hz777 Privacy Policy

Introduction

hz777 ("hz777", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers with, or uses the hz777 online betting and casino platform accessible at hz777.io (the "Platform"). This Privacy Policy sets out in clear and comprehensive terms the types of personal data we collect, the purposes for which we process it, the conditions under which we may share it, and the rights available to members and visitors in relation to their data.

This Privacy Policy applies to all personal data processed by hz777 in connection with the Platform, including data collected through the website, any mobile-optimised version of the Platform, and communications between hz777 and its members. It applies to all current and former members, as well as to visitors who access the Platform without registering.

This Policy should be read alongside the hz777 Terms and Conditions, which governs the contractual relationship between you and hz777, and the hz777 Responsible Gaming Policy. Where there is any inconsistency between this Privacy Policy and the Terms and Conditions on a privacy matter, this Privacy Policy shall prevail.

Data Controller

For the purposes of applicable data protection law, hz777 is the data controller in respect of the personal data of its members and visitors. As data controller, hz777 determines the purposes and means of processing personal data collected through the Platform.

If you have any questions about how hz777 processes your personal data, or if you wish to exercise any of the rights described in Section 11, you may contact hz777's data protection point of contact using the details provided in Section 16 of this Policy.

Data We Collect

hz777 collects the following categories of personal data from members and visitors. The data collected depends on whether you are a registered member or a visitor, and on how you interact with the Platform.

hz777 does not intentionally collect Sensitive Personal Data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) except where strictly required for identity verification or responsible gaming purposes, and only with explicit member consent where required by applicable law.

How We Collect Data

hz777 collects personal data through the following methods:

• Direct Interactions: Data you provide when completing the registration form, updating your account profile, submitting a deposit or withdrawal request, contacting customer support, or responding to a survey or promotion.
• Automated Technologies: Data collected automatically when you access and use the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes Technical Data and Usage Data as described in Section 3.
• Third-Party Sources: Data received from third-party identity verification providers (where you consent to the verification process), payment processors including bKash, Nagad, Rocket, and Upay (transaction confirmation data), and fraud prevention services (risk-score data used to protect the integrity of the Platform).
• Responsible Gaming Tools: Data generated when you interact with responsible gaming features, including deposit limit settings, self-exclusion requests, and cooling-off period applications.

How We Use Your Data

hz777 uses the personal data it collects for the following purposes:

• Account Registration and Management: To create and maintain your hz777 member account, verify your identity, and administer your account in accordance with the hz777 Terms and Conditions.
• Processing Transactions: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, and to maintain accurate financial records for each member account.
• Providing the Service: To operate the sportsbook, live casino, slots, bingo, and fishing arcade services on the Platform, including delivering bet confirmations, game results, and account balance updates.
• Customer Support: To respond to support enquiries, investigate complaints, and resolve disputes relating to bets, transactions, or account status.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, including anti-money-laundering (AML) checks, know-your-customer (KYC) requirements, fraud prevention obligations, and any reporting requirements imposed by competent authorities.
• Responsible Gaming: To monitor member activity for indicators of problem gambling behaviour, apply protective measures where required, and administer member-initiated responsible gaming tools such as deposit limits and self-exclusion.
• Platform Security: To detect and prevent fraud, money laundering, match-fixing, and other forms of prohibited conduct as defined in the hz777 Terms and Conditions.
• Platform Improvement: To analyse aggregate usage patterns and technical performance data in order to improve the functionality, reliability, and user experience of the Platform.
• Communications: To send you transactional communications (bet confirmations, deposit receipts, withdrawal notifications, account security alerts) and, where you have opted in, promotional communications about hz777 offers and services.

Legal Basis for Processing

hz777 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between hz777 and the member — including account registration, transaction processing, and service delivery — is carried out on the basis that it is necessary for the performance of that contract.
• Legal Obligation: Processing carried out to comply with hz777's legal obligations, including AML/KYC checks, fraud reporting, and data retention requirements mandated by applicable law.
• Legitimate Interests: Processing carried out in pursuit of hz777's legitimate business interests where those interests are not overridden by the member's data protection rights. This includes Platform security monitoring, fraud prevention, aggregate analytics, and responsible gaming risk monitoring.
• Consent: Where hz777 relies on consent as the legal basis for a specific processing activity (for example, sending optional marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Data Sharing & Disclosure

hz777 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. hz777 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and is bound by applicable Bangladeshi financial regulations.
• Identity Verification Providers: Third-party KYC and AML service providers may process identity data (such as copies of photo ID) on hz777's behalf to carry out verification checks. These providers act as data processors under hz777's instruction.
• Game Content Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data necessary to operate their games on the Platform. This is limited to technical session identifiers and game outcome data.
• Fraud and Security Services: Specialist fraud prevention and cybersecurity providers may process Technical Data and Transaction Data on hz777's behalf for the purpose of detecting and preventing prohibited conduct.
• Legal and Regulatory Authorities: hz777 may disclose personal data to competent courts, law enforcement agencies, or regulatory authorities where required or permitted by applicable law, or where hz777 reasonably believes that disclosure is necessary to protect the rights, property, or safety of hz777, its members, or third parties.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of hz777's business, member personal data may be transferred to the acquiring entity as part of the transaction, subject to the same privacy protections described in this Policy.

All third-party data processors engaged by hz777 are required to process personal data only on hz777's documented instructions, to implement appropriate technical and organisational security measures, and to comply with applicable data protection law.

International Data Transfers

Some of the third-party service providers engaged by hz777 — including certain game content providers and cloud infrastructure providers — may process personal data outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection, hz777 will implement appropriate safeguards to protect the data, which may include standard contractual clauses or other recognised transfer mechanisms.

By using the hz777 Platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh for the purposes described in this Policy, subject to the safeguards described above.

Data Retention

hz777 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal retention obligations that may require data to be kept for a specified minimum period. The following general retention periods apply:

• Active Member Accounts: Personal data associated with an active member account is retained for the duration of the membership and for a period of up to five (5) years after the account is closed, in order to comply with AML record-keeping requirements and to handle any post-closure disputes or legal claims.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years following the date of the transaction, in accordance with applicable financial regulations.
• Customer Support Records: Communications relating to support requests and complaints are retained for up to three (3) years from the date of the final communication, to facilitate the resolution of any subsequent dispute.
• Technical and Usage Data: Anonymised aggregate analytics data may be retained indefinitely. Identifiable Technical Data (such as IP address logs) is retained for up to twelve (12) months and then deleted or anonymised.
• Responsible Gaming Records: Self-exclusion records and related responsible gaming data are retained for the duration of any active exclusion and for a minimum of five (5) years thereafter, to prevent circumvention of exclusion measures.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for analytical purposes.

Cookies & Tracking Technologies

hz777 uses cookies and similar tracking technologies (including web beacons and local storage objects) on the Platform. Cookies are small data files placed on your device when you visit the Platform. They enable the Platform to recognise your device, maintain your logged-in session, and remember your preferences between visits.

hz777 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as session management, security token validation, and load balancing. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences, such as language settings and display configurations, to provide a more personalised experience on return visits.
• Analytics Cookies: hz777 uses aggregate analytics tools to understand how visitors navigate and use the Platform. Analytics data is processed in anonymised or pseudonymised form and is not used to identify individual members.

hz777 does not use advertising cookies or cross-site tracking cookies that build behavioural profiles for third-party advertising networks. Your browser settings may allow you to block or delete cookies; however, disabling strictly necessary cookies may affect your ability to log in or use certain Platform features.

Your Rights

Subject to applicable law, hz777 members and visitors have the following rights in relation to their personal data:

• Right of Access: You have the right to request a copy of the personal data hz777 holds about you, together with information about how that data is being processed.
• Right to Rectification: You have the right to request that hz777 correct any inaccurate or incomplete personal data held about you.
• Right to Erasure: You have the right to request that hz777 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to hz777's legal retention obligations.
• Right to Restrict Processing: You have the right to request that hz777 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of hz777's legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to processing of your personal data that is based on hz777's legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where hz777 processes your data on the basis of consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please submit a written request to the hz777 customer support team using the contact details in Section 16. hz777 will respond to all data rights requests within thirty (30) calendar days of receipt. hz777 may request proof of identity before processing a data rights request to prevent unauthorised disclosure.

Children & Minors

The hz777 Platform is strictly intended for adults aged 21 years and over. hz777 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If hz777 discovers that personal data belonging to a person under 21 has been collected — for example, through a misrepresentation at registration — hz777 will immediately close the associated account, void any transactions, return any genuine deposits (net of any bonus funds) to the verified payment source, and securely delete all personal data associated with the underage member.

If you believe that hz777 may have inadvertently collected data belonging to a minor, please contact the hz777 customer support team immediately using the details in Section 16 so that corrective action can be taken without delay.

Security Measures

hz777 implements a range of technical and organisational security measures to protect member personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between member devices and the Platform;
• Cryptographic hashing of member passwords — hz777 staff cannot view your password in plain text;
• Multi-factor authentication options available to members for account login;
• Role-based access controls limiting hz777 staff access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Secure, access-controlled data storage environments with audit logging for all data access events;
• Incident response procedures for the prompt detection, investigation, and remediation of any suspected data breach.

Notwithstanding these measures, no online platform can guarantee absolute security. hz777 strongly recommends that members choose a strong, unique password for their hz777 account, enable any available multi-factor authentication, and report any suspected unauthorised access to their account to customer support immediately.

Third-Party Links

The hz777 Platform may contain references to third-party payment providers such as bKash and Nagad. If you navigate away from the hz777 Platform to a third-party website or application, please be aware that hz777 has no control over the content, privacy practices, or data processing activities of that third party. This Privacy Policy does not apply to third-party websites or services. hz777 recommends that you review the privacy policy of any third-party service before submitting personal data to it.

Policy Updates

hz777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or hz777's data processing practices. Where a change is material — meaning it significantly affects how hz777 processes member personal data or the rights available to members — hz777 will provide reasonable advance notice by posting a prominent notice on the Platform and, where appropriate, by sending a message to the member's registered contact details before the change takes effect.

The effective date at the top of this Policy indicates when the current version was last updated. Your continued use of the hz777 Platform after a Policy update constitutes your acknowledgement of the updated Policy. If you do not accept the updated Policy, you should cease using the Platform and may request account closure in accordance with the hz777 Terms and Conditions.

The most current version of this Privacy Policy will always be accessible on the hz777 Privacy Policy page at hz777.io/privacy-policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to hz777's processing of your personal data, please contact the hz777 data protection point of contact using the following details:

• Email: [email protected] (plain text — this is not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Response Target: hz777 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days
• Language: All privacy-related correspondence is handled in English

When submitting a data rights request, please include your registered hz777 username, a clear description of your request, and a copy of a government-issued photo ID to allow hz777 to verify your identity before disclosing or modifying any personal data. Identity verification is a necessary step to protect your data from being accessed or altered by unauthorised parties.