Privacy Policy — How 98tp Handles Your Personal Data

98tp is an online gaming platform operating at https://98tp.bid, offering cricket betting, live casino, slots, sports wagering, and card games including Callbreak and Fortune Ox. 98tp operates under internationally recognised gaming licensing standards and is committed to compliant, responsible operation across all jurisdictions it serves.

For the purposes of this Privacy Policy, 98tp ("we," "us," "our") is the data controller responsible for the personal data of all registered players and website visitors. As data controller, 98tp determines the purposes and means of processing personal data and bears primary responsibility for ensuring that processing is conducted lawfully, fairly, and transparently.

Our primary Data Protection contact for enquiries, requests, and complaints is reachable at: [email protected]

This Privacy Policy applies to all personal data processed by 98tp in connection with:

• Your use of the 98tp website at https://98tp.bid and all sub-pages thereof;
• Your registration for and maintenance of a 98tp player account;
• All deposits, withdrawals, and financial transactions conducted through the 98tp platform;
• Your participation in any 98tp game, betting market, tournament, or promotional activity;
• Any communication between you and 98tp via live chat, email, or any other channel;
• Your use of responsible gaming tools including deposit limits and self-exclusion.

This Policy does not apply to third-party websites, services, or platforms that may be referenced on or accessible from 98tp. Players accessing third-party platforms are subject to those platforms' own privacy policies.

The categories of personal data 98tp collects and holds in connection with player accounts and platform usage are set out in the table below:

98tp does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health data — unless such data is incidentally included in documents submitted during identity verification, in which case it is handled with enhanced protective measures and not used for any purpose beyond the immediate verification requirement.

98tp collects personal data through the following channels and mechanisms:

Direct Collection

Data you actively provide when creating your account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account settings. This constitutes the majority of the personal data we hold.

Automated Collection

Technical data including IP addresses, device identifiers, browser fingerprints, and session metadata collected automatically by our platform infrastructure when you access 98tp. This data is collected regardless of whether you are logged into an account and is used primarily for security monitoring, fraud prevention, and platform performance analysis.

Payment Processor Data

When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard, our payment processors share transaction confirmation data with 98tp for the purpose of crediting or debiting your account. 98tp does not store full card numbers or complete mobile wallet authentication credentials.

Third-Party Verification Services

Where 98tp uses third-party identity verification partners to assist with KYC processing, those partners may return identity confirmation data to 98tp following their independent document analysis. All such partners are contractually bound to process data only as instructed by 98tp and in compliance with applicable data protection standards.

98tp processes personal data only where a valid legal basis for that processing exists. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to perform our contract with you — specifically, to provide the gaming and betting services you have registered to use, process your transactions, and manage your account;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) laws, counter-terrorism financing (CTF) requirements, gaming licence conditions, and tax obligations;
• Legitimate Interests: Processing necessary for 98tp's legitimate business interests, including fraud prevention, security monitoring, responsible gaming programme operation, and platform improvement — where such interests do not override your fundamental privacy rights;
• Consent: Processing for purposes where your prior, freely given, specific, and informed consent has been obtained — primarily for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

98tp uses the personal data it collects for the following specific purposes:

• Account Creation & Management: Registering your 98tp account, verifying your identity, maintaining accurate account records, and enabling you to access all platform features;
• Transaction Processing: Processing deposits from and withdrawals to JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard accounts, maintaining transaction records, and managing account balances in PKR;
• KYC & Age Verification: Verifying that you are at least 21 years of age and confirming your legal identity in compliance with our licensing obligations. This is a mandatory processing activity and cannot be declined;
• Fraud & Money Laundering Prevention: Monitoring transactions and account activity for patterns consistent with fraud, money laundering, match-fixing, or bonus abuse, and reporting suspicious activity to relevant authorities where legally required;
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, enforcing self-exclusion and deposit limit settings, and enabling our responsible gaming team to proactively engage with at-risk players;
• Customer Support: Responding to your enquiries, resolving complaints, and maintaining records of support interactions for quality assurance and dispute resolution purposes;
• Platform Improvement: Analysing aggregated and anonymised usage data to identify platform performance issues, improve game loading times, and enhance the overall user experience for Pakistani players;
• Marketing (With Consent): Sending you promotional communications about 98tp bonuses, game launches, PSL-related betting promotions, and platform news — where you have explicitly opted in to receive such communications.

98tp does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank, Visa, Mastercard networks) receive the minimum data necessary to process your transactions;
• Identity Verification Partners: Third-party KYC service providers who assist with document verification receive identity documents solely for the purpose of completing verification checks;
• Game Providers: Software providers such as PG Soft, Pragmatic Play, and Habanero receive session and bet data necessary to deliver game content and resolve game disputes;
• Regulatory & Law Enforcement Authorities: Where required by our gaming licence conditions, applicable law, or court order, 98tp will disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies. We will notify you of such disclosures where legally permitted to do so;
• Fraud Prevention Networks: Where fraudulent activity is suspected, relevant data may be shared with industry fraud prevention services to prevent repeat offences across platforms;
• Successor Entities: In the event of a merger, acquisition, or sale of substantially all 98tp assets, personal data may be transferred to the acquiring entity subject to equivalent data protection commitments.

All third parties with whom 98tp shares personal data are required to maintain appropriate technical and organisational security measures and to process data only in accordance with 98tp's documented instructions and applicable data protection law.

As a platform operating under international gaming licensing arrangements, certain 98tp data processing activities may involve transfers of personal data to jurisdictions outside of Pakistan. Where such transfers occur, 98tp ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under our licensing jurisdiction's data protection framework.

Safeguards used for international data transfers include:

• Standard contractual clauses with data recipients that impose binding data protection obligations;
• Transfers to jurisdictions that the applicable regulatory authority has deemed to provide an adequate level of data protection;
• Binding corporate rules where data is transferred within the same corporate group as 98tp.

You may request details of the specific safeguards applied to any international transfer of your personal data by contacting 98tp's Data Protection team at [email protected].

98tp retains personal data only for as long as is necessary for the purpose for which it was collected, or for such longer period as is required or permitted by applicable law. The following retention periods apply:

• Active Account Data: Retained for the duration of your active 98tp account relationship plus such additional period as required by law following account closure;
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with applicable anti-money laundering recordkeeping requirements;
• KYC Documentation: Retained for a minimum of five (5) years following the end of the business relationship, as required by applicable AML/CTF regulations;
• Customer Support Communications: Retained for three (3) years following the date of the interaction, or longer where the communication is relevant to an ongoing dispute or regulatory enquiry;
• Marketing Data: Retained until you withdraw your consent to marketing communications, after which it will be suppressed from active marketing use but retained in suppression lists to prevent accidental re-contact;
• Technical / Log Data: Generally retained for ninety (90) days for routine security purposes, and up to two (2) years where retention is justified by ongoing security monitoring or investigation requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual.

98tp uses cookies and similar tracking technologies on its platform for the following purposes:

• Strictly Necessary Cookies: Required for the platform to function correctly — including session authentication, CSRF protection, and load balancing. These cookies cannot be disabled without preventing core platform functionality;
• Functionality Cookies: Store your preferences such as language settings, last visited game section, and responsible gaming tool configurations to improve your experience on return visits;
• Analytics Cookies: Collect anonymised data about how players navigate the platform, which game sections are most visited, and where technical errors occur — helping 98tp prioritise product improvements;
• Security Cookies: Help detect and prevent fraudulent login attempts, account takeovers, and bot activity by recognising your device across sessions.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookie categories may impair the functionality or security of your 98tp experience. 98tp does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving behavioural advertisements on third-party platforms.

98tp implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and 98tp servers;
• Passwords stored using one-way cryptographic hashing with salting — 98tp staff cannot retrieve your actual password;
• Two-factor authentication (2FA) available to all registered players as an additional account security layer;
• Access controls ensuring that personal data is accessible internally only to staff members with a legitimate operational need;
• Regular security assessments and penetration testing of platform infrastructure;
• Incident response procedures enabling rapid containment and notification in the event of a data breach.

In the event of a personal data breach that poses a risk to your rights and freedoms, 98tp will notify affected individuals and relevant regulatory authorities within the timeframes prescribed by applicable law. Notification will include details of the breach, the data affected, and the steps 98tp is taking to address the incident.

Subject to applicable law, you have the following rights in relation to the personal data 98tp holds about you:

To exercise any of the above rights, submit a written request to [email protected] from the email address registered to your 98tp account. We will acknowledge your request within 48 hours and respond substantively within thirty (30) days, or such shorter period as required by applicable law. Where a request requires additional time, we will notify you of the extension and its reason.

Please note that certain rights are subject to exceptions where 98tp has overriding legal obligations — particularly regarding the retention of AML/KYC records, which we are required by law to retain regardless of deletion requests.

98tp may send you promotional communications about bonuses, new game launches, PSL cricket betting promotions, and other platform news, provided that you have given your explicit consent to receive such communications at registration or at a subsequent point through your account preferences.

You may withdraw your consent to marketing communications at any time by:

• Using the unsubscribe link contained in any marketing email sent by 98tp;
• Updating your communication preferences in the Account Settings section of your 98tp dashboard;
• Contacting 98tp support at [email protected] with a specific opt-out request.

Withdrawal of marketing consent does not affect the lawfulness of any processing conducted before the withdrawal, and does not prevent 98tp from sending you non-marketing service communications necessary for the operation of your account — such as transaction confirmations, security alerts, responsible gaming notifications, or policy update notices.

98tp's services are strictly for individuals aged 21 years and older. 98tp does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the registration and KYC process.

If 98tp discovers that personal data has been collected from an individual under 21 without the required age verification having identified the player's true age, that account will be immediately suspended, the account balance will be returned to the depositing payment method (with any winnings generated forfeited), and all associated personal data will be securely deleted in accordance with applicable child data protection requirements — except where retention is required by law.

If you have reason to believe that a person under 21 has created a 98tp account, please contact [email protected] immediately so that we can investigate and take appropriate action.

The 98tp platform integrates with third-party game providers, payment processors, and identity verification services in order to deliver a complete gaming experience. While 98tp conducts due diligence on all third-party service providers prior to integration and requires contractual data protection commitments, the data practices of third-party entities are ultimately governed by their own privacy policies.

98tp is not responsible for the privacy practices of game software providers, payment networks, or other third-party services that process data in connection with your 98tp account. Players are encouraged to review the privacy policies of any third-party entities whose services form part of the 98tp experience.

98tp reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date of the current version is displayed at the top of this Policy.

Where amendments are material — meaning they affect your rights or the way 98tp uses your data in a significant way — 98tp will provide advance notice via the email address registered to your account before the changes take effect. For non-material amendments such as typographical corrections or clarifications, the Policy will be updated without individual notification, though the revision date will be updated accordingly.

Your continued use of 98tp following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not accept the revised Policy, you should discontinue use of 98tp and request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or 98tp's data processing practices, please contact us using the details below:

We aim to respond to all privacy-related enquiries within forty-eight (48) hours and to resolve all substantive requests within thirty (30) days. Where a request requires additional time, we will inform you of the extension and the reason for it.

If you are not satisfied with 98tp's response to your privacy enquiry or complaint, you may have the right to escalate to the data protection supervisory authority in the jurisdiction governing 98tp's gaming licence. Details of the applicable supervisory authority are available upon request from our Data Protection team.