HC999 Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy applies to HC999, the online gaming platform operated at hc999.ws ("HC999", "we", "us", "our"). HC999 is a Pakistan-focused gaming platform offering sports betting, live casino, cricket betting, Teen Patti, esports betting, and fishing games — all denominated in Pakistani Rupees (PKR).

This policy applies to all personal data collected when you visit hc999.ws, register an HC999 account, deposit or withdraw PKR, place a bet or play a game, contact HC999 customer support, or interact with any HC999 service or communication. It applies equally to Pakistani players accessing HC999 from mobile devices on Jazz, Zong, Telenor, or Ufone networks, and to those accessing via desktop browsers.

HC999 collects personal data through several channels: directly from you when you register or use HC999 services, automatically when your device accesses hc999.ws, and from payment providers when you make a PKR deposit or withdrawal. The categories of data we collect are:

HC999 does not collect biometric data, location tracking beyond IP-based geolocation, or social media profile data. We do not have access to your mobile wallet PIN or bank card CVV — these remain with the respective payment provider at all times.

HC999 uses the personal data we collect for the following specific purposes. We have a legitimate legal basis for each use — either your consent, a contractual necessity, or a legal obligation:

• Account Management: Creating and maintaining your HC999 account, verifying your identity and age (18+ requirement), processing your PKR deposits and withdrawals, and communicating account-related information to your registered mobile number or email.
• Service Provision: Enabling you to place sports bets, play live casino games, participate in Teen Patti, and use all other HC999 features. This includes running the live betting engine, calculating odds, settling bets, and crediting winnings to your PKR wallet.
• Fraud Prevention and Security: Monitoring account activity for signs of unauthorised access, multiple account registration, bonus abuse, money laundering, or any other activity prohibited under HC999's Terms and Conditions. Technical data including IP addresses and device fingerprints are used for this purpose.
• Responsible Gaming: Using your gaming activity data to identify patterns that may suggest problematic gambling behaviour, triggering responsible gaming alerts, enforcing self-exclusion restrictions, and complying with the HC999 Responsible Gaming policy.
• Legal Compliance: Complying with applicable Pakistani regulations, anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and any lawful requests from Pakistani government authorities or courts.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve HC999's user experience, load times, mobile performance, and feature set. This analysis does not identify individual players.
• Marketing Communications (with consent only): Sending bonus offers, PSL promotions, reload bonus notifications, and other HC999 promotional content — only to players who have explicitly consented to receiving such communications.

HC999 does not sell, rent, or share your personal data with any third party for commercial marketing purposes — ever. The only circumstances under which HC999 shares your data with external parties are:

• Payment Processors: HC999 shares necessary financial data (account reference numbers, transaction amounts in PKR) with JazzCash, Easypaisa, NayaPay, SadaPay, and card processors to execute your deposits and withdrawals. These processors operate under strict data confidentiality agreements and are themselves bound by Pakistani financial data regulations.
• Game Providers: Live casino and RNG game providers (including Evolution Gaming and Pragmatic Play) receive a session token to authenticate your game session. They do not receive your full personal profile, CNIC data, or PKR financial history.
• KYC Verification Partners: Where identity verification requires document checking, HC999 may use a certified third-party KYC service. Any such partner is contractually bound to process your data only for the specific purpose of identity verification and to delete it once the process is complete.
• Legal and Regulatory Authorities: HC999 will disclose personal data to Pakistani government agencies, law enforcement, or courts when required to do so by applicable law, court order, or lawful government request. HC999 will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all assets of HC999, personal data held by HC999 may be transferred to the acquiring entity. You will be notified of any such transfer and given the opportunity to close your account if you do not wish your data to be transferred.

Because HC999 operates entirely in PKR and processes payments through Pakistan's most widely used mobile wallets and banking systems, the way we handle financial data deserves specific attention. When you deposit or withdraw via JazzCash or Easypaisa at HC999:

• HC999 receives a confirmation reference from the payment provider — it does not receive or store your JazzCash or Easypaisa PIN, OTP, or full mobile wallet credentials.
• HC999 logs the transaction amount in PKR, the masked payment account identifier, and the timestamp. This record is kept for 7 years as required for anti-money laundering compliance.
• PKR transaction records are encrypted at rest using AES-256 and accessible only by authorised HC999 finance and compliance personnel.
• HC999 applies transaction monitoring across all PKR deposits and withdrawals to detect unusual patterns that may indicate money laundering or fraud. Suspicious activity is reported to relevant authorities as required by law.

HC999 uses cookies and similar browser storage technologies to keep the platform working correctly, to remember your session so you do not need to log in repeatedly, and to analyse how players use hc999.ws so we can improve the experience. We do not use advertising cookies or cross-site tracking for third-party commercial purposes.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent HC999 from functioning correctly and you will be unable to log in or place bets.

HC999 has invested significantly in its security infrastructure precisely because we hold sensitive personal and financial data for Pakistani players. The security measures in place at HC999 include:

• AES-256 Encryption at Rest: All personal data and transaction records stored in HC999 databases are encrypted using AES-256 — the same standard used by Pakistan's commercial banks. Decryption keys are stored separately from the encrypted data using hardware security modules.
• SSL/TLS in Transit: All data transmitted between your browser or mobile device and HC999 servers is protected by TLS 1.2 or higher. You will see the padlock icon in your browser address bar at all times when using HC999.
• Two-Factor Authentication: HC999 offers OTP-based two-factor authentication for account logins and withdrawal requests. We strongly recommend enabling this from your HC999 account security settings.
• Access Controls: HC999 employee access to personal data is restricted on a need-to-know basis. Access logs are maintained and audited regularly. No HC999 employee has unrestricted access to player financial records.
• Fraud Monitoring: HC999 operates continuous automated fraud monitoring across all accounts and transactions. Unusual login patterns, IP changes, or large unusual transactions trigger immediate review by our security team.
• Data Breach Response: HC999 maintains a documented data breach response plan. In the event of a confirmed data breach affecting your personal data, HC999 will notify affected Pakistani players within 72 hours of discovering the breach and will provide clear guidance on any protective steps you should take.

HC999 retains personal data for the minimum period necessary for the purpose it was collected, and not beyond that unless legal obligations require a longer retention period. The general retention schedules at HC999 are:

After the applicable retention period, HC999 securely deletes or irreversibly anonymises your personal data. Anonymised aggregated data (which cannot identify you) may be retained indefinitely for platform analytics.

As an HC999 player you have the following rights regarding your personal data. To exercise any of these rights, contact HC999 at support@hc999.ws with your registered mobile number or CNIC reference. We will respond within 30 days.

HC999 is strictly for adults aged 18 and above. HC999 does not knowingly collect personal data from anyone under the age of 18. Age is verified at registration via Pakistani mobile number OTP and again during KYC at first withdrawal. If HC999 discovers that an account was registered by a person under 18, the account will be closed immediately, all data collected in relation to that account will be deleted (beyond what must be retained for legal compliance), and any funds deposited will be returned to the depositing payment method.

If you believe an under-18 person has registered at HC999, please contact us immediately at support@hc999.ws. HC999 takes this seriously and will act immediately on any credible report.

HC999 sends promotional communications including bonus offers, PSL and cricket season promotions, and new feature announcements only to players who have explicitly opted in to receive such messages. At registration you are asked whether you consent to receiving HC999 marketing communications by SMS to your Pakistani mobile number or by email.

• You can withdraw marketing consent at any time from the Notifications section of your HC999 account settings — effective within 48 hours.
• You can also email support@hc999.ws to unsubscribe from all HC999 marketing communications.
• Withdrawing marketing consent does not affect your ability to use HC999 — your account remains fully active.
• Opting out of marketing does not prevent HC999 from sending you essential account communications such as withdrawal confirmations, security alerts, KYC requests, and terms update notices. These are necessary communications and are not marketing.

HC999 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, new HC999 features, changes in Pakistani law, or evolving industry standards. When we make material changes, HC999 will notify registered players via SMS to their registered Pakistani mobile number and/or email, at least 14 days before the changes take effect.

The updated Policy will be published at hc999.ws/privacy-policy with a revised effective date at the top. Continuing to use HC999 after the updated Policy takes effect constitutes acceptance of the changes. If you disagree with any material change, you have the right to request account closure before the change takes effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or HC999's handling of your personal data, please get in touch with us. Our customer support team is available 24/7 in both Urdu and English and will take privacy enquiries seriously.

For data access, correction, or deletion requests, please email support@hc999.ws with the subject line "Data Privacy Request" and include your registered Pakistani mobile number so we can verify your identity before processing the request.