98okr Privacy Policy

1 Who We Are

1.1 98okr is an internationally licensed online casino and sports betting platform serving Pakistani players. References to "98okr", "we", "us", or "our" in this Privacy Policy refer to the 98okr platform operator and its licensed gaming entity.

1.2 98okr is the data controller in respect of the personal data of Players collected through the 98okr platform. As data controller, 98okr determines the purposes and means by which your personal data is processed.

1.3 This Privacy Policy applies to all personal data collected via the 98okr website, mobile-optimised browser interface, customer support communications, and any other touchpoint through which a Pakistani player interacts with the 98okr brand.

1.4 This Privacy Policy should be read alongside the 98okr Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and 98okr.

2 Personal Data We Collect

2.1 98okr collects the following categories of personal data from Players:

2.2 98okr does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless such data is directly relevant to a specific regulatory obligation (for example, health data provided voluntarily in the context of a self-exclusion or problem gambling disclosure).

2.3 You are not required by law to provide your personal data to 98okr. However, if you do not provide the data marked as mandatory during registration or KYC, 98okr will be unable to open or maintain your account or process your transactions.

3 How We Collect Your Data

3.1 98okr collects your personal data through the following means:

Direct Collection

Data you provide directly to 98okr when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, submit feedback, or participate in promotions.

Automated Collection

Technical and usage data collected automatically as you navigate the 98okr platform, including through cookies, server logs, and analytics tools. This data is collected without requiring any active input from you and begins from the moment you visit the 98okr website.

Third-Party Sources

98okr may receive data about you from third parties including:

• Payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) — transaction confirmation data;
• KYC and identity verification service providers — identity confirmation results;
• Fraud prevention and anti-money laundering screening services — risk assessment data;
• Our licensing authority — compliance and regulatory data where applicable.

4 Why We Use Your Personal Data

4.1 98okr uses your personal data for the following defined purposes:

• Account management — creating, maintaining, and administering your 98okr account;
• Identity verification and KYC — confirming your eligibility to use the platform, including age verification (21+) and CNIC-based identity checks;
• Payment processing — processing deposits and withdrawals in PKR via your selected local payment method;
• Regulatory compliance — meeting our obligations under the terms of our international gaming licence, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements;
• Responsible gaming — monitoring gameplay patterns for indicators of problem gambling and administering responsible gaming tools such as deposit limits and self-exclusion;
• Customer support — responding to your queries, complaints, and support requests via live chat and email;
• Fraud prevention and security — detecting, investigating, and preventing fraudulent activity, duplicate accounts, and unauthorised access;
• Platform improvement — analysing aggregated usage data to improve the 98okr platform experience for Pakistani players;
• Marketing communications — sending you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications or where we have a legitimate interest in doing so.

5 Legal Basis for Processing

5.1 98okr processes your personal data on one or more of the following lawful bases:

• Contractual necessity — processing that is necessary to perform our contract with you, including account creation, KYC, payment processing, and gameplay;
• Legal obligation — processing required to comply with our regulatory obligations under our international gaming licence, including AML/CTF screening and player protection requirements;
• Legitimate interests — processing for purposes such as fraud prevention, platform security, and aggregate analytics, where our legitimate interests are not overridden by your rights and interests;
• Consent — processing for marketing communications and non-essential cookies, where you have provided your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Sharing Your Personal Data

6.1 98okr does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is shared only with the categories of recipient listed below, and only to the extent necessary for the specified purpose.

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your PKR deposits and withdrawals;
• KYC and identity verification providers — receive your CNIC details and supporting documents to perform identity and age verification;
• Fraud prevention and AML screening services — receive identifying information to screen transactions against financial crime risk databases;
• Gaming software providers — receive anonymised or pseudonymised gameplay data necessary to deliver game content and resolve technical disputes;
• Our licensing authority — receives player and transaction data as required by the terms of our international gaming licence;
• Professional advisers — lawyers, accountants, and auditors who require access to data in the course of providing professional services to 98okr, subject to obligations of confidentiality;
• Law enforcement and regulatory authorities — where required by applicable law or court order, 98okr may disclose your personal data to law enforcement agencies or regulatory bodies.

6.2 In the event that 98okr undergoes a corporate restructuring, merger, or acquisition, your personal data may be transferred to the relevant successor entity, provided that the successor entity agrees to process your data in accordance with this Privacy Policy.

7 Cookies & Tracking Technologies

7.1 The 98okr platform uses cookies and similar tracking technologies to deliver, optimise, and secure the platform experience. A cookie is a small text file placed on your device when you visit the 98okr website.

7.2 98okr uses the following categories of cookies:

• Strictly necessary cookies — essential for the platform to function, including session authentication, security tokens, and load balancing. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies — remember your preferences such as language, preferred payment method, and responsible gaming settings to provide a more personalised experience.
• Analytics cookies — collect aggregated, anonymised data about how Pakistani players use the 98okr platform, enabling us to identify performance issues and improve the user experience. Used with your consent.
• Marketing cookies — used to deliver relevant promotional content related to 98okr offers. Used with your consent only.

7.3 You can manage your cookie preferences at any time via your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the 98okr platform.

8 Data Retention

8.1 98okr retains your personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law or our licensing authority.

8.2 The following general retention periods apply:

• Account and identity data — retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with AML regulatory requirements;
• Financial transaction data — retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations;
• Customer support communications — retained for a period of three (3) years from the date of the communication;
• Technical and usage data — retained in identifiable form for up to twenty-four (24) months, after which it is anonymised for aggregate analytics purposes;
• Marketing consent records — retained for the duration of your account plus three (3) years, to demonstrate compliance with consent requirements;
• Self-exclusion and responsible gaming records — retained for the duration of your exclusion period plus a minimum of five (5) years, in accordance with licensing authority requirements.

8.3 At the end of the applicable retention period, 98okr will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you as an individual.

9 Data Security

9.1 98okr implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the 98okr platform;
• Encryption of sensitive data fields (including CNIC numbers and financial identifiers) at rest in our databases;
• Role-based access controls ensuring that 98okr staff can only access personal data to the extent necessary for their job function;
• Regular security vulnerability assessments and penetration testing of the 98okr platform;
• Two-factor authentication (2FA) available to all Players for their 98okr account;
• Secure data centre infrastructure with physical access controls.

9.2 While 98okr takes all reasonable measures to protect your personal data, no online platform can guarantee absolute security. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, 98okr will notify you and the relevant supervisory authority in accordance with applicable law.

9.3 You play an important role in keeping your 98okr account secure. You should use a strong, unique password for your 98okr account and enable 2FA. If you suspect your account has been compromised, contact 98okr support immediately at [email protected].

10 Your Data Protection Rights

10.1 Subject to applicable law and the conditions set out below, you have the following rights in relation to the personal data 98okr holds about you:

10.2 To exercise any of the above rights, submit your request in writing to [email protected] with the subject line "Data Rights Request". Please include your registered account username and a description of your request. 98okr will respond within 30 calendar days of receipt.

10.3 98okr may need to verify your identity before processing a data rights request to protect against fraudulent or unauthorised access to another person's data.

11 Children & Underage Players

11.1 During registration, all Players are required to confirm that they are at least 21 years of age. CNIC-based age verification is conducted at the point of first withdrawal to confirm this representation.

11.2 If 98okr discovers or is notified that it has inadvertently collected personal data from an individual under the age of 21, it will immediately suspend the relevant account, delete all personal data associated with that account to the extent not required for regulatory reporting purposes, and return any real-money balance held in the account.

11.3 If you are a parent or guardian and believe that a minor in your household may have registered on 98okr, please contact 98okr support immediately at [email protected].

12 Marketing Communications

12.1 With your consent, 98okr may send you marketing communications by email or SMS regarding promotions, bonuses, new game launches, and platform updates. You may provide or withdraw this consent at any time.

12.2 To opt out of marketing communications from 98okr, you may:

• Click the "unsubscribe" link in any marketing email received from 98okr;
• Update your communication preferences in your 98okr account settings; or
• Contact 98okr support at [email protected] with the subject line "Marketing Opt-Out".

12.3 Opting out of marketing communications will not affect your receipt of transactional communications related to your 98okr account, such as deposit confirmations, withdrawal notifications, or security alerts. These operational communications are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

12.4 Players who have activated self-exclusion or are subject to a cooling-off period will not receive any marketing communications from 98okr for the duration of their exclusion or cooling-off period, regardless of their marketing consent preferences.

13 International Data Transfers

13.1 98okr's platform infrastructure, including its servers and data processing systems, may be located in countries outside Pakistan. As a result, your personal data may be transferred to and processed in jurisdictions other than Pakistan.

13.2 Where your personal data is transferred internationally, 98okr takes all reasonable steps to ensure that an adequate level of protection is applied to your data, equivalent to the protections applicable in the jurisdiction of our licensing authority. This may include relying on standard contractual clauses, adequacy decisions, or other appropriate safeguards as recognised under applicable data protection law.

13.3 Your personal data is never transferred to third parties in jurisdictions that do not provide an adequate level of data protection without the implementation of appropriate safeguards.

14 Changes to This Privacy Policy

14.1 98okr reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the requirements of our licensing authority. The date of the most recent revision is displayed at the top of this page alongside the version number.

14.2 Where changes to this Privacy Policy are material — for example, where we introduce a new purpose for processing your personal data or a new category of recipient — 98okr will notify you by email to your registered address or via an on-screen notification upon your next login, at least 14 days before the change takes effect.

14.3 We encourage you to review this Privacy Policy periodically to stay informed about how 98okr protects your personal data. Continued use of the 98okr platform following notification of a material change constitutes acceptance of the updated Privacy Policy.

15 Contact Us & Complaints

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data 98okr holds about you, please contact the 98okr Data Protection team using the details below:

15.2 If you are not satisfied with 98okr's response to a privacy complaint or data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority or the dispute resolution body designated by our licensing authority.

15.3 98okr takes all privacy complaints seriously and is committed to resolving them fairly and promptly. We aim to acknowledge all privacy complaints within 5 business days and to provide a substantive response within 30 calendar days.