1. Introduction
This Privacy Policy ("Policy") describes how hz88 ("we," "us," "our," or "the Company") collects, uses, stores, shares and protects the personal data of players who register and use the hz88 platform at https://hz88-bangla.com. This Policy applies to all products and services offered by hz88, including sports betting, esports betting, online casino, live dealer games, Andar Bahar, jackpot slots, virtual sports and poker.
hz88 is committed to handling the personal data of Pakistani players with care, transparency and respect. We recognise that when you hand over your name, your mobile number, your CNIC details or your Easypaisa account information to register with hz88, you are placing real trust in us. This Policy explains exactly how we honour that trust — what data we collect, why we need it, who else ever sees it (almost nobody), how long we keep it and what rights you have over it at all times.
By registering an account or using the hz88 platform, you confirm that you have read and understood this Policy. This Policy should be read alongside our Terms and Conditions and our Responsible Gaming page, all of which together govern your relationship with hz88.
hz88 collects only the data it genuinely needs to run your account securely, process your PKR payments, comply with anti-money laundering regulations and improve the platform experience. We do not sell your data. We do not share it for marketing purposes. Your privacy is not a product at hz88.
2. Data We Collect
hz88 collects personal data in several ways: directly from you when you register or update your account, automatically through your use of the platform, and from third-party verification services used to confirm your identity as required by our licensing obligations.
| Category | Examples | Collection Method | Required? |
|---|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number | Registration form / KYC upload | Required |
| Contact Data | Mobile number, email address | Registration form | Required |
| Financial Data | Easypaisa / JazzCash number, bank account details, transaction history | Payment flows | Required |
| Betting Activity | Bets placed, games played, wager amounts, win/loss history | Platform activity | Required |
| Technical Data | IP address, device type, browser, OS, session duration | Automatic / cookies | Automatic |
| Communication Data | Live chat transcripts, support emails, feedback forms | Customer support | When used |
| Marketing Preferences | Email/SMS opt-in status, promotion history | Account preferences | Optional |
2.1 Data We Do Not Collect
hz88 does not collect or store full credit or debit card numbers — payment card transactions are processed entirely by our PCI-DSS compliant payment gateway partners and card details are never visible to hz88's own systems. We also do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs or biometric data beyond what is present on your CNIC during standard KYC verification.
3. How We Use Your Data
hz88 uses your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the reasons it was originally collected. Below are the primary purposes for which hz88 processes your personal data:
- Account management — creating, maintaining and securing your hz88 player account; verifying your identity at registration and during KYC review; processing password resets and security queries.
- Payment processing — processing PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT or Visa/Mastercard; crediting winnings to your wallet; processing withdrawal requests to your registered payment method.
- Service delivery — enabling you to place bets, play casino games, use live dealer tables and access all other hz88 products; recording and settling your betting and gaming activity; handling disputes and resolving account queries.
- Regulatory compliance — meeting our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under our gaming licence; reporting suspicious activity to the relevant authorities as required by law; maintaining records for the legally required retention periods.
- Responsible gaming — monitoring your gaming patterns to identify signs of problem gambling; applying and enforcing deposit limits, loss limits and self-exclusion requests; contacting you when our responsible gaming systems flag a potential concern.
- Platform improvement — analysing aggregated, anonymised usage data to understand how Pakistani players use the hz88 platform; testing new features before rolling them out; fixing bugs and improving performance.
- Marketing communications — sending you promotional offers, bonus notifications and platform news only if you have opted in to receive them. You can opt out at any time through your account settings or by contacting support.
- Fraud prevention and security — detecting and investigating suspicious account activity, duplicate accounts and potential bonus abuse; protecting the integrity of the hz88 platform for all players.
4. Legal Basis for Processing
hz88 processes personal data under one or more of the following legal bases, depending on the type of data and the purpose of processing:
- Contractual necessity — processing your identity, contact and financial data is necessary to fulfil our contract with you as a registered hz88 player. Without this data, we cannot provide you with a betting account, process payments or settle your bets.
- Legal obligation — processing related to KYC verification, AML checks, suspicious activity reporting and mandatory data retention is required by our gaming licence and applicable anti-financial-crime regulations. This is not optional for hz88.
- Legitimate interests — processing technical and usage data to improve the platform, prevent fraud and ensure security is carried out under hz88's legitimate interest in running a secure, well-functioning service for its players.
- Consent — processing for direct marketing purposes (promotional emails and SMS) is carried out only on the basis of your explicit opt-in consent. You can withdraw this consent at any time.
hz88 does not process your personal data on a "we feel like it" basis. Every use of your data has a specific, documented legal reason behind it. If you have questions about why a particular piece of data is being processed, you can ask us at any time through customer support.
5. Data Sharing & Third Parties
hz88 does not sell your personal data to any third party. We do not share your data with advertising networks, data brokers or marketing companies without your explicit consent. The only circumstances under which hz88 shares your personal data with third parties are described below.
5.1 Payment Processors
To process your PKR deposits and withdrawals, hz88 shares the minimum necessary financial data with payment service providers including mobile wallet operators (Easypaisa, JazzCash, NayaPay, SadaPay), banks (for IBFT transfers) and card payment gateways (for Visa/Mastercard transactions). These processors are contractually bound to protect your data and use it only to complete the specific transaction.
5.2 Identity Verification Services
As part of our KYC process, hz88 may use third-party identity verification services to confirm the authenticity of documents you submit. These services operate under strict data protection agreements and do not retain your data beyond the verification period.
5.3 Regulatory Authorities
hz88 is obligated by law and by our gaming licence to report certain information to regulatory and law enforcement authorities. This includes reporting suspicious transactions to anti-money laundering authorities. hz88 will comply with valid legal orders for data disclosure without requiring your prior consent, as the legal obligation overrides consent in such cases.
5.4 Gaming Software Providers
hz88 uses third-party game studios and software providers to deliver certain games on the platform. These providers may receive anonymised or pseudonymised session data for the purposes of game integrity and technical operation. Your full identity details are not passed to game providers.
In all cases where hz88 shares your data with a third party, we ensure appropriate contractual safeguards are in place. Third parties processing your data on behalf of hz88 are required to handle it with the same standard of protection that hz88 applies to its own data processing activities.
6. Cookies & Tracking Technologies
The hz88 platform uses cookies and similar tracking technologies to make the platform work correctly and to help us understand how Pakistani players use it. A cookie is a small text file stored on your device by your browser. Cookies do not contain executable code and cannot access other data stored on your device.
6.1 Types of Cookies We Use
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Keep you logged in, remember your session, process bets and payments, prevent cross-site request forgery attacks | No – required |
| Functional | Remember your language preferences, display settings and responsible gaming tool selections | Yes |
| Analytics | Collect anonymised data about which pages Pakistani players visit, how long sessions last and which features are used most — helps us improve hz88 | Yes |
| Marketing | Track whether you arrived via a marketing link so we can measure the effectiveness of our promotions — only active if you have opted in | Yes |
You can manage cookie preferences through your browser settings at any time. Disabling functional or analytics cookies will not prevent you from using hz88 but may affect certain convenience features.
7. Data Security
hz88 applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. The specific security measures we have in place include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the hz88 platform.
- Encrypted storage for sensitive data including identity documents, financial account details and authentication credentials.
- Access controls ensuring that hz88 staff can only access the minimum personal data necessary for their specific job function — a customer support agent handling a payment query, for example, does not have access to your full CNIC scan.
- Two-factor authentication options available for all player accounts to add an additional layer of login security.
- Regular third-party security audits and penetration testing of the hz88 platform infrastructure.
- Incident response procedures — in the event of a data breach that is likely to affect your rights or freedoms, hz88 will notify affected players and the relevant regulatory authority within 72 hours of becoming aware of the breach.
While hz88 takes every reasonable step to protect your data, no internet-based service can guarantee absolute security. You also have a role to play in keeping your account secure — use a strong, unique password, do not share your login details, and contact us immediately at support@hz88-bangla.com if you suspect your account has been compromised.
8. Data Retention
hz88 does not keep your personal data for longer than is necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law or our regulatory obligations.
- Active account data — retained for as long as your hz88 account remains open and active.
- KYC and identity verification records — retained for a minimum of 5 years from the date of account closure or the last transaction, as required by anti-money laundering regulations.
- Transaction and betting records — retained for a minimum of 5 years in line with financial record-keeping requirements under our gaming licence.
- Customer support communications — retained for 2 years from the date of the last interaction, to allow us to resolve any follow-up queries and improve our service quality.
- Marketing preference data — retained until you withdraw your consent, after which it is deleted within 30 days.
- Technical / analytics data — anonymised after 26 months and retained indefinitely in aggregate, anonymised form for platform improvement purposes.
When hz88 no longer has a legitimate reason to retain your personal data, it is securely deleted or irreversibly anonymised. You can request early deletion of certain data categories — see Section 9 for your rights in this regard.
9. Your Privacy Rights
As an hz88 player, you have significant rights over your personal data. These are not theoretical entitlements — they are practical rights that hz88 will honour when you exercise them. Below is a summary of each right and what it means for you.
Right of Access
You can request a copy of all personal data hz88 holds about you. We will provide this within 30 days of your request at no charge.
Right to Rectification
If any personal data held by hz88 is inaccurate or incomplete, you have the right to have it corrected. Contact support with the correct details and we will update our records.
Right to Erasure
Also known as the "right to be forgotten." You can request deletion of your personal data. Note that certain data must be retained for legal and regulatory reasons and cannot be deleted before the required retention period expires.
Right to Restrict Processing
You can request that hz88 restrict the processing of your data in certain circumstances — for example, while we verify the accuracy of data you have disputed.
Right to Data Portability
You can request a copy of your personal data in a structured, commonly used machine-readable format so that you can transfer it to another service provider if you wish.
Right to Object
You have the right to object to hz88 processing your personal data for direct marketing at any time. You can also object to processing carried out under hz88's legitimate interests, though we may have overriding grounds to continue in some cases.
To exercise any of the rights listed above, contact the hz88 privacy team via live chat or email at support@hz88-bangla.com. Please state clearly which right you are exercising and include your registered account username. We will acknowledge your request within 5 working days and complete it within 30 days. There is no fee for a reasonable privacy rights request.
10. Children's Privacy
The hz88 platform is intended exclusively for adults aged 18 and over. hz88 does not knowingly collect personal data from anyone under the age of 18. If a minor has registered an account by misrepresenting their age, any data held in connection with that account will be deleted immediately upon discovery and the account will be closed with any balance forfeited.
If you are a parent or guardian and believe that your child may have registered with hz88, please contact us immediately at support@hz88-bangla.com with details. We will investigate and act promptly. hz88 encourages parents and guardians to use parental control software to prevent minors from accessing gambling websites.
11. Changes to This Privacy Policy
hz88 may update this Privacy Policy from time to time. When we make changes that materially affect your privacy rights or how we use your data, we will notify you by posting a clear notice on the hz88 homepage and by sending an email to your registered address at least 14 days before the changes take effect.
Minor updates — such as clarifying existing language, correcting typographical errors or adding detail that does not change the substance of the Policy — may be made without advance notice. The "Last updated" date at the top of this page will always reflect when the most recent change was made.
We encourage you to review this Policy periodically. Continued use of the hz88 platform after any change has taken effect constitutes your acceptance of the revised Policy. If you do not agree with any change, please stop using the platform and contact us to close your account — your balance will be returned subject to our standard withdrawal process.
12. How to Contact Us About Privacy
If you have any question about this Privacy Policy, want to exercise any of your data rights, or have a concern about how hz88 handles your personal information, please get in touch. Our privacy and data protection team is available 24 hours a day, 7 days a week.
The quickest route is through the live chat feature on the hz88 platform when you are logged in. For written privacy requests, email us at support@hz88-bangla.com with the subject line "Privacy Request" and include your registered username and the nature of your query. We will acknowledge your request within 5 working days.
This Privacy Policy should be read together with our Terms and Conditions and our Responsible Gaming page. All three documents together form the complete legal and data framework governing your hz88 account.