Privacy Policy – HC999 Pakistan Online Casino & Betting

HC999 (operated through hc999.biz) is an online gaming and sports betting platform operated for Pakistani players. For the purposes of this Privacy Policy, HC999 is the data controller — meaning we are the entity responsible for deciding how and why your personal data is collected and used.

This Privacy Policy applies to all HC999 products and services, including the website, mobile site, sports betting, live casino, slots, Aviator Game, Andar Bahar, and any new products added to the HC999 platform in the future. It also applies to data collected through our customer support channels, email communications, and any promotional activity we conduct.

HC999 collects personal data across several categories. Below is a clear breakdown of what we collect and why each category is necessary for operating the platform.

HC999 does not collect any special category data (such as health information, religious beliefs, or political views) except where explicitly required for responsible gaming support and only with your consent. We also do not collect payment card numbers directly — card payments on HC999 are processed through PCI-DSS-compliant payment gateways that handle card data independently of our systems.

HC999 collects your data through the following channels:

• Direct from you: When you register an HC999 account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion, you provide data to us directly.
• Automatically through platform use: When you use HC999, our systems automatically log technical data including your IP address, device identifiers, browser type, session timestamps, and platform navigation data. This is standard practice for all online platforms and is necessary for security monitoring.
• From payment processors: When you make a transaction through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card payment, the payment processor shares transaction confirmation data with HC999 so we can credit your account and process withdrawals correctly.
• From identity verification services: When HC999 needs to verify your identity, we may use a third-party verification service that cross-references the documents you provide against official records. This service shares the verification outcome (pass/fail) with HC999 — not the underlying document contents.
• Cookies and tracking technologies: HC999 uses cookies and similar technologies to remember your preferences, maintain your session, and gather analytics data. See Section 7 for full details on cookies and how to manage them.

HC999 uses your personal data for specific, defined purposes. We do not use data for purposes beyond those stated here without first obtaining your consent or being legally required to do so. The primary purposes for which HC999 uses your data are:

• Account management: Creating and maintaining your HC999 account, including verifying your identity, managing your balance, and processing transactions in PKR.
• Platform operation: Providing sports betting, casino, live dealer, and all other HC999 services. Your usage data helps us ensure the platform performs correctly on your device and connection.
• Regulatory compliance: HC999 is required under its operating licence to maintain player records, conduct Know Your Customer (KYC) checks, and report certain activities to regulatory authorities. Your identity and transaction data is central to meeting these obligations.
• Fraud prevention and security: Protecting your account and the platform from unauthorised access, fraudulent transactions, and other security threats. Technical data including IP addresses and device identifiers is central to this work.
• Responsible gaming: Monitoring your betting patterns against responsible gaming thresholds. HC999 may reach out to players whose patterns suggest potential gambling harm — this is done in the interest of player welfare, not to restrict accounts without cause.
• Customer support: Resolving queries, processing complaints, and providing assistance. Support interactions may be logged and retained for quality assurance and training purposes.
• Platform improvement: Aggregate, anonymised usage data helps HC999's product team understand how players use the platform and where improvements can be made. This analysis never involves identifying individual players.
• Marketing communications: Sending promotional offers, bonuses, and platform news to players who have opted in to marketing. You can withdraw consent at any time — see Section 11 for how.

HC999 processes your personal data on one or more of the following legal bases, depending on the nature of the processing:

• Contract performance: Most data processing at HC999 is necessary to fulfil the contract between you and HC999 — providing the betting and gaming services you registered for, processing your PKR transactions, and managing your account.
• Legal obligation: KYC verification, anti-money-laundering checks, and regulatory reporting are required by HC999's operating licence. We cannot run the platform without fulfilling these obligations.
• Legitimate interests: Fraud prevention, platform security, and responsible gaming monitoring are based on HC999's legitimate interest in operating a safe, fair platform. These activities benefit players directly and are conducted with appropriate safeguards.
• Consent: Marketing communications and optional analytics are processed only with your explicit consent. You can withdraw consent at any time without affecting the services you receive from HC999.

HC999 does not sell your personal data. We share data with third parties only where it is necessary for the operation of the platform, required by law, or where you have given explicit consent. Third parties who may receive your data from HC999 include:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banks, and Visa/Mastercard processors receive the transaction data necessary to process your PKR deposits and withdrawals. These providers are bound by their own regulatory obligations and security standards.
• Identity verification providers: Third-party KYC services that assist HC999 in verifying player identities. These providers receive only the information needed to complete verification and are contractually prohibited from using it for any other purpose.
• Game providers: Studios such as Evolution Gaming, Pragmatic Play, and others that supply live casino and slots games to HC999. These providers receive session and stake data necessary to run the games but do not receive your full personal profile.
• Regulatory authorities: HC999 may be required to share player data with licensing authorities, financial intelligence units, or law enforcement agencies under applicable law. We disclose only what is legally required and will notify you where legally permitted to do so.
• Fraud prevention services: Industry-shared fraud prevention databases that help HC999 identify and block fraudulent activity. Participation in these services involves sharing limited identifiers — no full personal profiles are shared.

HC999 uses cookies and similar tracking technologies to operate the platform effectively and improve your experience. A cookie is a small file stored on your device that allows the platform to recognise you between sessions and remember your preferences.

The types of cookies used on HC999 are:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in, security tokens that protect against CSRF attacks, and cookies that manage your active betslip. Essential cookies cannot be disabled without breaking platform functionality.
• Preference cookies: Remember your chosen settings — odds format (decimal, fractional, American), language, and notification preferences. Disabling these means HC999 cannot remember your preferences between sessions.
• Analytics cookies: Help HC999 understand aggregate platform usage — which pages are visited most, where users drop off, and how features are used. Analytics data is anonymised and is never linked back to individual players.
• Security cookies: Support HC999's fraud detection and bot prevention systems. These cookies analyse technical signals to distinguish between genuine players and automated scripts.

HC999 takes data security seriously and has implemented technical and organisational measures appropriate to the risks involved in operating an online gaming platform. These measures include:

• TLS encryption: All data in transit between your device and HC999 servers is encrypted using TLS 1.2 or higher. This applies to all platform communications including account pages, betting, and support chat.
• Password hashing: HC999 passwords are stored as one-way cryptographic hashes — we do not store your plain-text password and cannot retrieve it. If you lose your password, it must be reset rather than recovered.
• Two-factor authentication: HC999 supports 2FA for all accounts. We strongly recommend all players enable 2FA through their account security settings. 2FA significantly reduces the risk of unauthorised account access.
• Access controls: Internal access to player data at HC999 is restricted to staff who need it to perform their job function. Access is logged, reviewed, and revoked when no longer required.
• Regular security reviews: HC999's technical infrastructure undergoes regular security assessments including penetration testing and vulnerability scanning by qualified external parties.

Despite these measures, no internet-based platform can guarantee absolute data security. In the unlikely event of a data breach that poses a significant risk to players, HC999 will notify affected individuals and relevant authorities within the timeframe required by applicable law.

HC999 does not retain personal data longer than necessary for the purpose it was collected. The general retention periods applied to different data categories are:

When data reaches the end of its retention period, HC999 deletes it securely using industry-standard data destruction methods. Where complete deletion is not technically possible (such as with backup systems), the data is isolated and protected until scheduled destruction.

HC999 respects your rights over your personal data. The following rights are available to all HC999 players. To exercise any of these rights, contact us at support@hc999.biz with your account username and a clear description of your request. HC999 will respond to all verified requests within 30 days.

HC999 sends promotional emails, SMS messages, and in-platform notifications about bonuses, offers, and platform news only to players who have explicitly opted in to marketing communications. Opting in is entirely voluntary — you can use HC999 fully without receiving any marketing communications.

You can manage your marketing preferences at any time in one of the following ways:

• Log into your HC999 account, go to Account Settings → Communication Preferences, and update your opt-in status for each channel (email, SMS, in-platform).
• Click the unsubscribe link at the bottom of any HC999 marketing email. Unsubscribe requests are processed within 48 hours.
• Contact HC999 support at support@hc999.biz and request removal from all marketing communications. We will action the request within 5 business days.

HC999 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If HC999 discovers that a registered account belongs to a player under 18, the account will be closed immediately and all personal data deleted as promptly as applicable retention requirements allow, with any balance returned to the payment source.

If you are a parent or guardian and believe your child has registered an HC999 account, please contact us immediately at support@hc999.biz with the relevant details and we will investigate and take action without delay.

HC999 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will notify all registered players by email to the address on their account and display a notice on the HC999 platform for at least 14 days before the changes take effect.

The updated policy date will be shown at the top of this page. Continuing to use HC999 after the effective date of a revised policy constitutes your acceptance of the revised terms. If you disagree with any changes, you may close your account by contacting support before the new policy takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or how HC999 handles your personal data, please contact us through the following channels:

• Email: support@hc999.biz — for privacy requests, data access requests, and data deletion requests. Please include your account username and clearly describe your request. All privacy-related emails are responded to within 5 business days.
• Live Chat: Available within the HC999 platform after logging in, 24 hours a day. Live chat is best for general privacy questions and guidance — complex data requests should be submitted by email for proper logging and processing.

HC999 takes privacy complaints seriously. If you are dissatisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority or our licensing regulator. Contact details for the applicable authority are available on request.