Your Data, Protected

98pk Privacy Policy – How We Handle Your Personal Information

At 98pk, we take the privacy of every Pakistani member seriously. This Privacy Policy explains exactly what personal data we collect when you use the 98pk platform, why we collect it, how it is stored and protected, who it may be shared with, and what rights you have over your own information. We've written this in straightforward English — no legal jargon designed to confuse.

Last updated: January 2025  |  Applies to 98pk.ws
At a Glance
Data stays on 98pk
We do not sell your data to third parties
Encrypted at rest & in transit
SSL/TLS + AES-256 storage encryption
KYC is required once
CNIC verification before first withdrawal
You control your data
Request access, correction, or deletion
Questions? Contact us 24/7
support@98pk.ws
98pk
Our Privacy Commitments

Six Ways 98pk Keeps Your Data Safe

Before you read the full policy, here are the six core commitments that underpin how 98pk treats the personal information of every Pakistani member.

We Never Sell Your Data

Your personal information is never sold, rented, or traded to advertising networks, data brokers, or any third party for commercial purposes. 98pk collects your data to operate the platform, not to monetise your profile.

End-to-End Encryption

All data transmitted between your device and 98pk's servers is protected by SSL/TLS encryption. Personal and financial data stored on our servers uses AES-256 encryption at rest. Your CNIC details, mobile number, and payment information are never stored in plain text.

Minimal Data Collection

98pk collects only the information genuinely needed to operate the platform, verify your identity, process your PKR transactions, and comply with anti-money laundering obligations. We do not collect data we have no legitimate use for.

Your Rights Are Real

You have the right to access the data 98pk holds about you, to correct inaccuracies, to request deletion where lawfully permitted, and to ask us to stop using your data for certain purposes. These aren't hollow promises — we honour every valid request within 30 days.

Limited Third-Party Sharing

Data is shared with third parties only where strictly necessary — payment processors (Easypaisa, JazzCash, banks), identity verification services, and regulatory or law enforcement bodies when legally required. Every third party we use is contractually bound to handle your data responsibly.

Clear Retention Limits

98pk does not retain your personal data indefinitely. Account data is held for the duration of your membership plus a legally required retention period after closure (typically 5 years for financial records). Marketing preferences can be withdrawn at any time.

01

Who We Are

This Privacy Policy applies to 98pk, the online betting and gaming platform operating at 98pk.ws ("the Platform", "we", "us", "98pk"). When we refer to "you" or "the Member", we mean any individual who has registered an account on 98pk, visits the 98pk website, or interacts with 98pk in any capacity.

98pk is the data controller for all personal information collected through the platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring it is handled in accordance with applicable privacy obligations and the commitments set out in this policy.

For any privacy-related enquiry, you can contact us at support@98pk.ws. Our support team is available 24/7 and aims to respond to all privacy requests within 2 business days, with formal Data Subject Requests handled within 30 days.

This policy should be read alongside the 98pk Terms and Conditions. Together they form the complete framework governing your use of the platform. By creating a 98pk account, you confirm that you have read and accepted both documents.

02

What Personal Data We Collect

98pk collects the following categories of personal data from its members and website visitors. We collect this information only where it serves a genuine, defined purpose as outlined in Section 4 of this policy.

Category Examples
Identity DataFull legal name, date of birth, CNIC number (for KYC verification)
Contact DataMobile phone number, email address, registered city/province
Account DataUsername, hashed password, account creation date, login history
Financial DataDeposit and withdrawal history, payment method type (e.g. Easypaisa, JazzCash), transaction amounts in PKR — we do not store full card or wallet numbers
Betting & Gaming DataBet history, game history, stakes, outcomes, session durations, active promotions
Technical DataIP address, device type, browser type and version, operating system, referring URL
Usage DataPages visited, features used, time spent on platform sections, clicks and interactions
Communications DataRecords of support chat conversations, emails, and other communications with the 98pk team
Responsible Gaming DataLimits set, self-exclusion status, session reminder preferences

98pk does not collect sensitive personal categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where expressly required by responsible gaming obligations (e.g. self-exclusion records maintained for member protection).

98pk
03

How We Collect Your Data

98pk collects personal data through several different channels. Understanding how your data reaches us is important for understanding your privacy rights.

  • Directly from you: When you register a 98pk account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in any promotion, you provide data to us directly.
  • Automatically through your use of the platform: When you browse the 98pk website or use the platform, technical and usage data is collected automatically through cookies, server logs, and similar tracking technologies. This is standard practice across all web platforms and is explained further in Section 6 (Cookies).
  • From payment providers: When you make a deposit or request a withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer, or card, the payment provider confirms transaction status to us. We do not receive your full wallet or card credentials — only the information needed to record and process the transaction.
  • From identity verification services: For KYC purposes, 98pk may use a third-party identity verification service to confirm the authenticity of CNIC documents. These services return a verification result to 98pk and are bound by confidentiality obligations.
  • From fraud detection tools: Automated systems analyse behavioural and technical data to detect suspicious or fraudulent activity. This processing is necessary to protect the integrity of the 98pk platform and all its members.
04

Why We Use Your Personal Data

Every use of your personal data at 98pk has a specific, documented purpose and a lawful basis. We do not process data without a clear reason. The following table sets out the main purposes for which 98pk uses personal data:

  • Account creation and management: To set up and maintain your 98pk account, authenticate you at login, and manage your account preferences and responsible gaming settings.
  • Identity verification (KYC): To verify your identity and age before processing withdrawals, as required by anti-money laundering (AML) obligations. This involves comparing provided information against your CNIC.
  • Transaction processing: To process PKR deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments. Financial transaction records must be retained for legal compliance.
  • Customer support: To respond to your support requests, investigate disputes, and resolve complaints. Support communications are retained to maintain a consistent service record.
  • Platform security and fraud prevention: To detect and prevent fraudulent accounts, bonus abuse, money laundering, and other prohibited activities. This includes automated monitoring of betting patterns and account behaviour.
  • Responsible gaming: To enforce limits and exclusions you have set, to identify potentially problematic gambling patterns, and to contact members who may need support.
  • Platform improvement: Anonymised and aggregated usage data is analysed to improve the 98pk platform, fix bugs, and develop new features. Individual user profiles are not used for this purpose.
  • Promotional communications: With your consent at registration, 98pk may send you information about relevant promotions and offers by email or SMS. You can opt out at any time by contacting support or updating your notification preferences.
  • Legal compliance: To comply with applicable laws, respond to lawful government or regulatory requests, and meet record-keeping requirements.

If you no longer wish to receive promotional messages from 98pk, reply STOP to any SMS, click the unsubscribe link in any email, or contact our support team. Opting out of marketing does not affect service communications such as withdrawal confirmations or account security alerts.

05

Data Sharing – Who Can Access Your Information

98pk does not sell your personal data. We share personal data with third parties only in the specific, limited circumstances described below:

  • Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and our card processing partner receive the transaction data necessary to complete your PKR deposits and withdrawals. Each is bound by its own privacy and security obligations.
  • KYC and identity verification providers: A certified third-party service processes CNIC images and returns a verification result. These providers are contractually obligated to use your data only for identity verification and to delete it after the verification process is complete.
  • Fraud detection and security services: Automated fraud detection platforms may analyse technical and behavioural data to flag suspicious activity. These services operate on anonymised or pseudonymised data where possible.
  • Regulatory and law enforcement authorities: Where required by applicable law, court order, or the direction of a competent regulatory authority, 98pk will disclose the minimum necessary personal data. We will notify affected members of such disclosures where legally permitted to do so.
  • Business transfers: In the event of a merger, acquisition, or sale of 98pk's assets, personal data held by 98pk may be transferred to the acquiring entity. Any such transfer will be carried out subject to appropriate privacy protections and member notification.

All third parties who process data on behalf of 98pk are required to handle it in accordance with strict data processing agreements and are not permitted to use it for their own purposes. 98pk remains the data controller in all cases.

06

Cookies & Tracking Technologies

The 98pk website uses cookies and similar technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file stored on your device when you visit a website. Cookies cannot execute programmes or deliver viruses to your device.

98pk uses the following categories of cookies:

  • Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, remember your account state, and ensure security features work correctly. You cannot opt out of these without stopping use of the platform entirely.
  • Functional Cookies: These remember your preferences — such as language settings, notification preferences, and game display options — so you don't have to reset them on every visit to 98pk.
  • Analytics Cookies: These collect anonymised data about how members use the 98pk platform — which pages are visited, how long sessions last, and where errors occur. This data is used exclusively to improve the platform and is not linked to individual user profiles.
  • Security Cookies: Used by fraud detection systems to identify unusual login behaviour, multiple accounts from the same device, or other security anomalies.

98pk does not use third-party advertising cookies that track your browsing activity across other websites. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies may affect your ability to use certain features of the 98pk platform.

When you first visit 98pk, a cookie consent banner allows you to accept or decline non-essential cookies. Strictly necessary cookies are always active. Your cookie preferences can be updated at any time via your account settings.

98pk
07

Data Security

98pk implements a multi-layered approach to data security designed to protect your personal and financial information against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

  • SSL/TLS encryption: All data in transit between your device and 98pk's servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
  • AES-256 encryption at rest: Sensitive data stored on 98pk's servers — including identity documents and financial records — is encrypted using AES-256, the same standard used by financial institutions and government agencies globally.
  • Access controls: Only authorised 98pk personnel have access to personal data, and only to the extent required for their specific role. Access is logged and audited regularly.
  • Regular security testing: 98pk's technical infrastructure undergoes regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses.
  • Secure password handling: Passwords are never stored in plain text. We use bcrypt hashing with appropriate salt rounds.
  • Two-factor authentication (2FA): Members are encouraged to enable 2FA on their 98pk accounts for an additional layer of login security.

While 98pk takes all reasonable and practicable steps to protect your data, no internet-based system can be guaranteed 100% secure. In the unlikely event of a data breach that affects your personal information, 98pk will notify affected members without undue delay and take immediate remedial action.

08

Data Retention

98pk retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. Our general retention guidelines are:

  • Active account data: Retained for the full duration of your 98pk membership plus a post-closure period as described below.
  • Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by anti-money laundering regulations.
  • KYC documents: Retained for 5 years from account closure or the date of last transaction, whichever is later.
  • Responsible gaming records: Self-exclusion and limit history is retained for a minimum of 5 years to prevent circumvention of exclusion requests.
  • Support communications: Retained for 3 years from the date of the last communication to maintain service continuity and dispute resolution capability.
  • Analytics and usage data: Anonymised aggregated data may be retained indefinitely for platform improvement purposes; individual usage logs are purged after 24 months.
  • Marketing consent records: Retained until you withdraw consent, plus 1 year for audit purposes.

When personal data is no longer required, 98pk securely destroys or permanently anonymises it using industry-standard methods, ensuring it cannot be reconstructed or linked back to you.

09

Your Rights Over Your Personal Data

As a 98pk member, you have meaningful rights over the personal data we hold about you. These are not formalities — 98pk honours every valid exercise of these rights. To exercise any of the rights below, contact our support team at support@98pk.ws with the subject line "Data Rights Request".

Right of Access

Request a copy of all personal data 98pk holds about you. We will provide this within 30 days.

Right to Rectification

Ask us to correct inaccurate personal data, such as a misspelled name or wrong date of birth.

Right to Erasure

Request deletion of your data where we no longer have a lawful basis to retain it. Legal retention obligations may apply.

Right to Restrict Processing

Ask us to pause certain uses of your data while a query or complaint is being investigated.

Right to Data Portability

Receive your personal data in a structured, machine-readable format to transfer elsewhere.

Right to Object

Object to data processing based on our legitimate interests, including objecting to direct marketing at any time.

Requests are free of charge and will be handled within 30 days. Where a request is particularly complex or multiple requests are received, we may extend this period by an additional 30 days and will notify you accordingly. 98pk will not deny access, penalise, or discriminate against any member for exercising these rights.

10

Children's Privacy

98pk is strictly an adult platform — access and registration are limited to individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18.

If a parent or guardian becomes aware that a minor has provided personal data to 98pk, they should contact us immediately at support@98pk.ws. Upon receiving such notification, 98pk will take immediate steps to suspend the account, investigate, and permanently delete all personal data associated with the minor's account.

If you share a device with younger family members, ensure your 98pk account is always logged out when the device is unattended. Never share your 98pk login credentials with anyone, including family members. Enable 2FA for additional protection.

11

Changes to This Privacy Policy

98pk may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, legal requirements, or regulatory guidance. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

For material changes — those that significantly affect how we use your personal data or reduce your privacy rights — 98pk will notify registered members via email or prominent in-account notification at least 14 days before the revised policy takes effect. This gives you time to review the changes and, if you disagree, to close your account and withdraw your remaining balance before the new policy applies.

Continued use of the 98pk platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy. We encourage you to revisit this page periodically. Archived versions of previous policies are available on request.

12

Contact Us & Complaints

If you have any question, concern, or complaint about how 98pk handles your personal data, please get in touch with us directly — we take every privacy concern seriously and aim to resolve issues quickly and fairly.

  • Email: support@98pk.ws — please use the subject line "Privacy Enquiry" or "Data Rights Request" so your message is routed correctly.
  • Live Chat: Available 24/7 directly from the 98pk website. For quick queries, live chat is the fastest route to our team.

98pk aims to acknowledge all privacy-related communications within 24 hours and to provide a substantive response within 30 days. Where an issue cannot be resolved to your satisfaction through direct communication, you may escalate your complaint to the relevant data protection authority applicable to your jurisdiction.

For formal Data Subject Requests (access, erasure, portability, etc.), please email support@98pk.ws with your registered mobile number and the nature of your request. We will verify your identity before processing and respond within 30 days.


Ready to play with confidence?

Join 98pk – Your Data Is Safe, Your Winnings Are Real

Now that you know exactly how 98pk handles your information, you can play with genuine confidence. Register in under 90 seconds, deposit via Easypaisa or JazzCash in PKR, and access Pakistan's full cricket, casino, Aviator, and crash games library.