98plr Privacy Policy — Your Data, Your Rights

98plr is an online casino and sports betting platform operating under a valid international gaming licence, accessible at 98plr.net. For the purposes of this Privacy Policy, 98plr acts as the data controller in respect of all personal information collected from members and visitors who interact with the 98plr platform.

This Privacy Policy applies to all personal data processed by 98plr in connection with the provision of its gaming services, including but not limited to account registration, identity verification, payment processing, customer support, bonus administration, and responsible gaming activities. It applies equally to members accessing the platform via desktop browsers and mobile devices.

98plr collects the following categories of personal data, depending on the nature of your interaction with the platform:

We do not collect special category data (such as health information, political opinions, or racial/ethnic origin) except where it is voluntarily disclosed by you in the context of a responsible gaming support request, in which case it is handled with enhanced confidentiality protections.

98plr collects your personal data through the following means:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, contacting our support team, or interacting with any other platform feature that requests your input.
• Automated technical collection: Data collected automatically when you visit the 98plr website or use the platform, including IP addresses, device identifiers, browser fingerprints, and session logs, collected via server logs and first-party cookies.
• Payment processor data: Transaction reference data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 processors confirming the status and reference of deposit and withdrawal transactions. 98plr does not receive or store your full payment credentials directly — these remain with the relevant payment provider.
• Third-party KYC providers: Identity verification data from licensed KYC service providers used to confirm the authenticity of documents submitted during the verification process.
• Game provider data: Aggregated gameplay and bet data provided by our licensed game providers for the purposes of game result verification, bonus administration, and responsible gaming monitoring.

98plr uses your personal data for the following purposes:

• Account administration: Creating and managing your 98plr member account, processing login requests, and maintaining accurate account records.
• KYC and compliance: Verifying your identity and age (21+) to comply with our international gaming licence obligations and to prevent underage gambling and fraud.
• Payment processing: Facilitating PKR deposits and withdrawals via your selected payment method and maintaining transaction records for audit and dispute resolution purposes.
• Platform personalisation: Tailoring your 98plr experience based on your gameplay preferences, preferred game categories (such as cricket betting or slot games), and historical platform usage patterns.
• Bonus and promotions administration: Verifying bonus eligibility, tracking wagering requirement progress, and administering VIP tier rewards and promotional offers.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Security and fraud prevention: Detecting and investigating suspicious activity, duplicate account registrations, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: Administering deposit limits, cooling-off periods, and self-exclusion requests; monitoring usage patterns for indicators of problem gambling behaviour; and suppressing marketing communications to self-excluded members.
• Marketing communications: Sending promotional emails, SMS notifications, and in-platform messages about bonuses, new games, and 98plr offers — but only where you have provided your consent to receive such communications, and only while you remain an active member not subject to any self-exclusion.
• Legal obligations: Retaining records as required by applicable law, gaming regulations, and our international licence conditions.

98plr processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the member agreement with you — including account creation, payment processing, game provision, and customer support — is carried out on the basis that it is necessary for the performance of a contract to which you are a party.
• Legal obligation: Processing carried out to comply with applicable laws and our international gaming licence conditions, including KYC identity verification, age verification, anti-money laundering record-keeping, and responsible gaming obligations.
• Legitimate interests: Processing carried out for 98plr's legitimate business interests — such as fraud prevention, platform security, abuse detection, and service improvement — where those interests are not overridden by your own data protection rights.
• Consent: Processing activities that rely on your active consent, principally the sending of marketing communications and the use of non-essential analytical cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

98plr does not sell your personal data. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 processors receive the transaction reference data required to process your deposits and withdrawals. Each processor operates under its own privacy framework and is bound by applicable financial data protection requirements.
• KYC verification providers: Licensed identity verification service providers receive the documents you submit for KYC purposes. These providers are contractually bound to process your data solely for identity verification and to maintain appropriate security standards.
• Game providers: Licensed game providers receive anonymised or pseudonymised gameplay data necessary for game result verification and to support the responsible gaming monitoring obligations we maintain under our licence.
• IT and hosting providers: Third-party cloud infrastructure and hosting providers who process data on our behalf under strict data processing agreements that prohibit independent use of your data.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, regulatory authority, or our international gaming licence conditions, 98plr may disclose personal data to competent authorities. We will notify you of such disclosures wherever we are legally permitted to do so.
• Business transfers: In the event that 98plr undergoes a merger, acquisition, or transfer of its business assets, your personal data may be transferred to the successor entity as part of that transaction, subject to equivalent privacy protections being maintained.

98plr uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device that allow the platform to recognise your browser, maintain your session, and remember your preferences. The following categories of cookies are used:

98plr does not use advertising cookies or share cookie data with external advertising networks. You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality and may prevent you from logging in to your account.

98plr retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, having regard to applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active membership plus a minimum of five years following account closure, to comply with anti-money laundering record-keeping obligations under our international gaming licence.
• Financial transaction records: Retained for a minimum of five years following the date of each transaction in PKR or cryptocurrency equivalent, in line with standard financial record-keeping requirements.
• KYC verification documents: Retained for the duration of your membership plus five years following account closure. Documents may be retained for longer periods if required by a specific legal obligation or ongoing investigation.
• Customer support communications: Retained for three years from the date of the last interaction, to support dispute resolution and quality assurance processes.
• Responsible gaming records: Self-exclusion records and deposit limit histories are retained for a minimum of five years to ensure that reinstated accounts are subject to appropriate safeguards.
• Marketing consent records: Retained for the period of your consent plus three years following withdrawal of consent, to demonstrate compliance in the event of a complaint.
• Technical and usage data: Standard server log data is retained for 90 days. Aggregated anonymised analytics data may be retained for longer periods as it cannot be used to identify individual members.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of your identity.

98plr implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS encryption: All data in transit between your device and 98plr's servers is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Data at rest encryption: Sensitive personal data — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to 98plr staff and approved service providers who require it to perform their specific functions, enforced through role-based access controls and multi-factor authentication for internal systems.
• Security monitoring: 98plr maintains continuous monitoring of its platform infrastructure for intrusion attempts, anomalous access patterns, and data exfiltration signals.
• Incident response: In the event of a data security incident that poses a risk to your rights and freedoms, 98plr will notify affected members and relevant regulatory authorities within the timeframe required by applicable obligations.

As a 98plr member whose personal data is processed under applicable data protection principles, you hold the following rights in relation to your personal information. Requests to exercise any of these rights should be submitted to our support team via live chat or email and will be responded to within 30 days: