ha999 takes the privacy of Pakistani players seriously. This Privacy Policy explains exactly what personal data ha999 collects from you, why it is collected, how it is stored and protected, who it may be shared with, and what rights you hold over your own information.
This Privacy Policy governs the collection, processing, storage, and disclosure of personal data by ha999 in connection with the operation of the ha999 online casino and sports betting platform, accessible at ha999.asia. ha999 is the data controller responsible for personal data processed through the Platform.
ha999 operates in compliance with applicable international data protection standards and the regulatory requirements of its gaming license jurisdiction. As an online gaming operator serving players across Pakistan — including Karachi, Lahore, Faisalabad, Islamabad, and other cities — ha999 recognises the sensitivity of the personal and financial information its players share and is committed to its lawful, fair, and transparent processing.
This Policy should be read together with ha999's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By accessing or using the ha999 Platform, you confirm that you have read and understood this Privacy Policy. If you do not accept the terms of this Policy, you must not use the Platform.
For the purposes of applicable data protection law, ha999 acts as the data controller in respect of personal data collected through the Platform. ha999 determines the purposes for which, and the means by which, your personal data is processed.
ha999's data protection contact can be reached via the support channels listed in Section 16 of this Policy. Formal data subject requests — including subject access requests, erasure requests, and objections to processing — should be submitted in writing to the email address provided in Section 16. ha999 will acknowledge formal data requests within 5 business days and will respond substantively within 30 calendar days of receipt.
ha999 collects personal data in the following categories. Not all categories apply to all users — the data collected depends on the nature of your interaction with the Platform.
ha999 collects personal data through the following means:
The majority of personal data ha999 holds is provided directly by you during the account registration process, KYC verification, deposit and withdrawal requests, support interactions, and completion of responsible gaming tools. You are under no statutory obligation to provide this data, but without it ha999 cannot provide regulated online gaming services to you.
Technical and device data, including IP address, session logs, and cookie data, is collected automatically when you access or use the ha999 Platform. This collection is necessary for platform security, fraud prevention, and regulatory compliance.
ha999 may receive identity and fraud screening data from third-party KYC and anti-money laundering (AML) service providers as part of the account verification process. ha999 also receives transaction confirmation data from payment processors including JazzCash, EasyPaisa, and participating banks.
In limited circumstances related to fraud prevention or enhanced due diligence, ha999 may supplement the data it holds with information drawn from publicly available records or commercially licensed databases, in accordance with applicable data protection law.
ha999 processes personal data only where a valid legal basis exists. The legal bases on which ha999 relies are set out in the table below:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and identity verification (KYC) | Performance of contract; Legal obligation |
| Processing deposits, withdrawals, and PKR transactions | Performance of contract |
| Providing casino games, live dealer, and sportsbook services | Performance of contract |
| Age verification and responsible gaming compliance | Legal obligation; Legitimate interests |
| Anti-money laundering and fraud prevention checks | Legal obligation; Legitimate interests |
| Customer support and complaint handling | Performance of contract; Legitimate interests |
| Platform security, fraud detection, and abuse prevention | Legitimate interests |
| Sending transactional communications (deposit confirmations, withdrawal updates) | Performance of contract |
| Sending promotional communications (bonuses, offers) | Consent (withdrawable at any time) |
| Record-keeping for regulatory and audit purposes | Legal obligation |
ha999 uses the personal data it collects for the following purposes:
ha999 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. ha999 shares personal data only in the following limited circumstances:
ha999 engages third-party service providers to support Platform operations, including KYC and identity verification providers, payment processors, fraud detection services, cloud infrastructure providers, and customer support technology platforms. These providers act as data processors under ha999's instruction and are contractually bound to process personal data only for the purposes specified by ha999, in accordance with applicable data protection requirements.
ha999's casino games are provided by licensed third-party game studios. These studios may receive limited technical data (such as session tokens and game round identifiers) necessary to deliver game functionality. They do not receive your identity or financial data in a form that would allow them to identify you independently.
ha999 will disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, and courts where required by law, court order, or in connection with ha999's regulatory compliance obligations, including mandatory suspicious transaction reporting under applicable AML frameworks.
In the event of a merger, acquisition, restructuring, or sale of ha999's business or assets, personal data held by ha999 may be transferred to the acquiring entity as part of the transaction. Users will be notified of any such transfer via a notice posted on the ha999 Platform and, where appropriate, by direct communication to the contact details held on their Account.
ha999 uses cookies and similar tracking technologies on the Platform for the purposes described below. A cookie is a small text file placed on your device that allows the Platform to recognise you, maintain session state, and collect usage data.
You may manage cookie preferences through your browser settings. Disabling cookies other than strictly necessary cookies may affect certain Platform features. ha999 does not use cookies to serve third-party advertising or to track your activity across websites unaffiliated with ha999.
ha999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention principles apply:
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.
ha999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:
Notwithstanding these measures, no internet-based transmission or electronic storage system can be guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ha999 will notify you without undue delay in accordance with applicable regulatory requirements.
Subject to applicable law and the limitations described below, you have the following rights in relation to the personal data ha999 holds about you:
To exercise any of the above rights, please submit a written request to the email address provided in Section 16. ha999 will verify your identity before processing any data subject request. ha999 will respond within 30 calendar days of receiving a valid, verified request, and will not charge a fee for processing requests in ordinary circumstances.
If ha999 discovers or is informed that personal data has been collected from an individual under the age of 21, that individual's account will be immediately suspended, all associated data will be deleted to the extent permitted by applicable law, and any balance held in the account will be handled in accordance with ha999's Terms & Conditions and applicable regulations.
If you believe that a minor has registered on the ha999 Platform, please contact ha999 support immediately via live chat or email so that appropriate action can be taken without delay.
ha999 operates internationally, and personal data collected through the Platform may be transferred to, stored on, or processed by servers located in countries outside Pakistan. These transfers are necessary to deliver the Platform's services and to fulfil ha999's regulatory obligations.
Where personal data is transferred to countries that may not provide the same level of data protection as Pakistan, ha999 ensures that appropriate safeguards are in place. These safeguards may include contractual clauses, binding corporate rules, or other mechanisms recognised under applicable data protection frameworks as providing adequate protection for transferred personal data.
By using the ha999 Platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred outside Pakistan for the purposes described in this Policy.
The ha999 Platform may contain links to the websites or services of third-party game studios, payment providers, or other service partners. ha999 is not responsible for the privacy practices of these third parties. This Privacy Policy applies exclusively to data collected through the ha999 Platform. ha999 encourages you to review the privacy policies of any third-party services you access via links from the Platform.
ha999 reserves the right to update or amend this Privacy Policy at any time. Where amendments are material — for example, changes to the categories of data collected, the purposes for which data is used, or the third parties with whom it is shared — ha999 will provide advance notice to registered Users via the contact details held on their Account, and will post the revised Policy on the ha999 Platform with an updated effective date.
Continued use of the ha999 Platform following publication of an amended Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any amendment, you must cease use of the Platform and may request account closure in accordance with the ha999 Terms & Conditions.
For questions, concerns, or formal requests relating to this Privacy Policy or ha999's handling of your personal data, please contact ha999 using the following channels:
ha999's support team includes personnel trained in data privacy matters who can assist Pakistani players with questions about their personal data in plain, accessible English. All privacy-related communications are handled in strict confidence.
Six practical ways ha999 protects the personal data of Pakistani players — from the moment you register to every transaction and support interaction that follows.
Every data transmission between your device and ha999 — from ha999 login credentials to PKR transaction details — is protected by 256-bit SSL/TLS encryption. The same standard used by international banks and financial institutions.
ha999 does not sell, rent, or trade your personal data to third parties for marketing purposes. Your CNIC details, mobile number, transaction history, and game activity stay within ha999's controlled data environment.
Financial data — including JazzCash, EasyPaisa, and bank account details — is held in segregated, access-controlled systems entirely separate from operational platforms. Card data is processed exclusively by PCI-DSS certified processors.
ha999 staff access to personal data is governed by strict need-to-know principles with full audit logging. No employee can access your account data without a legitimate operational reason, and all such access is recorded.
ha999 processes data subject requests — access, rectification, erasure, portability — within 30 calendar days. Pakistani players have full rights over their personal data and ha999 provides a clear, straightforward process for exercising them.
This Privacy Policy tells you exactly what data ha999 collects, why, on what legal basis, and how long it is kept. There are no hidden data uses. The legal basis table in Section 5 maps every processing purpose to its justification in plain language.
ha999 combines world-class casino games, live dealer tables, and PSL cricket betting with a serious commitment to data privacy. 256-bit encryption, no data selling, and full transparency — backed by the Privacy Policy you've just read.
21+ only. Gambling can be addictive. Please play responsibly. For data privacy requests, contact [email protected]