hz777 Privacy Policy

When you register for, access, or use the hz777 Platform, we collect several categories of personal information. The specific data points collected depend on how you interact with the Platform and which services you use.

Account Registration Data: When you create an hz777 account, we collect your full legal name, date of birth, gender, residential address (city and province within Pakistan), email address, and a username of your choosing. This information is mandatory — without it, we cannot create or maintain a valid account for you.

Identity Verification (KYC) Data: To comply with our anti-money laundering and Know Your Customer obligations, hz777 may require you to submit copies of government-issued identity documents. Acceptable documents include your CNIC (Computerised National Identity Card), passport, or other official photo ID issued by Pakistani authorities. We may also collect a selfie photograph for biometric liveness verification where required.

Financial and Transaction Data: hz777 records all deposit and withdrawal transactions conducted through your account, including the payment method used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), transaction amounts in PKR, timestamps, and transaction reference numbers. We do not store full bank account numbers or mobile wallet PINs — payment credentials are tokenised by our licensed payment processors.

Usage and Behavioural Data: We automatically collect data about how you interact with the hz777 Platform, including games played, bet amounts placed, session durations, pages visited, features accessed, and wagering patterns. This data is used for platform improvement, responsible gaming monitoring, and fraud detection.

Technical and Device Data: hz777 logs your IP address, device type, operating system, browser type and version, screen resolution, and time zone settings when you access the Platform. This information helps us detect suspicious access patterns and deliver an optimised experience.

Communications Data: When you contact hz777 via live chat, email, or any other support channel, we retain records of those communications — including the content of messages, timestamps, and agent responses — for quality assurance, training, and dispute resolution purposes.

hz777 uses the personal information it collects for the following primary purposes:

• Account creation and management: To set up, operate, and maintain your hz777 player account, including processing your login, managing your balance, and updating your account preferences.
• Identity verification and KYC compliance: To verify that you meet hz777's eligibility requirements (including the 21+ age requirement) and to comply with applicable anti-money laundering regulations.
• Payment processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to reconcile your transaction history.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, account takeovers, collusion, money laundering, and other prohibited conduct on the hz777 Platform.
• Customer support: To respond to your queries, complaints, and support requests in Urdu and English, and to maintain records of our support interactions.
• Responsible gaming: To monitor player behaviour for signs of problem gambling and, where appropriate, to proactively apply responsible gaming measures in line with Section 11 of this Policy.
• Platform improvement: To analyse usage patterns and feedback, diagnose technical issues, and improve the hz777 Platform's performance, game selection, and user experience.
• Marketing communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and news about new games and features available on hz777. You may withdraw this consent at any time.
• Legal and regulatory compliance: To meet our obligations under applicable laws and regulations and to cooperate with requests from law enforcement, regulatory bodies, and financial intelligence authorities.

hz777 processes your personal data on the basis of the following legal grounds, depending on the specific processing activity:

Where hz777 relies on legitimate interests as its legal basis for processing, we have assessed that our interests do not override your fundamental rights and freedoms. If you have any questions about this assessment, please contact our support team.

hz777 uses cookies and similar tracking technologies to operate the Platform effectively, enhance your experience, and gather analytical insights. By continuing to use the hz777 Platform after being presented with our cookie notice, you consent to our use of cookies as described below.

• Strictly Necessary Cookies: These cookies are essential for the hz777 Platform to function. They manage your login session, maintain your account security, and remember your preferred language. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Performance and Analytics Cookies: hz777 uses analytics tools to understand how players interact with the Platform — which pages are visited most, where players encounter difficulties, and how game sessions are distributed across device types. This data is aggregated and anonymised where possible.
• Functional Cookies: These cookies remember your preferences — such as your preferred display language, notification settings, and responsible gaming limits — so you do not need to re-enter them on every visit.
• Security Cookies: hz777 sets certain cookies specifically to detect and prevent fraudulent login attempts, bot activity, and other security threats to the Platform.

hz777 does not sell your personal data to any third party. We share personal information only in the limited circumstances described below, and only to the extent necessary for the specific purpose in question:

• Payment Service Providers: We share relevant transaction and identity data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to process your deposits and withdrawals. These providers are contractually bound to handle your data securely and to use it only for payment processing purposes.
• Identity Verification Services: hz777 uses licensed third-party KYC service providers to verify the authenticity of identity documents submitted by players. These providers process your data under strict data processing agreements.
• Fraud Prevention and Security Vendors: We share certain technical and behavioural data with specialist fraud detection vendors to protect the integrity of the hz777 Platform and all players on it.
• Regulatory and Law Enforcement Authorities: hz777 will disclose personal data to competent regulatory bodies, financial intelligence units, and law enforcement agencies when required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent a serious crime.
• Group Companies: hz777 may share data within its corporate group for internal administrative purposes, including consolidated compliance reporting and shared IT infrastructure. All group entities are bound by this Privacy Policy.
• Business Transfers: In the event that hz777 undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy implications via your registered email address.

hz777's primary data infrastructure is hosted on secure cloud servers. Some of our third-party service providers — including payment processors and identity verification vendors — may process your personal data in jurisdictions outside Pakistan. When such transfers occur, hz777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to this Privacy Policy.

Safeguards we use for international transfers include:

• Standard contractual clauses (SCCs) incorporated into data processing agreements with all third-party providers.
• Binding corporate rules where data is shared within the hz777 group of companies.
• Transfer only to jurisdictions with adequacy decisions or equivalent data protection frameworks where available.

hz777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by law and regulatory obligation:

Following the expiry of applicable retention periods, hz777 will securely delete or anonymise your personal data so that it can no longer be attributed to you. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

As an hz777 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team as detailed in Section 14:

hz777 implements a layered security framework designed to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Our core security measures include:

• Encryption: All data transmitted between your device and the hz777 Platform is encrypted using TLS 1.3. Sensitive data at rest — including identity documents and payment information — is encrypted using AES-256.
• Access Controls: Access to player personal data is restricted to hz777 personnel with a genuine operational need. All internal access is logged and periodically audited. Privileged access requires multi-factor authentication.
• Penetration Testing: hz777 conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities in our Platform infrastructure.
• Intrusion Detection: Our systems are monitored around the clock for anomalous activity. Automated alerts trigger immediate investigation by our security team when unusual patterns are detected.
• Incident Response: hz777 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities within 72 hours of becoming aware of the incident.

The hz777 Platform is strictly intended for persons aged 21 years and above. hz777 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Our registration process includes explicit age verification steps, and we require KYC document submission to confirm eligibility before any deposits or withdrawals can be processed.

If hz777 becomes aware that a person under the age of 21 has registered an account or submitted personal data to the Platform, we will immediately suspend that account, reverse any transactions where possible, delete the personal data in question, and report the matter to our compliance team for further investigation. Parents and guardians who believe a minor has registered on the hz777 Platform are strongly encouraged to contact our support team without delay.

hz777 uses player data as an integral part of its responsible gaming programme. Behavioural and transactional data — including session frequency, deposit patterns, bet sizes, and time-on-platform metrics — is analysed to identify players who may be showing signs of problem gambling.

Where our systems or support team identify a player at risk, hz777 may take the following data-informed actions:

• Proactively contact the player via their registered email address with responsible gaming resources and self-assessment tools.
• Apply temporary deposit limits or session time restrictions to the player's account pending a welfare check.
• Facilitate self-exclusion at the player's request, which involves flagging the player's data to prevent re-registration under the same or similar identity details.
• Share anonymised responsible gaming data with licensed industry bodies where required by regulatory frameworks.

The hz777 Platform may contain references to or integrations with third-party services, including but not limited to payment gateways, game providers, and analytics platforms. hz777 is not responsible for the privacy practices of third-party service providers operating their own independent platforms or websites.

All third-party providers engaged by hz777 to process personal data on our behalf are subject to due diligence assessments before engagement, and are bound by data processing agreements that require them to:

• Process personal data only on hz777's documented instructions.
• Implement appropriate technical and organisational security measures.
• Not engage sub-processors without hz777's prior written consent.
• Delete or return all personal data to hz777 upon termination of the service relationship.
• Assist hz777 in responding to data subject rights requests.

hz777 may update this Privacy Policy from time to time to reflect changes in our data practices, service offerings, legal obligations, or regulatory requirements. When material changes are made, we will notify registered players by:

• Sending a notification to your registered email address at least 14 days before the revised Policy takes effect.
• Displaying a prominent notice on the hz777 homepage and login page for a minimum of 30 days following the update.
• Updating the "Last Updated" date displayed at the top of this page.

Your continued use of the hz777 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and contact our support team to request account closure and data deletion where applicable.

We encourage all hz777 players to review this Privacy Policy periodically to stay informed about how we protect your personal information. Historic versions of this Policy are available on request from our support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please reach out to the hz777 data support team using the contact details below. Our team operates 24/7 in both Urdu and English to assist players across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, Peshawar, and beyond.

When submitting a data rights request to hz777, please include your registered account username, the specific right you wish to exercise, and any relevant context (such as the data category in question or the transaction period involved). This will help our team process your request as efficiently as possible.