Privacy Policy

1. Data Controller

98f ("98f," "we," "us," "the Platform") is the data controller responsible for the personal data collected through the 98f.bio website and all associated services. As data controller, 98f determines the purposes and means of processing personal data as described in this Privacy Policy.

Questions, requests, or concerns about your personal data may be directed to the 98f support team via live chat (available 24/7 on-site) or by email at [email protected].

2. Personal Data We Collect

2.1 Registration & Account Data

When you create a 98f account, we collect the information you provide during the registration process. This includes:

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Pakistani mobile number (used as a login identifier and for two-factor authentication).
• Email address.
• Residential address.
• CNIC (Computerised National Identity Card) number, collected during KYC verification.

2.2 Payment & Transaction Data

To process deposits and withdrawals in PKR, 98f collects:

• JazzCash or Easypaisa account number associated with your 98f wallet.
• Bank account details (account title, IBAN, bank name) for bank transfer requests via HBL, UBL, Meezan Bank, or Bank Alfalah.
• USDT wallet address for cryptocurrency withdrawals.
• Transaction history including deposit amounts, withdrawal requests, and balance adjustments.

2.3 Identity Verification (KYC) Documents

As part of our anti-money-laundering obligations, 98f may collect copies of government-issued identity documents including your CNIC, passport, or driving licence, as well as proof of address documentation.

2.4 Gaming Activity Data

98f records all gaming activity conducted through your account, including bets placed, games played, game outcomes, session durations, and bonus usage. This data is essential for resolving disputes, detecting fraud, and providing responsible gaming monitoring.

2.5 Technical & Device Data

When you access 98f, we automatically collect technical data including your IP address, browser type and version, operating system, device identifiers, and login timestamps. This data is used for security monitoring, fraud detection, and platform optimisation.

3. How We Collect Your Data

98f collects personal data through the following means:

• Directly from you: Information you provide when registering, completing KYC, making deposits or withdrawals, contacting support, or completing any form on the platform.
• Automatically: Technical and device data collected via cookies, server logs, and standard web analytics tools when you access the 98f website.
• From third-party payment providers: Transaction confirmation data from JazzCash, Easypaisa, and banking partners to reconcile your PKR wallet transactions.
• From identity verification services: Confirmation data from third-party KYC verification providers used to validate identity documents.

4. How We Use Your Personal Data

98f uses the personal data we hold about you for the following purposes:

• To create, maintain, and manage your 98f account.
• To verify your identity and age (18+ requirement) as required prior to real-money play.
• To process PKR deposits and withdrawals via JazzCash, Easypaisa, and bank transfer channels.
• To detect, investigate, and prevent fraud, money laundering, and other financial crimes.
• To provide customer support via live chat and email.
• To send you transactional communications, including deposit confirmations, withdrawal notifications, and security alerts.
• To send promotional communications about 98f bonuses and offers, where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time.
• To monitor gaming activity for responsible gaming purposes, including detecting signs of problem gambling behaviour and activating player protection tools where appropriate.
• To comply with applicable anti-money-laundering frameworks, tax reporting obligations, and regulatory requirements.
• To improve the 98f platform through aggregate analytics and performance monitoring.

5. Legal Basis for Processing

98f processes your personal data on the following legal bases:

• Contract performance: Processing necessary to operate your account and provide the services you have requested, including payment processing and gaming activity management.
• Legal obligation: Processing required to comply with anti-money-laundering obligations, age verification requirements, and applicable gaming regulatory frameworks.
• Legitimate interests: Security monitoring, fraud prevention, responsible gaming monitoring, and platform improvement, where these interests do not override your fundamental rights.
• Consent: Marketing communications, where applicable. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Third Parties

98f does not sell your personal data to third parties. We share your data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and cryptocurrency processing partners receive the minimum necessary transaction data to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services used to verify identity documents receive copies of the documents you submit. These providers are contractually bound to process your data only for the purpose of verification.
• Regulatory and law enforcement bodies: 98f will disclose personal data where required by applicable law, court order, or lawful request from a competent authority, including for anti-money-laundering reporting obligations.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance partners who access data only under strict data processing agreements.

7. Data Retention

98f retains personal data for as long as necessary to fulfil the purposes described in this policy and to comply with applicable legal obligations. Specific retention periods are as follows:

• Active account data: Retained for the lifetime of your 98f account plus a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• KYC documents: Retained for a minimum of 5 years from the date of verification.
• Technical and device data: Retained for up to 24 months from collection.
• Support communications: Retained for up to 3 years from the date of last contact.

At the end of applicable retention periods, data is securely deleted or anonymised.

8. Data Security

98f implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 98f platform.
• Encrypted storage of all sensitive account and payment data at rest.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular security audits and penetration testing.
• Two-factor authentication available for all user accounts.
• Anomaly detection systems monitoring for unusual login patterns or account access.

No online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights, 98f will notify affected users in accordance with applicable notification obligations.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 98f:

• Right of access: You may request a copy of the personal data 98f holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of data you have provided to 98f.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact 98f support via live chat or email at [email protected]. We will respond within 30 days. We may require identity verification before processing a data rights request.

10. Cookies & Tracking Technologies

98f uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device. The categories of cookies used by 98f include:

• Strictly necessary cookies: Required for the platform to function. These cannot be disabled. They include session authentication cookies and security tokens.
• Functional cookies: Remember your preferences such as language settings and login state (if "remember me" is enabled).
• Analytics cookies: Aggregate, anonymised data about how users navigate the platform, used to improve the 98f user experience. No personally identifiable information is included in analytics data.

You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent normal platform use.

11. Minors

98f is strictly for users aged 18 and above. We do not knowingly collect personal data from persons under the age of 18. If we become aware that a minor has created an account or provided personal data, the account will be closed immediately and all associated data deleted, with the exception of records retained for anti-money-laundering compliance purposes.

Parents or guardians who believe a minor may have registered on 98f should contact support immediately via live chat.

12. International Data Transfers

As an online platform serving users in Pakistan and operating under international gaming frameworks, some of your personal data may be processed or stored on servers located outside Pakistan. Where this occurs, 98f ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding the protections described in this policy. This may include standard contractual clauses, data processing agreements, or other legally recognised transfer mechanisms.

13. Changes to This Privacy Policy

98f may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, registered users will be notified via email or an in-platform notification prior to the changes taking effect. The date of the most recent update is displayed at the top of this page. Your continued use of 98f after a policy update constitutes acceptance of the revised policy.

14. Contact & Data Queries

For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data, please contact the 98f support team:

• Live Chat: Available 24/7 on the 98f platform. Average response under 2 minutes.
• Email: [email protected] – response within 4 hours.

This Privacy Policy was last reviewed and updated in June 2026.