Casino / Sports
haya9 collects only the account data needed to run your wallet, verify transactions made via Nagad, Upay or Bank Transfer, and keep your login secure across devices. This page explains exactly what we collect, why we hold it, and what you can do about it — with no legal jargon left unexplained.
When you open an account on haya9, we collect the information you enter directly: your email address, a password hash, and any payment details you submit — for example, a Nagad mobile number or Bank Transfer reference — so we can match your deposit to your account wallet. We also collect device identifiers and browser session data automatically when you load the site. This technical data helps us keep your session active between a phone browser and a desktop tab, and it lets us detect unusual login activity on your account. We do not sell your personal data to third parties. We share transaction references with payment processors — such as those handling Nagad or Upay flows — only to the extent needed to complete or reverse a transaction you initiated. Analytics data we retain is aggregated and does not identify you individually. Retention periods follow the operational need: active account data is held while your account is open; transaction records are kept for the period required under applicable financial record-keeping obligations. When you close your account, we begin the deletion or anonymisation process as described in the rights section below. Access to this site and its services depends on your local law and the eligible regions we serve.
This policy covers the haya9 website and any account you hold with us. It does not extend to third-party services you reach by clicking away from our pages. The four areas below clarify exactly what falls inside and outside its scope so you know where our responsibility ends and where another party's policy begins.
All data collected at login, registration and password reset is inside this policy. That includes your email, session token and any device fingerprint we store to keep you signed in across your phone browser and desktop.
Payment references you submit — Nagad numbers, Upay codes, Bank Transfer details — fall inside this policy while they are processed through our platform. Once a transaction completes, the payment processor holds its own copy under its own terms.
Game content delivered by our studio partners (Habanero, Joker, CQ9, JDB, Spadegaming, PlayStar) is outside this policy's scope. Those studios operate under their own data and content agreements; we do not control the data those game engines process internally.
Links to support tools, social channels or external pages that open outside haya9 are not covered here. Follow the privacy notice of whichever external site you land on. We cannot accept responsibility for how those services handle your data.
You have concrete options when it comes to the data we hold on your account. Reviewing what we store, correcting an error in your profile, or asking us to delete your account are all things you can start directly. The steps below cover the four most common actions. Where a request needs identity verification — for example, confirming the Nagad number or email address on file — you will be asked to complete that step before we process the change. We aim to acknowledge every request promptly, though response times depend on the complexity of the ask and any applicable legal hold on the data in question. If you have a question that the steps below do not answer, the support contact routes in the next section are open.
Log in and open the account settings page. The profile section shows the email, phone number and payment references currently stored. Transaction history is listed under the wallet tab, including any Nagad or Bank Transfer records we hold.
Edit your display name and contact email directly inside account settings. For payment method changes — such as updating a Nagad number or adding a new Upay reference — follow the payment section of your account and complete the verification step shown there.
Send your question through our published support route. Include your registered email so we can locate your account. We do not accept privacy requests from unverified contacts because we cannot confirm whose data is being discussed without identity confirmation first.
Contact support and ask for full account closure. We will confirm the data we hold, explain any retention obligations that apply under financial record rules, and begin the deletion or anonymisation process for data not subject to a legal hold.
If you have a question about how we handle your data, or if you want to exercise a right described above, the routes below are the published contact paths for haya9. Do not share sensitive payment references — like a full Nagad number or Bank Transfer account — in an initial message; wait until our team confirms a secure channel for that information.
Send your privacy question to our support email address published in the site footer. Include your registered account email in the message so we can locate your record without delay.
Open the chat widget visible in the bottom corner of the site when you are logged in. State that your question is about privacy or account data so the agent routes it to the right team member.
The account help section within your signed-in profile lists common data and privacy actions. Start there for password resets, email changes and payment reference updates before escalating to direct contact.
We keep security and data hygiene as operational priorities, not afterthoughts. Passwords are stored as hashed values — we never hold a plain-text copy. Sessions are protected with token-based authentication so a login on your phone does not expose your desktop session, and vice versa. Cookie use is limited to what keeps your session active and lets us understand aggregate site traffic; we do not drop advertising or cross-site tracking cookies.
We use session cookies to keep you logged in between page loads and functional cookies to remember your wallet currency. We do not use advertising or cross-site tracking cookies. You can clear cookies from your browser at any time; doing so will end your current session.
Your password is stored as a one-way hash. If you suspect your account has been accessed without your permission, change your password immediately via account settings and contact support. We recommend using a unique password not shared with other services.
Active account data is held while your account remains open. Transaction records — including Nagad, Upay and Bank Transfer references — are retained for the period required by applicable financial record-keeping rules, then deleted or anonymised.
When we make a material change to this policy, we post a notice inside the signed-in account area. The updated version applies from the date shown at the top of this page. Continued use of the account after that date means you have seen the updated terms.
The questions below cover what we get asked most about data, cookies, account records and privacy rights on haya9. If your question is not listed, reach out via the support routes above.
We store your registered email address, a hashed password, device session tokens and any payment references you have submitted — such as a Nagad mobile number, Upay code or Bank Transfer detail. We also retain transaction records tied to your account wallet for the period required under applicable financial rules.
We share only what is necessary to process a transaction you started — for example, passing a Nagad reference to the relevant payment processor to confirm a deposit. We do not sell your personal data. Analytics data we use internally is aggregated and does not identify you individually.
Log in and open account settings. Your profile shows the email, phone number and payment references currently on file. To correct a detail, edit it directly in settings or, for payment references like a Nagad number, follow the verification step shown in the payment section of your account.
Yes. Contact support and request full account closure. We will outline which records we are required to keep under financial regulations — typically transaction references — and begin deleting or anonymising everything else. The process starts once your identity is confirmed via your registered email.
We use session cookies to keep you logged in and functional cookies for wallet preferences. We do not use advertising or cross-site tracking cookies. You can clear cookies in your browser at any time, but doing so will end your active session and you will need to log in again.
This policy applies to anyone using haya9. However, access to the site and its services depends on your local law and the eligible regions we currently serve. If you are uncertain whether access is permitted under your local law, check the terms page or contact support before registering.