Privacy Policy – 98kr Pakistan Gaming Platform

98kr ("we," "us," "our," "the Platform") operates the gaming platform available at 98kr.pro, offering online casino games, slots, live casino, bingo, sports betting and associated services to registered players in Pakistan. This Privacy Policy explains how we collect, use, store, protect and, where applicable, share the personal data of players who register and use the platform.

We take the privacy of our players seriously. The data we collect is used to operate the platform, process PKR deposits and withdrawals through supported methods including JazzCash, Easypaisa, Raast, bank transfer and cards, verify account identities, prevent fraud and provide player support. We do not collect data for purposes beyond those described in this policy without your separate consent.

This policy applies to all data collected through the 98kr website and mobile browser interface. It should be read alongside our Terms and Conditions and Responsible Gaming page, both of which contain additional information relevant to your account.

We collect personal data in the following categories depending on how you interact with the 98kr platform:

We do not collect sensitive categories of personal data such as health information, political views or biometric identifiers beyond what is contained in standard identity documents provided during KYC verification. We do not collect data from your social media profiles or third-party platforms unless you explicitly link them to your 98kr account.

The personal data we collect is used for the following purposes, all of which are necessary either to fulfil your account agreement with us or to operate the platform responsibly:

• Account management: Creating and maintaining your 98kr account, processing login authentication and keeping your account details current.
• Payment processing: Executing PKR deposit and withdrawal transactions through JazzCash, Easypaisa, Raast, bank transfer, cards and other supported mobile wallets.
• Identity verification: Completing KYC checks required before processing withdrawals or in response to activity requiring account-level review.
• Fraud prevention: Monitoring account activity to detect and prevent unauthorised access, payment fraud, multi-accounting and other prohibited conduct described in our Terms and Conditions.
• Responsible gaming: Identifying account activity patterns that may indicate problematic gambling behaviour and making self-exclusion and limit tools available to all players.
• Platform improvement: Using aggregated, anonymised usage data to understand how players interact with the platform and to improve performance and game availability.
• Customer support: Responding to your queries, resolving disputes and maintaining records of support interactions for quality and accountability purposes.
• Legal compliance: Retaining transaction and identity records for the periods required under applicable data retention obligations.

We do not use your personal data for automated decision-making that produces significant legal effects on your account without human review. Where automated systems flag an account for review — for example due to suspected bonus abuse or unusual transaction patterns — a member of our team will assess the case before any account action is taken.

All financial transactions on 98kr are carried out in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal through any of our supported payment methods — JazzCash, Easypaisa, Raast, bank transfer, debit or credit cards, or other mobile wallets — the payment is processed through the relevant third-party payment provider.

What we store: We retain a record of the payment method type used (e.g. JazzCash, bank transfer), the mobile number or last four digits of the card associated with the transaction, the PKR amount, the date and the transaction status. This is necessary to manage your account balance, process withdrawal requests and handle any payment disputes.

What we do not store: Full card numbers, CVV codes and complete bank account numbers are never stored on 98kr servers. This data is handled directly by your chosen payment provider and is subject to their own security standards and privacy policies.

Withdrawals can only be processed to payment accounts registered in your own name. This requirement exists to protect against unauthorised fund transfers and is also part of our standard anti-fraud and identity verification procedures.

98kr does not sell, rent or trade your personal data to third parties for advertising or commercial purposes. Your data may be shared only in the following limited circumstances:

• Payment providers: We share the minimum necessary information with JazzCash, Easypaisa, Raast, banks and card networks to process your PKR transactions. These providers operate under their own privacy and security standards.
• Identity verification services: Where third-party KYC verification tools are used to assist with document checks, only the data necessary for that specific verification is shared. Verification providers are bound by confidentiality and data protection obligations.
• Technical service providers: We work with hosting, platform infrastructure and analytics providers who process data on our behalf under data processing agreements that restrict how they can use your information.
• Fraud prevention: In cases of suspected fraud, money laundering or serious platform abuse, relevant account and transaction data may be shared with fraud prevention or law enforcement bodies where required.
• Legal obligations: We may disclose personal data where required to do so by a valid legal process, court order or other binding legal obligation.

In all cases where data is shared with third parties, we share only what is necessary for the specific purpose. We do not permit third-party service providers to use your data for their own commercial purposes beyond the service they provide to us.

We retain your personal data for as long as your account remains active and for a defined period following account closure. The retention periods below reflect standard operational and legal requirements:

• Active account data: Retained for the full duration of your account being open. This includes registration details, transaction history and account activity logs.
• Identity verification documents: Retained for a minimum of five years following account closure to satisfy anti-money laundering and record-keeping obligations.
• Transaction records: PKR deposit, withdrawal and wagering records are retained for a minimum of five years following the date of each transaction.
• Support communications: Customer support records are retained for up to three years following the resolution of the relevant issue, or for the duration of any ongoing dispute.
• Device and access logs: Session and IP access logs are retained for up to 12 months for fraud detection and security purposes, then deleted.

Following the expiry of applicable retention periods, data is securely deleted or anonymised. Where anonymisation is used, the resulting data contains no information that could identify you individually and may be retained indefinitely for aggregated platform analytics.

We apply technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. The measures in place include:

• TLS encryption for all data transmitted between your browser and the 98kr platform.
• Encryption of sensitive stored data including identity document files and payment identifiers.
• Role-based access controls so that only personnel with a legitimate operational need can access specific categories of personal data.
• Regular internal security reviews covering platform infrastructure, access controls and data handling procedures.
• Automatic session expiry to reduce the risk of unauthorised access if you leave your device unattended while logged in.

While we take data security seriously and maintain robust controls, no online platform can guarantee absolute security against all possible threats. You also have a responsibility to protect your own account by keeping your login credentials private, using a strong and unique password and logging out of shared devices after each session.

If you suspect that your account has been accessed without your authorisation, contact our support team immediately so that we can secure your account and investigate the incident.

The 98kr platform uses cookies — small data files stored on your device — to support essential platform functions and to understand how players use the site. We use cookies only for the purposes described below:

• Session cookies: Required to keep you logged in during your visit and to maintain your account session. These are deleted automatically when you close your browser.
• Preference cookies: Used to remember basic settings such as language and display preferences between sessions.
• Analytics cookies: Used to collect anonymised data about page visits, session duration and navigation paths. This data is used in aggregate form to improve platform performance and does not identify individual players.

We do not use advertising tracking cookies, cross-site tracking cookies or any cookies that build profiles of your activity across other websites for commercial advertising purposes.

Most browsers allow you to control cookie settings, including blocking or deleting cookies. Please note that blocking session cookies may prevent the 98kr platform from functioning correctly, including the ability to log in and access your account balance.

As a registered 98kr player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team using the details in Section 12:

• Access: You can request a copy of the personal data we hold about your account, including registration details, transaction history and any identity documents on file.
• Correction: If any personal data we hold about you is inaccurate or out of date, you can request that it be corrected. Some corrections may require supporting documentation.
• Deletion: You can request deletion of your personal data. Please note that we are required to retain certain categories of data — particularly transaction records and identity verification documents — for minimum periods as described in Section 6. Deletion requests will be fulfilled for data not subject to these retention obligations.
• Objection to marketing: If you have opted in to receiving promotional communications from 98kr, you can withdraw that consent at any time by contacting our support team. Withdrawal of marketing consent does not affect your ability to use your account.
• Account closure: You can request permanent account closure at any time. Following closure, data retained during the applicable retention periods will be held securely and then deleted as described in Section 6.

We aim to respond to all data rights requests within 30 days. Where a request is complex or we receive a high volume of requests simultaneously, we may require additional time and will notify you accordingly.

The 98kr platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from any person under the age of 18. Age verification is part of the registration process and identity documents may be requested to confirm age during KYC verification.

If we become aware that a player has provided false age information during registration and is in fact under 18, we will immediately close the account, void any associated transactions and delete the personal data collected, except where retention is required to document the breach and prevent re-registration.

If you believe that a minor has registered an account on the 98kr platform, please contact our support team immediately so that we can investigate and act accordingly.

We may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in payment methods or services available to Pakistan players, or in response to other operational developments. When updates are made, the "Last Updated" date at the top of this page will be revised.

For material changes that significantly affect how your data is used, we will notify registered players by email where we have a current email address on file. For minor clarifications and updates, the revised policy will be published on this page without a separate notification.

We recommend reviewing this page periodically, particularly before making deposits or claiming promotional offers. The current version of this policy supersedes all previous versions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data has been handled, please contact the 98kr support team. We aim to respond to all privacy-related enquiries within 30 days.

You can also find related information on our Terms and Conditions, Responsible Gaming and FAQ pages.

[email protected]