pr98 Privacy Policy
— Your Data, Your Rights

1.1 pr98 ("the Operator," "we," "us," or "our") is committed to protecting the privacy and security of personal data belonging to all players who access and use the pr98 online casino and sports betting platform (the "Platform"). This Privacy Policy ("Policy") sets out how pr98 collects, stores, uses, shares, and protects your personal data, and explains the rights available to you in connection with that data.

1.2 This Policy should be read together with the pr98 Terms & Conditions and Responsible Gaming Policy, both of which are available on the pr98 website. In the event of any conflict between this Policy and the Terms & Conditions on matters of data handling, this Policy shall prevail.

1.3 By registering a pr98 account or by continuing to use the Platform after this Policy has been updated, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this Policy, you should not use the pr98 Platform.

1.4 pr98 takes data protection seriously. We apply appropriate technical and organisational measures to ensure that personal data is handled securely and processed only for clearly defined, legitimate purposes — including the provision of gaming services to Pakistani players, regulatory compliance, fraud prevention, and responsible gaming enforcement.

2.1 pr98 is an online gaming operator licensed under an international gaming regulatory framework. The pr98 Platform is operated by the entity holding this license (the "Operator"), which acts as the data controller in respect of personal data collected through the Platform.

2.2 As the data controller, pr98 determines the purposes for which and the means by which personal data is processed. Where pr98 engages third-party service providers to process data on its behalf, those parties act as data processors and are contractually bound to process data only on pr98's documented instructions and in accordance with applicable data protection standards.

2.3 For all privacy-related enquiries, data access requests, or complaints, players may contact pr98's data team using the contact details provided in Section 15 of this Policy.

3.1 pr98 collects personal data from players through several channels, including account registration, platform usage, customer support interactions, and payment transactions. The categories of personal data collected are set out in the table below:

3.2 pr98 does not collect special category data (such as health data, racial or ethnic origin, political opinions, or religious beliefs) unless specifically required by applicable law or regulation in the context of responsible gaming assessment, and only with your explicit consent where required.

3.3 Where you provide personal data relating to third parties (for example, a referral programme contact), you represent and warrant that you have the consent of that third party to share their data with pr98 for the purposes stated at the time of collection.

4.1 pr98 uses your personal data for the following primary purposes:

• Account management: Creating, maintaining, and managing your pr98 player account, including processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and other listed methods;
• Identity verification: Verifying your age (21+) and identity as required under pr98's KYC obligations and the conditions of its gaming license;
• Regulatory compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming obligations imposed by pr98's international gaming license;
• Fraud prevention: Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, and other prohibited conduct as described in the Terms & Conditions;
• Customer support: Responding to your queries, processing complaints, and resolving disputes efficiently;
• Platform improvement: Analysing aggregated usage data to improve game selection, payment processes, and the overall player experience on pr98;
• Responsible gaming: Monitoring player behaviour to identify patterns that may indicate problem gambling, and applying responsible gaming interventions where appropriate;
• Marketing communications: Sending promotional offers, bonus notifications, and PSL / cricket betting updates — where you have consented to receive such communications.

4.2 pr98 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for that processing.

5.1 pr98 processes your personal data on the following legal bases, depending on the specific purpose of the processing:

• Contractual necessity: Processing required to fulfil the contract between pr98 and the Player — including account creation, game access, and payment processing — is carried out on the basis that it is necessary for the performance of that contract;
• Legal obligation: Processing required to comply with pr98's obligations under its gaming license, applicable AML regulations, and other applicable laws is carried out on the basis of legal obligation;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring is carried out on the basis of pr98's legitimate interests as a regulated gaming operator, where those interests are not overridden by your rights and interests;
• Consent: Processing for direct marketing communications and non-essential cookies is carried out only where you have given your explicit, informed, and freely withdrawable consent.

6.1 pr98 shares personal data with third parties only where necessary and only with parties who are bound by appropriate data protection obligations. The categories of third parties with whom pr98 may share your data are as follows:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Visa/Mastercard network operators, and cryptocurrency transaction facilitators, for the purpose of processing your deposits and withdrawals;
• Game software providers: Third-party game studios and live casino platform providers, who may receive technical session data for the purpose of delivering their gaming content through the pr98 Platform;
• Identity verification services: Third-party KYC and AML screening providers who assist pr98 in verifying player identity and screening against applicable watchlists;
• Regulatory authorities: pr98's gaming license regulator and any competent law enforcement or government authority, where disclosure is required by law, court order, or regulatory direction;
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data solely on pr98's instructions under binding data processing agreements.

6.2 pr98 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Any data sharing with third parties is strictly limited to what is necessary for the stated operational or regulatory purpose.

6.3 In the event that pr98's business is acquired, merged, or restructured, player personal data may be transferred as part of that transaction. Players will be notified of any such transfer and their rights in relation to the new data controller will be preserved.

7.1 pr98 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help pr98 recognise your session, remember your preferences, and understand how the Platform is being used.

7.2 pr98 uses the following categories of cookies:

• Strictly necessary cookies: These are required for the Platform to function. They enable you to log in, navigate between pages, and use core features. These cookies cannot be disabled without affecting platform functionality;
• Functional cookies: These remember your language preferences, display settings, and other personalisation choices to improve your experience on pr98;
• Analytics cookies: These collect aggregated, anonymised data about how players use the Platform — pages visited, session length, and navigation paths — to help pr98 improve its services;
• Marketing cookies: These are used to deliver relevant promotional content and to measure the effectiveness of pr98's marketing activities. Marketing cookies are only placed with your explicit consent.

7.3 You can manage your cookie preferences via your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to use the pr98 Platform normally. Withdrawing consent for analytics or marketing cookies will not affect your access to gaming services.

8.1 pr98 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations. The following general retention periods apply:

• Account and identity data: retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure, as required by AML and gaming license regulations;
• Financial transaction records: retained for a minimum of five (5) years following the date of the transaction, in accordance with financial record-keeping obligations;
• Customer support communications: retained for a minimum of two (2) years following the resolution of the matter;
• Technical and usage data: retained for up to two (2) years from the date of collection, or longer where required for fraud investigation purposes;
• Marketing consent records: retained for as long as the consent remains active, or for a reasonable period following withdrawal of consent as evidence of the prior consent relationship.

8.2 Where data is no longer required for any lawful purpose, pr98 will securely delete or anonymise that data. Anonymised data that cannot be re-linked to an individual may be retained indefinitely for statistical analysis and platform improvement purposes.

9.1 pr98 employs the following security measures in relation to the processing of player personal data:

• SSL/TLS encryption for all data transmitted between your device and pr98's servers;
• One-way cryptographic hashing for all stored passwords — passwords are never stored in readable form;
• Two-factor authentication (2FA) availability for all player accounts;
• Automated login anomaly detection and suspicious activity alerts;
• Role-based internal access controls — employee access to player data is restricted to what is necessary for each employee's specific role;
• Regular penetration testing and security audits by qualified cybersecurity professionals;
• Incident response procedures for detecting, containing, and reporting data breaches within required timeframes.

9.2 Notwithstanding the security measures outlined above, no data transmission over the internet or data storage system can be guaranteed to be completely secure. pr98 cannot provide an absolute guarantee against all possible security threats. In the event of a data breach that materially affects your rights, pr98 will notify you in accordance with applicable notification requirements.

9.3 Players are responsible for maintaining the security of their own account credentials. pr98 recommends using a strong, unique password for your pr98 account and enabling two-factor authentication. pr98 will never ask you for your password through any channel.

10.1 Subject to applicable law and pr98's regulatory obligations, you have the following rights in respect of your personal data held by pr98:

• Right of access: You may request a copy of the personal data pr98 holds about you. pr98 will respond to access requests within a reasonable timeframe, typically within 30 days;
• Right to rectification: You may request that inaccurate or incomplete personal data held by pr98 be corrected or updated. Minor account information changes (such as contact number updates) can typically be made through your pr98 account settings;
• Right to erasure: You may request that pr98 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. This right is subject to pr98's legal retention obligations;
• Right to restrict processing: You may request that pr98 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending determination of that objection;
• Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes, though pr98 may be entitled to continue processing where it can demonstrate compelling legitimate grounds;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Withdrawal of marketing consent can be done via your pr98 account settings or by contacting support.

10.2 To exercise any of the rights listed above, please contact pr98 customer support. You will not be charged for making a data rights request. pr98 reserves the right to verify your identity before processing any data rights request to ensure that personal data is not disclosed to an unauthorised party.

11.1 pr98 enforces a strict minimum age of 21 years for all account registrations. Age verification checks are applied at registration and may be requested at any time during an account's active lifetime. Any account found to belong to an individual under the age of 21 will be closed immediately.

11.2 If pr98 discovers that personal data has been collected from an individual under the age of 21, that data will be deleted promptly and any deposits made will be refunded to the original payment method where technically possible. Any winnings generated will be forfeited.

11.3 If you have reason to believe that an individual under the age of 21 has registered a pr98 account or is using the Platform, please notify pr98 support immediately so that appropriate action can be taken.

12.1 As an internationally licensed gaming operator, pr98 may transfer personal data to service providers, game software partners, and regulatory bodies located outside Pakistan. Such transfers are necessary to deliver the services described in this Policy.

12.2 Where personal data is transferred outside the jurisdiction in which it was collected, pr98 ensures that appropriate safeguards are in place to protect the data at a level at least equivalent to the protections applied within the original jurisdiction. Such safeguards may include contractual data protection clauses binding the receiving party to applicable data protection standards.

12.3 By using the pr98 Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards described above.

13.1 With your consent, pr98 may send you marketing communications regarding new promotions, bonus offers, PSL and cricket betting markets, new game releases, and other pr98 services. Marketing communications may be delivered via SMS to your registered Pakistani mobile number, or by other communication channels you have opted into.

13.2 You may withdraw your consent to receive marketing communications at any time by updating your preferences in your pr98 account settings, or by contacting pr98 customer support. Withdrawal of marketing consent will not affect your ability to access gaming services on pr98.

13.3 Even if you opt out of marketing communications, pr98 will continue to send you transactional communications that are necessary to the operation of your account — such as deposit confirmations, withdrawal notifications, account security alerts, and responsible gaming messages. These are not marketing communications and cannot be opted out of while your account remains active.

14.1 pr98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The "Effective Date" at the top of this Policy reflects the date of the most recent revision.

14.2 Where changes to this Policy are material — for example, where pr98 introduces a new category of data processing or a new category of third-party sharing — pr98 will make reasonable efforts to notify registered players prior to the changes taking effect, via the contact details associated with their account or by posting a prominent notice on the Platform.

14.3 Continued use of the pr98 Platform after the effective date of an updated Policy constitutes acceptance of the revised Policy. Players who do not accept the revised Policy should cease using the Platform and request account closure.

15.1 For any questions, concerns, or requests relating to this Privacy Policy or pr98's handling of your personal data — including data access requests, rectification requests, or complaints — please contact the pr98 support team.

15.2 pr98 customer support is available 24 hours a day, 7 days a week. Average response times via live chat are under 3 minutes. Email queries are typically acknowledged within 24 hours and resolved within 5 working days.

Support contact: [email protected]
Platform: https://pr98.net