hz555 Privacy Policy

hz555 is committed to protecting the privacy and personal data of all players who use our platform. We operate in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. Our data handling practices are also guided by the compliance requirements of our international gaming licence.

This Policy applies to all personal data collected through:

• The hz555 website at https://hz555.app and all associated subdomains.
• Any hz555 mobile application or platform interface.
• Customer support interactions via live chat, email, or telephone.
• Payment processing integrations including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.
• Identity verification and KYC (Know Your Customer) processes.

hz555 collects personal data in two primary ways: information you provide directly to us, and information we collect automatically when you use our platform. The categories of data we collect are detailed below.

hz555 does not collect or store full payment card numbers. Where payment card data is involved in any transaction, it is processed by our PCI-DSS compliant payment partners and never stored on hz555 servers.

hz555 processes your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your consent or being required to do so by law.

• Account Management: Creating and maintaining your hz555 player account, verifying your identity, and managing your profile preferences.
• Service Delivery: Processing bets, settling winnings, enabling access to cricket betting markets, PSL odds, slot games, live casino tables, and fishing games on the hz555 platform.
• Payment Processing: Facilitating deposits via JazzCash, EasyPaisa, and bank transfers, and processing withdrawal requests to your registered payment account.
• Identity Verification (KYC/AML): Verifying your age (21+), identity, and source of funds in compliance with our anti-money laundering and licensing obligations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account abuse, collusion, and other security incidents.
• Responsible Gaming: Monitoring player behaviour to identify potential signs of problem gambling, administering self-exclusion requests, deposit limits, and cool-off periods.
• Customer Support: Responding to your queries, complaints, and support requests via live chat and email.
• Legal Compliance: Meeting our obligations under applicable law and the requirements of our international gaming licence, including mandatory reporting to regulatory authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the hz555 platform, personalise your experience, and develop new features.
• Marketing Communications: Sending you promotional offers, bonus notifications, and game announcements — but only where you have provided consent to receive such communications, and always with an easy opt-out mechanism.

hz555 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil the hz555 Terms & Conditions contract with you — including account creation, bet processing, and payment handling.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations imposed by our licensing authority.
• Legitimate Interests: Processing necessary for hz555's legitimate business interests, including fraud detection, platform security, and responsible gaming monitoring, where those interests are not overridden by your data protection rights.
• Consent: Where processing is based on your consent — such as for direct marketing communications — you may withdraw that consent at any time by contacting support or updating your communication preferences in your account dashboard.

hz555 does not sell your personal data. We may share your data with third parties only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers — solely for the purpose of processing your deposits and withdrawals. These processors are contractually bound to process your data only as instructed by hz555.
• Identity Verification Providers: Third-party KYC and age verification providers engaged by hz555 to verify your identity and CNIC details. These providers are bound by strict data processing agreements and may not use your data for their own purposes.
• Game Software Providers: Third-party game studios and RNG certification bodies whose software powers the hz555 casino, slot, and fishing games. Data shared is limited to what is strictly necessary for game functionality and auditing.
• Regulatory Authorities: hz555's licensing authority and, where required by law, relevant government bodies — including in connection with anti-money laundering reporting, fraud investigations, or court orders. hz555 is legally required to comply with such disclosures and will not notify you where doing so would prejudice an investigation.
• Professional Advisors: Legal, accounting, and audit firms who provide professional services to hz555, subject to strict confidentiality obligations.
• Group Companies: Affiliated entities within the hz555 corporate group, where necessary for the operation and administration of the hz555 platform, subject to the same data protection standards as hz555 itself.

In the event of a business sale, merger, or acquisition involving hz555, your personal data may be transferred to the acquiring entity, provided the acquirer agrees to process it in accordance with a privacy policy that offers at least equivalent protections to this Policy. You will be notified of any such transfer in advance where possible.

hz555 uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the hz555 platform and to gather analytical data about how the site is used. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in during your hz555 session, CSRF protection tokens, and load balancing cookies. These cannot be disabled.
• Functional Cookies: Remember your preferences — such as your preferred language, currency display (PKR), and odds format — so you do not need to reset them on each visit.
• Analytical Cookies: Collect anonymised or pseudonymised data about how players use hz555, including which games are most popular, average session lengths, and navigation paths. This data is used solely to improve the platform.
• Responsible Gaming Cookies: Track session duration and prompt responsible gaming reminders at intervals you have configured in your account settings.

hz555 does not use third-party advertising cookies or tracking pixels that share your data with external advertising networks. You can manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the hz555 platform.

hz555 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and hz555 servers is encrypted using industry-standard Transport Layer Security protocols.
• Data Encryption at Rest: Sensitive personal data — including CNIC details and payment account identifiers — is encrypted when stored on hz555 servers.
• Access Controls: Role-based access controls ensure that only authorised hz555 personnel can access personal data, and only to the extent necessary for their specific job function. All access is logged.
• Two-Factor Authentication (2FA): Available for player accounts and mandatory for all hz555 internal staff systems accessing personal data.
• Regular Security Audits: hz555 conducts regular penetration testing and security audits of its platform and data infrastructure.
• Incident Response: hz555 maintains a formal data breach response procedure. In the event of a data breach that poses a risk to your rights, hz555 will notify affected players without undue delay and report to the relevant regulatory authority as required by applicable law.

While hz555 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your data safe — please use a strong, unique password for your hz555 account and never share your login credentials with anyone.

hz555 retains your personal data for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by law or our regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your relationship with hz555, i.e., for as long as your hz555 account remains open.
• Transaction and Financial Records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with anti-money laundering regulations applicable to hz555's licensing jurisdiction.
• KYC / Identity Verification Records: Retained for a minimum of five (5) years after account closure or the last transaction, whichever is later.
• Customer Support Communications: Retained for a minimum of three (3) years after the resolution of the support interaction or complaint.
• Responsible Gaming Records: Self-exclusion records and responsible gaming intervention records are retained for a minimum of five (5) years after the exclusion or intervention ends, to protect both the player and hz555.
• Technical & Usage Data (anonymised): Anonymised analytical data may be retained indefinitely for platform improvement purposes, as it can no longer be attributed to any individual.

At the end of the applicable retention period, hz555 will securely delete or permanently anonymise your personal data so that it can no longer be associated with you.

Subject to applicable law and certain exemptions, you have the following rights in relation to the personal data hz555 holds about you. To exercise any of these rights, please contact our support team using the details in Section 13.

hz555 will respond to all verified data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, hz555 may extend this period by a further 60 days, in which case you will be notified within the initial 30-day period. hz555 does not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive.

The hz555 platform is strictly intended for individuals who are 21 years of age or older. hz555 does not knowingly collect, process, or store personal data from individuals under the age of 21. Age verification is conducted at the point of registration, and hz555 reserves the right to request documentary proof of age (including a valid Pakistani CNIC) at any time.

If hz555 discovers or has reasonable grounds to believe that a user is under 21 years of age, it will:

• Immediately suspend the account pending age verification.
• Void all bets placed and withhold any associated winnings.
• Permanently close the account if the user is confirmed to be under 21.
• Delete or anonymise all personal data associated with the account, unless required to retain it for regulatory or investigative purposes.

hz555 operates as an internationally licensed gaming platform, and your personal data may be processed in jurisdictions outside Pakistan. This may occur, for example, when data is processed by our hosting infrastructure, payment processing partners, or KYC verification providers who are located in other countries.

Where personal data is transferred internationally, hz555 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Such safeguards may include:

• Data processing agreements that incorporate internationally recognised standard contractual clauses.
• Transfers only to countries or organisations that provide an adequate level of data protection as determined by the relevant regulatory framework.
• Technical and organisational security measures applied consistently across all jurisdictions in which hz555's data is processed.

If you would like further information about the safeguards hz555 has in place for international data transfers, please contact our support team.

hz555 may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy — meaning changes that significantly affect your rights or how we process your data — we will notify you by:

• Sending an email notification to your registered hz555 email address.
• Displaying a prominent notice on the hz555 platform when you next log in.

The updated Policy will display the revised "Last updated" date at the top of this page. Minor or non-material amendments (such as typographical corrections or clarifications that do not change the substance of the Policy) may be made without prior notification but will always be reflected in the updated date shown above.

Your continued use of the hz555 platform following notification of material changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised Policy, you should cease using the hz555 platform and request account closure.

If you have any questions, concerns, or complaints about this Privacy Policy or about how hz555 handles your personal data, please contact our Data Protection team in the first instance:

• Live Chat: Available 24/7 directly on the hz555 platform — average response time under 90 seconds.
• Email: [email protected] — please mark your subject line "Privacy / Data Request" for fastest routing.
• Languages: English and Urdu

hz555 takes all privacy complaints seriously and will acknowledge receipt of your complaint within 48 hours and aim to provide a substantive response within 14 business days. Where a complaint requires more complex investigation, hz555 will keep you informed of progress.

If you are not satisfied with hz555's response to your privacy complaint, you may be entitled to escalate your complaint to the relevant data protection supervisory authority or the dispute resolution body associated with hz555's gaming licence. Details of applicable bodies are available from our support team upon request.