Privacy Policy – hz888

1. Introduction

hz888 ("hz888", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("you", "Player", "User") who access and use the hz888 online casino and sportsbook platform (the "Platform"), accessible at https://hz888.biz.

This Privacy Policy is issued in accordance with applicable data protection principles and describes how hz888 processes personal data in connection with the operation of the Platform, including account registration, payment processing, customer support, marketing communications, and responsible gaming compliance obligations.

This Privacy Policy forms part of the hz888 Terms & Conditions. By creating an account on hz888, making a deposit, or using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein.

2. Data We Collect

hz888 collects the following categories of personal data from players:

2.1 Registration & Identity Data

• Full name as per government-issued identification
• Date of birth (for age verification purposes)
• Email address
• Mobile phone number (including JazzCash/Easypaisa-registered numbers)
• Residential address
• CNIC number or passport number (where submitted for KYC verification)

2.2 Financial Data

• Deposit and withdrawal transaction records in PKR
• Payment method identifiers (JazzCash account numbers, Easypaisa wallet references, bank account last digits)
• Account balance history
• Bonus and promotion usage records

2.3 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited, games played, bets placed, and navigation patterns within the Platform
• Crash and error logs

2.4 Communications Data

• Customer support chat transcripts and email correspondence
• Feedback and survey responses
• Dispute and complaint records

3. How Data Is Collected

hz888 collects personal data through the following mechanisms:

• Directly from you: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automatically: Technical and usage data collected via cookies, server logs, and analytics tools when you access the Platform.
• From third parties: Identity and fraud screening services, payment processors including JazzCash and Easypaisa gateway providers, and geolocation service providers.
• From publicly available sources: Regulatory watchlists and sanctions lists consulted for anti-money laundering compliance purposes.

4. Purpose of Processing

hz888 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your hz888 account, including password recovery and session management.
• Service delivery: Operating the sportsbook, casino, and all other Platform features you use.
• Payment processing: Processing deposits, withdrawals, and refunds in PKR via your chosen payment method.
• Identity and age verification: Confirming that you are at least 18 years of age and that your account details are accurate, in fulfilment of our licensing obligations.
• Anti-money laundering (AML) compliance: Screening transactions and account activity against regulatory requirements and sanctions lists.
• Responsible gaming: Monitoring gambling patterns to identify potentially problematic behaviour and offering appropriate intervention tools where required.
• Customer support: Responding to your queries, complaints, and dispute submissions.
• Marketing communications: Sending promotional emails, bonus notifications, and Platform updates, where you have opted in or where we have a legitimate interest in doing so.
• Platform improvement: Analysing usage data to improve Platform performance, game selection, and user experience.
• Legal obligations: Complying with applicable laws, regulatory requirements, and court orders.

5. Legal Basis for Processing

hz888 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the hz888 Terms & Conditions agreement with you, including account operation and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including AML regulations, age verification requirements, and licensing conditions.
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and improvement of our services, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications, where you have given explicit consent. You may withdraw consent at any time by contacting hz888 support or updating your communication preferences in your account settings.

6. Data Sharing & Disclosure

hz888 does not sell your personal data to third parties. We share personal data only in the following circumstances:

6.1 Service Providers

hz888 engages third-party service providers for payment processing (including JazzCash and Easypaisa gateway operators), identity verification, fraud detection, customer support software, and analytics. These providers act under contractual data processing agreements and may only process your data for the specific purposes authorised by hz888.

6.2 Game Studios

Game providers operating within the hz888 Platform may receive limited technical session data required to operate their games. They are contractually prohibited from using this data for any purpose other than game delivery.

6.3 Regulatory & Legal Disclosure

hz888 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by law, court order, or in response to a valid legal process. hz888 will notify you of such disclosures where legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of hz888 or its assets, your personal data may be transferred to the acquiring entity, subject to the same data protection commitments described in this Privacy Policy.

7. Data Retention

hz888 retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods:

• Account and transaction records: Retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Customer support records: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of consent.
• Technical logs: Retained for up to twelve (12) months for security and debugging purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with hz888's data deletion procedures.

8. Data Security

hz888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Security measures applied to the hz888 Platform include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the hz888 Platform
• Encrypted storage of passwords using industry-standard hashing algorithms
• Access controls restricting hz888 employee access to personal data on a need-to-know basis
• Regular security assessments and vulnerability scanning of Platform infrastructure
• Two-factor authentication options for player accounts

Notwithstanding these measures, no internet transmission is entirely secure. hz888 cannot guarantee absolute security of data transmitted over the internet and you use the Platform at your own risk to this extent. You are responsible for maintaining the confidentiality of your hz888 login credentials.

9. Cookies & Tracking Technologies

hz888 uses cookies and similar tracking technologies to operate and improve the Platform. Categories of cookies used include:

• Essential cookies: Required for the Platform to function, including session authentication, load balancing, and fraud prevention cookies. These cannot be disabled.
• Analytics cookies: Used to understand how players interact with the Platform — which pages are visited, which games are played, and how navigation flows. This data is aggregated and anonymised where possible.
• Preference cookies: Store your Platform settings such as language preference and display options.
• Marketing cookies: Used to deliver relevant promotional content based on your activity on the Platform. These are only applied with your consent.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. hz888 does not use third-party advertising cookies from platforms external to hz888.

10. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by hz888:

• Right of access: You may request a copy of the personal data hz888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to hz888's legal retention obligations.
• Right to restriction: You may request that hz888 restrict processing of your data in certain circumstances.
• Right to data portability: You may request that hz888 provide your personal data in a structured, machine-readable format.
• Right to object: You may object to processing of your data for marketing purposes at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact hz888 support. hz888 will respond to verified requests within 30 days. hz888 may require identity verification before processing a data rights request.

11. Minors

The hz888 Platform is strictly for individuals aged 18 years and over. hz888 does not knowingly collect personal data from persons under 18. If hz888 becomes aware that personal data has been collected from a minor, the relevant account will be permanently closed and all associated personal data deleted in accordance with applicable law.

Parents and guardians are responsible for monitoring their children's internet usage. hz888 recommends the use of parental control software to restrict access to online gambling platforms. If you believe a minor has registered on hz888, please contact support immediately.

12. International Data Transfers

hz888 operates internationally and your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, hz888 ensures that appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms, to ensure that your personal data receives a level of protection consistent with this Privacy Policy.

By using the hz888 Platform, you consent to the transfer of your personal data to jurisdictions outside Pakistan as described in this section.

13. Changes to This Privacy Policy

hz888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to registered players via email or a notice on the Platform before taking effect.

The "Last Updated" date at the top of this document indicates when the most recent revision was made. We recommend reviewing this Privacy Policy periodically. Continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy.

14. Contact & Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how hz888 handles your personal data, please contact the hz888 Data team:

hz888 Privacy Team
Email: [email protected]
Response time: Within 30 business days of a verified request

hz888 takes all privacy enquiries seriously. Where a complaint cannot be resolved through our internal process, you may refer the matter to the relevant regulatory or data protection authority in your jurisdiction.