hq117 Privacy Policy

1. Who We Are

hq117 operates the online casino and sports betting platform available at hq117.org. For the purposes of this Privacy Policy, hq117 is the data controller responsible for the personal information collected through the hq117 platform. When this Policy refers to "hq117," "we," "us," or "our," it means the hq117 platform and its operating entity.

hq117 is committed to processing all personal data in a manner that is lawful, fair, transparent, and consistent with internationally recognised data protection principles. This Policy governs all personal data collected from players, prospective players, and general visitors to hq117.org, regardless of their location within Pakistan or internationally.

Questions about this Privacy Policy or about how hq117 handles your personal data can be directed to our support team at [email protected]. We aim to respond to all privacy-related enquiries within five (5) business days.

2. Personal Data We Collect

hq117 collects only the personal data that is necessary for the specific purposes described in this Policy. The categories of personal data we collect are as follows:

hq117 does not collect any special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required by applicable law or regulatory directive and only with your explicit consent.

3. How We Collect Your Data

hq117 collects personal data through the following methods:

• Direct interactions: When you register an hq117 account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion, you directly provide us with personal data.
• Automated technologies: As you navigate hq117.org, we automatically collect Technical Data using cookies, server logs, and similar tracking technologies. See Section 8 for full details on our cookie practices.
• Payment processors: When you conduct PKR transactions via JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, or USDT TRC20, our payment processing partners share transaction confirmation data with us to facilitate crediting and debiting your hq117 balance.
• Identity verification providers: hq117 uses licensed third-party KYC verification services to cross-check identity documents. These providers may return structured identity data to hq117 as part of the verification process.
• Fraud prevention services: hq117 works with anti-fraud and anti-money-laundering service providers who may supply additional data signals relating to your account activity for security purposes.

4. Why We Use Your Personal Data

hq117 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your hq117 account, maintain your player profile, and provide you with access to the platform's games and sports betting markets.
• Identity verification (KYC): To verify that you are who you say you are, that you meet the 21+ age requirement, and that you are not a politically exposed person or subject to sanctions — as required under applicable gaming and anti-money-laundering obligations.
• Processing PKR transactions: To process your deposits and withdrawals through JazzCash, EasyPaisa, and Pakistani bank transfers accurately and without delay.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, account takeover attempts, multi-accounting, bonus abuse, and other prohibited conduct described in the hq117 Terms & Conditions.
• Customer support: To respond to your queries, resolve disputes, process complaints, and provide a 24/7 support service via live chat and email.
• Responsible gaming compliance: To enforce deposit limits, cool-off periods, and self-exclusion requests, and to identify patterns of gambling behaviour that may indicate a player requires responsible gaming support.
• Legal and regulatory compliance: To meet obligations under hq117's applicable gaming licence, anti-money-laundering regulations, and any applicable data protection or consumer protection laws.
• Platform improvement: To analyse aggregate usage patterns, fix technical issues, optimise game performance, and develop new features that improve the hq117 experience for players across Pakistan.
• Marketing communications: Where you have opted in, to send you promotional offers, PSL cricket betting alerts, bonus notifications, and seasonal promotions. You may opt out at any time via your account settings or by contacting support.

5. Legal Basis for Processing

hq117 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the hq117 Terms & Conditions you agreed to at registration — including account management, transaction processing, and KYC verification — is carried out because it is necessary to perform our contract with you.
• Legal obligation: Certain processing activities, including anti-money-laundering checks, sanctions screening, and regulatory record-keeping, are carried out because hq117 is legally required to do so under the conditions of its gaming licence and applicable law.
• Legitimate interests: hq117 processes Technical Data and Transaction Data for fraud prevention, platform security, and service improvement purposes on the basis of its legitimate interests, provided those interests do not override your privacy rights.
• Consent: Where hq117 relies on your consent — for example, for sending you direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Who We Share Your Data With

hq117 does not sell, rent, or trade your personal data. We share your data only where strictly necessary, with the following categories of recipients:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and USDT TRC20 processors receive the minimum data required to process your PKR deposits and withdrawals.
• KYC and identity verification providers: Licensed third-party identity verification services receive copies of your identity documents solely for the purpose of verifying your identity and age as required under our gaming licence obligations.
• Anti-fraud and AML providers: Specialist fraud prevention and anti-money-laundering services may receive Transaction Data and Technical Data to identify and flag suspicious activity patterns.
• Game content providers: Third-party casino game studios whose games are hosted on the hq117 platform may receive anonymised session data (such as game round outcomes and stake amounts) as part of the technical integration. They do not receive your name, CNIC, or contact details.
• Regulatory and law enforcement authorities: hq117 will disclose personal data to regulatory bodies, courts, or law enforcement agencies where required to do so by law, court order, or gaming licence obligation.
• Professional advisers: hq117's legal, accounting, and auditing advisers may access personal data on a confidential and need-to-know basis in connection with their professional services to hq117.

All third-party service providers who process personal data on hq117's behalf are bound by contractual data processing agreements that require them to handle your data in accordance with this Privacy Policy and applicable data protection standards.

7. Payment Data & PKR Transactions

hq117 handles payment data with particular care given the financial sensitivity of the information involved. The following specific provisions apply to financial data processed through the hq117 platform:

• hq117 does not store full bank account credentials, JazzCash PINs, EasyPaisa PINs, or any authentication secrets linked to your payment accounts. Transaction processing is handled through encrypted API integrations with our payment partners.
• Payment method details (such as your JazzCash mobile number or HBL account number) are stored in encrypted form and used only for the purpose of processing withdrawals back to the same method used for deposits, as required by our anti-money-laundering obligations.
• All PKR transaction records — including deposit amounts, withdrawal amounts, and transaction timestamps — are retained for a minimum period as required under applicable gaming licence and financial record-keeping obligations. See Section 9 for retention details.
• USDT TRC20 wallet addresses provided for cryptocurrency withdrawals are stored securely and used only for the specific withdrawal transaction for which they were provided.

8. Cookies & Tracking Technologies

hq117 uses cookies and similar tracking technologies on hq117.org to enable core platform functionality, improve user experience, and gather aggregate analytics data. The categories of cookies used are as follows:

• Strictly necessary cookies: These cookies are essential for the hq117 platform to function. They maintain your login session, remember your language preferences, and enable security features. These cookies cannot be disabled.
• Functional cookies: These cookies remember your platform preferences — such as your preferred sports market display, your last game category, and your responsible gaming settings — so you do not need to reconfigure them on each visit.
• Analytics cookies: hq117 uses anonymised analytics data to understand how players navigate the platform, which games and betting markets are most popular, and where technical issues may be occurring. This data is processed in aggregate and is not used to identify individual players.
• Security cookies: Cookies used to detect fraudulent login attempts, identify unusual account activity patterns, and protect against cross-site request forgery attacks.

You may control non-essential cookies through your browser settings. Disabling functional cookies may affect your experience on the hq117 platform. Strictly necessary and security cookies cannot be disabled as they are required for safe and functional platform operation.

9. How Long We Keep Your Data

hq117 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active hq117 account plus a minimum of five (5) years following account closure, as required under standard gaming licence and AML record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with anti-money-laundering regulatory requirements.
• KYC documents: Retained for the duration of your account plus five (5) years following account closure, or for any longer period required by applicable law.
• Customer support communications: Retained for three (3) years from the date of the most recent interaction, to support dispute resolution and quality assurance purposes.
• Technical and analytics data: Retained in anonymised or aggregated form for up to twenty-four (24) months from collection.
• Marketing preference records: Retained until you withdraw your consent or close your account, whichever is earlier.

When personal data is no longer required for its stated purpose and the applicable retention period has expired, hq117 will securely delete or anonymise the data in accordance with our internal data disposal procedures.

10. How We Protect Your Data

hq117 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmissions between your device and hq117.org are encrypted using industry-standard 256-bit SSL/TLS protocols. Look for the padlock symbol in your browser's address bar on every hq117 page.
• Encrypted data storage: Sensitive personal data, including financial identifiers and KYC documents, is stored in encrypted form in access-controlled server environments.
• Access controls: Access to personal data within hq117's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific role.
• Two-factor authentication: hq117 supports and encourages two-factor authentication (2FA) on all player accounts to provide an additional layer of protection against unauthorised access.
• Regular security audits: hq117 commissions periodic security assessments and penetration tests to identify and remediate vulnerabilities in the platform's infrastructure.
• Incident response procedures: hq117 maintains documented data breach response procedures. In the event of a data breach that poses a risk to your rights and freedoms, hq117 will notify you and the relevant regulatory authority within the timeframes required under applicable law.

Despite these measures, no internet transmission or digital storage system is entirely risk-free. hq117 encourages you to use a strong, unique password for your hq117 account, enable 2FA, and never share your login credentials with anyone.

11. Your Privacy Rights

As an hq117 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact hq117 support at [email protected] with your account username and a description of your request:

• Right of access: You have the right to request a copy of the personal data hq117 holds about you and information about how it is being processed.
• Right to rectification: You have the right to request that hq117 correct any inaccurate or incomplete personal data held about you.
• Right to erasure: You have the right to request that hq117 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restriction: You have the right to request that hq117 restrict the processing of your personal data in certain circumstances — for example, while an accuracy dispute is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to hq117 processing your personal data on the basis of legitimate interests, including for direct marketing purposes. Where you object to direct marketing, processing for that purpose will cease immediately.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

hq117 will respond to privacy rights requests within thirty (30) days of receipt. In complex cases, hq117 may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

12. Minors & Age Restriction

The hq117 platform is strictly intended for adults aged 21 years and above. hq117 does not knowingly collect personal data from any individual under the age of 21. hq117 enforces this restriction through mandatory KYC age verification at the time of account registration and at the time of the first withdrawal request.

If hq117 discovers or is notified that personal data has been collected from a player who is under the age of 21, hq117 will immediately suspend the relevant account, delete all personal data associated with it, and return any funds deposited to the payment method used, in accordance with our responsible gaming obligations.

If you believe that a minor may have accessed and registered on the hq117 platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

13. International Data Transfers

hq117 primarily processes and stores personal data in server environments associated with its gaming licence jurisdiction. In certain circumstances — for example, where third-party KYC verification, fraud prevention, or game content services involve data processing in other countries — your personal data may be transferred outside Pakistan.

Where such international transfers occur, hq117 takes steps to ensure that appropriate safeguards are in place to protect your personal data at a standard equivalent to the protections described in this Privacy Policy. These safeguards may include contractual data protection clauses with the relevant service providers.

By registering an hq117 account and accepting these terms, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan for the purposes described in this Policy.

14. Changes to This Privacy Policy

hq117 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, hq117 will notify registered players by email and by displaying a prominent notice on the hq117 platform at least seven (7) days before the updated Policy takes effect. The "Effective Date" at the top of this page will always reflect the date of the most recent revision.

Your continued use of the hq117 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must stop using the platform and may request voluntary account closure by contacting hq117 support.

hq117 recommends that you review this Privacy Policy periodically to stay informed about how your personal data is being protected. The current version of this Policy is always available at hq117.org/privacy-policy.

15. Contact & Privacy Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data hq117 holds about you, please contact our support team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the hq117 platform
• Subject line: Please use "Privacy Request" as your email subject line to ensure your query is routed to the correct team promptly
• Response time: hq117 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a full response within 30 days

For responsible gaming concerns including self-exclusion requests, deposit limit adjustments, or cool-off period activation, please visit the dedicated Responsible Gaming page where all available tools are described in full.