hi309 Privacy Policy

1Introduction

hi309 ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses the hi309 online casino and sports betting platform at https://hi309.bet. This Privacy Policy sets out in clear, plain terms how hi309 collects, uses, stores, shares, and protects the personal information of its users, with particular regard to the Pakistani player base that hi309 serves.

This Privacy Policy applies to all personal data collected through:

• The hi309 website at https://hi309.bet and all its sub-pages;
• The hi309 account registration and KYC verification processes;
• All deposit and withdrawal transactions processed in PKR;
• Customer support communications via email or live chat;
• Any promotional or marketing communications you opt into.

This Privacy Policy should be read alongside the hi309 Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement governing your relationship with hi309.

2Data Controller

For the purposes of applicable data protection legislation, hi309 is the data controller in respect of the personal data collected from players using the hi309 platform. As data controller, hi309 determines the purposes for which and the manner in which personal data is processed.

hi309 operates under an international gaming licence and maintains data processing practices consistent with the obligations of that licence. Where hi309 engages third-party service providers to process personal data on its behalf (such as payment processors or KYC verification services), those providers act as data processors and are contractually obligated to handle your data only as directed by hi309 and in accordance with applicable data protection standards.

3Data We Collect

hi309 collects personal data in the following categories. We collect only what is necessary for the purposes described in this Privacy Policy.

3.1 Registration Data

• Full legal name as it appears on your CNIC or passport;
• Date of birth (for age verification — players must be 21 or above);
• Residential address (city and province within Pakistan);
• Email address and mobile number;
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

• Copy of your CNIC (Computerised National Identity Card), Pakistani passport, or other government-issued identification;
• Proof of address documentation where required;
• Source-of-funds documentation for high-value account activity.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records in PKR;
• Payment method identifiers (e.g., JazzCash mobile wallet number, EasyPaisa account reference, bank account details for HBL, UBL, or Meezan Bank transfers);
• Wagering history, game activity records, and account balance history.

3.4 Technical & Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Session timestamps, pages visited, and navigation patterns within the hi309 platform;
• Cookie and tracking data as described in Section 8.

3.5 Communications Data

• Records of customer support interactions via email or live chat;
• Any information you voluntarily provide in support tickets or complaint submissions.

4How We Use Your Data

hi309 uses the personal data it collects for the following specific purposes:

hi309 does not use your personal data for any purpose not listed above without first obtaining your explicit consent or being required to do so by applicable law.

5Legal Basis for Processing

hi309 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and hi309 — including account management, payment processing, and game provision — is carried out on the basis of contractual necessity.
• Legal obligation: Processing carried out to comply with hi309's KYC, AML, and regulatory reporting obligations is conducted on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics is conducted on the basis of hi309's legitimate interests, provided those interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications is carried out on the basis of your explicit consent. You may withdraw consent at any time as described in Section 13.

6Data Sharing & Disclosure

hi309 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment processors: hi309 shares necessary financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other licensed payment service providers solely for the purpose of processing your PKR deposits and withdrawals.
• KYC and identity verification providers: Where hi309 uses a third-party identity verification service, your KYC documentation may be shared with that provider for the sole purpose of age and identity verification.
• Regulatory and licensing authorities: hi309 may be required to disclose personal data to its licensing authority, financial intelligence units, or law enforcement bodies where mandated by applicable law or regulatory requirement.
• Fraud prevention and AML agencies: hi309 may share data with licensed fraud prevention and anti-money laundering agencies where required to protect the platform and comply with financial crime prevention obligations.
• Group companies: Personal data may be shared with hi309 affiliated entities for internal operational and compliance purposes only, under equivalent data protection obligations.
• Legal proceedings: hi309 may disclose personal data where required to do so by a court order, subpoena, or other lawful legal process.

All third parties with whom hi309 shares personal data are contractually obligated to process that data only as directed by hi309, to maintain appropriate security standards, and not to use the data for any independent commercial purpose.

7Payment Data

hi309 takes the security of PKR payment data with the utmost seriousness. The following specific practices apply to financial data on the hi309 platform:

• All deposit and withdrawal transactions are processed via encrypted, secure connections. hi309 uses TLS (Transport Layer Security) protocols for all financial data transmission.
• hi309 does not store full JazzCash wallet credentials, EasyPaisa PINs, online banking usernames or passwords, or full bank account numbers on its servers.
• Transaction records — including amounts, timestamps, and anonymised payment method references — are retained for a minimum of five years in accordance with anti-money laundering record-keeping obligations.
• hi309 requires that all deposits originate from payment accounts held in the name of the registered hi309 player. Third-party payment sources are prohibited, and transactions from unverified sources will be returned and the associated account suspended pending investigation.

8Cookies & Tracking Technologies

hi309 uses cookies and similar tracking technologies on the platform for the purposes described below. A cookie is a small data file placed on your device when you visit the hi309 website.

8.1 Types of Cookies Used

• Strictly necessary cookies: These cookies are essential for the hi309 platform to function. They enable core features such as account login sessions, security token validation, and navigation. These cookies cannot be disabled without preventing the platform from functioning correctly.
• Functional cookies: These cookies remember your preferences, such as language settings and game display options, to improve your experience on hi309.
• Analytics cookies: hi309 uses anonymised analytics cookies to understand aggregate usage patterns — such as which games are most popular and which pages are visited most frequently. This data is used only to improve the platform and is never linked to individual player identities in analytics reports.
• Marketing cookies: Where you have opted into marketing communications, hi309 may use cookies to deliver relevant promotional content based on your activity on the platform.

8.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the hi309 platform. Detailed cookie management instructions are available in the settings of all major browsers.

9Data Retention

hi309 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by law and licensing obligations:

• Account and KYC data: Retained for a minimum of five years from the date of account closure, as required by anti-money laundering regulations.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the relevant interaction, unless forming part of a formal dispute or legal matter in which case retained until the matter is resolved.
• Marketing and communications preferences: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical and usage data: Retained in anonymised, aggregated form for platform improvement purposes. Individually identifiable technical data is retained for a maximum of 12 months.

Following the expiry of the applicable retention period, hi309 will securely delete or irreversibly anonymise your personal data.

10Data Security

hi309 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and hi309 servers;
• Encryption of sensitive data at rest on hi309 infrastructure;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular security audits and penetration testing of the hi309 platform;
• Multi-factor authentication requirements for administrative access to systems holding personal data;
• Incident response procedures, including notification protocols in the event of a data breach that poses a risk to player rights.

11Children & Minors

The hi309 platform is strictly for individuals aged 21 and above. hi309 does not knowingly collect, process, or retain personal data from any person under the age of 21.

Where hi309 becomes aware, or has reasonable grounds to suspect, that an account is held by a person under the age of 21, that account will be immediately suspended. Any personal data collected in connection with an underage account will be retained only for the minimum period necessary to comply with our legal obligations and will then be securely deleted.

If you are a parent or guardian and believe that a minor in your care has registered an account on hi309 without authorisation, please contact us immediately at [email protected] so that we may take prompt action.

12Your Data Rights

As a data subject, you hold the following rights with respect to personal data held by hi309. To exercise any of these rights, please contact us using the details in Section 15. hi309 will respond to all valid requests within 30 days.

• Right of Access: You may request a copy of all personal data hi309 holds about you. hi309 will provide this in a clear, structured format at no charge for reasonable requests.
• Right to Rectification: If any personal data hi309 holds about you is inaccurate or incomplete, you may request that it be corrected. Minor account details such as contact information can also be updated directly via your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that hi309 delete your personal data where there is no longer a legitimate or legal basis for its retention. Note that hi309 is obligated to retain certain data for minimum statutory periods as described in Section 9, and erasure requests cannot override these legal obligations.
• Right to Restriction of Processing: You may request that hi309 limit the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing pending hi309's response.
• Right to Data Portability: You may request that hi309 provide your personal data in a structured, commonly used, machine-readable format for the purposes of transferring it to another service provider.
• Right to Object: You may object to hi309 processing your personal data for direct marketing purposes or for processing based on legitimate interests. Where you object to marketing, hi309 will cease processing your data for that purpose immediately.

13Marketing Communications

hi309 may send you promotional communications about bonuses, new games, PSL cricket betting markets, and platform updates where you have opted in to receive such communications during registration or subsequently via your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link contained in any hi309 marketing email;
• Updating your communication preferences in your hi309 account settings;
• Contacting hi309 support at [email protected] with a clear opt-out request.

Withdrawal of marketing consent does not affect your ability to use the hi309 platform, nor does it prevent hi309 from sending you transactional communications that are necessary for the operation of your account (such as deposit confirmations, withdrawal notifications, and security alerts).

14Amendments to This Policy

hi309 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform practices. Where amendments are material, hi309 will notify registered players via email prior to the changes taking effect.

The effective date of the most recent version of this Privacy Policy is displayed at the top of this page. Your continued use of the hi309 platform following the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree to any amendment, you should cease using the platform and may contact hi309 to request account closure in accordance with the Terms & Conditions.

15Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the personal data hi309 holds about you, please contact the hi309 Data Protection team:

If you are not satisfied with hi309's response to your privacy concern or data rights request, you may escalate your complaint to the independent dispute resolution body or data protection supervisory authority designated by hi309's licensing jurisdiction. Details of the relevant authority are available upon request from the hi309 support team.

For general platform support, responsible gaming assistance, or account enquiries unrelated to data protection, the same support address — [email protected] — is available 24 hours a day, seven days a week.