huzy Privacy Policy — How We Handle Your Personal Data

01 Introduction

This Privacy Policy ("Policy") is issued by huzy ("huzy", "we", "us", "our") and applies to all personal data collected from individuals ("you", "your", "Player") who access or use the huzy platform at huzy.io, including the website, mobile site, and any associated services. This Policy explains the types of personal information we collect, the purposes for which we collect and process it, the conditions under which we may share it, and the rights available to you in relation to that data.

huzy is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. By creating an account or continuing to use the huzy platform, you acknowledge that you have read and understood this Privacy Policy.

02 Data Controller

For the purposes of this Privacy Policy, huzy is the data controller responsible for the personal data of Players who use the huzy platform. As data controller, huzy determines the purposes and means by which personal data is processed. All data-related enquiries should be directed to the huzy support team using the contact details provided in Section 15 of this Policy.

03 Data We Collect

huzy collects personal data in the following categories. The specific data points collected depend on the nature of your interaction with the platform:

Category	Examples of Data Collected	When Collected
Identity Data	Full legal name, date of birth, gender, nationality, NID/passport number	Registration and KYC verification
Contact Data	Mobile phone number, email address, residential address	Registration
Financial Data	bKash/Nagad/Rocket wallet number, Visa/Mastercard last 4 digits, transaction history, deposit and withdrawal records	Payment processing
Account Data	Username, encrypted password, account balance, bonus status, login history, session duration	Ongoing platform use
Gaming Data	Bets placed, games played, wager amounts, win/loss records, RNG game session logs	Ongoing platform use
Technical Data	IP address, device type, operating system, browser type, screen resolution, time zone	Each platform session
Communications Data	Support enquiry content, complaint records, chat transcripts, email correspondence	When you contact huzy support
KYC Documentation	Scans/photos of National ID Card (NID), passport, utility bills, MFS account screenshots	Identity verification process

04 How We Collect Your Data

huzy collects personal data through the following methods:

• Direct provision by you: When you register an account, complete the KYC process, make a deposit or withdrawal, contact support, or otherwise interact with the huzy platform, you provide personal data directly to us.
• Automated technical collection: When you access the huzy platform, technical data such as your IP address, device identifiers, browser type, and session activity is automatically collected by our servers and analytics systems.
• Cookies and similar technologies: huzy uses cookies and similar tracking technologies to maintain session state, personalise your experience, and analyse platform usage. See Section 8 for full details on our cookie practices.
• Payment service providers: When you complete a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment service provider shares transaction confirmation data with huzy to credit your account or confirm a withdrawal.
• Third-party identity verification services: During KYC, huzy may use third-party identity verification tools to authenticate documents you submit. These tools process your document data on our behalf under strict data processing agreements.
• Game providers: Live casino and slot game providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) may share game session data with huzy for the purposes of account reconciliation, dispute resolution, and responsible gaming monitoring.

05 Legal Basis for Processing

huzy processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and huzy — specifically, to operate your account, process deposits and withdrawals, settle bets, and deliver gaming services.
• Legal obligation: huzy is required to collect and retain certain data to comply with applicable anti-money-laundering (AML) obligations, age verification requirements, and other regulatory duties, including KYC procedures.
• Legitimate interests: huzy processes certain data — including technical data, gaming data, and fraud-signal data — on the basis of its legitimate interests in preventing fraud, ensuring platform security, improving services, and protecting the integrity of betting markets.
• Consent: Where huzy sends you promotional communications by email or SMS, it does so on the basis of your consent, which you may withdraw at any time by contacting support at huzy.io or using the opt-out mechanism provided in any marketing message.

06 How We Use Your Data

huzy uses the personal data it collects for the following purposes:

• Account creation and management: Creating and maintaining your huzy player account, authenticating your identity at login, and managing your account preferences and balance.
• Age and identity verification: Confirming that you are at least 21 years of age and that your identity matches the information provided during registration, in compliance with our age-restriction policy.
• Payment processing: Processing deposits and withdrawal requests through your chosen MFS provider or card, reconciling transactions, and maintaining financial records.
• Customer support: Responding to your support enquiries, handling complaints, and resolving disputes in relation to bets, game outcomes, or account issues.
• Fraud detection and prevention: Monitoring account activity for signs of fraudulent behaviour, money laundering, bonus abuse, automated betting, or other prohibited activities as defined in the huzy Terms & Conditions.
• Responsible gaming: Monitoring gaming patterns to identify potential indicators of problem gambling and contacting you in accordance with our Responsible Gaming Policy.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues, and improve features and content.
• Promotional communications: Sending you information about huzy bonuses, promotions, and seasonal offers (e.g., BPL cricket season offers, Eid promotions) where you have provided consent.
• Legal and regulatory compliance: Retaining records as required by applicable law, responding to law enforcement requests, and cooperating with regulatory or investigative authorities where legally obliged.

07 Sharing Your Data

huzy does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum data necessary to process your deposit or withdrawal transaction securely.
• KYC and identity verification providers: Third-party document verification services process your identity documents on huzy's behalf under data processing agreements that prohibit any further use or disclosure of your data.
• Game content providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners receive session identifiers and stake/result data necessary to operate their games and resolve disputes. They do not receive your full identity or financial data.
• IT infrastructure and security providers: Cloud hosting, DDoS protection, and cybersecurity service providers may process technical data in the course of providing infrastructure services to huzy. These providers operate under strict data processing agreements.
• Law enforcement and regulatory bodies: Where huzy is required by applicable law, court order, or regulatory directive to disclose personal data, we will comply. Where legally permitted, we will notify you of such a disclosure.
• Professional advisers: Legal, compliance, and financial advisers engaged by huzy may have access to personal data on a strictly confidential, need-to-know basis in the course of providing professional services to huzy.

08 Cookies and Tracking Technologies

huzy uses cookies and similar technologies (including local storage and session storage) to operate the platform, maintain your login session, remember your preferences, and analyse how the platform is used. The following categories of cookies are used:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Required for the platform to function — session authentication, security tokens, login state, load balancing	No — required for platform operation
Functional	Remembering your language preference, display settings, and notification preferences	Yes — disabling may affect experience
Analytics	Understanding how players navigate the platform, which pages are visited most, and where technical errors occur — data is aggregated and anonymised	Yes
Security / Fraud Prevention	Identifying suspicious login patterns, detecting automated bot activity, and protecting account security	No — required for platform security

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies will impair your ability to use the huzy platform. huzy does not use third-party advertising or behavioural targeting cookies.

09 Data Security

huzy implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and huzy's servers is encrypted using SSL/TLS protocols. The huzy website operates exclusively over HTTPS.
• Encryption at rest: Sensitive data including passwords (stored as salted hashes), payment identifiers, and KYC document scans are encrypted when stored on huzy's servers.
• Access controls: Access to personal data within huzy's systems is restricted to authorised personnel who require it to perform their specific role. All access is logged and audited.
• Account security features: huzy supports strong password requirements and session timeout controls to reduce the risk of unauthorised account access.
• Security monitoring: huzy's systems are monitored continuously for suspicious activity, including anomalous login attempts, unusual transaction patterns, and potential intrusion attempts.

While huzy takes all reasonable steps to protect your personal data, no data transmission over the internet or data storage system is entirely immune to risk. In the event of a data security incident that is likely to affect your rights, huzy will notify affected players as required by applicable law.

10 Data Retention

huzy retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable legal and regulatory obligations. The general retention periods applied by huzy are set out below:

Data Category	Retention Period	Reason
Account and Identity Data	Duration of account + 5 years after closure	AML/KYC regulatory obligations
Financial / Transaction Data	7 years from transaction date	Financial record-keeping obligations
Gaming / Bet Records	5 years from bet date	Dispute resolution and regulatory audit
KYC Documents	5 years after account closure	Regulatory compliance
Support Communications	3 years from last contact	Complaint resolution, legal claims
Technical / Log Data	12 months	Security monitoring, fraud detection
Marketing Consent Records	Until consent is withdrawn + 1 year	Evidence of consent

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

11 Your Rights

As a huzy player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the huzy support team using the details in Section 15. huzy aims to respond to all data rights requests within 5 business days.

• Right of access: You may request a copy of the personal data that huzy holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data that huzy holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you may request that huzy delete the personal data it holds about you. Note that this right is subject to huzy's legal and regulatory obligations, which may require retention of certain data for defined periods regardless of your request.
• Right to restrict processing: You may request that huzy restricts the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to a specific use.
• Right to data portability: Where processing is based on your consent or on a contract with you, you may request that huzy provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing based on huzy's legitimate interests. huzy will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

12 Children and Underage Players

huzy does not knowingly collect personal data from any individual under the age of 21. The huzy platform is strictly for adults aged 21 and above. Age verification is a mandatory component of the account registration and KYC process on the huzy platform.

If huzy becomes aware that personal data has been collected from an individual under 21 — whether through a failed age-check, a third-party report, or any other means — the following actions will be taken immediately:

• The account will be suspended pending investigation.
• All personal data associated with the underage account will be deleted as soon as practicable, subject only to any legal obligations requiring short-term retention of records related to the investigation.
• Any deposits made to the account will be returned via the original payment method; any winnings generated will be forfeited.
• The account will be permanently closed and the individual will be permanently barred from re-registering on the huzy platform.

If you believe that a person under 21 has gained access to the huzy platform, please report it immediately to support at huzy.io. huzy takes underage gambling extremely seriously and responds to all such reports as a priority matter.

13 Third-Party Services and External Links

The huzy platform integrates third-party services including game providers, payment processors, and infrastructure partners, as described in Section 7. While these services are accessed within the huzy platform environment, each third-party service provider operates under its own privacy practices and terms. huzy is not responsible for the privacy practices of third-party service providers beyond the obligations imposed by our data processing agreements with those providers.

The huzy platform does not contain links to external websites operated by third parties. In the event that future platform updates include references to external resources, this Policy will be updated accordingly. Players are advised not to share their huzy account credentials or personal data with any external site or service claiming to be affiliated with huzy.

14 Changes to This Privacy Policy

huzy reserves the right to update or amend this Privacy Policy at any time. When changes are made, the revised Policy will be published on this page with an updated effective date. Where changes are material — for example, a change in the categories of data collected, a new sharing arrangement, or a change to retention periods — huzy will make reasonable efforts to notify active players via their registered email address or via an in-platform notification prior to the change taking effect.

Your continued use of the huzy platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically to stay informed about how huzy handles your personal data.

15 Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data that huzy holds about you, please contact the huzy data support team using the details below. All enquiries are handled on Bangladesh Standard Time (BST, UTC+6).

• Email: support at huzy.io (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6)
• Response target: Data rights requests acknowledged within 2 business days; substantive response within 5 business days
• Website: huzy.io