Privacy Policy – hz999 Pakistan Online Gaming Platform

1 Introduction

hz999 operates the online gaming platform available at hz999.win, including the Android mobile app. We take the privacy of our players — particularly those based in Pakistan — seriously. This Privacy Policy sets out in plain language what personal data we collect, why we collect it, how we use it and what controls you have over your own information.

We do not collect data beyond what is necessary to operate your account, process PKR transactions and deliver a safe, enjoyable gaming experience. This policy covers the main hz999 website, the mobile app available for download, and all account-related communications including live chat support interactions.

If you have any questions about this policy or how your data is handled, please contact our support team directly through the live chat feature on the platform. Details are also provided in Section 12 of this document.

2 Data We Collect

hz999 collects personal data across several categories depending on how you interact with the platform. The table below summarises what we collect and when:

We do not collect data that is not reasonably necessary for the purposes listed in this policy. You are not required to provide data beyond what is requested at each stage of the registration and verification process.

3 How We Use Your Data

hz999 uses the personal data collected for the following specific purposes:

• Account management: Creating and maintaining your hz999 account, verifying your identity, and processing login and security functions.
• Transaction processing: Handling PKR deposits and withdrawals via JazzCash, Easypaisa , Raast and Bank Transfer, and maintaining accurate financial records of all transactions on your account.
• Customer support: Responding to queries, resolving disputes and providing assistance through live chat and email.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, site navigation and the overall player experience.
• Security and fraud prevention: Detecting and preventing unauthorised access, multi-accounting, payment fraud and other prohibited conduct described in our Terms and Conditions.
• Responsible gaming: Monitoring patterns of play to identify accounts that may benefit from responsible gaming tools such as self-exclusion or session limits.
• Communications: Sending account-related notifications, promotional offers (where you have opted in) and updates about changes to platform policies.
• VIP programme administration: Tracking wagering activity to determine tier eligibility and calculate cashback amounts for Silver, Gold, Platinum and Elite members.

hz999 does not use your personal data for any purpose beyond those listed above without first obtaining your explicit consent.

4 Payment Data and PKR Transactions

All financial transactions on hz999 are conducted in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal, the payment data you provide — such as your JazzCash mobile number, Easypaisa account, Raast ID or bank account details — is passed securely to the relevant payment provider to process the transaction.

hz999 does not store full bank account numbers or complete mobile wallet credentials on its own servers. Payment processing is handled by the respective payment providers under their own security and privacy frameworks. Once a transaction is complete, hz999 retains only the reference data necessary to match the transaction to your account and maintain accurate financial records.

• All payment data in transit is protected using industry-standard encryption.
• Transaction records are retained for the period required by applicable financial regulations.
• Payment details on your account may only be updated through the account settings panel, subject to identity verification.

5 Cookies and Tracking Technologies

hz999 uses cookies and similar technologies on its website and mobile app to deliver a functional, personalised and secure gaming experience. Cookies are small data files stored on your device. The types of cookies we use are:

• Essential cookies: Required for the platform to function. These handle login sessions, account security tokens and basic navigation. These cannot be disabled without breaking core platform functionality.
• Analytical cookies: Used to understand how players navigate the platform — which pages are visited most, how long sessions last and where users encounter issues. This data is aggregated and anonymised. It helps us improve the platform experience for all Pakistan players.
• Functional cookies: Remember your preferences such as game settings, language selection and display options so you don't need to reconfigure them on every visit.
• Session cookies: Temporary cookies that expire when you close your browser. Used to maintain your active game session and keep your account logged in while you are actively using the platform.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use the platform. hz999 does not use third-party advertising cookies or tracking pixels to serve ads on external websites.

6 Data Sharing and Third Parties

hz999 does not sell, rent or trade your personal data to any third party for commercial or marketing purposes. Data sharing is limited to what is strictly necessary to operate the platform:

• Payment providers: JazzCash, Easypaisa, Raast and Bank Transfer receive only the payment data necessary to process your specific transaction.
• Game studios: Third-party game providers that supply Live Casino tables, Slot Games and Fish Games may receive anonymised session data to support game performance and integrity monitoring. They do not receive your personal identity or payment details.
• Identity verification services: Where document verification is required, a third-party verification service may process the identity documents you submit. This is done under strict data processing agreements.
• Fraud and security services: Aggregated, de-identified technical data (such as IP addresses and device fingerprints) may be processed by security services to detect fraudulent behaviour and protect all platform users.

All third-party service providers that process data on hz999's behalf are required to handle that data in accordance with applicable privacy standards and are prohibited from using it for their own independent purposes.

7 Data Retention

hz999 retains your personal data only for as long as it is necessary for the purposes described in this policy or as required by applicable financial and regulatory obligations. Specific retention periods are as follows:

• Active accounts: Personal data, gaming history and transaction records are retained throughout the active life of your account.
• Closed accounts: Following account closure, financial transaction records are retained for a minimum of five years to satisfy record-keeping obligations.
• Identity documents: Copies of CNIC or other identity documents submitted for verification are retained for as long as the account is active and for the required period following closure.
• Support correspondence: Live chat transcripts and email records relating to disputes or complaints are retained for a minimum of two years from the date of the interaction.
• Dormant accounts: Accounts with no login activity for 12 consecutive months are marked as dormant. Data associated with dormant accounts is reviewed on an annual basis.

When data is no longer required and the applicable retention period has passed, hz999 takes reasonable steps to securely delete or anonymise that data.

8 Your Rights Over Your Data

As an hz999 account holder, you have the following rights with respect to your personal data. To exercise any of these rights, contact us via the live chat on the platform or at the email address in Section 12:

• Right of access: You can request a copy of the personal data hz999 holds about you at any time.
• Right to correction: If any of your personal data is inaccurate or out of date, you have the right to request that it be corrected. Some corrections (such as name or date of birth) may require identity verification.
• Right to erasure: You may request deletion of your personal data. Note that this right is subject to our legal obligations to retain certain financial and identity records for the required period. We will inform you of any data we are unable to delete and explain why.
• Right to restrict processing: In certain circumstances, you may ask us to limit how we use your data while a query or dispute is being resolved.
• Right to withdraw consent: Where processing is based on your consent (such as receiving promotional communications), you may withdraw that consent at any time through your account settings.
• Right to complain: If you are not satisfied with how hz999 handles your data request, you have the right to raise a complaint directly with hz999 through the support channel.

9 Security Measures

Protecting your personal and financial data is a priority at hz999. We maintain a set of technical and operational security measures appropriate for the nature of the data we hold:

• All data transmitted between your device and the hz999 platform is encrypted using TLS (Transport Layer Security).
• Account passwords are hashed using industry-standard algorithms. hz999 staff cannot view your password in plain text.
• Access to personal data within hz999 is restricted on a need-to-know basis. Only staff whose roles require access to certain data categories are permitted to view that data.
• Suspicious login attempts, unusual transaction patterns and signs of account compromise are monitored continuously by our security systems.
• The hz999 mobile app is built with secure coding practices to prevent common mobile application vulnerabilities.

Despite these measures, no online platform can guarantee complete security against all possible threats. In the unlikely event of a data breach affecting your personal information, hz999 will take immediate action to contain the breach and will notify affected players as soon as practically possible.

You also have a role in protecting your own account. Never share your hz999 login credentials with anyone. Use a strong, unique password and update it periodically. If you notice any suspicious activity on your account, contact support immediately.

10 Minors and Age Verification

hz999 is strictly an adults-only platform. The minimum age to register and use the platform is 18 years. hz999 does not knowingly collect personal data from anyone under the age of 18.

During registration, all users are required to confirm that they are aged 18 or above. hz999 may request identity verification documents at any time to confirm the age of a registered account holder. Where an account is found to belong to a person under 18, the account will be immediately suspended, all balances forfeited and the data associated with the account handled in accordance with applicable requirements.

If you are a parent or guardian and believe that a minor has registered an hz999 account using false information, please contact our support team immediately so we can take appropriate action.

11 Updates to This Privacy Policy

hz999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable regulations or improvements to our data practices. When we make material changes, we will update the "Last Updated" date at the top of this page.

Where a change significantly affects how we use your personal data, we will also notify active account holders via an on-platform notification or to their registered contact details ahead of the change taking effect. Your continued use of the platform after any update constitutes acceptance of the revised policy.

We encourage you to review this page periodically so that you are always aware of the current version of our Privacy Policy.

12 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or how hz999 handles your personal data, please reach out through the following channels:

• Live Chat: Available 24/7 directly on the hz999 website and mobile app. This is the fastest way to reach us.
• Email: [email protected] — please include your registered username and a brief description of your query in all correspondence.

For data access or erasure requests, please include "Data Request" in the subject line of your email so our team can route it to the appropriate person promptly.