hahapk Privacy
Policy

1. Introduction

This Privacy Policy ("Policy") sets out how hahapk ("hahapk", "we", "us", "our"), the operator of the online gaming platform at hahapk.net ("Platform"), collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use our services.

hahapk is committed to handling your personal data with the utmost care, in full compliance with applicable international data protection laws and the privacy standards mandated by our gaming licence conditions. We recognise that trust is fundamental to our relationship with every player across Pakistan — from Karachi to Lahore, Faisalabad to Islamabad — and we take our obligations as a responsible data handler seriously.

By registering an account on hahapk, making a deposit, placing a bet, or otherwise using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

2. Data Controller

hahapk acts as the data controller in respect of all personal data collected from players and visitors to the Platform. As data controller, hahapk determines the purposes for which personal data is processed and the means by which such processing is carried out.

If you have any questions about how hahapk processes your personal data, or if you wish to exercise any of your data subject rights as described in this Policy, you may contact our dedicated Data Protection team at any time. Contact details are provided in Section 15 of this Policy.

3. Personal Data We Collect

hahapk collects the following categories of personal data from players and Platform visitors:

hahapk does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where such data is voluntarily provided in the context of responsible gaming self-assessments.

4. How We Collect Your Data

hahapk collects personal data through the following channels:

• Direct Interactions: Data you provide voluntarily when completing registration forms, submitting KYC documents, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated Technologies: Technical data collected automatically when you visit or use the Platform, including via cookies, web beacons, server logs, and analytics tools. See Section 10 for full details on our cookies practice.
• Payment Processors: Transaction confirmation data and payment identifiers received from our payment partners including JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank when you make a deposit or withdrawal.
• Identity Verification Providers: Where hahapk uses third-party KYC verification services to assist with identity and document checks, those providers may return verification result data to us.
• Publicly Available Sources: In limited circumstances and where legally permitted, hahapk may cross-reference data from publicly available sources (such as government sanction lists) for fraud prevention and AML compliance purposes.

5. How We Use Your Personal Data

hahapk uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your hahapk player account, including processing login authentication and account security.
• Service Delivery: To provide access to casino games, live dealer tables, slots, fishing games, sports betting markets (including PSL and international cricket), and all other Platform features.
• Payment Processing: To process deposits and withdrawals via your chosen PKR payment method, verify payment ownership, and maintain accurate financial records.
• KYC & AML Compliance: To verify your identity, confirm your eligibility to use the Platform, and meet our obligations under applicable anti-money-laundering regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and any other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming behaviour patterns, identify potential problem gambling indicators, enforce self-exclusion requests, and administer responsible gaming tools.
• Customer Support: To respond to your enquiries, resolve complaints, and maintain records of our support interactions for quality and compliance purposes.
• Marketing Communications: Where you have given your explicit consent, to send you promotional emails, SMS notifications, and bonus offers. You may withdraw this consent at any time.
• Platform Improvement: To analyse Platform usage patterns, improve user experience, test new features, and optimise game performance.
• Legal Compliance: To meet our obligations under applicable laws, respond to regulatory requests, and cooperate with law enforcement authorities where legally required.

6. Legal Basis for Processing

hahapk processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and hahapk — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and age verification requirements.
• Legitimate Interests: Processing carried out in pursuit of hahapk's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily applicable to marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Personal Data

hahapk does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following limited circumstances:

• Payment Service Providers: We share the financial data necessary to process your deposits and withdrawals with our payment partners (JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and others). These providers are contractually bound to process your data solely for payment purposes.
• Game Software Providers: Third-party game developers whose titles are hosted on the hahapk Platform may receive technical session data necessary to operate their games. They do not receive full player identity data.
• KYC & Verification Providers: Identity verification specialists may receive and process your identity documents on our behalf to complete KYC checks. All such providers operate under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: hahapk will disclose personal data to competent regulatory authorities, courts, or law enforcement agencies when legally required to do so.
• Group Companies: hahapk may share data within its corporate group for internal administrative and compliance purposes, subject to the same data protection standards applied to external processors.

8. Data Retention

hahapk retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, regulatory, and contractual obligations. Specific retention periods are as follows:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years following the date of verification, as required under applicable anti-money-laundering regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction date.
• Gaming Activity Logs: Retained for a minimum of three (3) years following account closure.
• Marketing Consent Records: Retained for the duration of your marketing consent, plus a reasonable period thereafter to evidence compliance.
• Customer Support Communications: Retained for three (3) years following the resolution of the relevant support interaction.

When personal data is no longer required and retention periods have expired, hahapk will securely delete or anonymise that data in accordance with our internal data disposal procedures.

9. Security Measures

hahapk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• Encryption in Transit: All data transmitted between your device and the hahapk Platform is protected by 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive data stored on hahapk servers — including identity documents and payment details — is encrypted using industry-standard encryption protocols.
• Access Controls: Access to personal data within hahapk's systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: hahapk offers two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised access.
• Penetration Testing: Our Platform infrastructure undergoes regular independent security assessments and penetration testing to identify and remediate potential vulnerabilities.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, hahapk will notify affected players and relevant authorities in accordance with applicable legal requirements.

10. Cookies & Tracking Technologies

hahapk uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage, and (where consented) deliver relevant promotional content. The main categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings, preferred games, and display options. Disabling these may affect your user experience.
• Analytics Cookies: Used to collect anonymised data about how players navigate and use the Platform, helping hahapk improve site performance and usability. Data collected via analytics cookies is aggregated and not used to identify individual players.
• Marketing Cookies: Used where you have given consent to receive personalised promotional content. These track your interactions with hahapk promotional materials to measure campaign effectiveness.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the hahapk Platform. By continuing to use the Platform after being presented with our cookie notice, you consent to the use of non-essential cookies as described above.

11. Your Data Subject Rights

Subject to applicable law, you have the following rights in relation to your personal data held by hahapk:

• Right of Access: You may request a copy of the personal data hahapk holds about you at any time. We will provide this information within 30 days of a valid request.
• Right to Rectification: If your personal data is inaccurate or incomplete, you may ask hahapk to correct or update it. You can also update many details directly from your account settings page.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we are required to retain certain data for AML and regulatory compliance purposes even after account closure.
• Right to Restriction: You may request that hahapk restricts the processing of your personal data in certain circumstances, such as while a correction request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on hahapk's legitimate interests at any time. You also have an unconditional right to object to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where hahapk processes your data on the basis of your consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact hahapk's support team via the 24/7 live chat facility or by email as set out in Section 15. We may require you to verify your identity before processing a data subject request. We will respond to all valid requests within 30 calendar days.

12. Minors

hahapk's Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If hahapk discovers or has reason to believe that an account has been registered by a person under 21, that account will be immediately suspended, the data reviewed, and the account closed in accordance with our age verification policy.

13. International Data Transfers

As an internationally licensed online gaming platform, hahapk may transfer your personal data to servers or service providers located outside of Pakistan. Where such transfers occur, hahapk takes appropriate measures to ensure that your personal data continues to receive the same level of protection as it does within our primary operating jurisdiction.

Measures we rely on for international data transfers include contractual obligations imposed on receiving parties via Data Processing Agreements, and ensuring that recipient entities operate under equivalent data protection standards. hahapk will not transfer your data to any jurisdiction that does not provide an adequate level of protection for personal data without implementing appropriate safeguards.

14. Changes to This Privacy Policy

hahapk may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made to this Policy, we will notify registered players by email to their registered address and by displaying a prominent notice on the Platform prior to the changes taking effect.

The effective date of the most recent version of this Policy is displayed at the top of this page. Your continued use of the hahapk Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by hahapk, please get in touch through the following channels:

• 24/7 Live Chat: The fastest way to reach our Data Protection team is through the live chat facility available directly on the hahapk Platform.
• Email: [email protected] — standard enquiries receive an initial response within 24 hours; data subject rights requests are processed within 30 calendar days.

When submitting a data-related request, please include your registered hahapk username and a clear description of your request so that our team can verify your identity and assist you as efficiently as possible.