sz888 Privacy Policy

1 Introduction

1.1 sz888 is operated under an international gaming licence and provides online casino games, live dealer tables, and sports betting services — including PSL cricket betting — to eligible players. The platform is accessible at sz888.bio and is designed primarily for mobile-first access by Pakistani players located outside any Prohibited Jurisdiction.

1.2 This Privacy Policy applies to all personal data collected by sz888 through the platform, customer support channels, and any associated promotional communications. It should be read alongside the sz888 Terms and Conditions, which govern your overall use of the platform.

1.3 By registering an account on sz888, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2 Data Controller

2.1 For the purposes of this Privacy Policy, sz888 — operating under its international gaming licence — is the data controller responsible for your personal data collected through the sz888 platform.

2.2 As data controller, sz888 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection obligations under the licensing framework.

2.3 If you have any questions about data controllership or wish to exercise your data rights, please contact our Data Protection team via live chat on the platform or at the email address listed in Section 16 of this Policy.

3 Personal Data We Collect

3.1 sz888 collects personal data through multiple channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third-party service providers involved in payment processing and identity verification.

3.1 Registration and Account Data

• Full legal name;
• Date of birth (used for age verification — you must be 21 or older);
• Residential address (including city — Karachi, Lahore, Islamabad, Faisalabad, or elsewhere in Pakistan);
• Email address;
• Mobile phone number;
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

• National Identity Card (CNIC) or passport scan;
• Proof of address documentation;
• Selfie or biometric verification data where required;
• Source of funds documentation above defined thresholds.

3.3 Financial and Transaction Data

• JazzCash or EasyPaisa mobile wallet account identifiers;
• HBL, UBL, Meezan Bank, or MCB account details used for deposits and withdrawals;
• Transaction history including deposit amounts, withdrawal requests, and game wagering records;
• Payment method ownership verification data.

3.4 Technical and Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Session duration and activity logs;
• Cookie identifiers and similar tracking technologies (see Section 9).

3.5 Communications Data

• Support chat transcripts and emails exchanged with the sz888 customer support team;
• Feedback, complaints, and dispute correspondence.

4 How We Use Your Personal Data

sz888 uses your personal data for the following purposes:

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, contact details	Contract performance
Age and identity verification (KYC)	KYC documents, date of birth	Legal obligation
Processing deposits and withdrawals	Financial data, payment identifiers	Contract performance
Fraud prevention and AML compliance	Transaction data, device data, IP	Legal obligation / Legitimate interests
Game and bet settlement	Wagering records, account balance	Contract performance
Customer support	Communications data, account data	Contract performance
Responsible gaming monitoring	Behavioural data, session logs	Legal obligation / Legitimate interests
Marketing and promotions	Contact details, preferences	Consent
Platform improvement and analytics	Technical data, usage patterns	Legitimate interests
Regulatory reporting	All categories where required	Legal obligation

5 Legal Basis for Processing

5.1 Contract Performance: The majority of sz888's data processing is necessary for the performance of the contract between you and sz888 — that is, to operate your account, accept your deposits, settle your bets, and process your withdrawals.

5.2 Legal Obligation: As a licensed gaming operator, sz888 is required by its licensing authority to collect and retain certain data for KYC, anti-money laundering (AML), and responsible gaming compliance purposes.

5.3 Legitimate Interests: sz888 processes certain data — including device identifiers and session logs — based on its legitimate interests in fraud prevention, platform security, and service improvement. Such processing does not override your privacy rights.

5.4 Consent: Where sz888 sends you direct marketing communications or uses non-essential cookies, we rely on your consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

6.1 Payment Processors: sz888 shares necessary financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and MCB solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own data protection obligations.

6.2 Identity Verification Providers: KYC documentation is shared with third-party identity verification service providers engaged by sz888 to perform age and identity checks in compliance with our licensing requirements.

6.3 Game Content Providers: Game session data (but not your personal identity information) may be shared with third-party game providers such as Evolution Gaming and SA Gaming for the purposes of game provision and fairness auditing.

6.4 Fraud Detection Services: Device fingerprint data and transaction patterns may be shared with fraud detection service providers engaged by sz888 to protect the platform and its players.

6.5 Regulatory and Law Enforcement Authorities: sz888 will disclose personal data to its licensing authority, law enforcement agencies, or other regulatory bodies where required to do so by law, court order, or legitimate regulatory request.

6.6 Business Transfers: In the event of a merger, acquisition, or sale of all or part of sz888's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

7 International Data Transfers

7.1 sz888 operates under an international gaming licence and may process or store your personal data on servers located outside Pakistan. Where such transfers occur, sz888 implements appropriate safeguards — including data processing agreements with standard contractual clauses — to ensure that your data receives a level of protection consistent with applicable data protection standards.

7.2 By registering an account on sz888, you consent to the transfer of your personal data to servers and service providers located outside your country of residence, subject to the safeguards described in this section.

8 Data Retention

8.1 sz888 retains your personal data for as long as your account is active and for a minimum period of five years following account closure. This retention period is required by our licensing obligations and is necessary for the investigation of disputes, fraud, and regulatory audits.

8.2 KYC documentation is retained for a minimum of five years from the date of verification or the date of account closure, whichever is later.

8.3 Transaction records are retained for a minimum of five years from the date of each transaction.

8.4 Marketing preference data is retained until you withdraw your consent or close your account, whichever is earlier.

8.5 Support chat and email communications are retained for 24 months from the date of the last interaction, unless the content is relevant to an active dispute or investigation, in which case the data is retained for the duration of that matter plus two years.

9 Cookies and Tracking Technologies

9.1 sz888 uses cookies and similar technologies to operate the platform, maintain session state, prevent fraud, and understand how players use the service. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These cannot be disabled as they are essential to maintaining your logged-in session and processing transactions.
• Functional Cookies: Used to remember your preferences such as language settings, game history, and responsible gaming tool configurations.
• Analytics Cookies: Used to understand aggregate usage patterns on the platform. Data collected is anonymised and used solely for internal platform improvement.
• Marketing Cookies: Used with your consent to deliver relevant promotional content. You may opt out of marketing cookies via your browser settings or Account Settings at any time.

9.2 You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the sz888 platform. Disabling other cookie categories will not affect your ability to access games or manage your account.

10 Security Measures

10.1 sz888 implements the following technical security measures:

• TLS 1.3 encryption for all data in transit between your device and sz888 servers;
• AES-256 encryption for all personal data and financial records stored at rest;
• Isolated, access-controlled storage vaults for KYC documentation;
• Multi-factor authentication options for player accounts;
• Real-time fraud detection and anomaly monitoring;
• Regular third-party penetration testing and security audits;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.

10.2 Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, sz888 will notify affected players and relevant authorities as required by our licensing obligations.

10.3 You are responsible for keeping your own sz888 account credentials secure. Do not share your password or two-factor authentication codes with anyone. If you suspect unauthorised access to your account, contact sz888 support immediately via live chat.

11 Your Data Rights

11.1 Subject to applicable law and our licensing obligations, you have the following rights in respect of your personal data held by sz888:

• Right of Access: You may request a copy of all personal data sz888 holds about you. Requests will be fulfilled within 30 days.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some corrections can be made directly in Account Settings.
• Right to Erasure: You may request deletion of your personal data. Note that sz888 is required by its licensing obligations to retain certain categories of data for a minimum of five years even after account closure. Erasure requests will be fulfilled to the maximum extent permitted by law.
• Right to Restriction: You may request that sz888 restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing of your personal data where sz888 relies on legitimate interests as the legal basis. You may also object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time via Account Settings. Withdrawal does not affect the lawfulness of prior processing.

11.2 To exercise any of these rights, contact the sz888 Data Protection team via live chat on the platform or at the contact details in Section 16. sz888 will respond within 30 days and may request identity verification before processing your request.

12 Children's Privacy

12.1 If sz888 discovers or is notified that personal data has been collected from a person under the age of 21, the associated account will be immediately suspended, all data will be deleted to the extent permitted by our licensing obligations, and any balance will be handled in accordance with our Terms and Conditions.

12.2 If you believe that a minor has registered an account on sz888, please contact our support team immediately via live chat so that the matter can be investigated and resolved promptly.

13 Marketing Communications

13.1 With your consent, sz888 may send you promotional communications about bonuses, new game releases, PSL cricket betting markets, and other sz888 offers via email and in-platform notifications.

13.2 You may opt out of marketing communications at any time by:

• Updating your communication preferences in Account Settings;
• Clicking the unsubscribe link in any sz888 marketing email;
• Contacting sz888 customer support via live chat.

13.3 Opting out of marketing communications will not affect the delivery of transactional communications related to your account — such as deposit confirmations, withdrawal notifications, and security alerts. These communications are necessary for the operation of your account and cannot be disabled.

14 Third-Party Links

14.1 The sz888 platform does not contain links to external third-party websites. However, third-party game content — provided by licensed game studios — is embedded within the platform interface. sz888 is not responsible for the privacy practices of these game studios in respect of any data they independently collect through their game interfaces.

14.2 sz888 recommends reviewing the privacy policies of any third-party game providers whose titles you play on the platform, as their data practices may differ from those described in this Policy.

15 Updates to This Privacy Policy

15.1 sz888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, licensing requirements, or applicable law. Material changes will be communicated to registered players via email or a prominent notice on the platform at least 7 days before the new version takes effect, except where an immediate update is required for legal or regulatory compliance.

15.2 The effective date of the current version is clearly stated at the top of this document and in the last-updated badge above. We encourage you to review this Privacy Policy periodically. Your continued use of the sz888 platform after the effective date of any updated version constitutes acceptance of the revised Policy.

16 Contact and Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by sz888, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the sz888 platform — the fastest channel for all privacy queries and data requests.
• Email: [email protected] — plain text only, not a clickable link. Responses within 24 hours for general queries; within 30 days for formal data rights requests.

When submitting a data rights request, please include your registered email address and Account ID to allow sz888 to locate and verify your account. sz888 may require additional identity verification before processing access, erasure, or portability requests.