Your Privacy,
Protected by sv66

This Privacy Policy ("Policy") describes how sv66 ("sv66", "we", "us", or "our") collects, uses, stores, shares, and protects the personal information of players and visitors who access our online gaming platform at sv66.wine ("Platform"). It applies to all users of the Platform, including registered account holders and unregistered visitors browsing our site from Pakistan or elsewhere.

By accessing the Platform, creating an account, or using any sv66 service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

sv66 is the data controller in respect of the personal data collected through this Platform. As data controller, sv66 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection principles.

For all data protection enquiries, players may contact sv66's data protection contact at: [email protected]. Please include "Data Protection" in the subject line of your email for prompt handling.

sv66 collects the following categories of personal data in the course of operating the Platform and providing our Services to players across Pakistan:

sv66 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated technologies: Technical data collected automatically when you access the Platform, including via cookies, web beacons, pixel tags, and server logs. See Section 7 for details on cookies.
• Payment processors: Transaction confirmation data received from JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT blockchain network confirmations.
• Third-party identity verification: Where we use a third-party KYC service to verify your identity documents, we receive a verification result and a risk score. We do not receive raw document scans from these third parties unless you upload documents directly to sv66.
• Fraud detection services: Risk and fraud signals generated by automated detection systems monitoring account and transaction patterns.

sv66 processes your personal data for the following purposes and on the following legal bases:

• Account management and service delivery — necessary for the performance of our contract with you, including processing deposits and withdrawals in PKR, maintaining your gaming history, and providing access to all Platform features.
• Identity verification (KYC) — compliance with our legal obligations to verify player identity and age (18+) before processing withdrawals above specified thresholds.
• Fraud prevention and security — legitimate interest in protecting sv66 and our players from fraud, money laundering, account takeover, and other malicious activity.
• Responsible gaming monitoring — legitimate interest and legal obligation to identify and respond to signs of problem gambling behaviour, including enforcing self-exclusion decisions.
• Communications — contract performance (transactional communications such as deposit confirmations and withdrawal receipts) and, where you have opted in, marketing communications about sv66 promotions and new features.
• Platform analytics and improvement — legitimate interest in understanding how the Platform is used by players in Pakistan in order to improve performance, navigation, and game selection.
• Legal compliance — compliance with applicable laws, regulatory requirements, and valid requests from law enforcement or regulatory authorities.

sv66 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment processors: We share the minimum data required to process your JazzCash, Easypaisa, bank transfer, or USDT transaction — typically your account identifier and transaction amount in PKR. Payment processors are bound by strict data processing agreements.
• KYC and fraud prevention providers: We share identity data with contracted third-party verification services for the sole purpose of age and identity verification. These providers act as data processors under our instruction and are contractually prohibited from using your data for any other purpose.
• Game software providers: Game session data (but not financial or identity data) may be shared with our licensed game software providers for technical performance monitoring and certified RNG auditing purposes.
• Legal and regulatory disclosure: We will disclose personal data to law enforcement, regulatory bodies, or courts in Pakistan or other applicable jurisdictions where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of sv66, our players, or third parties.
• Business transfers: In the event of a merger, acquisition, or sale of sv66's business or assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

sv66 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse how our services are used. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your sv66 Account. These cannot be disabled.
• Functional cookies: Remember your preferences such as language, currency display (PKR), and responsible gaming settings between sessions.
• Analytics cookies: Collect anonymised data about how visitors navigate the Platform, which pages are visited most frequently, and where errors occur. This helps us improve the sv66 experience for players across Pakistan.
• Security cookies: Support our fraud detection and bot-prevention systems to protect your Account and the integrity of the Platform.

You can manage non-essential cookie preferences through your browser settings. Note that disabling functional or analytics cookies may affect the performance of certain Platform features. Strictly necessary and security cookies cannot be disabled without preventing access to the Platform.

sv66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• All data in transit is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Sensitive data stored at rest — including payment credentials and KYC documents — is encrypted using AES-256 encryption.
• Access to personal data is restricted to sv66 personnel with a legitimate operational need, and all staff with data access undergo security awareness training.
• Two-factor authentication (2FA) is available to all registered players to protect Account access.
• Regular penetration testing and security audits are conducted by qualified third-party security professionals.
• sv66 maintains an incident response plan for data security events, including procedures for breach notification to affected players.

While sv66 takes all reasonable steps to protect your personal data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your sv66 Account credentials. If you believe your Account has been compromised, please contact [email protected] immediately.

sv66 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account data: Retained for the duration of your Account and for a period of five (5) years following Account closure, in compliance with anti-money laundering and financial record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification, consistent with financial crime prevention obligations.
• Transaction records (PKR deposits and withdrawals): Retained for a minimum of five (5) years following each transaction date.
• Gaming history: Retained for five (5) years following Account closure to support dispute resolution and responsible gaming monitoring.
• Customer support communications: Retained for two (2) years from the date of last contact.
• Technical and device logs: Retained for twelve (12) months for security monitoring and fraud investigation purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with sv66's data disposal procedures.

As an sv66 player, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data sv66 holds about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to Erasure: You may request deletion of your personal data where sv66 no longer has a legal basis to retain it. Note that certain data must be retained to comply with legal obligations and cannot be deleted on request.
• Right to Restriction: You may request that sv66 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: You may request that sv66 provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interest, including profiling for responsible gaming purposes, though sv66 may override this objection where there are compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time.

To exercise any of the above rights, please email [email protected] with the subject line "Privacy Rights Request" and your registered Account username. sv66 will respond to all valid requests within thirty (30) calendar days. Requests may require identity verification before action is taken.

sv66 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a person under 18 has provided us with personal data or has registered an Account, we will immediately close the Account, delete the associated personal data, and retain only the minimum information necessary to prevent re-registration.

If you believe a minor has created an sv66 Account, please notify us immediately at [email protected]. We will investigate and take appropriate action without delay.

sv66 may process and store your personal data on servers located outside Pakistan. Where personal data is transferred internationally, sv66 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. Such safeguards may include contractual data processing agreements incorporating standard contractual clauses or equivalent data transfer mechanisms.

If you would like further information about the specific safeguards in place for any particular international transfer of your data, please contact us at [email protected].

The sv66 Platform may integrate with or reference third-party services necessary for its operation, such as payment gateways (JazzCash, Easypaisa, HBL), USDT blockchain networks (TRC20, BEP20), game software providers, and analytics tools. These third parties operate under their own privacy policies and data practices, which are independent of sv66.

sv66 is not responsible for the privacy practices of any third-party service providers. However, all third-party processors contracted by sv66 are required to implement appropriate data protection measures and are bound by data processing agreements that restrict their use of your personal data to the specific purposes for which it was shared.

sv66 uses certain personal and behavioural data as part of our responsible gaming programme. Specifically, we may analyse gaming session duration, deposit frequency, loss patterns, and bonus usage to identify players who may be exhibiting indicators of problem gambling behaviour. This analysis is conducted in the legitimate interest of player welfare and in compliance with responsible gaming best practices.

Where sv66 identifies a potential concern, our responsible gaming team may contact you proactively with information about the tools available to manage your play, including deposit limits, cool-off periods, and self-exclusion. This outreach is not marketing — it is part of our commitment to keeping gaming safe and enjoyable for all players in Pakistan. 18+ only.

Self-exclusion data is retained even after Account closure to prevent re-registration during the exclusion period. This is a safety measure, not a commercial one. For more information, visit our Responsible Gaming page.

sv66 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the Services we offer. When we make material changes to this Policy, we will notify registered players by posting a prominent notice on the Platform and/or sending an email to the address registered on your Account at least seven (7) days before the changes take effect.

The effective date at the top of this Policy indicates when it was last updated. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how sv66 protects your privacy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way sv66 handles your personal data, please reach out to our team. We aim to acknowledge all privacy enquiries within two (2) business days and resolve them fully within thirty (30) calendar days.

Data protection enquiries: [email protected] — please use the subject line "Privacy Policy Enquiry".