During active platform sessions | Automatic |
| Support communications | When you contact bh999h support | Collected if communication initiated |
| Cookie and tracking data | On page load, per session | Automatic (see Cookies section) |
How We Use Your Data
bh999h processes personal data only for the purposes described in this section. We do not use personal data for purposes that are incompatible with those stated here without first obtaining the player's explicit consent or updating this Privacy Policy with appropriate notice.
Account Management and Platform Access
The most fundamental use of your personal data is to create and manage your bh999h account. Your registration data enables us to authenticate you when you log in, display your account balance and transaction history, apply bonuses and promotions to your account, and communicate with you about account activity. Without this data, we cannot provide any platform services to you.
Identity Verification and Fraud Prevention
bh999h processes KYC documents and transaction data to verify your identity, confirm your age (18+ requirement), confirm that deposits and withdrawals are processed to accounts in your own name, and detect patterns consistent with fraudulent activity, money laundering, or account compromise. Fraud prevention is both a legal obligation and a platform integrity measure that protects the interests of all players.
Responsible Gaming Monitoring
bh999h uses gameplay and behavioural data to monitor for patterns that may indicate a player is experiencing difficulties with gambling. These patterns include a significant escalation in bet sizes over a short period, sustained sessions without breaks, chasing losses, and repeated deposits immediately following a withdrawal. Where such patterns are identified, bh999h's responsible gaming team may reach out to the player proactively. Players may also access their own behavioural data to assess their playing patterns via the account responsible gaming dashboard.
Customer Support
Communications data and account data are used to handle support queries, investigate complaints, resolve disputes, and maintain an accurate record of all player interactions. Support records may also be reviewed as part of staff training to improve the quality and consistency of bh999h's customer service.
Platform Improvement and Analytics
Aggregated and pseudonymised behavioural data is used to understand how players interact with bh999h, identify which features are most and least used, detect technical issues, and prioritise product development. Where analytics tools are used for this purpose, the data is processed in a manner that does not directly identify individual players in the analytics reports.
Marketing Communications
Where you have consented to receive marketing communications at the time of registration or subsequently via your account preferences, bh999h may use your email address and account data to send you information about promotions, bonuses, and platform updates. You may withdraw consent for marketing communications at any time by updating your account preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.
Login authentication, balance management, transaction processing, bonus application, and all core account functions depend on your registration and transaction data being accurately maintained by bh999h.
Identity verification, age confirmation, fraud pattern detection, anti-money-laundering checks, and device fingerprinting all serve to protect both bh999h and legitimate players from fraudulent activity.
Aggregated gameplay and navigation data guides product decisions, helps optimise page performance, and informs responsible gaming interventions — all without building individual advertising profiles.
Data Sharing & Third Parties
bh999h does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your personal data may be shared with third parties only in the specific circumstances described below, and in each case only to the minimum extent necessary to fulfil the stated purpose.
Payment Processing Partners
To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, bh999h must transmit relevant transaction data — including your account reference, transaction amount, and payment method identifier — to the respective payment provider. Each payment partner processes this data under their own privacy policy and security standards. bh999h selects payment partners that maintain industry-standard data protection practices.
Game Technology Providers
Casino game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate the game engines that power bh999h's casino offering. These providers receive a pseudonymised player identifier and session data necessary to run the game and calculate results. Full identity data is not shared with game providers. Game providers operate under their own data processing arrangements and are subject to independent certification and audit requirements.
Identity Verification Services
bh999h may use third-party identity verification services to cross-reference KYC documents against authoritative identity databases. Where such services are used, only the data required for the specific verification check — such as name, date of birth, and document number — is transmitted. The results of the verification check are returned to bh999h and stored as part of the player's compliance record.
Legal and Regulatory Disclosure
bh999h may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a valid court order, or a legally enforceable demand from a competent authority. In such cases, bh999h will disclose only the data specifically required and will notify the affected player where legally permitted to do so.
Business Transfers
In the event that bh999h undergoes a corporate restructuring, merger, acquisition, or transfer of all or substantially all of its assets, player data may be transferred as part of that transaction. In such circumstances, bh999h will take reasonable steps to ensure that the receiving entity is bound by privacy obligations at least equivalent to those contained in this policy, and will notify affected players via the email address on their account prior to any such transfer taking effect.
Data Security Measures
bh999h implements a layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or alteration. The security measures described below represent our current baseline and are reviewed and updated on a regular basis to reflect the evolving threat landscape.
All data transmitted between your device and bh999h's servers is encrypted using TLS. This prevents third parties from intercepting your login credentials, personal data, or transaction details in transit.
Personal data stored in bh999h's databases — including KYC documents and payment records — is encrypted at rest. Encryption keys are managed separately from the encrypted data and are subject to strict access controls.
Access to systems holding personal data is granted on a least-privilege basis. Staff members can only access the data necessary for their specific role. All access events are logged and audited.
bh999h maintains a documented data breach incident response procedure. In the event of a breach affecting player data, affected players will be notified without undue delay via the email address on their registered account.
While bh999h takes all reasonable and practicable measures to protect your personal data, no security system is entirely impenetrable. Players are advised to use a strong, unique password for their bh999h account, to enable two-factor authentication where available, and to contact [email protected] immediately if they believe their account has been accessed without authorisation.
Data Retention Policy
bh999h retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The retention periods described below represent our standard practice. Where a specific legal requirement mandates a longer or shorter retention period, that requirement takes precedence.
| Data Category | Standard Retention Period | Basis for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal and compliance obligation; dispute resolution |
| KYC identity documents | Duration of account + 5 years post-closure | Anti-money-laundering and identity verification requirements |
| Transaction and financial records | 7 years from date of transaction | Financial record-keeping and audit obligations |
| Gameplay and behavioural data | Duration of account + 2 years post-closure | Responsible gaming monitoring; dispute resolution |
| Support communications | 3 years from date of last communication | Dispute resolution; staff training; quality assurance |
| Cookie and session data | Session cookies: deleted on browser close. Persistent cookies: up to 12 months | Platform functionality and security |
| Marketing preferences and consent records | Until consent is withdrawn + 2 years thereafter | Proof of consent and opt-out compliance |
At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised or aggregated data derived from your account activity may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data once it has been fully de-identified.
Where you request deletion of your personal data before the end of the standard retention period, bh999h will assess the request in accordance with the player rights procedure described in Section 7. In some cases, deletion cannot be completed within the retention window due to overriding legal obligations — in such cases, bh999h will inform you of the specific legal basis that prevents earlier deletion and will restrict processing of the data to the minimum required by that obligation.
Your Privacy Rights
As a registered bh999h player, you hold a defined set of rights in relation to your personal data. bh999h is committed to honouring these rights within a reasonable timeframe and without unnecessary barriers. All data rights requests should be submitted in writing to [email protected] with the subject line "Data Rights Request — [Account Username]".
You may request a copy of all personal data that bh999h holds about you. bh999h will provide this in a structured, readable format within 30 days of receiving a valid request.
If any personal data held by bh999h is inaccurate or incomplete, you may request that it be corrected. bh999h will update the relevant records promptly following verification of the correction.
In certain circumstances, you may request deletion of your personal data. This right is subject to overriding legal obligations — where a retention requirement applies, bh999h will explain which data cannot be deleted and why.
You may request that bh999h restrict the processing of your personal data in specific circumstances — for example, while you contest the accuracy of data held about you. During a restriction, bh999h will store but not actively process the restricted data.
You may request that bh999h provide your personal data in a machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider of your choice.
You may object to the processing of your personal data for marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your individual rights and interests override those interests.
bh999h aims to respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further 30 days — in such cases, bh999h will notify you of the extension and the reason for it within the initial 30-day window. bh999h does not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.
Where bh999h is unable to comply with a data rights request — for example, because doing so would conflict with a legal obligation — bh999h will explain the specific reason for the refusal in writing. If you are not satisfied with bh999h's response to a data rights request, you may escalate the matter as a formal dispute by emailing [email protected] with the subject line "Formal Dispute — Data Rights — [Account Username]".
Contact & Data Requests
All privacy-related communications — including data rights requests, questions about this Privacy Policy, and reports of suspected data breaches or unauthorised access to your account — should be directed to the bh999h privacy team at the contact details below. bh999h takes all privacy communications seriously and will respond in a timely and substantive manner.
When submitting a data rights request or privacy query, please include your registered account username, a brief description of your request or concern, and — where relevant — any supporting documentation. This helps bh999h locate your account records accurately and respond to your request efficiently.
Email for all privacy and data matters: [email protected] — please use the subject line "Privacy Request — [Account Username]" for data rights requests, or "Privacy Query" for general questions about this policy.
bh999h does not operate a postal correspondence address for privacy matters. All privacy communications must be submitted via email to ensure they are routed correctly to the privacy team and responded to within the applicable timeframes.
This Privacy Policy applies to all players who access bh999h from Bangladesh and covers all data processing activities carried out in connection with the operation of the bh999h platform. By registering an account and using bh999h, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. This policy does not form a standalone contract but operates in conjunction with the bh999h Terms & Conditions, to which it is supplementary.
All products on bh999h are strictly for adults aged 18 and above. Gambling carries financial risk. Please visit our Responsible Gaming page if you have concerns about your gambling behaviour.
Questions About Your Data?
Review our FAQ for quick answers, explore the bh999h Casino, or contact our privacy team at [email protected] with any questions about how your data is handled.