hz888 Privacy Policy — How We Handle Your Personal Data

hz888 is committed to the responsible and lawful handling of personal data belonging to all players who use our platform. As a licensed online gaming operator serving Pakistani players, hz888 processes personal data in accordance with our international gaming licence obligations, which impose specific data protection requirements that are consistent with internationally recognised data privacy standards.

The personal data hz888 collects is used for a defined and limited set of purposes — operating your gaming account, processing PKR deposits and withdrawals through JazzCash, EasyPaisa, and banking channels, fulfilling our Know Your Customer (KYC) and Anti-Money Laundering (AML) regulatory obligations, and providing Urdu-English customer support. We do not sell personal data to third parties for commercial marketing purposes. We do not share your data beyond what is strictly necessary for platform operation and regulatory compliance.

If you have any questions about how hz888 handles your personal information — including requests to access, correct, or delete your data — our support team is available 24 hours a day via live chat in both English and Urdu.

hz888 acts as the Data Controller for all personal data collected from registered Players through the Platform. As Data Controller, hz888 determines the purposes for which personal data is collected and the means by which it is processed. hz888 is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with our international gaming licence conditions.

All data-related enquiries — including access requests, rectification requests, deletion requests, and complaints regarding the handling of your personal data — should be directed to hz888 Customer Support. Contact details are provided in Section 15 of this Policy.

hz888 collects the following categories of personal data from Players. The table below sets out each category, specific data types within it, and the purpose for which it is collected:

hz888 collects personal data through the following channels and mechanisms:

4.1 Direct Submission by You

• During account registration — mobile number, chosen username, and date of birth;
• During KYC verification — CNIC photographs, selfie images, and identity confirmation;
• During deposit and withdrawal processes — payment account details (JazzCash number, EasyPaisa number, bank account details);
• Through customer support interactions — information you provide when submitting queries, complaints, or disputes to hz888 via live chat or email.

4.2 Automated Collection

• Session data, IP addresses, and device information collected automatically when you access the hz888 platform through any browser or device;
• Gaming and betting activity logged automatically by the platform systems as you interact with Games and the Sportsbook;
• Cookie and tracking data as described in Section 10 of this Policy.

4.3 Third-Party Sources

• Identity verification service providers who assist hz888 in confirming CNIC authenticity and screening against sanctions or PEP (Politically Exposed Persons) databases;
• Payment processors including JazzCash, EasyPaisa, and banking partners, who provide transaction confirmation data to hz888 upon completion of deposits and withdrawals;
• Fraud prevention and anti-money laundering screening services that may provide risk scoring data associated with accounts or transactions.

hz888 uses your personal data only for the specific purposes for which it was collected. The primary purposes for which hz888 processes personal data are as follows:

• Account creation and management: Creating, authenticating, and maintaining your hz888 Player account, including password resets and account security measures;
• Age verification and identity confirmation: Verifying that all Players meet the mandatory 21+ age requirement using CNIC documentation, a non-negotiable requirement under hz888's gaming licence obligations;
• Payment processing: Facilitating PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported channels; processing withdrawal requests to verified payment accounts;
• AML and fraud prevention: Monitoring transactions and gaming activity for patterns indicative of money laundering, fraud, multi-account abuse, or bonus exploitation, as required by our gaming licence and international AML standards;
• Responsible gaming compliance: Monitoring gaming behaviour against Players' self-imposed deposit limits, session time settings, and loss limits; managing cooling-off periods and self-exclusion requests; proactively identifying potential problem gambling indicators;
• Customer support delivery: Responding to account queries, technical issues, payment questions, and formal dispute submissions through hz888's 24/7 Urdu-English support team;
• Platform security: Detecting and preventing unauthorised account access, bot activity, collusion between Players, and any other prohibited conduct outlined in our Terms & Conditions;
• Regulatory record-keeping: Maintaining records of gaming activity, financial transactions, and identity verification outcomes as required by our international gaming licence for the retention periods specified in Section 8;
• Platform improvement: Analysing aggregated, anonymised usage patterns to improve the hz888 platform, game selection, and user interface — this analysis does not involve the use of personally identifiable data in identifiable form.

hz888 processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between hz888 and you — including account creation, payment processing, game access, and customer support — is processed on the basis that it is necessary for the performance of the services you have contracted for;
• Legal obligation: Processing necessary to comply with hz888's obligations under its international gaming licence — including KYC identity verification, AML transaction monitoring, responsible gaming requirements, and regulatory record-keeping — is processed on the basis of legal obligation;
• Legitimate interests: Processing undertaken to protect the security of the hz888 platform, prevent fraud, detect prohibited conduct, and improve platform performance on an aggregate anonymised basis — where such interests are not overridden by your privacy rights;
• Consent: Where hz888 seeks to use your data for optional purposes not covered by the above grounds, we will seek your explicit consent and provide a clear mechanism to withdraw that consent at any time.

hz888 does not sell personal data to third parties. We share personal data only in the following limited and necessary circumstances:

7.1 Payment Processing Partners

hz888 shares transaction-relevant data (account identifiers, transaction amounts, timestamps) with payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and applicable cryptocurrency network operators — solely as necessary to process your deposit or withdrawal. These processors operate under their own privacy policies and data protection obligations.

7.2 Identity Verification Providers

hz888 engages specialist KYC and identity verification service providers to assist with CNIC authentication and sanctions screening. These providers receive only the minimum data necessary for the verification task and are bound by confidentiality and data protection agreements with hz888.

7.3 Regulatory and Law Enforcement Authorities

hz888 may disclose personal data to regulatory bodies, gaming licence supervisory authorities, financial intelligence units, or law enforcement agencies where we are legally required to do so — including in connection with AML reporting obligations, licence compliance audits, or formal investigation requests from competent authorities.

7.4 Game Content Providers

Third-party game content providers whose Games are hosted on the hz888 platform may receive technical session data (session token, game round identifiers) necessary to operate their games. These providers do not receive Player identity information beyond what is technically required for game functionality.

hz888 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the mandatory retention periods imposed by our gaming licence and applicable regulatory frameworks:

• Account and identity data (KYC): Retained for a minimum of 5 years following account closure, as required by our gaming licence AML obligations. This includes CNIC documentation and identity verification records;
• Financial transaction records: Retained for a minimum of 5 years following each transaction, as required for AML compliance and potential regulatory audit purposes;
• Gaming and betting records: Retained for a minimum of 3 years following account closure for regulatory compliance and dispute resolution purposes;
• Customer support records: Retained for a minimum of 2 years following the closure of a support interaction or resolution of a formal dispute;
• Technical and session logs: Retained for up to 12 months for security monitoring and fraud detection purposes, then deleted or anonymised.

Upon expiry of the applicable retention period, hz888 securely destroys or anonymises personal data such that it can no longer be attributed to any individual Player. Where a legal hold is active on specific data (e.g. as part of an ongoing investigation), data is retained until the hold is lifted.

hz888 implements the following technical and organisational security measures to protect Player personal data against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit TLS/SSL encryption on all data transmissions between Players' devices and hz888's servers — the same encryption standard used by major international financial institutions;
• Password hashing using industry-standard cryptographic algorithms — hz888 stores only the hash of your password, never the plain-text password itself;
• Segregated data storage — personal identity data, financial data, and gaming data are stored in separate, access-controlled database environments to limit exposure from any single breach;
• Access controls — hz888 staff access to personal data is limited to those with a legitimate operational need, enforced through role-based access control and multi-factor authentication on internal systems;
• Regular security audits conducted by independent cybersecurity professionals, including penetration testing and vulnerability assessments;
• Payment data isolation — hz888 does not store full payment card numbers or full bank account details on our systems. Payment transactions are processed through certified gateway infrastructure that holds relevant financial data under their own PCI-DSS compliant environments.

hz888 uses cookies and similar tracking technologies to operate the platform, maintain your authenticated session, and understand how the platform is used in aggregate. The following categories of cookies are in use on hz888:

10.1 Essential Cookies

These cookies are strictly necessary for the hz888 platform to function. They maintain your login session, remember your game state between pages, and enable core security features such as CSRF protection. These cookies cannot be disabled without disrupting your access to hz888. They do not contain personally identifiable information beyond your session token.

10.2 Functional Cookies

Functional cookies remember your preferences on hz888 — such as your chosen display language (English or Urdu), your preferred game lobby view, and whether you have acknowledged any platform notifications. These cookies improve your experience but do not track your activity across external websites.

10.3 Analytics Cookies

hz888 uses analytics tools to understand aggregate Platform usage — which game categories are most popular, what deposit flows are most commonly used (e.g. JazzCash versus bank transfer), and where Players encounter friction in the interface. This data is processed in aggregated, anonymised form and is not used to identify individual Players.

10.4 Security Cookies

Security cookies help hz888 detect and prevent fraudulent activity — including bot activity, credential stuffing attempts, and suspicious login patterns. They record device fingerprint information and session metadata used by our fraud detection systems.

You may manage cookie settings through your browser's privacy settings. Disabling essential cookies will impair or prevent access to hz888. Disabling analytics or functional cookies will not prevent access but may reduce the quality of your experience on the platform.

hz888 recognises the following data rights for all Players in relation to personal data we hold about them. To exercise any of these rights, contact hz888 Customer Support via live chat or the email address in Section 15. hz888 will respond to all data rights requests within 30 calendar days of receipt.

Parents and guardians who are concerned that a minor may have accessed or registered on hz888 should contact our support team immediately. hz888 will treat such reports as high priority and investigate without delay. Age verification through CNIC is mandatory before first withdrawal and serves as a key safeguard against underage access to hz888's gaming services.

The hz888 Platform integrates third-party services — including game content providers, payment gateway operators, and identity verification systems — that are necessary for platform operation. Each such third-party service operates under its own privacy policy and data protection framework. hz888 is not responsible for the privacy practices of third parties and recommends that Players review the privacy policies of any third-party service provider whose systems they interact with in connection with the hz888 platform.

hz888 does not embed third-party advertising networks, social media tracking pixels, or behavioural profiling tools on the Platform. Any third-party integrations present on hz888 are operational in nature — serving Games, processing payments, and verifying identities — not commercial surveillance mechanisms.

hz888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements under our gaming licence, or improvements to our platform operations. The effective date at the top of this Policy indicates the date on which the current version came into force.

Where updates to this Policy are material — meaning they substantially change how your personal data is processed or affect your data rights — hz888 will notify registered Players through an account notification, an alert displayed on the Platform login screen, or a direct communication to your registered contact channel. Your continued use of the hz888 Platform after the effective date of any updated Policy constitutes your acknowledgement of the revised terms.

We recommend checking this Privacy Policy periodically. The current version is always accessible at hz888.lol/privacy-policy and supersedes all previous versions.

For any enquiry, concern, or formal request relating to the processing of your personal data by hz888 — including data access requests, rectification requests, erasure requests, or complaints — please contact our team through the following channels. All contact details are displayed as plain text for reference only:

• Live Chat (Preferred): Available 24 hours a day, 7 days a week via the hz888 Platform chat widget. Response time: 3–5 minutes. Supported in English and Urdu.
• Email: [email protected] — Please include "Privacy Request" in the subject line along with your registered hz888 username. Responses within 24 hours for standard enquiries; within 5 business days for formal data rights requests.

hz888 aims to resolve all data privacy enquiries informally through direct communication with Players. Where a resolution cannot be reached through our internal process, Players may escalate to the independent adjudication body designated under hz888's gaming licence for external review.