s98com Privacy
Policy

This Privacy Policy ("Policy") is published by s98com ("the Company", "we", "us", "our") and governs the collection, use, storage, and protection of personal data relating to all individuals ("you", "the Player", "the User") who access or use the s98com platform at s98com.org and any associated mobile or digital interfaces.

s98com is committed to handling personal data responsibly, transparently, and in accordance with applicable international data protection principles. This Policy is intended to give you a clear, complete understanding of our data practices so that you can make informed decisions about your use of the platform.

This Policy applies to all personal data collected through the s98com website, account registration process, customer support interactions, payment transactions, marketing communications, and any other touchpoint through which you engage with the s98com brand. It does not apply to third-party websites or services that may be linked from the platform, as those are governed by their own independent privacy policies.

s98com collects personal data in several ways — directly from you when you register or use our services, automatically through your interaction with the platform, and from third parties where this is necessary and permitted. The categories of data we collect are described below.

s98com does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers, except where age or identity verification requirements mandate the review of identity documents containing such information, in which case such data is handled with heightened care and is not retained beyond the verification process.

s98com uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that has not been identified in this Policy without first obtaining your consent or updating this document.

• Account Management: Creating, maintaining, and administering your s98com player account, including identity verification and age confirmation.
• Service Delivery: Processing bets, deposits, withdrawals, and all gaming activity conducted through your account.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited activity.
• Regulatory Compliance: Meeting our obligations under international gaming licensing conditions, anti-money laundering requirements, and responsible gaming regulations, including Know Your Customer (KYC) procedures.
• Customer Support: Responding to your queries, resolving disputes, and providing technical assistance related to your s98com account.
• Responsible Gaming: Monitoring your gaming patterns to identify potential problem gambling indicators and applying responsible gaming interventions where appropriate.
• Platform Improvement: Analysing aggregated usage data to improve the functionality, design, and content of the s98com platform.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time.
• Legal Obligations: Retaining records and providing information to competent authorities as required by applicable law or court order.

s98com processes personal data on the following legal grounds, consistent with international data protection principles:

1. Contractual Necessity: Processing required to fulfil our obligations to you under the s98com Terms & Conditions — including account creation, bet processing, and withdrawals.
2. Legal Obligation: Processing required to comply with applicable laws, gaming licensing conditions, anti-money laundering obligations, and regulatory directives.
3. Legitimate Interests: Processing necessary for our legitimate business interests — such as fraud detection, platform security, and responsible gaming monitoring — where those interests are not overridden by your data protection rights.
4. Consent: Processing for which you have provided clear, specific, and informed consent — primarily marketing communications and optional data-sharing arrangements. Consent may be withdrawn at any time without affecting prior processing.

s98com does not sell, rent, or otherwise commercially transfer your personal data to third parties. However, in order to deliver our services, certain data is shared with carefully selected partners and service providers under strict confidentiality obligations. The categories of third parties with whom data may be shared are:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other approved payment service providers receive transaction reference data as required to process your deposits and withdrawals.
• Identity Verification Services: Third-party KYC service providers may receive identity documents for verification purposes where s98com is unable to verify identity through internal procedures alone.
• Game Content Providers: Third-party game studios whose titles are hosted on the s98com platform may receive anonymised game-play data for product performance analysis and RTP verification purposes.
• IT & Hosting Infrastructure: Cloud infrastructure and managed hosting providers that process data on s98com's behalf under binding data processing agreements.
• Regulatory & Legal Authorities: Gaming licensing bodies, financial intelligence authorities, and law enforcement agencies, where disclosure is required by applicable law, regulation, or court order.
• Responsible Gaming Organisations: In cases where a self-exclusion is requested, limited identifying data may be shared with responsible gaming bodies as part of cross-platform exclusion schemes where applicable.

All third parties with whom s98com shares personal data are contractually required to process that data only for the specific purpose for which it was shared, to implement appropriate technical and organisational security measures, and to return or securely destroy the data when it is no longer needed.

s98com retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention standards apply:

• Active Account Data: Personal and financial data associated with an active s98com account is retained for the full duration of the account's active status.
• Closed Account Data: Following voluntary or involuntary account closure, s98com retains account records — including identity verification documents, transaction history, and betting records — for a minimum period of five (5) years to meet anti-money laundering and gaming regulatory obligations.
• Customer Support Records: Live chat transcripts and support ticket records are retained for a period of two (2) years following the resolution of the relevant query.
• Marketing Data: If you withdraw consent for marketing communications, your preferences will be updated immediately. Records of the opt-out are retained to prevent accidental re-subscription.
• Technical Logs: System-generated technical logs — including server access logs and fraud detection event logs — are retained for up to twelve (12) months unless a live investigation requires longer retention.

Where data is no longer required and no legal obligation mandates its retention, s98com will securely delete or anonymise that data in a manner that prevents reconstruction or identification of the individual concerned.

The s98com platform uses cookies and similar tracking technologies to enable core platform functionality, improve the user experience, and support our security and fraud detection systems. A cookie is a small text file placed on your device when you visit a website. The cookies used on s98com are described in the table below.

s98com does not place third-party advertising cookies on the platform. You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to log into and use the s98com platform.

s98com implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the s98com platform.
• AES-256 encryption for sensitive data stored at rest in our databases.
• Multi-factor authentication options available for player accounts.
• Strict access controls ensuring that only authorised personnel with a legitimate need can access player data, on a role-based least-privilege basis.
• Regular internal and external security audits of our platform infrastructure.
• Automated fraud detection and unusual account activity monitoring systems operating around the clock.
• Incident response protocols providing for prompt investigation and notification in the event of a data breach affecting player data.

While s98com takes all reasonable precautions to protect your data, no digital platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own account credentials and for notifying s98com immediately if you suspect any unauthorised access to your account.

As an s98com player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact the s98com data team via the support channel. We will respond to all verified requests within 30 days.

• Right of Access: Request a copy of all personal data s98com holds about you, together with information about how it is being used.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: Request that we restrict processing of your data in certain circumstances — for example, while accuracy is disputed or while an objection is considered.
• Right to Portability: Request a structured, machine-readable copy of personal data you provided to s98com, where processing is based on your consent or a contract.
• Right to Object: Object to processing of your personal data where it is based on s98com's legitimate interests, including direct marketing communications.
• Right to Withdraw Consent: Withdraw any previously given consent at any time without affecting the lawfulness of prior processing.

s98com operates exclusively for adults aged 21 years and above. The platform is not directed at, marketed to, or intended for use by persons under the age of 21. s98com does not knowingly collect personal data from minors under any circumstances.

If s98com becomes aware that personal data has been collected from a person under the age of 21 — whether through a false declaration at registration or otherwise — we will immediately suspend the account concerned, delete the associated personal data as far as legally permissible, and return any remaining balance to the payment method used for the most recent deposit following identity confirmation.

We strongly encourage parents and guardians in Pakistan to make use of parental control software to restrict access to online gaming platforms on shared or household devices. If you believe a minor has registered on s98com, please contact our support team immediately via live chat.

s98com reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. Where a material change is made, we will notify registered players via their registered email address or through a prominent notice on the platform before the change takes effect.

The "Last Updated" date shown at the top of this Policy reflects the date of the most recent material revision. We encourage you to review this Policy periodically to remain informed about how s98com protects your personal data. Continued use of the s98com platform following notification of a Policy update constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by s98com, you may contact the s98com data protection team through any of the following channels:

• Live Chat: Available 24/7 via the s98com platform — select "Privacy & Data" from the support menu.
• Email: [email protected] — please include "DATA QUERY" in the subject line.
• Account Dashboard: Submit a formal data request ticket via the "Privacy & Security" section of your account settings.

We aim to respond to all privacy and data protection queries within 30 calendar days of receipt. Where a request is complex or where we require additional information to verify your identity, we may extend this period by a further 30 days and will notify you of the extension and the reason for it.

s98com takes all privacy concerns seriously. If you are not satisfied with our response to a data protection query, you have the right to lodge a complaint with your local data protection supervisory authority where one exists in your jurisdiction.