sz888 Privacy Policy – How We Handle Your Data

1 Overview

sz888 is committed to handling your personal data responsibly. We only collect information that is genuinely necessary for the Platform to function properly — to verify your identity, process your PKR transactions, deliver a personalised gaming experience and keep the Platform secure for all users.

We do not sell your data to advertisers or unrelated third parties. Any sharing of data that does occur is limited strictly to service providers who help us operate the Platform — such as payment processors that handle JazzCash, Easypaisa and Raast transactions, or identity verification partners who help us confirm account ownership. Every such partner is bound by confidentiality obligations.

2 Data We Collect

We collect data in two broad ways: information you provide directly when using the Platform, and information that is generated automatically when you interact with our systems. The table below gives a clear breakdown of what we collect and why.

We do not collect sensitive personal data such as biometric data (beyond liveness checks for identity verification), health information, religious beliefs or political opinions. We also do not collect financial data beyond what is necessary for PKR payment processing on the Platform.

3 How We Use Your Data

Every piece of data we collect is used for a specific, legitimate purpose. We do not process your data in ways that are incompatible with the reasons it was originally collected. Here is a clear breakdown of how your data is used on the sz888 Platform:

• Account management: Creating and maintaining your sz888 account, verifying your identity and ensuring only one account exists per user.
• Payment processing: Executing PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfers and other supported payment channels.
• Fraud prevention and security: Detecting unusual account activity, identifying multi-accounting, preventing unauthorised access and protecting all users on the Platform.
• Bonus and promotion management: Tracking bonus eligibility, wagering progress and promotional participation to ensure fair usage across all users.
• Platform improvement: Analysing how users navigate the Platform — including which sports markets, Casino games and Fish Games are most popular — so we can keep improving the experience.
• Customer support: Using communication history to resolve queries efficiently and maintain a record of interactions for quality assurance.
• Responsible gaming monitoring: Monitoring activity patterns to identify users who may benefit from responsible gaming tools such as deposit limits or self-exclusion.
• Legal and compliance obligations: Retaining records as required for anti-money laundering (AML) compliance, Know Your Customer (KYC) processes and other applicable obligations.
• Marketing communications: Sending you information about promotions, new games, Cricket and PSL betting offers and VIP programme updates — only where you have consented to receive such communications. You can opt out at any time.

4 Payment Data & PKR Transactions

Because sz888 processes real-money PKR transactions, payment data is handled with the highest level of care. All deposits and withdrawals are processed through established payment channels including JazzCash, Easypaisa, Raast, bank transfers, debit and credit cards and mobile wallets.

What we store: sz888 stores transaction records including amounts, timestamps, payment channel used and the masked identifier of the payment account (for example, the last four digits of a card, or a masked JazzCash number). Full card numbers and CVV codes are never stored on sz888 servers — these are handled directly by our payment processing partners under their own security standards.

Why we retain transaction records: PKR transaction history is retained for AML compliance, fraud investigation, dispute resolution and to provide you with an accurate wallet statement in your account. These records may be retained for up to seven years depending on applicable requirements.

Third-party payment processors: When you make a deposit or request a withdrawal, your payment details are shared with the relevant payment processor (for example, JazzCash or your bank) to complete the transaction. These processors operate under their own privacy policies and are independently responsible for their data handling practices. sz888 only shares the minimum data required to execute your transaction.

5 Cookies & Tracking Technologies

sz888 uses cookies and similar technologies on the website and in the app. A cookie is a small text file placed on your device when you visit the Platform. Cookies help us keep you logged in, remember your preferences and understand how you use the Platform so we can make it better.

• Essential cookies: Required for the Platform to function — keeping you logged in during a session, maintaining your wallet state and preserving your preferences. These cannot be disabled without breaking core functionality.
• Analytics cookies: Help us understand which sections of the Platform are most used — for example, whether users prefer Cricket betting markets or Live Casino — so we can prioritise improvements. This data is aggregated and not personally identifiable.
• Security cookies: Used to detect fraudulent logins, unusual device switching and other suspicious behaviour patterns that may indicate account compromise.
• Preference cookies: Remember your display settings, language preferences and other personalisation choices so you do not have to reset them every session.

You can control cookie settings through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform, but some features — such as remembered preferences — may not function as expected. Note that essential cookies cannot be disabled, as they are required for the Platform to work.

6 Data Sharing & Third Parties

sz888 does not sell, rent or trade your personal data to any third party for their own commercial purposes. Data is shared only in the following limited circumstances, all of which are necessary for the Platform to operate properly:

• Payment processors: JazzCash, Easypaisa, Raast, banks and card networks receive the transaction data required to execute your PKR deposits and withdrawals.
• Identity verification providers: When KYC verification is required, your identity documents are shared with our verification partner to confirm authenticity. These partners are under strict confidentiality obligations.
• Fraud prevention services: Anonymised or hashed device and behavioural data may be shared with fraud detection services to identify patterns associated with account abuse or money laundering.
• IT and hosting infrastructure providers: The servers and cloud infrastructure that power sz888 are maintained by technical partners. These partners have access to data only as needed to maintain the infrastructure and are bound by data processing agreements.
• Legal obligations: Where we are required by law or by a legitimate legal process to disclose user data, we will do so to the extent required. We will not disclose more than what is legally required.

All third-party partners who handle your data are required to implement appropriate security measures and to process your data only for the purpose for which it was shared. sz888 remains responsible for ensuring that such sharing is conducted in line with this Privacy Policy.

7 Data Security

sz888 takes the security of your data seriously. We implement a range of technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration or destruction.

• Encryption in transit: All data exchanged between your device and the sz888 Platform is encrypted using HTTPS / TLS. This applies to the website, the mobile app and all API communications.
• Encrypted storage: Sensitive data including identity documents and payment references are stored in encrypted form. Passwords are hashed using modern cryptographic algorithms and are never stored in plain text.
• Access controls: Access to user data within sz888's internal systems is restricted on a need-to-know basis. Staff access is logged and reviewed regularly.
• Fraud monitoring: Automated systems monitor account activity around the clock for patterns that indicate compromised accounts, bot activity or financial fraud.
• Regular security reviews: sz888's systems and processes are reviewed regularly to identify and address potential vulnerabilities.

While we implement strong security measures, no online platform can guarantee 100% security in all circumstances. You also have a role to play — keeping your password confidential and not sharing your account details with anyone are important steps in protecting your own data. If you suspect your account has been compromised, contact sz888 support immediately.

8 Data Retention

sz888 retains your personal data for as long as your account is active and for a reasonable period after account closure, in line with our legal and operational obligations. The specific retention periods depend on the type of data:

• Account registration data: Retained for the duration of your account and for up to five years following account closure, to support any post-closure disputes or legal requirements.
• PKR transaction records: Retained for up to seven years to meet financial record-keeping and AML compliance requirements.
• Identity verification documents: Retained for as long as required by applicable KYC and AML obligations, typically up to seven years from verification date.
• Gaming and betting activity logs: Retained for up to three years following your last activity or account closure, whichever is later.
• Support communications: Retained for up to two years following the resolution of the relevant query.
• Cookie and analytics data: Aggregated analytics data is retained indefinitely in anonymised form. Session cookies expire when you close your browser. Persistent cookies are retained according to the timeframe described in their settings.

When data is no longer required and the retention period has expired, it is securely deleted or anonymised so that it can no longer be linked back to you personally.

9 Your Rights

As a user of sz888, you have rights over your personal data. You can exercise these rights at any time by contacting support. Here is a summary of what you are entitled to:

To exercise any of these rights, contact sz888 support with your account details and a clear description of your request. We will respond within a reasonable timeframe. Note that some requests — particularly erasure requests — may be limited where we have a legal obligation to retain certain data (such as PKR transaction records for AML purposes).

10 Minors

sz888 is strictly an adults-only platform. Users must be 18 years of age or older to register an account or use the Platform in any capacity. We do not knowingly collect personal data from anyone under the age of 18.

If we become aware that personal data has been collected from a person under 18 — whether through direct registration or through use of a parent or guardian's account — we will immediately suspend the account, delete the relevant data and, where applicable, withhold any associated balance pending further review.

If you are a parent or guardian and you believe that your child has registered or used an sz888 account, please contact us immediately at [email protected] so we can take action promptly.

11 Changes to This Policy

sz888 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in technology or changes in applicable legal obligations. When we make changes, the updated Policy will be posted on this page with a revised "Last Updated" date at the top.

For significant changes — particularly those that affect how we use your data in a materially different way — we will notify registered users via email or an in-platform notification ahead of the change taking effect. For minor updates, the revised Policy on this page is the primary notice.

Your continued use of the sz888 Platform after a Policy update is posted constitutes your acceptance of the revised Privacy Policy. If you do not agree with a change, you should stop using the Platform and contact support to request account closure and any eligible PKR balance withdrawal.

12 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or how sz888 handles your personal data, our support team is available to help. You can reach us through in-platform live chat for the fastest response, or via email for detailed privacy-related queries.

You can also review our Terms and Conditions and FAQ for more information about how the Platform operates.