pk98 Privacy
Policy

pk98 is Pakistan's premier online casino and sports betting platform, accessible at pk98.bio. The pk98 platform is operated by its licensed parent entity (hereinafter referred to as "pk98", "we", "us", or "our") under an international gaming licence. pk98 serves Pakistani players with a full suite of gaming products including cricket betting, PSL wagering, live casino, and online slot games.

For the purposes of this Privacy Policy, pk98 acts as the data controller — meaning we determine the purposes for which personal data is collected and the means by which it is processed. Any questions about how your data is handled can be directed to our support team at [email protected].

pk98 collects only the personal data that is genuinely necessary to operate our platform, comply with legal obligations, and provide Pakistani players with a safe and enjoyable betting experience. The categories of personal data we collect are set out in the table below.

pk98 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes.

pk98 collects personal data through the following primary channels. Understanding how data reaches us helps you make informed decisions about the information you share on the platform.

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or updating account settings.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies whenever you access the pk98 platform.
• Payment processors: Transaction confirmation data and payment method identifiers shared with pk98 by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, and other integrated payment providers when you conduct financial transactions.
• Third-party identity verification: Verification results and flags returned by our KYC/AML service providers when we submit your identity documents for background checking as required by our licensing obligations.
• Analytics providers: Aggregated behavioural data from analytics tools that help pk98 understand how players navigate and use the platform, used solely to improve platform performance and user experience.
• Fraud prevention systems: Device fingerprint data, login pattern data, and risk signals generated by pk98's internal fraud detection systems during account authentication and transaction monitoring.

pk98 processes your personal data for specific, clearly defined purposes. We do not use your data for purposes beyond those listed here without first obtaining your explicit consent or as otherwise required by applicable law.

• Account management: To create, maintain, and administer your pk98 player account, including processing login authentication and two-factor verification via Pakistani mobile numbers.
• Identity and age verification: To confirm that you are at least 21 years of age and are who you claim to be, in compliance with our licensing obligations and responsible gaming commitments.
• Payment processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, and USDT TRC20, and to maintain accurate financial records for your account.
• Regulatory compliance: To comply with Anti-Money Laundering (AML) obligations, Know Your Customer (KYC) requirements, gaming licence conditions, and any lawful requests from regulatory authorities or law enforcement.
• Responsible gaming: To monitor gaming patterns and identify indicators of problem gambling behaviour, enabling pk98 to offer appropriate responsible gaming interventions, apply deposit limits, or action self-exclusion requests.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct on the pk98 platform.
• Customer support: To respond to your queries, process complaints, and maintain a record of your communications with the pk98 support team based in Karachi and Lahore.
• Platform improvement: To analyse usage patterns and performance metrics, enabling pk98 to improve the platform experience for Pakistani players across cricket, slot, and casino products.
• Marketing communications: To send you promotional offers, bonus notifications, and event updates via email or SMS, where you have opted in to receive such communications. You may opt out at any time.
• Legal claims: To establish, exercise, or defend legal claims arising from your use of the pk98 platform or disputes with pk98.

pk98 relies on one or more of the following legal bases when processing your personal data. At least one valid legal basis applies to every processing activity conducted by pk98.

• Contractual necessity: Processing required to perform the contract between pk98 and the Player — including account creation, payment processing, and bet settlement. Without this processing, pk98 cannot provide its services.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including AML checks, KYC verification, gaming licence conditions, and responses to lawful authority requests.
• Legitimate interests: Processing carried out in pk98's legitimate business interests — such as fraud detection, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and certain analytics activities, carried out only where you have given us your explicit, freely given consent. You may withdraw consent at any time through your account settings or by contacting support.

pk98 does not sell your personal data to third parties under any circumstances. We share your data only in the specific situations described below, and only to the minimum extent necessary for the stated purpose.

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, and crypto payment processors receive the transaction data required to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual data protection obligations with pk98.
• KYC and identity verification providers: Third-party KYC service providers receive copies of your identity documents and personal details solely for the purpose of performing the verification checks required by pk98's licensing conditions.
• Gaming software and content providers: Live casino studio providers and slot game suppliers may receive anonymised session data to facilitate gameplay and ensure game integrity. They do not receive your full personal profile.
• Fraud prevention and AML services: Specialist risk management and AML platforms may receive flagged account data for the purpose of investigating suspected fraudulent or money-laundering activity.
• Regulatory authorities and law enforcement: pk98 will disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required to do so by a valid legal obligation, court order, or regulatory directive.
• Professional advisers: Legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of pk98's business or assets, player data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

The pk98 platform uses cookies and similar tracking technologies to ensure the site functions correctly, to remember your preferences, and to help us understand how Pakistani players use the platform so we can continuously improve the experience.

You can manage your cookie preferences through your browser settings or via the pk98 cookie consent panel available on your first visit to the platform. Disabling strictly necessary cookies will prevent you from logging in or using core platform features. All other cookie categories are optional.

pk98 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide.

• Active account data — Retained throughout the duration of your active pk98 account relationship and for a minimum of 5 years following account closure, to comply with AML and gaming licence record-keeping requirements.
• Financial transaction records — Retained for a minimum of 7 years from the date of each transaction, in line with standard financial record-keeping obligations applicable to gaming operators.
• KYC and identity documents — Retained for the duration of account activity and for 5 years post-closure, or longer if required by a specific regulatory or legal obligation in force at the time.
• Communications and support records — Retained for 3 years from the date of the last communication, to allow reference in the event of future disputes or complaints.
• Marketing preference data — Retained until you withdraw consent or close your account. Opt-out records are retained indefinitely to ensure we do not re-contact you after a withdrawal of consent.
• Technical and usage data — Retained in aggregated or anonymised form for up to 2 years for platform analytics purposes. Identifiable technical data is deleted or anonymised after 12 months.

When personal data is no longer required, pk98 securely deletes or anonymises it in accordance with our internal data disposal procedures. Anonymised data that cannot be re-linked to an individual may be retained indefinitely for statistical and platform improvement purposes.

pk98 takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction.

• Encryption in transit: All data transmitted between your device and the pk98 platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Look for the padlock icon in your browser address bar when using pk98.
• Encryption at rest: Sensitive personal data — including identity documents, financial data, and account credentials — is encrypted at rest in pk98's secure data infrastructure.
• Access controls: Access to personal data within pk98's systems is restricted on a strict need-to-know basis. Staff handling player data undergo data protection training and are bound by confidentiality obligations.
• Two-factor authentication: pk98 offers and strongly recommends SMS OTP-based two-factor authentication for all player accounts to prevent unauthorised account access.
• Intrusion detection: pk98's systems are monitored 24/7 for suspicious activity, unusual login patterns, and potential security incidents. Automated alerts are in place for anomalous behaviour.
• Regular security reviews: pk98 conducts periodic security assessments and vulnerability checks on its platform infrastructure to identify and address potential weaknesses proactively.

pk98 respects your data protection rights. Regardless of where you are located in Pakistan — whether in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else — the following rights are available to you as a pk98 player. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right to Access: You may request a copy of all personal data pk98 holds about you. We will provide this within 30 days of receiving a valid request, in a commonly used electronic format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. You can update many details directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that certain data must be retained for legal and regulatory reasons even after an erasure request.
• Right to Restriction: You may request that pk98 restricts the processing of your data — for example, while a dispute about data accuracy is being resolved — rather than deleting it entirely.
• Right to Data Portability: You may request that pk98 provides your personal data in a structured, machine-readable format so it can be transferred to another service provider where technically feasible.
• Right to Object: You may object to processing based on pk98's legitimate interests at any time. pk98 will cease that processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. Marketing communications can be unsubscribed from at any time.

pk98 aims to respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will inform you of the extension and reason within the initial 30-day window.

pk98 enforces mandatory age verification at the point of registration and again during KYC checks. Any account found to belong to an individual under 21 years of age will be closed immediately, all associated data will be deleted, and any deposits will be returned to the original payment source where technically possible.

Parents and guardians in Pakistan who wish to prevent access to online gambling platforms are encouraged to make use of parental control software tools available for browsers and mobile devices. pk98 supports all efforts to keep minors safe from gambling content.

As an internationally licensed online gaming platform, pk98 may store and process personal data on servers or through service providers located outside Pakistan. In such cases, pk98 takes appropriate steps to ensure that your personal data receives an equivalent level of protection regardless of where it is processed.

• pk98 uses only data processors and hosting providers that maintain recognised data security certifications and operate under binding data processing agreements.
• All third-party processors handling pk98 player data are contractually required to implement data protection standards consistent with the requirements of pk98's international gaming licence.
• Where data is transferred to jurisdictions without equivalent data protection legislation, pk98 relies on contractual safeguards — including standard contractual clauses or equivalent mechanisms — to protect your data in transit and at rest.

pk98 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, applicable laws, or regulatory requirements. When material changes are made, registered pk98 players will be notified via the email address registered to their account at least 7 days before the updated policy takes effect.

The effective date shown at the top of this document is updated each time a new version is published. The current version is always available at pk98.bio/privacy-policy. We encourage you to review this page periodically so you are always informed about how pk98 handles your personal data.

Continued use of the pk98 platform after an updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you disagree with any update, you have the right to close your pk98 account before the effective date by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk98 handles your personal data, please reach out through the channels below. Our Data Protection and support teams are based in Karachi and Lahore and are ready to assist all pk98 players promptly and professionally.

• Email: [email protected] — Data Rights requests responded to within 30 days; general queries within 2–4 hours
• Subject Line for Data Requests: "Data Rights Request — [Your pk98 Username]"
• Live Chat: Available directly on the pk98 platform — average response time 3–5 minutes during operating hours
• Postal Address: Correspondence may be sent to pk98's registered business address as listed on our gaming licence documentation — contact support via email first to obtain the current address

pk98 is committed to resolving all data-related concerns fairly, transparently, and within the timeframes set out in this policy. If you are not satisfied with pk98's response to a data concern, you may escalate the matter to the relevant data protection supervisory authority applicable in your jurisdiction.