Privacy
Policy
98pak Online Gaming Platform

1 Information We Collect

98pak collects personal data in order to operate the platform, verify player identities, process payments, provide customer support, and comply with applicable regulatory obligations. The categories of personal data we collect are described below.

2 How We Use Your Information

98pak uses the personal data we collect only for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process your data are:

• Account creation and management: To register, maintain, and administer your 98pak player account, including verification of your identity and age (21+ compliance).
• Transaction processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and to maintain accurate financial records.
• Platform personalisation: To tailor your 98pak experience based on your gaming preferences, preferred sports (e.g. PSL cricket betting), and most-used game categories.
• Bonus and promotion administration: To apply welcome bonuses, reload offers, and loyalty rewards to your account in accordance with the applicable promotion terms.
• Regulatory compliance and fraud prevention: To fulfil our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, and to detect and prevent fraudulent, unauthorised, or illegal activity on the 98pak platform.
• Responsible gaming: To monitor gaming patterns that may indicate problematic behaviour, to enforce self-exclusion and deposit limits, and to communicate responsible gaming resources where appropriate.
• Customer support: To respond to your queries, complaints, and support requests in a timely and effective manner.
• Marketing communications: To send you promotional emails and SMS notifications about 98pak offers, new games, and cricket betting markets — but only where you have opted in to receive such communications.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the performance, design, and features of the 98pak platform.
• Legal obligations: To comply with any applicable legal or regulatory requirements, including responding to lawful requests from relevant authorities.

3 Legal Basis for Processing

98pak processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to fulfil our obligations to you under the 98pak Terms & Conditions — for example, processing your deposits, executing your bets, and paying out your winnings.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations under international gaming licence conditions.
• Legitimate interests: Processing carried out in the legitimate interests of 98pak, such as fraud prevention, platform security, responsible gaming monitoring, and analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending marketing emails or SMS promotions. You may withdraw your consent at any time by contacting [email protected] or updating your account communication preferences.

4 Sharing of Personal Data

98pak does not sell, rent, or trade your personal data to any third party. We share your personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment processors: Your financial data is shared with our payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 gateway providers — solely to process your deposit and withdrawal transactions. These partners are bound by strict data protection agreements.
• Identity verification providers: Your KYC documents (CNIC, passport, selfie) may be shared with our third-party identity verification service provider for the purpose of age and identity confirmation. This provider processes data exclusively on behalf of 98pak and is prohibited from using it for any other purpose.
• Game providers: When you play live casino games or third-party slots on the 98pak platform, limited session data (player ID, bet amounts, game outcomes) may be shared with the relevant licensed game provider for the purpose of game operation and dispute resolution.
• Regulatory authorities: 98pak may disclose your personal data to regulatory bodies, gaming authorities, or law enforcement agencies where required by applicable law or international gaming licence conditions, or where there are reasonable grounds to suspect financial crime or fraud.
• Professional advisers: In limited circumstances, your data may be accessible to our legal advisers, auditors, or cybersecurity consultants, subject to strict confidentiality obligations.

5 Cookies & Tracking Technologies

The 98pak platform uses cookies and similar tracking technologies to ensure the platform functions correctly and to improve your gaming experience. A cookie is a small text file placed on your device by the 98pak website when you visit. Cookies do not contain executable code and cannot access other files on your device.

The categories of cookies used by 98pak are:

• Strictly necessary cookies: These cookies are essential for the 98pak platform to function. They enable you to log in to your account, maintain your session, and navigate between pages. These cookies cannot be disabled without breaking the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language, last-used payment method, and game category — so you do not have to re-enter them on each visit.
• Analytics cookies: 98pak uses anonymised analytics data to understand how players use the platform, which pages are most visited, and where the user experience can be improved. This data is aggregated and does not identify individual players.
• Security cookies: Used to detect fraudulent activity, protect against cross-site request forgery (CSRF), and maintain the integrity of player sessions.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 98pak platform. Disabling functional or analytics cookies will not affect your ability to play games or make transactions.

6 Data Retention

98pak retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the lifetime of your 98pak account plus five (5) years following account closure, in order to comply with anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of last account activity, in line with international gaming licence KYC obligations.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for seven (7) years from the date of the transaction for financial compliance purposes.
• Support correspondence: Customer support emails and chat transcripts are retained for three (3) years from the date of the interaction.
• Marketing data: Email and SMS marketing preference data is retained until you withdraw consent, after which it is deleted within thirty (30) days.
• Technical and session data: IP address logs and session data are retained for twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

7 Data Security

98pak implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• TLS 1.3 encryption: All data transmitted between your browser or device and the 98pak platform is encrypted using Transport Layer Security 1.3.
• AES-256 encryption at rest: Sensitive personal data — including KYC documents and financial information — is stored using AES-256 encryption on our secure servers.
• Two-factor authentication (2FA): 98pak supports SMS OTP two-factor authentication for all player accounts. We strongly recommend enabling 2FA from your account security settings.
• Access controls: Access to personal data within 98pak's internal systems is restricted on a strict need-to-know basis. All staff with data access undergo background verification and regular data protection training.
• Intrusion detection: 98pak's platform is monitored 24/7 by automated intrusion detection systems designed to identify and respond to suspicious access attempts in real time.
• Regular security audits: The 98pak platform undergoes periodic third-party security audits and penetration testing to identify and remediate vulnerabilities.

While 98pak takes all reasonable measures to protect your data, no method of internet transmission or electronic storage is 100% secure. In the unlikely event of a data breach that affects your personal data, 98pak will notify you promptly in accordance with applicable notification obligations.

8 Your Rights as a User

As a 98pak player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our data team at [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) days of receiving your request.

9 Children & Minors

The 98pak platform is strictly for adults aged 21 and above. 98pak does not knowingly collect, process, or store personal data from any person under the age of 21. Age verification is a mandatory step in the 98pak account lifecycle — no withdrawal will be processed until age has been verified to our satisfaction.

If 98pak discovers or is notified that personal data has been collected from a person under the age of 21, the following steps will be taken immediately:

• The relevant account will be permanently suspended.
• All gaming activity conducted from the account will be voided.
• Any deposited funds will be returned to the originating payment method after verification.
• All personal data associated with the account will be securely deleted, except where retention is required by law.

10 Third-Party Services

The 98pak platform integrates with several third-party service providers in order to deliver its full range of gaming and payment services. Each third-party provider that accesses your personal data on behalf of 98pak is subject to a data processing agreement that prohibits them from using your data for any purpose other than providing the contracted service to 98pak.

Please be aware that the 98pak Privacy Policy applies only to data processing carried out by or on behalf of 98pak. The privacy practices of third-party payment providers — such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — are governed by their own privacy policies, which we encourage you to review independently. 98pak is not responsible for the data handling practices of external service providers once data has been transferred to them in accordance with this Policy.

11 Changes to This Privacy Policy

98pak reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes to this Policy, we will notify registered players by email to their registered 98pak email address and by displaying a prominent notice on the 98pak platform for a period of at least seven (7) days before the revised Policy takes effect.

Minor updates — such as typographical corrections or clarifications that do not materially alter your rights — may take effect immediately without prior notice. The date of the most recent update is always displayed at the top of this page.

Your continued use of the 98pak platform after the effective date of any revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using the 98pak platform and contact [email protected] to request account closure.

12 Contact & Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 98pak handles your personal data, please contact our data protection team using the details below. We are committed to responding to all privacy-related enquiries within thirty (30) days.

• Email: [email protected] — please use the subject line "Privacy Policy Query" or "Data Rights Request" so our team can route your message to the correct department.
• Live Chat: Available to registered 98pak players directly on the platform, 24 hours a day, 7 days a week.
• Postal correspondence: If you are unable to contact us by email or live chat, written correspondence addressed to the 98pak Data Protection Team will be acknowledged within fourteen (14) business days.

When submitting a data rights request, please include your registered 98pak username and the email address associated with your account so we can verify your identity before processing the request. 98pak will never charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.