Account Security
How s98game Keeps Your Login and Account Secure
Security is built into every step of the s98game login process. Here's what protects your account from the moment you enter your credentials to the moment you log out.
256-Bit SSL Encryption on Every Login
Every login request you make to s98game is encrypted using TLS 1.3 before it leaves your device. Your username, password and mobile number travel encrypted — they cannot be intercepted by anyone on the same network, even on a shared mobile data connection or a public Wi-Fi hotspot.
OTP-Based Two-Factor Authentication
When logging in from a new device or after a period of inactivity, s98game sends a one-time password (OTP) to your registered Pakistani mobile number via SMS. The OTP is valid for 5 minutes and is required in addition to your password. Even if someone knows your password, they cannot log in without access to your phone.
No Password Storage in Plain Text
s98game does not store passwords in plain text or reversible formats. Passwords are hashed using industry-standard cryptographic functions before being stored. s98game support staff cannot see your password — if you forget it, the only option is a reset, not a retrieval. This is the correct approach and means a data breach on the server side does not expose your password directly.
Trusted Device Recognition
When you enable "Keep me logged in" on a personal device, s98game remembers that device securely. Future logins from that same device skip OTP unless suspicious activity is detected. If your account is accessed from a new device or a different location, an OTP is always required regardless of saved credentials.
Automatic Session Timeout
For accounts where "Keep me logged in" is not selected, s98game automatically ends your session after a period of inactivity. This protects you if you leave your phone unattended or forget to log out. You can view active sessions and terminate any session remotely from your account security settings.
