hz88 Privacy Policy – How We Protect Your Data in Pakistan

01 Who We Are

This Privacy Policy applies to the hz88 online gaming platform, operated at hz88-khelo.com. When this policy refers to "hz88", "we", "us", or "our", it refers to the company responsible for operating hz88 and processing the personal data described in this document.

hz88 is the data controller for the personal information collected from registered players and website visitors. This means hz88 determines the purposes and means of processing your personal data. Where hz88 uses third-party service providers to process data on its behalf — such as payment processors or game providers — those parties act as data processors under hz88's instructions.

If you have any questions about how hz88 handles your personal data, you can contact the hz88 data team at any time via the contact details provided in Section 12 of this policy.

02 Data We Collect from Pakistani Players

hz88 collects personal data from you in three ways: information you provide directly, information generated by your use of the platform, and information received from third parties where applicable.

03 How hz88 Uses Your Personal Data

hz88 uses the personal data it collects for the following purposes. Each purpose is linked to a lawful basis as described in Section 4.

• Account management — Creating, maintaining, and securing your hz88 account. Processing deposits and withdrawals. Communicating account status changes.
• Identity verification — Confirming that you are who you say you are, that you are 18 or older, and that your payment methods are registered in your own name.
• Transaction processing — Sending and receiving PKR payments via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card networks. Maintaining accurate transaction records.
• Fraud and security — Detecting and preventing fraud, money laundering, multi-accounting, bonus abuse, and other prohibited activity. Monitoring for unusual account behaviour.
• Legal compliance — Meeting hz88's obligations under its operating licence, including Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements.
• Customer support — Responding to your queries, complaints, and requests. Maintaining records of support interactions for quality and dispute resolution purposes.
• Responsible gaming — Monitoring for signs of problem gambling and applying the responsible gaming tools that are active on your account. Contacting you if our monitoring suggests a concern.
• Platform improvement — Analysing aggregated usage data to improve the hz88 platform, fix bugs, prioritise features, and ensure the platform works well on Pakistani devices and networks.
• Marketing — Sending you information about hz88 promotions, bonuses, and new features, where you have given consent. You can opt out of marketing communications at any time.

04 Legal Basis for Processing

hz88 only processes your personal data where it has a lawful basis to do so. The bases hz88 relies on are:

• Contract performance — Processing necessary to operate your hz88 account and deliver the services you have registered for, including processing transactions and providing customer support.
• Legal obligation — Processing required by hz88's operating licence conditions, including KYC identity verification, AML transaction monitoring, and record-keeping obligations.
• Legitimate interests — Processing for fraud prevention, platform security, and service improvement, where hz88's interests are not overridden by your rights and freedoms.
• Consent — Processing for marketing communications, where you have explicitly opted in. You can withdraw this consent at any time without affecting your account.

05 Data Sharing with Third Parties

hz88 shares personal data with third parties only where necessary and only to the extent required for the specific purpose. hz88 does not sell your data to any third party.

The categories of third parties with whom hz88 may share your data are:

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, and card processing networks receive the transaction data necessary to process your deposits and withdrawals. These processors are bound by their own data protection obligations and by hz88's data processing agreements.
• Game providers — Studio providers such as Evolution, Pragmatic Play, and others receive the technical session data required to deliver game content. They do not receive your identity or financial data except to the extent required for regulatory compliance.
• Identity verification services — Third-party KYC providers may process your identity document data to complete verification checks required by hz88's licence obligations.
• Fraud prevention services — Specialist fraud detection providers may receive technical and transaction data to identify irregular patterns. This sharing is done under data processing agreements and the data is not used for any other purpose.
• Regulatory and legal authorities — hz88 may be required to disclose information to its licensing authority, law enforcement, or other regulatory bodies where required by law or where ordered by a competent authority.

All third parties that process personal data on hz88's behalf are required to maintain appropriate security standards and to process data only for the purposes specified in their data processing agreement with hz88.

06 How Long hz88 Keeps Your Data

hz88 retains personal data for as long as it is needed for the purposes it was collected and for as long as required by applicable law and licence conditions. The general retention principles hz88 applies are:

• Account and identity data is retained for the duration of your hz88 account and for a period of five years after account closure, to meet AML and KYC regulatory requirements.
• Transaction records — including deposits, withdrawals, and game bets — are retained for a minimum of five years from the date of the transaction.
• Customer support records are retained for three years from the date of the interaction unless they are linked to an active dispute or legal proceeding.
• Technical and usage data is retained in identifiable form for 24 months, after which it is aggregated and anonymised for analytical purposes.
• Marketing consent records are retained for as long as your account is active and for three years after consent is withdrawn, to document the consent history.

When the applicable retention period expires, hz88 securely deletes or anonymises the personal data. If you request deletion of your data before the retention period has expired, hz88 will explain which data must be retained for regulatory reasons and which can be deleted immediately.

07 Cookies and Tracking

hz88 uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device by your browser when you visit hz88. They help hz88 remember your session, maintain login state, and understand how Pakistani players use the platform.

You can manage your cookie preferences through your browser settings. Blocking essential cookies will prevent hz88 from functioning correctly. Blocking other cookie types will not affect your ability to use the core platform features.

08 Your Rights Over Your Data

As a hz88 player, you have the following rights in relation to the personal data hz88 holds about you. To exercise any of these rights, contact hz88 at support@hz88-khelo.com with the subject line "Data Rights Request".

09 Security Measures at hz88

hz88 takes the security of your personal data seriously and has implemented technical and organisational measures to protect it against unauthorised access, loss, or disclosure. These measures include:

• TLS/SSL encryption on all connections to the hz88 platform, including login, payment, and account management pages.
• Encrypted storage of sensitive account data on secured servers with restricted physical and logical access.
• Multi-factor authentication options for player accounts to protect against unauthorised login.
• Regular security assessments and penetration testing to identify and address vulnerabilities in the hz88 platform.
• Strict internal access controls — hz88 staff can only access player data that is relevant to their specific role and only for legitimate operational purposes.
• Automatic session timeouts to protect players who leave their hz88 account open on a shared device.

No system can guarantee absolute security. In the event of a data breach that affects your personal data, hz88 will notify you without undue delay if the breach is likely to result in a risk to your rights and freedoms. The notification will describe the nature of the breach, what data was affected, and what steps hz88 is taking to address it.

You can also protect your hz88 account by using a strong, unique password, not sharing your credentials with anyone, and contacting hz88 support immediately if you suspect that your account has been accessed without your authorisation.

10 Children and Minors

hz88 is strictly an adult platform. The services provided by hz88 are intended only for individuals who are 18 years of age or older. hz88 does not knowingly collect personal data from individuals under the age of 18.

If hz88 becomes aware that personal data has been collected from a person under 18, that data will be deleted and the associated account closed as described in hz88's Terms and Conditions. If you are a parent or guardian and believe that your child has registered on hz88 without your knowledge, please contact hz88 support at support@hz88-khelo.com immediately.

hz88 recommends that parents use internet filtering software to prevent minors from accessing adult gaming platforms. Information on parental controls and family safety tools is available from Pakistani internet service providers.

11 Updates to This Privacy Policy

hz88 may update this Privacy Policy from time to time to reflect changes in how we handle personal data, changes in the services we offer, or changes in applicable law. When hz88 makes a material change to this policy, we will notify registered players via their account email address or via a prominent notice on the hz88 platform before the change takes effect.

The "Last updated" date at the top of this policy reflects when the most recent revision was made. Earlier versions of this policy are available on request by contacting hz88 support. Continued use of the hz88 platform after notification of a policy update constitutes acceptance of the revised terms, unless you choose to close your account and request data deletion before the update takes effect.

If you disagree with a change to this Privacy Policy, please contact hz88 support to discuss your concerns before the change takes effect. hz88 will work with you to understand your concerns and explain the reasons for the change.

12 How to Contact hz88 About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or how hz88 handles your personal data, please contact the hz88 data team using the details below. All privacy-related requests are handled confidentially.

If you are not satisfied with hz88's response to a privacy concern, you have the right to escalate the matter to the relevant data protection or regulatory authority in hz88's licensing jurisdiction. hz88 will provide details of the applicable authority upon request.