p998 Privacy Policy

1.1 The data controller responsible for the personal information collected via p998.biz is the operating entity of the p998 platform. p998 operates under international licensing applicable to online casino and sports betting services.

1.2 For all data-related enquiries, including subject access requests, deletion requests, and complaints, you may contact p998 at: [email protected]

1.3 This Privacy Policy applies to all personal data collected through p998.biz, the p998 mobile web interface, and any related p998 communications including promotional emails and SMS notifications where applicable.

2.1 p998 collects personal data in the following categories:

2.2 p998 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond KYC selfie photographs used solely for identity verification), or health data unless specifically required by law.

3.1 p998 collects personal data through the following channels:

• Direct submission: Information you provide when registering a p998 account, completing KYC, making deposits or withdrawals, or contacting p998 support.
• Automated collection: Technical and usage data collected automatically when you access p998.biz via server logs, session tracking, and browser storage (cookies and local storage).
• Third-party payment processors: Transaction metadata shared by JazzCash, Easypaisa, banking institutions, or USDT network processors when you make a payment to or from p998.
• Identity verification providers: Data received from third-party KYC and AML (anti-money laundering) screening services used to verify your identity and check against sanctions lists.

4.1 p998 processes your personal data for the following purposes and on the following legal bases:

• Account management and service delivery: Processing is necessary for the performance of the contract between you and p998 — i.e., providing betting and casino services.
• Identity verification (KYC): Processing is required to comply with p998's legal obligations under applicable anti-money laundering, know-your-customer, and age verification requirements.
• Payment processing: Processing is necessary to execute deposits, withdrawals, and refund transactions connected with your p998 account.
• Responsible gaming compliance: Processing is necessary to apply deposit limits, detect problem gambling behaviour, and enforce self-exclusion or cooling-off periods.
• Fraud and security monitoring: Processing is conducted in p998's legitimate interest to detect, investigate, and prevent fraudulent or prohibited activity on the platform.
• Marketing communications: Where you have provided explicit consent, p998 may send promotional SMS or email communications about offers and new features. Consent may be withdrawn at any time by contacting support.
• Legal and regulatory compliance: Processing is required to comply with applicable licensing conditions, audit obligations, law enforcement requests, and court orders.

5.1 p998 does not sell, rent, or commercially share your personal data with third parties for their own marketing purposes. p998 shares your data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, and banking partners receive the minimum information necessary to process your transactions.
• KYC and AML screening providers: Identity documents and personal details are shared with certified verification service providers to fulfil p998's compliance obligations.
• Game technology providers: Third-party game studios (including PG Soft and Pragmatic Play) may receive session and bet data as part of game functionality. These providers are contractually bound to use such data solely for game operation purposes.
• Law enforcement and regulators: p998 will disclose personal data to competent authorities when required by law, court order, or regulatory directive — without prior notice to the affected user where legally required.
• Corporate successors: In the event of a merger, acquisition, or sale of all or part of p998's operations, user data may be transferred to the successor entity, subject to equivalent data protection obligations.

6.1 p998 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

6.2 Specific retention periods are as follows:

• Active account data is retained for the duration of your p998 account and for a period of 5 years following account closure or the last transaction date, whichever is later.
• KYC documents (CNIC images, selfie photographs) are retained for a minimum of 5 years from the date of verification, as required by applicable AML regulations.
• Transaction records are retained for 7 years from the date of each transaction to comply with financial record-keeping requirements.
• Support communications are retained for 3 years from the date of the last interaction.
• Marketing consent records are retained until consent is withdrawn and for 2 years thereafter.

6.3 Upon expiry of applicable retention periods, p998 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

7.1 p998 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and p998 servers.
• AES-256 encryption for sensitive data at rest, including stored payment method details and identity documents.
• Role-based access controls ensuring that p998 personnel can only access personal data necessary for their job function.
• Two-factor authentication enforcement for internal administrative systems handling user data.
• Regular security audits and penetration testing of the p998 platform infrastructure.

7.2 In the event of a data breach that is reasonably likely to result in a risk to your rights or freedoms, p998 will notify affected users as soon as practicable and take all reasonable steps to mitigate the impact of the breach.

7.3 Notwithstanding the measures above, no online platform can guarantee absolute security. You use p998 at your own risk and are encouraged to maintain strong, unique passwords and enable two-factor authentication on your account.

8.1 p998 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain your login session, remember your preferences, and analyse platform performance.

8.2 The following categories of cookies are used by p998:

• Strictly necessary cookies: Required for the p998 platform to function, including session management, login state persistence, and security tokens. These cannot be disabled without breaking core functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate p998.biz — including pages visited, time spent, and device types. This data helps p998 improve the platform experience.
• Preference cookies: Store user-specific settings such as language preferences or display configurations across p998 sessions.

8.3 You may manage cookie preferences through your browser settings. However, disabling strictly necessary cookies will impair your ability to log in and use p998's core features. p998 does not use third-party advertising or retargeting cookies.

9.1 Subject to applicable data protection law, you have the following rights regarding your personal data held by p998:

• Right of access: You may request a copy of the personal data p998 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data in your p998 account.
• Right to erasure: You may request deletion of your personal data where p998 no longer has a lawful basis for retaining it. Note that this right does not apply where retention is required by law (e.g., AML record-keeping obligations).
• Right to restrict processing: You may request that p998 restrict processing of your personal data in certain circumstances, such as while a dispute is being investigated.
• Right to data portability: You may request a structured, machine-readable export of personal data you have provided to p998.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of the above rights, contact p998 at [email protected]. p998 will respond to verified requests within 30 days. p998 may request proof of identity before processing subject access or erasure requests.

10.1 p998 does not knowingly collect personal data from individuals under the age of 18. The p998 platform is strictly restricted to adults, and CNIC-based age verification is mandatory as part of the KYC process.

10.2 If p998 becomes aware that personal data has been collected from a minor, the account will be immediately closed, any deposits returned, and the data deleted from p998's systems as soon as practicable.

10.3 If you believe that a minor has accessed or registered on p998, please contact [email protected] immediately so that appropriate action can be taken.

11.1 p998 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via the mobile number or email address on file, or by a notice posted prominently on p998.biz, at least 7 days before the updated policy takes effect.

11.2 Continued use of p998 after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you must cease using p998 and request account closure.

11.3 The "Last updated" date at the top of this page reflects when this Privacy Policy was most recently revised. We encourage you to review this policy periodically.

12.1 For any privacy-related enquiry, subject access request, or complaint regarding how p998 handles your personal data, please contact the p998 data team at:

12.2 If you are dissatisfied with p998's response to a privacy complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction.