Privacy Policy – hz888 Pakistan Online Gaming Platform

1 Who We Are

hz888 operates the online gaming and sports betting platform available at hz888.click. References to "hz888," "we," "us" or "our" throughout this Privacy Policy refer to the operator of the hz888 platform. hz888 is the data controller for all personal information collected through the hz888 platform. This means we determine the purposes and means of processing your data.

This Privacy Policy applies to all visitors and registered users of hz888, with particular relevance to players based in Pakistan. hz888 is designed specifically for the Pakistani market — all transactions are conducted in PKR, and payment methods include Easypaisa, JazzCash, NayaPay, SadaPay and IBFT bank transfers. This document is written in English (en-PK).

2 Data We Collect

hz888 collects personal data through several channels. Below is a complete explanation of each collection point:

2.1 Data You Provide Directly

When you register at hz888, you provide your full name, email address, phone number, date of birth and a chosen password. When you complete identity verification (KYC), you provide a copy of your CNIC and a liveness selfie. When you make deposits or withdrawals, you provide payment details such as your Easypaisa or JazzCash mobile number or your bank IBFT details.

2.2 Data Collected Automatically

When you visit hz888, our servers automatically log certain technical data including your IP address, browser type, device type and the pages you visit. This is standard practice for any website and is used primarily for security monitoring and platform improvement. hz888 does not use this technical data to identify you by name except where fraud investigation requires it.

2.3 Data from Third Parties

hz888 may receive limited data from third-party payment processors — for example, confirmation that a JazzCash transaction was successful — and from identity verification services used during KYC. hz888 does not purchase data about you from data brokers or marketing list providers.

3 How We Use Your Data

hz888 uses your personal data for the following specific purposes, each of which is tied to a legal basis detailed in Section 4:

• Account creation and management: Your name, email and phone number are used to create and maintain your hz888 account, send you transactional notifications (deposit confirmations, withdrawal alerts) and enable you to log in securely.
• Payment processing: Your Easypaisa, JazzCash or bank details are used solely to process your PKR deposits and withdrawals. hz888 does not store full card numbers. Payment data is processed in compliance with applicable financial regulations.
• Identity verification and KYC: Your CNIC details and liveness check are used to verify that you are who you say you are and that you are 18 or older. This is a legal requirement for online gaming platforms.
• Fraud prevention and security: Technical data including IP address, device fingerprint and session patterns are used by hz888's automated risk systems to detect and prevent fraud, money laundering and abuse of the bonus system.
• Responsible gaming: Your deposit history, betting patterns and session data are used by hz888's responsible gaming systems to identify players who may be at risk of problem gambling and to operate deposit limits and self-exclusion tools.
• Platform improvement: Anonymised usage data helps hz888 understand how Pakistani players interact with the platform so we can make it better. This analysis does not identify individual players.
• Marketing communications (opt-in only): If you have explicitly opted in, hz888 may send you information about promotions, bonuses and new features. You can opt out at any time.
• Legal compliance: hz888 retains certain records — including transaction history — as required by applicable financial and anti-money-laundering regulations.

4 Legal Bases for Processing

hz888 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to operate your hz888 account, process PKR payments and provide the gaming services you have registered for.
• Legal obligation: Processing required to comply with applicable law — including KYC identity verification, age verification, AML transaction monitoring and financial record-keeping requirements.
• Legitimate interest: Processing for fraud prevention, platform security, responsible gaming monitoring and anonymised analytics, where these interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications, where you have given explicit opt-in consent. You may withdraw this consent at any time with immediate effect.

5 Sharing Your Data

hz888 does not sell your personal data. We do not share your data with third parties for their own marketing purposes. The following are the limited circumstances in which hz888 may share your personal information with external parties:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive the payment information necessary to process your PKR transactions. These processors operate under their own privacy policies and applicable financial regulations.
• Identity verification providers: hz888 uses third-party KYC providers to verify CNIC documents and liveness checks. These providers process your identity data solely for the purpose of verification and are contractually prohibited from using it for any other purpose.
• Fraud prevention services: hz888 may share technical data (IP address, device identifiers) with fraud prevention services operating across the gaming industry to detect and block fraudulent activity. No financial data is included in these checks.
• Legal authorities: hz888 will disclose personal data to law enforcement, regulatory bodies or courts where required by law or valid legal process. hz888 will notify affected users where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or sale of hz888's business or assets, personal data may be transferred to the successor entity, subject to the same privacy protections described in this policy.

6 Payments & PKR Financial Data

Because hz888 operates exclusively in Pakistani Rupees and processes payments through local mobile wallet and banking services, this section specifically addresses how your financial data is handled in the Pakistani payment context.

hz888 does not store your full Easypaisa PIN, JazzCash PIN or internet banking credentials. Payment authentication happens directly between you and the respective payment service provider through their own secure channels. hz888 receives only confirmation that a transaction was successful, along with the amount and the masked identifier (for example, the last four digits of a mobile number).

Transaction records — including deposit and withdrawal amounts, timestamps and payment method identifiers — are retained by hz888 as part of our legal obligation under applicable financial regulations. These records are used for dispute resolution, AML compliance and responsible gaming monitoring. They are not used for profiling or targeted advertising.

7 Data Security

hz888 applies industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and hz888 servers.
• Encrypted storage for sensitive personal data including identity documents and payment details at rest.
• Access controls: Only authorised hz888 staff with a legitimate need can access personal data, and all access is logged and auditable.
• Automated intrusion detection monitoring hz888 systems around the clock for suspicious activity.
• Regular security reviews of our data handling practices and technical infrastructure.
• Two-factor authentication available for all hz888 player accounts to prevent unauthorised login.

No digital system is completely immune to risk. In the unlikely event of a data breach that affects your personal information, hz888 will notify affected players and relevant authorities in accordance with applicable law and as quickly as reasonably possible.

8 Data Retention

hz888 retains your personal data only for as long as is necessary for the purpose for which it was collected or as required by applicable law. The following retention periods apply as a general guide:

• Active account data (name, contact details, preferences): Retained for the lifetime of your hz888 account plus a reasonable period after closure.
• Financial transaction records (deposits, withdrawals, bet history): Retained for a minimum of five years following the date of each transaction, in accordance with AML and financial record-keeping regulations.
• Identity verification documents (CNIC copies, liveness data): Retained for the duration of your account and for a period after closure as required by applicable KYC regulations.
• Technical and usage data (IP logs, session data): Typically retained for up to 12 months for fraud prevention and security purposes.
• Marketing preference data: Retained until you withdraw consent or request deletion.

When retention periods expire, hz888 deletes or anonymises personal data securely. Anonymised aggregate data (for example, statistical reports on platform usage) may be retained indefinitely as it cannot identify any individual player.

9 Cookies

hz888 uses cookies — small text files stored on your device — to operate the platform, maintain your session and understand how players use the site. Below is a breakdown of the types of cookies hz888 uses:

hz888 does not use third-party advertising or tracking cookies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent hz888 from functioning correctly.

10 Your Rights

As a user of hz888, you have the following rights over your personal data. To exercise any of these rights, contact support@hz888.click with the subject line "Data Rights Request":

11 Children's Privacy

hz888 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is conducted as part of the KYC process on all withdrawal requests. If hz888 discovers that an account belongs to a person under 18, the account will be immediately closed, all data deleted in accordance with our retention policy, and the situation reported to relevant authorities where required by law.

If you are a parent or guardian and believe your child has registered at hz888, please contact support@hz888.click immediately. We will investigate and take appropriate action as quickly as possible.

12 Updates to This Privacy Policy

hz888 may update this Privacy Policy from time to time to reflect changes in our data practices, new platform features, changes in applicable law or feedback from players. The "Last reviewed" date at the top of this page will always reflect when the current version was published.

When we make significant changes to how we handle your data, hz888 will notify registered players by email before the changes take effect. Continued use of hz888 after notification of a policy update constitutes acceptance of the revised policy. If you do not accept the updated policy, you should stop using hz888 and contact support to close your account.

We recommend bookmarking this page and reviewing it periodically. The version published at hz888.click/privacy-policy is always the current and governing version.

13 Contact Us About Privacy

If you have any questions about this Privacy Policy, how hz888 handles your personal data, or if you want to exercise any of your data rights, please get in touch through the following channels:

• Email: support@hz888.click — use subject line "Privacy" or "Data Rights Request" for faster routing.
• Live Chat: Available 24/7 from within your hz888 account dashboard. For data rights requests, email is preferred as it creates a written record.

hz888 aims to acknowledge all privacy-related queries within 48 hours and to resolve them as quickly as the nature of the request allows. Data rights requests that require identity verification may take slightly longer but will always receive a timely response.