h999 Privacy Policy – How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how h999 ("h999", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to users ("you", "your") of the h999 online gaming platform at h999.one and its associated pages and services (the "Platform").

h999 is committed to protecting your privacy and handling your personal data responsibly. This Policy is intended to give you a clear and complete understanding of our data practices, in plain language, so you can make informed decisions about your use of the Platform.

By registering an account or using the h999 Platform, you acknowledge that you have read and understood this Policy. Where applicable law requires your consent for specific processing activities, we will seek that consent separately. This Policy should be read alongside the h999 Terms & Conditions, which are incorporated by reference.

2. Personal Data We Collect

h999 collects the following categories of personal data in the course of providing its services:

3. How We Collect Your Data

h999 collects personal data through the following methods:

• Directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically as you use the Platform, through server logs, cookies, and similar tracking technologies that record technical and usage data.
• From third parties, including identity verification service providers, payment processors (Easypaisa, JazzCash, HBL, UBL, Meezan Bank, Bank Alfalah), fraud detection services, and where applicable, publicly available sources used to fulfil regulatory obligations.

4. Purposes and Legal Basis for Processing

h999 processes your personal data for the following purposes, each supported by an identified legal basis:

• Account creation and management — necessary for the performance of the contract between you and h999.
• Processing deposits and withdrawals — necessary for the performance of the contract and for compliance with financial regulations applicable to payment processing.
• Identity verification (KYC) — necessary for compliance with legal obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements.
• Fraud prevention and security — necessary for the legitimate interests of h999 and its users in maintaining a secure platform and preventing financial crime.
• Responsible gaming monitoring — processing gaming behaviour data to identify potential problem gambling indicators and apply protective measures, pursued in the legitimate interest of player welfare and in compliance with applicable gaming regulations.
• Customer support — necessary for the performance of the contract and for the legitimate interest of maintaining service quality.
• Platform analytics and improvement — necessary for the legitimate interest of h999 in understanding Platform usage and improving the user experience.
• Marketing communications — where you have provided explicit consent, h999 may send you relevant promotional communications about platform offers. You may withdraw consent at any time.
• Legal and regulatory compliance — where processing is necessary to meet h999's legal obligations under applicable law.

5. Third-Party Sharing and Disclosure

h999 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. h999 discloses personal data to third parties only in the following limited circumstances:

• Payment processors: Easypaisa, JazzCash, HBL, UBL, Meezan Bank, and Bank Alfalah receive the data necessary to process your transactions. Each processor handles data in accordance with its own privacy policy and applicable financial regulations.
• Identity verification providers: KYC and AML compliance service providers receive identity and document data as required by law to verify account holder identity.
• Fraud detection services: Relevant technical and transactional data may be shared with fraud prevention partners to identify and prevent prohibited activities on the Platform.
• IT and infrastructure providers: Cloud hosting, database management, and cybersecurity service providers that operate Platform infrastructure under strict data processing agreements requiring equivalent data protection standards.
• Regulatory and legal authorities: h999 will disclose personal data to competent regulatory, law enforcement, or judicial authorities where required to do so by applicable law, court order, or regulatory direction.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving h999, user data may be transferred to a successor entity, subject to equivalent privacy protections and user notification where required by law.

6. Data Retention

h999 retains personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Specific retention periods include:

• Account and KYC data is retained for a minimum of five (5) years following account closure to meet AML regulatory requirements.
• Transaction and gaming records are retained for a minimum of five (5) years for financial and regulatory compliance purposes.
• Support communications are retained for three (3) years from the date of the communication.
• Technical and usage data (logs) is retained for periods sufficient for security monitoring, fraud analysis, and platform optimisation, typically not exceeding two (2) years.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with h999's data disposal procedures.

7. Security Measures

h999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and h999 servers.
• Encryption of sensitive personal and financial data at rest.
• Role-based access controls limiting personnel access to personal data to those with a documented operational need.
• Regular security assessments and infrastructure reviews.
• Two-factor authentication availability for user accounts.

While h999 takes security seriously and implements industry-standard measures, no digital platform can guarantee absolute security. In the event of a data breach that materially affects your rights, h999 will notify affected users as required by applicable law.

8. Cookies and Tracking Technologies

h999 uses cookies and similar technologies (web beacons, local storage) to operate the Platform and improve user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function — session management, login authentication, security tokens. These cannot be disabled without breaking core functionality.
• Analytical Cookies: Help h999 understand how users navigate the Platform — which pages are visited, where sessions start and end, load performance — enabling continuous improvement.
• Functional Cookies: Remember user preferences such as language settings, game lobby filters, and display options to personalise the Platform experience.
• Marketing Cookies: Used where consent is given to track engagement with promotional content and measure the effectiveness of h999 marketing activity. These are only active where you have consented.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. Blocking strictly necessary cookies will prevent normal Platform operation.

9. Your Privacy Rights

Subject to applicable law and certain legal exceptions, you have the following rights regarding your personal data held by h999:

• Right of access: You may request a copy of the personal data h999 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations that may prevent full erasure.
• Right to restrict processing: You may request that processing of your data be restricted in certain circumstances while a dispute is under review.
• Right to data portability: Where technically feasible and permitted by applicable law, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing, at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, contact h999 support. We will respond within a reasonable period. Some rights are subject to verification of identity before we can act on the request.

10. Children's Privacy

The h999 Platform is strictly for adults aged 18 years and above. h999 does not knowingly collect personal data from persons under 18 years of age. If h999 becomes aware that personal data has been collected from an underage individual, that account will be closed immediately, all related data will be deleted (subject to any legal investigation requirements), and any funds deposited will be returned to the payment source following applicable procedures.

If you believe a person under 18 has registered an h999 account, please contact h999 support immediately.

11. Amendments to This Policy

h999 reserves the right to update this Privacy Policy at any time. Where amendments are material, h999 will endeavour to notify registered users via their registered contact details or by prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Continued use of the h999 Platform following any amendment constitutes acceptance of the revised Policy. If you do not agree with a revised Policy, you should cease using the Platform and may request account closure.

12. Contact and Data Queries

For any privacy-related queries, data subject access requests, or concerns regarding h999's handling of your personal data, please contact h999 support. Contact details are available on the h999 Support page. h999 will acknowledge receipt of formal privacy requests and respond within a reasonable timeframe in accordance with applicable law.