Your privacy matters to pp98. This policy explains exactly what personal data we collect from members across Karachi, Lahore, Islamabad, and all of Pakistan — how we use it, how we protect it, and what rights you have over it. We keep things transparent because that is the only way to build genuine trust with our members.
Welcome to the pp98 Privacy Policy. pp98 ("we", "us", "our") is firmly committed to protecting the privacy and personal data of every member who registers and plays on the pp98 platform at pp98.pro. This Privacy Policy sets out in clear terms what personal data we collect from you, how and why we use it, with whom we may share it, how long we retain it, and what rights you have in relation to it.
This policy applies to all personal data collected through the pp98 website (pp98.pro), our mobile-optimised web interface, live chat support system, email communications, and any other point of contact between pp98 and its members. It applies to all registered members and visitors across Pakistan, including users in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar, Multan, and all other cities.
By registering an account on pp98, making a deposit, accessing any part of our platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you must not use the pp98 platform.
This Privacy Policy forms part of the pp98 Terms and Conditions. Terms not defined here carry the meaning assigned to them in the pp98 Terms & Conditions.
For the purposes of applicable data protection legislation, pp98 acts as the Data Controller in respect of the personal data it collects and processes in connection with the operation of the pp98 platform and its associated services.
As Data Controller, pp98 determines the purposes for which and the manner in which personal data is processed. Where pp98 engages third-party service providers to process personal data on its behalf (for example, payment processors or KYC verification providers), those third parties act as Data Processors under written contractual agreements that bind them to process personal data only on pp98's documented instructions and to maintain appropriate security standards.
Licensing context: pp98 operates under an international gaming license. Our data handling obligations are shaped by both the data protection requirements embedded in our licensing framework and the general data protection principles applied by our licensing authority. Any reference to regulatory obligations in this policy should be understood in that context.
pp98 collects personal data across several categories depending on your interaction with the platform. The table below provides a structured overview of the data categories we collect, with examples of specific data points in each category.
| Category | Data Points | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, passport number, gender | Yes — KYC required |
| Contact Data | Email address, mobile phone number, residential address (city, province, postal code) | Yes — account creation |
| Financial Data | JazzCash / EasyPaisa account number, bank account details (HBL, UBL, Meezan Bank), deposit and withdrawal transaction history in PKR | Yes — payments |
| Verification Documents | Scanned / photographed copies of CNIC (front and back), passport biographic page, proof of address (utility bill, bank statement), selfie for liveness check | Yes — KYC |
| Technical Data | IP address, device type and model, operating system, browser type and version, session timestamps, login history | Automatic collection |
| Usage Data | Pages visited, games played, bets placed, cricket markets accessed, slot sessions, bonus claims, session duration | Automatic collection |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, feedback submissions | Where applicable |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, SMS, and in-platform notifications; preferred communication language | Optional |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, session time limit preferences, problem gambling assessment responses | Where applicable |
Special category data: pp98 does not intentionally collect special category personal data (such as health data, racial or ethnic origin, or religious beliefs) unless you voluntarily provide such information in the context of a responsible gaming support interaction. Any such data is handled with the highest level of sensitivity and is processed solely for the purpose of providing appropriate support.
pp98 collects personal data through the following channels and mechanisms:
pp98 uses the personal data it collects strictly for the purposes set out below. We do not use your data in any manner that is inconsistent with these stated purposes without first obtaining your explicit consent or establishing a separate legal basis.
pp98 processes your personal data on the following legal bases, which vary depending on the specific purpose of the processing activity:
pp98 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data sharing is strictly limited to the categories of recipients listed below, each bound by appropriate contractual or legal obligations:
International data transfers: pp98 operates under an international gaming license and may use service providers located outside Pakistan. Where personal data is transferred internationally, pp98 ensures that appropriate safeguards are in place — including contractual data protection clauses — to maintain an equivalent standard of protection for your data regardless of where it is processed.
pp98 uses first-party cookies and similar tracking technologies on the pp98.pro website. These technologies help us deliver a functional and secure platform experience. We do not use third-party advertising cookies or sell browsing data to ad networks.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session authentication, login state management, CSRF protection, fraud prevention tokens. These cookies are essential for the pp98 platform to function and cannot be disabled. | Session / up to 30 days |
| Functional | Remembering your language preference, display settings, responsible gaming tool configurations, and last-visited game category. These cookies improve your experience but are not strictly essential. | Up to 90 days |
| Analytics | Aggregated and anonymised data on page views, navigation paths, game session counts, and feature usage — used solely to improve pp98's platform and content. No personally identifiable information is stored in analytics cookies. | Up to 12 months |
| Security | Bot detection, rate-limiting tokens, and device fingerprint hashes used to protect the platform against automated attacks, credential stuffing, and account fraud. | Session / up to 7 days |
You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your pp98 account and using core platform features. Disabling functional cookies will reset your preferences on each visit.
pp98 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. The retention periods below reflect the minimum periods mandated by our international gaming license and applicable anti-money laundering regulations:
On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with pp98's data destruction procedures, unless a legal hold is in place (for example, in connection with ongoing litigation or a regulatory investigation).
pp98 employs a layered, defence-in-depth approach to protecting your personal data. Our security programme includes the technical, organisational, and procedural controls described below:
Your responsibility: While pp98 maintains robust security measures on its side, the security of your account also depends on you keeping your pp98 login credentials confidential. Never share your password with anyone — including pp98 support staff, who will never ask for your password. If you suspect your account has been compromised, contact the pp98 support team immediately via live chat.
As a pp98 member whose personal data we process, you have the following rights in relation to that data. These rights are not absolute — in some cases they are subject to legal or regulatory override — but pp98 will always respond to your requests in good faith and within the timeframes stated below.
Request a copy of the personal data pp98 holds about you. We will respond within 5 business days.
Request correction of inaccurate or incomplete personal data. Some corrections require documentary evidence (e.g., updated CNIC).
Request deletion of your data where we no longer have a legal basis to retain it. Note: AML and gaming license obligations override erasure requests for mandatory retention periods.
Request that we limit the processing of your data in certain circumstances — for example, while you contest its accuracy.
Request your personal data in a structured, machine-readable format so you can transfer it to another service provider.
Object to processing based on legitimate interests, including direct marketing. We will stop sending marketing communications promptly upon receipt of your objection.
Where processing is based on your consent (e.g., marketing emails), withdraw it at any time. This does not affect prior lawful processing.
If you believe pp98 has mishandled your data, you have the right to lodge a complaint with the relevant supervisory authority under our licensing jurisdiction.
How to exercise your rights: Submit any data rights request in writing to the pp98 Data Protection team at support at pp98.pro (plain text — not a clickable link). Please include your registered email address and a brief description of your request. We will verify your identity before processing the request and respond within 5 business days.
pp98 operates a strict 21+ age policy across all its services. The pp98 platform is not intended for, and must not be accessed by, any person under the age of 21. This is a non-negotiable requirement under our international gaming license and reflects our commitment to responsible gaming and the protection of minors.
pp98 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the KYC process for all pp98 members. If during our KYC review or at any other point pp98 discovers or has reasonable grounds to suspect that a member is under 21 years of age, pp98 will:
If you are a parent or guardian and you believe your child under the age of 21 has registered on the pp98 platform or provided personal data to pp98, please contact us immediately at support at pp98.pro with the subject line "Underage Account Report". We will investigate and take appropriate action as a matter of priority.
21+ only. Gambling is for adults. If you are under 21 years of age, you are not permitted to register an account, make a deposit, or play any games on the pp98 platform. Players must be 21 or older. Play responsibly.
pp98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes to applicable law or regulatory requirements, or changes to the pp98 platform and its services. The most current version of this Privacy Policy will always be available at pp98.pro/privacy-policy.
When we make material changes to this Privacy Policy — i.e., changes that meaningfully affect how we collect, use, or share your personal data — we will notify active pp98 members by email to their registered email address and by a prominent in-platform notice, providing at least 14 days' notice before the changes take effect. For non-material changes (such as clarifications of existing practices, typographical corrections, or restructuring of this document without changing its substantive content), we will update the "Last updated" date at the top of this page without proactive member notification.
Your continued use of the pp98 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you must stop using the pp98 platform and may request account closure by contacting our support team.
Version history: pp98 maintains an internal version history of this Privacy Policy. If you require a copy of a previous version of the Privacy Policy — for example, in connection with a dispute about how your data was handled at a specific point in time — you may request it by contacting support at pp98.pro.
If you have any questions, concerns, or requests relating to this Privacy Policy or to pp98's handling of your personal data, please contact the pp98 Data Protection team using the details below. We are committed to responding to all privacy-related enquiries within 5 business days.
All written privacy requests must include your registered pp98 email address and sufficient information to identify the nature of your request. pp98 will verify your identity before processing any data access, rectification, or erasure request to ensure your data is not disclosed to an unauthorised party.
Six core commitments that define how pp98 handles personal data for every member across Pakistan.
Every piece of personal data stored on pp98's servers — from your CNIC scan to your transaction history in PKR — is encrypted using AES-256, the same standard used by international financial institutions. Your data is unreadable without the correct decryption key, which is itself stored under strict access controls.
All data travelling between your device and pp98.pro is protected by TLS 1.3. This means every login from Karachi, every deposit from Lahore, and every session from Islamabad is transmitted through an encrypted channel that prevents interception or tampering by third parties.
pp98 enforces a rigorous KYC process that verifies every member's identity and confirms they are 21 or older before any real-money gaming activity is permitted. CNIC verification, liveness checks, and AML screening are applied consistently to all members regardless of their deposit level.
pp98 has a firm zero data selling policy. Your personal data — including your contact details, financial information, and gaming history — is never sold, rented, or traded to third parties for commercial or marketing purposes. Data sharing is strictly limited to service delivery and legal compliance needs.
In the unlikely event of a data breach that poses a risk to your personal data, pp98 commits to notifying affected members within 24 hours of confirming the breach. Our security team operates continuous monitoring systems designed to detect anomalies before they escalate into significant incidents.
pp98 gives you genuine control over your personal data. You can request access, rectification, erasure, and portability of your data at any time. Marketing preferences can be updated instantly through your account settings. Data rights requests receive a response within 5 business days — no runaround, no delays.
Now that you understand exactly how pp98 protects your personal data, join thousands of Pakistani players who bet on cricket, spin the slots, and win with pp98 — safely and securely.