This Privacy Policy applies to all personal data processed by s98game in connection with your use of the platform at s98game.biz. By registering an account or using the platform, you acknowledge that you have read and understood this policy. All monetary values mentioned in this policy are in Pakistani Rupees (PKR).
1. Who We Are
s98game operates the online gaming and betting platform available at s98game.biz. The platform is built specifically for Pakistani players, offering PSL cricket betting, Live Casino, Aviator, poker and other gaming products in PKR through local payment methods including Easypaisa, JazzCash, NayaPay, SadaPay and bank IBFT.
For the purposes of this Privacy Policy, s98game is the data controller — meaning we determine the purposes and means of processing your personal data. When we engage third-party service providers who process data on our behalf (such as payment processors and game providers), they act as data processors under our instructions and are bound by data processing agreements.
If you have any questions about how s98game handles your personal data, or wish to exercise any of your rights under this policy, you can contact the s98game data team at support@s98game.biz with the subject line "Privacy Request". We aim to acknowledge all privacy-related correspondence within 48 hours.
2. Data We Collect
s98game collects personal data in three main ways: information you provide directly, information generated through your use of the platform, and information received from third parties in connection with payment processing and identity verification.
2.1 Information You Provide
- Full name as it appears on your CNIC
- Date of birth
- CNIC number (for KYC verification)
- Pakistani mobile phone number
- Email address
- City and province of residence
- Payment method details (Easypaisa wallet number, JazzCash number, bank account details, or card details — stored only to the extent required for transaction processing)
- Identity documents submitted for verification (CNIC scan or photograph)
- Communications you send to s98game support, including chat transcripts and email correspondence
2.2 Information Generated by Platform Use
- Login timestamps, session durations and IP addresses
- Device type, operating system and browser information
- Gaming and betting activity: games played, bet amounts, win/loss records, session history
- Deposit and withdrawal transaction history
- Bonus and VIP Club activity
- Support interaction history
- Clickstream data showing how you navigate the platform
2.3 Information from Third Parties
- Payment confirmation and transaction reference data from Easypaisa, JazzCash, NayaPay, SadaPay and partner banks
- Identity verification outcomes from KYC service providers
- Fraud risk scores from fraud prevention partners
- Technical information from analytics services used to improve platform performance
s98game does not store full payment card numbers. Card transactions are processed through a PCI-DSS compliant payment gateway. We store only the last four digits of a card and the card type for reference and fraud prevention purposes.
3. How We Use Your Data
s98game uses the personal data described in Section 2 for the following purposes. Each purpose is linked to a legal basis described in Section 4.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Name, mobile, email, date of birth | Contract performance |
| Processing deposits and withdrawals | Payment details, transaction records | Contract performance |
| Identity verification (KYC) | CNIC, name, date of birth, document images | Legal obligation |
| Anti-money-laundering compliance | Transaction history, identity data | Legal obligation |
| Fraud prevention and account security | IP addresses, device data, session info | Legitimate interest |
| Responsible gaming monitoring | Betting activity, deposit patterns, session data | Legal obligation / Legitimate interest |
| Customer support | Contact info, account history, support transcripts | Contract performance |
| VIP Club management | Gaming activity, VIP Points, tier status | Contract performance |
| Platform analytics and improvement | Clickstream, device info, session data | Legitimate interest |
| Marketing communications | Email, mobile number, gaming preferences | Consent |
s98game does not use personal data for automated decision-making that produces significant legal effects on players without human review. Where automated systems flag an account (for example, a fraud detection alert), a human member of the s98game team reviews the case before any action is taken.
4. Legal Basis for Processing
4.1 Contract Performance
Most of the data processing s98game carries out is necessary to provide you with the gaming services you signed up for. When you register an account, you enter into a contract with s98game. Processing your identity information, handling your deposits and withdrawals, managing your VIP status and providing support are all necessary to perform that contract.
4.2 Legal Obligation
s98game is required by applicable regulations to carry out identity verification (KYC), maintain transaction records, monitor for suspicious activity, and report certain types of transactions to relevant authorities. This processing is mandatory and cannot be opted out of. Failure to provide the data required for KYC and AML compliance will prevent s98game from opening or maintaining your account.
4.3 Legitimate Interest
Where processing is not strictly required for contract performance or legal compliance, s98game relies on legitimate interest where our interest in providing a safe, secure and well-functioning platform outweighs any privacy impact on players. This includes fraud detection, platform analytics, and proactive responsible gaming interventions. Players retain the right to object to processing on this basis, as described in Section 9.
4.4 Consent
Where s98game sends marketing communications — including bonus offers, promotional emails and SMS notifications — this is done on the basis of your consent, given at registration or through your account communication preferences. Consent can be withdrawn at any time without affecting your ability to use the platform.
5. Who We Share Your Data With
s98game does not sell, rent or trade your personal data to third parties for their own marketing purposes. Data is shared only in the following circumstances:
5.1 Payment Processors
To process your deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and card networks, s98game shares the minimum necessary transaction data with the relevant payment providers. These providers are independent data controllers for their own systems and their privacy practices are governed by their own policies.
5.2 Identity Verification Partners
When you submit documents for KYC verification, your identity documents and associated data may be shared with a third-party identity verification service provider contracted by s98game. This provider processes data solely on s98game's instructions and is contractually prohibited from using the data for any other purpose.
5.3 Game Content Providers
Live Casino, Aviator and certain other game products on s98game are supplied by third-party game providers. These providers receive your player ID and game-specific session data to operate the games. They do not receive your full profile data or payment information.
5.4 Fraud and Security Partners
s98game uses third-party fraud prevention and security services. These services may receive IP addresses, device fingerprints and behavioural data to calculate fraud risk scores. This is done to protect both s98game and its players.
5.5 Legal and Regulatory Disclosure
s98game will disclose personal data to law enforcement, regulatory bodies or other authorised government agencies where required to do so by law, court order, or where s98game reasonably believes disclosure is necessary to prevent fraud, money laundering, or harm to any person.
All third-party service providers who process data on behalf of s98game are bound by data processing agreements and are required to maintain appropriate technical and organisational security measures. s98game reviews these arrangements periodically.
6. Cookies and Tracking Technologies
s98game uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by your browser when you visit the s98game website. Cookies help s98game recognise your session, maintain your login state, and understand how the platform is being used.
6.1 Types of Cookies Used
- Essential cookies: Required for the platform to function. These include session cookies that keep you logged in while you navigate the site, and security cookies that protect against cross-site request forgery. These cannot be disabled.
- Functional cookies: Remember your preferences such as language settings and display preferences. Can be disabled without affecting core functionality.
- Analytics cookies: Used to understand aggregate platform usage patterns — which pages are visited, how long sessions last, and where players encounter problems. Data is aggregated and not linked to individual accounts for analytics purposes.
- Security cookies: Used by the fraud prevention and security systems to assess risk at login and during transactions.
6.2 Managing Cookies
You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies will prevent you from logging in and using the platform. Disabling analytics cookies will not affect your ability to play.
s98game does not use third-party advertising cookies or place cookies on behalf of advertising networks. The platform does not track users across third-party websites.
7. Data Security
s98game takes the security of your personal data seriously. The platform implements a range of technical and organisational security measures appropriate to the sensitivity of the data we hold and the risks associated with processing it.
7.1 Technical Measures
- TLS 1.2 / 1.3 encryption for all data transmitted between your device and s98game servers
- Encryption at rest for sensitive personal data including identity documents and payment details
- PCI-DSS compliant payment processing — full card numbers are never transmitted to or stored on s98game systems
- Multi-factor authentication options available for account login
- Automated anomaly detection for unusual account activity
- Regular security assessments of platform infrastructure
7.2 Organisational Measures
- Access to personal data is limited to s98game staff who need it for their specific role
- All staff with access to personal data receive data security training
- Third-party service providers are contractually required to maintain equivalent security standards
- Incident response procedures are in place to address data security breaches promptly
7.3 What You Can Do
Account security is a shared responsibility. s98game strongly recommends that you use a unique, strong password for your s98game account, enable any available two-factor authentication, log out of your account on shared devices, and contact s98game immediately at support@s98game.biz if you suspect unauthorised access to your account. s98game will never ask for your full password via any channel.
8. Data Retention Periods
s98game retains personal data for as long as is necessary for the purposes for which it was collected, subject to legal obligations that may require longer retention periods.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML and regulatory compliance |
| KYC documents (CNIC) | Duration of account + 5 years | Identity verification record-keeping |
| Transaction records | 5 years from transaction date | Financial regulation requirements |
| Gaming / betting history | 3 years from account closure | Dispute resolution, responsible gaming |
| Support correspondence | 3 years from last interaction | Dispute resolution reference |
| Marketing consent records | Duration of consent + 2 years | Proof of consent |
| Analytics / log data | 13 months | Platform improvement, security |
After the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (where individual players cannot be identified) may be retained indefinitely for aggregate analytics purposes.
9. Your Rights
You have the following rights in relation to the personal data s98game holds about you. To exercise any of these rights, contact support@s98game.biz with the subject line "Privacy Request — [Right Being Exercised]". s98game will respond within 30 calendar days.
Exercising your rights will not affect the lawfulness of processing carried out before you make a request. Some rights may be limited where s98game is required by law to retain or process data regardless of your request — for example, AML transaction records that must be kept for five years.
10. Children's Privacy
s98game is strictly for adults aged 18 and over. The platform does not knowingly collect personal data from anyone under 18. Age verification is part of the registration and KYC process — providing a date of birth indicating age under 18 will result in the registration being declined.
Where s98game discovers that an account has been created by or on behalf of a person under 18, the account will be suspended immediately, all funds will be withheld pending investigation, and the matter will be referred to the relevant authorities where required. Any winnings generated by an underage account will be forfeited.
If you believe a minor has accessed s98game or created an account, please contact support@s98game.biz immediately. s98game takes underage gaming extremely seriously and will act promptly on any credible report.
11. Marketing Communications
s98game sends marketing communications — including bonus offers, tournament announcements, seasonal promotions (such as Eid and PSL season campaigns), and VIP Club updates — by email and SMS to players who have opted in to receive them.
You can manage your marketing preferences at any time from your account settings under "Communication Preferences". You can opt out of email marketing, SMS marketing or both independently. Opting out of marketing communications does not affect your ability to use s98game or to receive transactional communications such as deposit confirmations, withdrawal notifications and security alerts.
s98game does not use personal data to serve targeted advertising through third-party advertising networks. Marketing communications are sent directly by s98game and are based on your own account activity and preferences — not on third-party data sources.
If you receive a marketing communication from s98game that you did not opt in to, please contact support@s98game.biz and we will investigate and ensure you are removed from the relevant list promptly.
12. Changes to This Privacy Policy
s98game may update this Privacy Policy from time to time to reflect changes in the platform, changes in the data we collect, changes in how we use data, or changes in applicable law. When changes are material, s98game will notify registered users by email at least 14 days before the updated policy takes effect.
For minor changes — such as clarifications that do not alter the substance of the policy — s98game will update the "Last updated" date at the top of this page without individual notification. It is good practice to review this page periodically, particularly if you are a regular s98game player.
Your continued use of s98game after an updated Privacy Policy takes effect constitutes your acceptance of the revised policy. If you do not accept the revised policy, you should stop using the platform and may request account closure by contacting support@s98game.biz.
The current Privacy Policy is always accessible at s98game.biz/privacy-policy. Previous versions are available on request from support@s98game.biz.
Privacy questions, data subject requests and concerns: support@s98game.biz with subject "Privacy Request". We respond within 48 hours on business days (Pakistan Standard Time).