hz666 Privacy Policy

hz666 ("we", "us", "our") operates Pakistan's premier online gaming reserve at hz666.app. We are committed to protecting the personal information of every individual who accesses our Platform — whether as a registered Player, a visitor browsing our content, or a prospective member exploring what hz666 has to offer.

This Privacy Policy ("Policy") sets out in full and transparent terms: what personal data hz666 collects from you, the lawful purposes and legal bases under which that data is processed, how it is stored and secured, the circumstances under which it may be disclosed to third parties, and the rights you have in relation to your own data. This Policy applies to all services, games, payment functions, and communication channels available through the hz666 Platform.

By registering an account, making a deposit, or continuing to use the hz666 Platform after the effective date of this Policy, you acknowledge that you have read, understood, and accepted the data practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform and may request account closure by contacting [email protected].

This Policy should be read alongside the hz666 Terms & Conditions and Responsible Gaming page, both of which form part of your agreement with us when you use the Platform.

For the purposes of this Policy, the data controller responsible for the personal information collected and processed through the hz666 Platform is hz666 Operations, the entity operating hz666.app under applicable international gaming licensing standards.

As data controller, hz666 Operations determines the purposes for which personal data is collected and the manner in which it is processed. All data processing activities carried out by third-party service providers on behalf of hz666 are governed by data processing agreements that require those providers to process personal data solely on hz666's documented instructions, in accordance with applicable data protection standards.

If you have any questions, concerns, or requests relating to your personal data or this Policy, you may contact the hz666 data team via the following channel. Note that hz666 does not operate a telephone support line; all data-related correspondence is handled via email only.

hz666 collects personal data across several categories, depending on the nature of your interaction with the Platform. The following table sets out the categories of data collected, examples within each category, and the primary context in which that data is gathered.

hz666 does not collect or store sensitive categories of personal data — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers — unless such data forms part of a government-issued identity document submitted for KYC purposes, in which case only the document reference number and verification outcome are retained.

hz666 collects your personal data through the following channels and mechanisms:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, submit a support request, or configure responsible gaming settings, you directly provide us with personal data.
• Automated technical collection: When you visit or use the hz666 Platform, technical data including IP address, device identifiers, session timestamps, and navigation paths is automatically collected via server logs and first-party cookies.
• Payment processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, our payment processing partners transmit transaction confirmation data and masked payment identifiers to hz666's systems for reconciliation and AML compliance purposes.
• Third-party identity verification providers: Where KYC verification is carried out via an integrated identity verification service, that provider transmits a verification outcome and associated reference data to hz666.
• Responsible gaming monitoring systems: hz666's internal platform systems monitor gaming activity data continuously to support responsible gaming obligations, including detecting patterns consistent with problem gambling behaviour.
• Communications you initiate: Any email, support ticket, or chat message you send to hz666 is stored as a communications record associated with your account.

hz666 does not purchase third-party marketing lists or obtain personal data from data brokers. All data collected by hz666 is gathered directly from your interactions with the Platform or from service providers acting on hz666's instructions in connection with the delivery of Platform services.

hz666 processes your personal data only for specific, documented purposes. Each processing activity is carried out on one of the following legal bases: contractual necessity (processing required to deliver the services you have requested), legal obligation (processing required for compliance with AML, KYC, and gaming regulatory requirements), legitimate interests (processing necessary for hz666's operational and security purposes, balanced against your privacy rights), or consent (where explicitly obtained).

hz666 does not use your personal data for automated individual decision-making that produces significant legal effects — such as automated account closure decisions — without human review. Responsible gaming interventions triggered by automated monitoring are always subject to human oversight before any account restriction is applied.

hz666 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data may be shared with the following categories of recipients, strictly on the basis outlined below:

• Payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank): Transaction data necessary to process deposits and withdrawals is shared with the relevant payment provider. Each provider operates under its own privacy policy and applicable Pakistani financial regulations.
• Identity verification providers: Identity documents and associated data submitted for KYC verification are processed by contracted third-party verification services operating under strict data processing agreements.
• Gaming technology and software providers: Game outcome data and session metadata may be shared with hz666's licensed game content providers for RNG audit, game performance, and technical support purposes.
• Fraud and AML screening services: Transaction and identity data may be cross-referenced against watchlists and fraud databases operated by contracted compliance service providers to fulfil hz666's AML obligations.
• Regulatory and licensing authorities: hz666 may be required by its licensing authority to disclose player account data, transaction records, or gaming activity data as part of regulatory audits or compliance reporting.
• Law enforcement and government authorities: hz666 will disclose personal data to competent law enforcement, judicial, or governmental authorities where required by applicable law, court order, or where hz666 has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or imminent harm.
• Professional advisers: Legal, accounting, and audit professionals engaged by hz666 may access personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.

The hz666 Platform uses first-party cookies and similar tracking technologies to support core Platform functionality, maintain session security, and collect anonymised analytics data that helps us improve the user experience for players across Pakistan — from Karachi to Lahore, Islamabad to Faisalabad.

hz666 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without rendering the Platform inaccessible.
• Functional cookies: Remember your language preferences, responsible gaming settings, and display configurations to provide a consistent experience across sessions.
• Analytics cookies: Collect anonymised, aggregated data about how Players navigate the Platform — which pages are visited, which games are accessed, and where sessions end. This data is used exclusively for Platform improvement and is not shared with advertising networks.
• Security cookies: Support hz666's fraud detection and bot-prevention systems by recording technical fingerprinting data tied to your session.

hz666 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on the Platform. You may manage cookie preferences through your browser settings at any time; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform. Detailed cookie settings are available via the cookie preference panel displayed on your first visit to hz666.app.

hz666 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained beyond the standard period due to an active regulatory investigation, legal proceedings, or unresolved dispute, that data will be preserved until the matter is fully resolved, after which standard deletion procedures apply.

You hold the following rights in relation to the personal data hz666 holds about you. To exercise any of these rights, submit a written request to [email protected]. hz666 will acknowledge your request within 48 hours and will respond substantively within 30 calendar days, or notify you of any extension where the complexity of the request warrants additional processing time.

• Right of Access: You have the right to request a copy of the personal data hz666 holds about you, along with information about the purposes for which it is processed, the recipients with whom it has been shared, and the retention periods applied.
• Right to Rectification: If any personal data hz666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. Minor corrections (e.g., email address updates) can be made directly in your account settings without a formal request.
• Right to Erasure: You may request that hz666 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (where consent was the basis), or where you object to processing and hz666 has no overriding legitimate grounds to continue. Note that erasure requests cannot override hz666's legal obligations to retain AML and KYC records for the statutory period.
• Right to Restriction of Processing: You may request that hz666 restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data is contested or a legitimate interests objection is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on hz666's legitimate interests, including profiling for responsible gaming purposes. hz666 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent — for example, receiving promotional communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

hz666 implements a layered, defence-in-depth approach to personal data security. The following technical and organisational measures are applied across all systems that store or process personal data:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the hz666 Platform is encrypted in transit using industry-standard TLS 1.2 or higher. Plain-text connections are not permitted.
• Data encryption at rest: All personal data stored in hz666's databases — including identity records, KYC documents, and financial transaction logs — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within hz666's systems is restricted on a strict need-to-know basis, enforced via role-based access controls (RBAC) and multi-factor authentication (MFA) for all staff with data access privileges.
• Intrusion detection and monitoring: hz666's infrastructure is subject to continuous automated security monitoring, with anomaly detection systems configured to flag and escalate unusual access patterns in real time.
• Third-party security assessments: hz666 engages independent security professionals to carry out periodic vulnerability assessments and penetration testing of its Platform infrastructure.
• Incident response: hz666 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, hz666 will notify affected Players and, where required, the relevant regulatory authority within the timeframes prescribed by applicable law.

While hz666 implements robust security measures, no online platform can guarantee absolute immunity from security incidents. You are responsible for maintaining the security of your own account credentials, including enabling two-factor authentication (2FA) in your account settings. Any suspected unauthorised access should be reported immediately to [email protected].

If you have reason to believe that a person under 21 has registered an hz666 account or submitted personal data to the Platform, please notify hz666 immediately at [email protected] with the subject line "Minor Account Report". hz666 will investigate the report and take appropriate action, including account suspension and data deletion, within 48 hours of receiving a credible report.

hz666 strongly recommends that adults sharing devices with minors make use of parental control software and device-level content filtering tools to prevent underage access to online gaming platforms. hz666 actively supports responsible gaming and the protection of vulnerable individuals, including minors, in line with its obligations under its international gaming licence.

hz666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law or regulatory requirements, new Platform features, or updated security measures. When material changes are made, hz666 will notify registered Players via the email address associated with their account and will display a prominent notice on the Platform prior to the changes taking effect.

The effective date of the current version of this Policy is displayed at the top of this page and in the version bar below the navigation. Continued use of the hz666 Platform following the effective date of an updated Policy constitutes acceptance of the revised terms. If you do not agree to an updated Policy, you must cease using the Platform and may request account closure under the Terms & Conditions.

All prior versions of this Policy are retained by hz666 for internal compliance records. If you require a copy of a prior version for any reason, submit your request to [email protected] referencing the version number and date you require.

For all privacy-related enquiries, data rights requests, or concerns about how hz666 handles your personal data, please contact the hz666 data team directly. hz666 does not operate a telephone support line; all privacy and data protection correspondence must be submitted via email to ensure a properly documented and auditable response trail.

hz666 serves players across Pakistan, including in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other cities. Our support team is equipped to handle privacy enquiries from Pakistani players in plain, accessible English and will treat all data rights requests with the same priority as account support issues.