hz77 Privacy Policy

1. Introduction

hz77 ("hz77", "we", "us", "the Platform") is committed to protecting the privacy and security of all personal data entrusted to us by players using our online casino and sports betting platform at hz77.org. This Privacy Policy ("Policy") describes in detail how hz77 collects, uses, stores, shares, and protects your personal information.

This Policy applies to all individuals who visit hz77.org, create a player account, make a deposit, place a bet, or otherwise interact with any service, feature, or promotional communication provided by hz77. This includes players accessing hz77 from all cities and regions across Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and Peshawar.

This Privacy Policy should be read alongside the hz77 Terms and Conditions, which are available at /terms-conditions, and together these documents form the complete agreement governing your relationship with hz77.

hz77 operates as an internationally licensed gaming operator and processes personal data in accordance with applicable international privacy standards and the data protection obligations imposed by its licensing authority.

2. Data Controller

For the purposes of this Privacy Policy, hz77 acts as the data controller in respect of all personal data collected from players via hz77.org. As data controller, hz77 determines the purposes and means by which your personal data is processed.

All data protection enquiries, access requests, and formal complaints should be directed to the hz77 Data Protection contact point listed in Section 16 of this Policy. hz77 aims to acknowledge all data-related correspondence within five (5) business days and to provide a substantive response within thirty (30) days of receipt.

3. Data We Collect

hz77 collects personal data from you directly (when you provide it during registration, verification, or support interactions) and automatically (through your use of the hz77 platform). The categories of personal data hz77 may collect include:

3.1 Registration and Account Data

• Full legal name
• Date of birth
• Residential address (city, province, country)
• Valid email address
• Pakistani mobile phone number
• Username and hashed account password
• Preferred currency (PKR)
• Security questions and answers (where applicable)

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo ID (CNIC, Passport, or Driver's Licence)
• Proof of address documentation (utility bill, bank statement dated within 3 months)
• Proof of payment method ownership (e.g., screenshot of registered JazzCash or EasyPaisa account)
• Selfie photograph holding ID document (where requested during enhanced verification)
• ID document number and expiry date

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (JazzCash mobile number, EasyPaisa account, HBL / UBL / Meezan Bank account details masked to last four digits)
• Transaction amounts in PKR and timestamps
• Bonus and promotional credit history
• Wagering history and game session records

3.4 Technical and Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session start and end timestamps
• Pages visited and features accessed on hz77.org
• Referring URL (the page you visited immediately before hz77.org)
• Error logs and performance diagnostics

3.5 Customer Support Data

• Content of live chat transcripts and email correspondence
• Support ticket history and resolution records
• Feedback and survey responses provided voluntarily

3.6 Responsible Gaming Data

• Self-imposed deposit limits, session time restrictions, and cooling-off elections
• Self-exclusion requests and status
• Responsible gaming assessment responses (where applicable)

4. How We Use Your Data

hz77 processes your personal data for the following specific purposes:

hz77 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where profiling is conducted for responsible gaming or fraud detection purposes, hz77 ensures that material decisions involving account restrictions are reviewed by a qualified team member before being applied.

5. Legal Basis for Processing

hz77 processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: processing is required to perform the contract between you and hz77 — i.e., to provide your player account and deliver gaming services
• Legal Obligation: processing is required to comply with hz77's obligations under its international gaming licence, anti-money laundering regulations, and applicable financial reporting requirements
• Legitimate Interests: processing is necessary for hz77's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your data protection rights
• Consent: where hz77 relies on your consent as the legal basis (e.g., for sending marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal

6. Sharing Your Data

hz77 does not sell, rent, or otherwise commercially exploit your personal data to third parties. hz77 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

6.1 Payment Service Providers

To process PKR deposits and withdrawals, hz77 shares necessary transaction data with licensed payment facilitators including JazzCash, EasyPaisa, and partner banks (HBL, UBL, Meezan Bank). These providers act as independent data controllers in respect of payment processing and are subject to their own privacy policies and regulatory requirements.

6.2 Identity Verification Providers

hz77 uses licensed third-party KYC and AML screening services to verify the identity documents you submit and to screen your details against global sanctions and politically exposed persons (PEP) lists. These providers process your data solely for verification purposes and are contractually prohibited from using it for any other purpose.

6.3 Game Content Providers

Certain casino games on the hz77 platform are provided by third-party game studios and live dealer operators. These providers may receive limited technical session data (such as a pseudonymous player token and bet amounts) to facilitate gameplay and calculate payouts. They do not receive your full name, national ID, or contact details.

6.4 Regulatory and Law Enforcement Authorities

hz77 may be required by its licensing authority, financial regulators, or law enforcement agencies to disclose personal data and account activity records. hz77 will comply with any valid legal request and, where permitted by law, will endeavour to notify the affected player of any such disclosure.

6.5 IT Infrastructure and Security Providers

hz77 works with contracted cloud hosting, content delivery, and cybersecurity service providers who process data on hz77's behalf as data processors. All such providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to hz77.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit hz77.org. hz77 uses cookies and similar technologies (such as local storage and session tokens) to enable core platform functionality, maintain your logged-in session, detect fraudulent activity, and collect anonymised usage statistics.

7.2 Types of Cookies Used by hz77

• Strictly Necessary Cookies: required for the hz77 platform to function. These include session authentication tokens and security cookies. These cannot be disabled without breaking core functionality.
• Functional Cookies: remember your preferences such as language settings, preferred game categories, and lobby display options.
• Analytics Cookies: collect anonymised data about how players navigate hz77.org. This data is used internally to improve the platform. hz77 does not use third-party analytics services that share this data externally.
• Security and Fraud Detection Cookies: help hz77 identify and block suspicious login attempts, bot activity, and account takeover attempts.

7.3 Managing Cookies

You can manage or disable cookies through your web browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your hz77 account. hz77 does not deploy third-party advertising cookies or cross-site tracking technologies.

8. Data Retention

hz77 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods imposed by hz77's licensing and regulatory obligations:

• Account and KYC records: retained for a minimum of five (5) years from the date of account closure, as required for anti-money laundering compliance
• Financial transaction records: retained for a minimum of five (5) years from the date of each transaction
• Customer support correspondence: retained for three (3) years from the date of the last interaction
• Technical and usage logs: retained for up to twelve (12) months and then deleted or anonymised
• Marketing consent records: retained for the duration of your marketing opt-in and for twelve (12) months following any opt-out
• Self-exclusion records: retained for the full duration of the self-exclusion period plus five (5) years thereafter

Upon expiry of the applicable retention period, hz77 will securely delete or anonymise your personal data in accordance with our internal data destruction procedures. Anonymised data (i.e., data that can no longer be linked to any identifiable individual) may be retained indefinitely for statistical and platform improvement purposes.

9. Data Security

hz77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Transport Layer Security (TLS 1.3): all data in transit between your device and hz77.org is encrypted using industry-standard TLS 1.3 protocols
• Encryption at Rest: sensitive personal data and financial records stored on hz77 servers are encrypted at rest using AES-256 encryption
• Access Controls: access to personal data is restricted to authorised hz77 personnel on a strict need-to-know basis and is governed by role-based access control (RBAC) policies
• Multi-Factor Authentication: hz77 internal systems require multi-factor authentication for all staff accessing player data
• Penetration Testing: hz77's platform undergoes regular third-party penetration testing and vulnerability assessments
• Incident Response: hz77 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, hz77 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law

While hz77 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying hz77 immediately if you suspect any unauthorised access to your account.

10. Your Rights

As an hz77 player, you have the following rights in relation to your personal data, subject to applicable legal and regulatory limitations:

• Right of Access: you may request a copy of the personal data hz77 holds about you. hz77 will provide this information within thirty (30) days of receiving a verified request.
• Right to Rectification: if any personal data held by hz77 is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your contact number) can be made directly through the account settings panel.
• Right to Erasure: in certain circumstances, you may request that hz77 delete your personal data. This right is subject to limitations where hz77 is required to retain data for legal, regulatory, or fraud prevention purposes — for example, the mandatory five-year AML retention period described in Section 8.
• Right to Restriction: you may request that hz77 restrict processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to Data Portability: you have the right to receive a copy of personal data you have provided to hz77 in a structured, commonly used, machine-readable format.
• Right to Object: you have the right to object to processing of your personal data where hz77 relies on legitimate interests as the legal basis. You may also withdraw consent for marketing communications at any time.

To exercise any of the above rights, please contact hz77 using the details provided in Section 16. hz77 may need to verify your identity before processing a data rights request. hz77 will not charge a fee for handling reasonable requests.

11. Children's Privacy

hz77 is strictly for individuals who are 21 years of age or older. hz77 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If hz77 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and any associated account will be closed.

Parents and guardians who have reason to believe that a minor has registered an account on hz77 are encouraged to contact hz77 support immediately. hz77 takes underage gambling prevention seriously and cooperates fully with verified parental requests to close accounts associated with minors.

12. International Data Transfers

hz77 operates as an internationally licensed gaming platform, and personal data may be processed by hz77's contracted service providers in countries outside Pakistan. Where personal data is transferred internationally, hz77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Such safeguards may include contractual data processing agreements incorporating standard data protection clauses, or processing by providers in jurisdictions that maintain adequate data protection standards as recognised by hz77's licensing authority. hz77 will not transfer your personal data to any jurisdiction that does not provide an adequate level of protection without your explicit consent or a specific legal justification.

13. Marketing Communications

hz77 may send you promotional communications about new games, bonuses, PSL cricket betting markets, seasonal promotions, and platform updates by email or SMS to your registered Pakistani mobile number. hz77 will only send you marketing communications where you have provided your explicit consent to receive them at the time of registration or subsequently through your account communication preferences.

13.1 Opting Out

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in the hz77 account settings panel
• Clicking the unsubscribe link included in any hz77 promotional email
• Contacting hz77 support and requesting removal from all marketing lists

Opt-out requests are processed within five (5) business days. Please note that withdrawing your marketing consent does not affect your ability to receive transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.

13.2 No Third-Party Marketing

hz77 does not share your contact details with third parties for their own marketing purposes. All promotional communications you receive from hz77 originate directly from hz77 and concern hz77 products and services only.

14. Responsible Gaming & Data

hz77 uses gaming behaviour data, including wagering frequency, session duration, deposit patterns, and bet size escalation, to monitor for indicators of potentially problematic gambling behaviour. This monitoring is conducted in accordance with hz77's responsible gaming obligations under its international gaming licence and is intended to protect players from harm.

Where hz77's responsible gaming monitoring identifies patterns of concern, an automated alert may be generated, which is then reviewed by a member of hz77's responsible gaming team. The team member may reach out to you directly to offer support resources, suggest the use of self-management tools such as deposit limits or cooling-off periods, or in serious cases, initiate a responsible gaming review of your account.

Responsible gaming data — including self-exclusion records, limit elections, and responsible gaming assessment responses — is treated with the highest level of confidentiality and is accessible only to hz77's responsible gaming and compliance team members. This data is never used for marketing purposes.

For more information on the responsible gaming tools available on hz77, including self-exclusion, deposit limits, and session time controls, please visit the hz77 Responsible Gaming page.

15. Changes to This Policy

hz77 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be communicated to registered players via the email address associated with their hz77 account, or by a prominent notice displayed on hz77.org, at least seven (7) days before the amended Policy takes effect.

Your continued use of hz77.org following the effective date of any changes constitutes your acceptance of the revised Privacy Policy. hz77 recommends that you review this Policy periodically to remain informed of how your personal data is being handled. The "Last Reviewed" date at the top of this Policy will always reflect the most recent revision.

If a proposed change to this Privacy Policy materially affects how hz77 processes personal data that you have already provided and you do not agree to the change, you should cease use of the hz77 platform and request account closure before the change takes effect. Any personal data collected prior to your closure request will continue to be subject to the retention obligations described in Section 8.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, or wish to exercise any of your data rights as described in Section 10, please contact hz77 through the following channel:

When submitting a data rights request, please include your registered hz77 username and the email address associated with your account so that hz77 can verify your identity and locate your records efficiently. hz77 does not charge a fee for processing data rights requests submitted in good faith.