98 Games Privacy Policy — How We Handle Your Personal Data in Pakistan

98 Games operates the online betting and gaming platform available at 98games.bet. We offer sports betting — with particular depth on PSL and Pakistan cricket — virtual sports, crash games, card games, and related promotional services to registered users in Pakistan. For the purposes of this Privacy Policy, 98 Games is the data controller for all personal information collected through the platform.

This Privacy Policy applies to every user who accesses 98 Games in any capacity — whether that means browsing the site without an account, registering and using a full betting account, or interacting with us through customer support channels. It covers data collected via the 98 Games website on desktop and mobile browsers.

If you have questions about how your data is handled or want to exercise any of the rights described in this policy, you can reach our data team at support@98games.bet. We respond to all data-related queries within five business days and aim to resolve most requests within fifteen business days.

98 Games collects personal data through several channels: information you provide directly when registering or using the platform, information generated automatically as you use the platform, and in some cases information obtained from third-party service providers for identity verification purposes. Below is a full breakdown.

We do not collect sensitive personal data such as biometric data beyond the identity verification process, religious beliefs, political views, or health information. The biometric element of identity verification — the selfie used to match against your CNIC — is processed solely for verification purposes and is not retained beyond the completion of that check.

Every category of data listed in Section 2 serves a specific, documented purpose. Here is why each type is collected and what it is used for at 98 Games.

• Identity and contact data is collected to create and manage your account, verify your identity before processing withdrawals, and comply with anti-money laundering and know-your-customer (KYC) obligations that apply to regulated betting platforms.
• Financial data is collected to process deposits and withdrawals, detect and prevent payment fraud, reconcile transaction records, and comply with financial record-keeping obligations.
• Betting activity data is used to settle your bets accurately, provide your account history, identify responsible gaming risk indicators as described in our Responsible Gaming policy, generate personalised promotions where you have consented to receive them, and improve our market offerings over time.
• Technical data is used to protect the platform from fraud, identify duplicate account registrations, troubleshoot technical issues, and improve platform performance for Pakistani users on 4G networks.
• Communications data is retained to maintain an accurate record of your interactions with 98 Games support, improve the quality of our customer service, and resolve any disputes that may arise.

98 Games processes your personal data on the basis of the following legal grounds, which align with standard data protection principles applicable in Pakistan and international best practice:

• Contract performance: Processing your name, contact details, payment data, and betting activity is necessary to provide the services you signed up for — your 98 Games account and the betting markets you use. Without this data, we cannot operate your account.
• Legal obligation: Identity verification, financial transaction records, and certain communications data are processed because applicable law requires us to maintain them. This includes anti-money laundering obligations and fraud prevention duties.
• Legitimate interests: Technical and device data, responsible gaming monitoring, and platform fraud detection are processed based on our legitimate interest in operating a secure and fair platform. In each case, these interests do not override your rights as a user.
• Consent: Marketing communications — including SMS notifications about promotions, bonus offers, and PSL-related betting opportunities — are sent only where you have actively opted in. You can withdraw consent at any time by updating your notification preferences in your account settings or by contacting support.

Beyond the specific purposes tied to each data category, here is a plain-language summary of everything 98 Games uses your personal information for on a day-to-day basis.

Where personalised marketing is concerned, 98 Games may use your betting activity data and account profile to suggest relevant promotions — such as enhanced PSL odds during a major fixture — but only where you have opted in to receive such communications. We do not use your data to serve advertisements on third-party websites or platforms.

98 Games does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Period. The only circumstances under which your data leaves the 98 Games platform are those described below.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners, and card networks receive the transaction data necessary to process your deposits and withdrawals. They are bound by their own privacy and security standards and by their contractual obligations to 98 Games.
• Identity verification providers: During the KYC process, certain identity documents and photographs may be shared with a certified third-party verification service. This data is used solely for verification and is not retained by the third party beyond the completion of the check.
• Technology and infrastructure providers: Cloud hosting, data analytics tools, and platform security services that support 98 Games may process certain anonymised or pseudonymised technical data. These providers are engaged under data processing agreements that bind them to strict confidentiality and security requirements.
• Regulatory and legal authorities: 98 Games is legally obliged to share certain information with relevant authorities on request — including law enforcement, financial regulators, and courts — where a valid legal order or statutory obligation exists. We will always notify you of any such disclosure where we are legally permitted to do so.

The 98 Games website uses cookies and similar tracking technologies to make the platform work correctly and to improve the user experience for Pakistani bettors. Here is a plain explanation of what each type does.

98 Games does not use advertising or retargeting cookies. You will not see 98 Games advertisements follow you around on other websites as a result of visiting this platform. Cookie preferences (for non-essential cookies) can be managed from the cookie settings panel accessible via the footer of the website, or through your browser's built-in cookie management tools.

98 Games retains your personal data only for as long as is necessary to fulfil the purposes outlined in this policy, or as required by applicable law. The following retention periods apply.

• Active account data: Retained for the full duration of your active 98 Games account plus a minimum of 5 years following account closure, to comply with financial record-keeping obligations and to facilitate resolution of any post-closure disputes.
• KYC verification documents: Retained for the legally required minimum period from the date of verification, in line with applicable anti-money laundering regulations. Biometric verification data used for selfie matching is not retained beyond the completion of the initial verification check.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, which is a standard requirement for financial services record-keeping under Pakistani law.
• Customer support communications: Retained for 3 years from the date of the last interaction in any support thread. This allows us to refer back to previous conversations in the event of related future queries or disputes.
• Marketing consent records: Retained until you withdraw consent, and for 1 year after withdrawal as an audit record that consent was properly managed.
• Anonymised analytics data: Retained indefinitely in aggregated, anonymised form as it no longer constitutes personal data once it cannot identify an individual.

When data reaches the end of its retention period, it is securely deleted or anonymised using methods that prevent recovery. If you request deletion of your account and data before the end of a legally mandated retention period, we will delete all data that we are not legally required to retain and provide you with confirmation of what has been deleted and what must be kept and why.

As a 98 Games user in Pakistan, you have the following rights with respect to your personal data. These rights apply regardless of how long you have been a member and regardless of the amount you have deposited or wagered.

Protecting the personal data of 98 Games users is a genuine operational priority, not a compliance checkbox. The following technical and organisational security controls are in place across the platform.

• TLS encryption in transit: All data transmitted between your device and 98 Games servers — including login credentials, payment data, and personal details — is encrypted using industry-standard TLS protocols. The connection is visible as HTTPS in your browser.
• Encrypted data at rest: Sensitive stored data including password hashes, CNIC numbers, and financial identifiers is encrypted using strong hashing and encryption algorithms.
• Access controls: Access to personal data within 98 Games is restricted on a need-to-know basis. Only staff members with a specific operational requirement can access identifiable user data, and all access is logged and audited.
• Regular security reviews: 98 Games conducts periodic internal and external security assessments of the platform infrastructure. Known vulnerabilities are addressed promptly according to a prioritised remediation process.
• Two-factor authentication: 98 Games supports and encourages two-factor authentication (2FA) for user accounts. Enabling 2FA significantly reduces the risk of unauthorised account access.
• Incident response: 98 Games maintains a documented data breach response procedure. In the event of a security incident, a dedicated response team is activated within hours to contain the incident, assess its scope, and notify affected users as described in Section 6 of our security principles.

The 98 Games platform is intended exclusively for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory step in the registration process, and 98 Games employs automated and manual checks to identify and close accounts where a user may be underage.

If you are a parent or guardian and believe that a child under 18 has created an account on 98 Games or provided us with personal data, please contact us immediately at support@98games.bet. We will investigate promptly and, if confirmed, will close the account and securely delete all associated data.

We take our child protection obligations seriously. Any employee or system that detects a potential underage user is required to escalate the case immediately to our compliance team for review and appropriate action.

The 98 Games website does not contain links to third-party websites beyond what is necessary to facilitate payment processing and identity verification through our authorised service providers. All such integrations are embedded within the 98 Games interface and do not redirect you to external websites that 98 Games does not control.

If you navigate away from 98 Games through a URL you have found through another channel — such as a search engine result, a social media link, or a communication not sent by 98 Games — please be aware that this Privacy Policy does not cover any data processing that takes place on websites or apps outside the 98 Games platform. 98 Games is not responsible for the privacy practices of third-party sites.

98 Games reviews and updates this Privacy Policy periodically to reflect changes in platform features, applicable law, or industry best practice. When material changes are made — meaning changes that meaningfully affect how we collect, use, or share your data — we will notify registered users via SMS or email at least 7 days before the updated policy takes effect.

The "Last Updated" date at the top of this page indicates when the most recent version was published. We recommend reviewing this page periodically to stay informed about how 98 Games handles your data. Your continued use of the platform after any update constitutes acceptance of the revised policy.

For minor updates — such as clarifications that do not change the substance of how data is processed, or corrections of typographical errors — we may update the policy without advance notice, though the "Last Updated" date will always reflect the most current version.

For any query, request, or concern related to this Privacy Policy or the way 98 Games handles your personal data, please get in touch using the contact details below. We take all privacy-related communications seriously and aim to respond within five business days.

• Email: support@98games.bet — preferred channel for data requests, deletion requests, and formal complaints.
• Live Chat: Available within your 98 Games account dashboard. Urdu and English agents are available during Pakistan Standard Time business hours.
• FAQ: Common questions about accounts, data, and platform use are answered at 98games.bet/faq.

If you raise a privacy concern with us and are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority in Pakistan. Details of the applicable regulatory body and the process for raising a formal complaint are available on request from our support team.

98 Games is committed to handling all complaints fairly, thoroughly, and within a reasonable timeframe. Our goal is to resolve every data-related concern to your satisfaction without you needing to involve external regulators — but we fully support your right to do so if our response falls short.