kp98 Privacy Policy

1 Who We Are

kp98 ("kp98", "we", "us", "our") is an internationally licensed online casino and sports betting platform operating at kp98.app. kp98 provides cricket betting, football betting, live casino, slot games, pirate fishing games, and related gaming services to eligible players in Pakistan and other permitted jurisdictions.

For the purposes of this Privacy Policy, kp98 is the data controller responsible for the personal data collected through the kp98 platform. We determine how and why your personal data is processed, and we are accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

Our data protection obligations are a condition of the international gaming license under which kp98 operates. Compliance with this Privacy Policy is not optional — it is a regulatory requirement that we take seriously at every level of the organisation.

2 Data We Collect

kp98 collects the following categories of personal data from players and platform visitors. We only collect data that is necessary and proportionate to the purposes for which it is being processed.

kp98 does not collect special categories of sensitive personal data (such as biometric data, health data, or political opinions) unless specifically required to fulfil a regulatory obligation, in which case explicit consent will be sought in advance.

3 How We Collect Your Data

kp98 collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or respond to a promotion.
• Automatically — through cookies, server logs, and platform analytics tools as you browse and use the kp98 platform. Technical and usage data is collected automatically on every visit, including visits by non-registered users.
• From third-party verification providers — identity verification and anti-money laundering (AML) screening services may supply supplementary data points as part of the KYC process. These providers are bound by confidentiality obligations.
• From payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT processing partners may transmit transaction confirmation data to kp98 for the purpose of crediting your account and maintaining a complete transaction record.

4 Why We Use Your Data

kp98 processes your personal data for the following purposes and on the following legal bases:

• Account creation and management — to establish and maintain your kp98 account, authenticate your identity at login, and manage account settings. Legal basis: performance of contract.
• Identity and age verification (KYC) — to verify that you are at least 21 years of age and that the identity you have provided is genuine. Legal basis: legal obligation and regulatory compliance.
• Payment processing — to process PKR deposits and withdrawals via JazzCash, EasyPaisa, bank transfer, SadaPay, and USDT TRC20. Legal basis: performance of contract.
• Fraud prevention and AML compliance — to detect and prevent fraud, money laundering, match-fixing, and any other illegal activity on the platform. Legal basis: legal obligation and legitimate interest.
• Responsible gaming — to monitor gambling patterns, identify signs of problem gambling, enforce deposit limits and self-exclusion requests, and comply with responsible gaming obligations under the kp98 gaming license. Legal basis: legal obligation.
• Platform improvement — to analyse usage data and improve the functionality, performance, and content of the kp98 platform. Legal basis: legitimate interest.
• Marketing and promotions — to send you information about kp98 bonuses, promotions, and new game launches where you have consented to receive such communications. Legal basis: consent. You may withdraw consent at any time.
• Customer support — to respond to your enquiries, resolve disputes, and maintain a record of our communications. Legal basis: performance of contract and legitimate interest.
• Regulatory reporting — to meet reporting obligations to the gaming regulatory authority under whose license kp98 operates. Legal basis: legal obligation.

kp98 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate legal basis.

5 Sharing Your Data

kp98 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below:

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and our USDT processing partner, strictly for the purpose of processing your transactions.
• Identity verification providers — third-party KYC and AML screening services that assist kp98 in verifying player identities and screening for money laundering risk.
• Game software providers — certified game studios and live casino operators whose games are accessible through the kp98 platform may receive limited session data to deliver their games correctly. All such providers are bound by appropriate data processing agreements.
• Regulatory authorities — kp98 may be required to disclose player data to the gaming regulatory authority under whose license kp98 operates, or to other competent authorities (including law enforcement agencies) where required by law or court order.
• Group companies — kp98 may share data with affiliated entities within the same corporate group for internal administrative purposes, subject to the same privacy standards as set out in this policy.

6 Payment Data & Financial Privacy

kp98 takes the protection of your financial data particularly seriously. The following specific measures apply to the processing of payment-related personal data:

• Full payment account credentials (JazzCash PIN, EasyPaisa PIN, bank account passwords) are never stored by kp98. Payments are processed through the relevant payment gateway, not directly by kp98 servers.
• Bank account numbers and mobile wallet numbers are stored in encrypted form and are accessible only to authorised kp98 finance staff on a need-to-know basis.
• USDT TRC20 wallet addresses provided for withdrawal purposes are stored securely and are not shared with any third party other than the blockchain network through which the transaction is executed.
• Transaction records — including deposit amounts, withdrawal amounts, and transaction timestamps in PKR — are retained for a minimum of five (5) years to comply with anti-money laundering record-keeping requirements.
• kp98 will never ask you to share your JazzCash PIN, EasyPaisa PIN, internet banking password, or any similar credential through any channel, including live chat or email. If you receive such a request purporting to be from kp98, treat it as fraudulent and report it to support immediately.

7 Cookies & Tracking Technologies

kp98 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the kp98 platform. Cookies allow the platform to recognise your device, maintain your session, and remember your preferences.

kp98 uses the following categories of cookies:

• Strictly Necessary Cookies — essential for the platform to function. These cookies enable core features such as logging in, maintaining your session, and processing transactions. They cannot be disabled without preventing the platform from working.
• Performance & Analytics Cookies — used to collect aggregated and anonymised data about how players use the kp98 platform. This helps us identify popular features, diagnose technical problems, and improve the overall user experience.
• Functionality Cookies — used to remember your preferences (such as language and display settings) so you do not have to re-enter them on each visit.
• Marketing Cookies — used to deliver relevant promotions and bonus offers to players based on their platform activity and preferences, where consent has been provided.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the kp98 platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate.

8 Data Retention

kp98 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as required by applicable law, or as specified in our gaming license obligations. The following general retention periods apply:

• Active account data — retained for the duration of your account being active on the kp98 platform plus a minimum of five (5) years following account closure, to comply with AML and gaming regulatory requirements.
• Transaction records — retained for a minimum of five (5) years from the date of the transaction, as required by anti-money laundering legislation.
• Identity verification documents — retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Support communications — retained for three (3) years from the date of the last communication, unless a dispute remains unresolved, in which case they are retained until the dispute is fully resolved.
• Marketing consent records — retained for the duration of your consent and for three (3) years following withdrawal of consent, to demonstrate compliance.
• Technical and usage data — aggregated and anonymised after thirteen (13) months and retained indefinitely in anonymised form for platform analytics.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to technical constraints (for example, backup systems), the data will be isolated from active processing and deleted at the earliest practicable opportunity.

9 Your Privacy Rights

As a data subject, you have the following rights with respect to your personal data held by kp98. To exercise any of these rights, contact the kp98 support team via live chat or at the email address provided in Section 14.

• Right of Access — you have the right to request a copy of the personal data kp98 holds about you. kp98 will respond to verified access requests within a reasonable timeframe.
• Right to Rectification — if any personal data held by kp98 is inaccurate or incomplete, you have the right to request that it be corrected. You may update many account details directly through your kp98 account settings.
• Right to Erasure — you may request that kp98 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to kp98's legal and regulatory retention obligations — data that must be retained under AML or gaming license requirements cannot be deleted at your request.
• Right to Restrict Processing — you may request that kp98 restrict the processing of your data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing.
• Right to Object — you have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests.
• Right to Data Portability — you have the right to receive a copy of the personal data you have provided to kp98 in a structured, commonly used, machine-readable format, where processing is based on consent or contract and carried out by automated means.
• Right to Withdraw Consent — where processing is based on your consent (for example, for marketing communications), you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

10 Data Security

kp98 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and kp98 servers;
• Encryption of sensitive data fields at rest within the kp98 database infrastructure;
• Role-based access controls ensuring that staff members access only the personal data necessary for their specific function;
• Regular security assessments and penetration testing of the kp98 platform;
• Two-factor authentication options available for player accounts;
• Incident response procedures to detect, investigate, and respond to data security incidents in a timely manner.

While kp98 takes all reasonable precautions, no online platform can guarantee absolute security. You play an important role in keeping your account secure. You must maintain the confidentiality of your kp98 password, never share your login credentials with anyone, and log out of the platform on shared devices. If you suspect that your kp98 account has been accessed without your authorisation, contact support immediately via live chat.

11 Minors & Age Restriction

kp98 requires all players to confirm that they are at least 21 years of age at the point of registration. Where kp98 has reasonable grounds to suspect that an account holder may be under 21, the account will be suspended immediately and comprehensive age verification documentation will be required before the account can be reinstated.

Where kp98 discovers that personal data has been collected from a person under the age of 21 without appropriate consent or verification, that data will be deleted promptly, the account will be closed, and any funds held in the account will be returned via the original payment method subject to the completion of applicable verification procedures.

If you are a parent or guardian and have reason to believe that your child has registered on the kp98 platform, please contact the kp98 support team immediately at the contact details provided in Section 14.

12 Third-Party Links & Services

The kp98 platform may contain links to third-party websites or reference third-party services (for example, links to responsible gaming resources or game certification authority websites). kp98 is not responsible for the privacy practices or content of any third-party website or service. This Privacy Policy applies solely to data collected through the kp98 platform.

We encourage you to review the privacy policies of any third-party websites you visit through links on the kp98 platform. kp98 has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party sites or services.

13 Changes to This Privacy Policy

kp98 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. Where material changes are made, kp98 will notify registered players by email to the address on file or via a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the current version of this Privacy Policy came into effect. We encourage you to review this page periodically to stay informed about how kp98 is protecting your data. Your continued use of the kp98 platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised version.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by kp98, please contact us through the following channels:

kp98 aims to respond to all privacy-related enquiries within 5 business days. For urgent matters relating to suspected unauthorised account access or potential data security incidents, please use the live chat channel for the fastest response.

If you are not satisfied with kp98's response to your privacy concern, you have the right to escalate your complaint to the relevant supervisory authority or to the dispute resolution body designated under the terms of the kp98 gaming license, details of which are available on the About Us page.