hi309 Privacy Policy — Your Data, Your Rights

1. Overview

When you use hi309 — whether you are browsing the site as a visitor, creating an account, making a PKR deposit through JazzCash or Easypaisa, placing a bet on a PSL match, or playing a live casino game — your interaction with the platform generates certain data. Some of that data is provided directly by you, such as the information you enter during registration. Some of it is collected automatically, such as your device type and session activity.

hi309 acts as the data controller for all personal information collected through the platform. This means hi309 determines why and how your data is processed. We process your data to provide the platform services you have signed up for, to keep your account secure, to process deposits and withdrawals in PKR, to comply with our obligations around age verification and responsible gaming, and to improve the platform based on how players use it.

We do not sell your personal data to advertising networks. We do not share your data with third parties for their own marketing purposes. Where we share data with third-party service providers — such as payment processors that handle JazzCash or Easypaisa transactions — we do so under contractual agreements that restrict how those providers may use your information.

2. What We Collect

The personal information hi309 collects falls into the following categories:

We collect only the minimum data necessary for each purpose. You are not required to provide optional profile information, though providing accurate mandatory information is a condition of account registration and continued use of the platform.

3. How We Use Your Data

hi309 uses your personal data for the following purposes:

• To create and manage your hi309 account, including verifying your identity and confirming you meet the 18+ age requirement before allowing real-money activity.
• To process deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, bank transfer and other supported payment methods.
• To settle bets and payouts correctly across sports betting markets including cricket, PSL, T20 internationals and football.
• To detect and prevent fraud, money laundering, account takeover attempts and other prohibited activities as described in our Terms and Conditions.
• To provide customer support and respond to queries raised through live chat or email.
• To send account-related communications such as deposit confirmations, withdrawal notifications and security alerts. These are transactional messages tied to your account activity, not marketing.
• To operate responsible gaming tools including deposit limits, session time reminders and self-exclusion, and to monitor for patterns of play that may indicate a player needs support.
• To improve the platform by analysing how players navigate the site, which games are most used and where technical issues arise.
• To personalise your experience on hi309, such as displaying sports and markets most relevant to your betting history — for example, showing PSL and T20 fixtures prominently for players who regularly bet on cricket.

hi309 does not use your data for automated decision-making that produces significant legal effects without human review. Where an account is flagged by our fraud detection systems, a member of the hi309 team reviews the case before any account action is taken.

4. Payment & PKR Transaction Data

All financial transactions on hi309 are processed in Pakistani Rupees (PKR). When you make a deposit via JazzCash, Easypaisa, Raast or bank transfer, the transaction is routed through the relevant payment provider. hi309 receives confirmation of the transaction along with a reference number and the PKR amount — we do not store your full mobile wallet PIN, bank login credentials or full card numbers on our own servers.

For card payments, card data is handled by our PCI-DSS compliant payment processing partner. hi309 stores only a tokenised reference that allows us to process future transactions and match withdrawals to the correct payment method, without holding your raw card details.

• Payment data is used exclusively to process deposits, withdrawals and to verify that payment accounts are registered in your own name.
• PKR transaction records are retained for as long as required under applicable financial record-keeping obligations.
• Withdrawal requests are matched to the same payment method used for deposits where possible, as a fraud prevention measure.
• hi309 does not share your payment details with any third party except the payment processor required to execute the specific transaction.

5. Cookies & Tracking Technologies

hi309 uses cookies and similar tracking technologies to keep the platform functional, secure and personalised. The types of cookies used on hi309 are as follows:

• Essential cookies — required for the platform to work. These include session cookies that keep you logged in while you navigate between pages, and security tokens that protect your account from CSRF attacks. You cannot opt out of essential cookies without stopping use of the platform.
• Functional cookies — remember your preferences such as preferred language, display settings and which sports or casino categories you last visited.
• Analytics cookies — collect anonymised or pseudonymised data about how players use hi309, which pages are most visited and where users encounter errors. This data is used to improve the platform and fix issues.
• Session replay data — in some circumstances, anonymised session recordings may be used to identify usability problems. No personally identifiable information is captured in these recordings.

hi309 does not use third-party advertising or retargeting cookies. You will not see hi309 advertisements following you across other websites based on cookies placed by hi309. You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies may affect your experience on hi309 but will not prevent you from placing bets or accessing your account.

6. Data Sharing

hi309 does not sell, rent or trade your personal data. We share data with third parties only in the following limited circumstances:

• Payment processors — JazzCash, Easypaisa, Raast and other payment partners receive only the data required to process your specific transaction. They are contractually prohibited from using your data for any other purpose.
• Identity verification providers — where additional document verification is required, a specialist KYC provider may process your identity document. They act on our instructions only.
• Game content providers — third-party casino and slots game studios receive a player session token to load the game in your account. They do not receive your name, contact details or payment information.
• Platform analytics tools — anonymised or pseudonymised usage data may be processed by analytics platforms to generate aggregate reports on platform performance. These tools do not receive data that identifies you personally.
• Legal and regulatory requirements — hi309 may disclose personal data where required by a valid legal process, court order or to prevent or investigate serious fraud. We will notify affected players where we are legally permitted to do so.

All third-party processors that handle personal data on behalf of hi309 are bound by data processing agreements. They may not use your data for their own purposes beyond what is necessary to deliver the service hi309 has engaged them for.

7. Data Retention

hi309 retains personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable financial and record-keeping obligations. The general retention periods applied are:

• Account data and identity verification records are retained for the lifetime of the account and for a period after closure as required for audit and legal purposes.
• PKR transaction records including deposits and withdrawals are retained for a minimum of five years from the date of the transaction.
• Bet history and gaming records are retained for a minimum of three years from the date of the relevant activity.
• Support communications including live chat transcripts and emails are retained for up to two years from the date of the last interaction.
• Technical and usage data collected automatically is typically retained in identifiable form for up to twelve months, after which it is aggregated or anonymised.

When data is no longer required, hi309 deletes or anonymises it securely. Backups are purged on a rolling schedule consistent with the retention periods above. If you request account closure, your data is not deleted immediately — it is retained for the periods stated above to meet legal and audit obligations before being permanently removed.

8. Security Measures

hi309 implements technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and the hi309 platform, including login sessions, deposits and gameplay.
• Encrypted storage for sensitive personal data including identity documents and payment references.
• Access controls ensuring that only authorised hi309 personnel can access personal data, and only to the extent necessary for their role.
• Regular security reviews and penetration testing of the platform infrastructure.
• Two-factor authentication available for player accounts to add an additional layer of protection beyond your password.
• Automatic session timeouts after periods of inactivity to reduce the risk of unauthorised access on shared devices.

No platform can guarantee absolute security, but hi309 takes reasonable and appropriate steps to protect your data in line with industry standards. If you believe your account has been compromised, contact hi309 support through live chat immediately so we can act quickly to secure it.

9. Your Rights Over Your Data

As a player on hi309 you have the following rights in relation to your personal data. To exercise any of these rights, contact hi309 support through live chat or via the email address listed in Section 12.

hi309 will respond to data rights requests within a reasonable timeframe. Some requests may require identity verification before we can act on them, to ensure we do not disclose or delete data in response to an unauthorised request.

10. Minors & Age Policy

hi309 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is applied during the registration process and may be repeated at any point during the account lifecycle if there is reason to question whether a player meets the age requirement.

If hi309 discovers that personal data has been collected from a person under the age of 18, the account will be closed immediately, all associated data will be deleted as quickly as practically possible, and any deposits received will be returned to their source. Parents and guardians who believe a minor has registered an account on hi309 should contact support immediately through live chat so the situation can be resolved without delay.

We strongly encourage parents and guardians to use parental control software and to have conversations with young people about responsible and age-appropriate internet use, particularly in relation to online gaming and betting platforms.

11. Policy Updates

hi309 may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable data protection practices, or improvements to the way we describe our data handling to make it clearer for players. When this policy is updated, the "Last Updated" date at the top of the page is revised.

For changes that materially affect how your personal data is processed — for example, introducing a new category of data collection or a new type of third-party sharing — hi309 will notify registered players via the email address on their account before the change takes effect. For minor clarifications or corrections, no active notification will be sent, but the updated policy will be available on this page at all times.

Continued use of hi309 after an updated policy is published constitutes your acceptance of the revised terms. If you do not agree with any update, you should stop using hi309 and contact support to close your account.

12. Contact & Data Queries

If you have any questions about this Privacy Policy, want to exercise one of your data rights, or want to report a privacy concern, you can reach the hi309 team through the following channels:

• Live chat — available 24 hours a day, 7 days a week, directly within the hi309 platform after logging in.
• Email — send your query to [email protected] with the subject line "Privacy Query" to ensure it is routed to the right team.
• FAQ — for common questions about account data and privacy, visit the FAQ page.

hi309 aims to respond to all privacy-related queries within five business days. Complex data access or erasure requests may take longer if identity verification is required, but we will acknowledge your request and provide a timeline within the initial five-day window.