Your Privacy Is a Fundamental Right at 98pka

Introduction

98pka ("we", "us", "our") is the operator of the online gaming and sports betting platform accessible at 98pka.net ("the Platform"). We are committed to protecting the personal data of every player who uses the 98pka platform, particularly our Pakistani player base who trust us with their financial and personal information.

This Privacy Policy explains what personal data 98pka collects, the lawful bases on which we process that data, how we use and safeguard it, with whom we may share it, and the rights available to you as a data subject. This policy applies to all personal data collected through the 98pka website, mobile platform, customer support channels, and any other service operated by 98pka.

By creating a 98pka account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should cease using the 98pka platform and contact support to arrange account closure.

Personal Data We Collect

98pka collects the following categories of personal data in connection with your use of the platform:

How We Collect Your Data

98pka collects personal data through the following channels:

• Direct Registration: When you create a 98pka account, you voluntarily provide identity, contact, and financial data as part of the registration and KYC process.
• Platform Activity: Your usage of the 98pka platform — including games played, bets placed, and features accessed — automatically generates transaction and usage data that is recorded to your account.
• Payment Processing: When you make a deposit via JazzCash, EasyPaisa, HBL, or any other supported payment method, financial data associated with that transaction is collected and linked to your account.
• Customer Support Interactions: Any communication you have with the 98pka support team — whether by email or live chat — is recorded and stored as communications data.
• Cookies and Tracking Technologies: The 98pka platform uses cookies and similar technologies to collect technical and usage data automatically when you visit the platform. See Section 7 for full details.
• Third-Party Verification Providers: Where 98pka engages a third-party KYC or fraud detection service, that provider may supply additional identity verification data that is then associated with your 98pka account record.

Legal Basis for Processing

98pka processes your personal data only where a lawful basis exists. The following legal bases apply to our processing activities:

• Contractual Necessity: The majority of data processing by 98pka is necessary to perform the contract between you and 98pka — i.e., to operate your account, process deposits and withdrawals in PKR, settle bets, and provide customer support.
• Legal Obligation: 98pka is required by its gaming licence and applicable anti-money laundering regulations to collect, verify, and retain certain categories of personal data, including identity and financial data. We cannot operate your account without fulfilling these obligations.
• Legitimate Interests: 98pka processes technical and usage data on the basis of legitimate interests, specifically to maintain platform security, detect and prevent fraud, improve the user experience, and monitor responsible gaming indicators.
• Consent: Where 98pka sends you optional marketing communications about new games, promotions, or PKR bonuses, we rely on your explicit consent. You may withdraw this consent at any time via your account settings or by contacting support.

How 98pka Uses Your Personal Data

The personal data collected by 98pka is used for the following specific purposes:

• To create, manage, and maintain your 98pka player account, including processing deposits, withdrawals, and bet settlements in PKR.
• To conduct identity and age verification (KYC) as required under our licensing obligations, ensuring all players are aged 21 or above.
• To detect and prevent fraud, money laundering, collusion, bonus abuse, and other prohibited activities on the 98pka platform.
• To monitor your gaming behaviour for responsible gaming indicators, including unusual session lengths, escalating deposit patterns, or self-exclusion history, and to intervene where appropriate.
• To process and respond to customer support requests, complaints, and dispute resolution enquiries.
• To send you transactional notifications relevant to your account, such as deposit confirmations, withdrawal updates, and security alerts.
• To send you promotional communications about 98pka bonuses, new game releases, PSL cricket betting markets, and special PKR offers — only where you have provided explicit consent and not opted out.
• To analyse aggregated, anonymised platform usage data in order to improve the 98pka product experience, identify popular features, and optimise platform performance.
• To comply with our regulatory, legal, and licensing obligations, including responding to lawful requests from competent authorities.

Data Sharing and Disclosure

98pka does not sell your personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: We share financial data with payment service providers such as JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT TRC20 infrastructure providers to process deposits and withdrawals. These providers act as data processors under contractual data protection obligations.
• KYC & Identity Verification Providers: Identity data is shared with our licensed KYC verification partner to conduct document checks, facial verification, and sanctions screening as required by our operating licence.
• Fraud and AML Detection Services: Technical and transaction data may be shared with fraud prevention and anti-money-laundering screening services to identify suspicious activity patterns.
• Gaming Software Providers: Certain anonymised gameplay data is shared with the game studios whose titles are hosted on the 98pka platform, strictly for technical integration and game integrity purposes.
• Regulatory and Legal Authorities: 98pka will disclose personal data to competent government authorities, licensing bodies, law enforcement agencies, or courts where required to do so by applicable law or a valid legal order.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all assets of the 98pka business, player data may be transferred as part of that transaction, subject to equivalent privacy protections being maintained by the acquiring entity.

Cookies and Tracking Technologies

The 98pka platform uses cookies and similar tracking technologies to enhance your experience and to collect technical and usage data for security and analytics purposes. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the 98pka platform to function. They enable login sessions, maintain your account state across page navigations, and support basic security features. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as language settings, preferred PKR payment method, and responsible gaming limits — to personalise your experience on return visits.
• Analytics Cookies: 98pka uses anonymised analytics cookies to understand how players navigate the platform, which games are most popular, and where users encounter difficulties. This data is used in aggregate form to improve the product.
• Security Cookies: These cookies support fraud detection and session integrity verification, helping to identify suspicious login patterns or bot activity on the 98pka platform.

You may manage your cookie preferences through your browser settings. Please note that disabling cookies beyond the strictly necessary category may affect the functionality of certain features on the 98pka platform. 98pka does not use third-party advertising or retargeting cookies.

Data Retention

98pka retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any mandatory retention periods imposed by our licensing obligations or applicable law. The following retention periods apply:

• Active Account Data: All personal, financial, and transaction data associated with your 98pka account is retained for the full duration of your active account relationship with 98pka.
• Post-Closure Retention: Following voluntary or involuntary account closure, 98pka retains identity, financial, and transaction records for a minimum of five (5) years in compliance with anti-money laundering record-keeping requirements under our operating licence.
• KYC Documents: Copies of identity documents submitted for KYC verification are retained for a minimum period of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Support Communications: Customer support correspondence is retained for three (3) years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for as long as is necessary to demonstrate compliance with applicable data protection principles, even after you have opted out.
• Technical and Usage Data: Anonymised, aggregated usage analytics are retained indefinitely as they no longer constitute personal data once de-identified.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 98pka's data destruction procedures.

Data Security

98pka implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Encryption: All data transmitted between your browser or device and the 98pka platform is protected by 256-bit SSL/TLS encryption, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Password Security: 98pka account passwords are stored using a strong, salted cryptographic hashing algorithm. Plain-text passwords are never stored or transmitted by 98pka at any point in the authentication process.
• Two-Factor Authentication (2FA): 98pka offers optional two-factor authentication for all accounts. Players are strongly encouraged to enable 2FA as an additional layer of account security.
• Access Controls: Internal access to personal data within 98pka is restricted on a strict need-to-know basis. Employee access is logged, audited, and subject to role-based access control policies.
• Regular Security Audits: 98pka conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in the platform's infrastructure and codebase.
• Data Breach Response: 98pka maintains a documented incident response procedure. In the event of a confirmed data breach affecting player personal data, affected players will be notified promptly with full details of the incident and recommended protective actions.

Your Data Subject Rights

As a player on the 98pka platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the 98pka Data Protection team at the email address provided in Section 15:

• Right of Access: You may request a copy of all personal data held by 98pka in relation to your account. We will provide a structured response within 30 days of a valid request.
• Right to Rectification: If any personal data held by 98pka is inaccurate or incomplete, you have the right to request that it be corrected. For identity data, you may be required to resubmit KYC documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that this right is limited by mandatory retention obligations under our licensing requirements.
• Right to Restriction of Processing: You may request that 98pka restrict the processing of your data in certain circumstances — for example, while a disputed accuracy issue is being resolved.
• Right to Data Portability: You may request that 98pka provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming purposes. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time via your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

98pka will respond to all valid data subject requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it.

Children's Privacy and Age Restriction

The 98pka platform is strictly an adults-only service. No person under the age of 21 is permitted to register an account, deposit funds, or use any feature of the 98pka platform. This age restriction is non-negotiable and is enforced through mandatory KYC age verification for all players prior to the approval of any withdrawal.

98pka does not knowingly collect personal data from individuals under the age of 21. If we become aware that a player account belongs to a person under 21 years of age, we will immediately:

• Suspend the account and freeze all associated balances.
• Return any deposited funds to the originating payment source, net of any prior withdrawals.
• Securely delete all personal data associated with the underage account, except where retention is required for regulatory compliance or fraud investigation purposes.
• Where required by applicable child protection law, report the matter to the relevant authorities.

Parents and guardians who believe their child may have registered an account on the 98pka platform are encouraged to contact support immediately. 98pka takes underage gambling extremely seriously and will act swiftly to address any confirmed case.

International Data Transfers

As a globally licensed platform serving Pakistani players, 98pka may transfer personal data to servers and service providers located outside of Pakistan. Where such international data transfers occur, 98pka ensures that adequate safeguards are in place to protect your personal data to a standard equivalent to that applied within Pakistan. These safeguards include:

• Contractual data processing agreements with all international service providers that incorporate data protection obligations equivalent to internationally recognised standards.
• Use of standard contractual clauses approved by recognised data protection authorities where applicable.
• Transfer only to jurisdictions or service providers that maintain data protection frameworks recognised as providing adequate protection for personal data.

By using the 98pka platform, you acknowledge and consent to the transfer of your personal data to international locations where necessary to provide the platform's services. 98pka will always ensure that such transfers are conducted securely and in accordance with this Privacy Policy.

Third-Party Links and Services

The 98pka platform may contain references to third-party services, such as payment gateways or game providers, in the context of using the platform's features. 98pka is not responsible for the privacy practices or content of any third-party services that you access in connection with using the platform.

This Privacy Policy applies solely to personal data collected and processed directly by 98pka. We encourage all players to review the privacy policies of any third-party services they interact with, including their bank or mobile wallet provider, to understand how those services handle personal data.

Updates to This Privacy Policy

98pka reserves the right to update or amend this Privacy Policy at any time. When material changes are made — meaning changes that significantly affect how your personal data is collected, used, or your rights as a data subject — 98pka will notify you by:

• Sending a notification to your registered 98pka email address summarising the key changes.
• Displaying a prominent notice on the 98pka platform homepage and login screen for a period of at least 14 days following the update.
• Updating the "Effective Date" at the top of this page.

Your continued use of the 98pka platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised policy, you must cease using the platform and may request account closure in accordance with our Terms and Conditions.

98pka recommends that all players review this Privacy Policy periodically to stay informed about how their personal data is being handled.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data that 98pka holds about you, please contact our Data Protection team using the details below:

• Email: support@98pka. net
• Support Hours: 10:00 AM – 2:00 AM (Pakistan Standard Time), seven days a week
• Response Time: 98pka aims to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 calendar days.

When contacting us about a data subject rights request, please include your registered 98pka username and the email address associated with your account so that we can verify your identity and locate your data records efficiently. Do not include your full CNIC number or financial credentials in any email correspondence.