hi309 Privacy Policy

01 Who We Are

hi309 is an internationally licensed online gaming platform operating at hi309.ws, providing sports betting, live casino, and slot gaming services to English-speaking players across Pakistan. When this Privacy Policy refers to "hi309", "we", "us", or "our", it refers to the hi309 operating entity and its platform.

hi309 acts as the data controller in respect of all personal information collected from registered Players and platform visitors. As data controller, we are responsible for determining the purposes for which and the manner in which your personal data is processed.

02 Information We Collect

hi309 collects personal data in a number of ways — directly from you when you register or interact with the platform, automatically through your use of the platform, and from third-party sources where applicable. The categories of personal data we may collect include:

2.1 Registration & Account Data

• Full legal name as it appears on your government-issued identification document (CNIC, passport, or driver's licence).
• Date of birth (to verify that you are 21 years of age or older).
• Residential address, including city and province within Pakistan.
• Mobile phone number (JazzCash, Zong, Telenor, Ufone, or Warid-registered numbers accepted).
• Email address used for Account communications and promotional messages where opted into.
• Username and encrypted password credentials.
• Security question and answer where selected during registration.

2.2 Identity Verification (KYC) Data

• Scanned copies or photographs of government-issued identity documents, including Pakistan CNIC (front and back), valid passport biographical page, or government-issued driver's licence.
• Selfie or live photo for facial identity matching purposes during enhanced verification.
• Proof of payment method ownership (e.g., screenshot of JazzCash or EasyPaisa account confirming the registered mobile number and account holder name).
• Proof of address documentation where requested as part of an enhanced KYC process.

2.3 Financial Transaction Data

• Deposit and withdrawal transaction history, including amounts, dates, times, and payment method identifiers.
• JazzCash or EasyPaisa wallet reference numbers associated with completed transactions.
• Bank account details where bank transfer payment methods (HBL, UBL, Meezan Bank) are used.
• Transaction status records and any payment processor reference codes.

2.4 Gaming & Betting Activity Data

• Complete record of all bets placed, games played, wagers, and outcomes across all product verticals (sports betting, casino, slots).
• Session start and end times, total session durations, and average bet sizes.
• Bonus and promotional offer usage history, including wagering progress records.
• Responsible gaming tool settings and any self-imposed deposit limits, cooling-off periods, or self-exclusion requests.

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP data.
• Device type, model, operating system, and browser type and version.
• Unique device identifiers where applicable.
• Pages visited within the hi309 platform, click-stream navigation data, and time spent on individual pages.
• Referral source data (i.e., the URL or channel through which you arrived at hi309.ws).

2.6 Communications Data

• Content and metadata of communications exchanged with hi309 customer support via live chat, email, or any in-platform messaging system.
• Records of promotional communications sent to you and whether they were opened or acted upon, where this data is made available by the relevant communication channel.

03 How We Use Your Data

hi309 uses the personal data we collect strictly for legitimate purposes directly related to the operation of our platform and your experience as a Player. The specific purposes for which we process your personal data are as follows:

04 Legal Basis for Processing

hi309 processes your personal data only where there is a valid and recognised legal basis for doing so. Depending on the specific processing activity, the applicable legal basis will be one or more of the following:

• Performance of a Contract — Processing your data is necessary to perform the Player Account agreement between you and hi309, including enabling you to deposit, wager, and withdraw funds.
• Legal Obligation — Processing is required for hi309 to comply with applicable legal obligations, including KYC/AML regulations, age verification requirements, and gaming licence conditions.
• Legitimate Interests — Processing is necessary for hi309's legitimate business interests, including fraud detection, platform security, and service improvement, provided these interests are not overridden by your own rights and interests.
• Consent — Where processing is based on your consent (for example, receiving promotional marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of any prior processing.

05 Data Sharing & Disclosure

hi309 does not sell, rent, or trade your personal data to unaffiliated third parties. We may, however, disclose your personal data to the following categories of recipients strictly for the purposes described in this Privacy Policy:

5.1 Payment Processors

When you make a deposit or withdrawal, your transaction data is shared with the relevant payment service provider (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, or GrabPay) to facilitate the transaction. Payment processors operate under their own privacy policies and security frameworks.

5.2 KYC Verification Partners

hi309 may engage third-party identity verification service providers to assist with KYC document checks, facial verification, and fraud screening. These partners are contractually bound to process your data solely for verification purposes on behalf of hi309 and may not retain or use your data for any other purpose.

5.3 Gaming Content Providers

Third-party game studios and software providers who supply games available on the hi309 platform may receive limited technical data (such as session tokens and bet amounts) necessary to deliver and record the gameplay experience. These providers do not receive your personally identifiable registration data.

5.4 Regulatory & Law Enforcement Authorities

hi309 may be required by law, court order, or regulatory directive to disclose certain Player data to government authorities, regulators, law enforcement agencies, or gaming licensing bodies. We will comply with all lawful data disclosure requests and will notify affected Players where legally permitted to do so.

5.5 Professional Advisors

hi309 may share data with legal advisors, auditors, and compliance consultants where strictly necessary for the provision of professional services to hi309. All such advisors are bound by professional confidentiality obligations.

06 Cookies & Tracking Technologies

hi309 uses cookies and similar technologies (such as local storage and session storage) on the hi309.ws platform. These technologies help us deliver a functional, secure, and personalised gaming experience. We do not use third-party advertising or cross-site tracking cookies.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies — Essential for the operation of the platform, including maintaining your login session, storing your Account preferences, and enabling core security features. These cannot be disabled without breaking platform functionality.
• Functional Cookies — Used to remember your preferences such as language selection, game lobby layout preferences, and responsible gaming tool settings between sessions.
• Analytical Cookies — Used to collect anonymised data about how Players interact with the hi309 platform, including which pages are most visited and where navigation issues arise. This data helps us improve the platform over time.

6.2 Managing Cookies

You can control and manage cookie settings through your web browser. Most modern browsers allow you to block or delete cookies through their settings menu. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

07 Data Retention

hi309 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The general retention periods applied by hi309 are as follows:

• Active Account Data — Retained for the full duration of your Account being active on the hi309 platform.
• KYC & Identity Documents — Retained for a minimum of five (5) years following Account closure, in accordance with standard international anti-money laundering record-keeping requirements.
• Financial Transaction Records — Retained for a minimum of five (5) years following the date of each transaction.
• Customer Support Communications — Retained for three (3) years from the date of the most recent communication in a support case.
• Gaming Activity Logs — Retained for five (5) years following Account closure or last activity, whichever is later, for regulatory audit and dispute resolution purposes.
• Marketing Consent Records — Retained for as long as you remain opted into marketing communications and for two (2) years following any opt-out, as evidence of consent management.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual Player.

08 Your Data Rights

hi309 respects and supports your rights in relation to your personal data. Depending on the nature of the processing and applicable data protection law, you may be entitled to exercise the following rights:

• Right of Access — You have the right to request a copy of the personal data hi309 holds about you, along with information about how that data is being used.
• Right to Rectification — If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure — You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal or regulatory retention obligations.
• Right to Restriction — You have the right to request that hi309 temporarily restrict the processing of your personal data while a rectification or objection request is being assessed.
• Right to Object — You have the right to object to the processing of your personal data where that processing is based on hi309's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability — Where processing is based on your consent or the performance of a contract, you may request that hi309 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent — Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

09 Data Security

hi309 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit — All data transmitted between your device and the hi309 platform is encrypted using TLS (Transport Layer Security) protocols. We enforce HTTPS across all pages of the hi309.ws website.
• Encryption at Rest — Sensitive data stored on hi309 servers, including identity documents and financial records, is encrypted using AES-256 encryption standards.
• Access Controls — Access to personal data within hi309's internal systems is strictly limited to authorised personnel whose job roles require access to that data. All access is logged and subject to periodic audit.
• Two-Factor Authentication — hi309 supports two-factor authentication (2FA) for Player Accounts and enforces 2FA for all internal staff access to data systems.
• Penetration Testing & Security Audits — hi309's platform infrastructure undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response — hi309 maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a risk to your rights, we will notify affected Players within 72 hours of becoming aware of the breach, in accordance with applicable notification obligations.

While hi309 takes all reasonable steps to protect your data, no online system is completely immune to security risks. You also play an important role in protecting your Account by maintaining strong, unique passwords and never sharing your login credentials with any third party.

10 Children & Minors

The hi309 platform is strictly intended for adults aged 21 years or older. hi309 does not knowingly collect personal data from individuals under the age of 21. If hi309 becomes aware that a minor has registered an Account or provided personal data through the platform, we will immediately:

• Suspend and close the Account.
• Void any balances or winnings associated with the Account.
• Securely delete all personal data associated with the minor's Account, subject to any legal retention obligations relating to the incident.

11 Third-Party Links

The hi309 platform may contain links to third-party websites, services, or resources for informational or contextual purposes. These third-party destinations operate independently of hi309 and are governed by their own privacy policies, which hi309 has no control over and is not responsible for.

hi309 encourages you to review the privacy policy of any third-party website you visit before submitting any personal information. The inclusion of a link to a third-party site on the hi309 platform does not constitute an endorsement of that site's privacy practices or content.

12 Updates to This Policy

hi309 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or operational procedures. Where any update is material — meaning it significantly affects your rights or the way we handle your data — hi309 will provide advance notice by:

• Sending a notification to the email address registered to your hi309 Account at least seven (7) days before the updated policy takes effect.
• Displaying a prominent notice on the hi309.ws platform informing Players of the upcoming change.

Non-material updates — such as corrections to typographical errors, clarification of existing practices, or minor structural changes — may be made without advance notice. The "Last Reviewed" date displayed at the top of this policy will always reflect the most recent revision date.

Continued use of the hi309 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should contact hi309 support to discuss your options, including Account closure.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hi309 processes your personal data, please do not hesitate to contact our team through the following channel:

hi309 aims to acknowledge all privacy-related queries within 24 hours and to resolve substantive data requests within 30 calendar days. For urgent Account security concerns, live chat is the fastest and most direct contact method available.