Privacy Policy

This Privacy Policy ("Policy") describes how hi309 ("hi309", "we", "us" or "our"), operating the online gaming platform at https://hi309.cam, collects, processes, stores, shares and protects personal data provided by or generated about users ("you" or "User") of the Platform.

This Policy applies to all personal data collected through your use of the hi309 website, mobile interface, customer support channels and any other service forming part of the hi309 Platform. It applies to all users globally, including users accessing the Platform from Pakistan.

By creating an account on hi309 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of this Policy, the following terms carry the meanings set out below:

hi309, operating the Platform at https://hi309.cam, acts as the Data Controller for all personal data collected through the Platform. hi309 operates under international licensing and is not subject to Pakistani data protection regulatory oversight.

Where hi309 engages third-party service providers — such as payment processors, KYC verification services, game content providers and analytics tools — those providers act as Data Processors under written agreements that bind them to process data only as instructed by hi309 and to maintain appropriate security standards.

For all data protection enquiries, contact hi309 at: [email protected] (plain text — not a clickable link).

hi309 collects personal data in the following categories:

4.1 Registration Data

When you create an account, we collect your full legal name, date of birth, email address, mobile number and country of residence. This data is necessary to create and administer your account.

4.2 Identity Verification (KYC) Data

To comply with age verification and anti-money laundering obligations, we collect identity documents including your Computerised National Identity Card (CNIC) or passport, proof of address where required, and selfie or liveness verification images. For Pakistani users, the CNIC is the primary verification document.

4.3 Financial Data

When you make deposits or withdrawals, we collect payment method details necessary to process the transaction. This may include bank account reference information or mobile wallet identifiers in cases where familiar Pakistan payment methods are used as transaction context. Full financial instrument details (such as card numbers) are handled by PCI-DSS compliant payment processors — hi309 does not store full card numbers on its own servers.

4.4 Usage and Technical Data

We automatically collect technical data when you use the Platform, including your IP address, device type and operating system, browser type and version, pages and games accessed, bet history, session start and end times, and approximate geographic location derived from IP address.

4.5 Communication Data

When you contact our support team — via live chat, email or any other channel — we retain records of that communication, including message content and timestamps, to maintain service quality and resolve disputes.

4.6 Responsible Gambling Data

Where you set deposit limits, request cooling-off periods or request self-exclusion, we record these instructions and the associated dates. This data is used exclusively to honour your responsible gambling settings and is treated with the highest level of care.

hi309 processes your personal data on the following lawful bases:

hi309 uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining and securing your account, including password reset and two-factor authentication.
• Transaction Processing: Processing deposits, withdrawals and currency conversions, and maintaining an accurate transaction ledger for your account.
• Identity & Age Verification: Confirming your identity and minimum age (18+, or higher where required) as part of KYC obligations.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and unauthorised account access.
• Responsible Gambling: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, and applying and enforcing any limits or exclusions you have set.
• Platform Improvement: Analysing aggregated usage patterns to improve navigation, game selection, and overall platform performance.
• Customer Support: Responding to your enquiries, resolving disputes and following up on complaints.
• Legal Compliance: Maintaining records required under the operator's licensing obligations and responding to lawful requests from regulatory or legal authorities in the applicable licensing jurisdiction.
• Service Communications: Sending you account-related notifications such as transaction confirmations, KYC status updates, and security alerts.

hi309 does not sell, rent or trade your personal data. We may share your data only in the following limited circumstances:

• Service Providers (Data Processors): Third-party providers engaged to operate parts of the Platform under written data processing agreements — including KYC verification providers, payment gateway operators, game content providers, customer support platforms and cloud infrastructure providers. These parties process data only as instructed by hi309.
• Regulatory & Legal Authorities: Where required by the operator's licensing obligations, applicable law, or a lawful order from a competent authority in a relevant jurisdiction, hi309 may disclose data to regulatory bodies, law enforcement or courts.
• Fraud & AML Prevention: hi309 may share data with third-party fraud prevention and AML screening services as part of its compliance obligations. These services are bound by confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition or sale of platform assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

hi309 will not share your personal data with payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah beyond what is strictly required to process a specific transaction you have initiated. These organisations are not affiliated with hi309 and do not receive your data for any purpose other than processing the specific payment you authorise.

hi309 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention requirements. In practice:

• Account Data: Retained for the duration of your active account relationship and for a period after account closure as required by licensing obligations — typically five (5) years.
• KYC Documents: Retained for the minimum period required under AML and licensing obligations from the date of collection, typically five (5) years.
• Transaction Records: Retained for a minimum of five (5) years following the transaction date to satisfy audit and legal compliance requirements.
• Support Communications: Retained for three (3) years from the date of the interaction or for the duration of any ongoing dispute, whichever is longer.
• Marketing Preferences: Retained until you withdraw consent, at which point they are updated immediately.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our data deletion procedures.

hi309 implements technical and organisational security measures appropriate to the sensitivity of the data we hold. These include:

• End-to-end SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage for sensitive personal and financial data at rest.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular security assessments and vulnerability monitoring of Platform infrastructure.
• Two-factor authentication options for user accounts to reduce the risk of unauthorised access.
• Contractual security obligations imposed on all third-party Data Processors.

Despite these measures, no internet-based system can be guaranteed as entirely secure. You are responsible for maintaining the security of your login credentials and notifying hi309 immediately if you suspect unauthorised access to your account.

hi309 uses cookies and similar technologies to operate and improve the Platform. The following categories of cookies are used:

hi309 does not use third-party advertising cookies or behavioural profiling cookies for targeted advertising. You may adjust cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair Platform functionality.

hi309 operates internationally and your personal data may be transferred to, stored in, or processed in countries outside of Pakistan. These countries may have data protection frameworks that differ from those applicable in Pakistan.

Where personal data is transferred to third-party Data Processors located in other jurisdictions, hi309 requires those processors to maintain data protection standards consistent with the requirements of the operator's licensing framework through binding contractual obligations.

By using the hi309 Platform, you acknowledge and consent to the international transfer of your personal data under the conditions described in this Policy.

Subject to applicable law and the operator's licensing obligations, hi309 respects the following data subject rights. You may exercise these rights by contacting support via live chat or at [email protected]:

The hi309 Platform is strictly prohibited to persons under the age of 18, or the higher minimum age required by the operator or applicable licensing jurisdiction. hi309 does not knowingly collect personal data from individuals below the applicable minimum age.

Age verification is enforced through KYC procedures. Where hi309 discovers that personal data has been collected from a minor in breach of this Policy, the relevant account will be suspended immediately, any balance will be held pending further review, and the personal data will be deleted as promptly as legal obligations permit.

If you believe a minor has registered on hi309, please notify us immediately at [email protected] so that appropriate action can be taken without delay.

The hi309 Platform does not intentionally contain links to external third-party websites for advertising or affiliate purposes. Where any third-party service or content is integrated into the Platform — such as game content from studio providers — those services are governed by their own privacy policies.

hi309 is not responsible for the privacy practices of third-party game content providers, payment processors or any other third-party services you may access in connection with your use of the Platform.

hi309 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or licensing requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material — particularly changes that affect how we use your personal data or your rights — we will make reasonable efforts to notify registered users via their registered email address or through a prominent notice on the Platform before the changes take effect.

Continued use of the hi309 Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with updated data practices, you should stop using the Platform and request account closure.

For any privacy-related enquiries, data subject right requests, or concerns about how hi309 handles your personal data, please use the following contact methods:

• In-Platform Live Chat: Available 24/7 — the fastest way to raise a privacy concern or make a data subject request.
• Email: [email protected] — please include "Privacy Request" in the subject line and your registered username.

We aim to acknowledge privacy requests within 48 hours and to fulfil or formally respond to them within 30 days. Where requests are complex or numerous, we will notify you within the initial 30-day period if an extension is required.