Privacy Policy – How 98ef Protects Your Personal Data

98ef is an online casino and sports betting platform operating at 98ef.pro, offering services to players in Pakistan. In the context of this Privacy Policy, "98ef", "we", "us" and "our" refer to the platform operator responsible for your personal data.

This Privacy Policy applies to all personal data collected through the 98ef website, your account, transactions, customer support interactions and any other touchpoint between you and the platform. By registering an account you confirm that you have read this policy and consent to the collection and use of your data as described here.

We collect personal data in several ways — directly from you when you register or use the platform, automatically when you interact with the site, and through identity verification processes. Here is a breakdown of the main categories:

We do not collect data we do not need. If a piece of information is not in the table above, we are generally not collecting it.

Every piece of data we collect has a specific purpose. We do not collect information on the off-chance it might be useful later. The main reasons we process your personal data are:

• Account operation: Your name, contact details and login credentials are needed to create and manage your account, process deposits and withdrawals in PKR, and keep your balance accurate.
• Identity verification (KYC): We are required to verify that you are who you say you are and that you are at least 18 years old before processing any withdrawal. This requires your CNIC and a selfie.
• Fraud prevention and security: IP addresses, device data and activity patterns help us detect suspicious behaviour, unauthorised account access and potential financial fraud. This protects both you and the platform.
• Responsible gaming: Your activity data — session length, deposit frequency, betting patterns — helps us identify signs that a player may need support and allows us to apply deposit limits or self-exclusion tools effectively.
• Customer support: When you contact support, we use your account history and transaction records to investigate and resolve your query efficiently.
• Platform improvement: Aggregated and anonymised usage data helps us understand which games and features are working well and where the platform experience can be improved.
• Communications: We use your email and mobile number to send account notifications, transaction confirmations, promotional offers (where you have opted in) and important platform updates.

KYC (Know Your Customer) verification is required before you can process your first withdrawal. This is a standard requirement across online financial platforms and exists to prevent underage gambling, identity fraud and money laundering. On 98ef, KYC involves:

• A clear photograph of the front and back of your CNIC (Computerised National Identity Card)
• A selfie photograph — a current photo of your face — used to match against the CNIC photo

KYC documents are reviewed by our verification team or an authorised third-party verification provider. The documents are stored securely and are only accessible to staff with a specific operational need to review them. Your CNIC images are never displayed on your public profile and are not shared with third parties for any purpose other than identity verification compliance.

If your KYC documents cannot be verified — for example if the images are unclear, if the name does not match your registered account name, or if the CNIC appears altered — you will be asked to resubmit. Providing fraudulent KYC documents is a serious breach of our Terms and Conditions and will result in permanent account closure.

All transactions on 98ef are processed in PKR (Pakistani Rupees). Supported payment methods include JazzCash, Easypaisa, Raast, standard bank transfers and debit cards. The specific financial data we handle in connection with your transactions includes the payment method type, the transaction amount, the transaction timestamp and a reference ID.

We do not store full card numbers or full mobile wallet credentials on our own servers. Payment processing is handled through secure third-party payment gateways that are responsible for the security of payment credentials at the point of entry. What we retain is the transaction record — amounts, method types and reference IDs — which is necessary for withdrawal processing, dispute resolution and financial compliance.

To protect against money laundering and fraud, withdrawals are processed back to the same payment method used for the corresponding deposit wherever operationally possible. This is a standard financial security requirement and is not a platform restriction aimed at creating difficulty — it is there to protect you and the integrity of the payment system.

Transaction records are retained for the period required by applicable financial compliance standards. You can view your full transaction history in your account at any time.

98ef uses cookies and similar tracking technologies to make the platform work properly and to understand how players use it. A cookie is a small file stored in your browser that helps us recognise your session, keep you logged in securely and remember your preferences.

The types of cookies we use fall into three categories:

• Essential cookies: These are necessary for the platform to function. Without them, features like your login session, account navigation and the game lobby would not work. You cannot opt out of essential cookies while using the platform.
• Analytics cookies: These help us understand aggregate usage patterns — which pages are visited most, how long players spend in the game lobby, and where users drop off. This data is anonymised and used only to improve the platform.
• Preference cookies: These remember settings you have applied — such as display preferences — so you do not need to re-apply them every session.

We do not use advertising tracking cookies or share cookie data with external advertisers. You can manage or clear cookies through your browser settings at any time. Clearing essential cookies will log you out of your account.

We do not sell your personal data to third parties, full stop. We share data only where it is strictly necessary to operate the platform, comply with legal obligations or protect against fraud. The categories of third parties who may receive data and the reason for sharing are:

• Payment processors: JazzCash, Easypaisa, Raast and bank transfer providers receive the transaction data needed to process your deposits and withdrawals. They operate under their own privacy policies and security standards.
• Identity verification providers: If we use a third-party KYC service for document verification, your CNIC images and selfie are shared with that provider solely for the purpose of verifying your identity. They are contractually prohibited from using your data for any other purpose.
• Game software providers: When you play a live casino game or a slot from a specific provider, that provider's software receives your session data — your player ID and game activity — to run the game correctly. Providers do not receive your full personal profile.
• Fraud prevention services: Anonymised technical data including IP addresses and device fingerprints may be shared with fraud detection services to identify and block fraudulent access attempts.
• Legal and regulatory requirements: Where we are required by law or by a legitimate legal process to disclose data, we will do so. We will always attempt to notify you first where legally permitted.

All third parties who receive your data are contractually required to handle it securely and to use it only for the specific purpose for which it was shared.

Data security is taken seriously at 98ef. We apply a combination of technical and operational safeguards to protect your personal data against unauthorised access, loss or disclosure:

• Encryption in transit: All data exchanged between your browser and our servers is encrypted using TLS (Transport Layer Security). The padlock icon in your browser confirms this is active when you visit the site.
• Encryption at rest: Sensitive data stored in our systems — including KYC documents and account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Personal data is accessible only to staff members with a specific operational need. Access is role-based and logged. KYC documents have additional access restrictions beyond standard account data.
• Account security: Your account is protected by your password. We strongly recommend using a unique, strong password for your 98ef account and not reusing it elsewhere. Where two-factor authentication is available, we recommend enabling it.
• Fraud monitoring: Automated systems monitor for unusual login patterns and transaction behaviour that may indicate an account has been compromised. If suspicious activity is detected, account access may be temporarily restricted while we investigate.

No system is completely immune to security incidents, but we take all reasonable steps to minimise risk and respond quickly if an issue is identified. If you notice any unauthorised activity on your account, contact support immediately.

We keep your personal data for as long as your account is active and for a defined period after account closure. Different categories of data have different retention periods based on their purpose:

• Account data (name, contact details, login history): Retained while your account is active. After account closure, retained for a minimum period required for audit and dispute resolution purposes.
• KYC documents (CNIC images, selfie): Retained for the period required by financial compliance standards following the last transaction on the account. This is typically several years and is a legal obligation, not a choice.
• Transaction records: Financial transaction records are retained for the period required by applicable financial record-keeping standards.
• Activity and game logs: Retained for 12 months from the date of activity for operational purposes including dispute resolution. Anonymised aggregated data may be retained longer for analytics.
• Support communications: Records of support interactions are retained for up to 24 months to provide context for future queries and protect both parties in the event of a dispute.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised. You can request early deletion of certain categories of data — see Section 10 for your rights in this regard.

You have meaningful rights over your personal data and we take them seriously. Here is what you can request and how:

• Right to access: You can request a copy of the personal data we hold about you. We will provide this within a reasonable timeframe after verifying your identity.
• Right to correction: If any data we hold is inaccurate — for example, a misspelled name or an incorrect date of birth — you can request that we correct it. For identity data, a revised KYC submission may be required.
• Right to deletion: You can request deletion of your personal data. We will honour this request where we do not have a legal obligation to retain the data. Note that financial transaction records and KYC documents are subject to mandatory retention periods and cannot be deleted on request during that period.
• Right to restrict processing: In certain circumstances you can ask us to restrict how we process your data — for example, while a dispute is being resolved.
• Right to withdraw consent: Where we process data based on your consent — such as sending marketing communications — you can withdraw that consent at any time. Withdrawing marketing consent does not affect the lawfulness of processing for account operation, KYC or transaction processing.

To exercise any of these rights, contact our support team with the subject line "Data Rights Request" and describe what you are requesting. We will verify your identity before processing the request and will respond within a reasonable period.

98ef is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. The KYC process — which requires a valid CNIC — is the primary control we use to verify that players are adults before withdrawals are processed.

If we discover that an account belongs to a person under 18, the account is closed immediately, any balance is forfeited and all personal data collected for that account is deleted as promptly as legally permitted. If you believe a person under 18 has registered on 98ef, please contact support immediately so the account can be reviewed.

We may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in payment or verification services, or updates to applicable standards. When we make material changes, we will notify registered players by email or through an in-platform notification before the changes take effect.

The updated policy will be published on this page with a revised "Last Updated" date. The version on this page is always the current one. If you continue using the 98ef platform after a policy update, that constitutes acceptance of the revised policy. If you do not agree with any changes, you should stop using the platform and contact support to close your account.

If you have questions about this Privacy Policy, want to exercise a data right, or have a concern about how your personal information is being handled, please contact the 98ef support team. Support is available 24 hours a day, seven days a week through live chat in the platform, or by email at the address shown in the footer of this page.

When contacting us about a data rights request, please include your registered account email or mobile number, the specific right you want to exercise, and a brief description of your request. We will verify your identity before processing any data-related request and will aim to respond within a reasonable timeframe.

If your concern relates to a specific transaction, deposit or withdrawal, please also include the relevant transaction reference number so we can locate the correct records quickly.