At hz999, protecting the personal data of our Pakistani players is a fundamental commitment. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold over your own data.
Six principles that guide how hz999 handles your personal information every single day
All personal and financial data on the hz999 platform is protected by industry-standard TLS encryption in transit and AES-256 encryption at rest. Your hz999 account credentials are hashed and never stored in plain text.
hz999 does not sell, rent, or trade your personal information to third-party marketers or data brokers. Your data is used solely to operate and improve the hz999 service for you.
You have the right to access, correct, and request deletion of your personal data held by hz999. Submit a data request at any time through the hz999 support team and we will respond within 30 days.
hz999 collects only the personal data that is strictly necessary to provide our gaming and betting services, comply with anti-money laundering obligations, and fulfil responsible gaming duties.
hz999 retains personal data only for as long as necessary. Account data is retained for a minimum of five years following account closure to meet regulatory requirements, after which it is securely deleted or anonymised.
Whenever hz999 makes a material change to this Privacy Policy, registered players are notified by email or in-platform message at least seven days before the change takes effect. No silent policy rewrites.
hz999 ("hz999", "we", "us", "our") is the operator of the online gaming and sports betting platform accessible at hz999.ws and any associated mobile applications or subdomains (collectively, the "hz999 Platform"). hz999 is the data controller responsible for the personal data you provide when using the hz999 Platform.
This Privacy Policy applies to all users of the hz999 Platform, with particular relevance to players based in Pakistan — our primary market. It governs the collection, processing, storage, sharing, and deletion of personal data in connection with your hz999 account and all activities conducted through it.
This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy. By registering or using the hz999 Platform, you confirm that you have read and understood this Privacy Policy.
hz999 collects the following categories of personal data, depending on how you interact with the hz999 Platform:
hz999 collects personal data through the following means:
The majority of personal data hz999 holds is information you provide directly, including: completing the hz999 registration form; uploading KYC documents; making deposits or withdrawal requests; contacting hz999 customer support via live chat or email; participating in surveys or promotions; and updating your hz999 account profile settings.
When you access the hz999 Platform, certain technical data is collected automatically. This includes your IP address, device fingerprint, browser configuration, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies. See Section 7 (Cookies & Tracking) for more detail.
hz999 may receive data about you from the following third-party sources:
hz999 processes your personal data for the following specific purposes:
| Purpose | Data Used | Necessity |
|---|---|---|
| Account registration and management | Identity, contact data | Essential |
| Age and identity verification (21+) | DOB, CNIC, KYC documents | Legal obligation |
| Deposits and withdrawals | Financial, transaction data | Essential |
| Anti-money laundering (AML) compliance | Financial, KYC, transaction data | Legal obligation |
| Responsible gaming monitoring | Gaming activity, session data | Legal obligation |
| Fraud prevention and security | Technical, device, IP data | Legitimate interest |
| Customer support | Identity, contact, account data | Essential |
| Dispute resolution | Gaming activity, transaction logs | Legitimate interest |
| Platform improvement and analytics | Anonymised/aggregated usage data | Legitimate interest |
| Marketing communications | Contact data, preferences | Consent (opt-in only) |
hz999 will not process your personal data for purposes incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis.
hz999 processes personal data on one or more of the following legal bases depending on the specific processing activity:
hz999 does not sell your personal data. hz999 may share your personal data with the following categories of recipient in the circumstances described:
To process deposits and withdrawals, hz999 shares relevant transaction data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency payment processors. These providers act as independent data controllers for their own processing and are bound by applicable Pakistani financial regulations.
To fulfil KYC and AML obligations, hz999 may share identity document data with certified identity verification service providers. These providers are contractually bound to process data only for the purposes of identity checking on behalf of hz999.
Third-party game providers whose titles appear on the hz999 Platform (live casino providers, slot studios, e-sports data providers) may receive game session data for the purpose of game delivery, bet settlement, and technical support. These providers are contractually restricted from using this data for their own marketing purposes.
hz999 will disclose personal data to gaming regulators, financial intelligence authorities, or law enforcement agencies where required to do so by law, court order, or as part of hz999's AML reporting obligations. hz999 is legally required to file suspicious activity reports (SARs) where applicable without notifying the subject of the report.
hz999 may share data with its legal advisers, auditors, and accountants where strictly necessary for the provision of professional services, subject to professional confidentiality obligations.
The hz999 Platform uses cookies and similar tracking technologies to ensure core functionality, improve user experience, and gather analytics data. The categories of cookies used by hz999 are as follows:
These cookies are essential for the hz999 Platform to function. They enable session authentication, security token validation, and load balancing. These cookies cannot be disabled without breaking core platform functionality.
Functional cookies remember your preferences, such as language settings, preferred game lobby view, and last-used payment method (for display purposes only — no financial data is stored in cookies). Disabling these cookies may result in a less personalised experience.
hz999 uses first-party analytics cookies to understand how players navigate the Platform, which games are most visited, and where technical errors occur. This data is aggregated and anonymised before analysis and is used solely to improve the hz999 service.
You can control cookie settings through your browser. Most modern browsers allow you to refuse some or all cookies, delete existing cookies, or receive alerts before a cookie is placed. Disabling strictly necessary cookies will impair your ability to use the hz999 Platform.
hz999 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any legal or regulatory retention obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Regulatory / AML |
| KYC documents (CNIC, proof of address) | Duration of account + 5 years post-closure | Legal obligation |
| Transaction records | 7 years from transaction date | Financial regulation |
| Gaming activity logs | Duration of account + 2 years post-closure | Dispute resolution |
| Customer support communications | 3 years from last interaction | Legitimate interest |
| Marketing consent records | Until consent withdrawn + 1 year | Consent accountability |
| Technical/server logs | 90 days on rolling basis | Security / fraud |
Upon expiry of the applicable retention period, hz999 will securely delete or irreversibly anonymise the relevant personal data. Data subject to an ongoing legal investigation or regulatory inquiry will be retained until that matter is resolved, regardless of the standard retention period.
hz999 implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:
As a user of the hz999 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact hz999 at [email protected] with the subject line "Data Rights Request". hz999 will respond within 30 days.
You have the right to request a copy of all personal data hz999 holds about you, together with information about how it is processed. hz999 will provide this in a structured, commonly used, machine-readable format upon verified request.
If any personal data hz999 holds about you is inaccurate or incomplete, you have the right to request correction. Minor account data (display name, contact email) can be updated directly in your hz999 account settings. Legal name and CNIC corrections require documentary evidence.
You may request deletion of your personal data where: it is no longer necessary for the purposes for which it was collected; you withdraw consent and there is no other lawful basis; or the data has been unlawfully processed. hz999 may be unable to delete certain data where retention is required by law (e.g., AML records, transaction logs).
You may request that hz999 restricts processing of your personal data in certain circumstances — for example, while the accuracy of data is contested or while an objection is being assessed.
Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a portable format and, where technically feasible, to have it transmitted directly to another controller.
You have the right to object to processing based on hz999's legitimate interests, including profiling for fraud prevention. hz999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
Where hz999 processes data based on your consent (e.g., marketing emails, SMS promotions), you may withdraw consent at any time via the unsubscribe link in any marketing communication or by contacting hz999 support. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
The hz999 Platform is strictly restricted to individuals aged 21 years and above. hz999 does not knowingly collect personal data from individuals below this age threshold. hz999 employs date-of-birth verification at registration and KYC-based age verification for accounts where age cannot be confirmed from registration data alone.
If hz999 discovers that an account has been registered by or on behalf of a person under 21, the account will be immediately suspended, all bonus funds will be forfeited, and any net deposits will be returned to the original funding source following verification. Any personal data collected in connection with a confirmed underage account will be deleted promptly.
If you have reason to believe that a minor has registered an hz999 account, please contact us immediately at [email protected].
hz999 primarily stores and processes personal data on servers located in jurisdictions with recognised data protection frameworks. In cases where personal data is transferred to or accessed from jurisdictions outside your home country, hz999 ensures that appropriate safeguards are in place, including:
Third-party game providers and payment processors may be located outside Pakistan. hz999 conducts due diligence on all third-party processors to verify adequate data protection before engagement. Details of specific transfer safeguards are available upon request by emailing [email protected].
hz999 may send you promotional communications about bonuses, new games, special events, and platform updates. hz999 sends marketing communications only where you have opted in to receive them, either at registration or through your hz999 account notification preferences.
You can opt out of marketing communications at any time by:
Opting out of marketing communications will not affect essential service communications, such as deposit confirmations, withdrawal notifications, security alerts, and account verification messages. hz999 will continue to send these regardless of marketing preferences.
hz999 reserves the right to update this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, business practices, or platform features. The effective date at the top of this document will be updated to reflect the date of the most recent revision.
For material changes — those that significantly affect your rights or the way hz999 processes your data — hz999 will provide advance notice of at least seven (7) days via email to your registered address or via an in-platform notification. Your continued use of the hz999 Platform after the effective date of a revised Policy constitutes acceptance of the updated terms.
hz999 recommends that you review this Privacy Policy periodically. The current version is always available at hz999.ws/privacy-policy.
For any questions, concerns, or requests relating to this Privacy Policy or the way hz999 processes your personal data, please contact the hz999 Data team:
hz999 combines world-class games with local payment support, 24/7 Urdu-friendly assistance, and a Privacy Policy built on genuine transparency. Join thousands of Pakistani players already enjoying a safe and secure gaming experience.
21+ only. Play responsibly. hz999 promotes responsible gaming.