Hugh5 Privacy Policy – How We Protect Your Data

1. Introduction

Hugh5 is an online gaming and sports betting platform built specifically for Pakistan players. We take the privacy of our users seriously. This Privacy Policy sets out in plain language how we handle the personal information you share with us when you register, deposit, bet or interact with the platform in any way.

We collect personal data only where it is necessary to provide our services, verify your identity, process payments in PKR, comply with our legal obligations and keep the platform secure. We do not collect data for the sake of it and we do not share it with anyone who doesn't need it to help us run the platform.

This policy should be read alongside the Terms and Conditions, which govern the broader relationship between you and Hugh5. The terms and this privacy policy together form the complete agreement regarding how we handle your account and your data.

2. Data We Collect

The categories of personal data Hugh5 may collect from you include:

We do not collect sensitive personal data beyond what is required for identity verification and responsible gaming compliance. We do not collect data on religious beliefs, political opinions or biometric data.

3. How We Collect Your Data

Hugh5 collects data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support or update your account settings.
• Automatically — when you use the platform, our systems log technical data including your IP address, device type, session duration and pages visited. This happens whether you are on the website or the mobile app.
• From third-party verification providers — when we perform identity checks as part of our KYC process, we may receive confirmation data from third-party identity verification services.
• From payment processors — when you process a deposit or withdrawal via JazzCash, Easypaisa, Raast or bank transfer, relevant transaction data is shared between the payment provider and Hugh5 to confirm the transaction.

Hugh5 does not buy data from data brokers or marketing lists. All data we hold about you comes from your direct interaction with the platform or from technical systems needed to run it.

4. How We Use Your Data

Hugh5 uses your personal data for the following purposes:

• Account management: Creating, maintaining and securing your Hugh5 account. Sending account-related notifications such as login alerts and password changes.
• Identity verification: Verifying that you meet the 18+ age requirement and confirming your identity as part of our standard KYC process before processing withdrawals.
• Payment processing: Processing PKR deposits and withdrawals through JazzCash, Easypaisa, Raast and bank transfer. Maintaining records of your transaction history.
• Platform operation: Providing access to sports betting including PSL and cricket markets, live casino, bingo and all other platform features. Personalising your experience based on your activity where you have permitted this.
• Security and fraud prevention: Monitoring account activity to detect and prevent fraud, money laundering, multi-accounting and other prohibited activity as defined in the Terms and Conditions.
• Responsible gaming: Monitoring patterns of play to support responsible gaming obligations. Where problematic gambling patterns are identified, Hugh5 may contact you with responsible gaming information or apply account restrictions.
• Legal compliance: Meeting our obligations under applicable anti-money laundering (AML) requirements, including retaining records as required by law.
• Communications: Sending promotional communications about offers, bonuses and platform updates where you have not opted out. You can opt out at any time through account settings or by contacting support.
• Platform improvement: Analysing usage data in aggregate to understand how the platform is used and where improvements can be made. Individual player data is not used for this beyond anonymised aggregates.

5. Data Sharing

Hugh5 does not sell your personal data. We share data only with third parties who help us operate the platform, and only to the extent necessary for that purpose:

• Payment processors: JazzCash, Easypaisa, Raast and banking partners receive the data necessary to process your PKR transactions. These providers operate under their own privacy policies and security standards.
• Identity verification providers: Third-party KYC services may receive your identity documents for the purpose of verification. These services are bound by confidentiality obligations.
• Anti-fraud and compliance systems: Data may be shared with fraud detection and AML compliance systems to protect the platform and its users.
• Technical infrastructure providers: Cloud hosting, CDN and database services that store and process platform data operate under strict data processing agreements with Hugh5.
• Legal authorities: Where required by applicable law, Hugh5 may be required to disclose personal data to law enforcement or regulatory authorities. Hugh5 will only do so where legally obligated.

6. Payment Data & PKR Transactions

All financial transactions on Hugh5 are conducted in Pakistani Rupees (PKR). The platform supports JazzCash, Easypaisa, Raast instant transfers and bank transfers. When you make a deposit or request a withdrawal, the following data handling applies:

• Hugh5 does not store full bank account numbers, IBAN details or JazzCash/Easypaisa PINs on its own servers. Only the information required to identify and reconcile a transaction — such as a mobile number or transaction reference — is retained by Hugh5.
• Payment data is transmitted over encrypted connections at all times.
• Transaction records are retained for the period required to meet our legal obligations, typically a minimum of five years, to comply with standard AML record-keeping requirements.
• Withdrawal requests are matched to the payment method used for your most recent deposit as a standard anti-fraud measure. Where you need to change your withdrawal method, identity verification may be required.

If you believe there has been an unauthorised transaction on your account, contact Hugh5 support immediately. Do not initiate a chargeback with your bank or mobile wallet provider without first raising the matter with Hugh5 support, as this may affect your account status during the investigation period.

7. Data Retention

Hugh5 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including meeting legal, compliance and record-keeping obligations:

• Active accounts: All data is retained for the duration of your account being active on the platform.
• Closed accounts: After an account is closed, identity and transaction data is retained for a minimum of five years to meet standard AML record-keeping requirements.
• Self-excluded accounts: Where a player has requested self-exclusion, account data is retained to prevent re-registration during the exclusion period and for post-exclusion compliance purposes.
• Support communications: Chat and email records are retained for up to two years after the interaction to allow for follow-up and dispute resolution.
• Technical logs: Server and access logs are retained for a shorter period, typically 90 days, unless retained longer for a specific security investigation.

When data is no longer required and the retention period has passed, Hugh5 deletes or anonymises it securely. You may request early deletion of your data subject to the limitations described in Section 10 (Your Rights).

8. Cookies & Tracking

Hugh5 uses cookies and similar technologies on the website and mobile app. A cookie is a small text file stored on your device that allows the platform to recognise your session and preferences. The categories of cookies used are:

• Essential cookies: Required for the platform to function. These keep you logged in during a session and ensure pages load correctly. These cannot be disabled without breaking core platform functionality.
• Performance cookies: Collect anonymised data on how pages are used — such as which sections are visited most — to help improve the platform. No personally identifiable data is included in these reports.
• Functional cookies: Remember your preferences such as language settings and display options so you don't have to re-enter them each visit.
• Security cookies: Support fraud detection and account security by identifying unusual login patterns or suspicious activity across sessions.

Hugh5 does not use third-party advertising or behavioural tracking cookies. You can manage cookie preferences through your browser settings, though disabling essential cookies will affect your ability to use the platform normally.

9. Data Security

Hugh5 applies technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. The security measures in place include:

• HTTPS encryption for all data transmitted between your device and Hugh5 servers.
• Encryption at rest for sensitive stored data including identity documents and financial records.
• Access controls ensuring that only authorised personnel with a legitimate need can access personal data.
• Regular security reviews of platform infrastructure and third-party integrations.
• Session management controls including automatic logout after periods of inactivity.

While Hugh5 takes reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your account password secure and for logging out of your account when using shared devices. If you suspect your account has been compromised, contact Hugh5 support immediately.

10. Your Data Rights

As a Hugh5 account holder, you have the following rights regarding your personal data:

• Right to access: You can request a copy of the personal data Hugh5 holds about you. We will respond to verified access requests within a reasonable timeframe.
• Right to correction: If any personal data held by Hugh5 is inaccurate or out of date, you can request that it be corrected. Some data — such as your registered name — may require identity verification before it can be changed.
• Right to deletion: You can request that Hugh5 delete your personal data. Note that this right is subject to our legal obligations — data that must be retained for AML compliance cannot be deleted before the mandatory retention period expires. Deletion requests will result in account closure.
• Right to object to marketing: You can opt out of promotional communications from Hugh5 at any time through your account settings or by contacting support. Opting out of marketing does not affect account-related notifications which are necessary for platform operation.
• Right to data portability: You can request a copy of your personal data in a commonly used electronic format where technically feasible.

To exercise any of these rights, contact Hugh5 support with a clear description of your request and your account username. Hugh5 may need to verify your identity before processing a data request. All requests will be handled within a reasonable period and Hugh5 will keep you informed of progress.

11. Minors & Underage Protection

Hugh5 is strictly an adults-only platform for players aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Age verification is part of the account registration and withdrawal process.

If Hugh5 discovers that an account has been registered by or used by a person under 18, that account will be closed immediately, all bets voided and any deposited funds returned to the payment source after investigation. We take underage access seriously and have age verification processes in place to prevent it.

Parents and guardians who share devices with minors should use device-level parental controls and browser restrictions to prevent access to gaming platforms. If you become aware of an underage person using a Hugh5 account, please contact support immediately.

12. Changes to This Privacy Policy

Hugh5 may update this Privacy Policy from time to time to reflect changes in our practices, platform features or legal requirements. When changes are made, the "last updated" date at the top of this page will be revised.

For significant changes — those that materially affect your rights or how your data is used — Hugh5 will notify registered users through the platform or by email to the address on your account. For minor updates, the revised policy will simply be published on this page.

Your continued use of Hugh5 after a policy update constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using the platform and may request account closure as described in the Terms and Conditions.

13. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights or need to report a privacy concern, please get in touch with the Hugh5 support team:

• Email: [email protected] — please reference "Privacy Request" in your subject line for faster routing.
• In-platform chat: Available when logged in for general queries and faster support on active account issues.

Hugh5 aims to respond to privacy-related queries within a few business days. Complex data access or deletion requests may take longer, and we will keep you informed of the expected timeline once we have received your request.

For questions about responsible gaming tools including deposit limits, session tracking and self-exclusion, visit the Responsible Gaming page or contact support directly. For general platform questions, the FAQ page covers the most common queries without needing to contact support.