hz999 Privacy Policy

hz999 (referred to throughout this document as "hz999", "we", "us", or "our") operates the online gaming and sports betting platform accessible at hz999.bet. hz999 acts as the data controller in respect of all personal data collected from players who register and use our platform. As data controller, hz999 is responsible for determining the purposes and means of processing your personal information.

hz999 is a platform specifically designed to serve English-speaking Pakistani players, offering cricket betting, casino games, slots, and specialised products including Dino Hunter and Dragon Gate. Our platform is a strictly 21+ service. hz999 operates under international gaming regulations and is committed to upholding recognised data protection principles including those set out in the General Data Protection Regulation (GDPR) framework, which we use as a global benchmark for privacy best practice regardless of the user's jurisdiction.

hz999 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through cookies and technical systems when you browse the site, and from third-party verification and payment providers. The categories of data we collect are detailed in the table below.

hz999 uses your personal data only for the specific, legitimate purposes described below. We do not process personal data in any manner that is incompatible with the original purpose for which it was collected.

• Account Management: To create, maintain, and administer your hz999 account, process your hz999 login requests, and ensure you have seamless access to all platform features.
• Identity Verification (KYC): To verify your age (21+), identity, and source of funds in compliance with our anti-money laundering and responsible gaming obligations.
• Payment Processing: To facilitate PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast, and to process withdrawal requests to verified account holders.
• Service Delivery: To operate cricket betting markets, casino games, slots, Dino Hunter, Dragon Gate, and all other hz999 products, and to record game outcomes and transaction histories accurately.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and any other form of prohibited conduct outlined in our Terms and Conditions.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling and to administer self-exclusion requests, deposit limits, cooling-off periods, and other responsible gaming tools you have activated.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of our support interactions for quality assurance purposes.
• Marketing Communications (consent-based): To send you promotional offers, bonus notifications, PSL betting updates, and new game announcements — only where you have explicitly opted in to receive such communications.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable international gaming regulations, respond to lawful requests from regulatory authorities, and maintain records required by our licensing body.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the hz999 user experience, optimise game performance, and develop new features tailored to Pakistani player preferences.

hz999 processes your personal data on one or more of the following legal bases, in line with GDPR-aligned international data protection standards:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and hz999 — i.e., to provide you with the gaming services you have registered to use, including account management, game access, and payment processing.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including KYC verification, anti-money laundering checks, and the administration of responsible gaming obligations.
• Legitimate Interests: Processing is necessary for hz999's legitimate business interests — including fraud prevention, security monitoring, platform analytics, and the improvement of our services — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and any optional data processing activities, hz999 relies on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

hz999 does not sell, rent, or trade your personal information. We share data only with carefully selected third-party service providers who assist us in operating the hz999 platform, and only to the extent strictly necessary for the performance of their specific function. All third-party processors are bound by formal data processing agreements that impose obligations equivalent to those hz999 itself follows.

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast receive only the financial data necessary to process your specific transaction. hz999 does not store full payment account numbers on its own servers.
• KYC & Identity Verification Providers: hz999 works with accredited identity verification partners to cross-check CNIC and passport data during the account verification process. These providers operate under strict data minimisation agreements.
• Fraud Detection & Security: Specialised fraud prevention systems may receive technical data (IP addresses, device fingerprints, behavioural patterns) to identify and block suspicious activity on the hz999 platform.
• Game Software Providers: Third-party game studios whose products are hosted on hz999 may receive anonymised session data to ensure game integrity and calculate RTP (return-to-player) outcomes. They do not receive your name or contact details.
• Regulatory Authorities: hz999 may be legally required to disclose personal data to its licensing authority or to law enforcement agencies acting under lawful authority. Such disclosures will always be the minimum necessary to comply with the specific legal request.
• Corporate Transactions: In the event of a merger, acquisition, or sale of hz999 assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.

hz999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse how players interact with our site. The types of cookies hz999 uses are described below.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling essential cookies will impair your ability to use the hz999 platform, including the hz999 login function. hz999 does not use third-party advertising cookies or cross-site tracking technologies.

hz999 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the lifetime of your active hz999 account plus a minimum of 5 years following account closure, in line with standard anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later. These documents may need to be retained longer if subject to an ongoing legal or regulatory proceeding.
• Transaction Records: All PKR deposit, withdrawal, and wagering records are retained for a minimum of 5 years to satisfy financial record-keeping obligations.
• Support Communications: Live chat transcripts and email correspondence are retained for 2 years following the closure of the relevant support ticket.
• Marketing Data: Retained until you withdraw your marketing consent, at which point it will be deleted within 30 days.
• Analytics Data: Anonymised and aggregated analytics data may be retained indefinitely as it cannot be used to identify individual players.

When personal data is no longer required, hz999 will securely delete or anonymise it using industry-standard data destruction methods. You may request early deletion of your data by contacting us at [email protected], subject to any overriding legal retention obligations.

hz999 is an internationally operated platform. Your personal data may be transferred to, and processed in, countries outside Pakistan. Where such transfers occur, hz999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards used by hz999 for international data transfers include standard contractual clauses (SCCs) approved by recognised data protection authorities, binding corporate rules where applicable, and transfers to jurisdictions that maintain adequate data protection standards. hz999 will not transfer your data to a country or territory where we cannot ensure an adequate level of protection for your personal information.

hz999 recognises and respects your full suite of data subject rights. You may exercise any of the following rights at any time by contacting us at [email protected]. hz999 will respond to all data rights requests within 30 days of receipt.

To exercise any of the above rights, please contact hz999 at [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise. hz999 may need to verify your identity before processing your request to ensure we do not inadvertently disclose personal data to an unauthorised third party.

hz999 is strictly a 21+ platform. We do not knowingly collect, process, or store the personal data of any individual under the age of 21. All new account registrations are subject to mandatory age verification as part of our KYC process. If hz999 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account without notice.

hz999 employs multiple layers of age verification — including CNIC-based identity checks and third-party verification tools — to prevent underage access to our platform. We take our responsible gaming obligations seriously and cooperate fully with any regulatory enquiry related to underage gambling.

hz999 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• TLS 1.3 encryption for all data in transit between your device and hz999 servers.
• AES-256 encryption for all personal data stored at rest on hz999 infrastructure.
• Multi-factor authentication requirements for all internal staff accessing player data systems.
• Role-based access controls ensuring that only authorised personnel with a specific business need can access personal data.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists.
• Continuous monitoring of hz999 systems for unusual access patterns, suspicious activity, and potential data breach indicators.
• Formal data breach response procedures — in the event of a confirmed breach affecting your personal data, hz999 will notify you promptly and take all necessary remediation steps.
• Staff training on data protection principles and secure data handling practices, conducted on a regular basis.

While hz999 takes all reasonable and industry-standard precautions to protect your data, no system connected to the internet can guarantee absolute security. We encourage you to use a strong, unique password for your hz999 account and to enable two-factor authentication where available.

The hz999 platform may contain links to third-party websites or services — for example, links to game software provider information pages or responsible gaming resources. hz999 is not responsible for the privacy practices of any third-party website and this Privacy Policy does not extend to those external sites. We recommend that you review the privacy policy of any third-party website you visit via a link from hz999.

hz999 does not embed third-party advertising networks, social media tracking pixels, or external analytics platforms that would allow third parties to collect your personal data without your knowledge through the hz999 website.

hz999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. When we make material changes to this Policy, we will notify registered players by email and by placing a prominent notice on the hz999 platform for a period of at least 30 days following the update.

The "Effective Date" at the top of this document indicates when the current version of the Privacy Policy came into force. Your continued use of the hz999 platform following notification of a material change constitutes your acknowledgement of the updated Policy. If you do not agree with any changes, you have the right to close your account and request deletion of your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way hz999 handles your personal data, please contact our dedicated Data Protection team using the details below. We aim to respond to all privacy-related enquiries within 5 business days.

Please retain a copy of this Privacy Policy for your records. hz999 recommends that all Pakistani players read this document in full before depositing or sharing personal information on the platform.