b998 Privacy Policy — How We Handle Your Data

b998 ("we," "us," "our," or "the Platform") is committed to protecting and respecting the privacy of all individuals who use our online betting and casino services. This Privacy Policy ("Policy") describes in detail how b998 collects, receives, uses, stores, shares, transfers, and processes personal data relating to players, visitors, and prospective users of the b998 platform, accessible at https://b998.bet.

This Policy applies to all b998 products and services, including but not limited to cricket betting, live casino, slot games, lottery, and golf betting — all of which are offered to English-speaking Pakistani players and accessible via desktop and mobile browsers.

By registering an account on b998, making a deposit, placing a bet, or otherwise using any part of the b998 platform, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with any part of this Policy, you must discontinue use of the b998 platform immediately.

For the purposes of applicable data protection legislation, b998 acts as the data controller in respect of the personal data of its registered users and website visitors. As data controller, b998 determines the purposes for which personal data is processed and the means by which that processing is carried out.

Where b998 engages third-party service providers to process personal data on its behalf — for example, payment processors handling JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank transactions — those providers act as data processors and are contractually bound to process personal data only in accordance with b998's instructions and applicable data protection standards.

b998 collects personal data across several categories depending on how you interact with the platform. The categories of personal data collected are set out below:

b998 does not intentionally collect sensitive personal data beyond what is strictly necessary for identity verification and regulatory compliance. b998 does not collect biometric data, health data, or political opinions.

b998 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when completing the b998 registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting b998 support via email or live chat.
• Automated Technical Collection: Data collected automatically when you visit b998, including IP addresses, device and browser fingerprints, session data, and cookie-derived identifiers. This collection occurs via b998's server logs, analytics tools, and first-party cookies.
• Payment Processors: Transaction confirmation data returned to b998 by payment service providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard following a completed deposit or withdrawal instruction.
• Third-Party Identity Verification: Where b998 engages a KYC or anti-money laundering verification provider, that provider may return data elements — such as identity match scores or sanctions screening results — to b998 in connection with your account verification.
• Fraud Prevention and Security Services: Data provided by fraud detection partners in connection with b998's obligation to maintain a secure and fair platform.

b998 does not purchase personal data lists from third-party data brokers or marketing aggregators.

b998 processes your personal data for the following specific and documented purposes:

• Account Administration: Creating and managing your b998 player account, authenticating your identity at login, and maintaining accurate account records.
• Service Delivery: Enabling you to place bets on cricket, PSL, T20s, and other markets; play live casino games; access slot titles; participate in lottery draws; and use golf betting markets.
• Financial Transaction Processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, and supported banking channels, and maintaining accurate transaction records.
• Regulatory Compliance and KYC: Fulfilling b998's anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) obligations under applicable international gaming regulations.
• Responsible Gaming: Monitoring player behaviour to identify potential problem gambling patterns, enforcing self-exclusion requests, and implementing deposit and loss limits requested by players.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, and unauthorised access attempts.
• Customer Support: Responding to your enquiries, resolving disputes, and managing complaints in a fair and timely manner.
• Platform Improvement: Analysing usage patterns to improve the b998 platform, personalise your experience, and develop new features.
• Marketing Communications: Sending you promotional offers, bonus notifications, and b998 news where you have consented to receive such communications.
• Legal Proceedings: Establishing, exercising, or defending legal claims involving b998.

b998 processes your personal data on the following legal grounds, depending on the specific purpose of the processing activity:

• Performance of a Contract: Processing that is necessary to provide the b998 betting and casino services you have registered to use, including account management, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with AML, KYC, CTF, and other applicable regulatory requirements under b998's international gaming licence and relevant financial crime prevention frameworks.
• Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and platform analytics where those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have given explicit consent. You may withdraw this consent at any time by contacting b998 support or using the unsubscribe mechanism in any marketing email.

b998 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. b998 may share your personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate contractual protections:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard to process PKR deposits and withdrawals and comply with financial crime obligations.
• KYC and Identity Verification Providers: Third-party services engaged to perform identity document verification, sanctions screening, and politically exposed persons (PEP) checks as part of b998's KYC programme.
• Fraud Prevention and Security Partners: Services that assist b998 in detecting suspicious activity, preventing multi-accounting, and maintaining platform integrity.
• Game and Software Providers: Casino game studios and lottery software providers who operate within the b998 platform environment and may receive anonymised or pseudonymised technical data relating to game sessions.
• Regulatory and Law Enforcement Authorities: Where b998 is legally required to disclose data to a gaming regulator, financial intelligence unit, tax authority, or law enforcement agency pursuant to a lawful order or mandatory reporting obligation.
• Professional Advisors: Lawyers, auditors, and accountants where access to personal data is necessary for the provision of professional services to b998, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of b998's business, your personal data may be transferred to the relevant acquirer as part of that transaction, subject to equivalent privacy protections.

b998 operates as an international online gaming platform. Certain third-party service providers engaged by b998 — including KYC providers, fraud detection systems, and cloud infrastructure partners — may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally, b998 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections applied within Pakistan.

Such safeguards may include contractual clauses requiring the recipient to process personal data only in accordance with b998's instructions and applicable data protection principles, or reliance on the recipient's participation in a recognised data protection framework.

Where technically feasible, b998 employs data minimisation and pseudonymisation techniques to limit the volume of personally identifiable information transferred across international boundaries.

b998 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active b998 account is retained for the duration of the account relationship and for a minimum of five (5) years following permanent account closure, to satisfy AML and gaming regulatory record-keeping obligations.
• Transaction Records: Financial transaction records — including PKR deposit and withdrawal histories — are retained for a minimum of five (5) years in compliance with anti-money laundering legislation.
• KYC Documents: Identity verification documents are retained for the period required by b998's international gaming licence conditions, typically five (5) years post-account closure.
• Responsible Gaming Records: Self-exclusion records and responsible gaming interaction logs are retained to prevent re-registration during an active exclusion period and for audit purposes.
• Marketing Data: Where consent has been withdrawn, marketing communications data will be suppressed promptly. A minimal record of the withdrawal of consent is retained to evidence compliance.
• Technical and Log Data: Server logs and technical data are retained for a shorter period, typically 90 days, unless an active security investigation requires extended retention.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with b998's data disposal procedures.

b998 uses cookies and similar tracking technologies on its platform to ensure proper functionality, enhance user experience, and gather analytical insights. The categories of cookies used by b998 are described below:

• Strictly Necessary Cookies: Required for the b998 platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: Used to remember your preferences — such as language settings, display preferences, and previously used payment methods — to personalise your b998 experience across sessions.
• Analytical Cookies: Used to collect anonymised data on how players navigate and use the b998 platform, enabling b998 to identify areas for improvement. Where third-party analytics tools are used, data is processed under data processor agreements with b998.
• Responsible Gaming Cookies: Used to store session timer data and enforce deposit and loss limit controls configured in your account settings.

You may manage your cookie preferences through your browser settings. Please note that disabling cookies may affect the functionality of certain b998 features. b998 does not use third-party advertising cookies or share cookie data with external advertising networks.

b998 implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the b998 platform, including all financial transactions processed in PKR.
• Encryption of sensitive personal data at rest within b998's database infrastructure.
• Role-based access controls ensuring that b998 staff access personal data only to the extent required for their specific job functions.
• Multi-factor authentication requirements for access to b998's internal administrative systems.
• Regular third-party penetration testing and security audits of the b998 platform.
• Automated monitoring and alerting systems for suspicious access patterns or potential data breach indicators.
• Documented incident response procedures governing b998's response to any confirmed or suspected data security incident.

Subject to applicable law and certain regulatory limitations, you hold the following rights in respect of the personal data b998 holds about you. To exercise any of these rights, please contact b998 support at the email address displayed in the footer of this page.

• Right of Access: You have the right to request a copy of the personal data b998 holds about you, together with information about how that data is being used. b998 will respond to verified access requests within 30 days.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by b998. Requests for data correction will be processed promptly.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to b998's legal and regulatory retention obligations. b998 is required to retain certain data — including KYC documents and transaction records — for a minimum of five years following account closure.
• Right to Restriction of Processing: You may request that b998 restrict the processing of your personal data in certain circumstances, such as where the accuracy of the data is contested.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you may request that b998 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to b998's processing of your personal data where that processing is based on legitimate interests, including the right to object to direct marketing at any time.
• Right to Withdraw Consent: Where b998 relies on your consent to process personal data, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

b998 will not discriminate against you for exercising any of these rights. If you are dissatisfied with b998's response to a data rights request, you may raise a complaint with b998's designated data protection contact via the support email address.

b998 is strictly an adults-only platform. The minimum age to register and use b998 is 21 years. b998 does not knowingly collect, process, or retain personal data relating to any person under the age of 21.

If b998 discovers or is notified that personal data belonging to a person under 21 has been collected — whether through fraudulent age misrepresentation during registration or any other means — b998 will immediately suspend the relevant account, delete the associated personal data to the extent not required for legal reporting purposes, and refer the matter to b998's compliance team for review.

Parents and guardians who believe that a minor in their care may have registered an account on b998 are urged to contact b998 support immediately. b998 takes underage gambling extremely seriously and co-operates fully with applicable child protection frameworks.

Where you have provided consent, b998 may contact you with promotional offers, bonus notifications, new game announcements, and platform updates via email or SMS. Marketing communications from b998 will always clearly identify b998 as the sender and include a straightforward mechanism to opt out of future communications.

You may withdraw your marketing consent at any time by:

• Clicking the unsubscribe link included in any b998 marketing email.
• Contacting b998 support directly at the email address displayed in the footer of this page and requesting removal from marketing lists.
• Updating your communication preferences within your b998 account settings.

Withdrawal of marketing consent does not affect transactional and service communications, such as account verification emails, deposit confirmations, withdrawal notifications, and security alerts, which b998 is required to send as part of the contractual relationship with you.

b998 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or b998's data processing practices. The revised Policy will be published on the b998 platform with an updated "Last Updated" date. Where changes are material, b998 will make reasonable efforts to notify registered users via the email address associated with their account or through a prominent on-platform notification.

Your continued use of the b998 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. It is your responsibility to review this Policy periodically. If you disagree with any material change to this Policy, you should cease using the b998 platform and contact support to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or b998's handling of your personal data, please contact the b998 support team. All data-related enquiries are handled by b998's designated privacy function and will be acknowledged within 5 business days.

b998 support is available 24 hours a day, 7 days a week, in English. The b998 support team is your first point of contact for all data rights requests, consent withdrawals, marketing opt-outs, and privacy complaints.