98pakr Privacy
Policy

This Privacy Policy is issued by 98pakr ("98pakr", "we", "us", or "our"), the operator of the online gaming platform accessible at https://98pakr.net (the "Platform"). 98pakr operates under an international gaming licence and is committed to handling personal data responsibly and in accordance with applicable data protection standards.

For the purposes of this Privacy Policy, "personal data" means any information relating to an identified or identifiable natural person — that is, any information that could be used to identify you directly or indirectly. "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.

By using the 98pakr Platform, creating an account, or submitting any personal information to us, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions.

98pakr collects personal data through multiple channels: directly from you when you register or use the Platform, automatically through your device and browser, and in certain cases from third-party service providers. The categories of data we collect are as follows:

We do not collect or store full debit/credit card numbers directly. Where card processing is used, it is handled exclusively by PCI-DSS-certified payment processors who transmit only tokenised references to us.

98pakr uses personal data for the following specific and documented purposes:

• Account Management: Creating and maintaining your 98pakr account, verifying your identity and age (21+ requirement), and enabling secure login.
• Transaction Processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT; reconciling accounts; and providing transaction histories.
• Regulatory Compliance: Performing Know Your Customer (KYC) checks, Anti-Money Laundering (AML) screening, and complying with reporting obligations to licensing and regulatory authorities.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, multi-accounting, unauthorised access, and abuse of promotional offers.
• Customer Support: Responding to queries, complaints, and responsible gaming requests submitted via live chat or email.
• Service Improvement: Analysing aggregated and anonymised usage patterns to improve the Platform's performance, content, and user experience.
• Responsible Gaming: Monitoring for patterns associated with problem gambling and facilitating the activation of self-exclusion, deposit limits, and cool-off periods as requested by you or required by our responsible gaming obligations.
• Direct Communications: Sending account-related notifications (deposits, withdrawals, security alerts, policy updates) and, where you have opted in, promotional communications regarding 98pakr offers. You may withdraw marketing consent at any time through account settings.

We do not use personal data for automated decision-making that produces legal or similarly significant effects, except for automated age verification and fraud screening — both of which remain subject to human review upon your request.

98pakr processes your personal data under the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform the contract between you and 98pakr — including account creation, deposit processing, bet placement, withdrawal execution, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and disclosures mandated by licensing authorities.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service analytics — where our legitimate interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided clear, freely given, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

98pakr does not sell personal data to any third party under any circumstances. We share personal data only in the following controlled situations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT processing partners receive transaction data necessary to complete PKR deposits and withdrawals. All payment partners are contractually bound to data protection standards.
• KYC and Identity Verification Providers: Certified third-party identity verification services receive identity documents and personal details solely for the purpose of completing KYC checks as required by our licensing obligations.
• Gaming Software Providers: Game providers hosting slots, live dealer, and casino games on the 98pakr Platform receive session and stake data required to operate and certify game outcomes. No more data is shared than is technically required.
• Fraud and Security Services: We use certified fraud screening services that receive IP addresses, device fingerprints, and transaction patterns for the purpose of identifying and preventing fraudulent activity.
• Regulatory Authorities: We will disclose personal data to our licensing authority, financial intelligence units, or law enforcement agencies where required by law or valid legal process. We will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and accountants acting as service providers may access data on a confidential, need-to-know basis in connection with their professional engagements with 98pakr.

All third parties with whom 98pakr shares personal data are required to process it solely for the specified purpose, maintain appropriate security standards, and not further share it without authorisation.

As an internationally licensed gaming operator, 98pakr may transfer personal data to service providers located outside Pakistan. Where such transfers occur, we ensure they are subject to appropriate safeguards, including:

• Contractual clauses that impose data protection obligations equivalent to those applied within the Platform;
• Transfer to jurisdictions with an adequate level of data protection as recognised by applicable standards; or
• Other legally recognised transfer mechanisms as appropriate to the specific circumstances.

You may request information about the safeguards applicable to any specific international transfer by contacting [email protected].

98pakr retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are:

• Account and Identity Data: Retained for the duration of your account and for a period of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Financial Transaction Records: Retained for seven (7) years from the date of the transaction, in line with standard accounting and regulatory requirements.
• KYC Documents: Retained for five (5) years after account closure or the end of the business relationship, as mandated by AML regulations.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction.
• Marketing Preferences and Consent Records: Retained until consent is withdrawn, plus an additional period of three (3) years as evidence of consent.
• Technical and Usage Data: Retained in identifiable form for up to 24 months; thereafter anonymised and retained for analytics purposes indefinitely.

Where you request account closure and there is no active legal hold, personal data not subject to mandatory retention periods will be deleted within ninety (90) days of the verified closure request.

98pakr uses cookies and similar technologies (including local storage and session tokens) on the Platform. We do not use third-party advertising or tracking networks. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function — including session management, login state, security tokens, and fraud prevention. These cannot be disabled without affecting core functionality.
• Performance and Analytics Cookies: Used to understand how members interact with the Platform (pages visited, session duration, errors encountered). Data is aggregated and anonymised. You may opt out of analytics cookies through your account preferences.
• Functional Cookies: Used to remember your preferences (language, display settings, last login method) to improve your experience.

We do not use advertising, social media, or cross-site tracking cookies. The 98pakr Platform does not integrate with third-party advertising networks or social media tracking pixels.

You can manage or clear cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

Subject to applicable law and certain legal exceptions, you have the following rights in respect of your personal data held by 98pakr:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how we use it.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For basic account details, you can update these directly through account settings.
• Right to Erasure: You may request deletion of your personal data where there is no overriding legitimate purpose or legal obligation for us to retain it.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances (for example, while a rectification request is being resolved).
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your registered account details. We will acknowledge your request within 48 hours and complete it within 30 days.

Please note that certain rights are subject to exceptions under AML, fraud prevention, and gaming regulatory obligations. Where an exception applies, we will explain why your request cannot be fulfilled in full.

The 98pakr Platform is strictly intended for individuals aged 21 years and over. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes age verification steps designed to prevent underage individuals from creating accounts.

If we become aware that personal data has been collected from a person under 21 without appropriate verification, we will immediately suspend the relevant account, delete the associated data, and — where required — report the matter to relevant authorities.

If you are a parent or guardian and believe that a minor in your care has accessed or registered on the 98pakr Platform, please contact us immediately at [email protected]. We will investigate and take action without delay.

98pakr implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction:

• Encryption in Transit: All data transmitted between your device and the 98pakr Platform is encrypted using TLS 1.3.
• Encryption at Rest: Sensitive stored data — including identity documents, financial records, and password hashes — is encrypted using AES-256.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis, with role-based access controls and audit logging of all data access events.
• Two-Factor Authentication: 98pakr members are encouraged to enable two-factor authentication (2FA) on their accounts for additional protection. 2FA is mandatory for staff accounts with data access.
• Penetration Testing: The Platform undergoes regular third-party security assessments and penetration testing.
• Incident Response: In the event of a data breach that poses a risk to your rights, 98pakr will notify affected users and relevant authorities within the timeframes required by applicable law.

While we take all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying us immediately of any suspected unauthorised access.

98pakr reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will:

• Update the "Last updated" date and version number at the top of this page;
• Notify registered users by email to their registered address; and
• Where the change materially affects how we process personal data, request fresh consent where required.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and contact us to close your account.