98plr Privacy Policy

Who We Are

98plr is Pakistan's premier online casino and sports betting platform, accessible at 98plr.com. References to "98plr," "we," "us," or "our" in this Privacy Policy refer to the 98plr platform and its operating entity, which holds the applicable international gaming licence under which the platform operates.

This Privacy Policy applies to all personal data collected from individuals who visit, register with, or use any service accessible through 98plr.com, including but not limited to casino games, sports betting markets, crash games, live dealer products, and customer support interactions. It applies equally to Pakistani players accessing the platform from Karachi, Lahore, Islamabad, Faisalabad, and any other location within Pakistan.

Personal Data We Collect

98plr collects personal data through several channels: directly from players at registration and during account operation, automatically through platform usage, and in limited circumstances from third-party verification providers. The categories of personal data we collect are as follows:

98plr does not collect sensitive personal data such as biometric data (beyond KYC selfie where required), racial or ethnic origin, political opinions, religious beliefs, or health data, except where explicitly required by applicable gaming licence compliance obligations and only with appropriate safeguards in place.

How We Use Your Personal Data

98plr uses the personal data described in Section 2 for the following specific purposes. Each purpose is tied to a legitimate need arising from the operation of the 98plr platform:

• Account Registration and Management: To create, maintain, and administer your 98plr player account, including password management, account preferences, and account history.
• Identity Verification (KYC): To verify your identity and confirm that you are at least 21 years of age, as required by our gaming licence obligations. KYC data may be processed in conjunction with approved third-party verification providers.
• Payment Processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, bank transfer, debit/credit card, and USDT, and to process withdrawal requests to verified payment methods in PKR.
• Anti-Money Laundering (AML) Compliance: To monitor transactions for indicators of money laundering or financial crime, as required under international gaming licence compliance frameworks. AML monitoring may include automated transaction screening and, where required, reporting to relevant authorities.
• Responsible Gaming: To monitor player behaviour for indicators of problem gambling, to apply responsible gaming tools where requested or where indicators warrant intervention, and to communicate with players about responsible gaming resources where appropriate.
• Fraud Prevention and Platform Security: To detect and prevent fraudulent activity, multi-account registrations, bonus abuse, and technical exploitation of the platform.
• Customer Support: To respond to enquiries, resolve disputes, and manage complaints submitted through 98plr's customer support channels.
• Legal and Regulatory Compliance: To comply with applicable gaming licence conditions, financial regulations, and any lawful requests received from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregated and anonymised usage data for the purpose of improving 98plr's platform performance, game selection, and user experience — without identifying individual players in this analysis.
• Marketing Communications: To send promotional emails, bonus offers, and platform updates to players who have opted in to marketing communications. See Section 13 for full details of marketing data use and opt-out options.

Legal Basis for Processing

98plr processes personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to perform the contract between 98plr and a player — including account management, payment processing, game delivery, and customer support — is carried out on the basis that it is necessary to fulfil that contract.
• Legal Obligation: Processing required to comply with applicable gaming licence conditions, AML regulations, and any lawful regulatory or law enforcement requirement is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and anonymised platform improvement analytics is carried out on the basis of 98plr's legitimate interests, balanced against the privacy interests of players.
• Consent: Processing for marketing communications is carried out on the basis of the player's freely given, informed consent, obtained at the point of registration or subsequently. Consent for marketing may be withdrawn at any time.

Cookies & Tracking Technologies

98plr uses cookies and similar tracking technologies on the 98plr.com platform. Cookies are small text files placed on your device when you visit the platform. They allow 98plr to recognise your device, maintain your session, and improve your experience on the platform.

The categories of cookies used by 98plr are as follows:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies that keep you logged in during your visit. They cannot be disabled without breaking core platform functionality.
• Performance Cookies: Collect anonymised data about how players navigate the platform — pages visited, time spent, and errors encountered — to help 98plr improve platform performance. No personally identifiable information is collected through performance cookies.
• Functional Cookies: Remember your preferences such as language settings, last game played, and deposit method, to personalise your experience on return visits.
• Analytics Cookies: Used by 98plr's internal analytics tools to understand aggregate player behaviour patterns for platform improvement purposes. Data collected through analytics cookies is anonymised before analysis.

98plr does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in to and use the 98plr platform.

Data Sharing & Disclosure

98plr does not sell, rent, or trade your personal data. Data sharing is limited to the following categories of recipient, and only to the extent necessary for the specified purpose:

• KYC and Identity Verification Providers: Approved third-party identity verification services used to process KYC documentation and confirm player age and identity. These providers act as data processors under contractual obligations to handle data exclusively for verification purposes.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, card processors, and USDT payment infrastructure providers — to the extent necessary to process deposit and withdrawal transactions. Financial data shared is limited to what each provider requires for transaction processing.
• AML and Fraud Screening Services: Approved transaction screening tools used to fulfil AML compliance obligations under 98plr's gaming licence. Data shared is limited to transaction data required for screening purposes.
• Regulatory and Law Enforcement Authorities: Where 98plr is required by law, gaming licence condition, court order, or valid regulatory instruction to disclose player data, 98plr will comply. 98plr will notify the relevant player of such disclosure where legally permissible to do so.
• Platform Infrastructure Providers: Hosting, cloud infrastructure, and cybersecurity service providers who process data on 98plr's behalf under data processing agreements that prohibit use of data for any purpose other than providing services to 98plr.

All third-party data processors engaged by 98plr are subject to contractual data protection obligations that are no less protective than the standards described in this Privacy Policy. 98plr remains responsible for the handling of your personal data by any third-party processor it engages.

International Data Transfers

As a platform operating under an international gaming licence and using globally distributed infrastructure, 98plr may transfer player personal data to servers or processors located outside of Pakistan. Such transfers may include data stored on cloud infrastructure in jurisdictions outside Pakistan.

Where personal data is transferred internationally, 98plr ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual data protection clauses with all international data processors, and the selection of infrastructure providers that operate under internationally recognised security and privacy standards.

If you wish to obtain further information about the specific safeguards in place for international transfers of your personal data, please contact 98plr support at [email protected].

Data Retention

98plr retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following minimum retention obligations arising from gaming licence and AML compliance requirements:

• Account and Identity Data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following permanent account closure, as required under standard AML record-keeping obligations applicable to licensed gaming operators.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AML compliance requirements.
• KYC Documentation: Retained for the duration of the account relationship plus five (5) years post-closure, consistent with identity verification record-keeping standards.
• Customer Support Records: Retained for three (3) years from the date of the support interaction, to support dispute resolution and complaint handling obligations.
• Technical and Usage Logs: Retained for twelve (12) months in identifiable form, after which they are anonymised or deleted.
• Marketing Consent Records: Retained for the duration of the marketing relationship plus two (2) years following withdrawal of consent, to demonstrate the basis on which communications were sent.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using methods appropriate to the data type and storage format. Anonymised, aggregated data — from which no individual can be identified — may be retained indefinitely for platform improvement purposes.

Your Data Rights

Every 98plr player holds the following rights in respect of their personal data held by 98plr. These rights may be exercised at any time by submitting a written request to [email protected]:

• Right of Access: You have the right to request a copy of all personal data that 98plr holds about you, together with information about how it is used, where it is stored, and with whom it has been shared. 98plr will respond to access requests within thirty (30) calendar days of receipt.
• Right to Rectification: You have the right to request correction of any personal data held by 98plr that is inaccurate or incomplete. Corrections to core account data such as name or date of birth may require submission of supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer required for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to 98plr's legal obligation to retain certain data under AML and gaming licence requirements, as described in Section 8.
• Right to Restriction of Processing: You have the right to request that 98plr restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while a complaint regarding processing is under review.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to 98plr in a structured, commonly used, machine-readable format, where processing is based on consent or contract and is carried out by automated means.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests — including profiling for responsible gaming monitoring purposes — unless 98plr can demonstrate compelling legitimate grounds that override your interests. You have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent — specifically, marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

Children & Underage Players

The 98plr platform is strictly for players aged 21 years and above. 98plr does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the 98plr KYC process, and accounts suspected of belonging to individuals under 21 will be suspended pending verification.

Where 98plr becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the account will be permanently closed, and any deposits made will be handled in accordance with applicable regulatory requirements. If you believe that an individual under 21 has registered an account on the 98plr platform, please notify us immediately at [email protected].

Data Security

98plr implements a layered security architecture to protect player personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• Encryption in Transit: All data transmitted between the player's device and the 98plr platform is encrypted using TLS (Transport Layer Security) protocols. Unencrypted HTTP connections are not accepted.
• Encryption at Rest: Sensitive personal data — including identity documents, financial data, and authentication credentials — is encrypted at rest within 98plr's database infrastructure using AES-256 or equivalent encryption standards.
• Access Controls: Access to player personal data within 98plr's internal systems is restricted to authorised personnel whose roles require access. Access is logged and reviewed on a regular basis. Former staff access is revoked immediately upon departure.
• Infrastructure Security: 98plr's platform infrastructure is hosted with providers that maintain internationally recognised security certifications and undergo regular independent security assessments.
• Incident Response: 98plr maintains a data breach response procedure. In the event of a security incident involving player personal data, 98plr will assess the incident promptly, take steps to contain it, and notify affected players where required by applicable obligations.

While 98plr takes all reasonable technical and organisational measures to protect your personal data, no digital platform can guarantee absolute security. Players are also responsible for maintaining the security of their own 98plr account credentials. If you suspect your account has been accessed without authorisation, contact 98plr support immediately at [email protected].

Third-Party Services

The 98plr platform integrates with a number of third-party services necessary for its operation. These include game content providers who supply casino games, crash products, and live dealer titles; payment infrastructure providers supporting JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT transactions; and identity verification services used in the KYC process.

Where 98plr shares personal data with third-party service providers, it does so under the terms described in Section 6. All third-party providers are selected with regard to their data protection practices, and all are subject to contractual data processing obligations.

98plr is not responsible for the privacy practices of third-party platforms or services that are not operated by 98plr. This Privacy Policy applies exclusively to data processed through the 98plr platform at 98plr.com.

Marketing Communications

With your consent, 98plr may contact you by email to inform you about promotional offers, bonus opportunities, new game releases, PSL and cricket betting specials, and other platform updates that may be of interest to you as a Pakistani player on the 98plr platform.

You may opt in to marketing communications at the point of account registration, or subsequently through your account settings. Consent to marketing is entirely voluntary and has no bearing on your ability to use the 98plr platform or access any of its services.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email sent by 98plr; or
• Updating your communication preferences within your 98plr account settings; or
• Contacting 98plr support at [email protected] and requesting removal from marketing lists.

Opt-out requests will be processed within ten (10) business days. After opting out, you will continue to receive transactional and account-related communications (such as withdrawal confirmations, KYC requests, and security alerts) as these are necessary for account management and are not marketing communications.

Changes to This Privacy Policy

98plr reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or gaming licence requirements. The effective date at the top of this page will be updated whenever a material change is made.

Where a change to this Privacy Policy materially affects the way in which 98plr processes your personal data, 98plr will notify registered players by email to the address held on their account no fewer than fourteen (14) calendar days before the change takes effect. Continued use of the 98plr platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

Players are encouraged to review this Privacy Policy periodically. The most current version will always be accessible at 98plr.com/privacy-policy.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 9, or wish to raise a concern about how 98plr has handled your personal data, please contact the 98plr privacy team through the following channel:

• Email: [email protected]
• Subject Line: Privacy Policy Enquiry / Data Rights Request
• Response Target: Within five (5) business days for general enquiries; within thirty (30) calendar days for formal data rights requests
• Support Hours: 24/7, Pakistan Standard Time (PKT)

98plr takes all privacy complaints seriously. Where a complaint is received, 98plr will acknowledge receipt within five (5) business days, investigate the matter thoroughly, and provide a substantive written response. Where 98plr determines that a complaint is well-founded, it will take prompt corrective action and notify the complainant of the steps taken.