h9999 Privacy Policy
— How We Handle Your Data

01 Introduction & Scope

This Privacy Policy ("Policy") is issued by h9999 ("h9999", "we", "us", "our"), the operator of the online gaming platform at h9999.biz. This Policy describes the types of personal information h9999 collects from players registered on the platform, the purposes for which that information is used, how it is stored and protected, and the rights available to you regarding your personal data.

This Policy applies to all personal data processed by h9999 in connection with your use of the h9999 platform, including registration, account management, deposits, withdrawals, gaming activity, bonus participation, and customer support interactions. It applies to all players accessing h9999 from Pakistan and any other eligible jurisdiction.

This Policy should be read alongside the h9999 Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and h9999.

02 Data Controller Information

h9999 acts as the data controller in respect of the personal information collected through the h9999 platform. As data controller, h9999 determines the purposes and means by which your personal data is processed. h9999 operates under an international gaming licence, and its data processing obligations are defined by the requirements of that licence as well as applicable data protection principles.

If you have questions or requests regarding your personal data, you may contact the h9999 Data Protection team via the support channel listed in Section 15 of this Policy. h9999 will respond to all data-related requests within a reasonable timeframe and in accordance with its licence obligations.

03 Data We Collect

h9999 collects the following categories of personal data from registered players. The specific data points collected may vary depending on the stage of your player journey and the services you use.

3.1 Identity & Contact Data

This data is collected at registration and during Know Your Customer (KYC) verification. It is used to confirm your identity, verify your age (21+ requirement), and ensure your account is tied to a real, uniquely identifiable individual.

3.2 Financial & Transaction Data

Financial data is required to process your deposits and withdrawals, comply with anti-money laundering (AML) obligations, and maintain accurate account records. h9999 does not store full bank account credentials — only the references necessary to facilitate your chosen payment method.

3.3 Gaming Activity Data

Gaming activity data is used to manage your account, settle bets accurately, administer bonus terms, provide responsible gaming features such as deposit limits and session timers, and meet regulatory reporting requirements.

3.4 Technical & Device Data

Technical data helps h9999 detect fraud, enforce geographic restrictions, identify multi-accounting, and maintain platform security. Geolocation data is used at the country and region level only — h9999 does not track precise GPS coordinates.

3.5 Communications Data

Communications data is retained to maintain a record of your interactions with h9999 support, resolve disputes accurately, and improve service quality.

04 How We Collect Your Data

h9999 collects your personal data through the following methods:

• Direct collection: Information you provide when registering, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and device data collected automatically when you access the h9999 platform, including through cookies, session logs, and server-side tracking.
• Third-party sources: Identity verification data from CNIC validation services; fraud screening data from our payment processing partners; geolocation data from IP resolution services.

h9999 does not purchase personal data lists from third-party data brokers. All data collected is directly related to your use of the h9999 platform or is required for legal compliance purposes.

05 How We Use Your Data

h9999 uses your personal data for the following purposes:

h9999 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated tools are used for fraud detection or AML screening, flagged cases are reviewed by a qualified compliance team member before any account action is taken.

06 Legal Basis for Processing

h9999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the player agreement — including account creation, payment processing, bet settlement, and account management — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal obligation: Processing necessary to comply with AML regulations, KYC requirements, age verification obligations, and regulatory reporting requirements under h9999's international gaming licence.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming programme administration, and service improvement, where such interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing communications, optional personalisation features, and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time by contacting h9999 support or adjusting your account preferences.

07 Data Sharing & Third Parties

h9999 does not sell your personal data. h9999 may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network processors receive the minimum financial and identity data necessary to process your transactions.
• KYC and identity verification providers: Third-party CNIC validation and document verification services used to confirm player identity and age.
• Fraud and AML screening services: Specialist compliance platforms that screen transactions and player profiles against known fraud patterns and international sanctions lists.
• Game software providers: Licensed game developers whose titles are hosted on h9999 receive anonymised or pseudonymised session data for the purpose of game log verification and technical dispute resolution.
• Regulatory and law enforcement authorities: h9999 will disclose player data to competent authorities when required to do so by law, court order, or the terms of its gaming licence.
• IT infrastructure and cloud service providers: Hosting, database, and security service providers operating under contractual data processing agreements with h9999.

08 International Data Transfers

As h9999 operates under an international gaming licence, some of your personal data may be processed or stored on servers located outside Pakistan. Where such transfers occur, h9999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Safeguards used by h9999 for international transfers include contractual data processing agreements with third-party service providers, technical security measures including encryption in transit and at rest, and access controls limiting data visibility to authorised personnel only.

09 Data Retention

h9999 retains your personal data for as long as your account is active and for a defined period thereafter, in accordance with the retention requirements of its international gaming licence and applicable AML regulations. The general retention principles applied by h9999 are as follows:

• Active account data: Retained for the lifetime of your h9999 account and updated as changes occur.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with standard AML record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the end of the business relationship.
• Gaming activity logs: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support communications: Retained for a minimum of two (2) years from the date of the interaction.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded players, including during any permanent self-exclusion period.

Upon expiry of the applicable retention period, h9999 will securely delete or anonymise your personal data so that it can no longer be linked to your identity.

10 Cookies & Tracking

h9999 uses cookies and similar tracking technologies on the h9999 platform. Cookies are small data files stored on your device that help h9999 deliver a functional, personalised, and secure platform experience. The categories of cookies used by h9999 are as follows:

• Strictly necessary cookies: Required for core platform functionality including login session management, security token validation, and payment flow continuity. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your platform preferences such as language settings and responsible gaming tool configurations. These cookies do not track your activity across other websites.
• Analytics cookies: Used to understand how players navigate the h9999 platform, which pages are most visited, and where usability improvements can be made. Analytics data is aggregated and does not identify individual players by name.
• Security and fraud detection cookies: Help h9999 identify unusual access patterns, detect automated bot activity, and protect player accounts from unauthorised access.

You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the h9999 platform. h9999 does not use third-party advertising cookies or cross-site behavioural tracking cookies.

11 Your Data Rights

As a registered h9999 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact h9999 support as described in Section 15.

• Right of access: You have the right to request a copy of the personal data h9999 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data h9999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For CNIC-linked data, updated verification documents will be required.
• Right to erasure: You may request that h9999 delete your personal data. This right is subject to limitations where h9999 has a legal obligation to retain the data (e.g., AML record-keeping requirements). Where erasure is not possible in full, h9999 will explain the specific retention obligation that applies.
• Right to restrict processing: You may request that h9999 restrict the processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: You have the right to receive a copy of personal data you have provided to h9999 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. You may opt out of marketing communications at any time through your account settings or by contacting support.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

12 Security Measures

h9999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the h9999 platform.
• At-rest encryption for sensitive data stored in h9999's databases, including CNIC numbers, financial references, and authentication credentials.
• Password hashing using industry-standard algorithms — h9999 does not store passwords in plain text or reversibly encrypted form.
• Two-factor authentication (2FA) available to all players as an additional account security layer.
• Role-based access controls limiting employee access to personal data to only those whose job function requires it.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Automated anomaly detection monitoring for unusual login patterns, access attempts, and transaction behaviour.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, h9999 will notify affected players promptly and take all appropriate remedial action.

13 Minor Protection

h9999 is strictly a 21+ platform. h9999 does not knowingly collect personal data from individuals under the age of 21. The mandatory CNIC verification process is designed to prevent underage registration. If h9999 discovers or has reasonable grounds to believe that a registered player is under 21 years of age, the account will be suspended immediately, all associated personal data will be flagged for review, and any deposits made will be returned following investigation.

Parents and guardians are encouraged to use device-level parental control software to prevent minors from accessing h9999 or any other online gaming platform. If you believe a minor has registered on h9999, please contact support immediately with the relevant details.

14 Policy Updates

h9999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. When material changes are made, h9999 will notify registered players via email or a prominent platform notification at least 7 days before the updated Policy takes effect.

The effective date at the top of this Policy will be updated each time a new version is published. Your continued use of the h9999 platform after the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must cease using h9999 and may request account closure in accordance with the Terms and Conditions.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about h9999's data handling practices, please contact the h9999 Data Protection team through the following channel:

Support Email: [email protected] (plain text — not a clickable link)
Live Chat: Available 24/7 within the h9999 platform — average response time under 90 seconds.
Subject Line: Please include "Data Privacy Request" or "Privacy Complaint" in the subject line of your email so it reaches the correct team without delay.

When submitting a data rights request, please include your registered account username, the nature of your request, and any relevant supporting information. h9999 may need to verify your identity before processing the request to ensure that data is not disclosed to an unauthorised third party.

If you are not satisfied with h9999's response to a privacy complaint, you have the right to escalate the matter to the dispute resolution body designated under h9999's international gaming licence. h9999 will provide the relevant escalation contact details upon request.