At hahapk, your personal data is handled with the same care and precision we apply to every other part of the platform. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used and protected, who it may be shared with, and what rights you hold over your own data as a registered hahapk player.
Privacy at a Glance
A plain-language summary of the six most important aspects of how hahapk handles your data. The complete legal text is in the sections below.
hahapk collects registration details, identity verification documents, payment transaction records, device and browser information, and gameplay activity logs to operate the platform and meet regulatory obligations.
Your data is used to verify your identity, process PKR deposits and withdrawals via JazzCash and EasyPaisa, detect fraud, comply with anti-money laundering regulations, and deliver a personalised hahapk experience.
hahapk does not sell your personal data. It is shared only with regulated payment processors, identity verification providers, and where legally required by applicable regulatory authorities — never with advertisers.
All hahapk data is protected with 256-bit SSL encryption, secure server infrastructure, restricted internal access controls, and regular independent security audits to prevent unauthorised access or data breach.
You have the right to access, correct, or request deletion of your personal data held by hahapk. You may also object to certain processing activities and request data portability, subject to applicable legal constraints.
hahapk uses strictly necessary session cookies and optional analytics cookies. You can manage your cookie preferences at any time. No third-party advertising cookies are placed on the hahapk platform.
1.1 This Privacy Policy describes how hahapk ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "User") who access or use the hahapk platform at hahapk.com, including its sports betting, live casino, slot, and instant game services.
1.2 hahapk acts as the data controller for all personal data collected through the platform. This means hahapk determines the purposes and means by which your personal data is processed. Where hahapk engages third-party service providers who process data on its behalf, those providers act as data processors and are contractually bound to process your data only in accordance with hahapk's instructions and this Policy.
1.3 This Privacy Policy should be read in conjunction with hahapk's Terms & Conditions and Responsible Gaming Policy. Capitalised terms used but not defined in this Policy carry the meanings assigned to them in the hahapk Terms & Conditions.
1.4 hahapk's platform is directed exclusively at adults aged 21 and above. hahapk does not knowingly collect personal data from individuals under the age of 21. If you believe a minor has submitted personal data to hahapk, please contact us immediately at [email protected].
2.1 hahapk collects personal data through several channels: directly from you when you register or use the platform, automatically through technical systems as you interact with the platform, and from third-party identity and payment verification services.
2.2 The categories of personal data collected by hahapk are set out below:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC/passport number, nationality | Provided by you at registration and KYC |
| Contact Data | Pakistani mobile number, email address, city of residence (e.g. Karachi, Lahore, Islamabad) | Provided by you at registration |
| Financial Data | JazzCash/EasyPaisa wallet IDs, HBL/UBL/Meezan Bank account references, Visa/Mastercard last-four digits, USDT TRC20 wallet address, transaction history in PKR | Provided by you during deposit/withdrawal; payment processors |
| Verification Documents | Scanned or photographed CNIC, passport, selfie/liveness check images | Provided by you during KYC verification |
| Technical Data | IP address, device type, operating system, browser type and version, time zone, session timestamps | Collected automatically when you access the platform |
| Usage Data | Pages visited, games played, bet amounts, win/loss records, session duration, feature interactions | Collected automatically during platform use |
| Communications Data | Support tickets, emails, live chat transcripts, complaint records | Provided by you when contacting hahapk support |
| Responsible Gaming Data | Self-exclusion status, deposit limits set, cool-off periods, problem gambling flags | Generated through your use of responsible gaming tools |
2.3 hahapk does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where health-related information is voluntarily shared in the context of a responsible gaming or self-exclusion request, in which case it is processed solely for the purpose of fulfilling that request.
3.1 hahapk uses the personal data it collects strictly for the purposes described in this Policy. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without your explicit consent.
3.2 The specific purposes for which hahapk processes your personal data are as follows:
3.3 hahapk does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review, except where such processing is required by applicable law or is necessary to prevent fraud, in which case you have the right to request human review of the decision.
4.1 hahapk processes your personal data only where a valid legal basis exists. The applicable legal bases for hahapk's data processing activities are:
4.2 hahapk does not send unsolicited marketing communications. If hahapk introduces marketing communications in the future, these will only be sent to players who have expressly opted in, and a clear opt-out mechanism will be provided in every communication.
5.1 Payment Service Providers. hahapk shares necessary financial data with regulated payment processors including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and international card networks to process your PKR deposits and withdrawals. These providers are bound by their own regulatory and contractual data protection obligations.
5.2 Identity Verification Providers. hahapk uses third-party KYC and AML compliance services to verify your identity and age. Your identity documents and biometric verification data (where applicable) are shared with these providers solely for the purpose of completing the verification process. These providers are contractually prohibited from using your data for any other purpose.
5.3 Regulatory and Law Enforcement Authorities. hahapk will disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where required by applicable law, a valid court order, or a binding regulatory request. Where legally permitted, hahapk will notify you of such a disclosure.
5.4 Game Software Providers. Certain casino and slot games on the hahapk platform are operated by third-party game studios. These providers may receive anonymised or pseudonymised gameplay data necessary to deliver and certify the fairness of their games. They do not receive your name, contact details, or financial data.
5.5 Business Transfers. In the event of a merger, acquisition, or sale of all or part of hahapk's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the successor entity before any change in data controller takes effect.
5.6 Professional Advisors. hahapk may share data with its legal, accounting, or security advisors where strictly necessary for the provision of professional services, subject to binding confidentiality obligations.
6.1 As an internationally licensed gaming platform, hahapk may transfer your personal data to servers or service providers located outside Pakistan. Where such transfers occur, hahapk ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded under applicable data protection principles.
6.2 Safeguards used for international transfers may include standard contractual clauses, binding data processing agreements with third-party processors, and transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
6.3 If you would like further information about the specific safeguards applicable to any international transfer of your data, you may contact hahapk's support team at [email protected].
7.1 hahapk retains your personal data for as long as your account remains active and for a period thereafter as required by hahapk's legal, regulatory, and contractual obligations. The specific retention periods applicable to different categories of data are summarised below:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | AML regulatory obligation under gaming licence |
| Financial transaction records | 5 years after account closure | Financial crime and tax compliance requirements |
| Account and profile data | Duration of account + 2 years | Contractual and dispute resolution purposes |
| Support communications | 3 years from date of communication | Complaint resolution and quality assurance |
| Self-exclusion records | Indefinite | Prevention of re-registration by self-excluded players |
| Technical and usage logs | 13 months | Fraud detection and platform security |
| Cookie and analytics data | Up to 13 months | Platform performance analysis |
7.2 After the applicable retention period expires, hahapk will securely delete or anonymise your personal data such that it can no longer be attributed to you. Where full deletion is not technically possible (for example, in backup archives), hahapk will isolate the data from further active processing until deletion is feasible.
8.1 hahapk implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
8.2 Despite hahapk's security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying hahapk immediately at [email protected] if you suspect any unauthorised access to your account.
8.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, hahapk will notify you without undue delay and will take all reasonable steps to contain and remediate the breach.
9.1 hahapk uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device by a website to remember information about your visit. hahapk uses the following categories of cookies:
9.2 hahapk does not use third-party advertising or retargeting cookies. No data collected through hahapk's cookies is shared with advertising networks or used to profile you for commercial advertising purposes on other websites.
9.3 You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the hahapk platform, including the ability to log in to your account.
9.4 hahapk's platform does not currently respond to browser-level "Do Not Track" signals, as no industry standard for handling such signals has been established. However, hahapk's limited use of optional cookies (performance and functional only) reflects a privacy-by-design approach to tracking.
10.1 Depending on your jurisdiction of residence and the applicable data protection laws, you may hold some or all of the following rights in respect of your personal data held by hahapk:
Request a copy of the personal data hahapk holds about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data held by hahapk about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that hahapk limits how your data is processed while a dispute regarding accuracy or lawfulness is resolved.
Receive a structured, machine-readable copy of data you have provided to hahapk, where processing is based on consent or contract.
Object to processing of your data carried out on the basis of legitimate interests, including any profiling based on legitimate interests.
10.2 To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Right]". hahapk will acknowledge your request within two (2) business days and will respond substantively within thirty (30) days of receipt, or within any shorter period required by applicable law.
10.3 hahapk will not charge a fee for processing a data rights request unless the request is manifestly unfounded, excessive, or repetitive, in which case hahapk reserves the right to charge a reasonable administrative fee or to decline to act on the request, with written reasons provided.
10.4 Note that certain rights — particularly the right to erasure — may be limited where hahapk is required to retain your data to comply with a legal obligation (such as AML record-keeping requirements) or to defend a legal claim. In such cases, hahapk will explain the limitation in its response to your request.
11.1 The hahapk platform is strictly intended for adults aged 21 and above. hahapk does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is mandatory for all new accounts and is completed before any account is fully activated.
11.2 If hahapk becomes aware that personal data has been collected from a person under the age of 21 — whether through a fraudulent registration or any other means — hahapk will immediately suspend the account, delete the associated personal data to the extent permitted by law, and return any deposits via the original payment method after deducting any applicable transaction costs.
11.3 Parents and guardians who believe their child may have registered for or accessed hahapk are encouraged to contact the support team at [email protected] immediately. hahapk takes underage gambling extremely seriously and will act promptly on all such reports.
12.1 hahapk processes certain personal data specifically in the context of its responsible gaming obligations. This includes monitoring gameplay patterns and transaction data to identify indicators of problem gambling behaviour, enforcing deposit limits and session time controls set by players, and maintaining records of self-exclusion requests.
12.2 Self-exclusion records are retained indefinitely by hahapk, even after account closure, to prevent self-excluded players from re-registering. This processing is carried out on the basis of hahapk's legal obligation under its gaming licence and its legitimate interest in protecting vulnerable players. Self-exclusion data is never used for any commercial purpose.
12.3 If you are experiencing difficulties related to gambling, hahapk encourages you to use the responsible gaming tools available on the platform and to seek further information on the hahapk Responsible Gaming page.
13.1 The hahapk platform does not contain links to third-party websites for commercial or advertising purposes. Any references to third-party payment providers (such as JazzCash or EasyPaisa) are made solely in the context of describing hahapk's supported payment methods and do not constitute endorsement of, or responsibility for, those providers' privacy practices.
13.2 hahapk is not responsible for the privacy practices or content of any third-party platforms or services. If you navigate away from hahapk.com to a third-party website, you do so at your own risk and should review the applicable privacy policy of that third party.
14.1 hahapk may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, platform features, or data processing practices. The date of the most recent update is always displayed at the top of this page.
14.2 Where a change is material — meaning it meaningfully alters how hahapk processes your personal data or the rights available to you — hahapk will notify you via the email address registered to your account and/or through a prominent notice on the platform at least seven (7) days before the revised Policy takes effect.
14.3 Your continued use of the hahapk platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with an updated Policy, you should discontinue use of the platform and may request account closure in accordance with the hahapk Terms & Conditions.
15.1 If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a concern about how hahapk has handled your personal data, please contact the hahapk support team using the details below:
15.2 hahapk aims to respond to all privacy-related enquiries within two (2) business days and to resolve data rights requests within thirty (30) days. For complex requests requiring additional review, hahapk will notify you of any extension to this timeframe and the reason for it.
15.3 If you are not satisfied with hahapk's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction, or to the dispute resolution body specified under hahapk's gaming licence. Details of the applicable authority are available on request from the support team.
hahapk keeps your data secure so you can focus on cricket betting, PSL odds, live casino, and slots — all in PKR. 21+ only. Please play responsibly.