sz666 Privacy
Policy

This Privacy Policy ("Policy") is issued by sz666 ("sz666", "we", "us", "our") and applies to all individuals who access, register, or otherwise interact with the sz666 platform available at sz666.org ("Platform"). sz666 is committed to protecting the privacy and personal data of every player, particularly those based in Pakistan.

This Policy describes the types of personal information sz666 collects, the lawful bases upon which we process that information, how we use and protect it, with whom we may share it, and the rights you hold in relation to your data. By registering an account with sz666 or continuing to use the Platform, you acknowledge that you have read and understood this Policy in full.

This Policy should be read alongside the sz666 Terms & Conditions, which together form the complete legal framework governing your relationship with sz666.

For the purposes of applicable data protection legislation, sz666 acts as the data controller in respect of personal data collected through and processed by the Platform. The data controller is responsible for deciding how and why personal data is used, and for ensuring that processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, access requests, and complaints should be directed to the sz666 Data Protection contact, reachable through our support channels listed in Section 15 of this Policy. sz666 will respond to all legitimate requests within 30 calendar days of receipt.

sz666 collects personal data that is necessary for the provision of our gaming services, compliance with regulatory obligations, and the protection of both players and the platform. The categories of personal data we collect include the following:

sz666 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health data unless it is directly volunteered by you in a support context (for example, if you disclose a gambling-related health concern to our responsible gaming team). Any such data disclosed in that context is handled with the highest level of care and confidentiality.

sz666 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC, making deposits or withdrawals, contacting support, or adjusting your responsible gaming settings.
• Automated technologies: Technical and usage data collected automatically as you navigate and interact with the sz666 Platform, including through cookies, log files, and device fingerprinting tools used for fraud prevention.
• Payment processors: Transaction reference data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 payment rails when you initiate a deposit or withdrawal on sz666.
• Identity verification partners: Confirmation data returned from third-party KYC verification services that cross-reference the identity documents you submit against authoritative databases.
• Responsible gaming tools: Choices and limits you configure through the sz666 responsible gaming dashboard, including deposit caps and self-exclusion elections.

sz666 only processes your personal data where there is a lawful basis for doing so. The table below summarises our processing purposes and the corresponding legal basis applied in each case:

• Account registration and management: Processing is necessary for the performance of the contract between you and sz666 — namely, the provision of gaming services as described in the Terms & Conditions.
• Identity verification (KYC): Processing is required to comply with our legal obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) regulatory requirements.
• Processing deposits and withdrawals: Processing is necessary for the performance of the contract and to fulfil our obligations to you as a player with an active PKR wallet balance on sz666.
• Fraud prevention and security monitoring: Processing is necessary for the purposes of our legitimate interests in protecting the integrity of the sz666 Platform and the safety of all players.
• Customer support communications: Processing is necessary for the performance of the contract and to respond to your requests and resolve your queries in a timely manner.
• Responsible gaming compliance: Processing is required to comply with our legal and regulatory obligations to monitor at-risk players and enforce self-exclusion elections where applicable.
• Platform analytics and improvement: Processing is based on our legitimate interest in understanding how the sz666 Platform is used in order to improve performance, usability, and content for Pakistani players.
• Marketing communications: Where you have provided explicit consent, sz666 may send you promotional messages about new games, bonuses, or offers. You may withdraw consent at any time from within your account settings.

sz666 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited, controlled circumstances:

• Payment service providers: Financial data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency network processors strictly to process your deposits and withdrawals. These providers are contractually bound to use your data only for that purpose.
• Identity verification providers: Identity documents and personal details are shared with licensed KYC service providers for the sole purpose of verifying your identity as required by our regulatory obligations.
• Regulatory and law enforcement authorities: sz666 will disclose personal data to competent authorities where required to do so by law, court order, or applicable regulatory requirement. This includes mandatory AML disclosures.
• Platform technology partners: Limited technical and usage data may be shared with software providers who power certain components of the sz666 Platform (for example, game studios, live streaming infrastructure) under strict data processing agreements.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of sz666's business, player data may be transferred to the acquiring entity subject to equivalent privacy protections being in place.

All third parties with whom sz666 shares data are required to process it in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond what has been specified in their agreement with sz666.

sz666 takes the handling of financial data with particular seriousness given the sensitivity of payment information among Pakistani players. The following rules govern how sz666 handles all payment-related data:

• sz666 does not store full JazzCash or EasyPaisa account credentials on its own servers. Payment processing is handled directly by the respective payment gateway, with sz666 retaining only a transaction reference ID and status.
• Bank account details provided for withdrawal purposes are stored in encrypted form and are accessible only to authorised finance team members operating within defined access controls.
• USDT TRC20 wallet addresses provided for cryptocurrency deposits are stored with the same level of encryption applied to other financial identifiers.
• Transaction history — including deposit amounts in PKR, withdrawal requests, and bonus conversions — is retained as part of your account record for the period specified in Section 8 of this Policy.
• sz666 will never request your full JazzCash PIN, EasyPaisa MPIN, bank internet banking password, or any equivalent credential through email, chat, or phone call. Any communication purporting to be from sz666 and requesting such information should be treated as fraudulent and reported immediately.

sz666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your sz666 account and for a minimum period of five (5) years following account closure, in line with standard AML record-keeping requirements.
• KYC identity documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later, as required by anti-money laundering regulations applicable to our licensing jurisdiction.
• Transaction records: Retained for a minimum of five (5) years following each transaction to support audit, compliance, and dispute resolution requirements.
• Support communications: Chat transcripts and email correspondence are retained for three (3) years from the date of the interaction unless a longer period is required for an open dispute or investigation.
• Marketing consent records: Records of consent and withdrawal of consent for marketing communications are retained indefinitely to demonstrate compliance.
• Responsible gaming records: Self-exclusion elections, deposit limit settings, and related responsible gaming actions are retained for a minimum of five (5) years to support our regulatory obligations and protect player welfare.

Once retention periods expire and there is no outstanding legal obligation requiring continued retention, sz666 will securely delete or anonymise the relevant personal data in accordance with our internal data lifecycle management procedures.

sz666 has implemented a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and sz666 servers, ensuring that your login credentials and payment data cannot be intercepted in transit.
• At-rest encryption for all sensitive personal data stored in sz666 databases, including identity documents, financial records, and KYC information.
• Two-factor authentication (2FA) available to all sz666 account holders as an optional but strongly recommended layer of login security.
• Role-based access controls ensuring that sz666 staff can only access player data to the extent necessary for their specific role and function.
• Device fingerprinting and anomaly detection to identify suspicious login attempts and flag potential account takeover activity in real time.
• Regular security audits of platform infrastructure conducted by independent third-party security professionals.
• Incident response procedures enabling sz666 to identify, contain, and notify affected players of any data breach within the timeframes required by applicable regulation.

As a player whose personal data is processed by sz666, you hold the following rights in relation to that data. sz666 will respond to all valid requests within 30 calendar days of receipt:

• Right of access: You have the right to request a copy of the personal data sz666 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. Many details can be updated directly from within your sz666 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal obligations (such as AML retention requirements).
• Right to restrict processing: You may request that sz666 restrict the processing of your personal data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is carried out on the basis of your consent or a contract, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including processing for direct marketing purposes. sz666 will cease such processing upon receipt of a valid objection unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, contact sz666 support using the details provided in Section 15. You may also manage marketing preferences and responsible gaming settings directly within your account dashboard. sz666 will not charge a fee for handling a data rights request in ordinary circumstances.

sz666 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and allow us to analyse how it is used. The types of cookies sz666 uses are:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your sz666 account and security tokens that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits you have configured. Disabling these may affect Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players interact with the sz666 Platform — for example, which games are most popular and how navigation flows are used. This information is used purely to improve the Platform.
• Fraud prevention cookies: Used to fingerprint devices and detect suspicious activity patterns that may indicate account takeover or multi-accounting attempts.

sz666 does not use third-party advertising cookies or retargeting pixels. You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may impair your ability to use some features of the sz666 Platform.

During the registration and KYC process, sz666 verifies the age of all applicants. If sz666 becomes aware that personal data has been collected from a minor, we will take immediate steps to delete that data and terminate the account. If you believe a minor has registered an account on sz666, please contact our support team immediately so we can investigate and act accordingly.

Parents and guardians in Pakistan are encouraged to make use of parental control software to prevent minors from accessing online gaming platforms, including sz666. Our Responsible Gaming page contains further guidance and resources.

sz666 operates as an internationally licensed online gaming platform, which means that some personal data may be processed or stored on servers located outside of Pakistan. Where data is transferred internationally, sz666 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.

Safeguards used for international data transfers by sz666 include contractual data processing agreements with all third-party service providers that impose data protection obligations equivalent to those applied within our own operations, including restrictions on further transfer and requirements for appropriate technical and organisational security measures.

sz666 does not transfer personal data to jurisdictions with inadequate data protection frameworks without implementing additional protective measures, including enhanced contractual clauses and access controls appropriate to the risk profile of the transfer in question.

sz666 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, or our own business practices. When material changes are made to this Policy, sz666 will notify registered players through one or more of the following channels:

• A prominent notice displayed on the sz666 Platform upon your next login following the update.
• An email notification sent to the address registered on your sz666 account.
• An updated "Last updated" date displayed at the top of this Privacy Policy page.

Your continued use of the sz666 Platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should discontinue use of the Platform and contact support to exercise your data rights as described in Section 10. We encourage all sz666 players to review this Privacy Policy periodically to stay informed of how your data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way sz666 handles your personal data, please contact our Data Protection team through the following channel:

sz666 will acknowledge all privacy-related requests within 5 business days and will endeavour to resolve them fully within 30 calendar days. For complex requests that require extended processing, we will keep you informed of progress throughout. We take all privacy concerns seriously and are committed to handling your data with the care and respect it deserves.