pak998 Privacy Policy — How We Handle Your Data

pak998 ("we", "us", "our", "the Operator") operates the online betting platform accessible at https://pak998.cam ("the Platform"). In providing this Platform, we collect and process personal data relating to registered users ("you", "the User", "the Player") and visitors to the Site.

This Privacy Policy describes: what personal data we collect; the purposes for which we process it; the legal basis for that processing; how long we retain it; with whom we may share it; the security measures we apply; and the rights you hold in relation to your personal data.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated into the overall agreement between you and pak998.

For the purposes of this Privacy Policy, pak998 acts as the Data Controller in respect of personal data collected through the Platform. Contact details for data-related enquiries are provided in Section 14 (Contact Us) of this Policy.

Where pak998 engages third-party service providers (such as payment processors, KYC verification services, fraud prevention tools or analytics platforms) to process data on its behalf, those providers act as Data Processors. pak998 ensures that all Data Processors are bound by written agreements requiring them to process personal data only in accordance with pak998's instructions and to maintain appropriate security standards.

pak998 collects personal data through several distinct channels:

4.1 Registration Data

• Full name and date of birth
• Email address and mobile phone number
• City or region of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
• Username and encrypted password
• Preferred language (English / Urdu)

4.2 Identity Verification (KYC) Data

• CNIC or passport scan / photograph
• Proof of address documentation (where required)
• Selfie or liveness verification image
• Payment method ownership confirmation documentation

4.3 Financial & Transaction Data

• Deposit amounts, payment method type and transaction references
• Withdrawal requests, amounts and processing status
• Account balance history in PKR
• Bonus activation and wagering activity

4.4 Behavioural & Technical Data

• IP address, device type, browser type and operating system
• Session duration, pages visited and features accessed
• Betting history, game preferences and in-play activity
• Responsible gambling tool usage (limit settings, self-exclusion events)

4.5 Communications Data

• Support chat transcripts and email correspondence
• Dispute and complaint records
• Marketing preference selections

pak998 retains personal data only for as long as is necessary for the purposes outlined in this Policy, or as required by applicable law, regulatory obligation or legitimate business need. The following general principles apply:

• Active Accounts: Personal data associated with an active Account is retained for the duration of the Account's active status and for a defined period thereafter to satisfy post-closure legal and regulatory obligations.
• KYC Documentation: Identity verification documents are retained for the period required by the operator's licence jurisdiction's AML and record-keeping obligations, which typically extends beyond Account closure.
• Transaction Records: Financial transaction records are retained for the minimum period required under applicable financial regulations.
• Support Communications: Customer support correspondence is retained for a reasonable period to support dispute resolution, quality assurance and legal claim management.
• Marketing Data: Where processing is based on consent, data is retained until consent is withdrawn. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

Upon expiry of applicable retention periods, personal data is deleted or anonymised in a secure and irreversible manner.

pak998 does not sell, rent or trade personal data to third parties for commercial marketing purposes. We may disclose personal data to the following categories of recipients, strictly for the purposes identified:

• KYC & Identity Verification Providers: Third-party services engaged to verify identity documents, assess liveness checks and conduct age verification. These providers receive only the data necessary to perform verification and operate under binding data processing agreements.
• Payment Processing Partners: Payment infrastructure providers engaged to process deposits and withdrawals. Only the transaction and payment method data necessary to complete the transaction is shared.
• Fraud Prevention & AML Services: Third-party tools used to detect suspicious activity, verify transaction legitimacy and comply with anti-money laundering obligations.
• Platform Technology & Analytics Providers: Service providers supporting platform hosting, content delivery, technical performance and aggregated usage analytics. Data processed for analytics purposes is anonymised or aggregated where possible.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order or regulatory demand, pak998 will disclose personal data to competent authorities. We will endeavour to notify affected users where legally permissible.
• Legal & Professional Advisers: Lawyers, accountants and auditors engaged by pak998, subject to professional confidentiality obligations.

As an online platform, pak998 may transfer personal data to service providers operating in jurisdictions outside Pakistan. Where such transfers occur, pak998 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within the operator's licence jurisdiction, including:

• Transfers to jurisdictions that maintain an adequate level of data protection as assessed by the operator's licence jurisdiction's regulatory framework
• Contractual data protection clauses binding recipient service providers to equivalent data protection standards
• Binding corporate rules or equivalent intra-group transfer mechanisms where applicable

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan, including countries whose data protection laws may differ from those with which you are familiar.

pak998 uses cookies, pixel tags and similar tracking technologies on the Platform. These are small data files stored on your device when you access the Site.

Categories of Cookies Used

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or fraud prevention cookies may impair your ability to use the Platform or may prevent account login. pak998 does not use cookies for advertising retargeting on third-party websites.

pak998 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and the Platform is protected using TLS (Transport Layer Security). HTTPS is enforced site-wide.
• Encryption at Rest: Sensitive personal data held in pak998's systems is encrypted at the storage layer.
• Access Controls: Access to personal data is restricted to authorised personnel based on the principle of least privilege. All access is logged and monitored.
• Password Security: User passwords are stored in hashed and salted form — plain-text passwords are never stored or transmitted.
• KYC Document Security: Identity documents submitted through the verification portal are handled within a secure, access-controlled environment. Documents are never accessible through public-facing systems.
• Incident Response: pak998 maintains internal procedures for detecting, assessing and responding to personal data breaches. Affected users will be notified where required by applicable law.

Subject to applicable law and any overriding legitimate interests or legal obligations, you hold the following rights in relation to personal data that pak998 holds about you. Requests should be submitted to the support email set out in Section 14.

pak998 will respond to data rights requests within a reasonable timeframe. We may request verification of your identity before processing a request to ensure we are responding to the correct individual.

The pak998 Platform is strictly intended for individuals aged 18 years and over — or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect personal data from individuals under the minimum required age.

Where pak998 discovers or has reasonable cause to believe that an Account has been registered by or is being used by a minor, that Account will be immediately suspended, any balance held in the Account will be forfeited, and any personal data associated with that Account will be deleted once the investigation is complete, subject to any legal reporting obligations that may apply.

Age verification is a mandatory component of the KYC process. CNIC and passport documents submitted for verification are reviewed to confirm that the Account holder meets the minimum age requirement.

pak998 may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the Platform's features and services. Where changes are material, we will provide advance notice by publishing a prominent notice on the Platform or by contacting registered Users through their registered email address.

The date of the most recent revision is shown in the Table of Contents sidebar as the "Last updated" date. Continued use of the Platform following the publication of an updated Policy constitutes your acknowledgement of the revised terms. We encourage you to review this Policy periodically.

For any questions, concerns or requests relating to this Privacy Policy or the personal data pak998 holds about you, please contact us through the following channels. Please include your registered Account username and a clear description of your enquiry.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the Platform's Help Centre. English primary; Urdu assistance available on request.
• Subject Line Guidance: For data rights requests, please use the subject line "Data Rights Request — [Your Username]" to ensure your message is routed to the appropriate team.