Privacy Policy

1. Introduction

ha999 ("we", "us", "our" or "the Platform") operates the website at ha999.cam and any associated applications or services. We take the privacy of our users seriously and are committed to processing personal data responsibly, transparently and in accordance with applicable data protection legislation in the operator's license jurisdiction.

This Privacy Policy explains the types of personal data we collect from users of the ha999 Platform, the purposes for which that data is processed, the parties with whom it may be shared, the safeguards in place to protect it, and the rights available to you as a data subject. It applies to all registered users and visitors regardless of geographic location, including users accessing the Platform from cities across Pakistan such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

By registering an account or using the ha999 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you must not use the Platform. ha999 does not claim to be licensed, regulated or endorsed by any Pakistani authority, including the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any provincial government body.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, directly or indirectly.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, deletion or any other handling of such data.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, the operator of the ha999 Platform.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a written agreement.
• "Data Subject" means the individual to whom personal data relates — in this context, you as a registered user or visitor.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" means Know Your Customer verification procedures, including identity, address and payment method confirmation.

3. Data Controller

The Data Controller for personal data collected through the ha999 Platform is the licensed operator responsible for operating the gaming services accessible at ha999.cam. Details of the operator, including the applicable license authority and jurisdiction, are provided in the operator's account documentation and gaming portal terms.

For all privacy-related enquiries, requests or complaints, you may contact the ha999 support team at the email address provided in Section 17 of this policy. ha999 will respond to all verified data subject requests within the timeframe required by applicable data protection law.

4. Personal Data We Collect

4.1 Data You Provide Directly

When you register an account, complete KYC verification, make a deposit or contact support, you provide us with personal data directly. This includes:

• Full name, date of birth and government-issued identification number (such as a Pakistani CNIC or passport number).
• Email address, phone number and city or country of residence.
• Copies of identity documents, proof of address and payment method verification submitted for KYC purposes.
• Deposit and withdrawal transaction records, including payment method references. Where users in Pakistan utilise familiar services such as bank transfers through HBL, UBL, Meezan Bank or Bank Alfalah for funding, relevant transaction reference data is recorded for KYC and anti-money laundering purposes only. These payment providers are referenced as context and do not imply affiliation or endorsement.
• Communications you send to our support team via email or live chat, including any attachments.

4.2 Data Collected Automatically

When you access the ha999 Platform, certain data is collected automatically through technical means, including:

• IP address, device type, operating system, browser type and version.
• Session timestamps, pages visited, features used and time spent on the Platform.
• Geolocation data derived from IP address for fraud prevention and jurisdictional compliance.
• Cookie identifiers and similar tracking technologies as described in Section 11.

4.3 Data From Third Parties

We may receive personal data about you from third parties engaged in the operation of the Platform, including KYC verification providers, fraud screening services and payment processors. Such data is processed only for the purposes set out in this policy and is handled in accordance with applicable data protection requirements.

5. How We Collect Personal Data

ha999 collects personal data through the following channels:

• Account registration forms — when you create a new account on the Platform.
• KYC document upload — when you submit verification documents in response to a compliance request.
• Payment transactions — when you initiate a deposit or withdrawal through the cashier.
• Support interactions — when you contact us via email or live chat for assistance.
• Platform usage — through automated collection of technical and behavioural data during active sessions.
• Cookies and similar technologies — as described in Section 11 of this policy.

6. Purposes of Processing and Legal Bases

ha999 processes personal data only where a valid legal basis exists. The primary purposes and their associated legal bases are as follows:

• Account management and service delivery — processing is necessary for the performance of the contract between you and ha999.
• KYC and identity verification — processing is required to comply with anti-money laundering, age verification and regulatory obligations.
• Payment processing — processing is necessary for the performance of the contract and to fulfil legal transaction record-keeping requirements.
• Fraud prevention and security — processing is based on the legitimate interests of ha999 and its users in maintaining a secure platform.
• Responsible gambling monitoring — processing is necessary to fulfil contractual responsible gambling commitments and comply with operator licence conditions.
• Customer support — processing is necessary for the performance of the contract and for legitimate interest in improving service quality.
• Platform analytics and improvement — processing is based on the legitimate interest of ha999 in understanding how the platform is used and improving user experience.
• Legal compliance and dispute resolution — processing is required to meet legal obligations and to establish, exercise or defend legal claims.
• Direct marketing communications — processing is based on your consent, which may be withdrawn at any time by contacting support or updating your account notification preferences.

7. Data Sharing and Disclosure

ha999 does not sell, rent or otherwise commercially disclose personal data to third-party advertisers or data brokers. Personal data may be shared in the following circumstances only:

• Service providers and data processors: Regulated third-party providers engaged to perform services on our behalf, including KYC verification partners, payment processors, fraud prevention systems, cloud hosting providers and customer support platforms. All such providers are contractually bound to process data only on our instructions and to maintain appropriate security standards.
• Legal and regulatory disclosure: Where disclosure is required by applicable law, court order, regulatory authority or law enforcement agency with competent jurisdiction over the operator, ha999 will disclose personal data as required. This includes compliance with anti-money laundering and counter-terrorism financing reporting obligations.
• Business transfers: In the event of a merger, acquisition, restructuring or sale of the operator's business or assets, personal data held by ha999 may be transferred to a successor entity. Affected users will be notified in advance where required by applicable law.
• With your consent: Where you have provided specific consent to share your data with identified third parties for stated purposes.

8. International Data Transfers

As an online platform serving users in multiple countries, including Pakistan, ha999 may transfer personal data to countries outside your country of residence for the purposes of storage, processing or service delivery. Such transfers are made only to jurisdictions that provide an adequate level of data protection, or where appropriate safeguards are in place, such as standard contractual clauses or equivalent binding commitments.

Users in Pakistan should note that Pakistan does not currently have a comprehensive data protection law equivalent to the GDPR. ha999 applies the data protection standards of the operator's license jurisdiction as the governing framework for processing your personal data.

9. Data Retention

ha999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including the duration of your account, the resolution of any open disputes and the satisfaction of legal retention obligations. Specific retention periods include:

• Account data and KYC documents: Retained for a minimum of five (5) years from account closure, or longer where required by applicable anti-money laundering legislation in the operator's license jurisdiction.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for three (3) years from the date of the interaction, or longer if related to an unresolved dispute or legal claim.
• Technical and behavioural data: Retained for up to twenty-four (24) months from the date of collection, unless required for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10. Data Security

ha999 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption of data in transit using Transport Layer Security (TLS) protocols.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting data access to authorised personnel only on a need-to-know basis.
• Audit logging of data access and administrative actions.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Incident response procedures for detecting, reporting and managing personal data breaches.

Notwithstanding these measures, no method of electronic transmission or storage is completely secure. ha999 cannot guarantee absolute security of your personal data and you use the Platform at your own risk. You are responsible for maintaining the security of your account credentials. If you suspect that your account has been compromised, contact support immediately at the email address in Section 17.

11. Cookies and Similar Technologies

11.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device, remember your preferences and collect usage information. ha999 uses cookies and similar technologies including web beacons and session tokens.

11.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. They enable login sessions, security features and basic navigation. These cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Collect anonymised information about how visitors use the Platform, including pages visited and errors encountered. This data helps us improve Platform performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, display options and responsible gambling tool configurations to provide a more personalised experience.

11.3 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may impair Platform functionality, including the ability to log in or maintain session security. Instructions for managing cookies are available in the help documentation of your browser.

12. Third-Party Links

The ha999 Platform does not include links to third-party websites, applications or services. This Privacy Policy applies exclusively to the ha999 Platform and its associated services. ha999 is not responsible for the privacy practices of any third-party entities referenced in platform content.

13. Children's Privacy

The ha999 Platform is strictly for adults aged 18 or older, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect personal data from individuals below the applicable minimum age. If ha999 becomes aware that personal data has been collected from an underage individual, the account will be closed immediately, all data will be deleted in accordance with our retention policy, and any funds will be dealt with in accordance with the operator's underage gambling procedures.

If you are a parent or guardian and believe that a minor has registered an account on the ha999 Platform, please contact our support team immediately using the details in Section 17.

14. Exercising Your Data Rights

Subject to applicable data protection law, you have the rights described in the User Rights section above, including rights of access, rectification, erasure, restriction, portability, objection and rights related to automated decision-making. To exercise any of these rights, please submit a written request to the ha999 support email address provided in Section 17.

ha999 will:

• Acknowledge receipt of your request within a reasonable timeframe.
• Verify your identity before processing any request to protect against unauthorised access.
• Respond to your request within the period required by applicable data protection law, typically within thirty (30) days of receipt of a verified request, with the possibility of a further extension where the request is complex or numerous.
• Provide a clear explanation if any request is declined, including the reason and available remedies.

Exercising your data rights is free of charge in most circumstances. ha999 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, excessive or repetitive.

15. Automated Processing and Profiling

ha999 uses automated processing for certain operational purposes, including fraud detection, account risk scoring, responsible gambling monitoring and bonus eligibility assessment. These automated processes analyse technical, behavioural and transactional data to detect patterns inconsistent with legitimate use or to identify users who may benefit from responsible gambling interventions.

Where an automated process results in a significant decision affecting your account — such as account suspension, withdrawal restriction or mandatory KYC escalation — you have the right to request human review of that decision by contacting our support team. ha999 will conduct a manual review and communicate the outcome within a reasonable timeframe.

16. Amendments to This Privacy Policy

ha999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or the services we provide. Where material changes are made, registered users will be notified via their registered email address or through a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the ha999 Platform following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. The date of the most recent review is displayed at the top of this page. If you do not accept the revised policy, you must cease using the Platform and may request account closure by contacting support.

17. Contact Us

For all privacy-related enquiries, data subject requests, or complaints regarding the handling of your personal data by ha999, please contact our support team using the details below. All formal data protection correspondence must be submitted in writing to the support email address.

Support Email: [email protected]

Please include your registered email address, a description of your request and any relevant account reference numbers in your correspondence. ha999 support operates in English. Response times may vary during high-traffic periods. Do not include your full payment card details or account password in any correspondence.