hh99 Privacy
Policy

hh99 ("hh99", "we", "us", "our") operates the online casino and sports betting platform accessible at hh99.today. hh99 is the data controller responsible for the personal information of registered users, including Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, and all other cities. As data controller, hh99 determines the purposes for which and the means by which your personal data is processed.

hh99 is committed to handling your personal data responsibly and in accordance with applicable data protection laws and international best practices for the online gaming industry. This Privacy Policy sets out the full scope of hh99's data practices in clear, accessible language.

hh99 collects personal data in several categories depending on how you interact with the platform. The following table summarises what we collect and why:

hh99 does not collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where explicitly required for responsible gaming self-exclusion programmes and only with your direct consent.

hh99 collects personal data through the following channels:

• Direct interactions: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support via live chat or email, or participate in a promotion, you provide personal data directly to hh99.
• Automated technologies: When you use the hh99 platform, we automatically collect certain technical and usage data through cookies, server logs, and similar technologies. This includes your IP address, browser type, operating system, pages visited, and session duration.
• Third-party payment providers: When you complete a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard, your payment provider shares transaction confirmation data with hh99 to reconcile your account balance.
• Identity verification services: For KYC purposes, hh99 may use accredited third-party identity verification providers to authenticate your CNIC or other government-issued identity documents. These providers confirm identity data but do not retain a copy of your documents beyond what is necessary for compliance purposes.
• Anti-fraud and risk systems: hh99 employs automated fraud detection tools that analyse device fingerprints, behavioural patterns, and transaction data to protect the platform and all players from fraudulent activity.

hh99 uses your personal data for the following specific purposes:

• To create and manage your hh99 account and verify your identity and age (21+ requirement).
• To process deposits and withdrawals via your chosen Pakistani payment method (JazzCash, EasyPaisa, etc.) and maintain accurate account balances.
• To comply with legal and regulatory obligations, including anti-money-laundering (AML) checks, responsible gaming requirements, and Know Your Customer (KYC) verification procedures.
• To provide customer support via live chat and email, resolve disputes, and maintain records of interactions for quality assurance purposes.
• To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct as defined in the hh99 Terms and Conditions.
• To improve the hh99 platform by analysing aggregated usage data, identifying technical issues, and developing new features that Pakistani players and our global user base will find valuable.
• To send service communications about your account, including deposit confirmations, withdrawal notifications, security alerts, and important policy updates.
• To send promotional communications about bonuses, new games, PSL betting markets, and special offers — but only where you have given explicit consent, and only via your preferred channel.
• To support responsible gaming by monitoring patterns that may indicate problem gambling behaviour and enabling our team to reach out with support resources where appropriate.

hh99 processes personal data only where a lawful basis exists to do so. The following legal bases apply to the different categories of processing described in this Privacy Policy:

• Performance of a Contract: Processing your identity, contact, and financial data is necessary to perform the hh99 Terms and Conditions agreement with you — including creating your account, processing transactions, and providing gaming services.
• Legal Obligation: Processing for AML compliance, KYC verification, and regulatory reporting is required by law. hh99 must comply with applicable financial crime prevention regulations regardless of user preference.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and product improvement is based on hh99's legitimate interest in operating a safe, secure, and high-quality platform. These interests do not override your fundamental rights.
• Consent: Processing for direct marketing communications and for the use of non-essential cookies is based on your freely given, informed, and specific consent. You may withdraw consent at any time without detriment.

hh99 does not sell or rent your personal data to third parties. We share your data only in the limited circumstances described below, and only with parties that are contractually bound to protect it to at least the same standard as hh99.

6.1 Service Providers (Data Processors)

hh99 works with a limited number of vetted third-party service providers who process data on our behalf to deliver specific platform functions. These include:

• Payment processing providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard networks).
• Identity and KYC verification providers.
• Anti-fraud and risk management technology providers.
• Cloud hosting and infrastructure providers who store platform data in secure, access-controlled data centres.
• Live chat and customer support platform providers.
• Game content providers (whose software powers hh99's casino game library).

All such providers are bound by data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to hh99.

6.2 Legal and Regulatory Disclosure

hh99 may disclose your personal data to regulatory authorities, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where required by law, court order, or regulatory directive. hh99 will, where legally permissible, attempt to notify you of such disclosure requests.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of hh99's assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer and the applicable privacy protections via a prominent notice on the hh99 platform.

hh99 uses cookies and similar tracking technologies to ensure the platform functions correctly, to improve your user experience, and — where you have consented — to provide you with personalised content and relevant promotions.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the hh99 platform to function. They enable core features such as session management, login state, and security. These cookies cannot be disabled.
• Performance Cookies: These collect anonymised data about how players use the hh99 platform — such as which pages are visited most and whether any error messages are encountered. This data helps us improve the platform.
• Functionality Cookies: These remember your preferences, such as your preferred language, display settings, and notification preferences, so you do not need to re-enter them on each visit.
• Marketing Cookies: With your consent, these cookies track your browsing behaviour on hh99 to help us present promotions and bonuses that are relevant to your gaming interests and activity patterns.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the hh99 platform.

hh99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting requirements.

• Account data: Retained for the duration of your active account and for a minimum period of five (5) years following permanent account closure, in compliance with anti-money-laundering regulations.
• Financial transaction data: Retained for a minimum of seven (7) years from the date of each transaction to satisfy financial reporting and AML compliance obligations.
• KYC and identity verification documents: Retained for the duration of the account and for five (5) years post-closure.
• Support communications: Retained for two (2) years from the date of each interaction for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of active consent and for one (1) year following withdrawal of consent as evidence of the consent record.

After the applicable retention period expires, hh99 securely deletes or anonymises your personal data so that it can no longer be associated with you as an individual.

As a user of hh99, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the hh99 support team. hh99 will respond to all verified rights requests within ten (10) business days.

• Right of Access: You have the right to request a copy of all personal data that hh99 holds about you. We will provide this in a structured, commonly used, and machine-readable format upon request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that hh99 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that hh99 restrict the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request that hh99 provide your personal data in a portable format so it can be transferred to another service provider.
• Right to Object: You have the right to object to processing of your personal data based on hh99's legitimate interests, and to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

hh99 employs age verification procedures at the point of registration and through ongoing KYC processes to enforce this age restriction. If you are a parent or guardian and believe that a person under 21 in your household has registered an hh99 account, please contact our support team immediately. We will investigate and take appropriate action without delay.

hh99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between users and the hh99 platform.
• Encrypted data storage for all personally identifiable information and financial data at rest.
• Role-based access controls ensuring that personal data is accessible only to hh99 staff with a specific operational need.
• Regular security audits and penetration testing conducted by independent cybersecurity specialists.
• Automated intrusion detection systems that monitor for suspicious access patterns and flag anomalies in real time.
• Two-factor authentication (2FA) available for all hh99 accounts and mandatory for internal staff accessing user data systems.
• Regular staff training on data protection, phishing awareness, and secure data handling practices.

Despite these measures, no internet-based platform can guarantee absolute security. If you have reason to believe your hh99 account has been compromised, please contact our support team immediately so we can take protective action on your account.

As hh99 operates internationally, your personal data may be transferred to and processed in countries other than Pakistan. Where such transfers occur, hh99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding that required under applicable data protection laws.

Safeguards for international transfers include the use of standard contractual clauses, data processing agreements with adequate protections, and transfers only to jurisdictions that maintain recognised data protection standards. hh99 will not transfer your data to a country or territory that does not provide an adequate level of protection without first implementing the appropriate contractual or technical safeguards.

hh99 may update this Privacy Policy from time to time to reflect changes in our data practices, new services introduced on the platform, or updates to applicable data protection law. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where changes are material — meaning they significantly affect how we handle your personal data — hh99 will notify you by displaying a prominent notice on the platform and, where appropriate, by sending a notification to your registered email address or mobile number before the changes take effect.

Your continued use of the hh99 platform after the effective date of any updated Privacy Policy constitutes your acknowledgment and acceptance of the revised terms. If you disagree with the updated policy, you should contact support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or hh99's data practices, please reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week from the hh99 platform. Our support agents can assist with data rights requests and privacy questions.
• Email Support: [email protected] (plain text — not a clickable link)

When contacting us about a data rights request, please include your registered email address and username to help us verify your identity and process your request promptly. hh99 will respond to all privacy-related enquiries within ten (10) business days.

For Pakistani users specifically: If you believe hh99 has not handled your personal data in accordance with this Privacy Policy or applicable data protection law, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.