Section 01
Data Controller Identity
The data controller responsible for the personal information processed in connection with your use of the 98ab platform is the operating entity behind 98ab.bid ("98ab", "we", "us", "our"). 98ab operates the platform under an international gaming licence and is responsible for determining the purposes and means by which your personal data is processed.
For all data protection enquiries, privacy-related requests, or formal complaints, the designated point of contact at 98ab is the Data Protection Team, reachable at [email protected]. Correspondence should be marked "Privacy / Data Protection" to ensure it reaches the appropriate team without delay.
Our Commitment: 98ab is committed to the responsible stewardship of personal data belonging to all users of its platform — with particular sensitivity to the data of Pakistani players, whose trust in a digital gaming platform requires robust, verifiable protections.
Section 02
Scope & Application
This Privacy Policy applies to all personal data collected, processed, or stored by 98ab in connection with the operation of the 98ab online gaming platform, including:
- Data collected during account registration and the KYC (Know Your Customer) verification process;
- Data generated through your use of 98ab products, including cricket betting, live dealer casino games, slot games, and fishing games;
- Data collected through financial transactions, including deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank;
- Data collected through customer support interactions via live chat and email;
- Data collected through cookies, device identifiers, and similar tracking technologies when you access the 98ab website or mobile platform;
- Data collected through participation in promotions, surveys, or feedback activities conducted by or on behalf of 98ab.
This Policy does not apply to websites, platforms, or services operated by third parties that may be linked to or accessible from the 98ab platform. 98ab is not responsible for the data practices of such third-party services, and Players should review the privacy policies of any third-party sites they visit independently.
Section 03
Categories of Personal Data We Collect
98ab collects and processes the following categories of personal data in connection with the operation of its platform:
3.1 Identity & Contact Data
- Full legal name (as it appears on your CNIC or valid identity document);
- Date of birth (used to verify the 21+ age requirement);
- Pakistani CNIC number or passport number;
- Residential address in Pakistan (Karachi, Lahore, Islamabad, Faisalabad, or other cities);
- Email address registered with 98ab;
- Pakistani mobile phone number.
3.2 Financial & Transaction Data
- PKR deposit and withdrawal amounts, dates, and reference numbers;
- Payment method identifiers (JazzCash mobile account, EasyPaisa wallet reference, HBL/UBL/Meezan Bank account details — stored in tokenised or truncated form);
- Account balance history and wagering activity records;
- Bonus credits, wagering progress, and promotional redemption history.
3.3 Gaming & Behavioural Data
- Game session records — titles played, bet amounts, outcomes, session durations;
- Sports betting selections, stake amounts, and settlement records for cricket, PSL, football, UFC, and other markets;
- Responsible gaming tool usage — deposit limit settings, session time limits, cooling-off periods, self-exclusion requests.
3.4 Technical & Device Data
- IP address and approximate geographic location at time of login;
- Device type, operating system, and browser information;
- Session timestamps, login history, and platform navigation patterns;
- Cookies and similar tracking identifiers (see Section 7).
3.5 Communications Data
- Records of live chat and email correspondence with 98ab customer support;
- Complaint and dispute records;
- Survey responses and feedback submissions where voluntarily provided.
| Data Category |
Primary Purpose |
Retention Period |
| Identity & Contact |
Account creation, KYC verification, legal compliance |
5 years post account closure |
| Financial & Transaction |
Payment processing, AML compliance, dispute resolution |
7 years (regulatory requirement) |
| Gaming & Behavioural |
Service delivery, responsible gaming, fraud detection |
3 years post last activity |
| Technical & Device |
Security, fraud prevention, platform optimisation |
13 months rolling |
| Communications |
Support delivery, dispute resolution, quality assurance |
2 years post closure |
Section 04
How We Collect Your Data
98ab collects personal data through the following means:
- Directly from you — when you complete the 98ab registration form, submit KYC documents, make deposits or withdrawal requests, contact customer support, or participate in promotions;
- Automatically — through cookies, web beacons, device fingerprinting, and server log files when you access the 98ab platform via desktop or mobile browser;
- From payment processors — transaction confirmation data and payment status information received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when processing your PKR deposits and withdrawals;
- From identity verification providers — document verification results and fraud screening outputs received from third-party KYC providers engaged by 98ab to assist with identity verification;
- From fraud prevention and AML screening services — results of automated screening against applicable watchlists and databases as required by 98ab's licensing and compliance obligations.
Section 05
Legal Bases for Processing
98ab processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which 98ab relies are as follows:
- Contractual necessity: Processing required to perform our contract with you — including operating your 98ab account, delivering gaming services, and processing PKR transactions. Without this processing, 98ab cannot provide its services;
- Legal obligation: Processing required to comply with applicable laws, regulatory requirements, and licensing conditions — including anti-money laundering (AML) obligations, age verification requirements, and financial crime reporting duties;
- Legitimate interests: Processing carried out in pursuit of 98ab's legitimate business interests — such as fraud detection, platform security, customer support, and service improvement — where these interests are not overridden by your privacy rights;
- Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of direct marketing communications, where we rely on your opt-in consent rather than legitimate interests.
Section 06
How 98ab Uses Your Personal Data
98ab uses the personal data it collects for the following specific purposes:
- Creating and managing your 98ab player account and maintaining its security;
- Verifying your identity and age (21+ requirement) through the KYC process;
- Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank;
- Delivering 98ab gaming services — cricket betting, PSL wagering, live casino, slots, fishing games, and all other products accessible through your account;
- Calculating, crediting, and tracking bonus funds, free spins, cashback awards, and VIP programme rewards;
- Providing customer support via live chat and email, including investigating and resolving complaints and disputes;
- Detecting and preventing fraud, money laundering, collusion, multi-accounting, and other prohibited conduct;
- Enforcing the 98ab Terms and Conditions and this Privacy Policy;
- Complying with legal, regulatory, and licensing obligations including AML reporting and responsible gaming requirements;
- Analysing platform usage to improve the 98ab product offering, personalise the gaming experience, and optimise platform performance;
- Sending transactional and service communications — account notifications, withdrawal confirmations, security alerts, and policy updates;
- Where consent has been given, sending promotional communications about 98ab offers, bonuses, and new game launches.
98ab does not use your personal data for automated decision-making that produces legal or similarly significant effects, except where required by our fraud prevention and AML screening systems — in which case you have the right to request human review of any automated decision that affects your account.
Section 07
Cookies & Tracking Technologies
The 98ab platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and gather analytical data about platform usage. The following categories of cookies are used on 98ab.bid:
- Strictly Necessary Cookies: Essential for the operation of the 98ab platform — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing core platform functionality;
- Functional Cookies: Enable personalisation features such as remembering your language preferences, last-visited game categories, and certain display settings within your 98ab account;
- Analytical Cookies: Used by 98ab to understand how players navigate the platform — which game categories are most visited, where players encounter difficulties, and how the platform performs across different device types and Pakistani network connections;
- Security Cookies: Support 98ab's fraud detection and account security systems by identifying unusual login patterns or suspicious session behaviour.
You may manage non-essential cookie preferences through your browser settings or through 98ab's cookie management tool accessible from the platform's footer. Disabling certain cookies may limit some non-essential features of the 98ab platform without affecting core gaming functionality or account access.
Section 08
Third-Party Data Sharing
98ab shares personal data with carefully selected third parties only where necessary and only to the extent required for the specific purpose. The categories of third parties with whom 98ab may share your personal data are as follows:
8.1 Payment Processors
To process PKR deposits and withdrawals, 98ab shares necessary transactional data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These processors receive only the data required to complete the specific transaction and are subject to their own privacy and data security obligations.
8.2 Identity Verification Providers
To conduct KYC verification and satisfy age verification requirements, 98ab may share identity document data (CNIC scans, proof of address) with specialist third-party identity verification providers operating under contractual data processing agreements with 98ab.
8.3 Fraud Prevention and AML Services
To detect and prevent fraud, money laundering, and other financial crime, 98ab may share certain data points with AML screening and fraud prevention service providers. These providers access data strictly for the purposes of compliance screening.
8.4 Regulatory and Legal Authorities
98ab will disclose personal data to regulatory authorities, law enforcement agencies, financial intelligence units, and courts of competent jurisdiction where required by applicable law, legal process, or our gaming licence conditions — and may do so without prior notification to the Player where legally required or permitted.
8.5 Group Companies and Corporate Transactions
98ab may share personal data with its affiliated group companies for internal administrative, compliance, and operational purposes. In the event of a merger, acquisition, or sale of all or part of 98ab's business, personal data may be transferred to the relevant acquiring entity as part of that transaction, subject to equivalent privacy protections.
What We Do Not Do: 98ab does not sell, rent, trade, or otherwise provide your personal data to unaffiliated third parties for their independent marketing or commercial exploitation. Your player data is not bought or sold by 98ab.
Section 09
Data Security Measures
98ab implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- Transmission Security: All data transmitted between your device and the 98ab platform is encrypted using 256-bit SSL/TLS protocols — the same standard used by major international financial institutions;
- Storage Security: Personal and financial data is stored in access-controlled environments with role-based access permissions limiting employee access to data only where operationally necessary;
- Payment Data Tokenisation: Payment method details (JazzCash, EasyPaisa, and bank account identifiers) are tokenised, meaning that 98ab retains only a secure reference token rather than full payment credentials;
- Regular Security Testing: 98ab conducts regular independent security audits and penetration testing of its systems to identify and remediate vulnerabilities before they can be exploited;
- Incident Response: 98ab maintains a formal data breach response plan. In the event of a breach affecting your personal data, 98ab will notify affected Players and relevant authorities in accordance with applicable regulatory requirements.
While 98ab takes all reasonable steps to protect your data, no transmission over the internet or data storage system is guaranteed to be completely secure. Players play an important role in account security by maintaining strong passwords and enabling two-factor authentication — see the 98ab 98ab Login page for security guidance.
Section 10
Data Retention Periods
98ab retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law, regulation, or our gaming licence conditions. As a general guide:
- Identity and contact data is retained for a minimum of five years following permanent account closure, as required by applicable KYC and AML regulatory standards;
- Financial transaction records are retained for a minimum of seven years as required by financial crime prevention regulations applicable to licensed gaming operators;
- Gaming activity records are retained for three years following your last activity on the 98ab platform;
- Technical and device log data is retained on a rolling 13-month cycle;
- Customer support communications are retained for two years following the last interaction, or longer where required for dispute resolution purposes.
Following the expiry of the applicable retention period, personal data is securely destroyed or irreversibly anonymised so that it can no longer be associated with any individual player.
Section 11
Your Privacy Rights
As a player on the 98ab platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact 98ab's Data Protection Team at [email protected] with the subject line "Privacy Rights Request".
Right of Access
You may request a copy of the personal data held about you by 98ab, along with information about how it is being used and with whom it has been shared.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data held by 98ab. You may update certain information directly within your account settings.
Right to Erasure
In certain circumstances you may request deletion of your personal data. This right is subject to 98ab's legal and regulatory retention obligations, which may require certain data to be kept despite a deletion request.
Right to Restrict Processing
You may request that 98ab restrict its processing of your personal data in certain circumstances — for example while the accuracy of data is being disputed.
Right to Data Portability
Where technically feasible and applicable, you may request a structured, machine-readable copy of the personal data you have provided to 98ab for transfer to another data controller.
Right to Object
You may object to processing of your personal data based on 98ab's legitimate interests, including profiling for direct marketing. Where you object to direct marketing, we will cease such processing immediately.
98ab will respond to all valid privacy rights requests within 30 days of receipt. Where a request is particularly complex or where 98ab receives a high volume of requests simultaneously, the response period may be extended by a further two months, of which you will be notified in advance.
Section 12
International Data Transfers
The 98ab platform is operated internationally and certain data processing activities — including cloud hosting, identity verification, and fraud screening — may involve the transfer of personal data to countries outside Pakistan. Where such transfers occur, 98ab ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to the protections provided under this Policy and applicable data protection law.
These safeguards may include standard contractual clauses approved by relevant data protection authorities, binding corporate rules where transfers occur within the 98ab group of companies, or transfers to countries recognised as providing adequate data protection standards by applicable regulatory frameworks.
Section 13
Children's Privacy & the 21+ Requirement
The 98ab platform is strictly and exclusively for adults aged 21 years and over. 98ab does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the 98ab registration and KYC process.
If 98ab becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be promptly deleted, the associated account will be closed, and any deposits made by the underage individual will be returned in accordance with 98ab's minor account policy. Parents and guardians who believe that a person under 21 in their care has created an 98ab account should contact the Data Protection Team immediately at [email protected].
STRICTLY ENFORCED: Under-21 registration is a serious breach of 98ab's Terms and Conditions. 98ab takes all practicable steps to prevent underage gambling and co-operates fully with responsible gaming organisations and regulatory authorities on this issue.
Section 14
Marketing Communications
98ab may, with your consent, send you direct marketing communications about new game launches, promotional offers, bonus opportunities, and platform updates relevant to your interests as a Pakistani gaming enthusiast — including PSL betting specials, live casino promotions, and slot game new releases.
You may opt in to marketing communications during registration or at any time through your 98ab account settings. You may withdraw your consent and opt out of marketing communications at any time by:
- Updating your communication preferences in your 98ab account settings;
- Clicking the unsubscribe link in any marketing email sent by 98ab;
- Contacting 98ab customer support via live chat or email at [email protected] and requesting removal from marketing lists.
Withdrawal of marketing consent will not affect the receipt of transactional and service communications from 98ab — including deposit confirmations, withdrawal notifications, account security alerts, and material policy updates — which are sent as a necessary part of operating your 98ab account.
Section 15
Amendments to This Privacy Policy
98ab reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the services we offer. Where material changes are made, 98ab will notify registered Players by email to their registered address and by prominent notice on the 98ab platform for a minimum of 14 days before the changes take effect.
The current version of the 98ab Privacy Policy will always be accessible at 98ab.bid/privacy-policy, with the version number and effective date displayed at the top of the document. Players are encouraged to review the Privacy Policy periodically to stay informed of how their data is being handled.
Continued use of the 98ab platform following the effective date of any amended Privacy Policy constitutes your acceptance of the amended policy. If you do not accept the amended policy, you should cease using the 98ab platform and close your account in accordance with the procedure set out in the Terms & Conditions.
Section 16
Contact, Complaints & Regulatory Escalation
If you have any questions, concerns, or complaints about the way 98ab handles your personal data, please contact the Data Protection Team using the details below. Note that email and contact details are provided as plain text and should be copied manually:
- Data Protection Enquiries: [email protected] — subject line: "Privacy / Data Protection"
- Live Chat Support: Available 24 hours, 7 days a week via the 98ab platform — average response: 3–5 minutes
- Formal Written Complaints: Postal address available on request from 98ab support for matters requiring physical correspondence
98ab will acknowledge all data protection complaints within 5 business days and will endeavour to provide a substantive response within 30 days. Where a matter requires additional investigation, 98ab will keep you informed of progress.
If you are unsatisfied with 98ab's response to a privacy complaint, you may escalate the matter to the data protection supervisory authority applicable in your jurisdiction, or to 98ab's gaming regulator where the complaint relates to the use of your data in the context of your gaming account.
This Privacy Policy was last reviewed and updated on 01 June 2026 (Version 3.2). By using the 98ab platform after this date, you confirm your awareness of and agreement to the data practices described in this Policy.