When you use 98kr, you share some personal information with us — your mobile number, payment details, gameplay activity. This policy explains exactly what we collect, why we collect it, how it's stored, and what your rights are. We've written it in plain language because we think that's more useful than pages of legal jargon that nobody actually reads.
Six things that matter most to players when it comes to how their data is handled on 98kr.
All personal data on 98kr is encrypted at rest and in transit. Payment information — including JazzCash, Easypaisa, and bank account details — is processed through secured channels and is never stored in plain text on 98kr servers.
98kr does not sell, rent, or trade your personal information to third-party marketers. Data shared with third parties — payment processors, fraud prevention services — is limited to what is strictly necessary for those operations and is covered by data processing agreements.
98kr collects only the data needed to operate your account, process payments in PKR, verify identity where required, and prevent fraud. We don't collect data for the sake of it — if it doesn't serve a legitimate operational purpose, we don't retain it.
You can request a copy of all personal data 98kr holds on you, request corrections to inaccurate information, or request deletion of your account and associated data. These requests are handled within a reasonable timeframe through the support channel.
Promotional notifications — bonus alerts, new game launches, PSL match day offers — are opt-in. You can turn off marketing communications at any time through your account notification settings without affecting your ability to use the platform.
If this Privacy Policy changes in a material way, 98kr will notify registered members via platform notification before the change takes effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.
This Privacy Policy applies to all individuals who access or use the 98kr platform — whether you are a registered member with an active account, a visitor browsing the platform without an account, or someone who has previously held an account that has since been closed. It governs how 98kr collects, processes, stores, and shares personal information in connection with the platform's services.
By using 98kr — including registering an account, making a deposit, playing any game, or simply browsing the site — you acknowledge that you have read this policy and consent to the data practices described within it. If you do not agree with how 98kr handles personal data, you should not use the platform.
Scope: This policy covers all data collected through the 98kr website and any associated mobile platform. It does not cover third-party websites or services that may be linked to from 98kr — those services operate under their own privacy policies which 98kr has no control over.
98kr collects personal data through three primary routes: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from third-party services used in connection with your account.
| Data Category | Examples | Collection Method |
|---|---|---|
| Account Data | Mobile number, password (hashed), registration date, account preferences | Provided by you at registration |
| Identity Data | Full name, CNIC number, date of birth, address (where verification is required) | Provided by you during verification |
| Payment Data | JazzCash number, Easypaisa account, bank account number, transaction references | Provided during deposit / withdrawal |
| Gaming Activity | Game history, bet amounts, win/loss records, session timestamps, bonus usage | Automatically recorded during gameplay |
| Technical Data | IP address, device type, browser, operating system, session duration | Automatically collected via platform |
| Communications | Support chat logs, complaint records, feedback submitted | Generated when you contact support |
Passwords are stored in irreversibly hashed format — 98kr staff cannot view your password. If you forget your password, it must be reset rather than retrieved.
Every piece of data 98kr collects has a specific purpose. We don't collect data speculatively or build profiles beyond what is needed to operate the platform responsibly and securely. The primary uses of your data are as follows:
Legal Basis: Where 98kr processes your personal data, the basis is one of: your consent (e.g. marketing communications), the performance of a contract (e.g. operating your account), a legal obligation, or a legitimate interest (e.g. fraud prevention and platform security) that does not override your fundamental privacy rights.
Payment data requires particular care and receives it. When you deposit or withdraw using JazzCash, Easypaisa, Raast, a bank account, or a card, the transaction is processed through a secure payment gateway. 98kr does not store full card numbers, CVV codes, or complete bank account credentials on its own servers.
Payment account references — such as a JazzCash mobile number or the last four digits of a bank account — are retained in association with your 98kr account for the purpose of processing future withdrawals to verified accounts and for fraud prevention (to confirm that deposits and withdrawals originate from accounts registered in your name).
98kr does not sell personal data to third parties. Data is shared with external parties only in the following circumstances, and only to the extent strictly necessary:
All third parties with whom data is shared are contractually required to handle that data securely and to use it only for the specified purpose. 98kr does not permit third-party service providers to use your data for their own marketing purposes.
No Marketing Data Sales: Your personal information — including your mobile number, name, and gaming history — is never sold to advertisers, data brokers, or any third party for commercial marketing purposes.
98kr uses cookies and similar session technologies to operate the platform. Essential cookies — which are necessary for the platform to function, maintain your login session, and remember your account preferences — are placed automatically when you use the platform. These cannot be disabled without breaking core platform functionality.
Analytical cookies, which help 98kr understand how players navigate the platform and where improvements can be made, are used in aggregate and anonymised form. They do not track your personal identity across third-party websites. Marketing cookies for third-party ad targeting are not used on the 98kr platform.
98kr implements technical and organisational security measures proportionate to the risk presented by the data being protected. These include TLS/SSL encryption on all data in transit, encrypted storage for sensitive account data, access controls that limit staff access to personal data on a need-to-know basis, regular security monitoring, and OTP-based authentication on account login and withdrawal requests.
No digital system is completely immune to security incidents. If 98kr becomes aware of a data breach that affects your personal information in a material way, we will notify affected users via their registered mobile number or platform notification within a reasonable timeframe.
Your Role in Account Security: Keep your password confidential, don't share your OTP with anyone, and use a unique password for your 98kr account that you don't use elsewhere. If you suspect your account has been accessed without your permission, contact 98kr support immediately to lock the account pending investigation.
98kr retains personal data for as long as your account is active and for a period after account closure sufficient to meet operational, legal, and dispute resolution requirements. Specific retention periods vary by data type:
After the applicable retention period, data is securely deleted or anonymised. Anonymised aggregate data (e.g. overall platform traffic patterns) may be retained indefinitely as it contains no personal identifiers.
As a user of the 98kr platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact the 98kr support team through your account dashboard:
Response Timeline: 98kr aims to respond to data rights requests within 30 days of receipt. Complex requests or those requiring identity verification before processing may take slightly longer, in which case we will notify you of the extended timeline.
The 98kr platform is strictly for users aged 18 years and over. 98kr does not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register an account or use any part of the platform.
Where 98kr identifies or has reason to believe that an account holder is under 18, the account will be suspended immediately, any balance forfeited, and the personal data associated with that account reviewed and handled in accordance with applicable child data protection requirements. If you believe a minor has registered an account on 98kr, please notify support immediately.
The 98kr platform may reference or link to third-party services in limited contexts. 98kr is not responsible for the privacy practices of any third-party service, website, or application that is not directly operated by 98kr. If you access a third-party service through any link on the platform, you do so under that service's own terms and privacy policy.
Game content on 98kr may be provided by third-party game studios and developers. These studios may process limited game-round data for the purpose of operating the game and resolving disputes. They do not receive broader account or payment data beyond what is strictly necessary for game operation.
98kr will update this Privacy Policy from time to time as the platform evolves, as data practices change, or in response to legal requirements. The date of the most recent update is displayed at the top of this page.
Where changes are material — meaning they affect how your data is used in a way that could impact your decision to continue using the platform — 98kr will provide advance notice through a platform notification sent to registered accounts. For minor administrative updates that do not change the substance of the policy, the updated page will be published without active notification.
Continuing to use 98kr after a policy update takes effect constitutes your acceptance of the revised policy. If you disagree with a change, you are entitled to close your account before the change takes effect.
If you have a question about this Privacy Policy, want to exercise a data right, or have a concern about how your personal information has been handled, you can reach the 98kr support team through the live chat feature inside your account dashboard. Support is available 24 hours a day, seven days a week.
For formal data-related requests — such as a request for all data held on your account or a deletion request — please submit through the support channel clearly stating the nature of your request. You may be asked to confirm your identity before the request is processed.
Privacy Questions: The 98kr support team handles all privacy-related queries. If your concern relates to a payment data issue or an account security matter, clearly describe the issue and the team will route it to the appropriate department. All privacy queries are treated as priority cases.