mh999 Privacy Policy

This Privacy Policy ("Policy") describes how mh999 ("we", "us", "our", "the Platform") collects, uses, stores, and protects personal data relating to individuals ("you", "your", "the Player") who access or use the mh999 online betting and casino platform at mh999.io and all associated sub-domains, mobile interfaces, and digital services.

mh999 is committed to handling personal data responsibly, transparently, and in accordance with recognised data protection principles. We have designed our data practices to collect only what is necessary, to protect what we hold, and to be straightforward about how your information is used.

This Policy applies to all mh999 players, registered account holders, visitors to the mh999 website, and any person who contacts our customer support team. It covers data collected through all channels, including the mh999 website, live chat, email correspondence, and mobile interfaces.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. By creating an mh999 account or otherwise using our platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein.

If you have any questions about this Policy or how mh999 handles your personal data, please contact our support team at [email protected] before using the platform.

mh999 collects personal data from you in the following categories, depending on how you interact with the platform:

Data from Third Parties: mh999 may receive limited data about you from our payment processing partners (bKash, Nagad, Rocket, Upay) for the purpose of confirming transaction completion and detecting fraud. This data is used only for the stated purpose and is not combined with your profile for marketing purposes.

mh999 uses the personal data we collect for the following purposes:

• Account Management: To create, verify, and maintain your mh999 account; to authenticate your identity when you log in; and to communicate important account-related updates to you.
• Payment Processing: To process BDT deposits made via bKash, Nagad, Rocket, and Upay; to verify the ownership of the payment account; and to execute withdrawal requests to your registered mobile wallet.
• Service Delivery: To provide access to cricket betting markets, live casino games (including those from Pragmatic Play, Evolution Gaming, and Ezugi), slot titles, and all other platform features you use.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multi-account abuse, money laundering attempts, and other prohibited activities as defined in our Terms & Conditions.
• Responsible Gaming: To monitor for indicators of problem gambling behaviour; to apply self-exclusion and deposit limit requests you have made; and to provide relevant responsible gaming information to players who may need support.
• Legal Compliance: To meet our obligations under applicable law, including record-keeping requirements, responding to lawful requests from competent authorities, and conducting age verification.
• Customer Support: To respond to your enquiries, resolve complaints, and maintain a record of support interactions for quality and training purposes.
• Platform Improvement: To analyse aggregate usage patterns, diagnose technical issues, optimise game performance, and improve the overall mh999 player experience. This analysis is conducted on anonymised or aggregated data wherever possible.
• Direct Marketing: To send you promotional offers, bonus notifications, and seasonal campaign communications by email or SMS — but only where you have provided consent and not opted out. You may withdraw marketing consent at any time by contacting support or using the opt-out link in any marketing message.

mh999 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review, except where required by fraud prevention systems, in which case you have the right to request human oversight of the decision.

mh999 processes your personal data on one or more of the following legal grounds, depending on the purpose of processing:

• Contractual Necessity: Processing is necessary to perform the contract between you and mh999 — specifically, to operate your account, process deposits and withdrawals, and deliver the betting and gaming services you have signed up for.
• Legal Obligation: Processing is necessary for mh999 to comply with applicable legal requirements, including anti-money-laundering obligations, age verification requirements, and responding to lawful authority requests.
• Legitimate Interests: Processing is necessary for mh999's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming monitoring — where those interests are not overridden by your data protection rights.
• Consent: For certain processing activities — specifically, direct marketing communications — mh999 relies on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of any processing already carried out.

mh999 may share your personal data with the following categories of third parties, strictly as needed to deliver our services or meet legal requirements:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other financial service providers involved in processing your deposits and withdrawals. These parties receive only the transaction data necessary to complete the payment.
• Game Content Providers: Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, Ezugi, and other licensed game suppliers whose titles are hosted on the mh999 platform. Game providers receive session identifiers and game outcome data for the purpose of operating the game rounds you participate in.
• Identity Verification Services: Third-party identity verification providers who assist mh999 in confirming player identity documents for the purpose of meeting age verification and fraud prevention requirements.
• Fraud Detection and Security: Technology providers who assist mh999 in monitoring for suspicious activity, detecting bot-assisted play, and identifying multi-account abuse. These providers process data only under strict contractual instructions from mh999.
• IT Infrastructure Providers: Cloud hosting and server infrastructure providers on whose systems mh999 data is stored. These providers are bound by data processing agreements that mandate appropriate security standards.
• Legal and Regulatory Authorities: Where required by applicable law or a binding order from a competent authority, mh999 will disclose personal data to law enforcement agencies, regulatory bodies, or courts. mh999 will notify affected players of such disclosures where legally permitted to do so.

All third-party service providers who process personal data on behalf of mh999 are required to enter into contractual agreements that obligate them to process your data only for the specified purpose, to maintain appropriate security standards, and to delete or return the data when the processing relationship ends.

mh999 uses cookies and similar client-side storage technologies to operate the platform, maintain your session, and gather aggregate usage analytics. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential to the operation of the mh999 platform. They maintain your login session, remember your language and display preferences, and ensure the security of your account. The platform cannot function correctly without these cookies; they cannot be disabled.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players interact with the mh999 website — which pages are visited most, where users navigate from, and how long sessions last. This data is used in aggregate form to improve platform usability and game presentation. No individual player is identified through these cookies.
• Functional Cookies: These cookies remember preferences you set during your session — such as your preferred deposit method or game view layout — so you do not need to re-enter them each time you visit.

mh999 does not use third-party advertising cookies, cross-site tracking pixels, or any technology designed to follow your browsing behaviour on websites unrelated to mh999.

Most modern web browsers allow you to control cookie settings through the browser's privacy or settings menu. You can choose to block or delete cookies at any time; however, disabling strictly necessary cookies will impair the functionality of the mh999 platform and may prevent you from accessing your account.

mh999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Personal, contact, financial, and transaction data associated with an active mh999 account is retained for the lifetime of the account and for a minimum period of 5 years after account closure, in line with standard record-keeping requirements applicable to financial service operators.
• Identity Verification Documents: Copies of national ID, passport, or address verification documents are retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction Records: Records of all deposits, withdrawals, bets, and game sessions are retained for a minimum of 5 years from the date of the transaction.
• Support Communications: Live chat transcripts, email correspondence, and support ticket records are retained for 2 years from the date of the last interaction, or longer if the interaction relates to an ongoing dispute or investigation.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of the account and for 1 year following account closure, to demonstrate compliance with consent obligations.
• Technical Logs: Server access logs and session logs are retained for 90 days under normal circumstances, and may be retained for longer if they are relevant to a security investigation.

When personal data is no longer required for any retention purpose, mh999 will securely delete or irreversibly anonymise it so that it can no longer be associated with any individual player.

The security measures implemented by mh999 include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the mh999 platform is encrypted using industry-standard SSL/TLS protocols. This protects your login credentials, payment information, and personal data from interception during transit.
• Encryption at Rest: Sensitive personal data stored on mh999 servers — including identity documents, payment account references, and account credentials — is encrypted at rest using strong encryption standards.
• Access Controls: Access to personal data within mh999's internal systems is restricted on a strict need-to-know basis. Staff are granted access permissions only for the data categories required to perform their specific job function.
• Secure Password Storage: mh999 stores account passwords using one-way cryptographic hashing. Plain-text passwords are never stored on mh999 systems. mh999 staff will never ask for your password.
• Regular Security Reviews: mh999 conducts periodic internal reviews of its data security practices to identify and remediate vulnerabilities. Platform software and dependencies are updated regularly to address known security issues.
• Incident Response: In the event of a data breach that is likely to result in risk to affected individuals, mh999 will assess the incident promptly, take steps to contain it, and notify affected players as soon as practicable.

You also play an important role in keeping your account secure. You should choose a strong, unique password for your mh999 account, never share your login credentials with anyone, and contact [email protected] immediately if you suspect your account has been accessed without your authorisation.

As an mh999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We may need to verify your identity before processing your request.

• Right of Access: You have the right to request a copy of the personal data mh999 holds about you, together with information about how that data is being used.
• Right to Rectification: If any personal data mh999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You have the right to request that mh999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. This right is subject to our legal retention obligations — for example, we are required to retain transaction records for a minimum period and cannot delete them on request during that period.
• Right to Restriction: You have the right to request that mh999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Object: You have the right to object to the processing of your personal data where mh999 relies on legitimate interests as the legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where mh999 processes your data on the basis of your consent (e.g., for direct marketing), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

mh999 aims to respond to all valid data rights requests within 30 days. If a request is complex or voluminous, we may extend this period by a further 60 days and will inform you of the extension and the reason for it.

mh999 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Our registration process includes age verification steps designed to prevent minors from creating accounts.

If mh999 discovers or is notified that personal data belonging to a person under 21 has been collected, we will take immediate steps to delete that data, close the associated account, and return any funds deposited to the originating payment account. If you believe a minor has registered on mh999 using false information, please contact our support team immediately at [email protected].

Parents and guardians in Bangladesh who are concerned about a minor's access to online gambling platforms are encouraged to use parental control software and to review the responsible gaming information available on our Responsible Gaming page.

mh999 reserves the right to update or revise this Privacy Policy at any time. When we make material changes — changes that significantly affect how we collect, use, or share your personal data — we will notify registered players by email or via an in-platform notification, and we will update the "Last Updated" date at the top of this page.

For minor clarificatory changes that do not materially affect your rights or the way we handle your data, we may update the Policy without individual notice. The current version of this Policy is always available at mh999.io/privacy-policy.

Your continued use of the mh999 platform after any update to this Policy constitutes your acceptance of the revised terms. If you do not agree to a revised Policy, you should stop using the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or mh999's data practices, please reach out to our support team through any of the following channels:

When submitting a data rights request, please include your registered account username or email address, a clear description of your request, and — where identity verification is required — a copy of a valid identity document. mh999 will acknowledge your request within 5 business days and provide a full response within 30 days.

mh999 takes all privacy-related concerns seriously. If you are not satisfied with our response to your enquiry, you may escalate your complaint through any applicable consumer protection channel available to you under Bangladeshi law.