e98com Privacy Policy – How We Protect Pakistani Players' Data

e98com is an online gaming and sports betting platform operated for the benefit of Pakistani players. For the purposes of this Privacy Policy, e98com ("we", "us", "the Platform") is the data controller responsible for the personal information collected through the e98com website and services at e98com.app.

If you have any questions about this Privacy Policy, about the data e98com holds about you, or about how your information is processed, you can reach our dedicated data protection contact at support@e98com.app. We aim to respond to all data-related enquiries within five working days.

e98com collects personal data in several ways — directly from you when you register or interact with the platform, automatically through your use of the site, and in limited cases from third-party verification services. The following table summarises the main categories of data collected:

e98com does not collect sensitive personal data such as biometric data, health records or religious information unless required specifically by applicable law and with your explicit consent. We also do not collect data on players' political views or ethnic origins for any purpose.

e98com uses the personal data it collects for specific, legitimate purposes. We do not use data for purposes beyond those listed here without notifying you and, where required, obtaining your consent.

• Account Registration and Management: To create and maintain your e98com account, verify your identity, and provide access to all platform features.
• Processing PKR Deposits and Withdrawals: To facilitate your financial transactions via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfers and Visa/Mastercard. Payment data is used solely to process transactions and comply with anti-money laundering requirements.
• Providing Gaming and Betting Services: To operate the games and markets you participate in, record your activity for account history and settle bets accurately.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints and improve the support experience based on feedback patterns.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and to implement the limits, cool-offs and self-exclusion settings you configure. e98com takes this use of data seriously as a player welfare obligation.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, account takeover attempts and any other misuse of the e98com platform.
• Legal and Regulatory Compliance: To meet obligations under applicable laws, respond to lawful requests from regulatory authorities and maintain records as required by licensing conditions.
• Marketing Communications (opt-out available): To send you relevant promotions, bonus offers and platform updates. You can opt out at any time — see Section 10.
• Platform Improvement: To analyse usage patterns, identify technical issues and improve the overall player experience on e98com.

e98com processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to deliver the services described in the e98com Terms and Conditions — including account management, payment processing and bet settlement.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements including anti-money laundering (AML), know your customer (KYC) and age verification obligations.
• Legitimate Interests: Processing carried out for e98com's legitimate business interests — including fraud prevention, platform security and improving services — where those interests do not override your privacy rights.
• Consent: For marketing communications and any other processing activity where consent is the appropriate legal basis. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

e98com does not sell your personal data. Data is shared with third parties only in the following specific circumstances, and always with appropriate data protection measures in place:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT partners and card payment processors receive only the transaction data necessary to process your PKR deposits and withdrawals.
• Identity Verification Services: Third-party KYC providers receive identity documents and verification data solely for the purpose of confirming your identity in compliance with regulatory requirements.
• Game Software Providers: Casino game providers may receive session data necessary to operate their games within the e98com platform. They are contractually prohibited from using this data for any other purpose.
• Regulatory Authorities: e98com may be required by law to share player data with licensing authorities, financial regulators or law enforcement agencies. Such sharing is carried out only in response to lawful, documented requests.
• Fraud and Security Services: Third-party fraud detection providers receive technical data (IP addresses, device fingerprints) to help identify suspicious activity on the platform.
• Business Transfers: In the event of a merger, acquisition or sale of all or part of e98com's business, player data may be transferred to the new entity. You will be notified in advance of any such transfer affecting your data.

All third parties who receive personal data from e98com are required to handle it in accordance with applicable data protection law and may not use it for any purpose beyond what is specified in their agreement with e98com.

e98com uses cookies and similar tracking technologies to make the platform work properly, understand how players use the site and improve the experience over time. The following cookie types are used:

You can manage your cookie preferences through your browser settings. Disabling analytics and preference cookies will not prevent you from using e98com but may affect how certain features behave. Essential cookies cannot be disabled without breaking core platform functionality.

e98com implements multiple layers of security to protect your personal data against unauthorised access, loss, alteration or disclosure. The key security measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and e98com servers
• Encrypted storage for sensitive data including payment details and identity documents at rest
• Role-based access controls ensuring only authorised e98com staff can access player data, with full audit logging of all access
• Two-factor authentication available for player accounts and required for all internal staff accessing backend systems
• Regular security audits and penetration testing of the e98com platform and infrastructure
• Incident response procedures to detect, contain and report any data security incidents promptly

Despite these measures, no online platform can guarantee absolute security. If you become aware of any unauthorised activity on your e98com account, contact support immediately at support@e98com.app. In the event of a data breach affecting your personal information, e98com will notify you in accordance with applicable legal requirements.

e98com retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The main retention periods are as follows:

• Account Data: Retained for the duration of your active account, plus a minimum of 5 years following account closure to comply with anti-money laundering and licensing requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in line with financial record-keeping obligations.
• KYC and Identity Verification Documents: Retained for a minimum of 5 years following the completion of the verification process or account closure, whichever is later.
• Gaming and Betting History: Retained for the lifetime of your account and for 3 years following closure, for dispute resolution and regulatory audit purposes.
• Support Communications: Retained for 3 years from the date of last contact, to support ongoing enquiries and improve service quality.
• Marketing Consent Records: Retained for the period during which consent is active, plus 3 years after withdrawal to demonstrate compliance.

When data is no longer required, e98com deletes or anonymises it securely. Anonymised data — from which you cannot be identified — may be retained for longer periods for statistical analysis and platform improvement purposes.

As a player on e98com, you have the following rights regarding your personal data. To exercise any of these rights, contact support@e98com.app. e98com will respond within 30 days of receiving a valid request.

e98com will not charge a fee for handling data rights requests in the majority of cases. If a request is manifestly unfounded or excessive, a reasonable administrative fee may apply — you will be informed before any charge is raised. Identity verification is required before personal data is disclosed or deleted to ensure we are responding to the correct individual.

e98com sends marketing communications — including email newsletters, SMS promotions and in-platform notifications — to players who have not opted out of receiving them. These communications include PSL betting offers, casino promotions, bonus announcements and VIP Club updates relevant to your activity on the platform.

You can update your marketing preferences at any time through the following methods:

• Log in to your e98com account and update communication preferences in the account settings section
• Click the unsubscribe link in any marketing email received from e98com
• Contact support at support@e98com.app with a clear opt-out request

Opting out of marketing communications will not affect your ability to use e98com or receive essential service communications — such as deposit confirmations, withdrawal notifications, bet settlement updates or account security alerts. These transactional communications are sent regardless of marketing preferences as they are necessary to operate the service.

e98com is strictly for players aged 18 years and above. The platform does not knowingly collect personal data from anyone under 18. Age verification is a mandatory part of the registration and withdrawal process at e98com, and additional checks may be triggered based on usage patterns or third-party verification flags.

If e98com becomes aware that personal data has been collected from a person under 18, the relevant account will be closed immediately, all activity will be voided and any funds deposited will be returned to the source payment method. If you have reason to believe that a person under 18 is using or attempting to use e98com, please contact us immediately at support@e98com.app.

Parents and guardians are encouraged to use family-level content filtering tools to prevent access to online gaming platforms by minors. e98com fully supports these tools and does not use any mechanisms designed to circumvent parental controls.

e98com may update this Privacy Policy from time to time to reflect changes in how the platform operates, legal requirements or data protection best practices. When material changes are made — particularly those affecting your rights or how your data is used — e98com will notify registered players via email and through an in-platform notification at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page will be revised whenever the policy changes. We encourage you to review this page periodically. Your continued use of e98com after any update constitutes acceptance of the revised Privacy Policy. If you do not accept the changes, you should stop using the platform and request account closure before the effective date of the new policy.

Minor changes — such as formatting improvements, corrections of typographical errors or clarifications that do not affect the substance of the policy — may be made without prior notice and will be reflected in the updated date shown above.

If you have questions, concerns or a complaint about how e98com handles your personal data, please contact us using the following details:

e98com will acknowledge all privacy-related enquiries within 48 hours and aim to provide a full response within 5 working days. Complex investigations may require additional time — you will be kept informed of progress throughout.

If you are not satisfied with how e98com has handled your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to e98com's operations. Details of the relevant authority are available from the support team on request.