par98 Privacy Policy

This Privacy Policy ("Policy") is issued by par98 ("par98", "we", "us", "our") and governs the collection, processing, storage, disclosure and protection of personal data provided by or collected about users ("User", "Player", "you") of the par98 platform located at https://par98.cam ("Platform").

par98 operates an online betting and live casino platform primarily serving the Pakistan market and other jurisdictions where access is legally permissible. The Platform is presented in the English language and handles personal data of registered Players and site visitors including those accessing from cities across Pakistan such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

This Policy should be read alongside the Terms & Conditions, which together constitute the full agreement between you and par98 governing your use of the Platform. By accessing the Platform, registering an account, or providing personal information to par98, you acknowledge that you have read and understood this Policy and consent to the processing of your data as described herein.

par98 does not sell your personal data to third parties. We process your data only for the purposes described in this Policy and in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation and security.

For the purposes of this Policy, the following terms shall have the meanings set out below:

par98 collects the following categories of personal data, depending on your interaction with the Platform:

par98 collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC, contacting customer support, submitting a complaint, or updating account settings.
• Automated Technical Collection: Technical and usage data collected automatically as you use the Platform, including IP address, device identifiers, browser type, session data and cookies.
• Payment Processing: Financial data collected during deposit and withdrawal transactions, including masked payment method details and transaction references. Payment services familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — may be referenced as payment method options in the cashier. These are external services; their data handling is governed by their own privacy policies.
• Third-Party Verification Providers: Identity and document verification data may be received from third-party KYC service providers engaged by par98 to assist with verification.
• Responsible Gambling Monitoring: Data generated by the use of responsible gambling tools (deposit limits, self-exclusion requests, session duration data) is collected and processed as part of par98's responsible gambling obligations.

par98 processes personal data only where a lawful basis for processing exists. The following table sets out the primary purposes for which par98 processes personal data and the corresponding legal basis:

par98 does not sell, rent or trade your personal data to any third party for their independent marketing or commercial purposes. Personal data may be shared only in the following circumstances and only to the extent necessary:

• KYC and Identity Verification Providers: Third-party service providers engaged to verify identity, age and source-of-funds documentation. These providers act as Data Processors under a contractual data processing agreement.
• Payment Processors: Financial data is shared with payment gateway providers and financial institutions as necessary to process deposits and withdrawals. Payment method names familiar in Pakistan (e.g., Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) are external services with their own independent data handling terms.
• Fraud Prevention and Security Services: Technical and transactional data may be shared with third-party fraud detection or cybersecurity providers where necessary to protect the Platform and its users.
• Regulatory and Law Enforcement Authorities: par98 may disclose personal data to competent authorities where required by applicable law, court order, or as part of obligations under an anti-money laundering (AML) or KYC regulatory framework.
• Group Entities: Personal data may be shared within affiliated entities of the par98 operating group where necessary for the purposes described in this Policy.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

par98 may transfer personal data to, or process it in, countries other than the country in which you are located. This may include transfer to the jurisdiction in which the par98 operator or its third-party processors are established.

Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to that in the originating jurisdiction, par98 shall ensure that appropriate safeguards are in place to protect the transferred data. Such safeguards may include:

• Standard contractual clauses governing the transfer and processing of personal data between parties.
• Contractual obligations on the recipient to observe equivalent data protection standards.
• Other lawful transfer mechanisms recognised under applicable data protection frameworks.

Players in Pakistan should be aware that data protection laws in Pakistan — currently governed primarily by the Personal Data Protection Bill framework and the Prevention of Electronic Crimes Act (PECA), 2016 — may differ from the standards applied in the jurisdiction where par98 is operated. By using the Platform, you acknowledge this international data transfer context.

par98 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law, regulatory obligation or legitimate business interest.

The following general retention principles apply:

• Account Data: Retained for the lifetime of the active account and for a further period following account closure as required by applicable anti-money laundering, KYC and financial regulations. Retention periods required under AML frameworks are typically five (5) years following the end of the business relationship.
• KYC and Identity Documents: Retained in accordance with the retention period required by the applicable licensing and AML regulatory framework, which commonly ranges from five (5) to seven (7) years from the date of document submission or account closure.
• Transaction Records: Financial transaction records and betting history are retained for the minimum period required by applicable financial and regulatory obligations.
• Support Communications: Customer support correspondence is retained for a reasonable period sufficient to resolve disputes and maintain quality assurance, typically up to three (3) years.
• Technical and Analytics Data: Anonymised or aggregated usage data may be retained indefinitely as it no longer constitutes personal data.

Upon expiry of applicable retention periods, personal data is securely deleted, anonymised or pseudonymised so that it can no longer be linked to an identifiable individual.

par98 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Security measures include but are not limited to:

• Encryption: SSL/TLS encryption is applied to all data in transit between your device and the Platform. Sensitive data at rest is stored using appropriate encryption standards.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Internal access is governed by role-based access controls, authentication requirements and access logging.
• KYC Document Security: Identity documents submitted for KYC verification are stored on secured infrastructure with access restricted to authorised verification personnel and logged for audit purposes.
• Vulnerability Management: The Platform is subject to regular security assessments. Known vulnerabilities are patched in accordance with a documented remediation process.
• Incident Response: par98 maintains an incident response process for data security events. In the event of a data breach that is likely to result in risk to affected individuals, par98 will notify relevant parties in accordance with applicable legal requirements.

par98 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device by the Platform to store session information, preferences or analytical data.

par98 uses the following categories of cookies:

• Essential Cookies: Required for the Platform to function correctly. These include session management cookies that keep you logged in during your visit, security cookies that protect against cross-site request forgery, and cookies necessary to process transactions. Essential cookies cannot be disabled without impairing Platform functionality.
• Analytical Cookies: Used to understand how visitors interact with the Platform, including which pages are visited most frequently, session duration and navigation paths. Analytical data is used to improve Platform performance and user experience.
• Functional Cookies: Store your preferences such as language selection, responsible gambling limit settings and display preferences so you do not have to re-enter them on every visit.
• Targeting or Marketing Cookies: Where you have consented, these cookies may be used to deliver content relevant to your interests. Consent can be withdrawn at any time via your browser settings.

You may manage or disable non-essential cookies by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more details about managing cookies in commonly used browsers, consult your browser's help documentation.

Subject to applicable data protection law and any legal retention obligations, you have the following rights in respect of your personal data held by par98:

To exercise any of the above rights, please contact par98 via live chat on the Platform or by email to [email protected]. Include your registered account email address and a description of the right you wish to exercise. par98 will respond within a reasonable timeframe and may request identity verification before processing the request.

The par98 Platform is strictly intended for adults aged 18 years or above, or the higher minimum age required by the operator's licensing jurisdiction or by applicable local law. par98 does not knowingly collect, process or store personal data of individuals under the eligible minimum age.

Age verification is conducted as part of the KYC process. Where par98 discovers or has reasonable grounds to believe that personal data has been submitted by a person below the minimum eligible age, that account will be immediately suspended, all associated data will be subject to deletion procedures, and any deposited funds will be returned to the original payment method after verification.

If you believe that a person under the eligible minimum age has registered on par98 or provided personal data to par98 without appropriate consent, please contact us immediately at [email protected] so that appropriate action can be taken.

The par98 Platform may contain references to or interactions with third-party services, including payment providers, KYC verification services and game content providers. These third parties have their own independent privacy policies and data handling practices that are outside the scope and control of par98.

par98 references payment service names familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — as examples of payment methods available in the Pakistan market. Each of these services is subject to its own privacy terms and policies. par98 has no responsibility for the privacy practices of these independent providers.

par98 is not responsible for the content, privacy policies or data handling practices of any third-party service, website or application accessible through or referenced on the Platform. Users are encouraged to review the privacy policies of any third-party service with which they interact in the context of using par98.

par98 reserves the right to amend, update or replace this Privacy Policy at any time to reflect changes in processing activities, applicable legal obligations, or Platform operations. Amendments take effect upon publication of the revised Policy on this page, with the "Last Updated" date revised accordingly.

Where a material amendment is made that significantly affects how we process your personal data, par98 will endeavour to provide notice by displaying a prominent notification on the Platform or by sending a notification to your registered email address prior to the amendment taking effect. However, par98 is not obligated to provide individual notice of every amendment.

Your continued use of the Platform following publication of an amended Policy constitutes acceptance of the updated Policy. If you do not agree with the amended terms, you must discontinue use of the Platform and request account closure.

We recommend reviewing this Policy periodically to stay informed of how par98 handles your personal data.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by par98, please contact us through the following channels:

par98 endeavours to respond to all privacy-related requests and complaints within a reasonable timeframe. We may require identity verification before processing requests relating to personal data, to ensure we do not disclose or modify data for unauthorised parties.

If you are not satisfied with par98's response to a privacy complaint, you may be entitled to escalate the complaint to the relevant data protection supervisory authority in your jurisdiction. par98 will cooperate with all good-faith regulatory enquiries.