998com Privacy Policy

998com ("we", "us", "our", "the Platform") operates the online casino and sports betting service available at https://998com.net. As part of delivering our services to players across Pakistan, we necessarily collect and process certain personal information about registered users and visitors to the platform.

This Privacy Policy sets out in plain, clear terms exactly what personal data 998com collects, the purposes for which it is collected, the legal bases on which processing is carried out, who that data is shared with, how long it is retained, and the rights that users have in relation to their personal information.

998com is committed to handling personal data responsibly, transparently, and in accordance with the privacy standards applicable under its international operating licence. We take the trust Pakistani players place in us seriously — from the players in Karachi registering via JazzCash for the first time to long-standing account holders in Lahore and Islamabad — and we apply the same data protection standards across the entire user base.

Questions about this Privacy Policy or how your data is handled can be directed to our support team at any time. Contact details are provided in Section 14.

998com collects personal data through several channels: the account registration process, ongoing use of platform services, customer support interactions, and through automated means such as cookies and server logs. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name (as it appears on your CNIC or passport);
• Date of birth (collected to verify the 21+ age requirement);
• Pakistani mobile number (used as your primary account identifier and for OTP authentication);
• City of residence within Pakistan;
• Email address (where provided during registration or contact).

2.2 Identity Verification (KYC) Data

• Copy of national identity document (CNIC) or passport, where requested for Know Your Customer (KYC) verification in connection with withdrawal processing or enhanced due diligence;
• Selfie or photo confirmation where required to verify identity document ownership.

2.3 Financial & Transaction Data

• JazzCash or EasyPaisa mobile wallet number used for deposits and withdrawals;
• Bank account details (IBAN or account number) for bank transfer transactions via HBL, UBL, Meezan Bank, or other participating Pakistani financial institutions;
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment methods used;
• Note: 998com does not store full card numbers or complete payment credentials directly on its servers. Payment processing is handled by licensed third-party payment gateways.

2.4 Gaming & Betting Activity Data

• Game history, wager amounts, win/loss records, session durations;
• Sports betting selections, stake amounts, settlement outcomes;
• Bonus claims, wagering requirement progress, and promotional participation history;
• Responsible gaming tool settings (deposit limits, loss limits, session limits, self-exclusion status).

2.5 Technical & Device Data

• IP address at time of registration and each subsequent login;
• Device type, operating system, and browser version;
• Session timestamps and login history;
• Geolocation data at the network level (derived from IP address — not GPS location data).

2.6 Customer Support Data

• Records of live chat conversations, email correspondence, and any communications with the 998com support team;
• Details of complaints or disputes raised, and their resolution.

998com uses the personal data described in Section 2 for the following purposes:

998com does not use personal data for automated decision-making that produces significant legal effects on users, except in the specific context of fraud detection systems, which may trigger account flags pending human review.

998com processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the account services agreement — account creation, payment processing, game delivery, and customer support;
• Legal obligation: Processing required to comply with anti-money laundering obligations, KYC requirements under our licensing framework, and applicable regulatory directives;
• Legitimate interests: Processing carried out for fraud prevention, platform security, and improving the 998com service — where such interests are not overridden by the privacy interests of the user;
• Consent: Processing of data for direct marketing communications, where you have affirmatively opted in to receive such communications. Consent can be withdrawn at any time via account settings or by contacting support.

998com does not sell personal data to third parties. We share personal data only in the following specific circumstances:

• Payment processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other licensed Pakistani payment service providers receive the minimum data necessary to process your transaction;
• Game content providers: Licensed game studios (such as Pragmatic Play, Evolution Gaming, and others) may receive anonymised session identifiers to facilitate game delivery. They do not receive your identity or financial data;
• Identity verification services: Where KYC document verification is performed, identity document data may be processed by a licensed third-party verification service acting as a data processor under contractual data protection obligations;
• Regulatory and licensing authorities: 998com may be required to disclose account and transaction data to the authority issuing its online gaming licence, or to law enforcement agencies where required by a valid legal order;
• Fraud prevention services: Technical and device data may be shared with licensed fraud detection platforms to protect the integrity of the 998com platform and its user base.

All third parties to whom 998com discloses personal data are required to handle that data in accordance with applicable data protection obligations and are prohibited from using it for their own independent marketing or profiling purposes.

The 998com platform uses cookies and similar tracking technologies to deliver and improve the service. Cookies are small text files stored on your device when you visit the site. We use the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — these enable session management, login authentication, and security features. These cannot be disabled without affecting your ability to use the platform;
• Functional cookies: Remember your preferences such as language, display settings, and responsible gaming limit configurations across sessions;
• Analytics cookies: Used to understand how players navigate the 998com platform in aggregate — which games are accessed, how long sessions last, and where performance issues occur. Data collected via analytics cookies is anonymised and aggregated before analysis;
• Session security cookies: Used to detect and prevent fraudulent login attempts and cross-site request forgery.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impact your ability to log in and use the platform. 998com does not use third-party advertising or cross-site tracking cookies.

998com retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account registration at 998com, plus a minimum of five (5) years following account closure;
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of each transaction, in compliance with standard anti-money laundering record-keeping requirements;
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the most recent KYC review, whichever is later;
• Customer support records: Retained for a minimum of three (3) years from the date of the last relevant interaction;
• Technical and device logs: Retained for a maximum of twelve (12) months from the date of generation, unless longer retention is required for an active fraud investigation or regulatory inquiry;
• Marketing consent records: Retained for as long as your marketing opt-in remains active, plus a short period following withdrawal of consent to evidence the opt-out was processed.

When data is no longer required to be retained, it is securely deleted or anonymised in a manner that makes re-identification impossible.

998com implements technical and organisational security measures appropriate to the sensitivity of the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between user devices and 998com servers;
• Encrypted storage of sensitive account data including password hashes and identity document references;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• OTP two-factor authentication for account access, with session tokens expiring automatically after periods of inactivity;
• Regular security audits and penetration testing of the 998com platform infrastructure;
• Incident response procedures for detecting, containing, and notifying affected users of any data security breach in accordance with applicable licensing obligations.

While 998com takes reasonable and proportionate steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you believe your account has been compromised, contact 998com support immediately.

Subject to the conditions and limitations set out in applicable data protection frameworks, 998com players have the following rights in relation to their personal data:

To exercise any of these rights, contact the 998com support team with your request. We will acknowledge your request within 5 business days and respond substantively within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days with notice to you. Identity verification may be required before we process a data rights request to protect the security of your account.

The 998com platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from persons under 21 years of age. Age verification is a core part of our registration and KYC process.

If 998com identifies or is notified that an account has been registered by a person under 21 years of age, that account will be immediately suspended, all associated data reviewed, and all transactions handled in accordance with our responsible gaming and licensing obligations. Any personal data collected from a minor — to the extent it can be identified as such — will be promptly deleted following the completion of the required review and regulatory notification process.

If you are a parent or guardian and believe that a person under 21 in your household has registered a 998com account, please contact our support team immediately for assistance.

The 998com platform integrates third-party services to deliver certain features — including licensed game studios, payment processors, and identity verification providers. Each of these third parties operates under its own privacy policy and data handling practices.

998com requires all third-party service providers who process personal data on our behalf to do so under contractual data processing agreements that impose data protection obligations consistent with our own standards. However, 998com is not responsible for the independent data practices of third-party service providers beyond the scope of our contractual arrangements with them.

The 998com website does not contain links to external third-party websites. All content and navigation within the platform remains on the 998com domain. No outbound links to unaffiliated external sites are included in the platform interface.

998com may send promotional communications — including bonus offers, new game announcements, and platform updates — to players who have affirmatively opted in to receive such communications during registration or subsequently through account settings.

• Marketing communications are sent via SMS to your registered Pakistani mobile number and/or email, where provided;
• You can opt out of marketing communications at any time by updating your communication preferences in your account dashboard, or by contacting the 998com support team with an opt-out request;
• Opting out of marketing communications does not affect transactional communications required for account management — such as deposit confirmations, withdrawal notifications, and security alerts;
• 998com does not send unsolicited marketing communications to persons who have not opted in, and does not engage in SMS or email marketing to purchased third-party contact lists.

998com reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players through the platform interface, via SMS to the registered mobile number, or by email where applicable, before the revised policy takes effect.

The "Last Updated" date at the top of this document reflects the date of the most recent revision. We recommend reviewing this Privacy Policy periodically. Continued use of the 998com platform following notification of amendments constitutes acceptance of the revised policy.

If any amendment materially affects the way we process personal data that you have previously provided on the basis of consent, we will seek your fresh consent before processing continues under the new terms.

For any questions about this Privacy Policy, to exercise any of your data rights described in Section 9, or to raise a data protection concern, please contact the 998com team through the following channels:

• Live Chat Support: Available 24/7 directly through the 998com platform — the fastest way to reach our team;
• Email: [email protected] — for data rights requests, please include "Privacy Request" in your message subject line and provide the mobile number associated with your account so we can verify your identity efficiently;
• Response Time: We acknowledge all privacy-related queries within 5 business days and aim to resolve straightforward requests within 30 days.

For responsible gaming support — including self-exclusion, cooling -off periods, and deposit limit configuration — please visit our Responsible Gaming page or contact support directly for immediate assistance.