h333 Privacy Policy — Your Data, Your Rights, Our Responsibility

h333 operates the online betting and gaming platform available at h333.online and through any associated mobile interfaces. For the purposes of this Privacy Policy, h333 is the data controller — meaning we are the entity responsible for deciding how and why your personal data is processed. When this policy refers to "h333," "we," "us," or "our," it means the h333 platform and the team that operates it.

This Privacy Policy applies to all personal data collected through the h333 website, mobile interface, customer support channels (live chat and email), and any promotional communications h333 sends to registered members. It covers Pakistani users specifically, and where Pakistani data protection norms differ from other frameworks, h333 follows the most protective standard applicable.

h333 collects personal data in three ways: data you provide directly when registering or using the platform; data generated automatically through your use of h333; and data we receive from third-party payment providers or verification services as part of the account management process.

Data you provide directly:

• Full legal name (as on your CNIC)
• Pakistani CNIC number and a copy of the document for identity verification
• Date of birth
• Mobile phone number (Pakistani number)
• Email address
• City and province of residence
• Selfie photograph for KYC face-matching (one-time, at first withdrawal)
• Any information you share with our support team via live chat or email

Data collected automatically when you use h333:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session start and end times, duration, and pages visited within h333
• Bets placed — including stake amount, market, odds, outcome, and timestamp
• Games played — title, session length, bet amounts, and results
• Deposit and withdrawal transactions — method, amount, timestamps
• Promotional interactions — bonuses claimed, wagering progress, campaign responses

Data received from third parties: When you make a deposit via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, the payment provider shares transaction confirmation data with h333. This includes the transaction reference number, the sending account's masked details, and the amount. h333 does not receive your full wallet PIN, bank account number, or card CVV from any payment provider — these stay with your payment provider at all times.

h333 collects personal data only for specific, legitimate purposes. Every piece of data we hold has a defined reason for being collected and a defined retention period. We do not collect data speculatively or "just in case." The purposes for which h333 processes your personal data are:

• Account Creation & Management: Your name, mobile number, email, and CNIC are required to create and maintain your h333 account, verify your identity, and prevent duplicate accounts.
• Payment Processing: Deposit and withdrawal data is processed to credit your account, initiate withdrawals to your payment method, and maintain accurate financial records per our compliance obligations.
• Age & Identity Verification (KYC): We verify your CNIC and date of birth to confirm you are 18 or older and that your account details match a real, verified person. This is both a legal requirement and a protective measure for you.
• Anti-Money Laundering (AML) Compliance: Pakistani and international financial regulations require h333 to monitor transaction patterns and report suspicious financial activity. Your transaction history and identity data are essential for this obligation.
• Platform Security & Fraud Prevention: IP data, device data, and behavioural patterns help h333 identify unauthorised account access, bot activity, multi-accounting, and other fraudulent behaviour that could harm you or other members.
• Responsible Gaming: Gaming behaviour data (session length, bet frequency, stake escalation patterns) is monitored by h333's responsible gaming team to identify members who may be experiencing problem gambling and to apply protective interventions proactively.
• Customer Support: Chat logs and email correspondence are retained to allow h333 to provide effective support, track the resolution of issues, and review the quality of support interactions.
• Marketing & Personalisation (with consent): Where you have opted in, h333 uses your gaming activity and preferences to send relevant promotional messages — for example, a PSL-specific offer if you frequently bet on cricket. You may opt out at any time. See Section 12.
• Legal Obligations: h333 may be legally required to retain or disclose certain data to regulatory authorities, law enforcement, or courts. We comply with lawful requests and will notify you where legally permitted to do so.

h333 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil the h333 Terms and Conditions you accepted at registration — including account management, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable law — including KYC identity verification, AML transaction monitoring, and responding to lawful authority requests.
• Legitimate Interests: Processing for h333's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and improving service quality through anonymised analytics.
• Consent: Processing based on your specific, freely given opt-in — primarily for direct marketing communications. You may withdraw consent at any time without affecting the legality of processing already undertaken on that basis.

h333 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Period. Your data is shared only in the following specific circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive the minimum data necessary to execute deposits and withdrawals — typically your account reference and transaction amount. They do not receive your gaming history or betting data.
• KYC / Identity Verification Services: h333 uses a third-party identity verification provider to cross-reference CNIC data against official records. Your identity documents are processed by this provider under a data processing agreement that limits their use strictly to identity verification for h333.
• Fraud & AML Screening: Transaction and behavioural data may be shared with fraud detection and AML compliance services. These providers process data under strict contractual terms and may not use it for any purpose beyond h333's specific compliance needs.
• Legal Authorities: If h333 receives a lawful order from a Pakistani court, law enforcement authority, or regulatory body, we are legally required to comply. We will notify you before disclosing your data to authorities wherever we are legally permitted to do so.
• Professional Advisers: h333's legal, audit, and financial advisers may access data on a strictly need-to-know, confidential basis in the context of professional services engagements.
• Business Transfers: In the unlikely event of a merger, acquisition, or sale of h333's business, your data may be transferred to the acquiring entity — subject to the same privacy protections described in this policy. You will be notified before any such transfer takes effect.

All third parties who process h333 member data on our behalf are bound by data processing agreements that restrict them to using your data only as instructed by h333 and to protecting it to the same standard we apply ourselves.

h333's primary data infrastructure is hosted in data centres selected for their security, reliability, and proximity to Pakistani users. Some of h333's technology service providers — including cloud infrastructure, fraud screening, and payment processing systems — may be located outside Pakistan. When your personal data is transferred internationally, h333 ensures that appropriate safeguards are in place to protect your data to the same standard it would receive in Pakistan.

These safeguards include: contractual data protection clauses with all international service providers; selection of providers certified to recognised security standards; and technical measures (encryption at rest and in transit) that apply regardless of physical server location. h333 does not transfer data to jurisdictions known for inadequate data protection without additional protective measures in place.

h333 retains personal data only for as long as it is needed for the purpose for which it was collected, or for as long as required by applicable law. The following retention guidelines apply:

• Account Data (name, CNIC, contact details): Retained for the lifetime of your account plus 7 years after closure, to meet financial record-keeping and AML obligations.
• Transaction & Betting Records: Retained for 7 years from the date of each transaction or bet, in line with standard financial record-keeping requirements.
• KYC Documents (CNIC copies, selfies): Retained for the account lifetime plus 7 years. After closure, documents are archived in encrypted storage with restricted access.
• Support Chat Logs & Email: Retained for 3 years from the date of the interaction, to allow review of support quality and to reference prior interactions in future contacts.
• Marketing Preferences & Consent Records: Retained for 3 years from the date of the most recent consent or opt-out action.
• Technical Logs (IP, device, session): Retained for 12 months from collection, after which they are deleted or anonymised.

When data is no longer required and its retention period has expired, h333 deletes it securely — using data destruction methods appropriate to the sensitivity of the information involved. Anonymised, aggregated data that cannot be linked back to any individual may be retained indefinitely for internal analytics purposes.

h333 implements technical and organisational security measures appropriate to the sensitivity of the data we hold. These measures include:

• TLS Encryption: All data transmitted between your device and h333's servers is encrypted using Transport Layer Security (TLS). This applies to login, payment, account management, and support interactions.
• Encryption at Rest: Sensitive personal data — including CNIC details, payment information, and KYC documents — is encrypted in h333's databases using AES-256 encryption.
• Two-Factor Authentication: All h333 accounts are protected with OTP-based two-factor authentication on login and withdrawal requests. This ensures that even if your password is compromised, your account and funds remain protected.
• Access Controls: h333 staff access to member personal data is restricted on a strict need-to-know basis. Access is logged and regularly audited. No member support agent can see your full payment details or CNIC document images without elevated authorisation.
• Penetration Testing & Security Audits: h333's platform undergoes regular security assessments by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Fraud Monitoring: Automated systems continuously monitor login patterns, transaction behaviour, and betting activity for signs of account compromise or fraudulent use. Suspicious activity triggers immediate alerts and, where necessary, temporary account restrictions to protect you.

No online platform can guarantee absolute security against all possible threats — but h333's security architecture is designed to make any breach as difficult as possible and to minimise the impact if one were to occur. In the event of a data breach that affects your personal data, h333 will notify you without undue delay, explaining what happened, what data was involved, and what steps h333 has taken and recommends you take.

h333 uses cookies and similar tracking technologies on its platform. A cookie is a small data file stored on your device by your browser when you visit h333. Here is what each category of cookie does:

You can manage cookie preferences through your browser settings. Blocking essential cookies will affect your ability to use h333. Blocking analytics or preference cookies will not prevent you from using the platform but may result in a less personalised experience. h333 does not use advertising or tracking cookies that follow you across external websites.

As an h333 member, you have meaningful rights over your personal data. h333 takes these rights seriously and has processes in place to honour them promptly. Here is a summary of your rights and how to exercise them:

h333 will respond to all data rights requests within 30 days. In complex cases, this may be extended by a further 30 days with notification to you. h333 will not charge a fee for handling data rights requests unless they are clearly unfounded or excessive. Identity verification will be required before h333 releases any data in response to an access request.

h333 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under 18 years of age. The registration process includes a date-of-birth check, and age verification (CNIC) is required before any withdrawal. If h333 discovers or is notified that a registered account is held by a person under 18, the account will be immediately closed, all funds will be retained pending a full review, and the account data will be deleted to the extent compatible with our legal obligations. If you believe a minor has registered on h333, please contact support@h333.online immediately.

h333 sends promotional communications — including PSL betting promotions, bonus offers, VIP rewards notifications, and new game announcements — only to members who have opted in to receive them. At registration, you are given a clear, un-pre-ticked choice about marketing communications. You can change your preference at any time through account settings or by clicking the unsubscribe link in any h333 marketing message.

Opting out of marketing does not affect your ability to use h333 or your eligibility for bonuses — you can still claim promotions by visiting the promotions page manually. h333 will continue to send you transactional messages (deposit confirmations, withdrawal notifications, security alerts, support responses) regardless of your marketing preference — these are service messages, not marketing, and are necessary for the operation of your account.

The h333 platform does not contain links to external third-party websites. All navigation on h333 stays within the h333 domain. This Privacy Policy does not cover any third-party sites you may navigate to independently — those sites have their own privacy policies which h333 has no control over and no responsibility for. If you encounter a website claiming to be affiliated with h333 that is not at h333.online or a subdomain thereof, please treat it with caution and report it to support@h333.online — it may be a phishing site impersonating h333.

h333 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, h333 will notify registered members by email and display a prominent notice on the platform at least 7 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the current version.

Your continued use of h333 after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised version. If you do not agree with material changes, you have the right to close your account before they take effect — contact support to initiate this process and your remaining balance will be returned via standard withdrawal.

If you have any question about this Privacy Policy, want to exercise your data rights, or wish to raise a privacy complaint, please contact the h333 privacy team:

• Email: support@h333.online — subject line "Privacy Query" or "Data Rights Request"
• Live Chat: Available 24/7 inside the h333 platform — fastest response for urgent privacy concerns

h333 takes privacy complaints seriously. When you raise a privacy complaint, we will acknowledge it within 24 hours, investigate it thoroughly, and provide a substantive response within 30 days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.