par98 Privacy
Policy

This Privacy Policy applies to all personal data collected, processed, and stored by par98 in connection with the operation of the par98.org platform and all associated services. The following definitions apply throughout this Policy:

• "par98" refers to the online gaming platform operated at par98.org, including its casino, sportsbook, and account management services.
• "Personal Data" means any information relating to an identified or identifiable individual, including but not limited to name, date of birth, address, email address, phone number, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Player" / "You" means any individual who has registered or is seeking to register an account on par98, or who otherwise accesses the par98 platform.
• "PKR" means Pakistani Rupee, the primary currency for all par98 financial transactions.
• "Third Party" means any individual or entity that is not par98 or the Player.

This Policy governs par98's data practices globally, including for players based in Karachi, Lahore, Islamabad, Faisalabad, and all other locations from which par98 is accessed. It applies to data collected through the par98 website, mobile-optimised platform, and any associated communications channels.

2.1 Registration Data. When you create a par98 account, we collect your full legal name, date of birth, residential address, email address, mobile phone number, and the username and password you choose. This information is required to open and maintain your account.

2.2 Identity Verification Data. As required by par98's international gaming license, we collect copies of identity documents such as your National Identity Card (NIC), passport, or driving licence, together with proof of address documents such as utility bills or bank statements, as part of our Know Your Customer (KYC) process.

2.3 Financial Data. We collect information necessary to process deposits and withdrawals, including JazzCash and EasyPaisa account identifiers, bank account details for IBFT transfers (such as HBL, UBL, or Meezan Bank account numbers), and Visa or Mastercard details where applicable. We do not store full card numbers on our servers.

2.4 Transaction Data. We maintain records of all deposits, withdrawals, bets, game activity, bonus usage, and account balance changes associated with your par98 account. These records are maintained for the duration required by our licensing obligations.

2.5 Technical and Device Data. We automatically collect technical data when you access par98, including your IP address, browser type and version, operating system, device type, screen resolution, time zone, and referring URL. This data is used for security, fraud prevention, and platform optimisation purposes.

2.6 Communications Data. We retain records of communications between you and par98, including support tickets, email correspondence, and live chat transcripts. These records are used to manage your account, resolve disputes, and improve our support services.

3.1 Directly from You. The majority of the Personal Data we hold is provided directly by you during account registration, KYC verification, deposit and withdrawal requests, and when you contact par98 support.

3.2 Automatically. Technical and device data is collected automatically when you access and use the par98 platform. This includes data collected through cookies, server logs, and similar tracking technologies as described in Section 9 of this Policy.

3.3 From Third Parties. In certain circumstances, par98 may receive Personal Data about you from third parties, including:

• Identity verification and KYC service providers used to confirm the authenticity of identity documents.
• Payment processors such as JazzCash, EasyPaisa, or banking partners, who may share transaction confirmation data with par98.
• Fraud detection and anti-money laundering screening services used as part of our regulatory compliance obligations.

3.4 From Publicly Available Sources. par98 may, where permitted by applicable law and required for compliance purposes, cross-reference information you provide with publicly available databases or records.

4.1 Account Operations. We use your Personal Data to create and manage your par98 account, process PKR deposits and withdrawals, verify your identity, provide access to casino games and sports betting markets, and communicate important account notifications to you.

4.2 Regulatory Compliance. par98 is obligated under its international gaming license to verify player identities, conduct anti-money laundering (AML) screening, and maintain accurate records of all gaming and financial activity. The processing of your data for these purposes is non-negotiable and is a condition of your use of par98.

4.3 Fraud Prevention and Security. We use technical and transaction data to detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other security threats. This processing protects both par98 and its players, including you.

4.4 Responsible Gaming. par98 uses your transaction and gaming activity data to monitor for signs of problem gambling behaviour and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion. This processing forms a key part of par98's commitment to player welfare.

4.5 Customer Support. Your communications data is used to respond to your support queries, manage complaints, and maintain records of dispute resolution outcomes.

4.6 Platform Improvement. Aggregated and anonymised technical and behavioural data is used to analyse platform performance, identify areas for improvement, and enhance the player experience on par98.

par98 processes your Personal Data on the following legal bases, which are consistent with internationally recognised data protection principles and our licensing obligations:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you under these Terms and Conditions, including account management, PKR transaction processing, and provision of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and our international gaming license requirements, including KYC verification, AML screening, and the maintenance of regulatory records.
• Legitimate Interests: Processing carried out in pursuit of par98's legitimate business interests, including fraud detection, platform security, and improving the player experience, where such interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent, including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.1 Service Providers. par98 shares Personal Data with carefully selected third-party service providers who assist in the operation of the platform. These include identity verification providers, payment processors (including JazzCash, EasyPaisa, and banking partners), IT infrastructure providers, and fraud detection services. All such providers are contractually required to process data only as instructed by par98 and to maintain appropriate security standards.

6.2 Gaming License Authority. par98's licensing authority may require access to certain player data and transaction records as part of regulatory oversight. par98 complies with all such lawful requests.

6.3 Law Enforcement and Regulatory Bodies. par98 may disclose Personal Data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required by law, court order, or where par98 reasonably believes such disclosure is necessary to prevent or investigate illegal activity, including financial fraud or money laundering.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of par98's business, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and its implications for the handling of your data.

6.5 No Sale of Data. par98 does not sell, rent, or trade your Personal Data to any third party for commercial marketing or advertising purposes. This commitment is absolute and unconditional.

7.1 Retention Period. par98 retains your Personal Data for as long as your account is active and for a minimum period of five (5) years following account closure, or such longer period as may be required by our licensing authority or applicable law. Transaction records, KYC documents, and gaming activity logs are subject to extended retention requirements under our regulatory obligations.

7.2 Retention After Closure. When your par98 account is closed, par98 will retain your Personal Data for the minimum period required by law and our licensing conditions. After this period, your data will be securely deleted or anonymised in a manner that prevents re-identification.

7.3 Self-Exclusion Records. Where a player has exercised self-exclusion, par98 will retain sufficient data to enforce the self-exclusion and to prevent the re-registration of excluded players. This retention serves a protective function and is in the interest of the player concerned.

8.1 Technical Safeguards. par98 implements a range of technical security measures to protect your Personal Data from unauthorised access, loss, or disclosure. These measures include 256-bit SSL/TLS encryption for all data transmissions, encrypted storage of sensitive data at rest, firewalled server infrastructure, and regular security audits and penetration testing.

8.2 Access Controls. Access to Personal Data within par98 is restricted on a need-to-know basis. Only those employees and service providers with a legitimate operational reason to access specific data categories are permitted to do so. All such access is logged and subject to review.

8.3 Payment Security. par98 does not store full payment card numbers on its servers. JazzCash and EasyPaisa transaction processing is handled through encrypted, PCI-compliant payment gateway integrations. Bank account details provided for PKR withdrawals are stored under restricted-access conditions.

8.4 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and interests, par98 will notify affected players without undue delay and will take all reasonable steps to contain the breach, assess its impact, and prevent recurrence.

9.1 What Are Cookies. Cookies are small text files placed on your device by the par98 platform when you visit the site. They are used to remember your preferences, maintain your session, and gather analytical data about how players use the platform.

9.2 Types of Cookies Used. par98 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as your preferred language settings and display options. Disabling these may affect your experience on par98.
• Analytical Cookies: Used to collect aggregated, anonymised data about how players navigate the par98 platform, enabling us to identify improvements and optimise performance.
• Security and Fraud Prevention Cookies: Used in conjunction with our fraud detection systems to identify suspicious activity and protect the integrity of player accounts and PKR transactions.

9.3 Managing Cookies. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your par98 account. Full details of the cookies used by par98 and instructions for managing them are set out in our Cookie Policy, available on request from [email protected].

As a par98 account holder, you have the following rights in relation to your Personal Data. These rights may be subject to limitations where data retention is required by law or our licensing obligations.

• Right of Access: You have the right to request a copy of the Personal Data par98 holds about you. Requests will be fulfilled within 30 days of receipt.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data held by par98. Certain data, such as KYC-verified identity information, may require documentary evidence before it can be amended.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to par98's legal and regulatory retention obligations.
• Right to Restriction: You may request that par98 restrict the processing of your Personal Data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to Object: You have the right to object to the processing of your Personal Data where par98 relies on legitimate interests as its legal basis, or where your data is used for direct marketing purposes.
• Right to Data Portability: Where processing is carried out on the basis of your consent or a contract, and by automated means, you may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where par98 processes your data on the basis of your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact par98 support by email at [email protected]. par98 will acknowledge your request within two (2) business days and will endeavour to respond substantively within 30 days.

11.1 Age Restriction. par98 is strictly a 21+ platform. par98 does not knowingly collect, process, or store Personal Data belonging to individuals under the age of 21. Age verification is conducted during the registration process and may be requested again at any point during an account's lifetime.

11.2 Discovery of Minor's Data. If par98 becomes aware that Personal Data has been collected from an individual under the age of 21, that account will be immediately suspended, any associated PKR balance will be held pending investigation, and the personal data of the minor will be deleted as swiftly as is practicable in accordance with our regulatory obligations.

11.3 Parental Concern. If you are a parent or guardian and believe that a minor in your care has registered an account on par98, please contact our support team immediately at [email protected]. par98 takes such reports extremely seriously and will act on them without delay.

12.1 Right to Amend. par98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our licensing obligations, our data processing practices, or the services offered on the par98 platform.

12.2 Notification of Changes. When material changes are made to this Policy, par98 will notify registered account holders by email to their registered address and will update the "Last Updated" date at the top of this document. In cases where changes are required to comply with legal or regulatory obligations, those changes may take immediate effect without advance notice.

12.3 Continued Use. Your continued use of par98 following the publication of an amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any amended terms, you should cease using par98 and may request account closure in accordance with the par98 Terms and Conditions.

13.1 Privacy Enquiries. If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about the way par98 handles your Personal Data, please contact our support team. We are available every day during Pakistan Standard Time (PST) business hours.

13.2 Contact Details. Privacy-related correspondence should be directed to par98 support by email at: [email protected]. Please include "Privacy" in the subject line and provide your registered account username to help us locate your records promptly.

13.3 Complaints. If you are not satisfied with par98's response to a privacy concern or data rights request, you have the right to escalate your complaint to par98's licensing authority's designated complaints and dispute resolution channel. Details of this escalation route are available upon request from par98 support.

13.4 Response Timeframes. par98 will acknowledge privacy-related enquiries within two (2) Pakistan Standard Time business days. A substantive response will be provided within thirty (30) calendar days of receipt of a complete and clearly stated request. Where a request is particularly complex or voluminous, par98 may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.