Your Privacy Is Our Responsibility

hzay operates a trusted online gaming platform for users in Bangladesh. We believe that protecting the privacy of your personal information is our highest ethical and legal responsibility. This Privacy Policy ("Policy") describes what types of information hzay collects, how that information is used, with whom it is shared, and how you can maintain control over your information.

This Policy applies to hzay's website, mobile application, and all services we provide. Using our platform means you have read, understood, and agreed to the terms of this Policy.

1 What Information We Collect

hzay may collect different types of information from you in various situations. This information can be broadly divided into two categories:

1.1 Information You Provide Directly

• Full name and date of birth (for age verification)
• Email address and mobile number
• National ID card or passport details (for identity verification)
• Payment-related information — such as bKash, Nagad, Rocket, or Upay account numbers
• Bank account details (where applicable)
• Any information provided when contacting our support team

1.2 Automatically Collected Information

• IP address and device identifier
• Browser type, operating system, and device type
• Which pages you visited and how long you stayed
• Login date and time, session information
• Gaming history and transaction records
• Information collected through cookies and similar tracking technologies

2 Purpose of Information Use

hzay uses your information only for the following legitimate purposes:

2.1 Service Delivery and Operations

• Creating, managing, and securing your account
• Processing deposit and withdrawal transactions
• Running gaming services smoothly
• Providing bonuses and promotional benefits
• Offering customer service and technical support

2.2 Security and Compliance

• Verifying user identity and preventing fraud
• Complying with anti-money laundering (AML) regulations
• Ensuring age verification under responsible gaming policy
• Monitoring platform security and detecting suspicious activity

2.3 Service Improvement

• Improving services based on your preferences and experience
• Identifying and resolving technical issues on the platform
• Conducting analysis to develop new features and products

2.4 Communication

• Sending notifications related to transactions and your account
• Informing you about important policy changes
• Sending promotional messages subject to your consent

3 Information Sharing and Disclosure

hzay never sells, rents, or exchanges your personal information to third parties. However, your information may be shared in the following limited circumstances:

3.1 Service Provider Partners

We work with trusted third-party service providers for payment processing (bKash, Nagad, Rocket, Upay, bank transfers), security verification, and technical services. These partners receive only the information necessary to provide their specific services and may not use your information for any other purpose.

3.2 Legal Obligations

We may be required to disclose your information to fulfill court orders, lawful requests from law enforcement agencies, or requirements under applicable law.

3.3 Fraud Prevention

Necessary information may be shared with relevant authorities to ensure platform security and prevent illegal activity such as fraud or money laundering.

3.4 Business Restructuring

In the event of a company merger, acquisition, or asset transfer, user information may be transferred to the new entity. You will be notified in advance in such cases.

4 Cookies and Tracking Technologies

hzay uses cookies and similar technologies to improve your browsing experience and to operate services effectively.

4.1 Types of Cookies

• Essential Cookies: Essential for the platform to function properly. They keep you logged in and keep your session secure.
• Analytics Cookies: Used to understand how users interact with the platform, which helps us improve our services.
• Preference Cookies: Remember your language preference and other settings.
• Security Cookies: Prevent fraud and unauthorized access.

4.2 Managing Cookies

You can disable most cookies by changing your browser settings. Keep in mind that disabling essential cookies may cause some platform features to not work properly.

5 Data Security Measures

hzay has adopted industry-standard security measures to ensure the safety of your information:

• SSL/TLS Encryption: All data transferred between your browser and our servers is encrypted.
• Encryption at Rest: Strong encryption is also used to store sensitive information.
• Access Controls: Only authorized personnel can access the necessary information.
• Regular Security Audits: Regular security audits are conducted to identify and address potential vulnerabilities.
• Firewall and Intrusion Detection: Modern security infrastructure is used to prevent unauthorized access.
• Two-Factor Authentication: Two-factor authentication is available as an additional layer of security.

6 Data Retention Period

hzay retains your information only for as long as necessary or required by law:

• Active account information: For the entire duration the account remains active.
• Transaction records: For the period required under financial regulations.
• Identity verification information: As required by applicable legal obligations.
• Even after an account is closed, some information may be retained for a specific period due to legal or regulatory requirements.

After the retention period ends, we securely delete or anonymize your information.

7 Your Rights and Options

You have several important rights over your personal information. hzay is committed to fulfilling these rights:

7.1 Right to Access

You may request a copy of the information we hold about you at any time.

7.2 Right to Correction

If any of your information is incorrect, you may request a correction. Some information can also be updated directly through your account settings.

7.3 Right to Deletion

In certain circumstances, you may request that your information be deleted. However, some information may not be possible to delete due to legal obligations.

7.4 Right to Object to Processing

You may object to the use of your information for certain purposes, particularly for marketing communications.

7.5 Withdrawal of Consent

For any information processing based on consent, you may withdraw that consent at any time. However, processing carried out prior to withdrawal will remain valid.

To exercise these rights, please contact our support team.

8 Minors' Privacy

hzay strictly does not provide services to anyone under the age of 21. We do not intentionally collect any personal information from minors. If we become aware that information from a minor has been collected by mistake, we will immediately delete that information and close the associated account.

Age is verified at the time of account registration and may be re-verified through ID documents if necessary.

9 International Data Transfer

Your information may be stored or processed on servers outside of Bangladesh. Where international data transfers occur, hzay ensures that the recipient country or organization will provide adequate protection for your information.

We ensure through agreements with our international partners that your information will be handled to standards consistent with this Privacy Policy.

10 Policy Changes

hzay may update this Privacy Policy from time to time. If significant changes are made to the Policy, we will:

• Display a prominent notice on the website.
• Send a notification of the changes to your registered email.
• Update the "Last Updated" date at the top of the Policy.

Continued use of the platform after changes will indicate that you have accepted the updated Policy. We recommend reviewing the Policy regularly.

11 Contact Us

If you have any questions, concerns, or requests related to privacy, please contact us. hzay's support team is available seven days a week, twenty-four hours a day, to assist in both Bengali and English.