Privacy Policy — How sz666 Handles Your Personal Data

This Privacy Policy ("Policy") is issued by sz666 ("sz666", "we", "us" or "our") and governs the collection, processing, storage and disclosure of personal data relating to all users ("you", "User" or "Player") of the sz666 online betting and casino platform accessible at sz666.cam.

sz666 operates as an English-language online betting and casino information platform targeting Pakistani users. We are committed to handling all personal data responsibly, lawfully and transparently. This Policy describes our practices in plain English so that every user — whether based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or elsewhere — can understand exactly how their data is managed.

By registering an account, depositing funds, placing bets or otherwise accessing any feature of the sz666 platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform immediately.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling guidelines, each of which forms part of the overall agreement between you and sz666.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, device identifiers and financial information.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure and destruction.
• "Data Controller" means sz666, which determines the purposes and means of processing personal data on the platform.
• "Data Subject" means the natural person to whom the personal data relates — in this context, the registered User.
• "Consent" means a freely given, specific, informed and unambiguous indication of the Data Subject's agreement to the processing of their personal data.
• "KYC" means Know Your Customer — the identity verification process carried out in accordance with compliance and AML obligations.
• "Cookies" means small data files placed on a User's device by the platform for functional, analytical and preference-retention purposes.
• "Third-Party Processors" means external service providers engaged by sz666 to perform data processing functions on our behalf, under contractual data protection obligations.

sz666 collects only the personal data that is necessary for the operation of the platform, compliance with legal obligations and the delivery of a safe and transparent user experience. The categories of data we may collect include:

sz666 does not collect sensitive personal data (such as biometric data, health information or criminal conviction records) except where strictly required by applicable law or KYC/AML obligations, and only with appropriate safeguards in place.

sz666 collects personal data through the following primary means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support or submitting feedback.
• Automated collection: Technical and behavioural data collected automatically when you access or interact with the platform, including IP addresses, device fingerprints and session logs.
• Cookies and similar technologies: Data collected via cookies, web beacons and local storage to support platform functionality, security and performance analytics. See Section 10 for full details.
• Third-party sources: Identity verification data returned by KYC/AML service providers during the account verification process; fraud-detection data from security service partners.
• Payment processors: Transaction confirmation data returned by payment processors when you make deposits or request withdrawals. Payment service providers referenced contextually on sz666 (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are referenced as familiar Pakistani payment rails. Their mention does not imply endorsement of gambling by those providers.

sz666 processes personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil the contract between sz666 and the User — including account management, transaction processing and support services.
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, AML monitoring, record-keeping and regulatory reporting.
• Legitimate interests: Processing carried out in pursuit of sz666's legitimate business interests — including platform security, fraud prevention, responsible-gambling monitoring and platform analytics — where such interests are not overridden by the User's privacy rights.
• Consent: Where processing is based on consent (for example, marketing communications), we will obtain your explicit agreement before processing and will provide a straightforward mechanism for withdrawing consent at any time.

Personal data collected by sz666 is used for the following specific purposes:

• Registering and managing your account on the platform;
• Verifying your identity, age and eligibility to use the platform under KYC procedures;
• Processing deposits, withdrawals and financial transactions via supported payment methods;
• Detecting, investigating and preventing fraud, money laundering, account abuse and other prohibited conduct;
• Monitoring gameplay and account activity for responsible-gambling purposes, including identifying potential problem-gambling behaviour;
• Communicating with you regarding your account, transactions, promotions (where consented) and platform updates;
• Responding to support enquiries, resolving disputes and delivering customer service in English (and in Urdu where requested);
• Complying with applicable legal and regulatory obligations, including AML reporting requirements;
• Maintaining and improving the security, stability and performance of the platform;
• Conducting internal analytics to improve the platform experience for Pakistani users.

sz666 does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• KYC / Identity verification providers: Third-party services engaged to verify identity documents and age as part of the account registration and compliance process.
• AML / Fraud detection services: Specialist compliance partners who assist in detecting suspicious transaction patterns and preventing financial crime on the platform.
• Payment processors: Financial intermediaries that process deposit and withdrawal transactions on behalf of sz666. Data shared is limited to what is necessary to complete the transaction.
• IT infrastructure and hosting providers: Cloud and server service providers who host platform data, subject to contractual data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, courts and regulators where disclosure is required by applicable law, court order or regulatory direction — and only to the extent required.
• Professional advisers: Legal counsel, auditors and compliance consultants bound by confidentiality obligations and engaged in connection with the operation of sz666.

All third-party processors engaged by sz666 are required to implement appropriate technical and organisational data security measures and are contractually prohibited from using personal data for any purpose beyond the specific service they provide.

sz666 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention principles apply:

• Account and identity data is retained for the duration of the active account relationship and for a defined period following account closure, as required by AML and regulatory obligations.
• Financial transaction records are retained for a minimum period as required by applicable financial crime and record-keeping regulations.
• KYC documentation is retained in accordance with the requirements of the applicable compliance framework.
• Support communication records are retained for a reasonable period to facilitate dispute resolution and quality assurance.
• Technical and analytical data (e.g., anonymised session logs) may be retained for longer periods in aggregated, non-identifiable form for platform improvement purposes.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

sz666 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• HTTPS / TLS encryption: All data transmitted between your device and the sz666 platform is encrypted in transit via HTTPS/TLS protocols. The padlock symbol in your browser confirms an active encrypted connection.
• Access controls: Access to personal data within sz666's systems is restricted to authorised personnel on a strict need-to-know basis. Staff with data access undergo appropriate training and are bound by confidentiality obligations.
• Authentication controls: Account access is protected by user credentials and optional two-factor authentication. Automated systems monitor for unusual login patterns and trigger alerts on suspicious activity.
• Infrastructure security: Platform infrastructure is hosted on secure, monitored environments with regular security assessments and patch management processes.
• Incident response: sz666 maintains procedures for detecting, assessing and responding to data security incidents. In the event of a breach that poses a risk to Users, we will take appropriate steps to notify affected individuals in line with applicable obligations.

Notwithstanding the above, no data transmission over the internet or electronic storage system is entirely risk-free. Users are responsible for keeping their own login credentials secure and should contact support immediately if they suspect any unauthorised access to their account.

sz666 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device that allow the platform to remember preferences, maintain session integrity and collect analytical data.

• Strictly necessary cookies: Required for core platform functionality, including session management, login authentication and security. These cannot be disabled without impairing platform operation.
• Functional cookies: Used to remember your preferences — for example, language settings or display preferences — to provide a more personalised experience.
• Analytical cookies: Used to collect anonymised data on how Users interact with the platform — page load times, navigation paths, feature usage — to help us improve performance and usability for Pakistani users.
• Security cookies: Used to detect fraudulent activity, unusual session behaviour and bot-driven access patterns that may pose a risk to platform integrity.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the sz666 platform. sz666 does not use cookies to serve third-party advertising or to track you across external websites.

As a data subject, you have the following rights in relation to your personal data held by sz666. We are committed to facilitating the exercise of these rights promptly and without unnecessary obstacles.

The sz666 platform is strictly for adults. Access to and use of the platform is limited to individuals who are at least 18 years of age, or the higher minimum age required by the applicable operator or licensing jurisdiction, whichever is greater.

sz666 does not knowingly collect personal data from individuals under the applicable minimum age. Age verification is carried out as part of the KYC process, and accounts found to have been registered by or on behalf of minors will be immediately closed, with any balance returned to the verified funding source after compliance review.

If you have reason to believe that a minor has submitted personal data to sz666, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

As an online platform serving users globally including Pakistani players, sz666 may transfer personal data to third-party processors located outside of Pakistan. Such transfers are made only where necessary for the provision of services (for example, to cloud infrastructure providers or KYC verification services) and are subject to appropriate contractual safeguards.

sz666 requires all international data processors to provide data protection guarantees that are equivalent to those we apply internally. Where applicable law provides a mechanism for cross-border data transfer adequacy (such as standard contractual clauses or equivalent instruments), we rely on those mechanisms.

Pakistan does not currently have a comprehensive data protection law that mandates specific cross-border transfer mechanisms. Users based in Pakistan should be aware that data transferred for KYC and compliance purposes may be processed in jurisdictions with different legal frameworks. sz666 takes reasonable steps to ensure adequate protections are in place regardless of the processing location.

sz666 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, platform operations or data processing practices. Where changes are material, we will endeavour to provide reasonable advance notice via the Platform or by email to your registered address.

The "Last reviewed" date at the top of this document indicates when the Policy was most recently updated. We recommend checking this page periodically. Your continued use of the sz666 platform following the effective date of any update constitutes your acceptance of the revised Policy.

If you do not agree with any update to this Policy, you should stop using the Platform and may request account closure in accordance with the Terms & Conditions.

For all privacy-related enquiries, data access requests, erasure requests or objections to processing, please contact the sz666 data team using the details below. All requests will be acknowledged promptly and handled in accordance with the timelines described in this Policy.

• Email: [email protected] (plain text — not a clickable link)
• Subject line recommended: "Privacy Request — [Your Account Username]"
• Support Hours: 24 hours a day, 7 days a week
• Languages: English standard; Urdu available on request
• Response timeframe: sz666 will acknowledge all data requests within 5 business days and respond substantively within 30 calendar days, or such other period as required by applicable law.

For general account support, bonus enquiries or responsible-gambling assistance, please also refer to our FAQ page.