98kr is committed to handling your personal data with transparency, care and respect. This Privacy Policy explains precisely what information we collect, why we collect it, how it is used, who it may be shared with and what rights you hold over your own data.
The following cards summarise our core privacy commitments. The full legal text below governs in all cases.
All personal data transmitted between your device and our servers is protected by TLS encryption. Stored data is secured using industry-standard access controls and encryption at rest.
98kr does not sell, rent or trade your personal information to third-party advertisers or data brokers. Your data is used only for the purposes described in this Policy.
You can request access to, correction of, or deletion of your personal data at any time by contacting our support team. We aim to respond to all data requests within 30 days.
We do not retain your data indefinitely. Retention periods are tied to specific legal, regulatory and operational purposes. When the purpose lapses, data is securely deleted or anonymised.
We explain clearly which cookies we use, their purpose and duration. Essential cookies are necessary for Platform operation; all others are described in Section 9 of this Policy.
For any privacy-related query, correction request or deletion request, contact us directly at [email protected]. We do not use automated systems to handle privacy complaints.
This Privacy Policy ("Policy") describes how 98kr ("the Platform", "we", "us", "our") collects, uses, stores, protects and, where applicable, discloses the personal data of individuals ("Users", "you") who access or use the services available at https://98kr.cam and any associated mobile interface.
By registering an account, making a deposit or otherwise using the 98kr platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. Where consent is the legal basis for processing, you may withdraw that consent at any time by contacting us — though withdrawal will not affect the lawfulness of processing carried out prior to that withdrawal.
This Policy applies to all Users regardless of location, including players accessing 98kr from cities across Pakistan such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. Where applicable local data-protection law imposes additional obligations on the Platform, we will comply with those requirements.
This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.
For the purposes of this Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, payment details, IP address and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this context, the operator of the 98kr platform. |
| "Data Processor" | A third party that processes personal data on behalf of the Data Controller in accordance with written instructions. |
| "Consent" | A freely given, specific, informed and unambiguous indication of agreement by the User to the processing of their personal data for a stated purpose. |
| "KYC Data" | Identity and source-of-funds documentation submitted during the Know Your Customer verification process, including government-issued identification and proof of address. |
| "Special Category Data" | Data revealing racial or ethnic origin, religious beliefs, health data, biometric data or other categories afforded heightened protection under applicable data-protection law. |
The Data Controller responsible for personal data processed in connection with the 98kr platform is the operator of the platform operating under the licensing jurisdiction applicable at the time of registration. Details of the Data Controller are available upon written request.
For all privacy-related correspondence, including data subject requests, please direct your communication to [email protected]. We will acknowledge receipt within five (5) business days and provide a substantive response within thirty (30) calendar days, in accordance with applicable data-protection standards.
98kr collects personal data in three primary ways: information you provide directly, information generated by your use of the Platform and information received from third parties.
| Category | Examples | When Collected |
|---|---|---|
| Account Data | Full name, date of birth, email address, username, password (hashed) | Registration |
| KYC / Identity | National ID / CNIC, passport, proof of address, selfie verification | KYC verification |
| Financial Data | Payment method type, partial account/card numbers, transaction records | Deposits & withdrawals |
| Communications | Support chat transcripts, email correspondence, submitted feedback | Customer support interactions |
| Responsible Gambling | Self-declared limits, self-exclusion requests, problem gambling questionnaires | Responsible gambling tools |
We may receive personal data from third-party KYC verification services, fraud prevention providers and payment processors where this is necessary to complete identity verification, process a transaction or investigate suspected fraudulent activity. We do not receive marketing data about you from Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah or any other payment provider — these entities are not affiliated with 98kr.
We use personal data collected from you for the following purposes:
Marketing communications: We will only send you promotional emails or notifications if you have explicitly opted in to receive them. You may opt out at any time by contacting our support team or using the unsubscribe option in any marketing email.
Where applicable data-protection law requires a lawful basis for processing, 98kr relies on the following:
98kr does not sell, rent or trade your personal data. We share personal data with third parties only in the following limited circumstances:
All third-party Data Processors engaged by 98kr are required by contract to implement appropriate technical and organisational security measures and to process personal data only in accordance with our documented instructions.
As an online platform serving users internationally, 98kr may transfer personal data to servers and service providers located in countries outside the user's country of residence, including outside Pakistan. Where such transfers occur, we take steps to ensure that an adequate level of protection is applied to the transferred data, which may include:
By using the 98kr platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan where the Platform's infrastructure, processors or service providers are located.
98kr uses cookies and similar technologies (local storage, session identifiers) to operate the Platform, improve performance and, where consent is given, support analytics. A cookie is a small text file placed on your device by your browser when you visit a website.
Most browsers allow you to control cookie settings via their privacy or settings menu. Blocking essential cookies will impair or prevent Platform access. For other cookie types, you may adjust your browser settings at any time.
98kr retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, tax or accounting obligations. The following general retention principles apply:
When retention periods expire, personal data is securely deleted or irreversibly anonymised. You may request early deletion of your personal data subject to the limitations described in Section 11.
Subject to applicable data-protection law and certain legal limitations, you have the following rights in respect of your personal data held by 98kr:
Request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared.
Request correction of inaccurate or incomplete personal data held in your account. Some corrections require KYC re-verification.
Request deletion of your personal data where it is no longer needed, subject to overriding legal retention obligations (e.g., AML requirements).
Request that we restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is resolved.
Where processing is based on consent or contract and carried out by automated means, request a structured, machine-readable copy of your data.
Object to processing based on legitimate interests, including profiling. You may also opt out of marketing communications at any time.
To exercise any of the above rights, contact us at [email protected]. We will not charge a fee for reasonable requests and will respond within 30 calendar days. We may ask for identity verification before processing a request. Some rights are subject to limitations where legal retention obligations override your right to erasure or portability.
The 98kr platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator's licensing jurisdiction or applicable local law. We do not knowingly collect personal data from persons below the applicable minimum age.
If we become aware that personal data has been collected from an individual below the minimum age, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].
Age verification: 98kr uses KYC procedures to verify the age of registered users. Providing false date-of-birth information during registration constitutes a breach of our Terms & Conditions and may constitute fraud under applicable law.
The 98kr platform may integrate third-party game content, live data feeds and payment processing interfaces. These integrations may involve limited technical data exchange necessary for their operation; all such third parties are bound by Data Processor agreements as described in Section 7.
98kr is not responsible for the privacy practices of external websites or services that you choose to access independently. Payment providers referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — operate under their own privacy policies. We reference these names for contextual familiarity only; they are not affiliated with or endorsing 98kr.
98kr reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law or Platform functionality. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered users via the email address associated with their account.
Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We recommend reviewing this Policy periodically. If any updated version materially reduces your rights or changes how we handle data you have previously provided, you have the right to close your account and request deletion of your data as described in Section 11.
For any privacy-related enquiry, data subject request or complaint, please contact the 98kr data team using the details below. We handle all privacy correspondence directly and do not route data subject requests through automated systems.
When submitting a data subject request, please include your registered email address and a clear description of the request. We may ask for identity verification before actioning any request that involves access to, correction of or deletion of personal data.
Our support team handles privacy enquiries in English and Urdu, 24 hours a day. You can also review our Terms & Conditions or visit the homepage to explore the platform.