p98 Privacy Policy – Your Data, Your Rights

1Introduction

p98.asia operates as an online casino and sports betting platform. In the course of providing these services to players across Pakistan and internationally, p98 collects and processes personal data as described in this Policy. p98 is the data controller responsible for the personal data of registered players.

This Policy has been written to be as clear and accessible as possible. We want Pakistani players in Karachi, Lahore, Islamabad, Rawalpindi, and Faisalabad – as well as users elsewhere – to genuinely understand how their information is handled, not simply to satisfy a legal formality.

This Policy applies to personal data collected through: (a) the p98 website at p98.asia; (b) the p98 Login portal and account registration process; (c) the p98 mobile-optimised platform; (d) communications between you and p98 support; and (e) payment transactions processed through JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other supported payment methods.

2Personal Data We Collect

p98 collects two categories of personal data: data you provide directly, and data collected automatically through your use of the platform.

Data You Provide Directly:

• Registration Data: Full name, date of birth, email address, and chosen username collected when you create a p98 account
• Identity Verification (KYC) Data: Copy of your CNIC or other government-issued identity document, proof of address, and selfie photographs collected during KYC verification
• Payment Data: JazzCash account number, Easypaisa number, bank account details (HBL, UBL, Meezan Bank, Bank Alfalah), and transaction reference numbers required to process deposits and withdrawals in PKR
• Communication Data: Content of messages, emails, and live chat transcripts exchanged between you and the p98 support team
• Responsible Gaming Data: Deposit limits, session time preferences, cool-off period requests, and self-exclusion applications submitted through your account settings

Data Collected Automatically:

• Device & Technical Data: IP address, device type, operating system, browser type and version, and screen resolution
• Usage Data: Pages visited within p98, games played, betting history, session duration, login timestamps, and navigation patterns
• Cookie Data: Session identifiers, authentication tokens, and analytics data as described in Section 8

3How p98 Uses Your Personal Data

p98 uses your personal data only for the specific purposes listed below. We do not use your data for purposes incompatible with those for which it was collected without your additional consent.

• Account Management: To create, maintain, and operate your p98 account, including authentication via the p98 Login portal and management of your PKR wallet
• Service Delivery: To provide access to cricket betting markets (including PSL, UFC, and international sports), casino games, live dealer tables, slots, and all other p98 platform features
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, and bank transfers, and to maintain financial transaction records as required by applicable regulations
• Identity Verification and Fraud Prevention: To verify player identity during KYC, to detect and prevent fraud, money laundering, and abuse of the p98 platform
• Customer Support: To respond to your enquiries, resolve account disputes, and provide assistance in English to Pakistani players and all other users
• Responsible Gaming Compliance: To administer deposit limits, session timers, cool-off periods, and self-exclusion requests that you have activated on your account
• Legal and Regulatory Compliance: To meet obligations under applicable gaming regulations, anti-money laundering laws, and data protection requirements
• Platform Security: To monitor for suspicious login activity, detect automated bot access, and protect p98 player accounts from unauthorised access
• Service Improvement: To analyse aggregated and anonymised usage data to improve p98 platform performance, game offerings, and user experience

4Legal Basis for Processing

Where data protection law requires p98 to identify a legal basis for processing your personal data, we rely on the following:

• Contractual Necessity: Processing necessary to perform the contract between you and p98, including account operation, game access, and payment processing
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, anti-money laundering obligations, and responsible gaming mandates
• Legitimate Interests: Processing carried out to pursue p98's legitimate interests in fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights
• Consent: Where we rely on your consent (such as for non-essential analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal

5Data Sharing with Third Parties

p98 does not sell your personal data to third parties. p98 does not share your data with advertisers or marketing data brokers. Your data may be shared with the following categories of third parties only to the extent strictly necessary:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers receive payment data required to process your PKR transactions
• Game Software Providers: Certified game providers receive your session data to the extent necessary to operate their games within the p98 platform. Game providers do not receive your identity or financial data
• Identity Verification Services: Third-party KYC verification providers may process your identity documents to assist p98 in fulfilling its verification obligations
• Regulatory Authorities: p98 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by applicable law or a valid legal order
• IT and Hosting Providers: Cloud infrastructure and hosting providers that store p98 platform data are contractually bound to process that data only under p98's documented instructions and are required to maintain appropriate security standards

All third parties with whom p98 shares personal data are required to maintain adequate data protection measures and to use your data only for the specific purpose for which it was shared.

6International Data Transfers

p98 operates internationally and your personal data may be stored on or transferred to servers located outside Pakistan. Where personal data is transferred internationally, p98 ensures that appropriate safeguards are in place to protect that data, including contractual protections with data processors that are equivalent in effect to applicable data protection standards.

By using p98 and submitting your personal data through the p98 registration process or the p98 Login portal, you acknowledge and consent to the international transfer of your data as described in this section.

7Data Retention

p98 retains your personal data for as long as your account is active and for such additional period as is necessary to comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods applicable to different categories of data include:

• Account and Identity Data: Retained for the duration of your p98 account and for a minimum of 5 years following account closure, as required by anti-money laundering and gaming regulatory obligations
• Transaction Records: Financial transaction records are retained for a minimum of 7 years from the date of each transaction in accordance with applicable financial recordkeeping requirements
• Communication Records: Support communications are retained for a minimum of 3 years from the date of the communication
• Technical and Usage Data: Session logs and technical access data are retained for a maximum of 12 months unless required for ongoing investigation of a security incident or regulatory matter

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

8Cookies and Tracking Technologies

p98.asia uses cookies and similar tracking technologies. Cookies are small data files stored on your device that help the platform function correctly and that allow p98 to understand how the platform is being used.

Strictly Necessary Cookies: These cookies are required for the p98 platform to function and cannot be disabled. They include session authentication tokens that keep you logged in during your p98 session, security cookies that protect against cross-site request forgery, and cookies that remember your language and region preferences. These cookies do not store personal data beyond what is technically required for platform function.

Analytics Cookies: p98 uses privacy-focused analytics to understand aggregate usage patterns on the platform. Analytics data is processed in aggregate and anonymised form. These cookies help p98 identify which games are most popular, where players encounter difficulties, and how platform performance can be improved for Pakistani players and others.

No Advertising Cookies: p98 does not deploy third-party advertising tracking cookies. p98 does not participate in cross-site behavioural advertising networks.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent certain p98 platform features, including the p98 Login portal, from functioning correctly.

9Security Measures

p98 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and p98 servers
• Cryptographic hashing of all stored account passwords using current best-practice hashing algorithms
• Two-factor authentication available to all registered p98 accounts
• Continuous monitoring of platform access logs for anomalous or suspicious activity patterns
• Access controls ensuring that p98 staff can access player data only on a strict need-to-know basis
• Regular security assessments of the p98 platform infrastructure

While p98 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that poses a risk to your rights and freedoms, p98 will notify you and the relevant regulatory authority in accordance with applicable notification obligations.

10Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights in respect of your personal data held by p98:

• Right of Access: You may request a copy of the personal data that p98 holds about you
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to p98's legal retention obligations
• Right to Restriction: You may request that processing of your personal data be restricted in certain circumstances
• Right to Data Portability: Where processing is based on your consent or on contract, you may request your data in a structured, commonly used, machine-readable format
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact the p98 data team at [email protected] with the subject line "Data Subject Request". p98 will respond within 30 days of receiving a valid request, or within any shorter period required by applicable law.

11Children's Privacy

18+ p98 services are strictly for adults aged 18 and above. p98 does not knowingly collect personal data from individuals under the age of 18. If p98 becomes aware that personal data has been collected from an individual under 18, that data will be deleted and the associated account will be permanently closed.

If you believe that a person under the age of 18 has created a p98 account or submitted personal data to p98, please contact the support team immediately at [email protected] so that the matter can be investigated and resolved promptly.

12Changes to This Privacy Policy

p98 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or platform services. Where changes are material, p98 will notify registered players via email to their registered address and will post a prominent notice on the platform in advance of the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of p98 following the effective date of a revised Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, you should cease using p98 and contact the support team to request account closure.

13Contact Us – Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern about your p98 account, please contact the p98 data and privacy team:

Email: [email protected]
Subject Line: Privacy Enquiry or Data Subject Request
Response Time: Within 2 business days for general enquiries; within 30 days for formal data subject requests
Support Language: English

p98 is committed to resolving all privacy concerns fairly and promptly. If you are not satisfied with how p98 has handled your privacy enquiry, you may have the right to lodge a complaint with a relevant data protection authority in your jurisdiction.