pp98 Privacy Policy

pp98 is an online casino and sports betting platform accessible at pp98.bio, operated under an international gaming licence. pp98 serves players across Pakistan, offering cricket betting including PSL markets, live dealer casino games, slots, Super Keno, snooker markets, and a full sportsbook — all denominated in Pakistani Rupees (PKR) with local payment support including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, and SadaPay.

For the purposes of this Privacy Policy, pp98 acts as the data controller in respect of all personal data collected from registered players and platform visitors. As data controller, pp98 determines the purposes and means by which your personal data is processed.

Questions about this Privacy Policy or how pp98 handles your personal data may be directed to the pp98 support team at any time via live chat or by emailing [email protected].

pp98 collects the following categories of personal data from players and platform visitors. The specific data collected depends on the nature of your interaction with the platform:

pp98 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond what is strictly required for CNIC-based age and identity verification mandated under our international gaming licence obligations.

pp98 collects personal data through the following channels:

• Direct Submission: Information you provide during account registration, KYC document upload, deposit and withdrawal requests, support contact, and any form completed on the pp98 platform.
• Automated Technical Collection: When you access the pp98 platform, our servers automatically log technical data including your IP address, device identifiers, browser type, and session activity. This collection is necessary for platform security, fraud prevention, and responsible gaming monitoring.
• Payment Processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, or USDT TRC20, the relevant payment provider shares transaction confirmation data with pp98 to facilitate account crediting and reconciliation.
• Third-Party Verification Providers: pp98 uses accredited third-party identity verification and AML screening services to cross-reference CNIC data against regulatory watchlists as required by our licensing obligations. These providers share only the outcome of verification checks — they do not retain your documents independently of pp98's instructions.
• Cookies and Analytics: pp98 uses cookies and similar technologies to collect behavioural data about how you interact with the platform. See Section 7 for full details.

pp98 processes personal data only where a valid legal basis exists. The following legal bases apply to pp98's data processing activities:

• Contractual Necessity: Processing required to fulfil pp98's obligations under the player account agreement — including account management, deposit processing, withdrawal handling, bet settlement, and customer support. Without this processing, pp98 cannot operate your account.
• Legal Obligation: Processing required to comply with applicable law, including KYC identity verification, AML transaction monitoring, age verification enforcement, and regulatory reporting obligations under pp98's international gaming licence.
• Legitimate Interests: Processing necessary for pp98's legitimate business interests, provided those interests are not overridden by your fundamental rights. This includes fraud detection, platform security, responsible gaming monitoring, and internal analytics to improve the platform experience for Pakistani players.
• Consent: Where pp98 sends optional marketing communications — such as bonus notifications or promotional updates — by email or SMS, this is done on the basis of your separately given, specific, and withdrawable consent. You may withdraw marketing consent at any time via account settings or by contacting support.

pp98 uses the personal data collected from players for the following defined purposes:

• Account Management: Creating, maintaining, and securing your pp98 account, including processing your pp98 Login authentication requests and updating account preferences.
• Identity and Age Verification: Conducting mandatory CNIC-based KYC verification to confirm your identity and that you meet the 21+ minimum age requirement strictly enforced by pp98.
• Payment Processing: Executing PKR deposits and withdrawals via JazzCash, EasyPaisa, and supported bank transfer methods; reconciling transaction records; and managing USDT TRC20 conversions.
• Bet and Game Settlement: Recording, settling, and archiving your sports bets, cricket wagers, PSL market positions, casino game sessions, and Super Keno plays for accurate account balance management.
• Fraud Prevention and AML: Monitoring account activity for indicators of fraud, money laundering, bonus abuse, collusion, and other prohibited conduct as defined in the pp98 Terms & Conditions.
• Responsible Gaming: Using gaming session data, deposit patterns, and behavioural indicators to identify players who may be experiencing gambling-related difficulties. This allows pp98 to proactively offer responsible gaming tools and, where required, enforce deposit limits or account restrictions.
• Customer Support: Using your account data and communications history to assist you efficiently when you contact the pp98 support team via live chat or email.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify platform performance issues, improve game navigation, and enhance the overall experience for players across Pakistan.
• Marketing Communications: Sending bonus offers, PSL season promotions, and personalised recommendations where you have provided marketing consent. These communications can be opted out of at any time.
• Legal and Regulatory Compliance: Retaining records as required by our international gaming licence obligations, responding to lawful requests from regulatory authorities, and fulfilling audit requirements.

pp98 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is shared only in the following defined circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 processing partners receive the minimum data necessary to execute your requested financial transactions. These providers are bound by their own regulatory obligations and data protection commitments.
• Identity Verification Services: Accredited KYC and AML verification partners receive your CNIC data and identity documents for the purpose of regulatory compliance checks. These providers act as data processors under instruction from pp98 and are contractually prohibited from using your data for any other purpose.
• Gaming Software Providers: The game studios and live dealer platform providers whose content is accessible on pp98 receive anonymised session and game outcome data for RNG auditing and game performance purposes. They do not receive your identity or financial data.
• Regulatory Authorities: pp98 will disclose personal data to licensing bodies, law enforcement agencies, financial intelligence units, or other governmental authorities where required to do so by applicable law or valid legal process. pp98 will not notify users of such disclosures where prohibited by law from doing so.
• Professional Advisers: pp98's legal counsel, auditors, and compliance consultants may access player data on a strictly need-to-know basis where required to provide professional services to pp98. All such parties are bound by professional confidentiality obligations.
• Business Succession: In the event of a merger, acquisition, or sale of the pp98 platform, player data may be transferred to the relevant successor entity. You will be notified of any such transfer and the continued application of this Privacy Policy in advance.

pp98 uses cookies and similar technologies on the platform. A cookie is a small text file placed on your device when you access a website. pp98 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the pp98 platform to function. They maintain your session state after pp98 Login, remember your language preferences, and support the security infrastructure of the platform. These cookies cannot be disabled as they are required for basic platform operation.
• Functional Cookies: These cookies remember your preferences — such as your preferred deposit method (e.g., JazzCash vs EasyPaisa) — to personalise your platform experience. Disabling these cookies may reduce personalisation but will not prevent basic use.
• Analytics Cookies: pp98 uses privacy-respecting analytics tools to understand how players navigate the platform, which games are most popular, and where usability improvements are needed. Analytics data is aggregated and does not identify individual players.
• Responsible Gaming Cookies: Session-tracking cookies are used to power reality check reminders and session time alerts, which are part of pp98's responsible gaming toolkit. These cookies are treated as strictly necessary from a player protection standpoint.

You may manage your cookie preferences through your browser settings. Note that blocking strictly necessary cookies will impair your ability to use the pp98 platform, including the pp98 Login process. pp98 does not currently use advertising or retargeting cookies.

pp98 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by legal or regulatory obligation. The following retention principles apply:

• Active Account Data: All personal data associated with your pp98 account is retained for the duration of your account's active status and for a minimum of five (5) years following permanent account closure, in accordance with international gaming licence record-keeping requirements.
• KYC and Identity Documents: CNIC documents and identity verification records are retained for the minimum period mandated by applicable AML regulations, which is typically five (5) years from the date of account closure or the last transaction, whichever is later.
• Financial Transaction Records: All PKR deposit and withdrawal records, including JazzCash and EasyPaisa transaction logs, are retained for a minimum of five (5) years for AML compliance and audit purposes.
• Betting and Gaming History: Bet and game session records are retained for the duration of the active account period and for five (5) years post-closure for dispute resolution and regulatory audit purposes.
• Marketing Consent Records: Records of your marketing consent and any subsequent withdrawals of consent are retained for the duration that the consent is active, plus three (3) years following withdrawal of consent.
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the communication to support quality assurance and dispute resolution.
• Inactive Accounts: Where an account has been inactive for twelve (12) consecutive months and contains no remaining balance, pp98 may initiate an account closure process following the notification procedure described in the Terms & Conditions. Post-closure retention timelines as described above apply from the date of closure.

Upon expiry of the applicable retention period, pp98 will securely delete or anonymise your personal data such that it can no longer be attributed to you as an identifiable individual.

pp98 takes the security of your personal data seriously and has implemented a layered set of technical and organisational security measures to protect player information against unauthorised access, alteration, disclosure, or destruction:

• TLS Encryption in Transit: All data transmitted between your device and the pp98 platform is encrypted using Transport Layer Security (TLS). The padlock visible in your browser address bar during pp98 Login confirms this encryption is active.
• Encryption at Rest: Sensitive personal data stored in pp98's database infrastructure — including CNIC records, financial data, and password hashes — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to player personal data within pp98's internal systems is governed by strict role-based access controls. Only authorised personnel with a legitimate operational need are permitted to access identifiable player data, and all such access is logged and auditable.
• Two-Factor Authentication: pp98 offers two-factor authentication (2FA) for player accounts. pp98 strongly recommends that all players enable 2FA via account settings after pp98 Login to add an additional layer of protection to their account.
• Penetration Testing: pp98's platform infrastructure undergoes regular third-party security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that poses a material risk to player privacy, pp98 has a documented incident response procedure in place. Affected players will be notified in a timely manner where required by applicable data protection obligations.

As a pp98 player, you have the following rights in respect of your personal data. To exercise any of these rights, contact the pp98 support team via live chat or email at [email protected]:

pp98 will respond to all verified data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case pp98 will notify you of the extension and the reasons for it within the initial thirty-day period.

pp98 operates a strict 21+ age policy. The pp98 platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. This minimum age requirement is enforced through mandatory CNIC-based age verification at the KYC stage before any withdrawal is processed.

If pp98 discovers or is credibly notified that personal data has been collected from an individual under the age of 21, the following actions will be taken immediately:

• The account will be suspended pending investigation.
• All personal data associated with the account will be securely deleted following resolution of any outstanding balance queries.
• Any deposits made will be returned to the original payment source, subject to verification of that source.
• The incident will be documented and, where required by our licensing obligations, reported to the relevant regulatory authority.

Parents and guardians who believe a minor may have created a pp98 account are urged to contact the pp98 support team immediately via live chat or by emailing [email protected]. pp98 will treat such reports with the highest priority and sensitivity.

As an internationally licensed platform serving Pakistani players, pp98 may transfer personal data to, and process data in, countries outside Pakistan. Such transfers occur in the following contexts:

• Hosting Infrastructure: pp98's platform infrastructure is hosted on internationally distributed cloud servers to ensure performance and reliability for players across Pakistan, including in Karachi, Lahore, Islamabad, Rawalpindi, and Faisalabad.
• Third-Party Service Providers: Some of the third-party vendors pp98 uses — including KYC verification providers, gaming software studios, and analytics platforms — may be based in or process data in countries outside Pakistan.
• Licensing Jurisdiction: pp98 operates under an international gaming licence, and certain compliance and audit processes required by that licence may involve data access by entities in the licensing jurisdiction.

Where personal data is transferred internationally, pp98 ensures that appropriate safeguards are in place to protect the transferred data to a standard at least equivalent to the protections described in this Privacy Policy. These safeguards may include contractual data protection clauses, adherence to recognised international privacy frameworks, or transfers to jurisdictions that maintain adequate data protection standards.

You may request further details about the international transfer mechanisms applicable to your personal data by contacting the pp98 support team at [email protected].

pp98 reserves the right to update or amend this Privacy Policy at any time. Changes may be made in response to evolving regulatory requirements, changes to pp98's data processing activities, updates to our platform infrastructure, or improvements to how we communicate our data practices to Pakistani players.

When material changes are made to this Privacy Policy, pp98 will notify registered players through one or more of the following channels:

• A prominent notice displayed on the pp98 platform upon next login.
• An email notification to the registered email address on your account.
• An in-platform notification via the pp98 messaging centre.

The "Last Updated" date displayed at the top of this Privacy Policy will always reflect the date on which the most recent version came into effect. Continued use of the pp98 platform following notification of a material policy update constitutes acceptance of the revised Privacy Policy.

Where changes to this Privacy Policy require your fresh consent — for example, where a new processing purpose is introduced that requires consent as its legal basis — pp98 will seek that consent separately and explicitly before commencing the new processing activity.

If you have any questions, concerns, or complaints about this Privacy Policy or about how pp98 handles your personal data, please get in touch with the pp98 team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the pp98 platform. Live chat is the fastest way to reach a pp98 support agent for account-specific data queries, including requests to update, access, or delete your personal data.
• Support Email: [email protected] — for formal data rights requests, privacy complaints, or written correspondence regarding this Privacy Policy. pp98 aims to respond to all email enquiries within 24 hours on business days.

When submitting a data rights request by email, please include your registered pp98 username and a brief description of your request so the support team can process it efficiently. For security purposes, pp98 will verify your identity before acting on any data access, rectification, or erasure request.

If you are not satisfied with pp98's response to a privacy complaint, you may have the right to escalate your complaint to a relevant data protection authority or regulatory body in accordance with applicable law in your jurisdiction.