hq177 Privacy Policy

For the purposes of this Privacy Policy, hq177 (accessible at hq177.ws) is the data controller responsible for the personal data of players registered on the platform. When this Policy refers to "hq177", "we", "us", or "our", it refers to the operator of the hq177 platform.

hq177 operates under an international gaming license and processes personal data in accordance with the data protection obligations applicable under that licensing framework. Where hq177 engages third-party processors to handle data on its behalf — such as payment processors or identity verification providers — those processors are bound by data processing agreements requiring them to apply the same standard of data protection as hq177 itself.

For all data-related enquiries, including access requests, correction requests, and complaints, please contact hq177 via the support channels listed in Section 14 of this Policy.

hq177 collects the following categories of personal data from players registered on the platform:

hq177 collects personal data through the following channels:

• Direct Registration: Information you provide when creating your hq177 account, including your name, mobile number, and date of birth.
• KYC Submission: Identity documents you upload during the verification process, including your CNIC scan.
• Payment Transactions: Financial details provided or confirmed when making deposits or withdrawal requests via JazzCash, EasyPaisa, bank transfer, or card.
• Platform Usage: Technical data collected automatically as you browse and use the hq177 platform, including IP address, device identifiers, and session logs.
• Customer Support: Information shared with hq177 support staff through live chat, email, or telephone contact.
• Cookies and Similar Technologies: Data collected via cookies, web beacons, and local storage as described in Section 7 of this Policy.
• Third-Party Verification Providers: Identity and sanctions-screening data received from licensed KYC and AML service providers engaged by hq177 to verify player identities.

hq177 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to create and manage your hq177 account, process deposits and withdrawals, settle bets, and deliver the gaming services you have contracted for. Without this processing, hq177 cannot provide its services to you.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and any reporting obligations imposed by hq177's gaming license. This includes mandatory identity verification and transaction monitoring.
• Legitimate Interests: Processing carried out in the legitimate business interests of hq177, including fraud detection and prevention, platform security, responsible gaming monitoring, and abuse prevention. hq177 has assessed that these interests do not override the privacy rights of players.
• Consent: Processing for direct marketing communications, including SMS promotions, bonus notifications, and platform updates. Consent for marketing is obtained separately at registration and can be withdrawn at any time from your account settings.

hq177 uses your personal data for the following specific purposes:

• Account Creation and Management: To register your hq177 account, authenticate your identity at login via SMS OTP, and maintain your account settings and preferences.
• Age and Identity Verification: To verify that you meet the minimum age requirement of 21 years and that your identity is genuine, as required under hq177's gaming license obligations.
• Payment Processing: To process PKR deposits and withdrawal requests via your chosen payment method, and to maintain accurate records of all financial transactions on your account.
• Fraud and AML Monitoring: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the hq177 platform. This includes automated transaction monitoring and account behaviour analysis.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling and to administer deposit limits, loss limits, cooling-off periods, and self-exclusion requests as described on our Responsible Gaming page.
• Customer Support: To respond to your enquiries, resolve disputes, and process complaints submitted through live chat, email, or other support channels.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the hq177 platform's performance, game offerings, and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, but only where you have given explicit consent for such communications. Each marketing message includes a clear opt-out mechanism.
• Legal and Regulatory Compliance: To meet reporting, record-keeping, and cooperation obligations imposed by hq177's gaming license authority and applicable law.

hq177 does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. Your data may be disclosed to the following categories of recipients only where strictly necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, 1LINK, Raast, and Visa/Mastercard processing partners receive the minimum financial data required to execute your transaction. These processors are subject to their own regulatory data protection obligations.
• KYC and Identity Verification Providers: Licensed third-party KYC service providers engaged by hq177 to verify CNIC authenticity, age, and sanctions-list screening. These providers process your identity data solely on hq177's instructions under a data processing agreement.
• Gaming Platform Technology Providers: Software providers supplying casino games, sports betting engines, fishing games, and slot content to hq177 may receive anonymised session data required for game delivery and RNG certification. They do not receive your personal identity data.
• Regulatory and Law Enforcement Authorities: hq177 may disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies where legally required to do so — for example, in response to a valid court order, AML reporting obligation, or regulatory inspection.
• Internal Group Entities: Where hq177 operates within a corporate group structure, data may be shared with group entities for consolidated AML compliance, risk management, and regulatory reporting purposes only.

hq177 uses cookies and similar tracking technologies on the hq177.ws platform. A cookie is a small text file stored on your device when you visit a website. hq177 uses the following categories of cookies:

You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies may affect the functionality of the hq177 platform, including your ability to log in and maintain an active session.

hq177 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following specific retention periods:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised, it may be retained indefinitely for aggregated statistical and platform improvement purposes.

As a player on the hq177 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact hq177 support as described in Section 14:

• Right of Access: You have the right to request a copy of the personal data hq177 holds about you, along with information about how it is being used. hq177 will respond to access requests within 14 business days.
• Right to Rectification: If any personal data hq177 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain details — such as your contact mobile number — directly from your account settings.
• Right to Erasure: You may request that hq177 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that hq177 is required by law to retain certain data (see Section 8) and erasure requests cannot override these obligations.
• Right to Restrict Processing: You may request that hq177 restrict the processing of your data — for example, while a dispute regarding its accuracy is being resolved.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to hq177 in a structured, commonly used, machine-readable format, where processing is based on your consent or a contract.
• Right to Withdraw Consent: Where processing is based on your consent — specifically, marketing communications — you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object: You have the right to object to processing carried out on the basis of hq177's legitimate interests. hq177 will consider your objection and cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

The hq177 platform is strictly for adults aged 21 and above. hq177 does not knowingly collect personal data from individuals under the age of 21. Registration requires a valid Pakistani CNIC, which is only issued to individuals aged 18 and above, and hq177 conducts additional age verification as part of its KYC process.

If hq177 becomes aware that personal data has been collected from a person under the age of 21 without proper verification, the associated account will be immediately suspended and the data will be securely deleted, subject to any mandatory regulatory retention obligations.

hq177 employs a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The key technical and organisational security measures in place include:

• TLS 1.3 Encryption: All data transmitted between your browser or mobile device and hq177's servers is encrypted in transit using TLS 1.3, the current industry standard for secure data transmission.
• AES-256 Data-at-Rest Encryption: Sensitive data stored on hq177's servers — including CNIC details, financial records, and authentication credentials — is encrypted at rest using AES-256.
• Multi-Factor Authentication: All hq177 accounts are protected by SMS OTP-based two-factor authentication at login, reducing the risk of unauthorised account access.
• Access Controls: Access to player data within hq177's internal systems is restricted on a strict need-to-know basis. All internal data access is logged and subject to regular audit.
• Intrusion Detection and Monitoring: hq177's infrastructure is monitored 24/7 for suspicious activity, attempted intrusions, and anomalous data access patterns.
• Regular Security Assessments: hq177 commissions regular independent security audits and penetration testing of its platform and data handling systems.

While hq177 takes all reasonable technical and organisational measures to protect your data, no system is completely immune to risk. You are responsible for maintaining the security of your account credentials and for reporting any suspected unauthorised access to hq177 support immediately.

The hq177 platform may contain links to third-party websites or services, such as game provider information pages or payment partner portals. This Privacy Policy applies solely to data processed by hq177 through the hq177.ws platform.

hq177 is not responsible for the privacy practices of third-party websites. When you follow a link to a third-party site, you should read that site's own privacy policy before providing any personal data. hq177 does not endorse or make any representations about third-party privacy practices.

hq177 may update this Privacy Policy from time to time to reflect changes in our data processing practices, technology infrastructure, or applicable legal and regulatory requirements. The current version of this Policy is always published at hq177.ws/privacy-policy with the effective date clearly displayed at the top of the document.

Where an amendment materially affects how hq177 processes your personal data — for example, a change to the categories of data collected or to the third parties with whom data is shared — hq177 will notify registered players via SMS or email at least 7 days before the amendment takes effect.

Your continued use of the hq177 platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with an amendment, you should stop using the platform and request account closure before the revised policy takes effect.

For any questions, requests, or complaints relating to this Privacy Policy or hq177's data processing practices, please contact our support team through the following channels:

• Live Chat: Available 24/7 via the hq177 platform. For data rights requests, state "Data Rights Request" at the start of your message. Average initial response: 3–5 minutes.
• Email: [email protected] — please use the subject line "Privacy Request" for data-related enquiries.

hq177 will acknowledge all privacy-related requests within 2 business days and provide a full response within 14 business days. For complex requests, you will be informed if additional time is required.

If you are not satisfied with hq177's response to your data rights request or complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority applicable under hq177's licensing jurisdiction.

Document version: PP-2026-01  |  Effective: 01 January 2026  |  hq177.ws