hq177 Privacy Policy — How We Protect Your Personal Data

For the purposes of this Privacy Policy, the data controller responsible for your personal information is hq177 — the operator of the online gaming platform accessible at hq177.bio. References to "hq177", "we", "us", or "our" throughout this document refer to this entity in its capacity as data controller of all personal data collected through the hq177 platform, website, and associated services.

hq177 operates under international gaming regulations that impose specific and enforceable obligations regarding the collection, processing, storage, and protection of player personal data. Our data handling practices are designed to meet or exceed the standards imposed by our licensing framework, and are audited as part of our regular regulatory compliance reviews.

If you have any questions about who controls your data, how your data is being used, or wish to exercise any of the rights described in this policy, please contact hq177's designated data team using the contact details provided in Section 14 of this document.

hq177 collects personal information that falls into several distinct categories, each serving a specific and necessary purpose in the operation of the platform and the fulfilment of our legal obligations.

hq177 collects personal information through the following channels and mechanisms:

• Direct Registration: When you create an hq177 account, you provide identity and contact information directly through the registration form. This is the primary source of personal data held by hq177.
• hq177 Login Activity: Each time you complete the hq177 login process, technical data including IP address, device identifier, and session timestamp is automatically recorded for security and fraud prevention purposes.
• KYC Document Submission: When you submit identity verification documents — your CNIC, passport, or proof of address — these documents and the data contained within them are collected and processed as part of our mandatory compliance programme.
• Payment Transactions: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or card, our payment processing systems collect the minimum payment data required to execute the transaction.
• Platform Usage: Your activity on the hq177 platform — games played, bets placed in PKR, sports markets accessed, time spent in session — is automatically recorded through our gaming systems.
• Cookies and Similar Technologies: hq177 uses cookies and similar browser-side storage technologies to collect technical and preference data. See Section 7 for full details.
• Third-Party Sources: In limited circumstances, hq177 may receive information about you from third-party identity verification providers, fraud detection services, or financial crime screening databases, where permitted by applicable law.

hq177 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases on which hq177 relies are as follows:

1. Performance of a Contract: The majority of hq177's processing of your personal data is necessary for the performance of the contract between you and hq177 — specifically, the provision of online gaming services, processing of PKR deposits and withdrawals, and management of your hq177 account.
2. Legal Obligation: hq177 is required by its licensing conditions and applicable anti-money laundering regulations to collect, retain, and process certain personal data — including identity documents (CNIC, passport), transaction records, and gaming history — regardless of your preferences.
3. Legitimate Interests: hq177 processes certain technical and security data — including IP address logging, device fingerprinting, and login activity monitoring — on the basis of our legitimate interests in preventing fraud, protecting the integrity of the platform, and maintaining the security of all player accounts.
4. Consent: Where hq177 sends you marketing communications — promotional emails, bonus notifications, and platform updates — we rely on your explicit consent, which you may withdraw at any time by contacting support or updating your notification preferences in your account settings.

hq177 uses your personal information for the following specific purposes, each of which corresponds to a legal basis described in Section 4:

• Opening, maintaining, verifying, and managing your hq177 account — including processing the hq177 login, verifying your identity through KYC, and enabling access to all platform features.
• Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard — including verifying that withdrawal payment methods match those used for deposits as a fraud prevention measure.
• Fulfilling our mandatory KYC and AML compliance obligations — including ongoing transaction monitoring, source-of-funds checks for large or unusual transactions, and regulatory reporting where required.
• Detecting, investigating, and preventing fraud, account compromise, bonus abuse, money laundering, and other prohibited activities described in our Terms & Conditions.
• Monitoring gaming activity to identify patterns that may indicate problematic gambling behaviour, and proactively offering responsible gaming tools where such patterns are detected.
• Enforcing the 21+ age restriction — verifying player ages through document review and, where necessary, through third-party age verification services.
• Providing customer support — reviewing your account history, transaction records, and past communications to resolve disputes, answer queries, and process complaints efficiently.
• Sending you transactional communications — deposit confirmations, withdrawal updates, account security alerts, and responsible gaming notifications. These are not marketing; you cannot opt out of transactional communications while maintaining an active account.
• Sending marketing communications where you have consented — promotional offers, new game announcements, PSL betting specials, and seasonal bonuses. You may withdraw consent at any time.
• Improving and optimising the hq177 platform — using aggregated, anonymised usage data to identify areas for improvement in game loading speed, mobile layout, payment flow, and customer support processes.

hq177 may disclose your personal information to the following categories of third parties, strictly limited to the purposes described:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard acquiring networks — to process your PKR deposits and withdrawals. Each payment processor is subject to their own privacy policy and handles your financial data under their respective regulatory frameworks.
• Identity Verification Providers: Third-party KYC and age verification services may receive your identity documents and CNIC data for the purpose of verifying your identity and confirming that you are 21 or older. These providers process data solely on hq177's instructions.
• Game Technology Providers: Software providers who supply the games available on hq177 — live dealer studios, slot developers, sportsbook data providers — may receive limited technical data (session tokens, game round IDs) necessary to operate their games within the hq177 platform. They do not receive your identity or payment data.
• Regulatory Authorities: hq177's licensing authority and relevant law enforcement agencies may receive your personal data where disclosure is required by applicable law, court order, or regulatory direction. hq177 will notify you of such disclosure where legally permitted to do so.
• Fraud Prevention & AML Screening Services: hq177 uses third-party financial crime screening and fraud detection services which may process your name, CNIC number, and transaction data against international sanctions lists and fraud databases.
• Professional Advisers: Legal advisers, auditors, and insurers may receive your personal data where necessary for the provision of their professional services to hq177, subject to strict confidentiality obligations.

All third parties with whom hq177 shares personal data are required to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with all applicable data protection requirements. hq177 does not permit third-party processors to use your data for their own commercial purposes.

hq177 uses cookies and similar technologies on the hq177.bio website to support platform functionality, security, and performance optimisation. The following categories of cookies are in use:

Strictly necessary cookies cannot be disabled as they are essential to the secure operation of your hq177 account and hq177 login session. Non-essential cookies may be managed through your browser settings. Note that disabling functional cookies may affect your platform experience — for example, your layout preferences may reset on each visit.

hq177 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, regulatory, accounting, or reporting obligations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your hq177 account plus a minimum of 5 years following account closure, as required by AML regulations applicable to licensed gaming operators.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction — deposits, withdrawals, and bonus credits — in compliance with financial record-keeping obligations.
• KYC Documents: Identity documents (CNIC copies, proof of address) are retained for a minimum of 5 years after the closure of the associated hq177 account or the completion of the last financial transaction, whichever is later.
• Gaming History: Individual bet records and game outcomes are retained for a minimum of 3 years from the date of each game session, for dispute resolution and regulatory compliance purposes.
• Support Communications: Live chat transcripts, email correspondence, and support ticket records are retained for 3 years from the date of the last communication in each case.
• Technical and Log Data: Server access logs, hq177 login records, and security event logs are retained for 12 months and then securely deleted unless retention is required for an active investigation or legal proceeding.
• Marketing Consent Records: Records of your marketing consent — or withdrawal of consent — are retained indefinitely so that hq177 can demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked back to you as an individual. Where anonymisation is used, the resulting anonymised data may be retained indefinitely for statistical and analytical purposes.

hq177 implements a multi-layered data security framework designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. The following technical and organisational security measures are in place:

• 256-Bit SSL Encryption: All data transmitted between your device and the hq177 platform — including during the hq177 login process — is protected by 256-bit SSL/TLS encryption. This is the same standard used by Pakistan's major commercial banks including HBL, UBL, and Meezan Bank.
• Encrypted Data Storage: Personal data stored on hq177's servers is encrypted at rest using AES-256 encryption. Sensitive fields — including CNIC numbers, financial account references, and authentication credentials — receive additional field-level encryption.
• Access Controls: Access to personal data within hq177's systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access control, and all access to production data is logged and audited.
• Two-Factor Authentication: hq177's own internal systems require two-factor authentication for all staff accessing player data. We strongly recommend that all hq177 players enable 2FA on their own accounts through the security settings page.
• Regular Security Testing: hq177's platform undergoes regular penetration testing and vulnerability assessment by qualified third-party security professionals.
• Data Breach Response: In the event of a personal data breach that poses a risk to affected individuals, hq177 will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay where required by applicable law.

Depending on the data protection law applicable in your jurisdiction, you may have the following rights in respect of your personal data held by hq177. hq177 will respond to all valid privacy rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data hq177 holds about you, including the categories of data, the purposes for which it is processed, and any third parties to whom it has been disclosed.
• Right to Rectification: If any personal information hq177 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly through your account settings.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Note that this right is subject to overriding legal obligations — hq177 cannot delete data that it is required to retain under AML regulations or its gaming licence conditions, even if you make such a request.
• Right to Restrict Processing: You may request that hq177 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is verified.
• Right to Data Portability: You may request a copy of personal data you have provided to hq177 in a structured, machine-readable format, where the processing is based on consent or contract performance.
• Right to Object: You may object to hq177's processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to hq177 demonstrating compelling legitimate grounds.
• Right to Withdraw Consent: Where hq177 processes your data based on your consent — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

hq177 implements the following measures to enforce the 21+ age restriction and prevent the collection or processing of personal data from minors:

• All new account registrations require confirmation of age at the point of sign-up. By completing registration, you declare that you are 21 years of age or older.
• All accounts are subject to mandatory KYC verification before processing a first withdrawal. KYC requires submission of a government-issued identity document — CNIC or passport — which is reviewed to confirm the account holder's date of birth and confirm they are 21 or above.
• Where hq177's internal monitoring systems identify age verification concerns — including inconsistencies between declared age and behavioural patterns — the account will be suspended pending enhanced review.
• If you are a parent or guardian and believe that a minor has registered or attempted to register an hq177 account, please contact hq177 support immediately at [email protected]. hq177 will investigate and take appropriate action promptly.

hq177's platform infrastructure and some of its third-party service providers are located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than the country in which you are resident.

Where personal data is transferred internationally, hq177 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under our licensing jurisdiction's data protection requirements. These safeguards include contractual data protection clauses with all third-party processors, requiring them to maintain equivalent data protection standards and to process your data only on hq177's instructions.

Payment data shared with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank is processed within Pakistan and is subject to Pakistani financial regulations. International card payment processing may involve transfers to the Visa and Mastercard international processing networks, which maintain their own global data protection frameworks.

hq177 reserves the right to update or revise this Privacy Policy at any time. When we make material changes — changes that significantly affect your rights or how we use your personal data — we will notify registered hq177 account holders by email to their registered address at least 14 days before the revised policy takes effect.

For minor or non-material updates — including typographical corrections, clarifications, and updates to reflect changes in legal requirements that do not expand the scope of data processing — hq177 may update the policy immediately and without prior individual notification, updating the effective date at the top of this document.

Your continued use of the hq177 platform following notification of any material change to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you must discontinue use of hq177 and may close your account in accordance with our Terms & Conditions.

Previous versions of this Privacy Policy are available on request by contacting the hq177 data team via the contact details in Section 14.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights described in Section 10, or wish to raise a complaint about hq177's data handling practices, please contact the hq177 data team through the following channels:

• Live Chat: Available 24/7 from the hq177 platform — the fastest channel for account-related data queries. Reference "Data / Privacy Request" at the start of your conversation to be directed to the appropriate team member.
• Email: [email protected] — for formal written privacy requests or data subject rights exercises. Please include your registered hq177 username, full name, and a clear description of your request. hq177 will acknowledge all email requests within 5 business days and provide a substantive response within 30 days.