At kp98, your privacy is not an afterthought — it is a core obligation. This Privacy Policy explains exactly what personal data we collect, why we collect it, how long we keep it, and what rights you have as a Pakistani player registered on our platform.
Before diving into the full legal text, here are the six foundational principles that guide how kp98 handles every piece of data you share with us.
We tell you exactly what data we collect and why. No hidden data harvesting, no unexplained tracking. Every data point we hold on your kp98 account has a clear, documented purpose stated in this Privacy Policy.
kp98 collects only the data that is strictly necessary to operate the platform, fulfil our legal obligations (including KYC and anti-money laundering requirements), and deliver a quality experience to every registered player.
All personal data held by kp98 is stored on encrypted, access-controlled servers. Sensitive data including CNIC copies, financial records, and identity documents are protected using industry-standard AES-256 encryption at rest and TLS 1.3 in transit.
You have the right to access, correct, and request deletion of your personal data at any time, subject to our legal retention obligations. kp98 processes all data rights requests within 30 calendar days of receipt through our support team.
kp98 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is shared only where strictly necessary for platform operation, legal compliance, or with your explicit consent.
We do not hold your data indefinitely. kp98 applies documented retention schedules to all categories of personal data. Once the retention period expires and there is no legal reason to extend it, your data is securely deleted from our systems.
As a kp98 player, you hold the following rights over your personal data. Submit requests to our support team at any time.
Request a full copy of all personal data kp98 holds about you, including account data, transaction history, and KYC records.
Request correction of any inaccurate or incomplete personal data held in your kp98 account. We will update records within 14 days of a verified request.
Request deletion of your personal data where there is no longer a legal basis for retention. Note: regulatory KYC and transaction records must be retained for the legally required period.
Request that kp98 temporarily halt processing of your personal data while a dispute or correction request is being resolved.
Request a structured, machine-readable export of the personal data you have provided to kp98, suitable for transfer to another service where technically feasible.
Object to kp98 processing your personal data for direct marketing purposes or where processing is based on legitimate interests rather than legal obligation.
Welcome to the kp98 Privacy Policy. kp98 ("we", "us", "our", "the Company") operates the online gaming platform accessible at kp98.org, offering cricket betting, PSL markets, live dealer casino, slot games, crash games, and related gambling entertainment services to registered players in Pakistan and other permitted territories.
This Privacy Policy ("Policy") explains how kp98 collects, processes, stores, shares, and protects the personal data of individuals who visit the kp98 website, register a Player Account, or otherwise interact with our platform. It also describes your rights as a data subject and how to exercise them.
By registering a kp98 account or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy forms part of the kp98 Terms & Conditions and should be read alongside them.
Our Commitment: kp98 is committed to handling your personal data with integrity, transparency, and in full compliance with applicable international data protection standards. Every Pakistani player who creates a kp98 account can trust that their data is held securely and used only for the purposes described in this Policy.
For the purposes of applicable data protection law, kp98 is the data controller responsible for your personal data collected through the kp98 platform. As data controller, kp98 determines the purposes and means by which your personal data is processed.
All enquiries relating to data protection, privacy rights requests, and Data Protection Officer correspondence should be directed to:
kp98 operates under international gaming licence standards and processes personal data in accordance with the data protection requirements applicable within its licensing jurisdiction.
kp98 collects the following categories of personal data from registered players and platform visitors:
Sensitive Data Note: kp98 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for age and identity verification purposes. Where facial comparison is used as part of enhanced KYC, such data is processed solely for identity verification and is not retained beyond the verification decision.
kp98 collects personal data through the following channels and mechanisms:
kp98 processes your personal data under one or more of the following legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (Player Account Agreement) |
| KYC identity and age verification | Legal obligation (anti-money laundering and gaming licence requirements) |
| Deposit and withdrawal processing | Performance of contract |
| Fraud detection and prevention | Legitimate interests (protecting the platform and its players) |
| Responsible gaming monitoring | Legal obligation and legitimate interests |
| Customer support and dispute resolution | Performance of contract and legitimate interests |
| Marketing communications (opt-in) | Consent (withdrawable at any time) |
| Platform analytics and improvement | Legitimate interests |
| Regulatory reporting and audit | Legal obligation |
kp98 uses the personal data it holds for the following specific purposes:
kp98 does not sell your personal data to third parties. We share your data only in the following limited and necessary circumstances:
kp98 engages third-party KYC service providers to conduct automated identity and age verification checks. These providers receive the identity documents and personal data you submit during the KYC process and return a verification decision to kp98. They are contractually prohibited from using your data for any purpose other than performing the verification service for kp98.
To process deposits and withdrawals, kp98 shares necessary transaction data with payment processors operating JazzCash, EasyPaisa, HBL, UBL, Meezan Bank gateway services, and cryptocurrency processing partners. Shared data is limited to what is required to execute the relevant transaction.
kp98's casino games are provided by licensed third-party game studios. These providers may receive anonymised session data (game round IDs, wager amounts, RNG seed data) as required for game integrity verification. They do not receive your name, CNIC, or contact details as part of normal game operation.
kp98 uses third-party fraud detection and cybersecurity services that process IP addresses, device fingerprints, and behavioural patterns to identify fraudulent activity. These services operate under strict data processing agreements and do not use your data for their own commercial purposes.
kp98 may be required by law, court order, or regulatory authority to disclose personal data to competent authorities. In such cases, kp98 will comply with its legal obligations and will notify affected players of such disclosure where permitted by law.
No Third-Party Marketing: kp98 will never share your email address, phone number, or personal profile with third-party advertisers, data brokers, or marketing platforms. Any promotional communications you receive from kp98 originate exclusively from kp98 and relate solely to the kp98 platform.
kp98.org uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. The following categories of cookies are used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Maintain your login session, remember language preference, enable secure page navigation | Session / up to 24 hours |
| Functional | Remember your preferred bet sizes, game lobby filters, and display settings | Up to 90 days |
| Analytics | Collect anonymised data on page visits, navigation paths, and feature usage to improve the platform | Up to 12 months |
| Security | Detect fraudulent login attempts, bot activity, and suspicious session behaviour | Session |
Essential and security cookies cannot be disabled as they are necessary for the kp98 platform to function correctly and securely. You may manage functional and analytics cookies through your browser settings. Disabling functional cookies may affect your platform experience but will not prevent you from accessing core betting and casino features.
kp98 does not use third-party advertising cookies or retargeting pixels that track your activity across external websites.
kp98 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity records | 5 years from account closure | Gaming licence and AML regulatory requirements |
| KYC documents (CNIC, passport) | 5 years from account closure | Anti-money laundering legal obligation |
| Financial transaction records | 7 years from transaction date | Financial records regulatory requirement |
| Bet & game session history | 5 years from date of activity | Dispute resolution and regulatory audit |
| Support & chat transcripts | 3 years from interaction date | Dispute resolution and quality monitoring |
| Technical & device logs | 12 months from capture date | Security monitoring and fraud detection |
| Marketing consent records | 3 years from consent withdrawal | Demonstrating compliance with consent obligations |
Upon expiry of the applicable retention period, personal data is securely deleted from kp98 systems using industry-standard data destruction methods. Where data must be retained for legal reasons beyond the standard period, the data is archived in a restricted-access environment and is not used for any operational purpose.
kp98 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:
Your Responsibility: While kp98 maintains robust security on its end, the security of your kp98 account also depends on you. Use a strong, unique password for your kp98 account, enable two-factor authentication, and never share your login credentials with anyone. kp98 support staff will never ask for your password.
kp98 operates under an international gaming licence and engages service providers — including KYC verification partners, payment processors, and game technology providers — who may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.
Where personal data is transferred internationally, kp98 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards may include:
kp98 operates an exclusively adult platform. The minimum age to register a kp98 Player Account and participate in any betting or casino activity on the platform is 21 years of age. kp98 does not knowingly collect personal data from any person under the age of 21.
Age verification is a mandatory step in the kp98 KYC process. Any account found to belong to a person under 21 years of age will be immediately suspended. All data associated with the underage account will be securely deleted upon completion of the account closure investigation, except where retention is required by applicable law.
If you are a parent or guardian and believe that a minor in your care has registered a kp98 account or submitted personal data to the platform without your knowledge, please contact kp98 support immediately at [email protected]. We will investigate and take appropriate action as a matter of priority.
Strict 21+ Policy: kp98 enforces a zero-tolerance policy on underage gambling. Age verification documents are reviewed for every registered account before withdrawal is permitted. Accounts that cannot verify the holder is 21 or older will not be permitted to withdraw funds and will be subject to closure.
As described in the "Your Data Rights at a Glance" section above, you hold several rights over your personal data held by kp98. To exercise any of these rights, please contact the kp98 Data Protection team using the following procedure:
The right to erasure is not absolute. kp98 may be required to retain certain data — particularly KYC records and financial transaction records — for the legally mandated retention periods described in Section 9. Where erasure is not possible due to a legal obligation, kp98 will inform you of the reason and the earliest date on which deletion can be performed.
If you are not satisfied with kp98's response to a data rights request, or believe kp98 is processing your personal data in violation of applicable data protection law, you have the right to lodge a complaint with the competent data protection supervisory authority in the relevant jurisdiction.
kp98 may send you promotional communications about bonuses, PSL season offers, new game releases, and platform updates. We will only send you marketing communications where you have given your explicit consent at the time of registration or subsequently opted in through your account settings.
Marketing communications from kp98 may be delivered via:
You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of marketing consent will not affect the lawfulness of any processing that took place before the withdrawal, and will not affect your ability to use the kp98 platform. You will continue to receive essential transactional communications (deposit confirmations, withdrawal notifications, security alerts, and account notices) regardless of your marketing preferences, as these are necessary for the operation of your Player Account.
The kp98 platform may from time to time contain references to third-party services, payment providers, or sports organisations. kp98 is not responsible for the privacy practices of any third-party website or service. This Privacy Policy applies solely to personal data collected and processed by kp98 through the kp98.org platform.
If you navigate to a third-party service — for example, your JazzCash or EasyPaisa mobile app when initiating a deposit — you should review the privacy policy of that third-party service independently. kp98 has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party sites or services.
kp98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, platform features, applicable law, or regulatory requirements. All changes will be published on this page at kp98.org/privacy-policy with a revised "Last Updated" date at the top of the Policy.
Where a change to this Policy is material — meaning it significantly affects how we process your personal data or the rights available to you — kp98 will notify registered players via email to their registered kp98 address and via an in-platform notification at least 14 days before the change takes effect.
Your continued use of the kp98 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the kp98 platform and may request closure of your Player Account by contacting our support team.
For all privacy-related enquiries, data rights requests, or concerns about how kp98 processes your personal data, please contact us using the details below. Our Data Protection team is available to assist you and will respond to all enquiries within 5 business days.
Important: When submitting a data rights request, always use your registered kp98 email address as the sending address so we can match your request to your account. Do not send copies of identity documents via unencrypted email — our support team will provide a secure upload link where document submission is required for identity verification purposes.
Join thousands of Pakistani players enjoying cricket betting, PSL markets, live casino, and premium slots — all in one secure platform. 21+ only. Play responsibly.