mh999 Privacy Policy

When you interact with the mh999 platform — whether by visiting our website, registering an account, making a deposit, placing a wager, or contacting our support team — mh999 collects certain categories of personal information. The information we collect falls into the following categories:

1.1 Registration & Identity Data

When you create an mh999 account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, gender (where provided), residential address, email address, and mobile phone number registered in Bangladesh. This information is used to establish your identity, verify your age (18+ requirement), and set up your account.

1.2 Verification & KYC Documents

To comply with Know Your Customer (KYC) requirements and responsible gaming obligations, mh999 may request copies of government-issued identification documents (such as your National ID card, passport, or driving licence), proof of address (such as a utility bill or bank statement dated within 3 months), and proof of payment method ownership (such as a screenshot of your bKash or Nagad account). These documents are processed securely and stored only for as long as legally required.

1.3 Financial & Transaction Data

When you make deposits or withdrawals, mh999 collects transaction data including deposit amounts, withdrawal requests, payment method identifiers (such as your bKash mobile number or the last four digits of your Visa card), transaction timestamps, and transaction reference numbers. Full payment credentials (card numbers, PINs, or mobile banking passwords) are never stored by mh999 — these are handled directly by your payment provider.

1.4 Gaming & Betting Activity Data

mh999 records all gaming and betting activity associated with your account. This includes games played, wagers placed, bet amounts, game outcomes, win/loss history, bonus usage, and session duration. This data is used for account management, responsible gaming monitoring, fraud prevention, and regulatory compliance purposes.

1.5 Technical & Device Data

When you access the mh999 platform, our servers automatically collect certain technical information, including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, and pages visited. This data is used for security monitoring, fraud detection, platform optimisation, and analytics.

1.6 Communications Data

If you contact the mh999 support team via email or any other communication channel, we retain records of those communications — including your messages, attachments, and our responses — for quality assurance and dispute resolution purposes.

1.7 Marketing Preferences

Where you have opted in to receive promotional communications, mh999 records your marketing preferences, including the types of offers you have consented to receive and your opt-in or opt-out history. You may withdraw your consent to receive marketing communications at any time by contacting the support team or by following the unsubscribe link in any marketing email.

mh999 processes your personal data only for legitimate, clearly defined purposes. We do not use your data in ways that you would not reasonably expect, and we do not use it for automated decision-making that produces legal or similarly significant effects on you without your explicit consent. The primary purposes for which we use your data are as follows:

Account management and service delivery: Your registration and identity data is used to create and maintain your mh999 account, authenticate your login sessions, process your deposits and withdrawals, credit bonuses, and deliver the gaming and betting services you have requested. Without this data, we cannot provide the core mh999 service.

Identity verification and fraud prevention: We use your identity, financial, and technical data to verify that you are who you say you are, to detect and prevent fraudulent activity, to identify suspicious transaction patterns, and to protect the financial integrity of the mh999 platform for all players. This includes automated screening of transactions against known fraud indicators.

Responsible gaming compliance: mh999 takes its responsible gaming obligations seriously. We use your gaming activity data — including session duration, bet frequency, win/loss patterns, and deposit behaviour — to identify signs of potentially problematic gambling and to enforce self-exclusion agreements, deposit limits, and cooling-off periods where applicable. This processing is in the vital interest of our players.

Legal and regulatory compliance: Certain data is processed because we are legally required to do so — for example, retaining transaction records for anti-money laundering (AML) compliance, responding to valid legal requests from regulatory authorities or law enforcement, and maintaining audit logs for dispute resolution.

Customer support: Communications data is used to resolve your support queries, investigate complaints, and improve the quality of our support services. We may review support interactions for quality assurance and staff training purposes.

Platform improvement and analytics: Technical and gaming activity data (in aggregated and anonymised form where possible) is used to analyse usage patterns, identify technical issues, improve game performance, optimise the user interface, and develop new features that benefit all mh999 players.

Marketing and promotions: Where you have given consent, we use your contact details and marketing preferences to send you information about mh999 promotions, bonus offers, seasonal campaigns (such as Eid or Pohela Boishakh specials), and platform updates. You may withdraw this consent at any time without affecting your ability to use the platform.

mh999 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each purpose.

Payment service providers: To process your deposits and withdrawals, mh999 shares the minimum necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. These providers are contractually bound to process your data only for the purpose of completing the specific payment transaction and in accordance with their own published privacy policies.

Game software providers: mh999's game library is powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. When you launch a game, your account identifier and session token are shared with the relevant provider to authenticate and run the game session. These providers do not receive your full personal profile and are contractually prohibited from using game session data for any purpose other than game delivery.

Identity verification and KYC partners: mh999 may use third-party identity verification services to assist with KYC document checking and age verification. These services receive only the documents and data required to perform the specific verification task and are bound by strict data processing agreements.

IT infrastructure and hosting providers: The mh999 platform is hosted on secure third-party server infrastructure. Our hosting and cloud service providers may process your data as part of routine platform operation (such as data storage and backup). These providers operate under data processor agreements and do not have independent access to your personal data.

Fraud prevention and security services: mh999 may share technical data (such as IP addresses and device fingerprints) with specialist fraud detection and cybersecurity services to identify and block malicious activity on the platform.

Legal and regulatory authorities: mh999 will disclose your personal data to law enforcement agencies, regulatory bodies, or courts if required to do so by a valid legal obligation, court order, or regulatory requirement. We will notify you of such a disclosure where legally permitted to do so.

Business transfers: In the event of a merger, acquisition, or sale of all or part of mh999's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players in advance of any such transfer and ensure that your data remains subject to equivalent privacy protections.

mh999 uses cookies and similar tracking technologies (such as local storage, session storage, and web beacons) to operate and improve the platform. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies allow the platform to remember your preferences, keep you logged in during a session, and gather analytics data to improve your experience.

Types of cookies used by mh999:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as user authentication, session management, and security controls. Without these cookies, the mh999 platform cannot be used. These cookies cannot be disabled.
• Functional cookies: These cookies remember your preferences and settings — such as your preferred game lobby view, notification settings, and language preference — so that you do not have to reconfigure them on each visit.
• Analytics cookies: mh999 uses analytics tools to collect aggregated, anonymised data about how players use the platform — such as which pages are visited most frequently, how long sessions last, and where users encounter navigation difficulties. This data helps us improve the platform experience for all players.
• Security and fraud prevention cookies: These cookies help mh999 detect and prevent fraudulent activity, identify suspicious login attempts, and protect player accounts from unauthorised access.

Managing your cookie preferences: Strictly necessary cookies and security cookies cannot be disabled as they are essential to platform operation. Functional and analytics cookies can be managed through your browser settings. Most modern browsers allow you to view, block, or delete cookies via their privacy or settings menu. Please note that disabling functional cookies may affect your platform experience.

Third-party cookies: Some third-party services integrated into the mh999 platform — such as game providers and analytics tools — may set their own cookies on your device. mh999 does not control these third-party cookies and recommends that you review the privacy policies of the relevant providers for more information.

Do Not Track signals: Some browsers transmit a Do Not Track (DNT) signal to websites. mh999 acknowledges DNT signals and limits non-essential data collection where technically feasible when a DNT signal is detected.

mh999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. We apply the following general retention principles:

Active accounts: While your mh999 account remains active, we retain all registration, identity, financial, gaming activity, and communications data associated with your account. This data is necessary to deliver the services you have requested and to comply with our ongoing legal obligations.

Closed accounts: When you close your mh999 account — either voluntarily or as a result of a breach of our Terms & Conditions — we retain your personal data for a period of at least 5 years from the date of account closure. This retention period reflects our obligations under applicable anti-money laundering, fraud prevention, and financial record-keeping requirements. After the retention period expires, your data is securely deleted or fully anonymised so that it can no longer be associated with you as an individual.

KYC documents: Identity verification documents submitted as part of the KYC process are retained for a minimum of 5 years following the end of the customer relationship, in accordance with standard AML compliance requirements.

Transaction records: Financial transaction data — including deposit and withdrawal records — is retained for a minimum of 5 years from the date of each transaction for audit and compliance purposes.

Marketing data: If you withdraw your consent to receive marketing communications, your marketing preference records (including the opt-out itself) are retained to ensure we do not inadvertently contact you again. These preference records are held until 2 years after your account is closed.

Technical and log data: Server logs and technical access data are retained for a maximum of 12 months from the date of collection, after which they are automatically purged, unless specific log entries are required as evidence in an active investigation or dispute.

Support communications: Records of customer support interactions are retained for 3 years from the date of the interaction, to allow for dispute resolution and quality assurance review.

When data is no longer required for its retention purpose, mh999 uses secure deletion protocols (including cryptographic erasure where applicable) to ensure that the data cannot be recovered or reconstructed.

As a user of the mh999 platform, you hold a number of important rights in relation to your personal data. mh999 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact us using the support email address in the footer of this page.

Right to access: You have the right to request a copy of the personal data that mh999 holds about you. This is sometimes called a Subject Access Request (SAR). We will provide you with a copy of your data in a commonly used, machine-readable format within 30 days of receiving your verified request. There is no charge for a standard access request.

Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may update certain account details directly through your mh999 account settings. For other corrections — such as changes to your legal name following a name change — please contact the support team with supporting documentation.

Right to erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that mh999 may be required to retain certain data to comply with legal obligations (such as AML record-keeping), even after you request erasure. We will inform you clearly of any data that cannot be deleted and the reason why.

Right to restriction of processing: In certain circumstances — for example, where you contest the accuracy of your data or object to our processing — you may request that we restrict the processing of your personal data while the matter is resolved. During a restriction period, we will continue to store your data but will not actively process it for other purposes.

Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of the personal data you have provided to mh999 in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider of your choice.

Right to object to marketing: You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. We will stop processing your data for marketing purposes immediately upon receipt of a valid objection. You can opt out of marketing emails by following the unsubscribe link in any marketing communication or by contacting support.

How to submit a request: All privacy rights requests should be submitted to the mh999 support team via the email address in the footer . We will acknowledge your request within 5 business days and aim to fulfil it within 30 days. For complex requests, we may require up to 60 days and will notify you of any extension. We may ask you to verify your identity before processing a rights request to ensure that personal data is not disclosed to the wrong person.

mh999 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Encryption in transit: All data transmitted between your device and the mh999 platform is protected using Transport Layer Security (TLS) with a minimum of 128-bit encryption. This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission.

Encryption at rest: Sensitive personal data stored on mh999 servers — including identity documents, payment method identifiers, and account credentials — is encrypted at rest using strong encryption standards. This means that even in the unlikely event of unauthorised physical access to our server infrastructure, your data remains protected.

Access controls: Access to personal data within the mh999 organisation is restricted on a strict need-to-know basis. Only authorised personnel whose job functions require access to specific categories of personal data are granted that access. All internal access is logged and subject to regular audit review.

Two-factor authentication: mh999 encourages all players to enable two-factor authentication (2FA) on their accounts. 2FA adds a significant additional layer of security by requiring a second verification step — such as a one-time code sent to your registered mobile number — in addition to your password.

Fraud monitoring: mh999 operates continuous automated monitoring of account activity to detect unusual patterns that may indicate account compromise, identity theft, or fraudulent use. Suspicious activity triggers an immediate security review, and affected players are notified promptly.

Staff training: All mh999 personnel who handle personal data receive regular training on data protection obligations, security best practices, and the procedures to follow in the event of a potential data breach. Data protection awareness is embedded in our onboarding process for all new team members.

Data breach response: In the event of a confirmed personal data breach that poses a risk to the rights and freedoms of affected individuals, mh999 will notify the relevant regulatory authority and, where required, affected players, within the timeframe prescribed by applicable law. We maintain a documented incident response plan to ensure a swift and organised response to any security incident.

Your responsibility: While mh999 applies robust security measures on our side, the security of your account also depends on the precautions you take. You should choose a strong, unique password for your mh999 account, never share your login credentials with anyone, and contact support immediately if you suspect that your account has been accessed without your authorisation.

Changes to this Privacy Policy: mh999 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, applicable laws, or regulatory requirements. When we make material changes to this policy, we will notify active players by posting a prominent notice on the mh999 platform and, where appropriate, by sending a notification to your registered email address. The effective date at the top of this page will always reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how mh999 protects your personal data. Your continued use of the mh999 platform following the posting of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you disagree with any changes to this policy, you should cease using the platform and contact support to close your account.

Children's privacy: The mh999 platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a user is under 18, we will immediately suspend and close their account, void any associated transactions, and delete their personal data as soon as practicable. If you believe that a minor has created an mh999 account, please contact us immediately via the support email in the footer.

Links to third-party sites: The mh999 platform may contain references to third-party game providers or payment services. This Privacy Policy applies solely to the mh999 platform. We are not responsible for the privacy practices of any third-party sites or services, and we encourage you to review their respective privacy policies before providing them with any personal information.

Contact us: If you have any questions, concerns, or requests relating to this Privacy Policy or the way mh999 handles your personal data, please contact our support team using the email address displayed in the footer of this page. We take all privacy enquiries seriously and aim to provide a clear, helpful response within 5 business days. You may also visit our FAQ page or review our Terms & Conditions for further information about your rights and obligations as an mh999 player. For concerns about responsible gaming, please visit our Responsible Gaming page.