sz888 Privacy Policy
At sz888, protecting your personal information is not just a legal obligation — it is a fundamental part of how we operate. This Privacy Policy explains in plain, clear language exactly what data sz888 collects from Filipino players, how we use it, who we share it with, and how you can exercise your data rights under Philippine law.
What This Policy Covers
Here is a quick overview of the key privacy principles that govern how sz888 handles your personal data every day.
Data We Collect
sz888 collects only the personal data that is necessary to operate your account — including your name, date of birth, Philippine address, contact details, payment information, and KYC identity documents. We never collect data that is excessive or unrelated to your gaming experience.
How We Use Your Data
Your data is used exclusively for account management, identity verification, payment processing, fraud prevention, regulatory compliance, and improving your sz888 experience. sz888 does not sell your personal information to any third party, ever.
Data Security
sz888 employs industry-standard security measures including TLS encryption, secure server infrastructure, and strict internal access controls to protect your personal data from unauthorised access, disclosure, alteration, or destruction.
Your Data Rights (DPA 2012)
As a Philippine resident, you are entitled to rights under Republic Act No. 10173 — the Data Privacy Act of 2012. These include the right to access, correct, erase, object to processing, and port your personal data held by sz888.
Cookies & Tracking
sz888 uses essential cookies to keep your session active and functional. Optional analytics cookies help us understand how Filipino players navigate the platform so we can improve it. You can manage your cookie preferences at any time through your browser settings.
Contact Your Data Officer
For any privacy-related inquiries, data access requests, or complaints, Filipino players can reach the sz888 Data Protection Officer directly via the 24/7 live chat on the platform or by emailing our support team. All requests are acknowledged within 72 hours.
01 Introduction
This Privacy Policy ("Policy") describes how sz888 ("we", "us", "our") collects, processes, stores, and protects the personal information of players, visitors, and users ("you", "your") who access and use the sz888 online casino and sports betting platform available at sz888.pro.
sz888 is committed to upholding the highest standards of data privacy, consistent with the requirements of Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Republic of the Philippines, and the Implementing Rules and Regulations (IRR) issued by the National Privacy Commission (NPC). Your personal data will only be processed in a manner that is consistent with the principles of transparency, legitimate purpose, and proportionality as mandated under the DPA.
By registering a sz888 account, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the sz888 platform.
Plain Language Summary
This document is written in legal-style English to satisfy our compliance obligations, but our intent is straightforward: sz888 collects only what it needs, uses your data only for legitimate purposes related to your gaming account, never sells your data to third parties, and gives you full control over your personal information in accordance with Philippine law.
02 Data Controller
For the purposes of the Data Privacy Act of 2012 and its IRR, the personal information controller responsible for your data is:
sz888 — Personal Information Controller
Platform: sz888.pro
Market: Republic of the Philippines
Regulatory Framework: PAGCOR guidelines; Republic Act No. 10173 (Data Privacy Act of 2012)
Data Protection Officer Contact: [email protected] (plain text — not a clickable link)
Support Channel: 24/7 Live Chat on the sz888 platform
sz888 has designated a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy and implementation, ensuring compliance with the DPA, and serving as the primary point of contact for data subjects and the National Privacy Commission (NPC) on all matters relating to the processing of personal data.
03 Data We Collect
sz888 collects personal data from you through several means: directly when you register an account or interact with our platform; automatically as you use our services; and from third parties such as payment processors and identity verification services. The categories of personal data we collect include:
3.1 Account Registration Data
- Legal full name (as it appears on your Philippine government-issued ID)
- Date of birth (used to verify the mandatory 21+ age requirement)
- Residential address in the Philippines (barangay, city/municipality, province)
- Email address
- Mobile number (Philippine network)
- Chosen username and encrypted password hash
3.2 Identity Verification (KYC) Data
- Scanned or photographed copies of your Philippine government-issued ID (PhilSys National ID, LTO Driver's License, Philippine Passport, UMID/SSS ID, or COMELEC Voter's ID)
- Selfie or liveness-check photograph for biometric comparison
- Source of funds declaration (for enhanced due diligence cases)
3.3 Financial & Transaction Data
- GCash mobile number or registered account reference
- PayMaya (Maya) account reference
- Bank account details for BPI, BDO, or Metrobank transfers (account name, account number, branch)
- Deposit and withdrawal transaction history on sz888
- Running account balance and betting/gaming transaction records
3.4 Gaming & Behavioral Data
- Game session history, bet amounts, game outcomes, and wagering activity
- Bonus and promotion redemption history
- Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
- Customer support interaction history
3.5 Technical & Device Data
- IP address and geolocation data (country and region level)
- Device type, operating system, and browser/app version
- Session timestamps and login history
- Cookie identifiers and analytics data (where consent is given)
Data Minimisation Commitment
sz888 applies the principle of data minimisation in accordance with the DPA. We collect only the personal data that is strictly necessary for the purposes described in this Policy. We periodically review our data collection practices to ensure we are not retaining data beyond what is required.
04 How We Use Your Data
sz888 processes your personal data for the following specific and legitimate purposes:
| Purpose | Data Used |
|---|---|
| Account creation & management | Registration data, contact details |
| Age & identity verification (KYC) | Date of birth, government ID, selfie/liveness data |
| Payment processing | GCash / PayMaya / bank account details, transaction records |
| Fraud prevention & AML compliance | KYC data, transaction history, IP/device data |
| Responsible gaming programme | Gaming history, self-exclusion status, limit settings |
| Customer support | Contact details, account history, support interaction logs |
| Regulatory compliance & reporting | Full account profile, transaction history, KYC documentation |
| Platform improvement & analytics | Anonymised or aggregated behavioral and technical data |
| Promotional communications (opt-in only) | Email address, mobile number, gaming preferences |
sz888 will not use your personal data for any purpose that is incompatible with those stated above without providing prior notice and, where required by law, obtaining your separate consent.
05 Legal Basis for Processing
Under the Data Privacy Act of 2012, sz888 relies on the following legal bases to process your personal data:
- Contractual necessity: Processing required to perform the contract between you and sz888 — i.e., to operate your account, process payments, and provide access to games and services.
- Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
- Legitimate interests: Processing necessary for sz888's legitimate interests, such as fraud prevention, platform security, and responsible gaming enforcement — where these interests are not overridden by your fundamental rights and freedoms.
- Consent: Where sz888 relies on your consent as the legal basis for processing (such as for optional promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
06 Data Sharing & Third Parties
6.1 Service Providers
sz888 shares personal data with carefully selected third-party service providers who assist us in delivering the platform and its services. These include KYC identity verification partners, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, and fraud detection services. All such third parties are required to process your data only on sz888's instructions and in compliance with applicable Philippine data privacy law.
6.2 Regulatory & Law Enforcement Authorities
sz888 is obligated to disclose personal data to regulatory and law enforcement authorities when required by law. This includes mandatory reporting to the Anti-Money Laundering Council (AMLC) under Republic Act No. 9160 (AMLA), responding to valid legal process from Philippine courts or law enforcement agencies, and compliance with PAGCOR's regulatory oversight requirements.
6.3 No Sale of Personal Data
sz888 Does Not Sell Your Data
sz888 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. This is an absolute commitment, not a qualified one.
6.4 Business Transfers
In the event of a merger, acquisition, or sale of all or part of sz888's business, your personal data may be transferred as part of that transaction. In such circumstances, sz888 will provide notice to affected players and ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Policy.
07 Data Retention
sz888 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:
- Account registration and KYC data: Retained for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements.
- Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLA obligations.
- Gaming and session history: Retained for three (3) years from the date of the relevant activity, or longer where required for dispute resolution or regulatory investigation.
- Customer support records: Retained for three (3) years from the date of the interaction.
- Marketing consent records: Retained until you withdraw your consent, plus one (1) additional year for compliance documentation.
- Technical and device data (logs): Retained for twelve (12) months, unless required for an active fraud investigation.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with sz888's internal data disposal procedures.
08 Data Security
sz888 implements appropriate technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our key security measures include:
- Encryption in transit: All data transmitted between your browser or app and sz888 servers is encrypted using TLS (Transport Layer Security) protocols.
- Encryption at rest: Sensitive personal data — including KYC documents and financial information — is encrypted at rest on sz888's secure server infrastructure.
- Access controls: Strict role-based access controls ensure that sz888 personnel can only access personal data to the extent necessary for their specific job function. All access is logged and auditable.
- Password security: User passwords are stored as salted cryptographic hashes; plaintext passwords are never stored or accessible to sz888 staff.
- Vulnerability management: sz888 conducts regular security assessments and patches known vulnerabilities promptly.
- Data breach response: sz888 maintains an incident response plan that includes notification of the National Privacy Commission (NPC) within 72 hours of discovering a personal data breach that is likely to result in a risk to the rights and freedoms of data subjects, consistent with DPA Section 20(f).
Your Role in Security
While sz888 takes extensive measures to protect your data, you also play a critical role. Keep your sz888 login credentials confidential, use a strong and unique password, and contact our support team immediately if you suspect unauthorised access to your account.
09 Cookies & Tracking Technologies
9.1 What Are Cookies
Cookies are small text files placed on your device by the sz888 platform when you access it. They allow sz888 to recognise your browser, maintain your session, and remember your preferences. sz888 may also use similar tracking technologies such as pixel tags and local storage in conjunction with cookies.
9.2 Types of Cookies Used by sz888
- Essential / Strictly Necessary Cookies: Required for the sz888 platform to function correctly. These include session authentication cookies that keep you logged in during your gaming session. You cannot opt out of essential cookies while using the platform.
- Functional Cookies: Remember your language and display preferences to provide a more personalised experience on sz888.
- Analytics Cookies (optional, consent-based): Collect anonymised information about how players navigate the sz888 platform — which pages are visited, session duration, and error occurrences — to help us improve the user experience for Filipino players.
- Responsible Gaming Cookies: Store your locally-set responsible gaming preferences (e.g., reminder intervals) on-device to support your wellbeing.
9.3 Managing Cookies
You can control non-essential cookies through your browser settings. Most browsers allow you to view, block, and delete cookies. Please note that disabling certain cookies may affect the functionality of the sz888 platform. For guidance on managing cookies in popular browsers used in the Philippines (Chrome, Firefox, Safari, Samsung Internet), please refer to the browser's own help documentation.
10 Your Data Rights Under the DPA
As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to the personal data that sz888 holds about you. To exercise any of these rights, contact the sz888 Data Protection Officer via the 24/7 live chat or by email at [email protected]. sz888 will acknowledge your request within 72 hours and provide a substantive response within thirty (30) days.
Right to Be Informed
Know what personal data sz888 collects, how it is used, and with whom it is shared — as set out in this Policy.
Right to Access
Request a copy of the personal data sz888 holds about you, including your account data, KYC records, and transaction history.
Right to Rectification
Request correction of inaccurate or incomplete personal data in your sz888 account, subject to KYC re-verification where required.
Right to Erasure
Request deletion of your personal data where sz888 no longer has a legal basis to retain it, subject to mandatory legal retention obligations.
Right to Object
Object to the processing of your personal data for direct marketing purposes. sz888 will honour all valid objections promptly.
Right to Data Portability
Receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
Right to Withdraw Consent
Withdraw previously given consent for optional processing (such as marketing emails) at any time without affecting past processing.
Right to Lodge a Complaint
File a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe sz888 has violated your data privacy rights.
11 Minors & Age Restriction
sz888 is strictly an adults-only platform. In accordance with Philippine law and PAGCOR regulations, access to sz888 is limited to individuals who are twenty-one (21) years of age or older. sz888 does not knowingly collect personal data from individuals under the age of 21.
Age verification is conducted as part of the mandatory KYC process. Where sz888 discovers that personal data of an individual under 21 has been collected — whether due to fraudulent misrepresentation of age during registration or any other reason — sz888 will immediately suspend the relevant account, delete the associated personal data to the extent permitted by applicable legal retention obligations, and forfeit any balance in that account consistent with our Terms and Conditions.
If you believe that a minor has registered a sz888 account, please notify our support team immediately via the 24/7 live chat on the platform so that we can investigate and take appropriate action without delay.
21+ Strictly Enforced
The 21+ age requirement is not merely a policy preference — it is a legal requirement under Philippine gambling regulations. sz888 takes its age verification obligations seriously and cooperates fully with PAGCOR and relevant authorities to enforce this requirement.
12 Cross-Border Data Transfers
In the course of operating the sz888 platform and delivering services to Filipino players, your personal data may be transferred to, stored on, or processed by servers and service providers located outside of the Philippines. Such transfers are carried out in compliance with Section 21 of the Data Privacy Act of 2012, which requires that cross-border transfers of personal data are subject to adequate data protection safeguards.
sz888 ensures that any transfer of personal data outside the Philippines is subject to appropriate safeguards, which may include:
- Contractual clauses requiring the recipient to protect the data to at least the standard required under the DPA
- Transfer to jurisdictions recognised by the NPC as providing an adequate level of data protection
- Binding corporate rules or equivalent internal data transfer mechanisms where applicable
By using the sz888 platform, you acknowledge that your personal data may be transferred outside the Philippines under the safeguards described above. If you have concerns about cross-border transfers of your data, please contact the sz888 Data Protection Officer.
13 Changes to This Privacy Policy
sz888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. When material changes are made to this Policy, sz888 will:
- Post the updated Privacy Policy on this page with a revised effective date
- Notify registered players via email or in-platform notification at least seven (7) days before the changes take effect
- Where changes involve a new or materially different use of personal data, obtain fresh consent where required by the DPA
We encourage you to review this Privacy Policy periodically to stay informed about how sz888 is protecting your personal information. Your continued use of the sz888 platform after any changes to this Policy constitutes your acceptance of the updated terms, to the extent permitted by Philippine law.
Stay Informed
The current effective date of this Privacy Policy is January 1, 2026. This is the version that governs the processing of your personal data as of that date. Always check this page for the most current version.
14 Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by sz888, please contact our Data Protection Officer through the following channels:
- Live Chat: Available 24/7 directly on the sz888 platform — the fastest way to reach our support and privacy team.
- Email: [email protected] (plain text — not a clickable link)
sz888 commits to acknowledging all privacy-related requests within 72 hours and providing a full substantive response within 30 calendar days of receipt. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.
If you are not satisfied with sz888's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for administering and enforcing the Data Privacy Act of 2012.
For responsible gaming concerns, including self-exclusion requests or problem gambling support, please visit our Responsible Gaming page or speak to our support team via live chat.