98pkt Privacy
Policy

1 Introduction

98pkt ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our website and services. This Privacy Policy ("Policy") sets out a comprehensive description of our data processing practices in plain, accessible English.

This Policy applies to all personal data processed in connection with the 98pkt platform, including data collected when you visit the website without registering, when you create a player account, when you make a deposit or withdrawal, when you contact our customer support team, and when you participate in any promotional activity offered by 98pkt.

By accessing the 98pkt website or registering an account, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of the 98pkt Terms & Conditions by reference.

2 Data Controller

98pkt acts as the data controller in respect of all personal data collected through the platform. As data controller, we are responsible for determining the purposes and means of processing your personal information. All data protection queries, access requests, and erasure requests should be directed to our designated data protection contact via the channels described in Section 14 of this Policy.

98pkt operates under international gaming standards and is accountable to the oversight authority of the jurisdiction under which it holds its operating licence. Details of the licensing authority are available from the support team upon request.

3 Personal Data We Collect

The categories of personal data collected by 98pkt include, but are not limited to, the following:

Category	Examples	Required?
Identity Data	Full name, date of birth, CNIC number, passport number	Yes
Contact Data	Email address, phone number, residential address	Yes
Financial Data	JazzCash / EasyPaisa account details, bank account numbers, transaction history	Yes
Technical Data	IP address, browser type and version, device identifiers, operating system	Auto
Usage Data	Pages visited, games played, bet amounts, session duration, clickstream data	Auto
KYC Documents	Scanned CNIC, proof of address documents, selfie verification images	When triggered
Communications Data	Support chat transcripts, email correspondence, complaint records	Auto
Responsible Gaming Data	Self-exclusion requests, deposit limit settings, cooling-off periods	When set

4 How We Collect Your Data

98pkt collects personal data through a variety of direct and indirect means:

• Direct Collection: Information you provide actively — such as completing the registration form, submitting KYC documents, contacting customer support, or updating your account profile.
• Automated Collection: Technical and usage data collected automatically as you interact with the platform — via cookies, session tracking, server logs, and analytics tools embedded in the website.
• Third-Party Sources: Identity verification data received from KYC and AML service providers; fraud detection signals received from payment processors; and, where applicable, information shared by licensing or regulatory authorities.
• Payment Processing: Transaction metadata shared with us by JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you make deposits or withdrawals through those channels.

5 Purpose & Legal Basis for Processing

98pkt processes personal data only where a valid legal basis exists. The table below outlines our primary processing purposes and the corresponding legal basis for each:

• Account Registration & Management — Contractual necessity. We need your identity and contact data to create and administer your player account in accordance with our Terms & Conditions.
• Age Verification (21+) — Legal obligation and contractual necessity. We are required to verify that all players are at least 21 years of age before permitting access to gambling services.
• Payment Processing — Contractual necessity. Processing financial data is essential to fulfil deposit and withdrawal requests initiated by you.
• KYC & AML Compliance — Legal obligation. We are required to verify the identity of account holders and monitor transactions to detect and prevent money laundering, fraud, and other financial crimes.
• Customer Support — Contractual necessity and legitimate interest. We retain communication records to ensure continuity of support and to resolve disputes fairly.
• Platform Security & Fraud Prevention — Legitimate interest. Technical and usage data is processed to detect suspicious activity, prevent unauthorised access, and maintain the integrity of the platform.
• Responsible Gaming Tools — Legal obligation and legitimate interest. We process responsible gaming preferences to fulfil our duty of care to players and comply with applicable gaming standards.
• Marketing Communications — Consent. Promotional emails and in-platform offers are sent only where you have provided explicit consent. You may withdraw this consent at any time via your account settings.
• Analytics & Platform Improvement — Legitimate interest. Aggregated and anonymised usage data helps us improve the player experience, optimise game performance, and refine our services.

6 Data Sharing & Third Parties

98pkt does not sell your personal data. We share data only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum financial data necessary to process your transactions.
• KYC & Identity Verification Partners: Third-party identity verification providers receive copies of KYC documents for the sole purpose of verifying your identity and age. These providers are contractually bound to use this data only for verification and to delete it promptly thereafter.
• AML & Fraud Detection Services: Transaction and behavioural data may be shared with specialist anti-fraud and anti-money laundering services as part of our compliance obligations.
• Customer Support Tools: Support chat platforms and ticketing systems may store communication records on behalf of 98pkt. These providers operate as data processors under binding data processing agreements.
• Regulatory & Licensing Authorities: We may be required to share player data with the licensing authority that oversees 98pkt's operations, or with law enforcement agencies where required by lawful order.
• Legal Proceedings: In the event of a dispute, fraud investigation, or legal proceeding, relevant data may be disclosed to legal advisers, courts, or arbitrators as necessary.

All third-party service providers engaged by 98pkt are subject to data processing agreements that require them to implement appropriate technical and organisational security measures and to process data only on our documented instructions.

7 Data Retention Periods

98pkt retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account relationship with 98pkt, plus a minimum of five (5) years after account closure to satisfy AML and regulatory record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with standard financial compliance requirements.
• KYC documents: Retained for the duration of the account plus five (5) years after closure. Physical document scans are deleted as soon as verification is complete; metadata confirming verification status is retained for compliance purposes.
• Customer support communications: Retained for three (3) years from the date of the last interaction, or longer if the communication relates to an unresolved dispute or legal matter.
• Technical and usage data: Retained for up to twenty-four (24) months in identifiable form, after which it is aggregated and anonymised for analytical purposes.
• Marketing consent records: Retained for three (3) years from the date of consent or the date of last engagement, whichever is later.
• Responsible gaming records: Self-exclusion and deposit limit records are retained for a minimum of five (5) years to ensure the integrity of responsible gaming measures and prevent circumvention.

When a retention period expires and no legal obligation requires continued storage, data is securely deleted using methods that prevent recovery, or irreversibly anonymised so that it can no longer be linked to any individual.

8 Security Measures

98pkt implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• TLS/SSL Encryption: All data transmitted between your browser or device and the 98pkt platform is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Data Encryption at Rest: Sensitive personal data stored in our databases is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and monitored.
• Two-Factor Authentication: Administrative access to systems holding personal data requires multi-factor authentication.
• Regular Security Audits: Our infrastructure undergoes periodic third-party penetration testing and vulnerability assessments.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, 98pkt will notify affected users and relevant authorities in accordance with applicable legal requirements.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately if you believe your account has been compromised.

9 Cookies & Tracking Technologies

98pkt uses cookies and similar tracking technologies to deliver, maintain, and improve the platform. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core functionality such as session management, login authentication, and security features. These cookies cannot be disabled without breaking the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language or game settings — to personalise your experience on return visits.
• Analytical Cookies: These cookies collect aggregated, anonymised data about how visitors use the platform. This information helps us understand which features are most useful and where improvements should be made.
• Responsible Gaming Cookies: These cookies store your responsible gaming preferences — such as active deposit limits or session time reminders — to ensure these settings persist across sessions.

You can manage your cookie preferences through your browser settings. Please note that disabling certain types of cookies may affect your ability to use some features of the 98pkt platform. Detailed cookie management instructions are available in your browser's help documentation.

10 Your Data Rights

As a data subject, you hold the following rights in respect of your personal data held by 98pkt. These rights may be exercised at any time by contacting us through the channels listed in Section 14:

To exercise any of the above rights, please contact our support team via live chat or email. We will acknowledge your request within 72 hours and aim to fulfil it within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

11 Minors & Age Verification Policy

98pkt operates a strict 21+ age policy. The platform is not intended for use by persons under the age of 21, and we do not knowingly collect personal data from minors. Age verification is performed as a mandatory step during the account registration process and may be supplemented by document-based KYC verification where automated checks are inconclusive.

If 98pkt discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, the affected account will be suspended immediately, all data relating to that account will be reviewed, and — where no legal obligation to retain it exists — deleted promptly. Any funds held in such an account will be handled in accordance with our Terms & Conditions and applicable law.

Parents and guardians who believe a minor may have accessed 98pkt using falsified information are encouraged to contact our support team immediately so that the situation can be investigated and resolved without delay.

12 International Data Transfers

98pkt may transfer personal data to, or process it in, countries outside of Pakistan in order to operate its platform and fulfil its service obligations. This may occur where our hosting infrastructure, KYC verification partners, or customer support tools are based in other jurisdictions.

In all cases where personal data is transferred internationally, 98pkt ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Policy. Safeguards may include contractual protections in the form of standard data processing clauses, the adoption of internationally recognised security certifications by the recipient entity, or a determination that the destination country provides an adequate level of data protection.

If you would like further information about the international transfer safeguards applicable to your data, please contact our support team using the details in Section 14.

13 Changes to This Privacy Policy

98pkt reserves the right to amend or update this Privacy Policy at any time. When changes are made, the revised Policy will be published on this page with an updated effective date at the top of the document. Where changes are material — meaning they significantly affect your rights or the way in which we process your data — we will notify registered account holders by email or via an in-platform notification prior to the changes taking effect.

Your continued use of the 98pkt platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the updated terms. We encourage you to review this page periodically to stay informed of how we protect and handle your personal data.

14 Contact Us — Data Protection Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 98pkt, please do not hesitate to reach out to us through any of the following channels:

• Live Chat: Available 24/7 on the 98pkt website — this is the fastest way to reach our team
• Email: [email protected] (plain text — not a clickable link)
• Languages: English and Urdu
• Response Time: Acknowledgement within 72 hours; full response within 30 calendar days for formal data rights requests

For formal data rights requests — such as access, erasure, or portability requests — we recommend submitting your request by email and including your registered account username and the nature of the request to enable us to process it as efficiently as possible.