HH98 Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy applies to hh98 and all services offered through hh98.click, including all game sections, the player account system, deposit and withdrawal processing, promotional programmes and customer support functions. When this Policy refers to "hh98," "we," "us" or "our," it means the entity operating the hh98 platform and responsible for your personal data.

hh98 is an online gaming and casino platform built specifically for players in Pakistan. We process personal data as a data controller — meaning we determine why and how your personal data is used. This Privacy Policy explains our practices in full so that you, as a Pakistani player, can make an informed decision about sharing your data with us.

This Policy should be read alongside our Terms and Conditions, which govern the overall use of the hh98 platform. Together, they form the complete framework for how your account and data are managed.

hh98 collects only the personal data that is necessary to operate your account, process your transactions, maintain platform security and comply with applicable legal obligations. We do not collect data beyond what serves a genuine and disclosed purpose.

We do not collect your CNIC image or document copies unless you trigger an enhanced verification request — for example, before processing a large withdrawal or if automated checks flag unusual activity on your account. When we do request documents, they are handled securely and deleted once verification is complete.

3.1 Directly From You

The majority of the personal data we hold is provided directly by you during the registration process on hh98, when you make a deposit or withdrawal, when you contact our support team, or when you participate in promotions such as the Refer a Friend programme. This is information you consciously and actively provide to us.

3.2 Automatically During Platform Use

When you access and use hh98.click, we automatically collect certain technical data — including your IP address, the type of device and browser you're using, session timestamps, and the pages or game sections you navigate to. This data is collected through standard server logs and cookies, and is used primarily for security monitoring and improving platform performance for Pakistani mobile users.

3.3 From Payment Processors

When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, the relevant payment processor shares transaction confirmation data with hh98. This typically includes a transaction reference number, the amount, and a confirmation of payment account ownership. We do not receive your full payment credentials from processors — only the minimum necessary for reconciliation.

3.4 From Third-Party Verification Services

In cases where enhanced identity verification is required, hh98 may use third-party verification services to cross-check the information you provide. These services confirm identity details against available records and report back a pass/fail result — they do not provide us with additional personal data beyond what you have already submitted.

hh98 uses your personal data for the following specific purposes. Each purpose is matched to a legal basis, which is detailed in the next section.

• Account creation and management: Creating and maintaining your hh98 player account, verifying your identity and age, and managing your login credentials and account preferences.
• Processing transactions: Handling deposits and withdrawals in PKR via your chosen Pakistani payment method, reconciling transactions and resolving payment disputes.
• Providing and improving games and services: Delivering the platform's games — including Ludo, Poker, Jackpot Slots, Virtual Sports and Esports Betting — and using anonymised activity data to improve platform performance and the player experience.
• Customer support: Responding to your queries, resolving disputes, and managing requests for account changes or responsible gaming tools.
• Security and fraud prevention: Monitoring account activity for suspicious patterns, detecting and preventing fraud, money laundering and multi-accounting, and maintaining the integrity of the platform for all players.
• Responsible gaming: Using account activity data to identify potential problem gambling behaviour and make appropriate interventions, as described in our Responsible Gaming policy.
• Marketing communications: Sending you relevant promotional offers and platform updates by SMS or email — but only if you have not opted out of marketing communications. You can opt out at any time through your account settings or by contacting support.
• Legal compliance: Meeting our obligations under applicable laws and regulations, including responding to lawful requests from authorities where required.

hh98 processes your personal data only when we have a valid legal basis for doing so. Depending on the purpose, we rely on one of the following legal grounds:

• Contract performance: Processing necessary to create your account and deliver the services you have requested — including game access, payment processing and customer support. Without this processing, we cannot provide the hh98 service to you.
• Legal obligation: Processing required to comply with applicable laws — including identity verification, anti-money laundering checks, record-keeping obligations, and responses to lawful authority requests.
• Legitimate interests: Processing for purposes where hh98 has a legitimate interest that is not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services.
• Consent: Processing for marketing communications, where we will only contact you if you have provided consent. You can withdraw this consent at any time.

hh98 does not sell your personal data to any third party. We do not share your information for commercial marketing purposes. However, there are specific, limited circumstances where we do share data — and we want to be completely transparent about them:

6.1 Payment Processors

To process deposits and withdrawals, we share the minimum necessary information with payment providers — including Easypaisa, JazzCash, NayaPay, SadaPay and IBFT banking partners. These providers are contractually bound to process your data securely and only for the specific purpose of completing your transaction.

6.2 Identity Verification Services

Where enhanced identity verification is required, hh98 may share relevant details with licensed identity verification partners. These partners operate under strict data processing agreements and are prohibited from retaining or using your data for any purpose other than verification.

6.3 Technology and Infrastructure Partners

hh98 uses trusted third-party technology providers for services including cloud hosting, security monitoring, and game software delivery. These providers may process certain technical data as part of service delivery and are subject to data processing agreements that restrict use to the specified service only.

6.4 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulators or courts when required to do so by applicable law or a valid legal order. In all cases, we disclose only the minimum data required to satisfy the legal obligation.

6.5 Business Transfers

In the event that hh98 undergoes a merger, acquisition or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance if any such transfer involves a material change to how your data is processed.

hh98 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The retention periods below apply to active and closed accounts:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of 5 years following the date of the transaction, as required for financial regulatory compliance.
• Gameplay and betting history: Retained for the duration of your account and for 2 years following account closure, unless a longer period is required by applicable law or pending dispute resolution.
• Support communications: Chat transcripts and email records are retained for 2 years following the close of the relevant interaction.
• Technical and device data: Server logs and session data are retained for up to 12 months and then deleted or anonymised.
• Marketing consent records: Records of your marketing preferences and consent status are retained for the duration of your account relationship.

When data is no longer needed and no legal retention obligation applies, hh98 deletes it securely or anonymises it in a way that makes it impossible to link back to you personally.

Data security is not an afterthought at hh98 — it's built into the platform's architecture from the ground up. We apply multiple layers of technical and organisational security measures designed to protect your personal and financial information against unauthorised access, loss, misuse or disclosure.

Technical safeguards in place on the hh98 platform include:

• SSL/TLS encryption: All data transmitted between your device and hh98 servers is encrypted using SSL/TLS protocols. The padlock icon in your browser confirms that your connection is secure.
• AES-256 data encryption at rest: Sensitive data stored on hh98 servers — including payment details and identity documents — is encrypted at rest using AES-256, the same standard used by financial institutions worldwide.
• Two-factor authentication (2FA): hh98 accounts support 2FA via OTP sent to your registered mobile number, adding an additional layer of protection beyond your password.
• Automated fraud monitoring: Our security systems monitor account activity continuously for patterns associated with fraud, account takeover attempts and suspicious financial transactions.
• Regular security audits: hh98's platform and infrastructure are subject to periodic security reviews and penetration testing by independent security professionals.
• Access controls: Access to your personal data within hh98 is restricted on a strict need-to-know basis. Only staff members with a genuine operational need can access identifiable player data.

While hh98 takes all reasonable steps to protect your data, no internet-based system can guarantee absolute security. You play an important role in keeping your account safe — use a strong, unique password, never share your OTPs with anyone, and contact us immediately if you notice suspicious activity on your account.

hh98 uses cookies and similar tracking technologies on hh98.click. Cookies are small text files stored on your device when you visit a website. They serve several purposes and we want to be clear about which types we use.

Essential Cookies

These cookies are strictly necessary for hh98.click to function. They maintain your login session, remember your account preferences, and ensure that security features such as CSRF protection work correctly. Without these cookies, the platform cannot operate. You cannot opt out of essential cookies while continuing to use the platform.

Analytics Cookies

We use analytics cookies to understand how players navigate hh98.click — which pages are most visited, how long sessions last, and where players encounter difficulties. This data is used in aggregate and anonymised form to improve the platform. You can opt out of analytics cookies through your browser settings or the cookie preference centre on hh98.click.

Marketing Cookies

If you have consented to marketing communications, hh98 may use cookies to record your platform preferences and tailor relevant promotional content. Marketing cookies are only placed with your consent. You can withdraw consent and remove these cookies at any time.

As a player on hh98, you have specific rights over your personal data. These are not just legal formalities — we treat them as genuine commitments to you. Here is what you are entitled to:

To exercise any of these rights, contact hh98 at support@hh98.click or via live chat. We will respond to all requests within 30 days. We will not charge a fee for exercising your rights unless requests are clearly unfounded, excessive or repetitive.

hh98 is strictly an adult platform. Our services are intended exclusively for individuals who are 18 years of age or older. We do not knowingly collect personal data from individuals under 18.

If we become aware that personal data has been collected from a minor — through misrepresentation of age at registration or any other means — we will immediately close the associated account, return any deposit funds to the payment source used, and securely delete all associated data.

Parents and guardians who have concerns that a minor may have created an account on hh98 should contact us immediately at support@hh98.click. We will investigate and respond within 24 hours.

hh98 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. When we make material changes — changes that meaningfully affect how your data is used or the rights available to you — we will notify registered players by SMS to their registered mobile number and by a clear notice on hh98.click, at least seven days before the changes take effect.

Minor updates — such as clarifications, corrections or changes to contact details — may be made without prior notice. The "Last updated" date at the top of this page will always reflect when the most recent revision was made.

Continued use of the hh98 platform after any updated Privacy Policy has taken effect constitutes your acceptance of the revised terms. If you do not agree with any material change, you should stop using the platform and request account closure before the change takes effect.

If you have any questions, concerns or requests relating to this Privacy Policy or the way hh98 handles your personal data, we want to hear from you. Privacy is something we take seriously, and you deserve a straight answer.

Reach us through any of the following channels:

• Email: support@hh98.click — for privacy requests, data subject access requests, and formal complaints. We respond to emails within a few hours, and to formal data requests within 30 days.
• Live Chat: Available 24/7 from any page on hh98.click once you are logged in. Best for quick questions or to initiate a privacy request that we will then follow up by email.

For formal data access or deletion requests, please include the following in your email: your full name as registered on your hh98 account, your registered mobile number, and a clear description of your request. This helps us verify your identity and process your request as quickly as possible.

If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter. hh98 is committed to working with you to resolve any data-related issues fairly and transparently — in almost all cases, direct communication with our team resolves things quickly without the need for escalation.