Hugh5 Privacy Policy – How We Handle Your Data

1Who This Policy Applies To

This Privacy Policy applies to all individuals who register an account on Hugh5, visit the platform without registering, contact Hugh5 support, or interact with any part of the platform in any capacity. It applies regardless of the device used — mobile browser, tablet or desktop.

If you are accessing Hugh5 from Pakistan, this policy governs how your personal data is handled. Hugh5 is designed and operated with Pakistan players as the primary user base, and the data handling practices described here reflect that context — including the specific payment methods used in Pakistan and the identity documents typically presented for verification in this market.

By using any part of the Hugh5 platform, you acknowledge that you have read this Privacy Policy and that you consent to the collection and use of your personal data as described here. If you do not agree, you should not register or use the platform.

2What Data We Collect

Hugh5 collects personal information at different points during your interaction with the platform. The categories and specific data points are as follows:

At Registration:

• Full name as it appears on your CNIC
• Date of birth
• Mobile phone number
• Email address (if provided)
• Preferred payment method and associated identifier (e.g. JazzCash number or bank account name)

During Account Verification:

• CNIC images (both sides) for identity confirmation
• Proof of payment method ownership (varies by method)
• Any additional documents requested as part of enhanced verification

During Platform Use:

• Login timestamps and session duration
• Device type, browser type and operating system
• IP address and approximate location derived from IP
• Games played, stakes placed, bonuses used and withdrawal history
• Support communications — messages you send to Hugh5 support and our responses

Technical and Analytical Data:

• Cookie and session identifiers (see the Cookies section for details)
• Platform performance data used for technical troubleshooting

Hugh5 does not collect data beyond what is listed above. We do not collect biometric data, social media profiles or data about your activity on other platforms unless you provide it voluntarily in a support message.

3How We Use Your Data

The personal data collected by Hugh5 is used for specific, legitimate purposes related to operating the platform for Pakistan players. We do not use your data for purposes beyond those listed here without notifying you.

Hugh5 does not use automated decision-making in a way that would have a significant legal or financial effect on you without human review. Account suspension decisions involving fraud or terms violation are reviewed by a member of the Hugh5 team before being finalised.

4Payment Data

Payment processing on Hugh5 is handled through third-party payment providers — JazzCash, Easypaisa, Raast, bank networks and card processors. When you initiate a deposit or withdrawal, you interact with those providers' systems directly.

Hugh5 receives confirmation that a transaction has been completed, the PKR amount involved and the identifier of the payment method used (for example, the registered mobile number for a JazzCash transaction). Hugh5 does not receive or store your JazzCash PIN, Easypaisa password, bank login credentials or card details at any point.

Payment method identifiers stored by Hugh5 — such as your registered JazzCash number — are used solely to:

• Match deposits to your Hugh5 account
• Process withdrawal requests to your verified payment destination
• Verify that the payment method belongs to you during account verification

5Cookies and Tracking

Hugh5 uses cookies and similar technologies to operate the platform, maintain your login session, and understand how the platform is being used. Cookies are small text files stored on your device by your browser.

The cookies used on Hugh5 fall into the following categories:

• Essential cookies: Required for the platform to function. These include session tokens that keep you logged in and security cookies that protect against certain types of attack. You cannot use the platform without these cookies active.
• Functional cookies: Remember your preferences — for example, which game category you last browsed or your preferred deposit method display. These improve your experience but the platform works without them.
• Analytical cookies: Provide aggregated, anonymised data about how players navigate the platform — which pages are visited, where sessions end, which features are used most often. This data is used to improve the platform and is not linked to your personal identity.

Hugh5 does not use advertising cookies or cross-site tracking technologies that follow you outside of the Hugh5 platform. The analytical tools in use receive only anonymised and aggregated data.

Most mobile and desktop browsers allow you to manage cookie settings — you can block or delete non-essential cookies through your browser settings. Blocking essential cookies will prevent you from logging in and using the platform.

6Third-Party Sharing

Hugh5 does not sell personal data to any third party. Data sharing is limited to the following categories of third party and the specific purposes listed:

• Payment providers (JazzCash, Easypaisa, Raast, banks, card networks): Receive the minimum information required to process the payment you have initiated. Their use of that data is governed by their own privacy policies.
• Game software providers: Receive anonymised session data — specifically a session token rather than your personal identity — to deliver the game and record the outcome. Game providers do not receive your name, CNIC or payment details.
• Platform infrastructure providers (hosting, CDN, analytics): May process anonymised technical data as part of delivering the platform. These providers are contractually prohibited from using Hugh5 platform data for any purpose other than providing the contracted service.
• Law enforcement or regulatory bodies: Hugh5 will disclose personal data if required to do so by a court order, legal process or lawful direction from a relevant authority. We will notify you of such a disclosure where legally permitted to do so.

Hugh5 does not share your personal data with advertising networks, data brokers, social media platforms or any commercial third party for the purpose of marketing their products or services to you.

7Data Storage and Security

Personal data collected by Hugh5 is stored on secure servers with access restricted to authorised personnel only. The following security measures are in place:

• All data transmission between your device and Hugh5 is encrypted via HTTPS (TLS).
• Stored personal data — including CNIC images submitted for verification — is encrypted at rest.
• Access to personal data within Hugh5 is restricted on a need-to-know basis. Support staff can access account-level data required to assist you but do not have access to raw verification documents without supervisor authorisation.
• Account login is protected by password hashing. Hugh5 does not store your password in plaintext and cannot retrieve it — only reset it.
• Platform security is reviewed regularly and access logs are monitored for anomalous activity.

No security system is completely infallible. In the event of a data breach that affects your personal information, Hugh5 will notify affected account holders as quickly as reasonably practicable and take steps to limit the impact of the breach.

You play a role in the security of your account data. Use a strong, unique password for your Hugh5 account, do not share your login details with anyone, and contact support immediately if you believe your account has been accessed without your authorisation.

8Data Retention

Hugh5 retains personal data for as long as your account is active and for a defined period after account closure. The general retention principles are:

• Active accounts: All account data is retained while the account is open and in use.
• Closed accounts: Core identity and transaction records are retained for a period after account closure for fraud prevention, dispute resolution and financial record-keeping purposes. The length of this retention period is determined by the nature of the data and applicable record-keeping obligations.
• Verification documents (CNIC images): Retained for the duration required to satisfy verification obligations and for a reasonable period thereafter. Documents are not retained indefinitely after an account is permanently closed.
• Support communications: Retained for a period sufficient to allow resolution of follow-up queries related to the same matter.
• Anonymised analytical data: May be retained indefinitely as it contains no personal identifiers.

If you request account deletion, Hugh5 will delete or anonymise your personal data within a reasonable timeframe, subject to any legal obligation to retain specific records. Transaction records may be retained for a longer period independent of other personal data to satisfy financial record-keeping requirements.

9Your Rights Over Your Data

As a Hugh5 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact Hugh5 support with your request. Requests will be acknowledged and processed within a reasonable timeframe.

10Minors

Hugh5 is strictly for adults aged 18 and above. The platform does not knowingly collect personal data from individuals under 18. Age verification is conducted as part of the account verification process, and any account found to belong to a minor will be closed immediately with all deposits returned.

If you are a parent or guardian and believe a minor has registered on Hugh5 using false age information, contact support immediately with the account details. Hugh5 will investigate and close the account if confirmed.

Hugh5 uses platform-level controls — including age confirmation at registration and CNIC verification before withdrawals — to minimise the risk of minors accessing the platform. These controls are not perfect, which is why parental awareness and supervision remain important.

11Changes to This Privacy Policy

Hugh5 may update this Privacy Policy from time to time. Updates are published on this page with a revised effective date. The date shown at the top of this page indicates when the current version was last changed.

For significant changes — particularly those that affect how your personal data is used or shared — Hugh5 will notify registered account holders via the mobile number or email address on their account, where reasonably practicable, before the changes take effect.

Your continued use of the Hugh5 platform after an updated Privacy Policy is published constitutes acceptance of the updated terms. If you do not agree with a change, you should contact support to arrange account closure before the new policy takes effect.

Hugh5 recommends that you review this page periodically, particularly if you have not visited it since first registering. Privacy policies for online platforms do change over time and staying aware of the current version is in your interest.