🛡️ Data Protection

hizy Privacy Policy

Your privacy matters. This Policy explains what personal data hizy collects, why we collect it, how we use it, and the rights you hold as a hizy account holder in Bangladesh.

Introduction

The legal basis for this Privacy Policy and how it applies to hizy platform users.

📅 Last Updated: January 2026

This Privacy Policy ("Policy") describes how hizy collects, uses, stores, and shares personal information about individuals who access or use the hizy platform, including the website, mobile-optimised interface, and all associated services (collectively, the "Platform"). By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must stop using the Platform immediately.

This Policy should be read alongside the hizy Terms & Conditions. hizy is committed to handling all personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability. We do not sell personal data to any third party for commercial gain. All personal data is processed only for the specific, legitimate purposes set out in this Policy.

What Data We Collect

The categories of personal data hizy collects from platform users and why each category is needed.

👤
Identity Data
Full name, date of birth, and national ID or passport number collected during registration and KYC.
💳
Financial Data
bKash, Nagad, Rocket, or bank account details used for deposits and withdrawals, plus transaction history.
📱
Device Data
Mobile model, operating system, browser type, screen resolution, and device identifiers.
📊
Usage Data
Games played, session duration, bet amounts, game outcomes, and navigation patterns within the Platform.
🌐
Technical Data
IP address, login timestamps, session tokens, and connection data used for security monitoring.
💬
Communications Data
Records of your interactions with hizy customer support, including chat transcripts and email correspondence.

How We Collect Your Data

The mechanisms through which hizy receives personal data from users and third-party service providers.

Source 1
Directly From You
The majority of personal data hizy holds about you is provided directly by you during account registration, KYC verification, deposit and withdrawal transactions, customer support interactions, and participation in promotional activities. When you complete registration, you provide identity data including your name, mobile number, and date of birth. When you complete KYC, you provide documentary identity evidence. When you contact customer support, you provide the information contained in your query.
Source 2
Automatically From Your Device
When you access the hizy Platform, technical and usage data is collected automatically through standard web and mobile technologies. This includes your IP address, device identifiers, browser type, operating system, session duration, pages visited, and game titles accessed. This automatic collection is necessary for the Platform to function correctly, to maintain security, and to support responsible gaming monitoring obligations. Session cookies are used to maintain your authenticated session; these cannot be disabled without impairing your ability to use the Platform.
Source 3
From Third-Party Service Providers
hizy receives certain data from third-party service providers who support the Platform's operation. Payment service providers such as bKash, Nagad, and Rocket transmit transaction confirmation data to verify deposits and process withdrawals. Identity verification and KYC providers supply the results of document authenticity checks. Fraud prevention services may supply risk scores and flagged activity patterns. In each case, hizy receives only the data necessary for the stated purpose and verifies that each provider operates appropriate data protection standards.

How We Use Your Data

The specific purposes for which hizy processes personal data collected from platform users.

hizy processes personal data only for defined, legitimate purposes. We do not use personal data for purposes beyond those described in this Policy without seeking additional consent where required. The primary purposes for which hizy uses your personal data are detailed below. Where processing is based on your consent, you may withdraw that consent at any time by contacting customer support, though withdrawal will not affect processing already carried out.

Purpose 1
Account Management and Service Delivery
hizy uses your identity, contact, and financial data to create and manage your account, verify your identity, process deposits and withdrawals, deliver the games and betting services you access, and communicate with you about your account status. This processing is necessary for the performance of the contract between you and hizy and cannot be opted out of while you maintain an active account.
Purpose 2
Fraud Prevention and Security
hizy uses technical, financial, and usage data to detect and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats. This includes monitoring login patterns, transaction patterns, and gameplay data for anomalies consistent with prohibited conduct as defined in the Terms & Conditions. Where suspicious activity is identified, hizy may share relevant data with payment providers, law enforcement, or regulatory authorities as required by applicable law.
Purpose 3
Responsible Gaming Compliance
hizy monitors player activity for indicators of problem gambling as part of its responsible gaming commitments. Usage data, session data, deposit frequency, and self-exclusion status are used to identify players who may be exhibiting signs of harmful gambling behaviour. Where such indicators are identified, hizy may contact the player to offer responsible gaming tools, apply account restrictions, or escalate to a self-exclusion review. This processing is carried out in the legitimate interest of player welfare and platform integrity.
Purpose 4
Marketing and Promotional Communications
Where you have provided consent or where applicable law permits communication on the basis of a legitimate interest in the existing account relationship, hizy may use your contact data to send you information about promotions, bonuses, new game launches, and seasonal offers. You may opt out of marketing communications at any time by contacting customer support or using the unsubscribe link in any marketing message. Opting out of marketing will not affect essential service-related communications.

Data Sharing and Disclosure

When and to whom hizy discloses personal data, and the safeguards that apply in each case.

hizy does not sell, rent, or trade personal data to any third party for commercial purposes. Personal data is shared only in the specific circumstances described below, and only to the extent necessary for the stated purpose. All third parties with whom hizy shares data are contractually required to handle that data in accordance with applicable data protection standards and to use it only for the purpose for which it was disclosed. Where hizy is required by law to disclose personal data to a government body or law enforcement authority, it will do so in compliance with its legal obligations.

Category A
Payment Service Providers
To process deposits and withdrawals, hizy shares the minimum necessary transactional data with the relevant payment provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. This data is limited to the information required to authenticate and complete the transaction and is not used by the payment provider for any purpose beyond transaction processing. hizy does not store full payment credentials on its own servers; payment credential data is handled directly by the payment provider through their secure infrastructure.
Category B
Identity Verification and KYC Providers
To fulfil its KYC obligations, hizy shares identity documents and related data with accredited identity verification service providers who perform document authenticity checks and database verification. These providers are contractually bound to process the data only for verification purposes and to delete or return it once the verification check is completed. The outcome of the verification check is retained by hizy as part of your account record for the duration your account remains open and for the mandatory retention period thereafter.
Category C
Legal and Regulatory Authorities
hizy may disclose personal data to law enforcement agencies, courts, or government authorities where required by applicable law, by a valid court order, or in connection with an investigation into suspected criminal activity, fraud, or money laundering involving a hizy account. hizy will record any such disclosure and the legal basis on which it was made. hizy will not voluntarily disclose personal data to any government authority without a valid legal basis, and will inform the affected user where it is legally permissible to do so.

Data Security

The technical and organisational measures hizy uses to protect personal data from unauthorised access or disclosure.

hizy implements industry-standard security measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. All data transmitted between your device and the hizy Platform is encrypted using 256-bit SSL technology. Personal data stored on hizy's servers is protected by access controls that limit access to authorised personnel only on a need-to-know basis. hizy conducts periodic security reviews of its systems and infrastructure and takes prompt steps to address any identified vulnerabilities.

Despite these measures, no method of data transmission or storage is completely secure. hizy cannot guarantee the absolute security of personal data transmitted to or stored on the Platform. In the event of a data security incident likely to result in a risk to the rights and freedoms of affected individuals, hizy will take appropriate steps to contain the incident, assess its impact, and notify affected users and relevant authorities in accordance with applicable data breach notification requirements. Users are encouraged to report any suspected unauthorised access to their hizy account to customer support immediately.

Data Retention

How long hizy retains different categories of personal data and the reasons for each retention period.

hizy retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Account data — including identity documents, KYC verification records, and transaction history — is retained for the duration of your active account and for a minimum of five years following account closure, in order to comply with anti-money laundering record-keeping obligations and to defend against any claims that may arise in connection with your use of the Platform. Communications data, including customer support interactions, is retained for three years following the date of the interaction.

Usage data and technical data collected through automatic means is retained in identifiable form for up to 12 months, after which it may be aggregated and anonymised for analytical purposes. Anonymised and aggregated data that cannot reasonably be used to identify an individual is not subject to the retention limits in this Policy and may be retained indefinitely for platform improvement purposes. Where a data subject makes a valid erasure request and hizy has no countervailing legal obligation to retain the data, hizy will delete or anonymise the relevant data within 30 days of the request being verified.

Your Privacy Rights

The rights you have over your personal data held by hizy and how to exercise each right.

👁️
Right of Access
You may request a copy of the personal data hizy holds about you at any time. hizy will respond to verified access requests within 30 days of receipt.
✏️
Right of Rectification
If personal data hizy holds about you is inaccurate or incomplete, you may request that it be corrected. You may update basic account details directly through your account settings at any time.
🗑️
Right of Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and hizy has no legal obligation to retain it. Erasure requests cannot override mandatory retention obligations under applicable law, including anti-money laundering requirements.
🚫
Right to Object to Marketing
You may opt out of marketing communications at any time by contacting customer support or using the unsubscribe link in any marketing message. Objecting to marketing does not affect core service communications related to your account.
📦
Right to Data Portability
Where technically feasible and permitted by applicable law, you may request a machine-readable copy of personal data you provided to hizy that is processed on the basis of your consent or for the performance of a contract with you.

Cookies and Tracking Technologies

How hizy uses cookies and similar technologies on the Platform and the choices available to you.

hizy uses cookies and similar client-side tracking technologies to support the operation of the Platform. Strictly necessary cookies maintain your authenticated session, remember your language preference, and support core security functions — these cannot be disabled without impairing Platform functionality. Functional cookies remember your settings between sessions. Analytical cookies collect aggregate data about how users interact with the Platform, helping hizy improve the user experience. No third-party advertising cookies are placed on the hizy Platform.

You may manage cookie preferences through your browser settings. Disabling functional or analytical cookies will not prevent you from using the Platform but may reduce the quality of your experience. hizy does not use persistent advertising tracking pixels or retargeting technologies that follow users across third-party websites. As the hizy Platform is a mobile-first interface, session cookies are essential for maintaining a continuous and secure betting session across multiple page interactions.

Children and Minors

hizy's strict policy on preventing minors from accessing gambling services on the Platform.

The hizy Platform is strictly for adults aged 21 and above. hizy does not knowingly collect personal data from individuals under the age of 21. All accounts undergo age verification as part of the KYC process; any account where verification reveals the holder is under 21 will be immediately closed and the account balance returned to the originating payment method. If hizy becomes aware that personal data from a person under the minimum age has been collected, it will delete that data without delay. Parents or guardians who believe a minor may have registered an account are encouraged to contact hizy customer support immediately so the account can be identified and closed.

Policy Updates and Contact

How hizy communicates changes to this Policy and how to reach the hizy support team with privacy-related queries.

hizy may update this Privacy Policy from time to time to reflect changes in applicable law, data processing practices, or the structure of the Platform. Where updates are material, hizy will notify registered users via their registered contact details at least 7 days before the updated Policy takes effect. The most current version of this Policy is always available on the hizy Platform. Continued use of the Platform after a Policy update constitutes acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hizy processes your personal data, please contact the hizy support team. All data-related requests — including access requests, rectification requests, erasure requests, and objections to processing — must be submitted through the official hizy support channel so they can be logged, tracked, and responded to within the applicable timeframe. Our support team is available 24/7. Contact us at: [email protected]

Your Data is Safe — Now Explore hizy

We handle your personal information with care and transparency. Ready to experience hizy's full game lobby, cricket betting, and live casino?

Go to hizy Casino Read Our FAQ View Terms & Conditions
hizy is strictly for players aged 21 and above. Please gamble responsibly.