hz888 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") describes how hz888 ("hz888", "we", "us", or "our") collects, processes, stores, and protects the personal data of individuals ("you", "user", or "player") who access or use the hz888 online gaming platform available at https://hz888.im and all associated mobile, desktop, and API interfaces.

hz888 is an internationally licensed online gaming operator that has been proudly serving Pakistani players since 2019. We operate sports betting, live casino, slot games, fishing arcade games, and other wagering products — all denominated in Pakistani Rupees (PKR) with local payment support via JazzCash and EasyPaisa. The trust of every player in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan is something we take seriously, and this Policy is a core part of that commitment.

This Policy applies to all personal data processed in connection with your hz888 account — whether provided during registration, during KYC verification, during gameplay, or through any communication with hz888 support staff. It should be read alongside our Terms & Conditions, which govern the overall relationship between you and hz888.

By registering an account on hz888, depositing funds, or simply accessing the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the hz888 platform immediately and contact our support team to close your account.

For the purposes of applicable data protection legislation, hz888 acts as the data controller in respect of the personal data it collects and processes. As data controller, hz888 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is lawful, fair, and transparent.

Where hz888 engages third-party service providers — such as payment processors, KYC verification vendors, or fraud prevention platforms — those providers may act as data processors on hz888's behalf. In such cases, hz888 maintains data processing agreements with those processors to ensure your information is handled in a manner consistent with this Policy and applicable legal obligations.

For all privacy-related enquiries, data access requests, or complaints regarding the processing of your personal data, please contact hz888's designated Data Protection contact at: [email protected]

hz888 collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the categories of data collected and their primary purpose:

hz888 does not intentionally collect sensitive special-category data such as racial or ethnic origin, religious beliefs, health data, or biometric identifiers, unless specifically required to fulfil a legal obligation (for example, where a regulatory authority mandates enhanced identity verification procedures).

hz888 collects personal data through the following channels and mechanisms:

• Direct registration: Information you provide when creating your hz888 account, including your name, email, mobile number, and date of birth.
• KYC document submission: Identity documents (CNIC, passport, or driver's licence) and proof of address documents submitted through the account verification portal.
• Payment transactions: Financial data associated with deposits and withdrawal requests processed via JazzCash, EasyPaisa, HBL, UBL, SadaPay, or USDT TRC20.
• Platform usage: Automatically collected technical and gaming activity data generated as you browse, log in, and play on the hz888 platform.
• Cookies and tracking technologies: First-party cookies and similar technologies used to maintain your session, remember your preferences, and analyse platform performance (see Section 10).
• Support communications: Personal data you voluntarily share when contacting hz888 support via live chat or email.
• Third-party verification providers: Identity and age verification results returned by hz888's licensed KYC partners following your document submission.

hz888 processes your personal data only for specified, explicit, and legitimate purposes. We do not process data in a manner that is incompatible with the purposes for which it was originally collected. The primary purposes for which hz888 uses your data are:

• Account management: Creating, maintaining, and securing your hz888 player account, including password resets and two-factor authentication.
• Identity and age verification: Conducting mandatory KYC checks to confirm you are aged 21 or above and are the genuine owner of the payment methods on your account.
• Payment processing: Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, SadaPay, Meezan Bank, and USDT TRC20 in PKR.
• Platform provision and personalisation: Delivering the gaming services you have requested, remembering your preferences, and improving your overall experience on hz888.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent accounts, bonus abuse, money laundering, and other prohibited activities.
• Regulatory compliance: Meeting hz888's obligations under its international gaming licence, including player verification, transaction monitoring, and regulatory reporting.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and enabling player-requested responsible gaming tools such as deposit limits, cool-off periods, and self-exclusion.
• Customer support: Responding to your queries, resolving disputes, and improving support quality.
• Marketing communications: Sending you relevant hz888 promotional offers, bonus notifications, and PSL cricket betting updates — but only where you have provided explicit consent or where we have a legitimate interest to do so. You may opt out at any time.
• Analytics and platform improvement: Analysing aggregated and anonymised usage data to improve the hz888 platform, identify technical issues, and enhance user experience.

hz888 relies on one or more of the following legal bases when processing your personal data, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and hz888 — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with hz888's legal and regulatory obligations — including KYC identity verification, anti-money laundering (AML) transaction monitoring, and regulatory reporting to hz888's licensing authority.
• Legitimate interests: Processing undertaken in pursuit of hz888's legitimate business interests where those interests are not overridden by your privacy rights — including fraud detection, security monitoring, and platform analytics.
• Consent: Where hz888 relies on your freely given, informed consent — specifically for optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

hz888 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share your data only in the following controlled circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, SadaPay, Meezan Bank, and USDT processing partners receive the minimum financial data necessary to process your deposits and withdrawals.
• KYC and identity verification vendors: Licensed third-party KYC providers receive your identity documents and biometric data solely for the purpose of verifying your age and identity as required by hz888's gaming licence conditions.
• Fraud prevention and AML platforms: Regulated fraud detection and anti-money laundering screening services may receive account and transaction data for risk assessment purposes.
• Regulatory authorities and law enforcement: hz888 will disclose personal data to relevant gaming regulatory bodies, financial intelligence units, or law enforcement agencies where legally required to do so or where hz888 suspects criminal activity on the platform.
• Group companies: Personal data may be shared within the hz888 group of companies for internal administrative purposes, always subject to this Policy.
• Professional advisors: hz888's legal counsel, auditors, and insurers may access personal data on a need-to-know basis under strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of hz888 assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom hz888 shares personal data are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection obligations.

hz888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active lifetime plus a minimum of 5 years following account closure, in line with AML record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, as required by international gaming licence conditions.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction for AML compliance and financial audit purposes.
• Support communications: Live chat transcripts and email correspondence retained for 2 years from the date of the interaction, unless the communication relates to an unresolved dispute.
• Marketing preferences: Opt-in records retained for the duration of your account plus 3 years to evidence consent compliance.
• Technical and log data: Server logs and access records retained for up to 12 months for security monitoring and fraud investigation purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and business analysis purposes.

hz888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the hz888 platform is encrypted in transit using industry-standard TLS 1.3 protocols.
• Encryption at rest: Sensitive personal data — including payment details and identity documents — is encrypted at rest using AES-256 encryption in hz888's secure data infrastructure.
• Access controls: Personal data is accessible only to hz888 staff and contractors who have a genuine business need to access it, subject to role-based access controls and audit logging.
• Two-factor authentication: hz888 supports and encourages two-factor authentication (2FA) for all player accounts to prevent unauthorised access.
• Penetration testing: hz888's platform and infrastructure undergo regular third-party security testing and vulnerability assessments.
• Incident response: hz888 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, hz888 will notify affected players and relevant regulatory authorities in accordance with applicable obligations.

hz888 uses first-party cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse how players use the site. We do not use third-party advertising cookies or behavioural tracking cookies for cross-site advertising purposes.

The following categories of cookies are used on the hz888 platform:

• Strictly necessary cookies: Essential for the platform to function — including session management, CSRF protection, and login state maintenance. These cannot be disabled without affecting core functionality.
• Functional cookies: Used to remember your language preference, display settings, and responsible gaming tool configurations. These enhance your experience but are not strictly essential.
• Analytics cookies: First-party analytics tools collect anonymised data about page views, session durations, and feature usage to help hz888 improve the platform. No personally identifiable data is transmitted to third-party analytics providers.

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent access to the hz888 platform. Disabling functional or analytics cookies will not prevent you from using hz888 but may affect your user experience.

As an hz888 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact hz888's support team at [email protected] or via 24/7 live chat. hz888 will respond to all valid requests within 30 days.

The hz888 platform is strictly intended for individuals aged 21 years and above. hz888 does not knowingly collect personal data from minors. Age verification is a mandatory step in the hz888 registration and KYC process, and any account found to belong to an individual under the age of 21 will be immediately closed and all associated data purged, subject to any mandatory regulatory retention obligations.

If you are a parent or guardian and believe that a minor in your household has accessed or registered on the hz888 platform, please contact our support team immediately at [email protected] or via 24/7 live chat. hz888 treats all reports of underage access with the highest priority and will investigate and act within 24 hours of notification.

hz888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, updates to applicable legislation, or modifications to the hz888 platform. When we make material changes — those that significantly affect your rights or the way we process your personal data — we will notify you via the email address registered on your hz888 account and/or by displaying a prominent notice on the platform upon your next login.

The version number and effective date displayed at the top of this Policy and in the Table of Contents sidebar will be updated with each revision. Minor changes — such as typographical corrections or clarifications that do not alter the substance of any provision — may be made without individual notice but will be reflected in the updated effective date.

Your continued use of the hz888 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should stop using hz888 and request account closure via live chat or at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or hz888's handling of your personal data, please do not hesitate to get in touch. Our support team includes agents who are familiar with the specific privacy concerns and payment circumstances of Pakistani players.

• Live Chat: Available 24/7 inside your hz888 account — average response time under 5 minutes.
• Email: [email protected] — responses within 3–5 business hours for privacy-related matters.
• Postal Address: Available upon request for formal legal correspondence related to data subject rights requests.

hz888 is committed to resolving all privacy enquiries promptly and fairly. If you are not satisfied with hz888's response to a privacy complaint, you may escalate the matter to the relevant gaming regulatory authority or data protection supervisory authority with jurisdiction over hz888's international gaming licence.