Data Protection · Your Rights · Our Obligations
At 98par, your personal data belongs to you. This Privacy Policy explains precisely what information we collect, why we collect it, who we share it with, how long we retain it, and what rights you hold as a player. We have written it in plain language so there are no surprises.
Our Data Commitments
Your Data Is Never Sold
98par does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. Your information is used exclusively to deliver, improve, and secure the 98par gaming experience you signed up for.
Bank-Grade Encryption
All data transmitted between your device and the 98par platform is protected by 256-bit SSL/TLS encryption — the same standard used by major banking institutions. Data stored on our servers is encrypted at rest and access-controlled at every layer of the infrastructure.
You Control Your Data
You have the right to access, correct, export, and request deletion of your personal data held by 98par at any time. All data subject requests are handled within 30 days. Full details of how to exercise these rights are set out in Section 9 of this Privacy Policy.
Clear Retention Periods
98par retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. Account data is retained for five years following account closure in compliance with anti-money-laundering regulatory requirements.
Marketing Opt-Out Always Available
Marketing communications from 98par are sent only where you have provided explicit consent. You may withdraw that consent at any time by updating your communication preferences in the account dashboard or by contacting our support team — with immediate effect.
Regulated Third-Party Sharing Only
Where 98par shares data with third parties — such as payment processors, identity verification providers, or game studios — those parties are contractually bound to process data only on our instruction and to the same security standards we apply internally.
Section 1
98par is the operator of the online gaming platform accessible at 98par.net. We operate under an internationally recognised gaming licence and are the data controller in respect of all personal data collected through the 98par platform. As data controller, 98par determines the purposes and means of processing your personal data and is responsible for ensuring that all such processing is carried out lawfully, fairly, and transparently.
We are committed to protecting the privacy and security of every player who interacts with the 98par platform. Pakistani player data is treated with the same level of care and security as we apply across all markets in which we operate. This Privacy Policy is written in English and is the operative version of this document for all 98par players.
Section 2
When you register an account, complete identity verification, or contact our support team, you provide 98par with certain personal data. This includes:
When you access and use the 98par platform, certain data is collected automatically by our systems:
98par may receive certain personal data about you from third-party sources where this is necessary and lawful. These sources include identity verification providers (who confirm the authenticity of your CNIC and personal details), payment processors (who confirm transaction statuses), fraud prevention services, and responsible gaming databases (to check for existing self-exclusions).
Section 3
98par uses the personal data we collect for the following purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact data | Contract performance |
| Identity verification (KYC) | Identity, CNIC copy | Legal obligation |
| Processing deposits and withdrawals | Financial, transaction data | Contract performance |
| Fraud prevention and anti-money-laundering | Identity, financial, technical data | Legal obligation / legitimate interest |
| Customer support | Identity, contact, support communications | Contract performance / legitimate interest |
| Responsible gaming monitoring | Usage, transaction, RG preferences | Legal obligation / legitimate interest |
| Platform improvement and analytics | Usage, technical data (anonymised) | Legitimate interest |
| Marketing communications | Contact, usage data | Consent |
| Regulatory reporting | Identity, financial, transaction data | Legal obligation |
Section 4
98par processes personal data on one or more of the following legal bases depending on the specific processing activity:
Section 5
98par does not sell personal data to any third party for their own commercial or marketing purposes. We share data only in the circumstances described below, and only to the minimum extent necessary:
Section 6
98par uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies we use are as follows:
You may manage your cookie preferences through your browser settings. Note that disabling cookies beyond strictly necessary categories may affect the functionality of certain platform features. Most modern browsers allow you to view, manage, and delete cookies through the browser's settings menu.
Section 7
98par implements technical and organisational security measures proportionate to the risks associated with the personal data we process. These measures include, but are not limited to:
While 98par takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own account login credentials and for notifying 98par immediately upon becoming aware of any unauthorised access to your account.
Section 8
98par retains personal data only for as long as is necessary to fulfil the purposes set out in this Privacy Policy or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | 5 years after account closure | AML regulatory requirement |
| Financial transaction records | 5 years after account closure | AML regulatory requirement |
| KYC documents (CNIC copies) | 5 years after account closure | AML regulatory requirement |
| Support communications | 3 years after last interaction | Legitimate interest / legal claims |
| Technical and usage logs | 13 months | Fraud prevention / analytics |
| Marketing consent records | Until consent withdrawn + 3 years | Proof of consent / legal claims |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.
Section 9
You have the following rights in relation to the personal data 98par holds about you. To exercise any of these rights, contact our support team via live chat or email at [email protected] with the subject line "Data Subject Request". All requests will be acknowledged within 5 business days and fulfilled within 30 calendar days.
You have the right to obtain a copy of all personal data 98par holds about you, along with information about how it is processed. We will provide this within 30 days of a verified request at no charge.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Identity and CNIC data corrections require re-verification through our KYC process.
You may request deletion of your personal data where it is no longer necessary for the purposes it was collected. This right is subject to our legal retention obligations, particularly AML requirements that mandate a five-year retention period post-closure.
You may request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and we are considering that objection.
Where processing is carried out by automated means on the basis of contract or consent, you have the right to receive your personal data in a structured, commonly used, machine-readable format suitable for transfer to another controller.
You have the right to object to processing carried out on the basis of legitimate interest, including profiling and direct marketing. Objections to direct marketing will always be honoured immediately and without question.
Section 10
The 98par platform is strictly prohibited to individuals under the age of 21. We do not knowingly collect, process, or store personal data relating to any individual under the age of 21. If we become aware that personal data of an underage individual has been collected — whether through account registration or any other means — we will take immediate steps to suspend the associated account, delete the personal data, and return any deposited funds to the originating payment method.
If you are a parent or guardian and believe that an individual under the age of 21 in your care has registered an account with 98par, please contact our support team immediately at [email protected]. We treat all reports of underage account usage as urgent and will respond within 24 hours.
Section 11
98par will send you marketing communications — including promotional offers, bonus notifications, and gaming news — only where you have provided explicit, freely given consent to receive such communications at the time of registration or subsequently through your account communication preferences.
Marketing communications may be sent via SMS to your registered Pakistani mobile number, to your registered email address, or via push notification if you have enabled notifications in your browser or device settings. You may opt out of any or all marketing channels at any time by:
Opt-out requests are processed immediately. You may continue to receive transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — regardless of your marketing opt-out status, as these communications are necessary to the provision of the service.
Section 12
As an internationally operated gaming platform, 98par may transfer personal data to service providers and group companies located outside Pakistan. Where such transfers occur, 98par ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to the protections required under the laws applicable to our gaming licence. These safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions recognised as providing an adequate level of data protection.
Your personal data will never be transferred to a jurisdiction where 98par has reason to believe it cannot be adequately protected. If you have questions about the specific safeguards applicable to any particular international transfer of your data, please contact our data protection team using the contact details in Section 14.
Section 13
98par reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to the 98par platform and services. Where changes are material — meaning they affect your rights or the way we process your data in a meaningful way — we will notify you by email to your registered address at least 14 days before the changes take effect.
For minor, non-material changes, the updated Privacy Policy will be published on this page with an updated effective date. We encourage you to review this Privacy Policy periodically. Your continued use of the 98par platform following the publication of any updated Privacy Policy constitutes your acceptance of the changes.
Section 14
For all data protection-related enquiries, including data subject requests, questions about this Privacy Policy, or concerns about how your personal data is being processed, you may contact 98par as follows:
If you are not satisfied with 98par's handling of your data protection enquiry or complaint, you have the right to lodge a complaint with the data protection supervisory authority in the jurisdiction where you reside or where the alleged infringement took place. We would appreciate the opportunity to address your concerns directly before you approach a regulatory authority, but this is your right and we will not obstruct your exercise of it.
Your Privacy Is Our Priority
Bank-grade encryption, transparent data practices, and full control over your information. Play with confidence knowing your privacy is protected every step of the way.
256-bit SSL encryption · Full GDPR-equivalent rights · 21+ only · Play responsibly