1. Introduction
This Privacy Policy ("Policy") is issued by hz999 ("we", "us", "our", "Platform") and applies to all personal data processed in connection with your use of the hz999 website at https://hz999.cam and any related services, features or communications (collectively, the "Service").
hz999 is an English-language online gaming information and services platform designed for Pakistani players. We take the privacy of our users seriously. This Policy explains in plain language what personal data we collect from users — including those in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and elsewhere in Pakistan — why we collect it, how we use it, with whom we may share it and what rights you have in relation to it.
This Policy should be read in conjunction with the Terms & Conditions and the Responsible Gambling policy, all of which together form the full agreement between you and hz999.
2. Definitions
In this Policy, the following terms carry the meanings set out below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information that identifies or can be used to identify a natural person, directly or indirectly — including but not limited to name, email address, IP address, device identifier and financial account details. |
| "Processing" | Any operation performed on Personal Data — including collection, storage, use, disclosure, erasure or any other form of handling. |
| "Data Controller" | hz999, as the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third-party service provider that processes Personal Data on behalf of hz999, subject to written data processing agreements. |
| "KYC" | Know Your Customer — the identity and age-verification process through which hz999 confirms the identity, age and payment-method ownership of Account holders. |
| "Cookies" | Small text files placed on your device by the hz999 platform to enable functionality, remember preferences and collect analytical data about platform usage. |
| "Consent" | A freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose. |
3. Personal Data We Collect
3.1 Registration & Account Data
When you create an hz999 account, we collect the following information:
- Full legal name;
- Date of birth;
- Residential address (including city and country — e.g., Karachi, Lahore, Islamabad);
- Email address;
- Phone number;
- Username and encrypted password;
- Account currency preference (e.g., PKR).
3.2 Identity Verification (KYC) Data
To comply with licensing obligations and prevent fraud, we may collect:
- Government-issued photo identity documents (e.g., CNIC, Passport, Driver's Licence);
- Proof of residential address (e.g., utility bill, bank statement);
- Proof of payment method ownership (e.g., mobile wallet screenshot, bank statement header);
- Selfie or video verification image where required by the KYC process.
3.3 Financial Data
When you make deposits or withdrawals, we collect transaction records including amounts, timestamps, payment method identifiers and transaction reference numbers. We do not store full payment card numbers on our servers. Where mobile wallet references (such as Easypaisa or JazzCash account identifiers) are provided, these are retained only for verification and reconciliation purposes.
3.4 Technical & Usage Data
When you access the Service, we automatically collect:
- IP address and approximate geolocation;
- Browser type, version and language settings;
- Device type, operating system and screen resolution;
- Pages visited, session duration, click-path data and referral URLs;
- Game activity logs, bet history and transaction history;
- Session tokens and authentication logs.
3.5 Communications Data
If you contact hz999 through Live Chat, email or the Help Centre, we retain a record of the communication — including the content of your query, the response provided, timestamps and the channel used. This applies whether you communicate in English or request assistance in Urdu.
3.6 Marketing Preferences
Where you have consented to receive promotional communications, we retain a record of that consent together with your email address and preferences regarding the types of promotions you wish to receive (e.g., cricket betting offers, casino promotions, PSL seasonal offers).
4. How We Collect Your Data
We collect Personal Data through the following means:
| Collection Method | Data Collected |
|---|---|
| Account registration form | Name, date of birth, email, phone, address, password |
| KYC verification process | Identity documents, proof of address, payment proof |
| Deposit and withdrawal cashier | Transaction amounts, method identifiers, reference numbers |
| Platform browsing and gameplay | IP address, device data, session data, bet history |
| Cookies and tracking technologies | Browsing behaviour, preferences, analytics |
| Customer support interactions | Communication content, query history, response records |
| Marketing opt-in | Email address, communication preferences |
5. Legal Basis for Processing
hz999 processes your Personal Data only where a valid legal basis exists. The primary legal bases we rely upon are:
- Contractual necessity: Processing required to provide you with the Service — including account management, transaction processing and KYC verification — pursuant to the agreement formed when you accept the Terms & Conditions.
- Legal obligation: Processing required to comply with applicable law — including anti-money laundering (AML) obligations, licensing requirements and fraud prevention duties.
- Legitimate interests: Processing carried out for our legitimate business interests where those interests are not overridden by your privacy rights — including platform security, fraud detection and operational improvement.
- Consent: Processing for purposes where consent is the appropriate legal basis — including sending marketing communications and setting non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6. How We Use Your Personal Data
hz999 uses Personal Data for the following purposes:
- Creating, managing and securing your Account;
- Verifying your identity and age for KYC compliance;
- Processing deposits, withdrawals and related payment transactions;
- Detecting and preventing fraud, money laundering and other prohibited conduct;
- Personalising your platform experience — including surfacing relevant sports markets (such as Pakistan cricket, PSL or ICC tournaments) based on your activity;
- Sending you account-related service communications (password resets, transaction confirmations, security alerts);
- Sending marketing communications where you have given consent;
- Analysing platform usage to improve functionality, user experience and content quality;
- Complying with legal and regulatory obligations;
- Enforcing the Terms & Conditions and resolving disputes.
7. Data Sharing & Disclosure
7.1 Service Providers (Data Processors)
hz999 shares Personal Data with third-party service providers who process it on our behalf under written data processing agreements. These providers are permitted to use the data only for the specific purpose for which it was shared. Categories of service provider include: identity verification and KYC service providers; payment processing partners; cloud hosting and infrastructure providers; fraud detection and security service providers; and customer support platform providers.
7.2 Legal and Regulatory Disclosure
hz999 may disclose Personal Data where required to do so by applicable law, court order, regulatory authority or law enforcement request. Where permitted, we will endeavour to notify you of any such disclosure.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring or sale of hz999's assets, Personal Data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments.
7.4 No Sale of Personal Data
8. International Data Transfers
hz999 operates under its international licensing jurisdiction, and Personal Data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, hz999 ensures that appropriate safeguards are in place — including contractual data protection clauses — to maintain standards equivalent to those described in this Policy.
Pakistani users should be aware that Pakistan does not currently have a comprehensive data protection law equivalent to, for example, the EU General Data Protection Regulation (GDPR). hz999's data protection commitments are defined by the standards applicable in its licensing jurisdiction and by the terms of this Policy.
9. Data Retention
hz999 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, subject to legal obligations that may require longer retention. General retention principles are:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Contractual obligation; AML/KYC legal requirement |
| KYC identity documents | 5 years from submission or account closure | Anti-money laundering legal requirement |
| Transaction records | 5 years from transaction date | Financial record-keeping legal requirement |
| Betting and gameplay logs | Duration of account + 2 years post-closure | Dispute resolution; regulatory compliance |
| Customer support records | 3 years from last interaction | Dispute resolution; service improvement |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent management; compliance audit trail |
When Personal Data is no longer required, it is securely deleted or anonymised in accordance with hz999's data deletion procedures.
10. Cookies & Tracking Technologies
hz999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns and — where you have consented — deliver personalised content. The types of cookies we use are described below.
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core hz999 Service, but some personalisation features may be affected.
11. Your Data Rights
Subject to applicable law and the specific circumstances of your request, you hold the following rights in relation to your Personal Data held by hz999:
Right of Access
Request a copy of the Personal Data we hold about you and information on how it is being processed.
Right to Rectification
Request correction of any inaccurate or incomplete Personal Data we hold about you without undue delay.
Right to Erasure
Request deletion of your Personal Data where there is no longer a legitimate purpose or legal obligation requiring its retention. Note that legal retention obligations (e.g., KYC, AML) may limit erasure in practice.
Right to Restriction
Request that we restrict the processing of your Personal Data in certain circumstances — for example, while an accuracy dispute is being resolved.
Right to Portability
Receive your Personal Data in a structured, machine-readable format and, where technically feasible, request that it be transmitted to another controller.
Right to Object
Object to processing based on legitimate interests, including profiling. Where processing is for direct marketing purposes, you have an absolute right to object at any time.
To exercise any of the above rights, please contact our support team at [email protected]. We will respond to all verified requests within a reasonable timeframe and in any event within the period required under applicable data protection law. We may need to verify your identity before processing a data rights request.
12. Children's Privacy
The hz999 Service is strictly limited to adults who are at least 18 years of age (or the higher minimum age required under the operator's licensing jurisdiction). hz999 does not knowingly collect Personal Data from any individual under the applicable minimum age. If we discover that Personal Data has been submitted by a minor, we will delete that data and close the associated account without delay.
13. Security Measures
hz999 implements a range of technical and organisational measures designed to protect Personal Data against unauthorised access, accidental loss, destruction or alteration. These measures include:
- SSL/TLS encryption for all data transmitted between your device and hz999 servers;
- Encrypted storage of sensitive account data, including passwords (stored as hashed values only);
- Access controls limiting staff access to Personal Data on a need-to-know basis;
- Multi-factor authentication options for Account access;
- Regular security audits and penetration testing of platform infrastructure;
- Incident response procedures for identifying, reporting and addressing data breaches.
Notwithstanding these measures, no data transmission or storage system can be guaranteed as 100% secure. Users are responsible for maintaining the confidentiality of their Account credentials and for reporting any suspected unauthorised access to hz999 support without delay.
14. Third-Party Links & Services
The hz999 platform may reference or describe third-party services — including payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — for informational context only. Where your interaction with such third-party services involves the transmission of Personal Data to those providers (for example, when completing a mobile wallet transaction), that data is governed by the relevant third party's own privacy policy. hz999 has no control over and accepts no responsibility for how third parties process your data.
15. Amendments to This Policy
hz999 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, data processing practices or platform functionality. Where changes are material, we will endeavour to notify you via the platform interface or to the email address registered on your Account in advance of the changes taking effect.
The "Last Reviewed" date displayed at the top of this page indicates when the Policy was most recently updated. Continued use of the Service following notification of an updated Policy constitutes acceptance of the revised terms. If you do not agree to the revised Policy, you should contact support to arrange closure of your Account.
16. Contact Us
For all data protection enquiries, privacy rights requests or concerns regarding this Privacy Policy, please contact hz999 using the following details:
Data Privacy Contact
Email: [email protected]
Please include "Privacy Request" in the subject line of your message, along with your registered email address and a brief description of your query. We will acknowledge your request within 5 business days. Support is available in English; Urdu-language assistance is available where offered.
No telephone support number is provided. For account-related queries, please use the Live Chat function available within the platform for the fastest response.