Privacy Policy — hz999

hz999 is Pakistan's premier online gaming destination, providing cricket betting, live casino, slots, and sportsbook services to adult members aged 21 and above across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and beyond. As part of delivering these services, hz999 collects and processes certain personal data from its members. We take that responsibility seriously.

This Privacy Policy sets out a transparent and comprehensive account of hz999's data practices. It describes the categories of personal data we collect, the purposes for which that data is used, the parties with whom it may be shared, the duration for which it is retained, and the rights available to you as a data subject. hz999 is committed to handling all personal data in a manner that is fair, lawful, and proportionate.

If you have any questions about this Privacy Policy or about how hz999 handles your personal data, please contact us at [email protected] or via our 24/7 live chat support.

hz999 collects personal data from members and platform visitors across several categories. The specific data collected from you will depend on how you interact with the hz999 platform and the stage of your membership.

hz999 collects personal data through the following channels and mechanisms. Understanding these collection methods helps you make informed decisions about the information you share with us.

• Direct Submissions — Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting Member Support, or submitting a complaint.
• Automated Technologies — Technical and usage data collected automatically as you navigate the hz999 platform, via cookies, server logs, pixel tags, and similar tracking technologies described further in Section 7.
• KYC & Identity Verification Partners — Identity and document verification data collected during the KYC process, which may involve licensed third-party identity verification providers. These providers process your CNIC or passport details on hz999's behalf under strict data processing agreements.
• Payment Processors — Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank in connection with deposits and withdrawals. hz999 receives only what is necessary to confirm, reconcile, and support each transaction.
• AML Screening — Data processed against Anti-Money Laundering (AML) screening databases as required under applicable international online gaming compliance obligations. This may involve checking names and identification details against sanctions lists and politically exposed persons (PEP) databases.
• Live Chat & Support Channels — Information shared by you during live chat sessions or via email to [email protected], including any personal data you voluntarily provide in the course of seeking assistance.
• Game Providers — Limited technical and gameplay data shared with or received from licensed game content providers including Evolution Gaming, Ezugi, and Pragmatic Play Live, strictly for the purpose of delivering live casino and slot game services.

hz999 processes your personal data only for legitimate, specified purposes. The table below maps each primary use of your data to its corresponding purpose and legal basis. hz999 does not use personal data for purposes that are incompatible with those listed below without obtaining fresh consent or establishing a new lawful basis.

• Account Registration & Management — To create, maintain, and secure your hz999 Member Account, including managing your PKR balance, transaction history, and account preferences.
• Identity Verification (KYC) — To verify that you are who you say you are, that you meet the 21+ age requirement, and that your account complies with anti-fraud and AML obligations.
• Payment Processing — To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records of all transactions.
• Personalisation — To tailor your hz999 experience, including recommending relevant games (cricket betting, PSL markets, slots, Diamond Tycoon, Vivo Live), promotions, and bonus offers based on your gaming history and stated preferences.
• Customer Support — To respond to your enquiries, complaints, and feedback via live chat and email, and to maintain records of support interactions for quality assurance and dispute resolution.
• Marketing Communications — To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have given your consent or where hz999 has a legitimate interest in doing so. You may opt out of marketing communications at any time through your Account settings.
• Responsible Gaming Compliance — To monitor gaming activity for signs of problem gambling, apply Responsible Gaming Tools including self-exclusion and deposit limits, and ensure the hz999 platform remains a safe environment for all members.
• Fraud Prevention & Security — To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, match-fixing, and any other Prohibited Activity as defined in the hz999 Terms & Conditions.
• Regulatory Compliance — To meet hz999's obligations under applicable international online gaming regulations, AML laws, and any lawful direction from regulatory or law enforcement authorities.
• Platform Improvement — To analyse aggregated usage data and improve the functionality, performance, and content of the hz999 platform for the benefit of all Pakistani members.

hz999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity — Processing required to perform the contract between you and hz999 under the Terms & Conditions, including account creation, payment processing, and game delivery.
• Legal Obligation — Processing required for hz999 to comply with applicable legal and regulatory obligations, including KYC identity verification, AML screening, and record-keeping requirements under hz999's operating licence.
• Legitimate Interests — Processing carried out in pursuit of hz999's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent — Processing based on your freely given, specific, and informed consent, primarily in relation to optional marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting the lawfulness of prior processing.

hz999 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data is only shared with third parties in the specific circumstances described below, and always under appropriate contractual protections or legal obligation.

• KYC & Identity Verification Providers — Licensed identity verification partners who process CNIC and document data on hz999's behalf to fulfil KYC obligations. These providers operate under strict data processing agreements and may not use your data for any other purpose.
• Payment Processors — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum data necessary to process your deposit and withdrawal transactions. Payment processors maintain their own independent privacy policies governing their data handling practices.
• Game Content Providers — Evolution Gaming, Ezugi, and Pragmatic Play Live receive limited technical session data (such as player session tokens and game round identifiers) strictly to deliver live casino and RNG gaming services on the hz999 platform.
• AML & Fraud Screening Services — Compliance technology providers who screen member data against sanctions lists, PEP databases, and fraud intelligence databases as required by hz999's operating licence obligations.
• Regulatory & Law Enforcement Authorities — hz999 may disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction when required to do so by law, court order, or lawful regulatory direction.
• Professional Advisers — Legal counsel, auditors, and compliance consultants who require access to specific member data in the context of providing professional services to hz999, subject to confidentiality obligations.
• Business Transfers — In the event of a merger, acquisition, restructuring, or sale of hz999 business assets, member data may be transferred to the successor entity as part of that transaction. Members will be notified of any such transfer via the registered email address on file.

hz999 uses cookies and similar tracking technologies on the hz999.bio platform to deliver core functionality, maintain your session, analyse platform performance, and improve your overall experience as a member.

hz999 does not use third-party advertising cookies or social media tracking pixels. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent certain core platform features — including login and the cashier — from functioning correctly.

hz999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following retention periods apply as a general guide:

• Active Member Accounts — Personal data associated with an active hz999 Account is retained for the full duration of your membership and for a minimum period of 5 years following account closure, in compliance with international AML record-keeping requirements.
• KYC & Identity Documents — Copies of CNIC, passport, and supporting identity documents are retained for a minimum of 5 years from the date of submission, or from the date of account closure, whichever is later.
• Transaction Records — All deposit, withdrawal, and wagering records (including PKR amounts, timestamps, payment method references) are retained for a minimum of 5 years to satisfy financial compliance and audit requirements.
• Customer Support Communications — Live chat transcripts and support emails are retained for 3 years to support dispute resolution and quality assurance.
• Marketing Consent Records — Records of consent for marketing communications are retained for the duration of your membership plus 2 years after account closure.
• Responsible Gaming Records — Self-exclusion requests and responsible gaming tool history are retained indefinitely to prevent circumvention of self-exclusion measures upon any future re-registration attempt.

At the end of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and platform improvement purposes without it constituting personal data under applicable data protection standards.

As an hz999 member, you have the following rights in relation to your personal data. hz999 is committed to honouring these rights in a timely, transparent, and straightforward manner. To exercise any of these rights, contact us at [email protected] with your full name, registered email address, and a clear description of your request.

• Right of Access — You have the right to request a copy of all personal data hz999 holds about you, along with information about how it is used and shared. hz999 will respond to verified access requests within 30 days.
• Right to Rectification — You have the right to request correction of any inaccurate or incomplete personal data held by hz999. Where a correction request relates to KYC-verified identity data, supporting documentation may be required.
• Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. Please note that hz999 may be required to retain certain data for regulatory compliance purposes even following an erasure request — in such cases, hz999 will explain the applicable retention obligation.
• Right to Restriction — You have the right to request that hz999 restrict the processing of your personal data in certain circumstances, such as where the accuracy of data is contested or where processing is unlawful but you prefer restriction to erasure.
• Right to Portability — Where processing is based on your consent or a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object — You have the right to object to processing based on hz999's legitimate interests, including any profiling carried out for personalisation or responsible gaming monitoring purposes. hz999 will cease such processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent — Where processing is based solely on your consent (e.g., marketing emails or SMS), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

hz999 employs industry-standard technical and organisational security measures to protect the personal data of all members against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes, but is not limited to, the following:

• 256-bit SSL/TLS Encryption — All data transmitted between your browser or device and the hz999 platform is encrypted using 256-bit SSL/TLS protocols. This applies to account logins, cashier transactions, and all personal data submissions.
• Data Encryption at Rest — Sensitive personal data — including identity documents, financial references, and account credentials — is stored in encrypted form in hz999's secure database infrastructure.
• Access Controls — Access to personal data within hz999's internal systems is strictly limited to authorised personnel who require it to perform their job function. All staff access is logged, monitored, and subject to regular review.
• Two-Factor Authentication — Members are encouraged to enable SMS OTP two-factor authentication on their hz999 Account for an additional layer of login security beyond username and password.
• Regular Security Audits — hz999's platform infrastructure is subject to regular penetration testing and security vulnerability assessments conducted by independent third-party security specialists.
• Incident Response — hz999 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, hz999 will notify affected members and applicable authorities within the timeframes required by applicable regulations.

While hz999 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your hz999 Account credentials — username and password — strictly confidential. If you suspect that your account has been compromised, contact hz999 Member Support immediately via live chat or at [email protected].

The hz999 platform is strictly intended for adults aged 21 years and above. hz999 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory step in the hz999 registration and KYC process for all Pakistani members.

If hz999 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a falsified registration, circumvented age check, or any other means — the following actions will be taken immediately: the Account will be suspended, all funds will be frozen pending investigation, and the data will be securely deleted following the resolution of any applicable legal or regulatory obligations. Any winnings generated by an underage account will be forfeited without exception.

The hz999 platform may contain references or contextual links to third-party services — such as licensed game providers' platforms, payment service operators, or identity verification portals — which operate under their own independent privacy policies. hz999 is not responsible for the privacy practices or data handling of any third-party service provider, and this Privacy Policy does not extend to any third-party website or service accessed via or in connection with the hz999 platform.

Where hz999 engages third-party data processors on its behalf — such as KYC verification partners and AML screening providers — those processors are contractually required to handle your personal data only on hz999's documented instructions and in accordance with applicable data protection standards. hz999 conducts due diligence on all third-party processors prior to engagement.

hz999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or regulation, or the services we offer. The most current version of the Privacy Policy will always be published at hz999.bio/privacy-policy with a revised effective date at the top of the document.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — hz999 will notify active members via email to the registered address on file and/or via a prominent notice on the hz999 platform at least 14 days before the changes take effect. Your continued use of the hz999 platform following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any change, you should cease using the platform and contact support to request account closure.

For any questions, concerns, or requests related to this Privacy Policy or to the personal data hz999 holds about you, please reach out to our Member Support team through any of the following channels:

• Support Email: [email protected] — For formal data rights requests or privacy-related complaints. Include your full name, registered email, and a clear description of your request for fastest processing.
• Live Chat: Available 24/7 on the hz999 platform. Average response time under 2 minutes — ideal for urgent account security or data concerns.
• Response Commitment: hz999 acknowledges all privacy enquiries within 48 hours and aims to resolve them fully within 30 calendar days. Complex matters may take longer, and we will always communicate expected timelines clearly.

hz999 is dedicated to earning and maintaining the trust of every member across Pakistan — from Karachi to Peshawar, Lahore to Quetta. Transparency, fairness, and accountability in how we handle your personal data are central to that commitment.