Privacy Policy —
hn999 Platform

This Privacy Policy ("Policy") describes how hn999 ("hn999", "the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the hn999 website located at https://hn999.cam and all related services, including casino games, live dealer tables, sports betting, and any other products made available through the platform.

By registering an account or using the hn999 platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not register an account or otherwise use the platform.

This Policy should be read together with our Terms & Conditions, which are incorporated by reference. In the event of any inconsistency between this Policy and the Terms & Conditions on a privacy-specific matter, this Policy shall prevail.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly — including name, email address, phone number, IP address, device identifiers, and financial details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, organisation, retrieval, use, disclosure, or deletion.
• "Controller" means the entity that determines the purposes and means of processing personal data. For this Policy, hn999 is the Controller of the personal data of its registered players.
• "Processor" means a third party that processes personal data on behalf of the Controller, under a written agreement and only as instructed.
• "Data Subject" means the natural person to whom personal data relates — in this context, the registered player or website visitor.
• "KYC" means Know Your Customer — the identity verification process required to confirm a player's identity before withdrawals or other sensitive operations are processed.
• "Cookies" means small text files placed on a user's device by a website to store session or preference information.
• "Sensitive Data" means personal data that warrants heightened protection, such as government-issued ID numbers, financial account details, and information about health or wellbeing where relevant to responsible gambling assessments.

hn999 collects the following categories of personal data from players and visitors:

3.1 Registration & Identity Data

• Full legal name
• Date of birth
• Email address
• Phone number
• Username and password (password stored in hashed form only)
• Residential address (city, country — for example, Karachi, Lahore, Islamabad, Rawalpindi)

3.2 Identity Verification (KYC) Data

• Government-issued photo ID (National Identity Card, passport, or equivalent)
• Proof of address documents
• Proof of payment method ownership
• Selfie or liveness verification image, where required by the KYC process

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction history
• Payment method type and masked identifiers (e.g., last four digits of a card, mobile wallet handle)
• Transaction amounts in the supported currency, with PKR (Pakistani Rupee) referenced contextually where applicable
• Bonus claim and wagering history

3.4 Technical & Usage Data

• IP address and geolocation data (country and city level)
• Device type, operating system, and browser information
• Session timestamps, log-in and log-out times
• Game and betting activity logs
• Cookie and tracking data (see Section 09)

3.5 Communications Data

• Support chat and email correspondence with hn999 staff
• Feedback and complaint records
• Marketing preferences and opt-in/opt-out records

3.6 Data We Do Not Collect

hn999 does not intentionally collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, political opinions, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gambling self-assessment or support request — in which case that information is handled with heightened care and used only for the purpose of providing appropriate responsible gambling support.

We collect personal data through the following means:

• Directly from you: When you register an account, complete your profile, submit KYC documents, make a deposit or withdrawal, contact our support team, or respond to a survey or feedback form.
• Automatically via the platform: Through cookies, log files, and session tracking technologies that record technical and behavioural data as you interact with the hn999 website and its games (see Section 09).
• From third-party verification providers: Where hn999 uses authorised KYC or identity verification partners to cross-check the accuracy of identity documents and confirm age eligibility.
• From payment processors: Transaction confirmation data shared by payment processing partners to reconcile deposits and withdrawals. This does not include full payment account credentials.
• From fraud and risk-management tools: Aggregated risk signals and device fingerprinting data provided by fraud-prevention service providers, used solely to protect the platform and its players from fraudulent activity.

Where applicable data protection frameworks require a legal basis for processing personal data, hn999 relies on the following bases:

hn999 uses your personal data for the following purposes:

• Account management: To create, operate, and maintain your player account, including authentication, account recovery, and profile updates.
• Transaction processing: To process deposits, withdrawals, and bonus credits accurately and securely.
• Identity and age verification: To verify that you meet the minimum age requirement (18+ or the higher minimum required by the operator's licensing jurisdiction) and that the information you have provided is accurate.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through Live Chat, Help Centre, and email ([email protected]).
• Responsible gambling: To monitor gaming patterns, identify potential indicators of problem gambling, and apply responsible gambling tools such as deposit limits, cooling-off periods, and self-exclusion where requested or where required by our responsible gambling obligations.
• Fraud prevention and platform security: To detect, prevent, and investigate fraudulent activity, money laundering, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Legal and regulatory compliance: To meet obligations under applicable licensing conditions, including record-keeping, anti-money-laundering (AML), and reporting requirements.
• Platform improvement: To analyse aggregate usage data and improve the performance, functionality, and user experience of the platform — for example, to understand which game categories are most used by players in Karachi, Lahore, and other regions.
• Marketing (with consent): To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time.

hn999 does not sell, rent, or trade your personal data to third-party marketers. We share personal data only in the following limited circumstances, and only to the extent necessary for each purpose:

• KYC and identity verification providers: Authorised third-party partners who assist in verifying your identity and age. These providers operate under data processing agreements and are prohibited from using your data for any other purpose.
• Payment processors: Transaction data is shared with payment processing partners to facilitate deposits and withdrawals. These partners handle data in accordance with their own regulated privacy and security standards.
• Fraud prevention and risk services: Aggregated risk and device data may be shared with fraud-prevention technology partners to protect the platform and its players.
• Technology and hosting providers: Platform infrastructure partners who host, maintain, or support hn999's technical systems. All such partners are bound by confidentiality and data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or a formal request from a competent regulatory or law enforcement body, hn999 may disclose personal data to the relevant authority.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of hn999's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

hn999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active account data: Retained for the duration of your account and for a minimum period of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements and to resolve any post-closure disputes.
• KYC documents: Retained for the period required by the applicable licensing jurisdiction's AML/KYC regulations, typically five (5) years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years for financial and regulatory compliance purposes.
• Support and communications records: Retained for three (3) years from the date of the most recent interaction, unless longer retention is required for an active dispute.
• Marketing preference records: Retained for two (2) years from your last interaction with a marketing communication, or until you withdraw consent, whichever comes first.
• Technical logs (IP address, session data): Typically retained for twelve (12) months for fraud-prevention and security purposes, then deleted or anonymised.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

hn999 uses cookies and similar technologies (such as local storage, session tokens, and device fingerprinting) to operate the platform, maintain your session, and protect against fraud. We do not use third-party advertising trackers or cross-site behavioural profiling cookies.

The following categories of cookies are used on the hn999 platform:

Strictly necessary cookies cannot be disabled as they are required for the platform to function. For functional and analytics cookies, you may manage your preferences through your browser settings. Note that disabling certain cookies may affect the functionality and experience of the platform.

hn999 operates as an international platform. Your personal data may be processed in countries outside your country of residence, including countries where data protection laws may differ from those applicable in your jurisdiction.

Where personal data is transferred internationally — for example, to a KYC verification provider, a payment processor, or a cloud hosting partner located in another jurisdiction — hn999 ensures that appropriate safeguards are in place. These safeguards may include:

• Standard contractual clauses or equivalent legal mechanisms recognised under applicable data protection frameworks.
• Data processing agreements with third-party recipients that require them to maintain data security and confidentiality standards equivalent to those applied by hn999.
• Transfer to jurisdictions that have been assessed as providing an adequate level of data protection by the relevant supervisory authority.

If you have questions about how your data is protected during international transfers, you may contact our support team using the details in Section 16.

Depending on the data protection laws applicable in your jurisdiction, you may have some or all of the following rights in relation to your personal data held by hn999:

• Right of Access: You may request a copy of the personal data hn999 holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For account profile details, you may be able to update this information directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations (such as AML record-keeping requirements) that require hn999 to retain certain data.
• Right to Restriction of Processing: You may request that hn999 limits the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or have objected to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data where hn999 relies on legitimate interests as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact hn999 support using the contact details in Section 16. We aim to acknowledge all data rights requests within 5 business days and to fulfil requests within 30 days of receipt, subject to identity verification and any applicable legal limitations.

The hn999 platform is strictly for adults aged 18 and above, or the higher minimum age required by the operator's licensing jurisdiction. hn999 does not knowingly collect personal data from individuals under the applicable minimum age.

If hn999 discovers that personal data has been collected from a minor without verifiable parental consent and in contravention of this Policy, we will take steps to delete that data and close the associated account promptly.

If you are a parent or guardian and believe that a minor in your care has registered on the hn999 platform or provided personal data, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

hn999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the hn999 platform is encrypted using TLS (Transport Layer Security).
• Encryption at rest: Sensitive data stored on our servers, including financial records and KYC documents, is encrypted at rest.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a strong cryptographic algorithm so that even internal staff cannot read them.
• Access controls: Access to personal data within hn999 is restricted to authorised personnel on a need-to-know basis. All internal access is logged and auditable.
• Fraud monitoring: Automated fraud-detection systems monitor account activity for signs of compromise, including unusual login locations or behavioural anomalies.
• Security reviews: hn999 conducts periodic security assessments to identify and remediate potential vulnerabilities in the platform.

While hn999 takes data security seriously and applies industry-standard protective measures, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect your account has been compromised.

The hn999 platform may contain references to third-party services — for example, responsible gambling support resources or payment method providers mentioned in a contextual capacity. hn999 does not control the privacy practices of third-party websites or services and is not responsible for how they collect, use, or protect your personal data.

If you access any third-party service referenced on the hn999 platform, we strongly recommend that you review the privacy policy of that service before providing any personal information.

The mention of payment provider names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah on this platform is for contextual reference only. hn999 is not affiliated with, endorsed by, or acting as an agent of any of these providers in relation to gambling services.

hn999 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered players via email or through a prominent notice on the platform prior to the changes taking effect. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the hn999 platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated Policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how hn999 handles your personal data. All previous versions of this Policy are archived and available upon request by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hn999 handles your personal data, please reach out through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available through your account dashboard after logging in
• Help Centre: Self-service articles and guided support available 24/7 via the platform

When submitting a data rights request or a privacy-related query, please include your registered username and the email address associated with your account so we can locate your records and verify your identity efficiently.

We aim to respond to all privacy-related enquiries within 5 business days. Complex requests — such as full data access requests or erasure requests requiring regulatory review — may take up to 30 calendar days to fulfil. We will keep you informed of progress throughout the process.