h999 Privacy Policy

1. Introduction

h999 ("the Platform", "we", "us", "our") operates the online casino and sports betting website accessible at h999.asia. We understand that your privacy is important and that you are placing significant trust in h999 when you share personal information with us during the registration process and throughout your use of the platform. This Policy sets out in clear terms exactly what data h999 collects, why it is collected, how it is used, who it may be shared with, how long it is retained, and what rights you hold over your information.

This Policy should be read in conjunction with the h999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall framework governing your use of h999.

2. Data Controller

For the purposes of applicable data protection law, h999 acts as the data controller in respect of personal data collected from players and website visitors. The data controller is responsible for determining the purposes and means of processing your personal data. All data protection enquiries, access requests, and complaints should be directed to the h999 privacy team via the contact details in Section 16 of this Policy.

3. Data We Collect

3.1 Registration Data

When you create an h999 account, we collect the personal information you provide during the registration process, which includes:

• Full legal name;
• Date of birth (for age verification purposes);
• Pakistani mobile number (used as your primary login identifier and for OTP verification);
• Password (stored in a hashed, non-reversible format);
• Country of residence and city (used to serve localised content and payment options appropriate for players in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and other Pakistani cities).

3.2 Identity Verification (KYC) Data

When h999 requests account verification, you may be asked to provide documentary evidence including copies of your National Identity Card (CNIC), passport, driver's licence, proof of address, and proof of payment method ownership. These documents are processed solely for identity, age, and source-of-funds verification purposes.

3.3 Financial Data

h999 collects records of all financial transactions conducted through your account, including deposit and withdrawal amounts, dates, payment method identifiers (such as JazzCash wallet numbers, Easypaisa account references, or bank account suffixes), and transaction statuses. h999 does not store full card numbers or complete bank account details on its servers; payment processing is handled by PCI-DSS compliant third-party processors.

3.4 Gaming Activity Data

h999 collects detailed records of your gaming activity, including game sessions, bet amounts, game outcomes, wagering history, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory compliance.

3.5 Technical and Device Data

When you access h999, we automatically collect certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, and the pages of h999.asia you visit. This data is used for security monitoring, fraud prevention, platform optimisation, and analytics.

3.6 Communications Data

h999 retains records of communications between you and our customer support team, including live chat transcripts, email correspondence, and any complaints or support requests submitted. These records are retained for quality assurance, dispute resolution, and legal compliance purposes.

4. How We Collect Data

h999 collects personal data through the following means:

• Directly from you when you register an account, complete KYC verification, make a deposit, contact customer support, or update your account profile;
• Automatically through server logs, cookies, and similar tracking technologies when you browse or interact with h999.asia;
• From third-party verification providers who assist h999 in confirming identity and age as part of the KYC process;
• From payment processors who provide transaction confirmation data to h999 upon completion of deposits and withdrawals.

5. Legal Basis for Processing

h999 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to provide you with your h999 account, process transactions, and fulfil our service obligations under the Terms & Conditions;
• Legal obligation: Processing required to comply with anti-money laundering regulations, age verification obligations, and other applicable legal requirements;
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring, where these interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications, where you have provided explicit consent. You may withdraw consent for marketing at any time via your account settings.

6. How We Use Your Data

h999 uses the personal data it collects for the following purposes:

• Creating and managing your h999 account;
• Verifying your identity and age in compliance with responsible gaming obligations;
• Processing deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other supported payment methods;
• Providing customer support and resolving disputes;
• Monitoring gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour;
• Detecting and preventing fraud, money laundering, bonus abuse, and other prohibited activities;
• Personalising your platform experience with game recommendations, localised promotions, and relevant cricket betting content;
• Sending service-related communications such as account notifications, deposit confirmations, and security alerts;
• Sending promotional communications where you have consented to receive them;
• Complying with applicable legal and regulatory obligations;
• Improving the h999 platform through analysis of aggregated, anonymised usage data.

7. Sharing Your Data

h999 does not sell or rent your personal data to third parties. h999 may share your data with the following categories of recipient where necessary:

• Payment processors: To facilitate deposits and withdrawals, h999 shares necessary transaction data with PCI-DSS compliant payment processors supporting JazzCash, Easypaisa, and other methods;
• Identity verification providers: Third-party KYC service providers who assist in verifying the identity and age of h999 account holders;
• Game software providers: Game providers receive session data necessary to operate the specific game you are playing, as described in their individual privacy notices;
• Legal and regulatory authorities: h999 will disclose personal data to competent authorities where required by law, court order, or regulatory obligation;
• Professional advisors: Legal counsel, auditors, and compliance consultants who provide services to h999 under strict confidentiality obligations.

All third parties with whom h999 shares personal data are required to handle that data securely and in accordance with applicable data protection standards. h999 does not permit third parties to use your data for their own marketing purposes.

8. Cookies & Tracking Technologies

h999 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and gather analytics data. The categories of cookies used by h999 are:

• Strictly necessary cookies: Required for the operation of h999.asia, including session management and security functions. These cannot be disabled;
• Functional cookies: Remember your preferences such as language selection and last visited game category;
• Analytics cookies: Collect aggregated, anonymised data about how visitors use h999.asia to help us improve the platform;
• Marketing cookies: Used only where you have consented, to deliver relevant promotional content based on your interests.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using h999 but may affect certain personalisation features.

9. Data Retention

h999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following guidelines:

• Account data: Retained for the duration of your active h999 account and for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping obligations;
• Transaction records: Retained for a minimum of five years from the date of the transaction;
• KYC documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later;
• Customer support communications: Retained for a minimum of three years from the date of the interaction;
• Technical and device logs: Retained for up to 12 months for security and analytics purposes, unless a longer period is required for an active investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with h999's data deletion procedures.

10. International Data Transfers

h999 may transfer personal data to servers and service providers located outside Pakistan. Where such transfers occur, h999 ensures that appropriate safeguards are in place to protect your data in accordance with internationally recognised data protection standards. These safeguards may include standard contractual clauses, data processing agreements, or transfers to jurisdictions that provide an adequate level of data protection as recognised by international standards.

11. Your Rights

Subject to applicable law and certain exemptions, you have the following rights in relation to your personal data held by h999:

• Right of access: You may request a copy of all personal data h999 holds about you. Requests will be fulfilled within 30 days;
• Right to rectification: You may request correction of inaccurate or incomplete personal data at any time via your account settings or by contacting support;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to h999's legal retention obligations;
• Right to restriction: You may request that h999 restrict processing of your data in certain circumstances, for example while a complaint is being investigated;
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to h999;
• Right to withdraw consent: Where processing is based on consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing;
• Right to object: You may object to processing based on legitimate interests where you believe your rights and interests override those of h999.

To exercise any of these rights, contact the h999 privacy team as described in Section 16. h999 will not discriminate against you for exercising your data protection rights.

12. Children's Privacy

h999 is strictly an adults-only platform. The registration process and all services offered by h999 are available to individuals aged 18 and above only. h999 does not knowingly collect personal data from individuals under 18 years of age. If h999 becomes aware that personal data has been collected from a person under 18, the relevant account will be closed immediately and all associated data will be deleted. Parents or guardians who believe their child may have registered on h999 are urged to contact support immediately for investigation and account closure.

13. Security Measures

h999 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and h999 servers;
• AES-256 encryption for sensitive data stored in h999 databases;
• Multi-factor authentication for all h999 staff accessing production systems;
• Regular third-party penetration testing and security audits;
• Firewall systems and intrusion detection and prevention systems;
• Strict role-based access controls limiting data access to authorised personnel only;
• Regular staff training on data protection and information security;
• A documented incident response plan for data security events.

While h999 takes all reasonable precautions to secure your data, no system can be guaranteed completely impenetrable. You are also responsible for maintaining the security of your own h999 login credentials as described in the Terms & Conditions.

14. Third-Party Content

The h999 platform incorporates third-party game software provided by independent game studios. These providers may process certain technical data in connection with the operation of their games within h999. h999 is not responsible for the privacy practices of third-party game providers. Players should review the privacy notices of individual game providers where available. h999 does not permit third-party game providers to use player data for purposes unrelated to delivering the relevant game service.

15. Amendments to This Policy

h999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material updates will be communicated to registered players via account notification or email to the registered mobile number on file. The "Effective Date" at the top of this Policy will be updated to reflect the date of the most recent revision. Continued use of h999 following notification of an updated Privacy Policy constitutes acceptance of the revised terms.

16. Contact & Complaints

For any questions, data access requests, complaints, or other communications relating to this Privacy Policy, please contact the h999 privacy team through the live chat function available within the platform (available 24/7) or via the email address listed in the footer of this Website. Please mark your message with the subject "Privacy Request" and include your registered mobile number for identification purposes.

h999 will acknowledge all privacy requests within 5 business days and will provide a substantive response within 30 days of the date of receipt. If you are unsatisfied with h999's response to a privacy complaint, you may have the right to escalate the matter to a competent supervisory authority in your jurisdiction.