h333 Privacy Policy — How We Protect Your Data

This Privacy Policy is published by h333, the online sportsbook, live casino, and gaming platform operating under the domain h333.im. References to "h333", "we", "us", or "our" throughout this document refer to the operator of h333.im and all associated services, including the sportsbook, live casino, slot library, promotional system, customer support facilities, and account management infrastructure.

h333 is committed to handling the personal data of all users — including registered players based across Pakistan in cities such as Karachi, Lahore, Islamabad, Faisalabad, and beyond — with transparency, fairness, and strict adherence to the data protection obligations imposed by our international gaming licence.

This Privacy Policy applies to all personal data collected and processed by h333 in connection with your use of the h333.im website, any h333 mobile application, and all associated services including account registration, deposits and withdrawals, sportsbook betting, casino gameplay, promotional participation, and customer support interactions.

This policy applies to all users of h333 regardless of the device used to access the platform, whether that is a desktop computer, smartphone, or tablet. It applies to both registered account holders and unregistered visitors who browse the h333.im website without creating an account.

This policy does not apply to third-party websites, payment processors, or game providers that may be accessible through links or integrations on the h333 platform. Those parties operate under their own independent privacy policies, and h333 is not responsible for their data practices.

h333 collects personal data through several channels as part of its normal platform operations. The categories of personal data we collect are set out below:

When you create an h333 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used for mandatory 21+ age verification)
• Residential address in Pakistan
• Valid email address
• Pakistani mobile number (used for account verification and two-factor authentication)
• Chosen username and encrypted account password

To comply with our anti-money laundering obligations and age verification requirements, h333 collects:

• Copies of government-issued photo identity documents (CNIC, passport, or driving licence)
• Proof of residential address documents (utility bills, bank statements)
• Proof of payment method ownership (JazzCash or EasyPaisa wallet screenshots, bank account confirmation documents)
• Selfie photographs or video verification footage where enhanced identity checks are required

When you make deposits or withdraw funds, h333 records:

• Deposit and withdrawal transaction amounts in PKR
• Payment method identifiers (JazzCash mobile number, EasyPaisa wallet reference, HBL/UBL/Meezan Bank account number last four digits, Raast ID)
• Transaction timestamps and confirmation references
• Account balance history

• Full history of bets placed on PSL, cricket, UFC, football, and other sportsbook markets
• Casino game session records including game title, stake, and outcome
• Slot game play history including RTP performance and session durations
• Bonus and promotional participation records

• IP address at the time of each login and transaction
• Browser type and version
• Device type, operating system, and screen resolution
• Geolocation data (country and city level only, derived from IP address)
• Session duration and page interaction data
• Cookie identifiers (see Section 8)

• Records of all customer support interactions via live chat, email, and any other channel
• Promotional email and notification engagement data (opens, clicks)
• Survey and feedback responses where voluntarily provided

h333 uses the personal data we collect for the following purposes:

h333 does not use personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by our responsible gaming monitoring systems — in which case any automated intervention (such as a temporary account restriction) can be reviewed by h333 support upon request.

h333 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to provide you with the h333 service you have registered for — including account management, bet processing, and payment handling — is carried out because it is necessary to perform the contract between you and h333.
• Legal obligation: Certain processing activities — particularly KYC verification, AML transaction monitoring, and responsible gaming record-keeping — are carried out because h333 is legally required to do so under the obligations imposed by its international gaming licence.
• Legitimate interests: h333 processes certain technical and device data for fraud prevention and platform security on the basis of our legitimate interests in operating a safe and fair gaming environment, provided such interests are not overridden by your rights.
• Consent: Where h333 sends you promotional communications about PSL offers, casino bonuses, or new slot releases, this is done on the basis of your consent, which you may withdraw at any time by contacting [email protected] or using the unsubscribe link in any marketing email.

h333 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by our legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the duration of your h333 account plus 5 years following account closure, in compliance with our international gaming licence obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of account closure or the date of the last transaction, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for 5 years from the date of each transaction.
• Customer support records: Retained for 3 years from the date of the last interaction.
• Marketing data (consent-based): Retained until consent is withdrawn. Following withdrawal of consent, marketing data is deleted within 30 days.
• Technical and session data: Retained for 13 months from the date of collection for analytics purposes, then anonymised or deleted.

h333 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and always subject to appropriate contractual data protection safeguards:

To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast, h333 shares the minimum necessary payment and identity data with the relevant payment processor. Each payment processor operates under its own privacy policy and is independently responsible for its data handling practices.

h333 may use certified third-party identity verification services to assist with KYC document checks and age verification. These partners process only the specific documents required for verification and are contractually prohibited from using the data for any other purpose.

h333's casino and slot games are supplied by certified third-party game providers. To facilitate gameplay, certain session data (including player ID, stake, and game outcome) is shared with the relevant provider in real time. Game providers are prohibited from using this data for marketing or profiling purposes outside their contractual obligations to h333.

h333 is required to disclose personal data to regulatory bodies, licensing authorities, and law enforcement agencies where required to do so by law, court order, or regulatory direction. Such disclosures are made only to the extent required and are not within h333's discretion to refuse.

h333 may share data with fraud prevention agencies and credit reference bureaus where we have reasonable grounds to suspect fraudulent account activity, money laundering, or other prohibited conduct. Such sharing is carried out on the basis of our legitimate interests in protecting the platform and its players.

h333 uses cookies and similar tracking technologies on the h333.im website. Cookies are small text files stored on your device by your browser when you visit a website. h333 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the h333 platform to function. These include session authentication cookies that keep you logged into your account and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, odds format (decimal/fractional), and interface customisations. Disabling these cookies will not prevent you from using h333 but will mean your preferences are not saved between sessions.
• Analytics Cookies: Used to collect anonymised data on how players navigate and use the h333 platform, including which pages are visited most frequently and where users encounter technical difficulties. This data helps h333 improve the platform experience for all Pakistani players. Analytics data is aggregated and does not identify individual users.

h333 does not use third-party advertising cookies or cross-site tracking technologies that build profiles of your browsing behaviour across other websites. You can manage cookie preferences through your browser's cookie settings at any time. Note that deleting or blocking strictly necessary cookies will affect your ability to use the h333 platform.

h333 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our security framework includes:

• TLS 1.2+ encryption for all data in transit between your device and h333 servers
• AES-256 encryption for sensitive personal data stored at rest
• Bcrypt password hashing — h333 employees cannot read your account password
• Multi-factor authentication options available to all registered players
• Role-based access controls limiting h333 staff access to personal data on a strict need-to-know basis
• Regular third-party security audits and penetration testing of the h333 platform
• Real-time intrusion detection and anomaly monitoring systems
• Formal data breach response procedures with defined notification timelines

In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, h333 will notify affected players promptly and take all reasonable steps to contain the breach and mitigate any potential harm.

As an h333 player, you have the following rights in respect of your personal data. To exercise any of these rights, contact h333 at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of all personal data h333 holds about you. h333 will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data h333 holds about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request that h333 delete your personal data where it is no longer necessary for the purposes for which it was collected. Note that h333 may be required to retain certain data for legal and regulatory compliance even following an erasure request — in such cases h333 will explain which data must be retained and why.
• Right to Restriction: You may request that h333 restrict processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to Data Portability: You may request a copy of the personal data you provided to h333 in a commonly used, machine-readable format (such as CSV or JSON) for transfer to another service provider.
• Right to Object: Where h333 processes your personal data on the basis of legitimate interests, you may object to that processing. h333 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where h333 processes your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time with no adverse effect on your h333 account status.

h333 operates a strict 21+ policy. The h333 platform is not intended for and must not be used by any person under the age of 21. h333 does not knowingly collect personal data from individuals under the age of 21.

If h333 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately closed, all data will be deleted to the extent permissible under applicable law, all deposits will be returned, and any winnings accrued on the account will be forfeited.

As an internationally licensed online gaming platform, h333 may store and process personal data on servers located outside of Pakistan. Where personal data is transferred internationally — for example to our data centre infrastructure, cloud hosting providers, or certified game content suppliers — h333 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Such safeguards include contractual data protection clauses with all third-party data processors to whom international transfers are made, requiring those processors to handle personal data with equivalent protections to those applied by h333 directly. By creating an h333 account and using our services, you acknowledge and consent to your personal data being transferred and processed in this manner.

The h333 platform may contain references to or integrations with third-party services — including payment processors such as JazzCash and EasyPaisa, and certified game content providers. These third parties operate under their own independent privacy policies, and h333 is not responsible for the data handling practices of any third party.

h333 recommends that you review the privacy policies of any third-party service you interact with through the h333 platform. The inclusion of any third-party service integration on h333 does not constitute an endorsement of that third party's privacy practices by h333.

h333 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. Material changes to this Privacy Policy will be communicated to registered players via email to the address held on their account, and via a prominent notice on the h333.im platform, no less than 7 days prior to the updated policy taking effect.

The current version of this Privacy Policy, together with the effective date of the most recent update, is always available at h333.im/privacy-policy. Players are encouraged to review this page periodically to remain informed of how h333 handles their personal data.

Your continued use of h333 following the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the revised policy, you should close your h333 account before the updated policy takes effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about how h333 has handled your personal data, please contact our support team using the details below:

h333 will acknowledge receipt of all Privacy Policy complaints and data rights requests within 48 hours and aims to provide a substantive response within 30 days. Where a complaint cannot be resolved to your satisfaction through h333's internal process, you may escalate it to the relevant data protection supervisory authority under h333's international gaming licence jurisdiction.