HH88 Privacy Policy – How We Protect Your Data in Pakistan

hh88 is an online sports betting and gaming platform operating at hh88-baji.com, built specifically for Pakistani players. In the context of this Privacy Policy, "hh88", "we", "our" or "us" refers to the company behind the hh88 platform, operating under a valid international gaming licence.

As the operator of the hh88 platform, we act as the data controller in relation to personal information collected from players in Pakistan. This means we determine the purposes for which your personal data is collected and how it is used. Where we engage third-party processors to handle data on our behalf – for example, payment processors or identity verification services – those parties act strictly on our instructions and are bound by data processing agreements.

For all privacy-related queries, access requests or complaints, the hh88 Data Protection contact is reachable via support@hh88-baji.com. We respond to all data-related requests within a maximum of 30 days.

hh88 collects only the personal data that is necessary to provide a safe, secure and personalised platform experience. We do not collect data for the sake of it. Below is a breakdown of the categories of personal information we collect and hold.

hh88 collects personal data through the following channels:

• Direct input at registration: When you fill in the registration form on hh88, you provide your name, mobile number and password directly.
• Deposits and withdrawals: When you make a deposit or request a withdrawal, financial data related to the payment method you use is collected and recorded.
• Platform activity: Your betting behaviour, game sessions, live score usage and promotional interactions are automatically recorded as you use hh88.
• Technical collection: Your device, browser, IP address and session data are captured automatically each time you access hh88, whether through the website or the Android app.
• Support interactions: When you contact hh88 via live chat, email or WhatsApp, the content of that communication is stored for quality assurance and compliance purposes.
• KYC verification: When hh88 requests identity or payment verification, documents uploaded or submitted through the verification process are collected and stored securely.
• Cookies and tracking technologies: As described in Section 8, hh88 uses cookies and similar technologies to collect technical and usage data during your sessions.

hh88 uses your personal data only for specific, defined purposes. We do not use it in ways that are incompatible with the reason it was originally collected. The table below outlines each purpose and the data category used.

hh88 does not use your personal data for purposes beyond those listed above without informing you first and, where required, obtaining your explicit consent.

hh88 processes personal data on one or more of the following legal bases depending on the specific purpose:

• Contractual necessity: Processing required to provide the services you have signed up for – your account, deposits, withdrawals and betting activity. Without this processing, hh88 cannot deliver the platform service.
• Legal obligation: Processing required to comply with anti-money-laundering regulations, gaming licence conditions, age verification obligations and any applicable data protection law.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring and analysis that improves the platform. hh88 has carried out legitimate interest assessments to confirm that these interests do not override your rights.
• Consent: Where processing is not covered by the above bases – for example, sending marketing communications about promotions beyond your account activity – hh88 will ask for your explicit consent and will not send such communications if consent is refused or withdrawn.

hh88 never sells, rents or trades your personal data to any third party for marketing or commercial purposes. Full stop. We share data only in the following controlled circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and Visa/Mastercard processing networks receive financial data only to the extent necessary to process your transactions. Each is bound by their own regulatory obligations and contractual data security commitments to hh88.
• Identity verification providers: Where KYC (Know Your Customer) checks are required, hh88 may share verification documents with licensed identity verification service providers. These providers are contractually prohibited from using your data for any purpose other than the verification service.
• Fraud and AML detection services: Technical and transaction data may be shared with specialist fraud detection providers to protect the platform and all players. These services process data under strict confidentiality agreements.
• Gaming licence regulatory authority: hh88's gaming licence requires periodic reporting to the licensing authority. This may include aggregated or individual player data where required by licence conditions. Regulatory disclosures are made only to the extent legally required.
• Law enforcement and courts: Where hh88 receives a valid legal request – court order, law enforcement agency request or regulatory instruction – we are required to disclose relevant data. We will notify affected players where permitted by law to do so.
• Technology infrastructure providers: Cloud hosting, analytics and security services that power hh88's infrastructure may process technical data in their role as data processors. All are subject to data processing agreements maintaining equivalent security standards.

Pakistani players on hh88 use Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfers and Visa/Mastercard to deposit and withdraw in PKR. The financial data involved in these transactions is handled with the highest level of care:

• Card data: hh88 does not store full card numbers on its own servers. Card details are tokenised during the payment process – a secure token is stored in place of the full card number, which means raw card data is never accessible to hh88 systems or staff.
• Mobile wallet data: Easypaisa and JazzCash account numbers are stored in encrypted form. Access is restricted to the automated payment processing system and senior compliance staff where legally required.
• Bank account data: IBFT beneficiary account details are stored in an encrypted database with access logging. No staff member can access financial records without an authorised audit trail being created.
• Transaction records: All deposits and withdrawals on hh88 are logged with timestamps, amounts in PKR, method used and account reference. These records are maintained for the period required by AML regulations and are used exclusively for financial reconciliation and compliance purposes.

All financial data transmission between your device and hh88 is protected by 256-bit SSL/TLS encryption. The hh88 platform is tested regularly by independent security assessors for vulnerabilities in the financial data handling layer.

hh88 uses cookies and similar tracking technologies on the website and in the Android app. Cookies are small data files stored on your device that help hh88 function correctly and improve your experience. Below is a breakdown of the cookie types used:

Most browsers and mobile devices allow you to manage cookie preferences in their settings. Disabling essential cookies will affect your ability to log in and use hh88. Disabling functional or analytics cookies will reduce personalisation but will not prevent you from using the platform's core features.

hh88 retains personal data for as long as is necessary for the purpose for which it was collected, subject to any longer retention period required by law. The following retention periods apply:

• Account data (identity, contact, credentials): Retained for the lifetime of your hh88 account plus a minimum of 5 years after account closure, in line with standard AML record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 7 years following each transaction, as required under financial compliance regulations applicable to licensed gaming operators.
• KYC verification documents: Retained for a minimum of 5 years after the most recent verification. Where a player disputes a KYC decision, relevant documents are retained until the dispute is fully resolved.
• Support communications: Live chat transcripts, email correspondence and WhatsApp conversations with hh88 support are retained for 3 years unless they relate to an ongoing dispute, in which case retention continues until resolution.
• Technical and usage data: Retained in anonymised, aggregated form for platform analytics. Identifiable technical data (IP logs, session data) is retained for 12 months and then purged or anonymised.
• Marketing consent records: Retained for the duration of your account and for 3 years following account closure, to demonstrate compliance with consent obligations.

When a retention period expires, hh88 securely deletes or anonymises the data in question. Secure deletion means the data cannot be recovered or reconstructed through any means.

As an hh88 player you have a number of rights in relation to your personal data. These rights apply regardless of where you are located in Pakistan. To exercise any of these rights, contact hh88 at support@hh88-baji.com with the subject line "Data Rights Request". We respond to all requests within 30 days.

hh88 does not knowingly collect, store or process personal data from any person under the age of 18. The platform is strictly for adults and age verification checks are applied during registration and at withdrawal stage.

If a parent or guardian becomes aware that a minor has registered on hh88 using false information, they should contact hh88 support immediately at support@hh88-baji.com. hh88 will investigate and, where a minor account is confirmed, will close the account, void any transactions associated with it and delete all personal data related to the minor as promptly as possible.

hh88 applies a layered approach to data security. No single measure is relied upon exclusively – multiple overlapping controls are in place at all times:

• 256-bit SSL/TLS encryption: All data transmitted between your device and hh88 servers is encrypted in transit. This applies to the website, mobile browser access and the Android app equally.
• Encrypted data storage: Sensitive data fields – passwords, financial account details, verification document files – are encrypted at rest using industry-standard algorithms. Plain-text storage of sensitive data does not occur on hh88 systems.
• Access controls: Staff access to player data is role-based and follows the principle of least privilege. Support agents can access the minimum data needed to resolve a query. Financial data requires a higher access level with full audit logging.
• Two-factor authentication: Available to all players and mandatory for staff accounts. hh88 strongly recommends all players enable 2FA from their account settings.
• Penetration testing: hh88's platform infrastructure is subject to regular independent security assessments, including penetration testing by qualified security professionals.
• Incident response: hh88 maintains a documented data breach response procedure. In the event of a confirmed breach affecting player data, affected players will be notified within 72 hours of the breach being confirmed, along with guidance on protective steps to take.

hh88 reviews and updates this Privacy Policy periodically to reflect changes in platform features, legal requirements or best practice in data protection. The Last Updated date at the top of this page reflects when the current version was published.

Where a change materially affects how hh88 uses your personal data – for example, adding a new purpose for processing or a new category of data – hh88 will notify registered players via account notification or email to the registered mobile number or email address at least 7 days before the change takes effect. Continuing to use hh88 after that effective date constitutes acceptance of the revised Privacy Policy.

If you do not agree with a proposed change, you have the right to close your account before the change takes effect. Any pending withdrawal request at the time of account closure will be processed normally.

For any questions about this Privacy Policy, to exercise your data rights or to raise a privacy-related complaint, contact hh88 using any of the following methods:

• Email (preferred for data rights requests): support@hh88-baji.com – use the subject line "Privacy Policy" or "Data Rights Request" so your message is routed correctly. Response within 30 days.
• Live Chat: Available 24/7 from your hh88 account dashboard. For straightforward queries about how your data is used, live chat is the fastest option with typical response under 3 minutes.
• WhatsApp: Gold and Platinum VIP members can raise data rights requests through their personal account manager's WhatsApp line.

If you feel that hh88 has not addressed your privacy concern adequately, you have the right to escalate the complaint to the relevant data protection authority or to the dispute resolution body specified under hh88's gaming licence. Contact support for details of the applicable body in your situation.