Privacy Policy – How eh999 Protects Your Data

1. Data We Collect

When you interact with the eh999 platform — whether by browsing the website, creating an account, making a deposit, placing a bet, or contacting support — certain categories of personal data are collected. This section explains exactly what information we gather and in what context it arises.

Account Registration Data: When you register a player account on eh999, you are required to provide the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Residential address including district, city, and postcode within Bangladesh.
• A valid mobile number linked to your bKash, Nagad, or other registered payment account.
• An email address for account communications and security notifications.
• A username and a password (passwords are stored in hashed form and are never accessible in plain text by eh999 staff).

Identity Verification (KYC) Data: In order to process withdrawal requests and comply with our anti-money laundering obligations, eh999 requires players to submit identity verification documents. These may include:

• A scanned copy or photograph of a National Identity Card (NID), passport, or valid driver's licence.
• A recent utility bill, bank statement, or official correspondence confirming your residential address (dated within three months).
• In some cases, a photograph of you holding your identity document (liveness check) may be requested to prevent identity fraud.

Financial Transaction Data: Each time you make a deposit or withdrawal on eh999, a record is created that includes the transaction amount in BDT (৳), the payment method used (e.g., bKash, Nagad, Rocket), the date and time of the transaction in Bangladesh Standard Time (BST, UTC+6), and the transaction reference number issued by the payment provider. eh999 does not store complete mobile banking PINs, card CVV numbers, or full card numbers.

Betting & Gaming Activity Data: A comprehensive record of your activity on the platform is maintained, including sports bets placed (market, stake, odds, outcome), casino and slot game sessions (game title, provider, session duration, stakes, results), bonus claims and wagering progress, and login history including timestamps and IP addresses.

Device & Technical Data: When you access eh999 from any device, we automatically collect certain technical information to ensure the platform functions correctly and to detect fraudulent or suspicious activity. This includes:

• IP address and approximate geolocation (country and city level).
• Device type, operating system, and browser version.
• Pages visited, time spent on each page, and navigation paths through the platform.
• Referral source (how you arrived at the eh999 website).

2. How We Use Your Data

eh999 processes personal data for specific, defined purposes only. We do not use your data for any purpose beyond those listed below without first obtaining your explicit consent or being required to do so by law.

Where you have opted in to receive promotional communications from eh999, you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting us at [email protected]. Withdrawing marketing consent does not affect the processing of your data for other purposes listed above.

3. Data Sharing & Third Parties

eh999 does not sell, rent, or otherwise commercially transfer your personal data to third parties. However, in order to deliver the full range of services available on the platform, we share specific data with carefully selected third-party partners under strict contractual data protection obligations. The categories of third parties who may receive your data, and the reason for sharing, are as follows:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to applicable Bangladesh financial regulations.
• Identity verification providers: Third-party KYC and document verification services receive the identity documents you submit during the verification process. These providers are contractually bound to use your data solely for the purpose of identity verification on behalf of eh999.
• Game content providers: Certified game studios including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming may receive anonymised session and technical data in order to deliver, maintain, and audit their game content on the eh999 platform.
• Analytics and platform monitoring tools: Aggregated, anonymised usage data may be processed by third-party analytics platforms to help us understand platform performance. This data cannot be used to identify individual players.
• Legal and regulatory authorities: eh999 is required by law to disclose player data to law enforcement agencies, financial intelligence units, or regulatory bodies when presented with a valid legal order or in fulfilment of mandatory reporting obligations under applicable anti-money laundering legislation.
• Fraud prevention networks: In cases of suspected fraud, account data may be shared with industry fraud prevention networks to identify and prevent cross-platform abuse.

4. Cookies & Tracking Technologies

The eh999 website uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session while you are logged in, and to collect aggregate information about how players use the site. This section explains what types of cookies we use and why.

What are cookies? Cookies are small text files that are stored on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to retain certain preferences or session states. Cookies cannot execute code and cannot carry viruses or malware.

eh999 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair the functionality of the eh999 platform, including your ability to remain logged in during a session.

5. Data Security & Retention

eh999 takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your information from unauthorised access, accidental loss, alteration, disclosure, or destruction.

Technical security measures include:

• TLS 1.2 / TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases, including identity documents and financial records.
• Bcrypt hashing with per-user salts for all stored passwords — plaintext passwords are never retained.
• Web Application Firewall (WAF) and DDoS mitigation to protect the platform from network-level attacks.
• Continuous intrusion detection and automated alerting for anomalous access patterns.
• Regular independent security audits and penetration testing by qualified third-party security professionals.

Organisational security measures include:

• Strict role-based access control — staff members can only access the data required for their specific job function.
• Mandatory data protection training for all staff who handle personal data.
• Documented incident response procedures with defined notification timelines in the event of a data breach.

Data Retention: eh999 retains your personal data for as long as your account remains active and for a defined period after account closure, in order to fulfil our legal obligations and to resolve any post-closure disputes. The general retention periods applied are as follows:

• Account and KYC records: retained for a minimum of five years from the date of account closure, in line with standard anti-money laundering record-keeping requirements.
• Financial transaction records: retained for a minimum of five years from the date of each transaction.
• Support communications: retained for two years from the date of the last communication in a support thread.
• Anonymised analytics data: may be retained indefinitely as it cannot be linked back to any individual player.

6. Your Privacy Rights

As a registered player on eh999, you hold a defined set of rights with respect to the personal data we hold about you. These rights can be exercised at any time by contacting our support team at [email protected]. We will acknowledge your request within five business days and aim to resolve it within 30 calendar days.

Please note that certain rights — particularly the right to erasure — may be limited where eh999 is required by law to retain your data (for example, under AML record-keeping obligations). Where a request cannot be fulfilled in full, we will explain the specific reason in our response.

7. Children's Privacy

The eh999 platform is strictly intended for adults aged 18 and above. We do not knowingly collect, process, or retain any personal data from individuals under the age of 18. Our registration process includes a mandatory date-of-birth declaration, and our KYC verification procedures are designed to identify and prevent underage access.

If we become aware that a player account belongs to an individual under 18 years of age, we will immediately suspend the account, delete the associated personal data to the extent permitted by our legal retention obligations, void any winnings, and return any deposited real-money funds to the original payment source where technically possible.

8. Policy Updates & Contact

eh999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, in applicable law, or in the services we provide. The date at the top of this document will always reflect the date of the most recent revision. Where changes are material — meaning they significantly affect how your data is processed or the rights you hold — we will notify registered players by email and by a prominent notice displayed on the platform upon next login.

We encourage you to review this Privacy Policy periodically so that you remain informed about how your personal data is being handled. Your continued use of the eh999 platform after any update to this policy constitutes your acknowledgement of the revised terms. If you do not agree with a material change to this policy, you have the right to close your account and request the deletion of your data in accordance with the rights described in Section 6.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data eh999 holds about you, please contact our dedicated data support team. We aim to respond to all data-related enquiries within five business days.

This Privacy Policy should be read in conjunction with the eh999 Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and the platform.