Privacy Policy — How hgzi Handles Your Personal Data

This Privacy Policy ("Policy") describes how hgzi ("hgzi", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the hgzi online betting platform at hgzi.io. hgzi is an English-language betting and gaming platform built specifically for the Bangladesh market, offering sports betting (including cricket and football), live casino games, and slot titles.

By registering an account on hgzi or continuing to use our platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the hgzi platform.

This Policy should be read alongside our Terms & Conditions, which govern your use of the hgzi platform generally. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

For the purposes of this Privacy Policy, hgzi acts as the data controller in respect of personal data collected from players using the hgzi.io platform. As data controller, hgzi determines the purposes for which and the means by which personal data is processed.

If you have any questions about how hgzi handles your personal data, or if you wish to exercise any of your data subject rights (see Section 11), you may contact us at any time using the details provided in Section 16 of this Policy.

hgzi collects several categories of personal data from players. The specific data collected depends on the nature of your interaction with the platform. The categories are outlined in the table below.

hgzi does not knowingly collect sensitive personal data (such as health data, religious beliefs, or political opinions) unless you voluntarily provide it (for example, when citing a medical reason for a self-exclusion request). Such data, where provided, is used only for the stated purpose and is not shared with third parties.

hgzi collects personal data through several channels and methods during your interaction with the platform.

• Direct provision: Data you provide directly when completing the registration form, submitting a KYC document, contacting support, filling in a deposit or withdrawal request, or setting responsible gaming preferences.
• Automated collection: Technical and usage data collected automatically as you navigate and interact with the hgzi platform, including through cookies, web beacons, and server logs (see Section 8 for details on cookies).
• Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard, or another supported payment method, the relevant payment processor may share transaction confirmation data with hgzi for the purpose of crediting or debiting your account.
• Identity verification partners: Where hgzi uses a third-party KYC verification service to confirm your identity, that service may provide hgzi with a verification result based on the documents you submitted.
• Game providers: Our casino game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may pass game session data back to hgzi for the purposes of settling bets and maintaining your account history.

hgzi uses the personal data it collects for the following specific purposes. Where a purpose requires a particular legal basis, that basis is identified in Section 6.

• Account creation and management: To register your player account, maintain it, and provide you with access to the hgzi platform and its features.
• Identity and age verification: To confirm that you are who you say you are and that you are aged 21 or over, as required by our Terms & Conditions and responsible gaming obligations.
• Transaction processing: To process deposits and withdrawals accurately and securely, and to maintain an accurate record of your transaction history in Bangladeshi Taka (BDT).
• Customer support: To respond to your queries, resolve disputes, investigate complaints, and provide technical assistance.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, and other prohibited activities.
• Responsible gaming: To monitor your betting and gaming activity for signs of problem gambling and to administer the responsible gaming tools you have requested, such as deposit limits, session time limits, cooling-off periods, and self-exclusion.
• Legal and regulatory compliance: To meet our obligations under applicable law, including record-keeping, reporting, and responding to lawful requests from relevant authorities.
• Platform improvement: To analyse usage patterns and player behaviour in aggregate (anonymised) form in order to improve the features, performance, and design of the hgzi platform.
• Marketing communications: To send you information about promotions, bonuses, new games, and special offers — but only where you have consented to receive such communications (see Section 14).

hgzi processes your personal data on the following legal bases, depending on the purpose of processing.

• Contractual necessity: Processing that is necessary to perform the contract between you and hgzi — i.e., to operate your account, process your bets, and handle your deposits and withdrawals.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering obligations, fraud prevention, and record-keeping requirements.
• Legitimate interests: Processing necessary for hgzi's legitimate business interests, including platform security, fraud prevention, customer service improvement, and responsible gaming monitoring — provided such interests are not overridden by your privacy rights.
• Consent: Where you have given your explicit consent — for example, to receive marketing communications. You may withdraw this consent at any time by contacting [email protected] or using the opt-out option in any marketing message.

hgzi does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals.
• Identity verification services: Third-party KYC providers receive copies of the identity documents you submit in order to verify your identity. These providers are contractually bound to process your data only for verification purposes.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios receive session data necessary to operate their games within the hgzi platform.
• IT and infrastructure providers: Hosting, cloud, and cybersecurity service providers that support the operation of the hgzi platform may process technical data as part of their services. All such providers are bound by appropriate data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or legitimate regulatory inquiry, hgzi will disclose personal data to the relevant authority. hgzi will, where permitted, notify the affected player of such a disclosure.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of hgzi's business, player data may be transferred to the relevant acquiring entity. You will be notified in advance of any such transfer where practicable.

hgzi uses cookies and similar tracking technologies on the hgzi.io platform. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow the platform to remember your preferences, keep you logged in, and collect usage analytics.

• Strictly necessary cookies: These are essential for the platform to function correctly. They enable features such as keeping you logged in to your account, maintaining your session security, and remembering your language and currency preferences. These cookies cannot be disabled.
• Analytics cookies: These allow hgzi to collect aggregated, anonymised data about how players use the platform — which pages are visited most, how long sessions last, and where errors occur. This data is used solely to improve the platform experience.
• Functional cookies: These remember your stated preferences (such as responsible gaming settings) to provide a more personalised experience during your session.
• Security cookies: These help detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

By continuing to use the hgzi platform after being presented with information about our use of cookies, you consent to our use of cookies as described in this section. You may control cookie behaviour through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the platform.

hgzi retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply.

• Active accounts: Personal data associated with an active hgzi account is retained for the duration of the account relationship.
• Closed accounts: Following the closure of a player account (whether voluntarily, by hgzi, or through self-exclusion), hgzi retains account data for a minimum period of five (5) years in order to meet anti-money laundering record-keeping obligations and to handle any outstanding disputes or legal claims.
• Transaction records: Financial transaction records (deposits, withdrawals, bets) are retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Customer support records are retained for a minimum of two (2) years from the date of the last communication in the relevant thread.
• Marketing data: If you have opted in to marketing communications, your marketing preferences data is retained until you withdraw consent or for one (1) year after the closure of your account, whichever is earlier.

Upon expiry of the applicable retention period, hgzi will securely delete or anonymise your personal data so that it can no longer be linked back to you as an individual.

hgzi implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• SSL/TLS encryption: All data transmitted between your device and the hgzi platform is encrypted using SSL/TLS protocols. Look for the padlock icon in your browser address bar when using hgzi.io.
• Access controls: Access to systems holding personal data is strictly limited to authorised hgzi staff with a documented operational need. Multi-factor authentication is required for all administrative access.
• Server security: hgzi's servers are hosted in secure data centres with physical access controls, 24/7 monitoring, and regular penetration testing.
• Password storage: Player passwords are stored in hashed (not plain-text) form. hgzi staff cannot see your password — if you forget it, you must reset it through the standard password recovery process.
• Incident response: hgzi maintains a data breach response procedure. In the event of a security incident affecting your personal data, hgzi will notify you as required and take immediate steps to contain and remediate the issue.

As a player whose personal data is processed by hgzi, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request".

• Right of access: You have the right to request a copy of the personal data that hgzi holds about you, along with information about how it is being used.
• Right to rectification: If you believe that any personal data hgzi holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request that hgzi delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you have objected to processing on legitimate interest grounds. Note that this right is subject to our legal retention obligations (see Section 9) — we cannot delete data we are legally required to retain.
• Right to restriction of processing: You may request that hgzi restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that hgzi provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where hgzi relies on legitimate interests as its legal basis, unless hgzi can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where hgzi processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

hgzi will respond to all valid data subject requests within 14 business days of receipt. In complex cases, this may be extended by a further 14 business days, in which case we will notify you of the extension and the reason for it.

The hgzi platform is strictly intended for adults aged 21 years and above. hgzi does not knowingly collect personal data from any person under the age of 21. The minimum age requirement is clearly stated at registration and throughout the platform.

If hgzi becomes aware that a person under the age of 21 has registered an account or provided personal data, hgzi will immediately close the account, delete the associated personal data (subject to any overriding legal retention requirements), and report the matter as required.

The hgzi platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). While these providers are integrated into the hgzi experience, their own privacy policies govern how they collect and handle your data in the context of their own services.

hgzi is not responsible for the privacy practices of third-party services and encourages you to review the privacy policies of any third party you interact with in the course of using the hgzi platform.

hgzi may send you marketing communications about promotions, bonuses, new game releases, and special seasonal offers (for example, around Eid, Pohela Boishakh, or major cricket tournaments such as the BPL and IPL) only where you have given your consent to receive such communications at the time of registration or subsequently through your account settings.

• Opt-in: Marketing communications are opt-in only. hgzi will not send you promotional emails or messages unless you have indicated your agreement to receive them.
• Opt-out: You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any marketing email, by updating your preferences in your account settings, or by contacting [email protected].
• Transactional communications: Opting out of marketing communications does not affect transactional communications, which include deposit confirmations, withdrawal notifications, account security alerts, and important policy updates. These are sent as part of the service and cannot be opted out of while your account remains active.

hgzi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The date of the most recent update is always displayed at the top of this document.

When material changes are made to this Policy, hgzi will notify registered players via the email address associated with their account or by displaying a prominent notice on the platform. Your continued use of the hgzi platform after the effective date of any changes constitutes your acceptance of the updated Policy.

We encourage you to review this Policy periodically to stay informed about how hgzi is protecting your personal data. If you have any questions about a specific change, contact us at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hgzi handles your personal data, please contact our support team using the details below. We are available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

Please note that all contact details must be used for privacy-related enquiries only. For general account support, game queries, or deposit and withdrawal assistance, please use the live chat feature available on the hgzi platform.