98pk Privacy Policy — How We Handle Your Personal Data

98pk ("we", "us", "our") is the data controller responsible for the personal data of players who register and use the Platform at 98pk.bid. As data controller, 98pk determines the purposes and means by which personal data is processed. All data processing activities described in this Policy are carried out by 98pk or by third-party processors engaged under written data processing agreements that bind those processors to confidentiality and security obligations consistent with this Policy.

98pk collects personal data through several channels: account registration, use of Platform features, payment transactions, and customer support communications. The categories of data collected and their sources are set out in the table below.

98pk does not knowingly collect sensitive personal data beyond what is strictly necessary for age verification, identity verification, and fraud prevention purposes.

98pk processes personal data only for specific, defined purposes. We do not use your data for purposes that are incompatible with those listed below. The primary purposes for which 98pk processes personal data include:

• Account management: Creating, maintaining, and managing your 98pk account, including 98pk Login authentication and two-factor authentication processes.
• Payment processing: Processing deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and USDT, and processing withdrawals in PKR to your nominated payment method.
• Identity and age verification (KYC): Verifying that account holders are at least 21 years of age and confirming the identity of players in accordance with our responsible gaming and compliance obligations.
• Fraud prevention and security: Detecting, preventing, and investigating fraudulent activity, money laundering, account compromise, and multi-account abuse.
• Legal and regulatory compliance: Meeting obligations imposed by applicable laws, regulations, and our international gaming compliance framework.
• Customer support: Responding to queries submitted via live chat or email in English or Urdu, and resolving account, payment, or gameplay issues.
• Responsible gaming: Monitoring player activity to identify potential problem gambling indicators, applying self-exclusion and limit settings, and engaging in responsible gaming interventions where appropriate.
• Platform improvement: Analysing anonymised usage patterns to improve the Platform's features, game catalogue, and user experience for Pakistani players.
• Marketing communications: Sending promotional offers and bonus notifications to players who have opted in to receive such communications. Opt-in marketing communications can be withdrawn at any time via account settings.

98pk processes personal data on the following legal bases, depending on the specific activity:

• Contractual necessity: Processing required to perform the agreement between you and 98pk — including account registration, deposit processing, gameplay facilitation, and withdrawal of winnings.
• Legal obligation: Processing required to comply with applicable laws and our international gaming compliance framework, including KYC, age verification, and anti-money laundering checks.
• Legitimate interests: Processing for fraud prevention, platform security, and anonymised analytics, where those interests are not overridden by your privacy rights.
• Consent: Processing for opt-in marketing communications and certain non-essential cookies, where you have given explicit consent. Consent may be withdrawn at any time.

98pk does not sell personal data to third parties. We do not share your data with unrelated organisations for their own marketing purposes. We share personal data only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and USDT network providers receive the minimum data necessary to process your transaction. Each of these processors operates under their own data protection obligations.
• Game content providers: Evolution Gaming, Ezugi, and SA Gaming receive anonymised or pseudonymised session data necessary to deliver live casino and slot game content. These providers do not receive your identity or payment data.
• Identity verification providers: KYC service providers engaged to verify player age and identity receive only the specific documents and data necessary for that verification.
• Fraud detection services: Third-party fraud and security analytics providers may receive technical and transactional data on a pseudonymised basis.
• Legal disclosure: 98pk may disclose personal data to law enforcement, regulatory bodies, or courts where required by law or where necessary to prevent fraud or protect the rights of 98pk or other players.

98pk retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal obligation to retain data for a longer period. Key retention periods include:

• Account and identity data: Retained for the duration of your active 98pk account and for a period of five (5) years following account closure, in accordance with international gaming compliance and anti-money laundering requirements.
• Transaction and financial data: Retained for five (5) years from the date of each transaction for compliance and audit purposes.
• Technical and usage data: Retained for a maximum of two (2) years from collection, subject to earlier deletion or anonymisation where the data is no longer required for fraud prevention or platform analytics.
• Customer support communications: Retained for two (2) years from the date of each interaction unless a longer retention period is required by the subject matter of the communication.

Where personal data is no longer required and no legal obligation to retain it exists, 98pk will securely delete or irreversibly anonymise that data.

98pk implements technical and organisational security measures appropriate to the risk of the data processing activities it conducts. Key security measures include:

• 256-bit SSL (TLS) encryption for all data transmitted between your device and 98pk servers, protecting your 98pk Login session and all payment transactions.
• Industry-standard password hashing — plaintext passwords are never stored on 98pk systems.
• Optional two-factor authentication (OTP via registered Pakistani mobile number) for additional account security.
• Automated session expiry after 30 minutes of inactivity, reducing risk on shared or unattended devices.
• Regular penetration testing and vulnerability assessments by third-party security specialists.
• Strict access controls limiting access to personal data to authorised 98pk personnel on a need-to-know basis.

98pk uses cookies and similar tracking technologies to deliver and improve the Platform. Cookies used on 98pk fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function, including session management for your 98pk Login, security tokens, and payment flow state. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language, game display settings, and responsible gaming limit configurations. Disabling these may affect personalisation features.
• Analytics cookies: Used on an anonymised basis to understand how Pakistani players navigate and use the Platform, identifying areas for improvement. You may opt out of analytics cookies via account settings.
• Marketing cookies: Used only with your prior consent to deliver relevant promotional content. Marketing cookies can be withdrawn at any time through account settings or by contacting support.

You can manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will prevent 98pk from functioning correctly.

As a data subject, you have a number of rights in relation to the personal data that 98pk holds about you. These rights are subject to applicable legal limitations and may be exercised by contacting 98pk support via live chat or email.

98pk does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly adults-only, and registration is conditional on confirming that you are 21 years of age or older. Age verification checks are conducted routinely as part of our KYC process.

If 98pk becomes aware that personal data has been collected from a person under 21, that account will be suspended immediately and the personal data in question will be deleted as soon as practicable, except where retention is required for legal or compliance purposes such as fraud investigation.

98pk reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify active account holders via the Platform or registered contact information. The current version of this Policy is always available on the 98pk Privacy Policy page. Continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms.

Questions, requests, or concerns regarding this Privacy Policy or the way 98pk handles your personal data can be directed to our support team, available 24 hours a day via live chat on the Platform, or via the email address listed in the footer of this page. Our team operates in both English and Urdu, and privacy-related requests are treated as priority communications. Please note that requests for access to, correction of, or deletion of personal data will require identity verification before action is taken.