hitpk Privacy Policy

This Privacy Policy is published by the operator of the hitpk platform, accessible at hitpk.bet (referred to throughout this document as "hitpk", "we", "us", or "our"). hitpk operates as an online sports betting and casino gaming platform licensed under an international gaming authority and serving registered players including those based in Pakistan.

For the purposes of data protection law, hitpk acts as the data controller in respect of personal data collected through the hitpk Platform. Where hitpk engages third-party service providers to process data on its behalf, those providers act as data processors under contractual obligations that meet the standards required by applicable data protection frameworks.

If you have any questions about this Privacy Policy or wish to exercise your data rights, you may contact hitpk's data protection team at any time. Contact details are provided in Section 13 of this Policy.

hitpk collects personal data in the following categories. We only collect information that is genuinely necessary for the purposes described in this Policy.

hitpk collects your personal data through the following channels:

• Direct submission: Information you provide when you register your hitpk Account, complete KYC verification, submit a withdrawal request, or contact our customer support team.
• Automated technical collection: Data collected automatically when you access the Platform, including your IP address, device identifiers, browser data, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies described in Section 7.
• Payment service providers: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and blockchain confirmations for USDT TRC20 deposits and withdrawals.
• Identity verification providers: Where hitpk uses a third-party KYC verification service to validate your identity documents, that provider shares verification outcome data with hitpk.
• Fraud prevention and AML screening tools: hitpk may receive risk-scoring data from third-party fraud detection and anti-money laundering screening services as part of its compliance obligations.

hitpk does not purchase personal data lists from third-party data brokers and does not harvest data from social media platforms or other websites without your knowledge.

hitpk uses your personal data for the following purposes. Each purpose is linked to a lawful legal basis, described in Section 5.

• Account management: Creating, maintaining, and securing your hitpk Account, processing your logins, and managing Account preferences and settings.
• Identity and age verification: Conducting KYC checks to confirm that you are aged 21 or above and that the identity you have registered is genuine, as required by our licensing obligations.
• Payment processing: Facilitating deposits via JazzCash, EasyPaisa, and other supported Pakistani payment channels, and processing withdrawal requests to your verified payment method.
• Regulatory and AML compliance: Meeting our legal obligations under anti-money laundering, counter-terrorist financing, and gambling regulations, including the retention of transaction records for the periods required by law.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and providing account recovery assistance.
• Responsible gaming: Monitoring your gaming activity to identify potential problem gambling indicators and administering self-exclusion, deposit limits, and other responsible gaming tools you activate on your Account.
• Fraud and security: Detecting and preventing fraudulent activity, bonus abuse, money laundering, multi-accounting, and unauthorised Account access.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have consented to receive marketing communications. You may opt out at any time via your Account settings.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, design, and content of the hitpk Platform.

Where data protection law requires hitpk to identify a legal basis for processing your personal data, we rely on the following bases:

• Contractual necessity: Processing required to deliver the services described in the hitpk Terms & Conditions — including account creation, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of our contract with you.
• Legal obligation: Processing required to meet hitpk's legal obligations under gaming regulations, AML law, and applicable licensing conditions, including KYC verification and transaction record-keeping.
• Legitimate interests: Processing carried out for fraud detection, platform security, responsible gaming monitoring, and general analytics, where these interests are not overridden by your privacy interests or fundamental rights.
• Consent: Where hitpk processes your data for marketing communications or optional analytics features, we do so on the basis of your explicit consent. You may withdraw consent at any time without affecting the legality of processing carried out before withdrawal.

hitpk does not sell your personal data. We share your data with the following categories of third party only to the extent necessary to deliver our services or meet our legal obligations:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and our USDT TRC20 blockchain processing partner receive the minimum payment data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Where hitpk uses a third-party identity verification service, your identity documents are shared with that provider solely for verification purposes under a strict data processing agreement.
• Game content providers: Live casino and slot game providers including those supplying content to the hitpk Platform may receive your Player ID and session data for the purposes of game delivery, RNG certification, and dispute resolution. These providers operate under separate data processing terms consistent with their own licensing obligations.
• Fraud and AML screening services: Transaction and identity data may be shared with screening providers to discharge hitpk's anti-money laundering and fraud prevention obligations.
• Regulatory and licensing authorities: hitpk will disclose your data to gaming regulators, law enforcement agencies, or other government bodies where required to do so by applicable law or court order.
• Cloud and IT infrastructure providers: hitpk uses cloud hosting services to store and process data. These providers act as data processors under contractual obligations that prohibit them from using your data for any purpose other than providing infrastructure services to hitpk.

All third-party data processors engaged by hitpk are subject to written data processing agreements that impose confidentiality obligations, restrict their use of your data, and require them to implement appropriate security measures. hitpk remains responsible for ensuring that your data is handled appropriately by its processors.

hitpk uses cookies and similar technologies to improve your experience on the Platform, maintain your session while you are logged in, and collect analytical data about how the Platform is used. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing you from using the Platform.
• Functional cookies: Remember your preferences such as language settings, preferred deposit method, and last-visited game categories to personalise your experience on subsequent visits.
• Analytical cookies: Collect anonymised data about page views, navigation paths, session duration, and feature usage to help hitpk understand how the Platform performs and identify areas for improvement. This data is aggregated and does not identify you personally.
• Security cookies: Used to detect suspicious activity, prevent session hijacking, and support fraud detection processes.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging into your hitpk Account. Disabling functional or analytical cookies will not affect your ability to use core Platform features but may result in a less personalised experience.

hitpk retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

After the applicable retention period has expired, hitpk will securely delete or anonymise your personal data so that it can no longer be associated with you. Anonymised data may be retained indefinitely for aggregate statistical analysis.

As a hitpk player, you hold the following rights in relation to your personal data. hitpk is committed to facilitating the exercise of these rights promptly and without undue friction.

To exercise any of the above rights, please contact hitpk at [email protected] with your registered mobile number and a description of your request. hitpk will verify your identity before processing any data rights request and will respond within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case hitpk will notify you of the extension and the reason for it.

The hitpk Platform is strictly intended for individuals aged 21 years and above. hitpk does not knowingly collect personal data from any individual under the age of 21. The age restriction on the hitpk Platform is higher than the standard 18+ threshold applied in many jurisdictions, reflecting the stricter standards hitpk applies to protect younger adults from gambling-related harm.

Where hitpk discovers or has reasonable grounds to believe that personal data has been collected from an individual under 21, it will immediately suspend the associated Account, initiate an age verification review, and — where underage access is confirmed — delete the personal data of the minor and close the Account in accordance with the hitpk Terms & Conditions.

Parents and guardians who believe a person under 21 in their care has registered an account on the hitpk Platform are urged to contact hitpk support immediately at [email protected]. hitpk will treat such reports with the highest priority and will act promptly to investigate and close any underage account identified.

hitpk operates internationally and may store or process your personal data on servers located outside of Pakistan. Where personal data is transferred to countries that may not provide the same level of data protection as Pakistani data protection standards, hitpk takes the following steps to ensure your data remains protected:

• hitpk enters into standard contractual data transfer agreements with all recipients of personal data in third countries, incorporating data protection obligations consistent with applicable law.
• For transfers to cloud infrastructure providers, hitpk selects providers that maintain internationally recognised security certifications including ISO 27001 and SOC 2 Type II.
• hitpk conducts transfer impact assessments where required, to evaluate whether additional safeguards are needed to protect your data in the destination jurisdiction.

By registering a hitpk Account and accepting the hitpk Terms & Conditions, you acknowledge that your personal data may be transferred and processed in jurisdictions outside Pakistan in accordance with the safeguards described in this Section.

hitpk may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. Where changes are material — meaning they significantly affect how your personal data is used or your rights over that data — hitpk will notify registered players through one or more of the following channels:

• An on-Platform notification banner displayed when you next log into your hitpk Account.
• An email notification to your registered contact address where one is held on file.
• An updated effective date and version note at the top of this Privacy Policy page.

The current version of this Privacy Policy is always available at hitpk.bet/privacy-policy. hitpk recommends that you review this page periodically. Your continued use of the hitpk Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or hitpk's handling of your personal data, you may contact our data protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week, in English and Urdu
• Response time: hitpk acknowledges all privacy-related enquiries within 48 hours and provides a substantive response within 30 calendar days

If you are not satisfied with hitpk's response to a privacy complaint, you may escalate the matter to the relevant gaming regulatory authority under which hitpk holds its international gaming licence. Details of the applicable regulatory authority are available upon request from the hitpk support team.

hitpk takes all privacy complaints seriously and commits to resolving them fairly, transparently, and in accordance with applicable data protection obligations. We appreciate feedback from our players as it helps us continually improve our data practices and privacy standards.

This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions of the hitpk Privacy Policy are superseded by this document. Governing language: English.