Privacy Policy

1. Introduction

This Privacy Policy (hereinafter "the Policy" or "this Policy") is issued by 98pak (hereinafter "98pak", "we", "us" or "the Platform") and governs the collection, use, storage, disclosure and protection of personal data belonging to individuals (hereinafter "you", "User" or "Player") who access or use the services available at https://98pak.cam.

98pak is an English-language online betting and gaming information platform built for players across Pakistan, including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We process personal data in connection with account registration, identity verification, payment processing, customer support and the delivery of betting and gaming services.

By creating an account on 98pak, using any feature of the Platform or submitting personal information to us in any form, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are available on this website.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, payment details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means 98pak, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of 98pak under a contractual agreement.
• "KYC" means Know Your Customer identity and age verification procedures required by applicable operator compliance obligations.
• "Cookies" means small text files stored on your device by a web browser to facilitate Platform functionality, session management and analytics.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "Platform" means the 98pak website at https://98pak.cam and all associated services and features.

3. Data We Collect

3.1 Data You Provide Directly

When you register an account, complete KYC, make a deposit or contact our support team, you may provide us with the following categories of personal data:

• Full legal name as shown on official identification (e.g., CNIC, passport).
• Date of birth and gender.
• Email address and mobile phone number.
• Residential address, including city (e.g., Karachi, Lahore, Islamabad) and country.
• Government-issued identity document numbers and copies (for KYC purposes).
• Payment information including account numbers associated with your chosen payment method (e.g., mobile wallet references); full card or bank account numbers are not stored by us and are handled exclusively by our payment processor partners.
• Communications and correspondence submitted to our customer support team.

3.2 Data Collected Automatically

When you access the Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation.
• Device type, operating system, browser type and version.
• Session data including pages visited, time spent, clicks and navigation paths.
• Referral source (where applicable).
• Cookie data as described in Section 9.

3.3 Data from Third Parties

We may receive personal data about you from identity verification providers (for KYC), fraud-detection services, payment processors and, where applicable, publicly available sources as part of our anti-money-laundering (AML) compliance programme.

4. How We Process Your Data

98pak processes your personal data for the following purposes:

4.1 Account Management

To create, maintain and administer your account, including processing registrations, managing account settings, handling login authentication, and applying responsible gambling tools such as deposit limits, loss limits and self-exclusion.

4.2 Identity Verification & Compliance

To fulfil KYC obligations, verify your age (18+ or the higher minimum required by the operator/license jurisdiction), confirm your identity against government-issued documents, and screen against applicable sanctions lists and politically exposed person (PEP) databases as required by our compliance framework.

4.3 Payment Processing

To process deposits and withdrawals in PKR, reconcile transaction records, and investigate disputed or failed transactions. Payment method references familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited as context only and do not represent payment processing partnerships or endorsement of gambling by those providers.

4.4 Customer Support

To respond to your enquiries, resolve disputes and provide assistance via Live Chat, Help Centre and email. Support is delivered in English and, on request, in Urdu.

4.5 Security & Fraud Prevention

To detect, investigate and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering and any other conduct that violates our Terms & Conditions or applicable law.

4.6 Marketing Communications

Where you have provided explicit consent, to send promotional emails, SMS notifications or in-platform messages about bonuses, new products and special offers. You may withdraw this consent at any time by updating your account preferences or contacting support.

4.7 Platform Improvement

To analyse aggregated, anonymised usage data for the purpose of improving platform performance, user experience and product development. This does not involve identifying individual users.

5. Legal Basis for Processing

We rely on the following legal bases to process your personal data:

• Contractual Necessity: Processing required to fulfil the Terms & Conditions you have agreed to — including account management, payment processing and dispute resolution.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering (AML), counter-terrorist-financing (CTF), KYC and operator-licensing obligations.
• Legitimate Interests: Processing for fraud prevention, platform security and internal analytics, where our interests do not override your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given consent that can be withdrawn at any time.

6. Data Sharing & Third Parties

98pak does not sell, rent or trade your personal data to any third party for their own marketing purposes. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and under binding data-processing agreements:

• Payment Processors: To facilitate PKR deposits and withdrawals through supported payment channels. Payment providers receive only the data necessary to execute the specific transaction.
• Identity Verification Providers: To conduct KYC checks, age verification and document authentication in fulfilment of operator compliance requirements.
• Fraud Prevention & AML Services: To screen accounts and transactions against risk indicators, sanctions lists and PEP databases.
• Technology & Hosting Partners: Cloud infrastructure and technology service providers that host Platform data under strict data security obligations.
• Responsible Gambling Partners: Recognised responsible gambling organisations or self-exclusion registries where required by licensing obligations.
• Regulatory & Law Enforcement Authorities: Where 98pak is legally required or compelled by a valid court order or regulatory direction to disclose personal data.
• Business Transfers: In the event of a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.

All third-party data processors engaged by 98pak are contractually required to process personal data only for the stated purpose, to maintain appropriate security standards and to refrain from any unauthorised use or disclosure.

7. Data Retention

98pak retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Active Accounts: Personal data associated with an active account is retained for the duration of the account relationship.
• Closed Accounts: Following account closure, we retain certain personal data — including identity verification records, transaction history and correspondence — for a minimum period as required by applicable AML regulations and operator licensing obligations. This period is typically five (5) to seven (7) years from the date of account closure, unless a longer period is required by law.
• Marketing Data: Retained until consent is withdrawn, after which it will be deleted or anonymised promptly.
• Technical & Log Data: Generally retained for up to twelve (12) months, after which it is anonymised or deleted.

Where personal data is no longer required and there is no legal basis for its continued retention, it will be securely deleted or irreversibly anonymised.

8. Security & Data Protection

98pak implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• HTTPS/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive personal data at rest using industry-standard algorithms.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a legitimate need.
• Regular security audits and penetration testing of Platform infrastructure.
• Comprehensive internal data protection and information security policies.
• Incident response procedures to detect, assess and respond to personal data breaches in a timely manner.

While we take all reasonable steps to safeguard your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately of any suspected unauthorised access to your account.

9. Cookies & Tracking Technologies

98pak uses cookies and similar tracking technologies to operate the Platform, remember your preferences and gather analytics data. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as secure login session management, remembering your logged-in state and routing traffic correctly. These cookies cannot be disabled without impairing Platform functionality.

9.2 Functional Cookies

These cookies remember your preferences and settings, such as your selected language and responsible gambling tool configurations, to provide a more personalised experience across sessions.

9.3 Analytics Cookies

We use analytics cookies to understand how users interact with the Platform — which pages are visited most often, how long sessions last and how navigation flows are used. This data is collected in aggregate and anonymised form and is used solely for internal performance improvement purposes.

9.4 Marketing Cookies

Where you have consented, marketing cookies may be used to identify your visit and to serve relevant promotional content. You may withdraw this consent at any time by updating your browser settings or contacting us.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of parts of the Platform.

10. Your Rights

Subject to applicable data protection law and certain legal exemptions, you have the following rights in relation to your personal data held by 98pak:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request the correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no overriding legal basis for retention. Note that we may be required to retain certain data for regulatory compliance purposes.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing. Where your objection relates to direct marketing, we will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact us at the details provided in Section 14. We will respond to all valid requests within a reasonable timeframe consistent with applicable legal requirements. We may need to verify your identity before processing certain requests.

11. Minors & Age Verification

The 98pak Platform is strictly intended for adults aged 18 years and above, or the higher minimum age required by the operator or applicable license jurisdiction. We do not knowingly collect or process personal data from individuals below the minimum age threshold.

As part of our registration and KYC procedures, all users are required to verify their age. Where we discover or have reasonable grounds to suspect that an account is held by a minor, we will immediately suspend that account, conduct an investigation and, if the suspicion is confirmed, permanently close the account and return any real-money deposits in accordance with applicable operator policy.

If you are a parent or guardian and believe that your child has created an account on 98pak, please contact our support team immediately.

12. International Data Transfers

As a platform operating with international technology infrastructure, personal data processed by 98pak may be transferred to and stored in countries outside Pakistan. Where such transfers occur, we take appropriate steps to ensure that your personal data is protected to a standard equivalent to that applied within the Platform's primary jurisdiction, including through the use of contractual data transfer mechanisms with third-party processors.

By using the Platform and providing personal data, you acknowledge that your information may be transferred internationally as described in this Policy.

13. Changes to This Policy

98pak reserves the right to update or amend this Privacy Policy at any time. Any material changes will be communicated by posting the revised Policy on this page with an updated "Last Updated" date. Where changes are significant, we may also notify registered users by email.

Your continued use of the Platform following the posting of any revised Policy constitutes your acceptance of the updated terms. We recommend reviewing this Policy periodically to stay informed of how we protect your personal data.

14. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by 98pak, please contact our Data Protection team:

We aim to respond to all data subject requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.