1
Who We Are
This Privacy Policy is issued by sz999 (referred to throughout as "sz999", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at sz999.ws. sz999 provides casino games, cricket betting, live dealer tables, slot machines, and related services to registered members, with a particular focus on serving Pakistani players in a safe and transparent environment.
For the purposes of applicable data protection law, sz999 acts as the data controller in respect of personal data collected from users of the sz999 platform. This means sz999 determines the purposes and means by which your personal data is processed.
If you have any questions about this Privacy Policy or how sz999 handles your personal data, please contact our Data Protection team via email at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.
This Privacy Policy applies to all personal data collected by sz999 via the sz999.ws website, any mobile-optimised interface, customer support channels, and any other digital touchpoints operated by sz999. It applies to all registered members, including Pakistani users transacting in PKR or USDT.
2
Data We Collect
sz999 collects personal data that is necessary and proportionate to the operation of the platform. The categories of personal data we collect include the following:
| Category |
Examples |
Collected When |
| Identity Data |
Full legal name, date of birth, gender, CNIC / passport number |
Registration & KYC verification |
| Contact Data |
Email address, Pakistani mobile number, residential address |
Registration & account updates |
| Financial Data |
JazzCash / EasyPaisa wallet ID, bank account details, USDT TRC20 wallet address, transaction history |
Deposits, withdrawals & KYC |
| Gaming Activity Data |
Bets placed, games played, session durations, win/loss records, bonus usage |
Active platform use |
| Technical Data |
IP address, device type, browser type and version, operating system, screen resolution |
Every platform visit |
| Usage Data |
Pages visited, features used, click patterns, referral source, session timestamps |
Every platform visit |
| Communications Data |
Live chat transcripts, support email content, feedback submissions |
When contacting support |
| Verification Documents |
Scanned CNIC, passport photo, utility bill or bank statement for address proof |
KYC & withdrawal verification |
sz999 does not intentionally collect special category data (such as health data, biometric data, or data revealing religious or political beliefs) from members. If any such data is incidentally shared with sz999 via support communications, it will be treated with the highest level of confidentiality and will not be processed beyond what is strictly necessary to resolve the matter at hand.
3
How We Use Your Data
sz999 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent:
- Account Registration & Management: Creating and maintaining your sz999 member account, verifying your identity, and ensuring the integrity of your account credentials.
- Transaction Processing: Processing deposits and withdrawal requests across supported Pakistani payment channels including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20.
- KYC & Fraud Prevention: Verifying your identity and age (21+ minimum) in compliance with platform rules, investigating suspicious account activity, and preventing fraud, money laundering, and multi-accounting.
- Platform Operation: Delivering casino games, cricket betting markets, PSL odds, slot titles, live dealer tables, and Keno Bonus Number draws to your device accurately and reliably.
- Customer Support: Responding to your queries, complaints, and support requests submitted via live chat or email.
- Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators and enforcing self-exclusion, cooling-off, and deposit limit settings you have applied to your account.
- Bonuses & Promotions: Administering Rewards programme credits, deposit match bonuses, Keno Bonus Number prizes, and other promotional offers you opt into.
- Legal Compliance: Fulfilling obligations under applicable anti-money laundering (AML) regulations, data protection law, and any other applicable legal requirements.
- Platform Improvement: Analysing aggregated, anonymised usage data to identify platform issues, improve user experience, and develop new features for Pakistani members.
- Security: Detecting, investigating, and responding to security threats, platform abuse, and technical vulnerabilities.
sz999 may send you account-related notifications, security alerts, and — where you have opted in — promotional communications about bonuses and new games. You may opt out of marketing communications at any time by contacting support or updating your notification preferences in your account settings.
4
Legal Basis for Processing
sz999 processes your personal data on the following legal grounds, depending on the specific purpose for which the data is used:
- Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered member — including account management, payment processing, and delivery of gaming services — is carried out on the basis of contractual necessity.
- Legal Obligation: Processing required for sz999 to comply with applicable law — including KYC identity verification, AML reporting, and age verification — is carried out on the basis of legal obligation.
- Legitimate Interests: Processing undertaken to pursue sz999's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where such interests are not overridden by your fundamental data protection rights.
- Consent: Processing for optional purposes — including marketing communications, personalisation of promotional offers, and optional platform features — is carried out on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Where sz999 relies on legitimate interests as a legal basis for processing, we conduct a balancing test to ensure that our interests do not unduly override your rights and freedoms. The results of these assessments are documented internally and are available upon request.
5
Cookies & Tracking Technologies
sz999 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, analyse usage patterns, and ensure platform security. The categories of cookies used on sz999.ws are as follows:
- Strictly Necessary Cookies: These cookies are essential to the operation of the sz999 platform and cannot be disabled. They include session management cookies, authentication tokens, and security cookies that prevent cross-site request forgery.
- Functional Cookies: These cookies remember your preferences — such as your preferred language, currency display settings (PKR or USDT), and interface layout choices — to personalise your experience on the platform.
- Analytics Cookies: These cookies collect anonymised information about how members use sz999.ws, including which pages are most visited and how users navigate between sections. This data is used to improve platform performance and content.
- Security Cookies: These cookies assist in detecting and preventing fraudulent activity, including unusual login patterns, multi-accounting attempts, and automated bot traffic.
You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the sz999 platform, including your ability to log in and maintain a session. Functional and analytics cookies can be disabled without affecting core platform access.
sz999 does not use third-party advertising cookies or behavioural tracking cookies that build profiles of your activity across other websites for advertising retargeting purposes. Our cookie usage is strictly limited to the operational and security purposes described above.
6
Data Sharing & Disclosure
sz999 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:
- Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT network infrastructure providers require certain transactional data to process your deposits and withdrawals. Data shared is limited to what is technically required to complete the transaction.
- Identity Verification Providers: Third-party KYC and AML screening services that assist sz999 in verifying your identity, confirming your age (21+), and screening against relevant sanctions and watchlists.
- Game Studio Partners: Casino and slot game providers whose titles are available on the sz999 platform may receive limited session and gameplay data necessary to deliver the game and settle results correctly.
- IT Infrastructure & Cloud Services: sz999 uses trusted cloud hosting, database, and cybersecurity service providers to operate the platform. These providers process data on our behalf under binding data processing agreements.
- Regulatory & Law Enforcement Authorities: sz999 may disclose personal data to competent authorities where required by applicable law, court order, or regulatory request — including AML reporting obligations. Such disclosures are made only to the minimum extent legally required.
- Professional Advisers: Legal counsel, auditors, and compliance advisers may access limited personal data where necessary in connection with the delivery of their professional services to sz999, subject to strict confidentiality obligations.
Important: sz999 will never proactively share your personal data with any third party for marketing, advertising, or data brokerage purposes. Any request purportedly from sz999 asking you to share your personal data via an unofficial channel should be treated as suspicious and reported to
[email protected] immediately.
7
International Data Transfers
As an international online gaming platform serving Pakistani members, sz999 may transfer your personal data to servers and processing facilities located outside of Pakistan. This may occur in connection with cloud hosting services, KYC verification providers, and game studio partners whose infrastructure is based in other jurisdictions.
Where personal data is transferred internationally, sz999 ensures that appropriate safeguards are in place to protect the security and confidentiality of your data. These safeguards may include:
- Standard contractual data protection clauses incorporated into agreements with international data processors.
- Transfers to jurisdictions that maintain an adequate level of data protection as assessed by the relevant regulatory framework.
- Technical and organisational security measures, including encryption and access controls, applied to data both during transfer and at rest in destination jurisdictions.
By using the sz999 platform, you acknowledge and consent to the transfer of your personal data to international locations as described in this section, subject always to the protections described herein.
8
Data Retention
sz999 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The general retention principles sz999 applies are as follows:
- Active Account Data: Personal data associated with your active sz999 account is retained for the full duration of your membership and for a reasonable period following account closure to facilitate the resolution of any outstanding disputes, refund processing, or audit requirements.
- KYC & Identity Documents: Identity verification documents and KYC records are retained for a minimum of five (5) years following account closure, in line with standard AML compliance obligations applicable to online gaming platforms.
- Transaction Records: Financial transaction records — including deposit and withdrawal history — are retained for a minimum of five (5) years to satisfy accounting, audit, and AML regulatory requirements.
- Support Communications: Live chat transcripts and support email records are retained for up to two (2) years following the resolution of the relevant query or complaint, to support quality assurance and dispute resolution.
- Analytics Data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data once fully anonymised.
Following the expiry of the applicable retention period, sz999 will securely delete or irreversibly anonymise your personal data. Deletion requests submitted by members will be processed promptly, subject to any overriding legal or regulatory retention obligations that may prevent immediate deletion.
9
Your Privacy Rights
As an sz999 member, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with your account details and the nature of your request. We will respond within 30 days of receiving a valid request:
Right of Access
You may request a copy of the personal data sz999 holds about you, together with information about how it is being used and who it has been shared with.
Right to Rectification
If any of the personal data sz999 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. You can also update basic account information directly from your sz999 account settings.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds. Note: legal retention obligations may prevent full immediate deletion.
Right to Restriction of Processing
You may request that sz999 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being considered.
Right to Data Portability
Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
Right to Object
You may object to sz999 processing your personal data where processing is based on legitimate interests or for direct marketing purposes. sz999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
10
Children & Minors
The sz999 platform is strictly intended for adults aged 21 years and over. sz999 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Registration by minors is a material breach of sz999's Terms and Conditions and is strictly prohibited.
Underage Registration: If sz999 becomes aware that a member under the age of 21 has registered and provided personal data, we will immediately suspend the account, delete all associated personal data to the extent legally permissible, and return any deposited funds through the original payment method after deducting any winnings generated during the period of underage use. Parents or guardians who suspect that a minor is using sz999 should contact us immediately at
[email protected].
sz999 uses age verification controls at registration and during the KYC process specifically to prevent minors from accessing the platform. These controls include date-of-birth verification, CNIC document checks, and behavioural monitoring for indicators of underage use.
11
Security Measures
sz999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- Transport Layer Security (TLS): All data transmitted between your device and sz999.ws is encrypted using TLS, preventing interception of data in transit.
- Data Encryption at Rest: Sensitive data categories — including KYC documents, financial data, and authentication credentials — are encrypted at rest using industry-standard encryption algorithms.
- Access Controls: Access to personal data within sz999's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required for their specific operational role.
- Two-Factor Authentication (2FA): sz999 supports 2FA for member accounts and enforces it for administrative access to internal systems, significantly reducing the risk of unauthorised access from compromised credentials.
- Penetration Testing & Security Audits: sz999 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in the platform infrastructure.
- Incident Response Plan: sz999 maintains a documented data breach incident response plan, enabling rapid detection, containment, and notification in the event of a security incident affecting personal data.
- Staff Training: All sz999 staff with access to personal data receive regular training on data protection obligations, security best practices, and phishing awareness.
While sz999 takes all reasonable steps to protect your data, no digital platform can guarantee absolute security. You are encouraged to protect your own account by using a strong, unique password and enabling two-factor authentication from your sz999 account settings.
12
Third-Party Services
The sz999 platform may contain links to, or integrate with, third-party services — including game studios, payment gateways, and customer support tools. This Privacy Policy applies exclusively to personal data processed by sz999 and does not extend to the data practices of any third-party service providers or platforms.
Each third-party service provider engaged by sz999 that processes personal data on our behalf is required to enter into a data processing agreement with sz999, contractually binding them to process your data only in accordance with sz999's documented instructions and to implement appropriate technical and organisational security measures.
sz999 conducts due diligence on all third-party data processors before engagement and reviews these relationships periodically to ensure continued compliance with our data protection standards. If a third-party processor suffers a security incident that affects your sz999 data, sz999 will notify you in accordance with the breach notification obligations described in this Policy.
sz999 is not responsible for the privacy practices of any third-party payment providers you interact with directly — for example, the JazzCash or EasyPaisa apps on your device. We encourage you to review the privacy policies of all financial services you use in connection with your sz999 account.
13
Policy Amendments
sz999 reserves
the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform functionality, or our data processing practices. When material changes are made to this Policy, sz999 will notify registered members via email or a prominent notice displayed on the sz999.ws platform prior to the changes taking effect.
The date of the most recent revision is displayed at the top of this Privacy Policy. We encourage you to review this Policy periodically to stay informed about how sz999 protects your personal data. Your continued use of the sz999 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms.
Minor amendments — such as corrections to typographical errors, clarifications of existing language, or updates to contact details — may be made without individual notification. Only changes that materially affect how your personal data is collected, used, or shared will be subject to advance notification.
14
Contact & Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which sz999 processes your personal data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related matters promptly and transparently.
- Email: [email protected]
- Live Chat: Available 24/7 via the sz999.ws platform — support provided in both English and Urdu
- Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and provide a full response within 30 days of receiving a valid request
If you are not satisfied with sz999's response to your privacy complaint, or if you believe that sz999 is processing your personal data in a manner that is inconsistent with applicable data protection law, you have the right to escalate your complaint to the relevant regulatory authority in your jurisdiction.
sz999 takes all privacy complaints seriously. Our Data Protection team reviews every complaint individually and, where a complaint reveals a systemic issue or a gap in our data protection practices, we will take appropriate remedial action to prevent recurrence. We believe that open, honest communication with our members is the foundation of a trustworthy gaming platform.