h999 Privacy Policy

h999 ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of every player who uses our online casino and sports betting services. This Privacy Policy ("Policy") sets out the basis on which h999 collects, processes, stores, and shares personal data obtained from users of the h999 platform at https://h999.vu.

This Policy has been written with Pakistani players in mind. Whether you are accessing h999 from Karachi, Lahore, Rawalpindi, Faisalabad, or anywhere else in Pakistan, the same data protection standards apply. We have deliberately written this document in clear, accessible English so that you understand exactly what you are agreeing to — there are no hidden clauses or deliberately confusing language.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which contain additional provisions relevant to your use of the h999 platform.

For the purposes of applicable data protection law, h999 is the data controller responsible for the personal data of all registered players on the h999 platform. As data controller, h999 determines the purposes and means by which your personal data is processed.

h999 operates under an internationally recognised gaming licence. The Platform is accessible globally, including to players based in Pakistan. While Pakistan does not currently have a comprehensive standalone data protection law equivalent to the GDPR, h999 voluntarily applies internationally accepted data protection principles in the handling of all player data, regardless of the player's country of residence.

Questions or requests relating to your personal data should be directed to our support team. Contact details are provided in Section 16 of this Policy.

h999 collects the following categories of personal data from players:

h999 does not collect sensitive personal data such as health records, political opinions, or biometric identifiers unless specifically required by our licensing authority for enhanced identity verification purposes, in which case you will be explicitly informed.

h999 collects personal data through the following mechanisms:

• Direct Registration: When you create an h999 account, you provide identity, contact, and financial details directly through our registration interface.
• Account Activity: Data is generated automatically as you use the platform — including games played, bets placed on cricket and PSL markets, and your PKR transaction history.
• Identity Verification: When you submit a CNIC, passport, or other documents for KYC verification, those documents and the data extracted from them are collected and securely stored.
• Payment Processors: When you initiate a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT, transaction reference data is shared with h999 by those providers to confirm payment status.
• Cookies and Tracking Technologies: h999 uses cookies, pixels, and session tracking tools to collect technical and usage data automatically as you browse the platform. See Section 9 for full details.
• Customer Support: Any communications you have with our support team — whether via live chat or email — are recorded and stored for quality assurance and dispute resolution purposes.
• Third-Party Verification Services: We may receive identity confirmation data from regulated third-party KYC and AML verification providers as part of our compliance obligations.

h999 uses your personal data only for the purposes for which it was collected. Specifically, your data is used to:

• Create, verify, and manage your h999 player account.
• Process PKR deposits and withdrawals via your chosen payment method, including JazzCash and EasyPaisa transactions.
• Verify your identity and age in compliance with our licensing authority's Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements.
• Deliver the games, sports betting markets, live dealer tables, and other services you request on the h999 platform.
• Monitor your gameplay patterns for responsible gaming purposes, including detecting signs of problematic gambling behaviour and implementing account-level protections where appropriate.
• Send you account-related communications including transaction confirmations, security alerts, and important policy updates.
• Send you promotional offers, bonuses, and marketing communications, but only where you have specifically opted in to receive these.
• Detect, investigate, and prevent fraud, money laundering, underage gambling, and other prohibited activities.
• Improve the h999 platform through anonymised analytics and usage data.
• Meet our legal and regulatory obligations, including reporting to licensing authorities where required by law.

h999 processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform the contract between you and h999 — i.e., to operate your player account and deliver the gaming services you have requested.
• Legal Obligation: h999 is required by our gaming licence conditions to conduct KYC verification, maintain AML records, and report certain activities to regulatory authorities. This processing is a legal obligation we cannot opt out of.
• Legitimate Interests: h999 processes technical and usage data on the basis of legitimate interests — specifically, to protect the platform from fraud, improve our services, and ensure platform security for all players.
• Consent: Where h999 sends marketing communications or uses non-essential cookies, we rely on your explicit, freely given consent. You may withdraw this consent at any time through your account settings or by contacting our support team.

h999 does not sell your personal data to any third party. We share data only in the following specific, controlled circumstances:

• Payment Processors: To process your PKR deposits and withdrawals, h999 shares necessary transaction reference data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT infrastructure providers. These providers operate under their own privacy policies and security standards.
• Identity Verification Providers: h999 uses regulated third-party KYC and AML service providers to assist in verifying player identities. These providers receive only the data strictly necessary for verification and are contractually prohibited from using it for any other purpose.
• Game Software Providers: Our game providers may receive anonymised session data to audit game fairness and resolve technical disputes. They do not receive your identity or financial data.
• Regulatory Authorities: h999 is legally obligated to share certain player data with our licensing authority and, where required by applicable law, with law enforcement or financial intelligence agencies investigating financial crime.
• IT and Infrastructure Providers: h999 uses third-party cloud hosting, security, and analytics services to operate the platform. These providers act as data processors under strict contractual data processing agreements and may not use your data for their own purposes.

h999 takes the privacy and security of your financial data with particular seriousness. When you deposit or withdraw PKR through JazzCash, EasyPaisa, or any other supported payment method, the following practices apply:

• h999 never stores your JazzCash MPIN, EasyPaisa PIN, online banking password, or any other payment authentication credentials. Authentication is handled exclusively through each provider's own secure interface.
• h999 records transaction reference IDs, amounts, timestamps, and payment method types for accounting, fraud detection, and regulatory compliance purposes. This data is retained for the minimum period required by our licensing authority.
• All payment data in transit is protected by 256-bit SSL/TLS encryption. Payment data at rest is stored in encrypted form within secured infrastructure.
• h999 does not share your detailed financial transaction history with any party outside of our licensed payment processors and regulatory authorities, except as required by law.
• Cryptocurrency transactions via USDT are processed on-chain and are subject to the inherent transparency of the respective blockchain. h999 records wallet addresses and transaction hashes for compliance purposes.

h999 uses cookies and similar technologies to operate the platform effectively, remember your preferences, maintain your session security, and analyse how players interact with the site. Below is a breakdown of the cookie categories h999 uses:

You can manage your cookie preferences through your h999 account settings or through your browser's built-in cookie controls. Please note that disabling strictly necessary cookies will impair your ability to use the h999 platform.

h999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by our licensing authority and applicable financial regulations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account and for a minimum of 5 years following account closure, as required for AML compliance.
• KYC Verification Documents: Retained for a minimum of 5 years from the date of submission, or longer where required by our licensing authority.
• Transaction Records: PKR deposit and withdrawal records are retained for a minimum of 5 years for financial compliance and audit purposes.
• Support Communications: Live chat transcripts and email correspondence are retained for up to 3 years for dispute resolution and quality assurance purposes.
• Marketing Data: Retained until you withdraw your consent for marketing communications, plus a 30-day processing window following opt-out.
• Technical / Log Data: Server logs and session data are retained for up to 12 months for security monitoring purposes, then securely deleted or anonymised.

Upon expiry of the relevant retention period, your data is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

h999 implements a comprehensive, multi-layered approach to data security to protect your personal information against unauthorised access, loss, disclosure, or destruction:

• Encryption in Transit: All data transmitted between your device and h999 servers is protected by 256-bit SSL/TLS encryption. Our TLS certificates are renewed automatically and monitored continuously.
• Encryption at Rest: Sensitive personal and financial data stored on h999 servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to h999 employees who need it to perform their job functions. All staff with data access undergo background screening and regular data protection training.
• Two-Factor Authentication: h999 offers 2FA for player accounts and enforces 2FA for all internal administrative access to systems that contain personal data.
• Intrusion Detection: h999 operates 24/7 automated intrusion detection and anomaly monitoring systems across all platform infrastructure.
• Penetration Testing: The h999 platform undergoes regular third-party penetration testing to identify and remediate security vulnerabilities proactively.

As a player on h999, you hold the following rights in relation to your personal data. These rights are provided free of charge and will be actioned within a reasonable timeframe, typically within 30 days of your request:

• Right of Access: You may request a copy of all personal data h999 holds about you at any time. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data held by h999 about you is inaccurate or incomplete, you have the right to request that it be corrected promptly.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal obligations that require retention.
• Right to Restrict Processing: You may request that h999 suspend the processing of your data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request that h999 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another provider.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though this right may be overridden where h999 has compelling grounds.
• Right to Withdraw Consent: Where processing is based on your consent — such as for marketing communications or non-essential cookies — you may withdraw that consent at any time with immediate effect.

To exercise any of these rights, please contact our support team via live chat or email at [email protected] . We may need to verify your identity before processing your request to protect against unauthorised access to your account data.

h999 is strictly an adults-only platform. Access to h999 is permitted only for individuals who are 21 years of age or older. 21+

h999 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. During the registration process, all players are required to confirm their date of birth and submit valid identity documentation. Any account found to belong to a minor will be immediately suspended, all funds will be returned, and all personal data associated with that account will be permanently deleted.

If you believe that a minor has registered on the h999 platform, please contact our support team immediately at [email protected] so that we can take prompt action. We take underage gambling prevention extremely seriously and actively cooperate with responsible gaming organisations to combat it.

h999 operates on an internationally distributed infrastructure. This means that your personal data may be stored on or transferred to servers located outside of Pakistan. Where such international transfers occur, h999 takes the following steps to ensure your data remains protected:

• Transfers to third-party processors are governed by contractual data processing agreements that impose data protection obligations equivalent to those in this Policy.
• h999 only engages data processors located in jurisdictions or operating under frameworks that provide an adequate level of data protection.
• Where transfers occur for the purpose of regulatory reporting to our licensing authority, such transfers are a legal requirement under our licence conditions and cannot be avoided.

By registering an account and using the h999 platform, you acknowledge and accept that your personal data may be transferred internationally for the purposes set out in this Policy.

h999 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will notify all registered players via email and/or through an in-platform notification at least 14 days before the changes take effect. The updated Policy will also be published at https://h999.vu/privacy-policy with a revised effective date at the top of the document.

Your continued use of the h999 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you may close your account at any time by contacting our support team prior to the effective date.

We encourage you to review this Policy periodically so that you remain informed about how h999 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which h999 handles your personal data, please contact us through any of the following channels:

Our support team includes Urdu-speaking agents familiar with the Pakistani market. Whether you are in Karachi, Lahore, Islamabad, or Faisalabad — we are here to help you around the clock.