hz555 Privacy Policy – How We Handle Your Data

1. Overview

This Privacy Policy applies to all services provided by hz555 through the website hz555.ws and any related mobile or web-based applications. hz555 is the data controller responsible for the personal information you provide to us or that we collect when you use our platform.

We built hz555 specifically for Pakistani players, and we understand that data privacy is something our users take seriously. Whether you are depositing via Easypaisa, placing a bet on a Premier League match, or earning Loyalty Points in our VIP Club, hz555 only collects the data it actually needs — and treats it with the care it deserves.

This policy is written to be clear and readable. If any section is confusing or you have a question that is not answered here, you can contact us at support@hz555.ws and our team will get back to you with a straight answer.

2. What Personal Data We Collect

hz555 collects personal data in several ways — information you provide directly, information generated by your use of the platform, and in some cases information from third parties as part of our verification processes.

Information You Provide to hz555:

• Full legal name, date of birth, and gender as provided during registration.
• Contact information: email address, mobile phone number, and residential address.
• Identity documents: CNIC, passport, or other government-issued ID submitted for verification purposes.
• Proof of address documents when required for enhanced verification.
• Payment method details — for example, the mobile wallet number associated with your Easypaisa or JazzCash account, or bank account details for IBFT withdrawals. Full card numbers are never stored by hz555 — they are handled entirely by our certified payment processors.
• Communications you send to hz555 support — including live chat transcripts, emails, and feedback forms.
• Responses to surveys, promotions, or bonus campaigns you choose to participate in.

Information Collected Automatically:

• Device information: device type, operating system, browser type and version, and unique device identifiers.
• IP address and approximate geolocation derived from your IP address.
• Session data: pages visited on hz555, time spent on each section, games played, bets placed, and navigation patterns.
• Log data: server logs recording access times, error events, and API calls made during your session.
• Cookie data as described in Section 9 of this policy.

Information from Third Parties:

• Identity verification data from KYC (Know Your Customer) service providers where hz555 uses a third-party verification service to confirm document authenticity.
• Fraud and risk signals from payment processors and financial crime prevention services.
• Publicly available information relevant to account investigations, such as sanctions list checks.

3. How hz555 Uses Your Personal Data

Every piece of data collected by hz555 has a specific purpose. We do not collect information speculatively or hold data without a clear reason. The table below summarises the main ways hz555 uses your personal information.

hz555 does not use your data to build advertising profiles for sale to third parties. We do not share your browsing behaviour or gaming activity with social media platforms, advertising networks, or data brokers.

4. Legal Basis for Processing

hz555 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you as an hz555 account holder — including running your account, processing your bets, and handling your deposits and withdrawals.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) requirements, identity verification obligations, and financial record-keeping rules.
• Legitimate interests: Processing necessary for hz555's legitimate business interests — including fraud prevention, platform security, and product improvement — where those interests are not overridden by your rights.
• Consent: Processing based on your explicit opt-in — most commonly for marketing communications and optional personalisation features. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing that took place before withdrawal.

5. When hz555 Shares Your Data

hz555 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: To complete deposits and withdrawals, hz555 shares relevant transaction data with payment service providers including Easypaisa, JazzCash, NayaPay, SadaPay, and card processing partners. These providers are contractually bound to process your data only for the purpose of completing the transaction.
• Identity verification partners: Where hz555 uses a third-party KYC provider to verify identity documents, your ID data is shared with that provider solely for verification purposes. KYC providers do not retain your documents beyond the verification process.
• Fraud prevention services: hz555 shares risk signals — such as IP addresses and device fingerprints — with fraud detection platforms to identify and prevent unauthorised account access and financial crime.
• Legal and regulatory authorities: hz555 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law or a valid legal order. Where legally permitted, hz555 will notify affected users of such disclosures.
• Corporate restructuring: In the event of a merger, acquisition, or sale of hz555 or its assets, personal data may be transferred to the acquiring entity. Users would be notified in advance of any such transfer and given the opportunity to close their accounts.
• Professional advisors: hz555 may share data with legal, audit, or financial advisors who are bound by confidentiality obligations and process data solely on our instruction.

6. Payment Data and PKR Transactions

Because hz555 operates entirely in Pakistani Rupees (PKR), all payment data relates to Pakistani payment infrastructure. Here is specifically how hz555 handles payment-related personal data:

Mobile Wallet Accounts (Easypaisa, JazzCash, NayaPay, SadaPay): hz555 stores the mobile wallet number associated with your account for the purpose of processing withdrawals. This number is linked to your hz555 account and verified to match the account name. hz555 does not store wallet PINs or passwords — these are entered directly on the payment provider's interface.

Bank IBFT Transfers: When you request a withdrawal via bank transfer, hz555 collects your bank account number, bank name, and account title. This information is used solely to process the specific withdrawal and is stored in encrypted form in hz555's financial records for the legally required retention period.

Visa/Mastercard: Card payments on hz555 are processed through certified PCI-DSS compliant payment gateways. hz555 does not store your full card number, CVV, or expiry date on its servers. The payment gateway may tokenise your card for future transactions, subject to your consent.

7. How Long hz555 Keeps Your Data

hz555 retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law. The general retention principles are as follows:

• Active accounts: hz555 retains all account and transaction data for the duration your account is active on the platform.
• Closed accounts: Following account closure, hz555 retains account records — including identity verification documents and transaction history — for a minimum of five years. This retention period is required by anti-money laundering regulations and financial record-keeping obligations.
• Support communications: Chat logs and email correspondence with hz555 support are retained for two years following the closure of the relevant support case.
• Marketing data: If you opt out of marketing communications from hz555, we retain a suppression record of your opt-out preference indefinitely to ensure we do not send you further marketing. We do not retain any other marketing profile data after opt-out.
• Technical logs: Server and access logs are retained for 90 days for security and debugging purposes, then deleted or anonymised.
• Cookies and session data: Session cookies expire when you close your browser. Persistent cookies have a maximum lifespan of 12 months unless renewed by a return visit.

When the retention period for a particular category of data expires, hz555 deletes or anonymises that data in a manner that makes it impossible to re-identify you from the remaining records.

8. How hz555 Protects Your Data

hz555 takes data security seriously and implements a range of technical and organisational measures to protect your personal information against unauthorised access, accidental loss, alteration, or disclosure.

• SSL/TLS Encryption: All data transmitted between your browser or app and the hz555 servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this encryption is active during your session.
• Password Hashing: Your hz555 account password is stored using a secure one-way hashing algorithm. hz555 staff cannot read your password — only reset it. Never share your password with anyone, including hz555 support agents.
• Two-Factor Authentication (2FA): hz555 strongly recommends enabling 2FA on your account. With 2FA active, a second verification step is required when logging in from a new device or location.
• Access Controls: Internal access to hz555 player data is restricted on a strict need-to-know basis. Support agents can access your account details for support purposes but cannot view or modify your payment credentials.
• Infrastructure Security: hz555 servers are hosted in secure data centres with physical access controls, redundant power, and continuous monitoring. Regular security audits and penetration tests are performed on the platform.
• Fraud Monitoring: Automated systems monitor account activity on hz555 around the clock for patterns consistent with unauthorised access or fraudulent behaviour. Suspicious activity triggers immediate alerts and account protection measures.

9. Cookies and Tracking Technologies

hz555 uses cookies and similar technologies to make the platform work correctly, remember your preferences, and understand how players use the site so we can improve it. Here is a breakdown of the cookie types used on hz555:

• Essential Cookies: These are required for hz555 to function. They manage your login session, keep your bet slip active during a browsing session, and maintain security tokens. You cannot disable essential cookies without breaking basic platform functionality.
• Preference Cookies: These remember your settings on hz555 — such as your preferred language, odds format, or display preferences. They are set when you save preferences and persist across sessions so you do not have to reset them every time you visit.
• Analytics Cookies: hz555 uses anonymised analytics data to understand which parts of the platform are used most, where players encounter difficulties, and how gameplay patterns vary across different device types. This data is aggregated and cannot be used to identify individual players.
• Security Cookies: These store device fingerprint tokens and session integrity data to detect unusual login activity. They are a key part of the fraud prevention infrastructure on hz555.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Blocking essential cookies will prevent you from logging in to hz555 and using the platform. Blocking analytics cookies has no effect on your gaming experience.

hz555 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on its platform. Your activity on hz555 is not shared with social media platforms through cookie technology.

10. Your Privacy Rights

As an hz555 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at support@hz555.ws. We will respond within 30 days of receiving your request.

11. Children and Minors

hz555 strictly prohibits the use of its platform by anyone under the age of 18. hz555 does not knowingly collect personal data from minors. The platform requires all users to confirm their age at registration, and identity verification is required for all accounts before withdrawals are processed.

If hz555 discovers or is notified that a minor has registered and used the platform, all associated data will be deleted immediately, the account will be closed, and any funds deposited by the minor will be returned to the original payment method to the extent technically possible.

If you are a parent or guardian and believe your child has registered on hz555, please contact us immediately at support@hz555.ws. We will act on your notification within 24 hours.

12. Contact and Data Queries

For any questions about this Privacy Policy, requests to exercise your data rights, or concerns about how hz555 is handling your personal information, please contact us through the following channel:

Email: support@hz555.ws
Subject line: Privacy Request — [Your Account Username]
Response time: We aim to respond to all privacy-related queries within 2 working days and to fulfil all data access, deletion, and portability requests within 30 days.

When contacting hz555 about a data rights request, please include your registered email address and a brief description of your request. We may need to verify your identity before processing the request to ensure your data is not disclosed to an unauthorised party.

hz555 takes privacy complaints seriously. If you are not satisfied with our response to a privacy concern, we encourage you to escalate the matter through our formal complaints process. Full details of the complaints process are available from hz555 support.

This Privacy Policy was last updated on 1 January 2025. Any material changes to the policy will be communicated to registered hz555 users by email and via an on-screen notification on next login. The current version of the policy is always available at hz555.ws/privacy-policy.