Privacy Policy – hi309 Online Gaming Platform Pakistan

1About This Policy

This Privacy Policy explains how hi309 ("the Platform," "we," "us") handles personal data belonging to players who register an account or visit the platform. It covers data collected through the hi309 website, the hi309 mobile application and any related services.

By registering an account on hi309, you acknowledge that you have read this Privacy Policy and that you understand how your personal information is handled. If you do not agree with how we process data, you should not register or continue using the platform.

This policy should be read alongside the Terms and Conditions, which govern your use of the platform as a whole. Where there is a conflict between the two documents regarding data handling, this Privacy Policy takes precedence.

2Data We Collect

hi309 collects personal data through several channels — the registration form, ongoing account use, payment processing and technical data generated by your device and browser. The categories of data we collect include:

Registration data:

• Full name
• Date of birth (to verify you are 18 or over)
• Mobile phone number
• Email address (where provided)
• Account username and password (stored in hashed form)

Identity verification data (KYC):

• CNIC number
• Copy of CNIC or other identity document (submitted when required for verification)
• Selfie or liveness check image (where required by the verification process)

Financial and transaction data:

• Deposit and withdrawal records including amounts in PKR, dates and method used
• JazzCash, Easypaisa or Raast account identifiers used for transactions
• Bank account details where bank transfer is used
• Card type and last four digits where a card is used (full card numbers are not stored by hi309)

Usage and behavioural data:

• Login timestamps and session duration
• Games played, bets placed, amounts wagered and outcomes
• Device type, operating system and browser version
• IP address and approximate location derived from IP
• Pages visited and navigation patterns within the platform

Communication data:

• Messages sent to hi309 support via live chat or email
• Preferences relating to promotional communications

3Why We Collect It — Legal Basis

Each category of data hi309 collects has a specific purpose and a corresponding reason for collection. The table below summarises the main data types, why we collect them and the basis on which processing takes place.

4How Your Data is Used

The personal data hi309 holds is used for the following purposes:

• Account management: Creating, maintaining and securing your hi309 account, including password resets and login session management.
• Transaction processing: Facilitating PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, cards and other supported methods. This includes communicating transaction status to you and to the payment provider.
• Identity verification: Confirming your identity before processing withdrawals or when required as part of routine KYC checks to prevent fraud and underage access.
• Personalisation: Displaying your account balance, bet history, favourite games and other account-specific information within the platform interface.
• Platform improvement: Analysing aggregated, anonymised usage patterns to understand which sections of the platform are used most, where players experience issues and where performance improvements are needed.
• Responsible gaming monitoring: Identifying usage patterns that may indicate problem gaming behaviour so that account tools (deposit limits, session reminders, self-exclusion) can be surfaced to the relevant player.
• Fraud prevention and security: Monitoring login patterns, IP addresses and transaction behaviour to detect and prevent fraudulent activity, duplicate accounts and prohibited conduct as defined in the Terms and Conditions.
• Customer support: Using account and transaction history to assist with support queries, verify your identity when you contact support, and resolve disputes.
• Promotional communications: Sending relevant offers and updates to players who have opted in. Players can opt out at any time through account settings.

hi309 does not use personal data for automated decision-making that produces significant legal or financial effects without human review. For example, if your account is flagged for investigation, a member of the team reviews the case before any account action is taken.

5Data Sharing with Third Parties

hi309 does not sell personal data. Data is shared with third parties only where necessary to operate the platform, and only with parties who are required to handle it securely under contractual obligations.

Third parties who may receive your data include:

• Payment processors: JazzCash, Easypaisa, Raast, bank transfer networks and card processing providers receive the transaction data necessary to complete your deposit or withdrawal. Each provider operates under their own privacy and security standards.
• Identity verification providers: Where KYC verification is required, identity documents and verification data may be shared with a third-party verification service to confirm authenticity.
• Fraud detection services: Device and behavioural data may be shared with fraud detection providers to identify patterns consistent with prohibited activity.
• Game content providers: Some game sections on hi309 are powered by third-party game providers. These providers may receive anonymised session data to facilitate gameplay but do not receive your full account profile.
• Legal and regulatory authorities: Where required by applicable law or in response to a valid legal request, hi309 may disclose personal data to relevant authorities. This is done only to the extent strictly required by the request.

6Data Retention

hi309 retains personal data for as long as your account is active and for a period after closure as required for legal, fraud prevention and dispute resolution purposes. The general retention periods below apply unless a specific legal requirement mandates a longer period.

• Account data: Retained while your account is active and for a period of up to 5 years after voluntary closure or the last account activity, whichever is later.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum of 5 years to support financial record-keeping and fraud investigation requirements.
• KYC and identity documents: Retained for the duration of the account and for up to 5 years after account closure.
• Support communications: Retained for up to 3 years after the last communication to allow for dispute resolution.
• Anonymised usage data: Aggregated, non-identifiable usage analytics may be retained indefinitely for platform improvement purposes.

When data reaches the end of its retention period, it is securely deleted or anonymised. If you request account deletion before a retention period has expired, data that must be retained for legal reasons will be kept in a restricted state until the period ends.

7Cookies and Tracking Technologies

hi309 uses cookies and similar technologies on the website and within the mobile app. These are small data files stored on your device that help the platform function correctly and allow us to understand how it is being used.

The types of cookies hi309 uses are:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during a visit and security tokens that protect your account. These cannot be disabled without breaking core functionality.
• Preference cookies: Remember settings you have chosen, such as language or display preferences, so you do not need to set them again each visit.
• Analytics cookies: Collect anonymised data about how players navigate the platform — which sections are visited, where players spend time and where errors occur. This data is used to improve the platform and is not linked to individual player identities.

hi309 does not use advertising cookies, cross-site tracking cookies or third-party marketing pixels. You can manage cookie settings through your browser, but disabling essential cookies will affect your ability to use the platform normally.

8Security Measures

hi309 implements technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and hi309's servers
• Password hashing — your login password is never stored in plaintext
• Access controls limiting internal access to personal data on a need-to-know basis
• Fraud monitoring systems that flag unusual account activity for review
• Regular security reviews of platform systems and third-party integrations

While hi309 takes data security seriously, no system is completely immune to risk. Players can reduce their exposure by keeping their login credentials private, using a strong unique password for their hi309 account and logging out after each session, particularly on shared devices.

If you believe your account has been accessed by someone other than yourself, contact support at [email protected] immediately so we can investigate and, if necessary, secure the account.

9Your Rights Over Your Data

As a registered player on hi309, you have the following rights in relation to your personal data:

• Right to access: You can request a copy of the personal data hi309 holds about you. We will provide this within a reasonable timeframe following identity verification.
• Right to correction: If any personal data we hold is inaccurate or out of date, you can request that it be corrected. For basic account details, you can update these directly through your account settings.
• Right to deletion: You can request that your personal data be deleted. We will process this request where no legal obligation requires us to retain the data. Transaction records and KYC data may be retained for the periods described in Section 6 regardless of a deletion request.
• Right to restrict processing: You can ask hi309 to limit how your data is used while a correction or deletion request is being reviewed.
• Right to object to marketing: You can opt out of promotional emails and notifications at any time through your account settings or by requesting this via support. Opting out of marketing does not affect your account or access to the platform.

To exercise any of these rights, contact support at [email protected] with your request. We will verify your identity before processing any data access, correction or deletion request.

10Children's Privacy

hi309 is strictly for adults aged 18 and over. The platform does not knowingly collect personal data from anyone under 18. Age verification is carried out at the point of registration and may be repeated before a withdrawal is processed.

If hi309 identifies or is informed that an account has been registered by a person under 18 years of age, that account will be closed immediately, all pending transactions will be cancelled and any data associated with the account will be deleted following investigation.

If you believe a minor has accessed hi309 using your account or has registered their own account, contact support immediately at [email protected].

11Updates to This Privacy Policy

hi309 may update this Privacy Policy from time to time to reflect changes in how we handle data, changes to the services we offer or changes in applicable requirements. When material changes are made, registered players will be notified through their registered contact details or via a notice displayed on the platform at their next login.

The date at the top of this page shows when the policy was last updated. We recommend reviewing this page periodically, particularly if you make a large deposit or begin using a new section of the platform. Continued use of hi309 following a policy update constitutes acceptance of the revised version.

12Contact Us About Privacy

If you have a question about this Privacy Policy, want to exercise a data right, or want to report a concern about how your personal data has been handled, contact the hi309 support team:

Email: [email protected]

When contacting us about a data request, please use the subject line "Privacy Request" and include your registered mobile number or username so we can locate your account quickly. We will respond within a reasonable timeframe and may ask you to verify your identity before processing the request.

For general questions about the platform, payment methods or your account, you may also find answers in the FAQ section.