hzay Privacy Policy — Your Data, Protected

This Privacy Policy explains how hzay collects, uses, stores, and protects the personal data of players who register and use the hzay platform at hzay.app. hzay is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws.

By registering an account on hzay, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described here. If you do not agree with this policy, you should not register or use hzay.

This policy applies to all personal data collected through the hzay website, mobile browser experience, customer support interactions, and any other channel through which you interact with hzay. It does not apply to third-party websites or services that may be linked from hzay — those are governed by their own privacy policies.

hzay collects personal data in several ways — directly from you when you register or interact with the platform, automatically through your use of the site, and from third-party service providers involved in payment processing and identity verification.

hzay does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or regulatory obligation.

hzay uses your personal data only for the purposes described in this policy. We do not use your data in ways that are incompatible with the reason it was originally collected. The main purposes for which hzay uses your personal data are:

• To create and manage your hzay account and verify your identity.
• To process deposits and withdrawals via bKash, Nagad, and Rocket.
• To provide access to games, live casino, sports betting, and other platform features.
• To detect and prevent fraud, money laundering, and other prohibited activities.
• To comply with legal and regulatory obligations, including anti-money laundering (AML) requirements.
• To send you account-related notifications such as deposit confirmations and withdrawal updates.
• To send you promotional offers and bonuses — only if you have opted in to marketing communications.
• To improve the hzay platform based on how players use it.
• To respond to your customer support queries and complaints.
• To enforce hzay's Terms and Conditions and protect the rights of hzay and its players.

hzay processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contract performance: Processing your data is necessary to provide the services you signed up for — including account management, payments, and gameplay.
• Legal obligation: hzay is required by law to collect and retain certain data for AML compliance, age verification, and regulatory reporting.
• Legitimate interests: hzay has a legitimate interest in detecting fraud, securing the platform, and improving the user experience — provided these interests do not override your rights.
• Consent: For marketing communications and non-essential cookies, hzay relies on your explicit consent, which you can withdraw at any time.

hzay does not sell your personal data. We share your data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, and Rocket receive the payment data necessary to process your transactions. These providers operate under their own privacy policies and security standards.
• Identity verification providers: hzay uses third-party KYC (Know Your Customer) services to verify your identity and age. These providers receive only the data required for verification.
• IT and hosting providers: hzay's platform is hosted on secure servers. Our hosting and infrastructure providers may have access to technical data as part of their service delivery.
• Regulatory and law enforcement authorities: hzay may be required by law to disclose your data to government bodies, regulators, or law enforcement agencies. We will only do so when legally obligated.
• Fraud prevention services: hzay shares limited data with fraud detection services to protect the platform and its players from financial crime.

All third parties with whom hzay shares data are contractually required to handle your data securely and to use it only for the specific purpose for which it was shared. hzay does not permit third parties to use your data for their own marketing purposes.

hzay uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players interact with the site. Cookies are small text files stored on your device when you visit hzay.

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies.
• Functional cookies: Remember your preferences such as language settings and display options. These improve your experience but are not strictly necessary.
• Analytics cookies: Help hzay understand how players use the platform — which pages are visited most, where players drop off, and how the site performs. This data is aggregated and anonymised.
• Marketing cookies: Used only if you have opted in to marketing communications. These help hzay deliver relevant promotional content.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the hzay platform.

hzay retains your personal data for as long as your account is active and for a period after account closure as required by law and regulatory obligations. The specific retention periods are:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years after closure, as required by AML regulations.
• Transaction and payment data: Retained for a minimum of 5 years from the date of the transaction.
• Customer support records: Retained for 3 years from the date of the last interaction.
• Technical and usage data: Retained for up to 24 months, after which it is anonymised or deleted.
• Marketing consent records: Retained for as long as you remain opted in, plus 3 years after you opt out.

When data is no longer required, hzay securely deletes or anonymises it. Data that has been anonymised is no longer considered personal data and may be retained indefinitely for analytical purposes.

hzay implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and hzay's servers.
• Encryption of sensitive data stored in hzay's databases.
• Access controls that limit which hzay staff can access personal data, based on their role and need.
• Regular security audits and vulnerability assessments of the hzay platform.
• Two-factor authentication options for player accounts.
• Secure, certified payment processing — hzay does not store full payment credentials on its own servers.

While hzay takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are also responsible for keeping your hzay login credentials secure and not sharing them with anyone. If you suspect your account has been compromised, contact hzay support immediately.

As a hzay player, you have the following rights in relation to your personal data. To exercise any of these rights, contact hzay support at [email protected]. hzay will respond to all valid requests within 30 days.

hzay is strictly for adults aged 18 and above. hzay does not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register or attempt to use hzay.

If hzay discovers that personal data has been collected from a person under 18, that account will be closed immediately, all data will be deleted, and any deposits will be returned minus any bonuses claimed. If you believe a minor has registered on hzay, please contact us at [email protected] immediately.

hzay will only send you promotional emails, SMS messages, or in-platform notifications about bonuses and offers if you have explicitly opted in to marketing communications during registration or through your account settings.

You can opt out of marketing communications at any time by:

• Updating your communication preferences in your hzay account settings.
• Clicking the unsubscribe link in any marketing email from hzay.
• Contacting hzay support at [email protected] and requesting to be removed from marketing lists.

Opting out of marketing will not affect transactional communications — hzay will still send you important account notifications such as deposit confirmations, withdrawal updates, and security alerts.

hzay may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through an in-platform notification.

We encourage you to review this Privacy Policy periodically. Continued use of hzay after a policy update constitutes your acceptance of the revised policy. If you do not agree with the updated policy, you should stop using hzay and contact support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hzay handles your personal data, please get in touch with our support team. We are available 24 hours a day, 7 days a week.