hzyz Privacy Policy — How We Handle Your Personal Data

1. Introduction

hzyz is an internationally operated online betting and casino platform built specifically for the Bangladesh market. As part of delivering our services — which include sports betting, live casino games, slot games, and BDT payment processing — we necessarily collect and process certain personal data belonging to our registered players and website visitors.

hzyz takes its data protection responsibilities seriously. This Policy is written in plain English to ensure that every player in Bangladesh can clearly understand what data we hold, why we hold it, and how they can exercise their rights in relation to it. This Policy applies to all data processing activities conducted by hzyz in connection with the operation of hzyz.onl and its associated services.

This Privacy Policy should be read alongside the hzyz Terms & Conditions and the Responsible Gaming policy, both of which are incorporated by reference into the overall framework governing your use of the Platform.

2. Data Controller

For the purposes of this Policy, hzyz acts as the data controller in respect of personal data collected from players and visitors to hzyz.onl. As data controller, hzyz is responsible for determining the purposes and means by which personal data is processed.

All data protection queries, access requests, and deletion requests should be directed to the hzyz data protection contact at [email protected]. We aim to respond to all data-related requests within thirty (30) calendar days of receipt.

3. Personal Data We Collect

hzyz collects the following categories of personal data from registered players and, in some cases, from unregistered visitors to hzyz.onl:

3.1 Registration Data

• Full legal name
• Date of birth
• Residential address in Bangladesh (city, district, postcode)
• Email address
• Mobile phone number
• Preferred username

3.2 Identity Verification (KYC) Data

• National Identity Card (NID) number and scan
• Passport number and scan (where applicable)
• Driving licence (where submitted as alternative ID)
• Utility bill or bank statement confirming residential address
• Source of funds documentation (where requested for enhanced due diligence)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers used for transactions)
• Bank account details submitted for bank transfer withdrawals
• Transaction amounts, timestamps, and reference numbers

3.4 Gaming & Betting Activity Data

• Betting history across all sports markets and casino games
• Game session duration and frequency data
• Bonus usage and wagering history
• Responsible gaming settings and limit configurations

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session login and logout timestamps
• Pages visited and features accessed during each session

3.6 Communications Data

• Content of support enquiries submitted to hzyz
• Records of email correspondence with the support team
• Feedback and survey responses (where voluntarily provided)

hzyz does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (other than responsible gaming self-declarations), or biometric data unless specifically required by applicable law or player consent.

4. How We Collect Personal Data

hzyz collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account settings.
• Automated collection: Technical and device data collected automatically when you access hzyz.onl, including via cookies and server log files. See Section 10 for full details on our use of cookies.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when you initiate a deposit or withdrawal.
• Identity verification providers: Confirmation data returned by third-party KYC service providers engaged by hzyz to assist with document verification.
• Fraud prevention systems: Risk signals and device fingerprinting data generated by fraud prevention tools used to protect the integrity of the Platform.

5. Purposes of Processing

hzyz processes your personal data for the following specific purposes:

hzyz does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by anti-fraud or regulatory systems. Where automated decisions affect your account, you have the right to request human review.

6. Legal Basis for Processing

hzyz processes personal data on the following legal bases depending on the processing activity:

• Contractual necessity: Processing required to fulfil the contract between hzyz and the player — including account registration, deposit and withdrawal processing, and delivery of betting and casino services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, fraud prevention requirements, and age verification mandates.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and service analytics, where hzyz's legitimate operational interests are not overridden by your privacy rights.
• Consent: Processing for optional communications (such as promotional offers) where you have given explicit, informed consent. You may withdraw consent at any time by contacting [email protected].

7. Data Sharing with Third Parties

hzyz does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share personal data with third parties only in the following limited circumstances:

7.1 Payment Service Providers

To process deposits and withdrawals, hzyz shares necessary transaction data with the payment service provider you select — bKash, Nagad, Rocket, Upay, Visa, Mastercard, BRAC Bank, City Bank, Islami Bank, Dutch-Bangla Bank, or Sonali Bank. Each provider receives only the data necessary to complete the specific transaction and is bound by its own data protection obligations.

7.2 Identity Verification Providers

hzyz engages third-party KYC verification service providers to assist with document authentication and identity confirmation. These providers receive KYC data solely for the purpose of performing verification checks on behalf of hzyz and are contractually prohibited from using this data for any other purpose.

7.3 Game Software Providers

Casino and slot game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — may receive minimal session data necessary to authenticate your game session. These providers do not receive your full registration or financial profile.

7.4 Legal and Regulatory Disclosure

hzyz may be required by law, court order, or regulatory authority to disclose personal data. In such cases, hzyz will comply with the applicable legal obligation and, where permitted by law, will notify the affected player of the disclosure.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of hzyz's business assets, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and any material change to the applicable privacy policy prior to the transfer taking effect.

8. Data Retention

hzyz retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and thereafter only for as long as required by applicable legal, regulatory, or audit obligations. The following general retention periods apply:

Where data is retained solely to meet legal obligations, it will be stored securely and access will be restricted to personnel with a demonstrable need. At the end of the applicable retention period, data will be securely deleted or anonymised.

9. Data Security

hzyz implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption applied across all pages and all data transmissions on hzyz.onl.
• Encrypted storage of sensitive data fields, including passwords (stored as salted hashes, never in plain text) and KYC document files.
• Access controls restricting internal access to personal data to authorised personnel only, on a need-to-know basis.
• Regular security assessments of the Platform and its infrastructure to identify and remediate potential vulnerabilities.
• Fraud detection systems monitoring for unusual account activity and flagging suspicious transactions for human review.
• Secure deletion protocols applied when personal data reaches the end of its retention period.

While hzyz takes its security obligations seriously, no online platform can guarantee absolute security. In the event of a data breach that is likely to pose a risk to your rights and freedoms, hzyz will notify affected players promptly and will take all reasonable steps to contain and remediate the incident.

You also play an important role in keeping your account secure. You should use a strong, unique password for your hzyz account, never share your login credentials with third parties, and contact [email protected] immediately if you suspect your account has been compromised.

10. Cookies & Tracking Technologies

hzyz uses cookies and similar tracking technologies on hzyz.onl to deliver platform functionality, maintain login sessions, and collect analytics data that helps us understand how the Platform is used and where it can be improved.

10.1 Types of Cookies Used

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. These cannot be disabled without preventing Platform use.
• Functional cookies: Remember your preferences such as preferred language and responsible gaming settings, so you do not need to re-enter them each session.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate hzyz.onl — which pages are most visited, how long sessions last, and where players exit. This data helps hzyz improve the user experience.
• Fraud prevention cookies: Support device fingerprinting and session integrity checks that protect your account from unauthorised access attempts.

10.2 Cookie Retention

Session cookies expire when you close your browser. Persistent cookies used for functional and analytics purposes are retained for a maximum of 13 months from the date they are set, after which they are automatically deleted or refreshed.

10.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent you from using the Platform. Disabling functional or analytics cookies may affect your experience but will not prevent you from logging in or placing bets.

11. Your Data Protection Rights

As a registered hzyz player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Privacy Request".

• Right of Access: You have the right to request a copy of the personal data hzyz holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update many details directly through your account settings page.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under anti-money laundering and financial regulations.
• Right to Restriction: You may request that we restrict processing of your data — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request a copy of personal data you have provided to hzyz in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. hzyz will honour such objections unless it has compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

12. Children's Privacy

The hzyz Platform is strictly restricted to individuals aged 21 and above. hzyz does not knowingly collect, process, or store personal data from individuals under the age of 21. If we become aware that a person under 21 has registered an account or submitted personal data, that account will be closed immediately, all associated data will be deleted, and any funds deposited will be returned to the source payment method following verification.

If you believe a minor has accessed the hzyz Platform using your account or has registered an account independently, please contact [email protected] immediately so that we can investigate and take appropriate action.

13. Third-Party Links

hzyz.onl may contain references to third-party payment providers and game studios. Where such third-party services are accessed, their own privacy policies govern the collection and use of your data. hzyz is not responsible for the privacy practices of third-party providers and encourages players to review the relevant privacy policy of any third-party service they use in connection with their hzyz account.

14. Changes to This Privacy Policy

hzyz reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform services. Where changes are material, we will provide at least seven (7) days' notice via a notice posted prominently on hzyz.onl or via email to your registered address. The updated Policy will take effect on the stated effective date.

We encourage all registered players to review this Policy periodically. Your continued use of the Platform after any update to this Policy constitutes acceptance of the revised terms. The most current version of this Policy is always accessible at hzyz.onl/privacy-policy.

15. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hzyz handles your personal data, please contact our support team using the details below. All privacy communications must be submitted in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Data Privacy Request
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days

For general account enquiries, game support, or payment queries, please also use [email protected] and our team will direct your request to the appropriate department.