hz88 Privacy Policy

This Privacy Policy ("Policy") describes how hz88 ("the Platform", "hz88", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who visit, register with, or use the hz88 online casino and sports betting platform accessible at hz88.vu and any associated mobile applications or services.

This Policy applies to all personal data hz88 processes in connection with your use of the hz88 platform, including data collected during account registration, identity verification (KYC), deposits and withdrawals via Pakistani payment methods, casino gameplay, sports betting activity, customer support interactions, and marketing communications.

By registering a hz88 account or using any part of the hz88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should not use the hz88 platform.

hz88 collects the following categories of personal data from players, depending on how you interact with our platform:

hz88 does not intentionally collect any special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required by applicable law or regulatory obligation.

hz88 collects personal data through the following means:

3.1 Direct Collection. You provide data directly to hz88 when you: (a) register a new hz88 player account; (b) complete the KYC identity verification process by submitting your CNIC and supporting documents; (c) make a deposit or request a withdrawal through any of the supported Pakistani payment methods; (d) contact hz88 customer support via live chat or email; (e) participate in hz88 promotions, competitions, or surveys; or (f) update your account profile or communication preferences.

3.2 Automated Collection. When you access the hz88 platform — whether on desktop (Windows/Mac) or mobile (Android/iOS) — our systems automatically collect technical data including your IP address, device identifiers, browser type and version, operating system, referring URLs, pages visited within hz88, time and duration of sessions, and in-game actions. This data is collected through server logs, cookies, and similar tracking technologies described in Section 8 of this Policy.

3.3 Third-Party Sources. hz88 may receive data about you from third parties including: (a) payment processors and Pakistani banking partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK) confirming transaction completion; (b) fraud prevention and AML screening services; (c) identity verification partners used in the KYC process; and (d) responsible gaming databases where you have registered a self-exclusion.

hz88 uses the personal data it collects for the following purposes:

• Account creation and management: To register your hz88 player account, authenticate your identity at login, and manage your account settings, preferences, and history.
• KYC and age verification: To verify that you are aged 21 or above and to confirm your identity in compliance with our anti-money laundering obligations before processing withdrawals. hz88 strictly enforces the 21+ age requirement for all players.
• Payment processing: To process your deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK, and to facilitate withdrawal of your winnings to your verified payment account.
• Platform provision: To deliver hz88 casino games, cricket betting markets, slot games, live dealer tables, and all other platform features that constitute the hz88 service.
• Customer support: To respond to your support queries, investigate complaints, resolve disputes, and improve the quality of hz88 customer service.
• Fraud prevention and AML compliance: To monitor betting and payment activity for signs of fraudulent behaviour, money laundering, underage gambling, multi-accounting, or other prohibited conduct as defined in the hz88 Terms & Conditions.
• Responsible gaming: To administer responsible gaming tools (deposit limits, self-exclusion, session time limits), to monitor for signs of problem gambling, and to comply with our responsible gaming policy obligations.
• Marketing communications: To send hz88 promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications via their registered email address or Pakistani mobile number.
• Platform improvement: To analyse aggregated player behaviour data, identify technical issues, improve hz88 game offerings, and enhance overall platform performance and user experience.
• Legal and regulatory compliance: To fulfil hz88's obligations under applicable laws, regulations, and licensing requirements, including responding to lawful requests from government authorities or courts of competent jurisdiction.

hz88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between you and hz88 — including account registration, KYC verification, payment processing, and platform delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) legislation, age verification obligations, and cooperation with lawful regulatory or law enforcement requests.
• Legitimate interests: Processing necessary for hz88's legitimate business interests, including fraud prevention, platform security, customer support quality improvement, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.1 hz88 does not sell your data. hz88 will never sell, rent, or trade your personal information to third-party organisations for marketing or any other commercial purpose. Data sharing by hz88 is limited strictly to what is necessary for the operation of the hz88 platform and compliance with legal obligations.

6.2 Categories of third parties with whom hz88 may share your data:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive transaction data necessary to process your deposits and withdrawals. These processors are bound by their own privacy policies and applicable financial regulations.
• Identity verification (KYC) providers: Third-party KYC service providers receive your identity documents solely for the purpose of verifying your identity and age in accordance with hz88's regulatory obligations.
• Fraud prevention and AML services: hz88 shares data with fraud screening and AML compliance services to detect and prevent money laundering, account fraud, and other prohibited activity.
• Game software providers: Third-party casino game developers and RNG (random number generator) providers may receive anonymised or pseudonymised gameplay data necessary for game delivery and fairness auditing.
• IT and infrastructure providers: Cloud hosting, data storage, cybersecurity, and technical support vendors who process data on hz88's behalf under strict data processing agreements.
• Responsible gaming organisations: Where you self-exclude or request referral to problem gambling support services, hz88 may share necessary information with relevant responsible gaming support organisations.
• Legal and regulatory authorities: hz88 will disclose personal data to government agencies, law enforcement bodies, or courts where required by law or valid legal process, or to protect the rights, property, or safety of hz88, its players, or third parties.

6.3 Data Processing Agreements. All third-party service providers who process personal data on hz88's behalf are required to enter into formal Data Processing Agreements (DPAs) with hz88. These agreements contractually bind third parties to process personal data only in accordance with hz88's documented instructions and applicable data protection standards.

7.1 Payment Data Handling. When you make a deposit or request a withdrawal on hz88 using JazzCash, EasyPaisa, HBL bank transfer, UBL bank transfer, Meezan Bank transfer, Raast, or 1LINK, your transaction is processed through certified, encrypted payment gateway infrastructure. hz88 does not store your full JazzCash or EasyPaisa account credentials, your complete bank account numbers, or your online banking passwords on hz88 servers at any point.

7.2 What hz88 Retains. hz88 retains transaction reference IDs, wallet references (in truncated or masked format), transaction amounts in PKR, timestamps, and payment method type for each deposit and withdrawal. This transaction history is retained for a minimum of 5 years in compliance with AML record-keeping obligations.

7.3 Return-to-Source Policy. hz88 applies a return-to-source policy for withdrawals, meaning that winnings must be returned to the same payment method used for the corresponding deposit wherever technically possible. This policy exists to prevent money laundering and ensure the security of financial flows on the platform.

8.1 What Are Cookies. Cookies are small text files placed on your device by the hz88 platform when you visit hz88.vu. They allow hz88 to recognise your device on subsequent visits, remember your preferences, keep you logged in to your account, and collect analytics data about how you use the platform.

8.2 Types of Cookies hz88 Uses:

• Strictly Necessary Cookies: Essential for the hz88 platform to function correctly. These include session authentication cookies that keep you logged in to your hz88 account and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your account preferences, language settings, and game display options so that hz88 can provide a personalised experience on return visits.
• Analytics Cookies: Collect anonymised data about how players navigate and use the hz88 platform, including which games are most played, how long sessions last, and which features generate the most engagement. This data is used to improve hz88 platform design and performance.
• Marketing Cookies: Used to track which hz88 promotional campaigns have been seen by your device and to measure campaign effectiveness. hz88 does not use marketing cookies to share your data with external advertising networks for the purpose of displaying third-party ads.

8.3 Managing Cookies. You may manage or disable cookies through your web browser's settings (Chrome, Firefox, Safari, Edge) or through your mobile device's application settings. Please note that disabling strictly necessary cookies will impair your ability to use hz88's platform features, including account login and payment functionality.

hz88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, hz88 will securely delete or irreversibly anonymise personal data so that it can no longer be linked back to you as an individual.

As an hz88 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact hz88 at [email protected] with the subject line "Data Rights Request – [Your hz88 Username]". hz88 will respond within 30 calendar days of receiving a valid request.

hz88 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and hz88 servers is encrypted using TLS 1.3 / 256-bit SSL protocol. This applies to all platform pages, account actions, and payment transactions.
• Encryption at rest: Sensitive personal data and KYC documents stored on hz88 servers are encrypted at rest using industry-standard encryption algorithms.
• Access controls: hz88 employee access to personal data is restricted on a strict need-to-know basis. Access is role-based, logged, and audited. No hz88 employee can access your full payment credentials.
• Two-factor authentication (2FA): hz88 supports 2FA for player account login and strongly recommends all Pakistani players enable this feature via Account Settings.
• Penetration testing: hz88 engages independent security firms to conduct regular penetration tests and vulnerability assessments of our platform infrastructure.
• Security incident response: hz88 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, hz88 will notify affected players within 72 hours of becoming aware of the breach, in accordance with applicable data protection standards.
• Staff training: All hz88 staff with access to personal data undergo regular data protection and cybersecurity training as a condition of employment.

While hz88 takes extensive precautions to protect your data, no internet-based platform can guarantee 100% security. You also have a role to play — please keep your hz88 account password confidential, use a strong unique password, and enable 2FA to maximise the protection of your account.

The hz88 platform is strictly restricted to individuals aged 21 years and above. hz88 does not knowingly collect, process, or retain personal data from anyone under the age of 21. If hz88 discovers or reasonably suspects that an account has been created by a person under the age of 21, hz88 will:

• Immediately suspend and permanently close the account;
• Void all bets placed and forfeit all balances associated with the underage account;
• Delete the personal data collected from the minor as promptly as possible, subject only to any mandatory legal retention obligations;
• Report the incident to appropriate authorities where required by applicable child protection laws.

13.1 Cross-Border Processing. hz88 is an international online gaming platform. Personal data collected from Pakistani players may be transferred to, stored in, and processed in countries outside Pakistan where hz88's servers, third-party service providers, or data processing partners are located. These countries may not have data protection laws equivalent to those applicable in Pakistan.

13.2 Safeguards for International Transfers. Where personal data is transferred internationally, hz88 implements appropriate safeguards to ensure your data receives adequate protection. These safeguards may include: (a) standard contractual clauses (SCCs) incorporated into agreements with data recipients; (b) binding corporate rules where applicable; (c) transfer only to jurisdictions with internationally recognised data protection standards; or (d) reliance on your explicit consent where other transfer mechanisms are unavailable.

13.3 Pakistani Payment Method Partners. Transaction data shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK remains within Pakistan-based processing infrastructure operated by those respective institutions, subject to their own regulatory frameworks under the State Bank of Pakistan.

14.1 Right to Update. hz88 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform features. When material changes are made to this Policy, hz88 will update the "Last Updated" date shown at the top of this page.

14.2 Notification of Changes. Where changes to this Privacy Policy are material — meaning they significantly affect how hz88 uses your personal data or your rights regarding that data — hz88 will notify affected players via email to their registered address or via an in-platform notification at least 14 days before the changes take effect, where practicable.

14.3 Continued Use as Acceptance. Your continued use of the hz88 platform after any update to this Privacy Policy becomes effective constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you must cease using hz88 and may request account closure by contacting [email protected].

14.4 Previous Versions. Previous versions of this Privacy Policy are available from hz88 customer support upon written request submitted to [email protected].

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact hz88 using the details below:

• Email: [email protected] — please use the subject line "Privacy Query – [Your hz88 Username]" for fastest routing.
• Data Rights Requests: Email [email protected] with subject line "Data Rights Request – [Your hz88 Username]". Include your registered mobile number and a brief description of your request. hz88 will acknowledge within 48 hours and respond substantively within 30 calendar days.
• Live Chat: Available 24/7 after logging in to your hz88 account for general privacy queries and account data questions.

For formal complaints regarding hz88's handling of your personal data that cannot be resolved through our internal support process, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.