hh98 Privacy Policy – How We Protect Your Data in Pakistan

1. Who We Are

hh98 ("hh98", "we", "us", "our") is the operator of the online gaming platform accessible at hh98.best. hh98 is the data controller responsible for the personal data collected from registered players and website visitors in connection with the platform's services.

For the purposes of this Privacy Policy, "personal data" means any information that identifies you or could reasonably be used to identify you, directly or in combination with other information. This includes your name, CNIC number, mobile number, email address, payment account details, and IP address.

If you have any questions about how hh98 processes your personal data, or if you wish to exercise any of the rights described in Section 9, contact hh98's data team at support@hh98.best with the subject line "Privacy Enquiry". hh98 will respond within 30 days of receiving a valid request.

2. Data We Collect

hh98 collects personal data through several means: information you provide directly during registration and verification, information generated automatically through your use of the platform, and information received from payment providers in connection with your transactions.

Data You Provide Directly

• Registration data: Full name, date of birth, mobile number, email address, and chosen password.
• Verification (KYC) data: CNIC number, copy of CNIC (front and back), and any additional identity documents requested during the verification process.
• Payment data: Easypaisa or JazzCash mobile number, bank account details for IBFT transfers, and partial card details for Visa/Mastercard payments. hh98 does not store full card numbers.
• Support communications: Records of messages sent to hh98 support, including live chat transcripts and emails.
• Responsible gaming data: Deposit limits, session time settings, cooling-off periods, and self-exclusion requests that you configure in your account.

Data Generated Automatically

• Device and connection data: IP address, device type, operating system, browser type, and mobile carrier information.
• Usage data: Pages visited, games played, bets placed, session duration, login timestamps, and navigation paths through the platform.
• Transaction records: Complete history of all deposits, withdrawals, bonuses credited, and wagers placed on hh98.
• Cookie data: Session identifiers, authentication tokens, and preference data stored in cookies as described in Section 5.

3. How We Use Your Data

hh98 uses your personal data for the following purposes. Each purpose is tied to a legal basis described in Section 4.

• Account operation: Creating and maintaining your hh98 account, processing logins, managing your balance, and recording your transaction history in PKR.
• Payment processing: Executing deposits from and withdrawals to your Easypaisa, JazzCash, NayaPay, SadaPay, bank account, or card, and reconciling transaction records.
• Identity verification: Verifying your age and identity to comply with legal obligations and to prevent underage gambling, fraud, and money laundering.
• Customer support: Responding to your queries, resolving disputes, and recording the outcome of support interactions for quality and training purposes.
• Security and fraud prevention: Detecting and preventing fraudulent activity, unauthorised account access, multiple account registrations, and misuse of the bonus system.
• Responsible gaming: Monitoring for patterns that may indicate problematic gambling behaviour, applying player-requested limits, and managing self-exclusion requests.
• Platform improvement: Analysing anonymised usage data to improve the hh98 platform, fix bugs, and optimise the user experience for Pakistani players.
• Legal compliance: Meeting obligations under applicable law including record-keeping requirements, anti-money laundering obligations, and responding to lawful requests from regulatory authorities.
• Marketing communications: Sending promotional emails and notifications to players who have opted in. You can opt out at any time as described in Section 11.

4. Legal Basis for Processing

hh98 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the agreement between you and hh98 – including account creation, game access, payment processing, and customer support. Without this processing, hh98 cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable law, including age verification, anti-money laundering checks, KYC requirements, and responses to lawful requests from authorities.
• Legitimate interests: Processing that serves hh98's legitimate interests in operating a secure, fraud-free platform – including security monitoring, multiple account detection, fraud prevention, and platform analytics. hh98 has assessed that these interests do not override players' rights and freedoms.
• Consent: Processing based on your explicit opt-in, primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

5. Cookies & Tracking Technologies

hh98 uses cookies and similar tracking technologies on its website and application. Cookies are small text files stored on your device that help the platform function correctly, remember your preferences, and gather usage analytics.

Types of Cookies hh98 Uses

• Essential cookies: Required for the platform to function. These include session authentication tokens that keep you logged in, security cookies that protect against CSRF attacks, and cookies that remember your preferred language. You cannot opt out of essential cookies without breaking the platform's core functionality.
• Functional cookies: Remember preferences you've set – such as your preferred game lobby view, notification settings, and deposit method. These make your hh98 experience more convenient across sessions.
• Analytics cookies: Collect anonymised data about how players navigate and use the hh98 platform. This data is used to identify performance issues, improve navigation, and understand which features are most used. Analytics data is processed in aggregated, non-identifiable form.
• Marketing cookies: Used only if you have opted in to personalised marketing. These cookies help hh98 show you relevant promotional content on the platform based on your gaming preferences and history.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using hh98, though some convenience features may not work as expected. Disabling essential cookies will prevent you from logging in and using the platform.

6. Data Sharing & Third Parties

hh98 shares personal data with third parties only in the following limited circumstances. In each case, the third party is bound by a data processing agreement that prohibits them from using your data for any purpose beyond the specific service they provide to hh98.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and partnered banking institutions receive the payment account details and transaction amounts necessary to execute deposits and withdrawals in PKR. They do not receive your gaming history or full profile data.
• Identity verification providers: hh98 may use third-party KYC verification services to cross-reference identity documents against official databases. These providers receive only the specific data required for verification and do not retain copies of documents after verification is complete.
• Cloud infrastructure providers: hh98's platform runs on secure cloud servers. The infrastructure provider has access to encrypted data on the servers it hosts, but is contractually prohibited from accessing or processing that data for any purpose.
• Legal and regulatory authorities: hh98 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by law, by a court order, or as part of an official investigation. hh98 will notify you of any such disclosure where legally permitted to do so.
• Fraud prevention networks: In cases of suspected fraud or financial crime, hh98 may share relevant data with fraud prevention organisations to prevent and detect criminal activity. This is done under the legitimate interests legal basis.

hh98 does not share your data with social media platforms, advertising networks, data brokers, or any third party for marketing, profiling, or commercial purposes. If hh98's business is acquired or merged with another company in the future, players will be informed before their data is transferred to any new data controller.

7. Data Retention

hh98 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the full duration of your account being open. If your account is closed voluntarily, active account data is deleted within 90 days of closure, subject to the legal retention requirements below.
• Transaction records: Retained for a minimum of 7 years from the date of each transaction in accordance with standard financial record-keeping requirements. This includes deposit, withdrawal, and wagering records in PKR.
• KYC documents: Retained for the duration of your account plus 5 years from account closure, in line with anti-money laundering obligations.
• Support communications: Retained for 3 years from the date of each interaction to allow hh98 to refer back to resolved disputes if they are subsequently re-raised.
• Self-exclusion records: Retained indefinitely to prevent a self-excluded player from accidentally reopening an account, even if they later request full data deletion.
• Security logs: IP addresses, login timestamps, and device data associated with security events are retained for 2 years from the date of the relevant event.

8. Data Security

hh98 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

Technical Measures

• All data transmitted between your device and hh98's servers is protected by 256-bit TLS/SSL encryption.
• Stored personal data and payment details are encrypted at rest using AES-256 encryption.
• Passwords are stored as salted, one-way cryptographic hashes – not in readable form. hh98 cannot see your password, only verify it.
• hh98's servers are protected by enterprise-grade firewalls and intrusion detection systems.
• Payment card details are never stored on hh98's servers – card processing is handled by PCI-DSS compliant payment partners.
• Two-factor authentication (2FA) is available for player accounts and is mandatory for all hh98 administrative accounts.

Organisational Measures

• Access to player data within hh98 is granted on a minimum-necessary basis and is revoked immediately when no longer required.
• All hh98 staff who handle personal data receive data protection training and are bound by confidentiality obligations.
• hh98 conducts regular security assessments and vulnerability testing of its platform infrastructure.
• A documented incident response procedure is in place. In the event of a data breach that affects player personal data, hh98 will notify affected players within 72 hours of becoming aware of the breach, in accordance with applicable legal requirements.

9. Your Rights Over Your Data

As a registered player on hh98, you have the following rights in relation to your personal data. hh98 is committed to honouring these rights promptly and without unnecessary friction.

10. Children & Minors

hh98 is strictly an adults-only platform. The minimum age to register and use hh98 is 18 years old. hh98 does not knowingly collect personal data from any person under 18.

If you are a parent or guardian and believe that a minor has registered at hh98 or provided personal data to the platform, please contact hh98 immediately at support@hh98.best. hh98 will investigate the matter promptly, close any confirmed underage account, delete the associated personal data, and void any transactions made through that account.

hh98 uses age verification as part of its registration process and may request CNIC verification at any point to confirm that a player meets the minimum age requirement. The platform takes its obligations in relation to the protection of minors seriously and will not compromise on this requirement.

11. Marketing Communications

hh98 may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new game launches, PSL betting markets, and other offers. Marketing communications are sent only to players who have opted in during registration or have subsequently enabled marketing preferences in their account settings.

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link at the bottom of any promotional email from hh98.
• Updating your notification preferences in your hh98 account settings under "Communication Preferences".
• Emailing support@hh98.best with the subject line "Unsubscribe" and your registered mobile number.

Opting out of marketing communications does not affect transactional messages – hh98 will continue to send you account-related notifications such as deposit confirmations, withdrawal updates, security alerts, and important account messages, as these are necessary for the operation of your account and cannot be disabled.

12. Changes to This Privacy Policy

hh98 may update this Privacy Policy from time to time to reflect changes in the platform, changes in applicable law, or improvements in hh98's data practices. When changes are made, the "Last updated" date at the top of this page will be revised accordingly.

For material changes – those that significantly affect how hh98 uses your personal data or change your rights – hh98 will notify registered players by email and/or through a prominent notice on the hh98 platform at least 14 days before the changes take effect. This gives you time to review the updated policy and, if you disagree with the changes, to close your account and withdraw your balance before the new policy applies.

For minor or administrative changes (such as clarifications or corrections to existing content), hh98 may update the policy immediately without advance notice. The current version of this Privacy Policy is always available at hh98.best/privacy-policy. You are encouraged to review it periodically to stay informed about how hh98 protects your personal data.

13. Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or how hh98 handles your personal data, please contact hh98 through one of the following channels:

hh98 values the trust you place in the platform by sharing your personal data with us. Protecting that data is not something we treat as a compliance exercise – it is a genuine responsibility that the entire hh98 team takes seriously. If you feel that responsibility has not been met in any instance, please tell us. We want to know, and we will act on what you tell us.