Privacy Policy — 98ab

98ab ("we", "us", "our", "Platform") operates the online betting and casino website accessible at https://98ab.cam. This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, disclosure and protection of personal data we receive from users ("you", "your", "User", "Player") who visit or register on the Platform.

By accessing or using 98ab — whether by registering an account, placing a wager, browsing the Platform or contacting our support team — you acknowledge that you have read and understood this Policy and consent to our data practices as described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the complete agreement between you and 98ab.

Throughout this Policy, the following terms carry the meanings assigned below:

• "Personal Data" — any information that identifies or can reasonably identify a natural person, either directly (e.g., name, email address) or indirectly (e.g., device identifiers, account number).
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — 98ab, in its capacity as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — any third party that processes Personal Data on behalf of 98ab under a contractual arrangement and in accordance with our instructions.
• "KYC Data" — identity and address verification documents and information collected as part of the Platform's Know Your Customer compliance obligations.
• "Cookies" — small text files placed on your device by the Platform or third-party services to collect usage data and enhance your browsing experience.
• "Sensitive Data" — a subset of Personal Data that warrants enhanced protection, including financial account information, identity documents and any data that may reveal health conditions relevant to responsible gambling assessments.

We collect Personal Data through several channels. The categories of data collected, and the primary source of each, are set out below:

3.1 Registration Data

When you create an account on 98ab, we collect the information you provide directly, including:

• Full legal name and date of birth
• Residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — and country)
• Email address and contact telephone number
• Username and encrypted password
• Currency preference (e.g., PKR)

3.2 KYC & Verification Data

To comply with our identity verification obligations, we collect:

• Government-issued photo identification (e.g., CNIC, passport, driving licence)
• Proof of residential address (e.g., utility bill, bank statement)
• Proof of payment method ownership where required
• Any additional documentation requested during enhanced due diligence reviews

3.3 Financial Transaction Data

When you make deposits or withdrawal requests, we record:

• Transaction amounts, currency and timestamps
• Payment method type and masked payment instrument identifiers (e.g., last four digits of a card, wallet reference)
• Transaction outcomes and processing references

3.4 Wagering & Activity Data

We collect records of your activity on the Platform, including:

• Bets placed, markets selected, stake amounts and outcomes
• Casino games played, session durations and game outcomes
• Responsible gambling tool settings you configure (deposit limits, self-exclusion requests, etc.)
• Bonus offers accepted and wagering requirement progress

3.5 Technical & Device Data

When you access the Platform, we automatically collect:

• IP address and approximate geolocation derived from IP
• Browser type, version and operating system
• Device type and unique device identifiers
• Pages viewed, links clicked and session duration
• Referring URL and search terms used to reach the Platform

3.6 Support & Communications Data

When you contact our support team via live chat or email, we retain records of:

• The content of your communications
• The nature of your enquiry and the resolution provided
• Date, time and channel of communication

98ab processes Personal Data on the following legal bases, as appropriate to each processing activity:

Personal Data collected by 98ab is used for the following purposes:

5.1 Account Operation

To create, manage and maintain your account, including processing deposits and withdrawals, verifying your identity and eligibility, and administering bonuses and promotions in accordance with applicable terms.

5.2 Security & Fraud Prevention

To monitor for suspicious activity, detect and prevent fraud, identify unauthorised account access and investigate potential breaches of our Terms & Conditions. This includes automated and manual review of transaction patterns.

5.3 Responsible Gambling

To enable and enforce responsible gambling tools you configure (deposit limits, loss limits, session reminders, self-exclusion), to monitor for indicators of problem gambling behaviour and to proactively contact users where we have concerns about their gambling activity.

5.4 Regulatory Compliance

To meet obligations imposed by applicable licensing conditions, anti-money laundering requirements and other legal or regulatory mandates, including retaining records of transactions for required periods.

5.5 Customer Support

To respond to your enquiries, resolve disputes, process account closure requests and communicate important account updates. Support may be provided in English, and Urdu-language assistance may be available as a convenience for Pakistani users.

5.6 Platform Improvement

To analyse usage patterns, improve the platform experience, test new features and understand how users interact with different game categories, sports markets and payment options.

5.7 Marketing (With Your Consent)

Where you have opted in to receive marketing communications, we may send you information about promotions, new games, sporting events and other platform updates. You may withdraw this consent at any time by contacting support or updating your account preferences.

98ab does not sell your Personal Data to third parties. We share data only in the following circumstances and only to the extent necessary:

6.1 Service Providers (Data Processors)

We engage third-party service providers to assist with platform operation, including payment processing, identity verification, game technology, customer support infrastructure and analytics. These providers act as Data Processors under contractual agreements that restrict their use of your data to the specific services they provide on our behalf.

6.2 Legal & Regulatory Disclosure

We may disclose Personal Data to competent authorities, law enforcement agencies or regulatory bodies where required to do so by applicable law, court order or regulatory direction. In such cases, we will disclose only the minimum data required to satisfy the legal obligation.

6.3 Business Transfers

In the event of a merger, acquisition or sale of all or part of 98ab's business, Personal Data may be transferred to the relevant successor entity. We will notify affected users of any such transfer where required by applicable law.

6.4 Fraud Prevention Networks

Where we detect or reasonably suspect fraudulent activity, we may share relevant data with fraud prevention organisations or partner platforms to prevent financial crime and protect all players on the Platform.

98ab uses cookies and similar tracking technologies to operate the Platform and improve the user experience. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for core Platform functions including session management, login state and security. These cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: Collect anonymous aggregated information about how users interact with the Platform, such as pages visited and session durations. This data is used to improve the Platform's performance and content.
• Functional Cookies: Remember your preferences, such as language settings and display options, to provide a more personalised experience across sessions.
• Marketing Cookies: Used only where you have given consent. These may track your interests to enable more relevant promotional communications from 98ab.

You can control cookie preferences through your browser settings. Please be aware that disabling certain categories of cookies may impair Platform functionality. Your consent to non-essential cookies will be sought via the cookie consent mechanism on your first visit to the Platform.

We retain Personal Data for as long as is necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. Our general retention approach is as follows:

• Account Data: Retained for the duration of your active account relationship and for a further period after account closure as required by applicable retention obligations (typically a minimum of five years following closure).
• KYC Documentation: Retained for the period required by anti-money laundering regulations applicable to the Platform's operating jurisdiction.
• Transaction Records: Retained for a minimum of five years following each transaction, or longer where required by law.
• Support Communications: Retained for a period sufficient to address any follow-up queries or disputes, typically up to three years.
• Technical Log Data: Typically retained for up to 12 months, after which it is aggregated or anonymised.
• Marketing Consent Records: Retained for as long as you remain opted in, and for a further period following opt-out to demonstrate compliance.

Where data is no longer required for any identified purpose and no legal retention obligation applies, we securely delete or anonymise it in accordance with our internal data disposal procedures.

98ab implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, loss, destruction or alteration. These measures include:

• SSL/TLS encryption on all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including stored passwords (which are hashed and salted) and KYC documentation.
• Access controls limiting internal access to Personal Data to authorised personnel on a need-to-know basis.
• Regular security assessments and monitoring of Platform infrastructure.
• Two-factor authentication options for user accounts to reduce the risk of unauthorised access.

No data transmission or storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a risk to your rights, we will notify you and relevant authorities in accordance with applicable law.

The 98ab Platform and its service providers may operate infrastructure located in jurisdictions outside Pakistan. As a result, your Personal Data may be transferred to and processed in countries that may have different data protection laws than those applicable in your country of residence.

Where such transfers occur, 98ab takes appropriate steps to ensure that your Personal Data receives a level of protection consistent with this Policy, including through contractual safeguards with Data Processors and service providers.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Pakistan as described in this section, subject to the safeguards described above.

Subject to applicable law and certain exceptions, you have the following rights in relation to your Personal Data held by 98ab. To exercise any of these rights, please contact us at [email protected] with clear identification of your request.

We will respond to verified rights requests within a reasonable timeframe. We may require proof of identity before processing a request. Where a request cannot be fulfilled in full (e.g., due to a conflicting legal retention obligation), we will explain the reason.

The 98ab Platform is strictly for adults. Registration and use of the Platform is prohibited for persons under the age of 18, or the higher minimum age required by the applicable license jurisdiction.

We do not knowingly collect Personal Data from children under 18. If we become aware that a minor has registered an account or provided Personal Data to us, we will promptly close the account, delete the data and, where applicable, refund any deposits made.

Parents and guardians are encouraged to use parental control software to restrict minors' access to gambling websites. If you believe a minor has accessed the Platform, please contact us immediately at [email protected].

The 98ab Platform may reference or describe third-party services — for example, payment methods familiar to Pakistani users such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. These references are contextual only and do not constitute endorsement of or affiliation with those services.

98ab is not responsible for the privacy practices of third-party payment processors, game studios or other service providers whose technology is integrated into the Platform. Where third-party processors handle your data as independent Data Controllers, their own privacy policies will govern that processing. We encourage you to review third-party privacy policies applicable to any services you use independently of this Platform.

The Platform does not contain links to external websites. All navigation links on 98ab direct to pages within the https://98ab.cam domain.

98ab reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or Platform functionality. Where changes are material — meaning they significantly affect how we process your data or your rights — we will provide advance notice to registered users via email or a Platform notification before the revised Policy takes effect.

The "Last reviewed" date at the top of this Policy indicates when it was most recently updated. Continued use of the Platform following publication of a revised Policy constitutes acceptance of the updated terms. If you do not accept material changes, you should cease using the Platform and request account closure.

We recommend reviewing this page periodically to stay informed of how 98ab manages your Personal Data.

If you have any questions, concerns or requests relating to this Privacy Policy or our data processing practices, please contact the 98ab data team through the following channels:

• Live Chat: Available 24/7 within the Platform interface for immediate assistance.
• Email: [email protected] — please include "Privacy Enquiry" in your subject line. Do not include account passwords or full payment details in email communications.

We aim to acknowledge privacy-related enquiries within 48 hours and to resolve them within a reasonable period. Where a request involves a formal rights exercise, we will confirm receipt and provide a timeline for our response.

If you are dissatisfied with our handling of a privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. For guidance on applicable authorities, please consult independent legal advice.