pak98 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how pak98 ("we", "us", or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", or "User") who access or use the pak98 platform available at pak98.ws (the "Platform"), including all associated gaming services, payment facilities, customer support channels, and promotional communications.

This Policy applies to all personal data processed in connection with your use of pak98, regardless of whether you are a registered account holder, a visitor browsing the Platform without an account, or a prospective user interacting with pak98 through a third-party channel. By accessing or using the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference. Where this Policy uses the same defined terms as our Terms & Conditions, those definitions apply here equally.

2. Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal data collected through the pak98 Platform is the entity that holds the international gaming licence under which pak98.ws operates. As a Pakistani user, you may direct all data-related enquiries, access requests, and formal complaints to the pak98 data team via the contact details set out in Section 14 of this Policy.

pak98 takes its obligations as data controller seriously. We have implemented internal policies, technical safeguards, and staff training programmes designed to ensure that your personal data is handled with the same level of care that Pakistani banking institutions — including HBL, UBL, and Meezan Bank — apply to the financial data of their customers.

3. Personal Data We Collect

The categories of personal data that pak98 may collect about you are set out in the table below. Not all categories will be collected in every case — the data we collect depends on the nature of your interaction with the Platform.

pak98 does not knowingly collect sensitive personal data such as biometric data, health information, religious affiliation, or political opinions, except where explicitly required by our licensing authority for anti-money laundering or responsible gaming compliance purposes.

4. How We Collect Your Data

4.1 Data You Provide Directly

The majority of personal data pak98 holds about you is data you have provided to us directly. This includes information submitted when creating your pak98 account, completing identity verification (KYC), making a deposit or withdrawal, contacting our support team, or opting in to marketing communications. Providing accurate and complete information is a condition of your use of the Platform, as set out in our Terms & Conditions.

4.2 Data Collected Automatically

When you access the pak98 Platform — whether through a web browser or a mobile device — certain technical data is collected automatically by our systems. This includes your IP address, the device and browser you are using, the pages you visit within the Platform, the duration of your sessions, and your pak98 Login timestamp history. This data is used primarily for security monitoring, fraud prevention, and platform performance optimisation.

4.3 Data from Third Parties

In some circumstances pak98 may receive personal data about you from third parties, including payment processors (such as JazzCash or EasyPaisa operators) confirming the completion of a transaction, identity verification service providers used for CNIC and age verification, and our gaming licence authority where compliance-related disclosures are required. In each case, pak98 ensures that any third-party data sharing arrangement complies with applicable data protection standards.

5. Legal Basis for Processing

pak98 processes your personal data only where a lawful basis exists for doing so. The primary legal bases on which pak98 relies are as follows:

• Contractual necessity: Processing required to fulfil our obligations to you under our Terms & Conditions — including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and our gaming licence conditions — including anti-money laundering (AML) checks, age verification, and responsible gaming monitoring.
• Legitimate interests: Processing for purposes that are in pak98's legitimate business interests and do not override your privacy rights — including fraud detection, platform security, and service improvement analytics.
• Consent: Processing for marketing communications, where you have given explicit opt-in consent. You may withdraw this consent at any time by updating your communication preferences in your pak98 account settings or by contacting support.

6. How We Use Your Personal Data

pak98 uses the personal data we hold about you for the following purposes:

• To create and manage your pak98 account, including processing your pak98 Login and authenticating your identity on each session;
• To process deposits and withdrawals in PKR through your chosen payment method, including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT;
• To conduct identity and age verification in compliance with our gaming licence requirements, confirming that you are 21 years of age or older;
• To monitor your gaming activity for responsible gaming purposes, including detecting indicators of problem gambling and administering self-exclusion or deposit limit requests;
• To investigate and prevent fraud, money laundering, account takeover attempts, and other prohibited conduct as defined in our Terms & Conditions;
• To communicate with you about your account, including transaction confirmations, security alerts, and responses to support enquiries;
• To send you promotional communications about pak98 bonuses and offers, where you have opted in to receive such communications;
• To analyse aggregated, anonymised usage data for the purpose of improving the Platform's performance, game selection, and user experience for Pakistani players;
• To comply with the record-keeping, reporting, and audit obligations imposed by our international gaming licence.

7. Sharing Your Personal Data

7.1 Payment Processors

To process deposits and withdrawals on your pak98 account, we must share relevant financial data with the payment service providers that operate the channels you use — including JazzCash, EasyPaisa, and the banking intermediaries involved in HBL, UBL, and Meezan Bank transfers. We share only the minimum data required to complete the transaction, and all payment processors are contractually required to maintain appropriate data security standards.

7.2 Identity Verification Providers

pak98 uses third-party identity verification services to validate CNIC details and confirm that users are 21 years of age or older. These providers receive only the specific identity data required for verification and are prohibited from using that data for any other purpose.

7.3 Regulatory and Licensing Authorities

As a platform operating under an international gaming licence, pak98 may be required to disclose certain account and transaction data to our licensing authority, or to law enforcement or regulatory bodies, where such disclosure is compelled by applicable law or is necessary to investigate suspected criminal activity. pak98 will notify you of any such disclosure to the extent that applicable law permits us to do so.

7.4 No Sale of Data

pak98 does not sell, rent, lease, or otherwise transfer your personal data to third-party marketers, data brokers, or advertising networks. Your mobile number, CNIC details, and gaming activity data are never made commercially available to any external party for marketing or profiling purposes.

8. Cookies and Tracking Technologies

pak98 uses cookies and similar tracking technologies on the Platform to support core functionality, security, and performance monitoring. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the Platform to function, including session management and pak98 Login authentication. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and communication opt-in status, to improve your experience across sessions.
• Analytics cookies: Used to collect anonymised data about how users navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is used solely for internal platform improvement purposes.
• Security cookies: Used to detect and prevent fraudulent activity, including bot access, account takeover attempts, and unusual login patterns.

You may control non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of your pak98 account. pak98 does not use third-party advertising cookies or cross-site tracking technologies.

9. Data Security

pak98 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pak98 servers;
• Encryption of sensitive data fields — including CNIC numbers and financial account references — at rest in pak98's databases;
• Role-based access controls limiting staff access to personal data to those with a specific operational need;
• Multi-factor authentication requirements for administrative access to pak98 systems;
• Regular security audits and penetration testing conducted by independent security professionals;
• Incident response procedures designed to detect, contain, and notify affected users of any data breach within the timeframe required by our licensing authority.

While pak98 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your pak98 Login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

10. Data Retention

pak98 retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods imposed by our gaming licence and applicable anti-money laundering regulations:

• Identity and verification data (CNIC, age verification records): Minimum 5 years from the date of account closure;
• Financial transaction records (deposit, withdrawal, and balance history in PKR): Minimum 5 years from the date of each transaction;
• Gaming activity records: Minimum 3 years from the date of account closure, or longer if required by our licensing authority;
• Customer support communications: 3 years from the date of the interaction, or until the resolution of any related dispute;
• Marketing preference records: Until you withdraw consent or close your account, whichever occurs first.

Upon expiry of the applicable retention period, pak98 will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification.

11. Your Rights

Subject to the conditions and limitations imposed by applicable law and our gaming licence obligations, you hold the following rights in respect of your personal data held by pak98:

• Right of access: You may request a copy of the personal data pak98 holds about you, together with information about how it is being used.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. For account-level data such as your name or contact details, you may update certain fields directly within your pak98 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations described in Section 10.
• Right to restriction of processing: You may request that pak98 restricts the processing of your personal data in specific circumstances, such as while a data accuracy dispute is being investigated.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that your data be provided to you in a structured, machine-readable format.
• Right to withdraw consent: Where pak98 processes your data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of pak98's legitimate interests, including profiling for responsible gaming monitoring purposes, subject to our overriding legal and licensing obligations.

To exercise any of the above rights, please submit a written request to the pak98 data team at [email protected] with your registered pak98 username and a description of your request. We will acknowledge your request within 5 business days and will endeavour to respond in full within 30 days.

12. Children and Minors

The pak98 Platform is strictly intended for use by individuals who are 21 years of age or older. pak98 does not knowingly collect personal data from individuals under the age of 21. If pak98 discovers or is notified that an account has been registered by an individual under 21, that account will be immediately suspended, all associated funds will be withheld pending investigation, and any personal data collected will be deleted or handled in accordance with our legal obligations.

If you are a parent or guardian and believe that a minor has registered a pak98 account or provided personal data to pak98 without your consent, please contact us immediately at [email protected] so that we can take appropriate action without delay.

13. Changes to This Policy

pak98 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or share data with a new category of third party — we will notify registered users by email to the address associated with their pak98 account prior to the change taking effect. The updated Policy will be published at pak98.ws/privacy-policy with a revised effective date at the top of the page.

Your continued use of the Platform following the publication of an amended Privacy Policy constitutes your acknowledgement of the changes. If you do not accept a material amendment to this Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

14. Contact Us

For all privacy-related enquiries, data access requests, erasure requests, or complaints regarding the handling of your personal data by pak98, please contact our data team using the details below:

• Email: [email protected]
• Subject line: Please include "Privacy Request" and your registered pak98 username to ensure prompt routing to our data team
• Response time: Acknowledgement within 5 business days; full response within 30 days
• Availability: Our support team is available 24 hours a day, 7 days a week, including Pakistani public holidays

If you are not satisfied with pak98's response to a privacy complaint, you may escalate the matter to the regulatory authority under whose licence pak98 operates. Details of the applicable licensing authority are available on request from the pak98 support team.