This Privacy Policy ("Policy") describes how 298pkr ("we", "us", "our") collects, uses, stores, protects and shares personal information provided by players ("you", "your") who register and use the 298pkr platform accessible at 298pkr.bet.
This Policy forms part of the overall agreement between you and 298pkr, alongside the Terms and Conditions and the Responsible Gaming Policy. By registering on 298pkr, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
01Who We Are
298pkr is an online betting and gaming platform operated for Pakistani players at 298pkr.bet. For the purposes of this Privacy Policy, 298pkr acts as the data controller — meaning we determine how and why your personal data is collected and processed. If you have any questions about this Policy or about how your data is handled, you can contact us at support@298pkr.bet.
All data processing by 298pkr takes place in the context of providing you with a secure, functional and enjoyable online betting and gaming experience. We do not engage in data processing that is unrelated to the services we offer.
02Data We Collect
298pkr collects two categories of personal data: information you provide directly, and information generated automatically through your use of the platform.
| Category | Specific Data Points | When Collected |
|---|
| Registration Data |
Full name, Pakistani mobile number, date of birth, email address, chosen username and password (hashed) |
Account creation |
| Identity Verification (KYC) |
CNIC / NICOP number, document scan or photograph, selfie for liveness check |
When KYC is triggered (e.g., first withdrawal above Rs 50,000) |
| Payment Data |
Mobile wallet account numbers (Easypaisa, JazzCash, NayaPay, SadaPay), IBAN for bank transfers, masked card details via PCI-DSS gateway |
Each deposit or withdrawal transaction |
| Transaction History |
Deposit amounts and dates, withdrawal requests and amounts, bet history, casino game history, bonus usage |
Ongoing, during platform use |
| Device & Technical Data |
IP address, device type and OS, browser type and version, session timestamps, pages visited, click events |
Automatically, during each session |
| Communications Data |
Content of support chats, emails and any messages sent to 298pkr |
When you contact support or respond to communications |
| Responsible Gaming Data |
Self-set limits, self-exclusion requests, cooling-off periods, problem gambling flags |
When you use responsible gaming tools |
Payment Data Note: 298pkr never stores full card numbers, Easypaisa PINs, JazzCash PINs or any authentication credentials for payment wallets. Payment processing is handled by certified third-party payment processors operating under PCI-DSS compliance. We receive only a transaction reference and masked payment identifier.
298pkr keeps your personal data protected whether you're playing from Lahore, Karachi or anywhere in Pakistan
03How We Collect Your Data
298pkr collects personal data through the following channels:
- Direct submission: Information you type into forms during registration, the KYC verification process, payment setup, support contacts or any other interactive part of the platform.
- Automated collection: Technical and behavioural data collected automatically through server logs, session tracking and first-party cookies as you navigate the 298pkr platform.
- Transaction processing: Data generated when you deposit or withdraw funds, including transaction timestamps, amounts and payment method identifiers — provided by payment processors as part of confirming the transaction.
- Support interactions: Any information you share with 298pkr's customer support team through live chat, email or any other contact method.
298pkr does not purchase personal data from third-party data brokers. We do not obtain personal data from social media platforms or external databases not connected to your 298pkr account activity.
04How We Use Your Data
Every piece of data collected by 298pkr is used for one or more of the following purposes. We do not use your data for any purpose beyond this list:
- Account creation and management: Creating and maintaining your 298pkr account, verifying your identity at registration and during KYC, and managing your account settings and preferences.
- Transaction processing: Handling deposits, processing withdrawal requests, confirming payments and maintaining accurate financial records for your account.
- Bet settlement and game operation: Recording bets placed, settling outcomes, applying winnings and maintaining your betting and gaming history.
- Fraud and security monitoring: Detecting, investigating and preventing fraud, money laundering, account takeover, multi-accounting and any other activity that violates 298pkr's Terms and Conditions or applicable law.
- Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviours, applying player-set limits, managing self-exclusion requests and supporting players who seek assistance.
- Customer support: Responding to your queries, resolving disputes, processing complaints and communicating with you about account-related matters.
- Legal and regulatory compliance: Meeting record-keeping requirements, responding to lawful requests from regulators or law enforcement, and maintaining audit trails as required.
- Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, fix bugs and develop new features. This analysis does not involve individual profiling for marketing purposes.
- Communications: Sending you transaction confirmations, security alerts, account notifications and — where you have opted in — information about promotions and offers on 298pkr.
05Legal Bases for Processing
298pkr processes your personal data on the following legal grounds:
- Contract performance: Processing necessary to deliver the betting and gaming services you have signed up for — account management, bet placement, payment processing and game operation.
- Legal obligation: Processing required to comply with applicable laws — including identity verification, anti-money laundering checks and financial record-keeping.
- Legitimate interests: Processing for fraud prevention, security monitoring and platform integrity that is proportionate and does not override your privacy rights.
- Consent: Where we send you marketing communications about 298pkr promotions, this is done only with your explicit, freely given consent. You can withdraw this consent at any time through your account settings or by contacting support.
06Data Sharing
298pkr does not sell, rent or trade your personal data to any third party. Period. However, we do share limited and necessary data with the following categories of trusted parties in order to operate the platform:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors and Visa/Mastercard gateways receive only the minimum data required to process your transaction — this typically means your payment account identifier and transaction amount, handled over encrypted connections.
- Identity verification providers: If KYC verification is required, your identity documents may be processed by a certified identity verification service. These providers operate under strict data processing agreements and do not use your data for any independent purpose.
- Technology infrastructure providers: Cloud hosting and content delivery providers who host 298pkr's servers and infrastructure. These providers process data on 298pkr's behalf, under binding data processing agreements, and have no independent access to your personal information.
- Regulatory and law enforcement bodies: Where 298pkr is under a legal obligation to disclose information — for example, in response to a valid court order or regulatory request — we will share only the specific data requested and no more. We will notify you of such requests unless legally prohibited from doing so.
No advertising data sharing: 298pkr has never shared and will never share player data with advertising networks, social media platforms or marketing analytics companies. Your betting activity, account details and personal information are never used to target you with third-party advertising.
07Cookies & Tracking Technologies
298pkr uses a limited set of first-party cookies and similar technologies to make the platform work properly and to improve your experience. We do not use third-party advertising cookies or tracking pixels.
| Cookie Type | Purpose | Duration |
|---|
| Session Cookie | Keeps you logged in during your active session. Deleted when you close your browser. | Session only |
| Authentication Token | Remembers your login across sessions if you select "Remember Me". Stores only an encrypted token, not your password. | 30 days |
| Preference Cookie | Stores your language, display and notification preferences so you don't have to set them every visit. | 1 year |
| Analytics Cookie | First-party analytics to understand page load performance, navigation patterns and error rates. Data is aggregated and not linked to individual identities. | 90 days |
| Security Cookie | Used to detect and prevent fraudulent login attempts and CSRF attacks. | Session only |
You can manage or disable cookies through your browser settings. Note that disabling essential cookies may affect your ability to log in and use certain features of 298pkr.
298pkr on mobile — your data is just as protected on your phone as on any other device
08Data Storage & Security
All personal data collected by 298pkr is stored on secure servers protected by multiple layers of technical and organisational security measures:
- Encryption in transit: All data between your browser or app and 298pkr's servers is encrypted using TLS 1.2 or TLS 1.3 (256-bit). You can verify this by the padlock icon in your browser's address bar.
- Encryption at rest: Sensitive personal data fields — including identity document scans, CNIC numbers and contact details — are encrypted in the database using AES-256 encryption.
- Access controls: Access to personal data within 298pkr's systems is restricted on a strict need-to-know basis. Staff who handle payment queries see only the data necessary to resolve your specific issue. No individual has unrestricted access to the full player database.
- Two-factor authentication: All administrative access to systems containing personal data requires two-factor authentication.
- Penetration testing: 298pkr engages independent security professionals to conduct regular penetration testing and vulnerability assessments of the platform and its data infrastructure.
- Incident response: 298pkr maintains a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified within 72 hours of detection.
09Data Retention
298pkr retains your personal data for as long as your account is active and for a period thereafter as required by applicable regulations. Specific retention periods are as follows:
- Account and registration data: Retained for the lifetime of your account and for five years after account closure, in compliance with financial record-keeping requirements.
- Transaction and betting records: Retained for five years from the date of each transaction, as required for financial audit and anti-money laundering compliance.
- KYC and identity documents: Retained for five years from the date of verification or account closure, whichever is later.
- Support communications: Retained for two years from the date of each interaction unless a longer period is required due to an ongoing dispute.
- Technical and log data: Retained for 90 days, after which it is automatically deleted from active systems.
- Marketing preferences and consent records: Retained for two years from the date of last consent update or account closure.
When data reaches the end of its retention period, it is securely deleted or anonymised such that it can no longer be linked to any individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis without privacy implications.
10Your Data Rights
As a 298pkr player, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@298pkr.bet. We will respond within 30 days.
Right of Access
You can request a full copy of all personal data 298pkr holds about you at any time. We will provide this in a portable, machine-readable format where technically feasible.
Right to Rectification
If any personal data we hold about you is incorrect or out of date, you have the right to request that we correct it. You can update most account information directly in your account settings.
Right to Erasure
You can request deletion of your personal data. Note that we are required to retain certain data — including transaction records and KYC documents — for the legally mandated period even after account closure. Data outside this mandatory retention scope will be deleted upon request.
Right to Restriction
Where you contest the accuracy of data or have objected to its processing, you can request that we restrict processing while the matter is under review.
Right to Data Portability
You can request your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) to transfer to another service.
Right to Object
You can object to the processing of your personal data for marketing purposes at any time. You can also object to processing based on legitimate interests where you feel it materially impacts your privacy.
Right to Withdraw Consent
Where processing is based on your consent — such as receiving marketing communications from 298pkr — you can withdraw that consent at any time with immediate effect through your account settings or by contacting support.
11Children's Privacy
298pkr is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you are under 18, you must not register an account or use any 298pkr services.
If 298pkr becomes aware that it has inadvertently collected personal data from a person under 18, the account will be immediately suspended, all data will be deleted, and any balance will be handled in accordance with our Terms and Conditions.
If you believe a person under 18 may have registered on 298pkr, please notify us immediately at support@298pkr.bet.
12Changes to This Policy
298pkr may update this Privacy Policy from time to time as the platform evolves, as laws change, or as we improve our data practices. The "Last Updated" date at the top of this page reflects when the most recent change was made.
Where changes are material — for example, if we begin processing a new category of personal data or change how existing data is used — we will notify registered players by email to their registered address and display a prominent notice on the platform homepage at least 14 days before the changes take effect.
Continuing to use 298pkr after the effective date of any revised Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you may close your account and withdraw your balance before the effective date.
13Contact Us About Privacy
If you have any questions, concerns or requests relating to this Privacy Policy or the way 298pkr handles your personal data, please get in touch:
Email: support@298pkr.bet
Subject line: Privacy Request – [your registered mobile number]
Live Chat: Available 24/7 from your 298pkr account dashboard
Response time: We will acknowledge your privacy request within 48 hours and provide a full response within 30 days.
We take every privacy query seriously. If you submit a data access, correction or deletion request, we will ask you to verify your identity before processing it — this is to protect your privacy, not to make things difficult.
