hz77 Privacy Policy

hz77 is an internationally licensed online casino and sports betting platform operating at https://hz77.app. For the purposes of this Privacy Policy, hz77 (referred to as "hz77", "we", "us", or "our") acts as the data controller responsible for the personal information collected from players who register and use the platform.

hz77 is specifically designed to serve the Pakistani market, with support for PKR transactions via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, alongside a wide library of casino games and cricket betting markets tailored to Pakistani players in Karachi, Lahore, Islamabad, Faisalabad, and across the country.

hz77 collects personal data from players through a number of channels: account registration, KYC verification, deposits and withdrawals, platform usage, customer support interactions, and marketing opt-ins. The categories of data we collect are as follows:

hz77 does not intentionally collect sensitive special-category data (such as health data, religious beliefs, or political opinions) from players. If any such data is incidentally disclosed in a support communication, it will be handled with enhanced care and will not be used for any profiling purpose.

hz77 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the reasons it was originally collected:

• Account Management: Creating and maintaining your hz77 player account, processing login requests, and managing account security settings including two-factor authentication.
• Identity & Age Verification: Confirming that you are who you say you are and that you meet the hz77 minimum age requirement of 21 years. This is mandatory under our licensing obligations.
• Payment Processing: Facilitating deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or cryptocurrency), including verifying that your payment method is registered in your name.
• Game Delivery & Platform Operation: Providing access to casino games, sports betting markets, live dealer tables, and all other platform features available to registered hz77 players.
• Responsible Gaming: Monitoring your gaming activity to identify potential signs of problem gambling and to enforce deposit limits, loss limits, or self-exclusions that you have set on your account.
• Fraud Prevention & AML Compliance: Detecting and preventing fraud, duplicate accounts, money laundering, and other prohibited activities as defined in the hz77 Terms and Conditions.
• Customer Support: Responding to queries, complaints, and account-related requests submitted via live chat, email, or any other supported channel.
• Marketing & Promotions: Sending you personalised bonus offers, platform updates, and promotional communications — but only where you have provided explicit consent or where we have a legitimate interest and you have not opted out.
• Platform Analytics & Improvement: Analysing aggregated usage data to understand how players interact with the hz77 platform and to improve game offerings, user interface, and overall service quality.
• Legal & Regulatory Compliance: Maintaining records as required by our international gaming licence, responding to regulatory enquiries, and cooperating with law enforcement where legally obligated to do so.

hz77 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing that is required to fulfil our obligations under the Player Account Agreement — including account creation, game access, and payment processing. Without this processing, hz77 cannot provide the service.
• Legal Obligation: Processing required to comply with our international gaming licence conditions, AML regulations, age verification requirements, and any other applicable legal obligations.
• Legitimate Interests: Processing carried out for hz77's legitimate business interests, such as fraud detection, platform security, and improving our services — provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing carried out on the basis of your explicit, freely given, informed consent — primarily relating to direct marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

hz77 does not sell, rent, or trade your personal information to any third party. We may share your data with carefully selected third-party partners and service providers only where necessary to deliver the hz77 service, comply with legal obligations, or protect the integrity of the platform. All third-party data processors are bound by strict contractual data protection requirements.

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners receive the minimum financial data necessary to process your transactions. These providers operate under their own regulatory frameworks and privacy obligations.
• KYC Verification Providers: Third-party identity verification services may receive your identity documents and biometric selfie data solely for the purpose of completing the required KYC check. Verified data is not retained by these providers beyond the verification workflow.
• Game Software Providers: Third-party casino game studios whose games are hosted on the hz77 platform may receive gameplay session data (e.g., bet amounts, game outcomes) for the purpose of game delivery, dispute resolution, and RNG audit compliance. These providers do not receive your identity or payment data.
• Regulatory & Law Enforcement Bodies: hz77 may disclose personal data to our licensing authority, relevant financial intelligence units, or law enforcement agencies where required to do so by law, court order, or regulatory direction.
• Fraud Prevention Services: Third-party fraud detection platforms may receive technical data (IP address, device fingerprint, transaction patterns) to assist with identifying and preventing prohibited conduct on the platform.
• Platform Analytics Providers: Aggregated, anonymised usage data may be shared with analytics providers to support platform improvement activities. No personally identifiable information is included in these data transfers.

hz77 will never share your personal data with advertisers, data brokers, social media platforms, or any other party for commercial exploitation purposes.

The hz77 platform uses cookies and similar tracking technologies (including pixel tags and local storage) to deliver a functional and personalised gaming experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impacting your ability to use the platform.
• Functional Cookies: Remember your preferences and settings, such as your selected language, preferred game display mode, and responsible gaming limits you have configured. Disabling these cookies will not prevent access to the platform but may degrade your experience.
• Analytics Cookies: Collect anonymised data about how players navigate and use the hz77 platform. This data helps us improve page layouts, game discovery, and account management flows. Analytics cookies require your consent.
• Marketing Cookies: Used to present relevant promotional offers within the platform based on your activity history. Marketing cookies are only placed with your explicit consent and can be withdrawn at any time.

You can manage cookie preferences through your browser's cookie settings at any time. Note that disabling strictly necessary cookies will prevent you from logging into or using the hz77 platform.

hz77 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by our licensing obligations and applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, hz77 will securely delete or irreversibly anonymise your personal data. Where data is anonymised rather than deleted, the resulting data cannot be used to identify you and falls outside the scope of this Privacy Policy.

hz77 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and the hz77 platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms an active encrypted connection.
• Encryption at Rest: Sensitive personal data — including identity documents, CNIC data, and financial account details — is stored using AES-256 encryption on secured infrastructure with restricted access controls.
• Access Controls: Access to personal data within hz77's internal systems is restricted on a strict need-to-know basis. All staff who access personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: hz77 supports and encourages 2FA for all player accounts to prevent unauthorised access resulting from compromised passwords.
• Penetration Testing & Security Audits: The hz77 platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: hz77 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights, hz77 will notify affected players and relevant regulatory authorities within the timeframes required by our licensing obligations.

As a player on the hz77 platform, you hold the following privacy rights in relation to your personal data. hz77 is committed to honouring these rights and will respond to all valid requests within a reasonable timeframe — typically within 30 days of receipt:

• Right of Access: You have the right to request a copy of all personal data hz77 holds about you, along with information about how it is being used and who it has been shared with.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Players can update basic contact information directly through their account dashboard.
• Right to Erasure: In certain circumstances, you have the right to request that hz77 delete your personal data. Note that this right may be limited where we are required to retain data to fulfil legal and licensing obligations — for example, AML record-keeping requirements.
• Right to Restriction of Processing: In specific circumstances (e.g., where you contest the accuracy of your data or object to its processing), you have the right to request that hz77 restrict processing of your personal data while a query is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have that data transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where it is based on hz77's legitimate interests, including direct marketing. hz77 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

As an internationally licensed gaming platform, hz77 may transfer certain categories of personal data to data processors and service providers located outside Pakistan. Such transfers may occur in connection with KYC verification services, game software delivery infrastructure, payment processing, and platform analytics.

Where personal data is transferred internationally, hz77 ensures that appropriate safeguards are in place to maintain the protection of your data to a standard consistent with this Privacy Policy. These safeguards may include:

• Contractual data protection clauses that bind the receiving party to data protection standards equivalent to those applied by hz77.
• Transfers to jurisdictions recognised as providing an adequate level of data protection by our licensing authority.
• Technical measures such as data encryption and pseudonymisation applied prior to transfer where appropriate.

hz77 does not transfer personal data to jurisdictions that do not provide adequate data protection safeguards without first implementing appropriate contractual or technical measures to compensate for the absence of such safeguards.

The hz77 platform is strictly intended for adults aged 21 years and above. hz77 does not knowingly collect personal data from any person under the age of 21, and it is a fundamental condition of account registration that all players meet this minimum age requirement.

If you are a parent or guardian and believe that a person under 21 in your care has registered on the hz77 platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

hz77 may send you promotional communications about bonuses, new games, PSL betting offers, and platform features via email or in-platform notifications — but only where you have provided explicit consent to receive such communications, or where we have a legitimate interest and you have not opted out.

• Marketing consent is collected at the point of registration and can be updated at any time through your account settings.
• You may opt out of all marketing communications at any time by clicking the "unsubscribe" link in any marketing email, or by contacting [email protected].
• Opting out of marketing communications will not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent on the basis of contractual necessity and cannot be disabled.
• hz77 does not share your contact details with third-party marketers for the purpose of sending you their own promotional material.

hz77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or licensing requirements. When material changes are made, hz77 will notify registered players via email and/or a prominent notice displayed on the platform.

The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. We encourage all players to review this Privacy Policy periodically to stay informed about how hz77 protects and uses their personal data.

Your continued use of the hz77 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised document. If you do not agree with any material changes, you have the right to close your account by contacting our support team prior to the effective date of the change.

If you have any questions, concerns, or complaints about this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 9, please contact the hz77 privacy team using the details below. All privacy-related communications are handled with priority and strict confidentiality.

• Email: [email protected] — please use the subject line "Privacy / Data Request" for all data-related enquiries
• Response Time: hz77 aims to acknowledge all privacy requests within 24 hours and to resolve them fully within 30 days of receipt
• Live Chat: Available 24/7 within the hz77 platform after login for general privacy queries
• Coverage: Our support team serves players across Karachi, Lahore, Islamabad, Faisalabad, and all of Pakistan around the clock

If you are not satisfied with hz77's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or our licensing authority. hz77 will cooperate fully with any such investigation.