Privacy Policy – How 98bet Protects Your Data

1. About This Policy

98bet ("the Platform", "we", "us") is committed to protecting the privacy of every person who uses our services. This Privacy Policy describes the types of personal information we collect, why we collect it, how it is used, with whom it may be shared, and how long we keep it.

This policy should be read alongside the Terms and Conditions and the Responsible Gaming Policy, which together form the full framework governing your use of 98bet.

When we refer to "personal data" or "personal information" in this policy, we mean any information that can identify you directly or indirectly — such as your name, email address, phone number, CNIC number, financial details or device identifiers.

2. Data We Collect

We collect personal data in several ways: directly from you when you register or use the platform, automatically through your device and browsing activity, and occasionally from third parties such as payment processors.

Category	Examples	When Collected
Identity data	Full name, date of birth, CNIC / passport number	Registration & verification
Contact data	Email address, phone number	Registration
Financial data	JazzCash / Easypaisa account reference, bank account details, transaction history in PKR	Deposits & withdrawals
Account data	Username, login history, game activity, bet history, bonus usage	Ongoing platform use
Device & technical data	IP address, device type, browser, operating system, session duration	Automatically on site/app visit
Communications data	Support chat transcripts, emails sent to our team	When you contact support

We do not collect sensitive personal data such as biometric data, religious beliefs, political views or health information. If identity verification requires a document scan, the document image is used only for verification and is not retained beyond what is necessary for that purpose.

3. How We Use Your Data

The data we collect is used for the following purposes:

• Account management: Creating and maintaining your 98bet account, verifying your identity, and managing login access.
• Transaction processing: Processing PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and cards; maintaining an accurate transaction record.
• Customer support: Responding to queries, resolving disputes and assisting with account issues.
• Platform improvement: Analysing how players use the platform — which games are popular, how the app performs, where players encounter friction — so we can improve the experience over time.
• Responsible gaming: Monitoring account activity for signs of problem gambling and supporting players who use our self-exclusion or deposit limit tools.
• Fraud prevention & security: Detecting unusual account activity, verifying payment authenticity and complying with anti-money-laundering obligations .
• Promotions & bonuses: Verifying your eligibility for welcome bonuses, PSL cricket promotions and other offers; tracking wagering requirements against your account.
• Communications: Sending transactional emails such as deposit confirmations, withdrawal notifications and security alerts. We do not send unsolicited marketing emails without your consent.

4. Legal Basis for Processing

Every time 98bet processes your personal data, we do so on one of the following legal grounds:

• Contract performance: Processing your data is necessary to deliver the services you signed up for — running your account, processing PKR transactions and providing access to games.
• Legal obligation: Certain data must be collected and retained to comply with financial regulations, anti-money-laundering requirements and identity verification standards.
• Legitimate interests: We process some data — such as device logs and fraud signals — to protect the security of the platform and the interests of all players, provided this does not override your fundamental privacy rights.
• Consent: Where we send optional communications or use non-essential cookies, we rely on your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Data

98bet does not sell your personal information to any third party. We may share your data in a limited and controlled way with the following categories of recipient:

• Payment processors: JazzCash, Easypaisa, Raast infrastructure providers, Visa/Mastercard acquiring banks and other payment partners require transaction data to process your PKR deposits and withdrawals.
• Identity verification services: Third-party KYC (Know Your Customer) providers may receive your identity document data solely for the purpose of verifying your account.
• Technology and hosting partners: Server infrastructure, cloud storage and platform software providers may process data on our behalf under strict confidentiality agreements.
• Regulatory and legal authorities: We may be required by law to disclose account or transaction data to relevant authorities in response to a lawful request. We will notify you where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or restructuring of the 98bet platform, your data may be transferred to the new entity, which will be bound by the same privacy obligations.

All third parties with whom we share data are required to handle it in accordance with applicable privacy standards and may only use it for the specific purpose for which it was shared.

6. PKR Payments & Financial Data

Because 98bet operates entirely in Pakistani Rupees, all financial data collected is denominated in PKR. When you make a deposit or request a withdrawal, the following information is recorded:

• The payment method used (e.g. JazzCash mobile wallet, Easypaisa, Raast transfer, bank IBFT or card)
• The amount transacted in PKR
• The date, time and transaction reference number
• The status of the transaction (pending, completed, failed or reversed)

Full card numbers and mobile wallet PINs are never stored on 98bet's servers. Card payments are tokenised through our payment gateway and mobile wallet transactions are processed through the respective provider's secure API. 98bet retains only the reference data necessary to reconcile transactions and handle disputes.

7. Cookies & Tracking

98bet uses cookies and similar tracking technologies on the website and within the app. Cookies are small text files stored on your device that help the platform function correctly and give us insight into how it is used.

We use the following types of cookies:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during a visit and security cookies that protect against cross-site request forgery. These cannot be disabled without affecting platform functionality.
• Preference cookies: Remember your settings such as language preference, odds format and notification choices so you do not have to re-enter them on each visit.
• Analytics cookies: Collect anonymised data about how players navigate the site — which pages are visited most, how long sessions last, where players drop off. This data is aggregated and does not identify you personally.
• Security cookies: Help us detect suspicious login activity, unusual betting patterns and potential fraud by tracking session behaviour across page loads.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling cookies may affect how certain features of the platform work, including remembered preferences and seamless login.

8. Data Retention

We retain your personal data for as long as your 98bet account is active and for a reasonable period thereafter to fulfil the purposes described in this policy. Specific retention periods are as follows:

• Account data: Retained for the duration of your account plus up to 3 years after closure, unless a longer period is required for legal or compliance reasons.
• Transaction and financial data: Retained for a minimum of 5 years from the date of the last transaction, consistent with standard financial record requirements.
• Identity verification documents: Retained for the duration of your account plus a reasonable period after closure. Document scans submitted during KYC are not kept longer than necessary for verification.
• Support communications: Chat transcripts and email exchanges are retained for up to 2 years to allow us to reference previous interactions when resolving ongoing issues.
• Anonymised analytics data: May be retained indefinitely in aggregated, anonymised form that cannot identify any individual player.

When your data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to your identity.

9. Security Measures

98bet takes the security of your personal data seriously and has put in place a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration or disclosure. These include:

• TLS/SSL encryption for all data transmitted between your device and the 98bet platform.
• Encryption of sensitive data fields (such as identity document references and financial identifiers) at rest in our databases.
• Role-based access controls that restrict which staff members can view which categories of player data.
• Regular security assessments and vulnerability testing of the platform and its underlying infrastructure.
• Two-factor authentication available for player accounts and enforced for internal staff accessing production systems.
• Automated monitoring for unusual login activity, including logins from new devices or unfamiliar locations.

Despite these measures, no online platform can guarantee absolute security. If you suspect that your 98bet account has been compromised, contact support immediately so we can investigate and take protective action.

10. Your Rights

As a registered player on 98bet, you have the following rights regarding your personal data. You can exercise any of these rights by contacting the support team:

We will respond to all data rights requests within 30 days. Some requests — particularly erasure requests — may be subject to legal retention obligations that limit our ability to delete certain records immediately.

11. Children & Minors

98bet is strictly an adults-only platform. No person under the age of 18 is permitted to register an account, make a deposit or participate in any betting or gaming activity on the platform.

We do not knowingly collect personal data from anyone under 18. If we discover that an account has been registered by a minor, the account will be closed immediately, all funds will be returned to the payment source and any associated data will be deleted in accordance with our retention policy.

If you believe a minor has accessed the platform using an account registered in your name, please contact support immediately. We take underage access seriously and have age verification checks in place during the registration process to reduce this risk.

12. Changes to This Policy

98bet may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law or improvements to how we protect your data. When changes are made, the revised policy will be published on this page with an updated "Last updated" date at the top.

Where changes are significant — for example, a change in how we share data with third parties — we will make reasonable efforts to notify active players via email before the changes take effect. Your continued use of the platform after the updated policy is published constitutes acceptance of the revised terms.

We recommend reviewing this page periodically, especially if you have been away from the platform for some time.

13. Contact & Requests

If you have any questions about this Privacy Policy, want to exercise one of your data rights, or have a concern about how 98bet has handled your personal information, please get in touch with our support team. We are available around the clock, seven days a week.

You can reach the 98bet privacy and data team at: [email protected]

When submitting a data rights request, please include your registered username and a brief description of what you are requesting. This helps us locate your account and respond as quickly as possible. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 days.