e98 Privacy Policy

1 Scope & Data Controller

This Privacy Policy applies to all personal data processed by e98 in connection with the operation of the e98 platform accessible at e98.im. It covers data collected through the website, mobile-optimised site, customer support channels, and any promotional communications issued by e98.

For the purposes of this Privacy Policy, e98 acts as the data controller — meaning e98 determines the purposes for which, and the means by which, your personal data is processed. Where e98 engages third-party processors (for example, payment gateway providers such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank), those parties act as data processors under e98's instructions and are bound by contractual data protection obligations.

This policy applies to all players registered on e98, including players in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other cities and towns across Pakistan.

2 Data We Collect

e98 collects personal data in the following categories depending on how you interact with the platform:

2.1 Identity & Account Data

• Full legal name as shown on CNIC;
• Date of birth (to verify the 21+ age requirement);
• CNIC number and a copy of the CNIC document;
• Mobile number used to register the account;
• Email address (where provided);
• Username and hashed account password.

2.2 Financial Data

• JazzCash or EasyPaisa mobile wallet number associated with your account;
• Bank account details where bank transfer is used (HBL, UBL, or Meezan Bank account number and title);
• Visa or Mastercard partial card details (last four digits and expiry — full card numbers are never stored by e98);
• USDT wallet address where cryptocurrency deposits are used;
• Deposit history, withdrawal history, and transaction reference numbers.

2.3 Betting & Gaming Activity Data

• Game session history — games played, wagers placed, outcomes, winnings, and losses;
• Sports betting selections, stakes, and settlements;
• Bonus utilisation history and wagering requirement progress;
• VIP tier status and points balance.

2.4 Technical & Usage Data

• IP address at the time of login and transaction;
• Device type, operating system, and browser type;
• Session duration and page interaction data collected via cookies and analytics tools;
• Login timestamps and geographic location derived from IP address.

2.5 Communications Data

• Content of live chat support conversations;
• Email correspondence with the e98 support team;
• Feedback, complaint, and dispute records.

3 How We Use Your Data

4 Legal Basis for Processing

e98 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the e98 Terms and Conditions — account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws — KYC verification, AML record-keeping, and responsible gaming interventions.
• Legitimate interests: Processing necessary for e98's legitimate business interests, where those interests are not overridden by your data protection rights — fraud prevention, platform security, and service analytics.
• Consent: Processing for marketing communications, which requires your opt-in consent and may be withdrawn by you at any time without affecting any other processing.

5 Data Sharing & Disclosure

e98 does not sell, lease, or otherwise transfer your personal data to third parties for their own commercial benefit. e98 shares personal data only in the following specific circumstances:

5.1 Payment Service Providers

Transaction data is shared with payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard networks, and USDT blockchain infrastructure) to the extent necessary to process your deposit or withdrawal. These providers are independently regulated and maintain their own data security standards.

5.2 KYC & Identity Verification

Where e98 uses a third-party identity verification service to process CNIC documents, that provider receives the minimum data required for verification only. Verification providers are bound by strict contractual data protection obligations and are prohibited from retaining your documents beyond the verification period.

5.3 Gaming Software Providers

Game round data (session ID, stake, outcome) is shared with game providers (including providers of Lucky Neko and Fortune Tree slot titles) for game history reconciliation and fairness certification purposes. Game providers do not receive your full identity data or financial account details.

5.4 Regulatory & Legal Authorities

e98 may disclose personal data to its licensing authority, financial intelligence units, law enforcement agencies, or courts when required to do so by applicable law, court order, or regulatory directive. e98 will notify you of any such disclosure where legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of e98's business, player data may be transferred to the acquiring entity subject to the same or equivalent privacy protections as those described in this policy. Players will be notified of any such transfer in advance.

6 Cookies & Tracking Technologies

The e98 platform uses cookies and similar tracking technologies to deliver a functional and personalised experience. Cookies are small text files stored on your device by your browser. e98 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Remember your preferences — language settings, preferred payment method, and responsible gaming limit configurations.
• Analytics cookies: Collect anonymised data on how players navigate the platform to help e98 improve the user experience. No personally identifiable information is included in analytics data.
• Session cookies: Temporary cookies that expire when you close your browser, used to maintain your logged-in session on the e98 platform.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access and use the core e98 platform, though some preference features may not function as expected.

7 Data Security

e98 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• TLS 1.3 encryption for all data transmitted between your device and the e98 platform;
• AES-256 encryption for sensitive data stored in e98 databases;
• Multi-factor authentication (MFA) options for player account access;
• Role-based access controls limiting e98 staff access to personal data on a strict need-to-know basis;
• Regular penetration testing and security audits by independent security professionals;
• Intrusion detection and anomaly monitoring on all production infrastructure.

In the event of a personal data breach that poses a risk to your rights and freedoms, e98 will notify you and, where required, the relevant regulatory authority, within the timeframe prescribed by applicable data protection law. Notification will be issued via in-platform alert and email to the address registered on your account.

8 Data Retention

e98 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, comply with legal and regulatory obligations, and resolve any disputes that may arise. Specific retention periods are as follows:

Following the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

9 Your Data Rights

Subject to applicable law and certain legal exceptions, you hold the following rights with respect to your personal data held by e98:

• Right of access: Request a copy of all personal data e98 holds about you.
• Right to rectification: Request correction of any inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where e98 no longer has a legal basis to retain it (note: AML and KYC retention obligations may limit this right in certain circumstances).
• Right to restriction: Request that e98 restrict processing of your data while a correction request or objection is being assessed.
• Right to data portability: Receive your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
• Right to object: Object to processing of your personal data based on legitimate interests grounds, including profiling for marketing purposes.
• Right to withdraw consent: Withdraw consent for marketing communications at any time without affecting prior processing.

To exercise any of these rights, contact e98 support via live chat or email at [email protected] (plain text — not a link). e98 will respond to all verified data rights requests within thirty days of receipt. Where the request is complex or e98 is handling a high volume of requests, this period may be extended by a further two months with notice to you.

10 Children & Minors

Age verification is conducted during the account registration process via CNIC submission. Any account found to have been registered by a person under 21 years of age will be permanently closed immediately upon discovery. Any funds held in such an account will be frozen pending investigation and refunded to the originating payment method after verification that no fraudulent activity has occurred.

If you believe a minor has registered on the e98 platform using false information, please contact e98 support immediately via live chat so that the account can be investigated and closed without delay.

11 International Data Transfers

As e98 operates under an international gaming licence, some personal data may be stored on or processed by servers and infrastructure located outside Pakistan. Where such transfers occur, e98 ensures that appropriate safeguards are in place — including data processing agreements incorporating standard contractual clauses — to ensure your personal data receives a level of protection equivalent to that required under applicable data protection obligations.

Game providers supplying slots (including Lucky Neko and Fortune Tree), live casino products, and sports data feeds may process game session data on infrastructure in their respective operating jurisdictions. e98 maintains contractual data protection obligations with all such providers.

12 Marketing Communications

e98 may send you promotional communications about bonuses, new game releases, cricket betting markets (including PSL season offers), VIP tier updates, and other platform news — but only where you have provided explicit consent to receive such communications during registration or through your account preferences.

Marketing messages may be delivered via SMS to your registered mobile number or via email. You may opt out of marketing communications at any time by:

• Updating your communication preferences in the e98 account settings panel;
• Clicking the unsubscribe link included in any e98 marketing email;
• Contacting e98 live support to request removal from marketing lists.

Opting out of marketing communications does not affect your receipt of transactional messages — deposit confirmations, withdrawal notifications, and security alerts will continue to be sent as they relate to the management of your account.

13 Changes to This Policy

e98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or e98's data processing practices. Material changes — for example, changes to the categories of data collected, the purposes for processing, or your data rights — will be communicated to registered players via in-platform notification or email at least fourteen days prior to taking effect.

Non-material changes — such as typographical corrections or clarifications of existing provisions — may be made without advance notice. The current version of this Privacy Policy is always available at e98.im/privacy-policy and is identified by the "Last Updated" date at the top of this document.

Continued use of the e98 platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised policy, you should stop using the platform and may request account closure via e98 support.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how e98 has handled your personal data, please contact us through the following channels:

• Live chat: Available 24/7 directly on the e98 platform — Urdu and English support agents available.
• Email: [email protected] (plain text only — not a clickable link).
• Response time: Privacy-related queries responded to within five business days; formal data rights requests within thirty calendar days.

If you are not satisfied with e98's response to a privacy concern or data rights request, you may escalate your complaint to the data protection supervisory authority designated under e98's licensing jurisdiction. Details of the relevant supervisory authority are available upon written request from e98 support.