hz689 Privacy Policy

hz689 collects personal information from players in several ways: directly through the account registration and KYC process, automatically through your use of the hz689.app platform, and occasionally from third-party service providers who assist with identity verification and payment processing. The categories of data collected are described below.

1.1 Registration and Account Data

When you create an account on hz689, you provide the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth for age verification purposes (18+ requirement).
• Email address used as the primary contact channel for account notifications, security alerts, and support correspondence.
• Mobile number — typically a Bangladesh mobile number beginning with +880 — used for account verification and two-factor authentication.
• Residential address in Bangladesh or your country of residence, used for KYC and responsible gaming purposes.
• Username and password — your password is stored in hashed form and is never accessible in plaintext by any hz689 employee.

1.2 KYC and Identity Verification Data

Before processing any withdrawal, hz689 conducts a Know Your Customer (KYC) verification check. As part of this process, you may be asked to provide:

• A copy of your Bangladesh National Identity Card (NID), passport, or driving licence.
• A recent proof-of-address document such as a utility bill, bank statement, or government correspondence dated within the last three months.
• Verification of the bKash, Nagad, Rocket, Upay, or bank account you use for deposits — typically a screenshot of the account in your name or a transaction confirmation.

KYC documents are processed exclusively by hz689's compliance team and are not shared with third parties except where required by law or where a specialist third-party identity verification provider is engaged under a confidentiality agreement.

1.3 Transaction and Financial Data

hz689 records all deposit and withdrawal transactions processed through your account. This includes transaction amounts in Bangladeshi Taka (৳), transaction timestamps (Bangladesh Standard Time, UTC+6), payment method references, and transaction status records. hz689 does not store full bKash, Nagad, or bank account numbers — only the last four digits or a masked reference sufficient to identify the payment method on file.

1.4 Platform Usage and Technical Data

When you use hz689.app, our servers automatically collect technical data including:

• IP address and approximate geographic location derived from IP lookup.
• Device type, operating system, and browser version.
• Pages visited, game sessions initiated, bet amounts, game outcomes, and session duration.
• Referral source (e.g., which link or search result brought you to hz689.app).
• Error logs and performance data used to diagnose and resolve technical issues.

1.5 Communications Data

hz689 retains records of all communications between you and the hz689 support team, including live chat transcripts and email correspondence. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3.1 Payment Service Providers

To process deposits and withdrawals, hz689 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. The data shared is limited to what each provider requires to authenticate and complete the specific transaction. These providers operate under their own privacy policies and are responsible for their own data handling practices in respect of data they receive directly from you through their own platforms.

3.2 Identity Verification Partners

hz689 may engage specialist third-party identity verification providers to assist with KYC processing. Where such providers are used, they receive only the specific identity documents and data points required for verification purposes and are bound by confidentiality and data processing agreements with hz689. These providers do not retain your identity data beyond the verification period.

3.3 Game Software Providers

The casino games available on hz689 are supplied by third-party game providers including Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe. These providers may receive anonymised or pseudonymised session data (such as bet amounts and game outcomes) for the purpose of game performance monitoring and RNG certification auditing. Game providers do not receive personally identifiable information such as your name, email address, or payment details.

3.4 Technology Infrastructure Providers

hz689 uses third-party cloud hosting, content delivery, and cybersecurity service providers to operate its platform infrastructure. These providers may process personal data as data processors on behalf of hz689 under strict data processing agreements that limit use to the specific infrastructure services provided. Infrastructure providers are prohibited from using hz689 player data for any purpose of their own.

3.5 Legal and Regulatory Disclosures

hz689 may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or regulatory directive. hz689 will take reasonable steps to notify affected players of such disclosures where legally permitted to do so, and will limit disclosures to the minimum data necessary to satisfy the legal obligation.

3.6 Business Transfers

In the event that hz689 undergoes a merger, acquisition, sale of assets, or other business restructuring, player personal data may be transferred to the relevant successor entity as part of that transaction. Players will be notified of any such transfer and of any material changes to the way their data is processed that result from it, with reasonable advance notice prior to any change taking effect.

hz689 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. The following measures are in place across the hz689 platform.

5.1 Encryption in Transit and at Rest

All data transmitted between your browser or mobile device and hz689 servers is encrypted using TLS 1.2 or higher (256-bit SSL). Sensitive data stored on hz689 servers — including identity documents, hashed passwords, and payment method references — is encrypted at rest using industry-standard encryption protocols. Encryption keys are managed separately from encrypted data and are rotated on a defined schedule.

5.2 Access Controls

Access to hz689 systems containing personal data is restricted to employees and contractors who require that access to perform their specific job functions. Access is granted on a least-privilege basis, meaning personnel receive only the minimum level of access necessary for their role. All access to sensitive data systems is logged and subject to periodic audit. Former employees' access credentials are revoked immediately upon departure.

5.3 Infrastructure Security

hz689's platform infrastructure is hosted on enterprise-grade cloud servers protected by firewalls, intrusion detection systems, and DDoS mitigation services. Regular security assessments and vulnerability scans are conducted to identify and remediate potential weaknesses before they can be exploited. hz689 maintains a documented incident response plan for data security events.

5.4 Data Breach Response

In the event of a confirmed personal data breach that poses a risk to affected players, hz689 will notify impacted players by email within a reasonable timeframe, describing the nature of the breach, the categories of data affected, the likely consequences, and the steps hz689 has taken or intends to take to address it. hz689 will also fulfil any applicable notification obligations to relevant regulatory authorities.

5.5 Your Responsibility for Account Security

While hz689 maintains robust platform-level security, the security of your account also depends on your own practices. hz689 strongly recommends that you:

• Use a unique, strong password for your hz689 account that is not reused on other platforms.
• Enable two-factor authentication (2FA) in your account security settings.
• Never share your hz689 login credentials with any other person.
• Log out of your account when using shared or public devices.
• Contact [email protected] immediately if you notice any suspicious activity on your account.

hz689 accepts no liability for data security incidents that result from a player's own failure to maintain reasonable account security practices.

As a player on hz689, you hold the following rights in respect of your personal data. hz689 is committed to honouring these rights promptly and without unnecessary obstruction. All rights requests should be submitted in writing to [email protected] with the subject line "Privacy Rights Request" and your registered account username or email address included.

7.1 Right of Access

You have the right to request a copy of the personal data hz689 holds about you. hz689 will provide this information in a structured, commonly used, machine-readable format within 30 days of receiving your verified request. The first copy is provided free of charge; subsequent requests within a 12-month period may be subject to a reasonable administrative fee.

7.2 Right to Rectification

If any personal data hz689 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. hz689 will action rectification requests within 10 business days. Where the data in question has been shared with a third-party processor, hz689 will notify that processor of the correction.

7.3 Right to Erasure

You may request that hz689 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis for processing exists), or where you object to processing and hz689 has no overriding legitimate grounds to continue. Erasure requests are subject to hz689's legal retention obligations as described in Section 6.

7.4 Right to Restrict Processing

You may request that hz689 restrict the processing of your personal data while a rectification request is pending, while an objection to processing is being considered, or where you believe hz689's processing is unlawful but prefer restriction over erasure. During a period of restricted processing, hz689 will continue to store the relevant data but will not actively process it for other purposes.

7.5 Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time. To exercise this right, update your account communication preferences or send a written request to [email protected]. Marketing communications will cease within 5 business days of a confirmed opt-out. Transactional, security, and account-management communications are not affected by a marketing opt-out.

7.6 Right to Data Portability

Where hz689 processes your personal data on the basis of your consent or the performance of a contract with you, you have the right to receive that data in a structured, commonly used, machine-readable format and to request that hz689 transmit it directly to another service provider where technically feasible.

7.7 How to Exercise Your Rights

To exercise any of the rights listed above, contact the hz689 privacy team by email at [email protected] with the subject line "Privacy Rights Request". Include your full name, registered email address, and a brief description of the right you wish to exercise. hz689 may request identity verification before processing a rights request to protect against unauthorised access to player data. hz689 will acknowledge receipt within 3 business days and provide a substantive response within 30 calendar days under Bangladesh Standard Time (UTC+6).