sz999 Privacy Policy

1. Introduction

sz999 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every player who registers and plays on sz999.pro. This Privacy Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal information in connection with the sz999 platform and all associated services.

This Policy is intended to be read alongside the sz999 Terms and Conditions and the Responsible Gaming Policy. Together, these documents form the complete agreement governing your relationship with the sz999 platform. If you do not agree with any part of this Privacy Policy, you should discontinue use of sz999.pro and contact our support team to request account closure.

We periodically review and update this Privacy Policy to reflect changes in our data practices, applicable law, and regulatory requirements. The "Last Updated" date at the top of this document reflects the most recent revision. Continued use of sz999 following notification of a material change constitutes your acceptance of the revised Policy.

2. Data Controller

For the purposes of applicable data protection law, sz999 is the data controller responsible for personal data collected through sz999.pro. As data controller, sz999 determines the purposes for which and the means by which your personal data is processed.

All data protection queries, subject access requests, and privacy complaints should be directed to the sz999 Data Protection team via the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

sz999 collects the following categories of personal data, depending on how you interact with the platform:

Category	Examples	Purpose
Identity Data	Full name, date of birth, CNIC number, nationality	Account registration, KYC verification, age verification
Contact Data	Email address, mobile number, city of residence (e.g. Karachi, Lahore, Islamabad)	Account communication, support, notifications
Financial Data	JazzCash / EasyPaisa account reference, HBL / UBL / Meezan Bank account details, transaction history	Deposit and withdrawal processing, AML compliance
Technical Data	IP address, device type, browser type, operating system, session timestamps	Platform security, fraud prevention, analytics
Usage Data	Games played, bets placed, wager amounts, session duration, bonus usage	Platform improvement, responsible gaming monitoring
Communications Data	Live chat transcripts, support emails, feedback submissions	Customer support, dispute resolution, quality assurance
Verification Documents	Copies of CNIC, utility bills, selfies for liveness checks	KYC identity verification, regulatory compliance

We do not intentionally collect special categories of sensitive personal data (such as health information, religious beliefs, or biometric data beyond what is strictly required for KYC liveness verification) unless you voluntarily provide such information in the course of a support interaction.

4. How We Collect Your Data

sz999 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an sz999 account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated technologies: Technical and usage data collected automatically when you access sz999.pro, including through cookies, server logs, and similar tracking technologies (see Section 7).
• Third-party providers: Identity and address verification data received from KYC service providers; transaction data received from payment processors such as JazzCash, EasyPaisa, Raast, and partner banks.
• Regulatory sources: In certain circumstances, sz999 may receive information from regulatory or law enforcement bodies as part of our legal compliance obligations.

5. How We Use Your Personal Data

sz999 uses the personal data we collect for the following purposes:

• To create, verify, and manage your sz999 player account;
• To process PKR deposits and withdrawals via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank;
• To verify your identity and age (21+) in compliance with KYC and AML obligations;
• To detect and prevent fraud, collusion, money laundering, and other prohibited activities;
• To provide customer support and resolve disputes;
• To personalise your gaming experience and deliver relevant promotions where you have opted in to marketing communications;
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling;
• To comply with our legal, regulatory, and licensing obligations;
• To improve the performance, security, and content of the sz999 platform;
• To send transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.

sz999 does not use your personal data for automated decision-making or profiling in a manner that produces legal or similarly significant effects on you, except where required for fraud prevention or regulatory compliance and where permitted by applicable law.

6. Legal Bases for Processing

sz999 processes your personal data under the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and sz999, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with our obligations under applicable law, including KYC, AML, and responsible gaming regulations imposed by our licensing authority.
• Legitimate interests: Processing for our legitimate business interests, including fraud prevention, platform security, and analytics, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent — for example, to send you optional marketing communications — you may withdraw that consent at any time by contacting support or updating your account preferences.

7. Cookies & Tracking Technologies

sz999 uses cookies and similar technologies (including local storage objects and session tokens) on sz999.pro. Cookies are small text files placed on your device that help us deliver a functional, secure, and personalised gaming experience.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the sz999 platform, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate sz999.pro, which pages are most visited, and where technical errors occur. This data helps us improve the platform.
• Functionality cookies: Used to remember your preferences such as language settings, preferred game category, and session timeout preferences.
• Fraud prevention cookies: Used by our security systems to detect suspicious login patterns, unusual device behaviour, and potential account takeover attempts.

sz999 does not place third-party advertising or retargeting cookies on your device. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will affect your ability to use the sz999 platform.

8. Sharing Your Personal Data

sz999 does not sell, rent, or trade your personal data to third parties. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank receive the financial data necessary to process your transactions. Each processor is bound by its own privacy and data security obligations.
• KYC / identity verification providers: Third-party identity verification services receive copies of your identity documents and verification selfies solely for the purpose of completing KYC checks required by our licensing obligations.
• IT and platform service providers: Hosting, cloud infrastructure, customer support software, and analytics providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement bodies: Where we are legally required to disclose information to a licensing authority, financial intelligence unit, or law enforcement agency, we will do so in compliance with applicable law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the sz999 business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

9. International Data Transfers

sz999 operates as an internationally licensed gaming platform. As a result, your personal data may be transferred to, stored in, or processed in countries outside Pakistan, including the jurisdiction in which sz999 holds its gaming licence and the locations of our hosting infrastructure.

Where personal data is transferred outside Pakistan, sz999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Pakistani data protection law. These safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions recognised as providing an adequate level of data protection.

10. Data Retention

sz999 retains your personal data for as long as your account is active and for a defined period thereafter, as required by our legal, regulatory, and licensing obligations. The following retention principles apply:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or from the date your account is closed, whichever is later.
• Transaction records: Retained for a minimum of five (5) years in accordance with financial record-keeping obligations.
• Support communications: Retained for three (3) years from the date of the interaction for dispute resolution and quality assurance purposes.
• Technical and usage data: Retained in anonymised or aggregated form for up to two (2) years for analytics purposes.

Once the applicable retention period has expired, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

11. Security Measures

sz999 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and sz999.pro;
• AES-256 encryption for personal data stored on sz999 servers;
• Bcrypt password hashing — your sz999 password is never stored in readable form;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication for all internal administrative access to production systems;
• Regular penetration testing and vulnerability assessments of the sz999 platform;
• Real-time fraud monitoring and anomaly detection systems;
• Comprehensive incident response procedures, including breach notification protocols.

12. Your Data Protection Rights

Subject to applicable law and our legitimate regulatory obligations, you have the following rights regarding your personal data held by sz999:

• Right of access: You may request a copy of the personal data sz999 holds about you (a Subject Access Request).
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held on your sz999 account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our retention obligations under applicable law.
• Right to restriction: You may request that sz999 restrict the processing of your personal data in certain circumstances, for example while a complaint or dispute is being investigated.
• Right to data portability: You may request a copy of the data you have provided to sz999 in a structured, commonly used, and machine-readable format.
• Right to object: You may object to the processing of your personal data where that processing is based on sz999's legitimate interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the sz999 Data Protection team using the details in Section 15. We will respond to all verified requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension.

Please note that certain rights are subject to limitations where our regulatory and licensing obligations require us to retain or process your data regardless of your request. Where this is the case, sz999 will explain the basis for the limitation.

13. Minors

The sz999 platform is strictly for adults aged 21 years and above. sz999 does not knowingly collect personal data from any individual under the age of 21. If sz999 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has registered on the sz999 platform, please contact our support team immediately at the email address provided in Section 15. sz999 works actively with payment processors and device-level parental controls to prevent underage access to the platform.

14. Changes to This Privacy Policy

sz999 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will notify registered players via their registered email address and via a prominent notice on sz999.pro prior to the changes taking effect.

The updated Privacy Policy will display the revised "Last Updated" date at the top of the document. Your continued use of the sz999 platform following notification of a material change constitutes your acceptance of the revised Privacy Policy. If you do not agree to the changes, you should cease using the platform and request account closure.

15. Contact & Data Protection Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data sz999 holds about you, please contact the sz999 Data Protection team:

For general account support and responsible gaming assistance, please visit the Responsible Gaming page or the FAQ section. For all legal and compliance matters, please use the email above with the appropriate subject line to ensure your enquiry reaches the correct team.

You also have the right to lodge a complaint with the data protection supervisory authority in the relevant jurisdiction if you believe that sz999 has not handled your personal data in accordance with applicable law.