At s98com we take your privacy seriously. This Privacy Policy explains in plain language exactly what personal information we collect when you use our platform, how we use it, who we share it with, and what rights you have over your own data. Please read it — it matters.
Six things every s98com player should understand about how their personal information is handled on this platform.
s98com collects personal information strictly limited to what is necessary to operate your account safely, process PKR transactions, and comply with applicable legal obligations. We do not collect data for its own sake.
All personal data stored by s98com is protected with 256-bit SSL encryption. Data in transit between your device and our servers is encrypted end-to-end. Financial data is stored on PCI-DSS compliant infrastructure.
s98com does not sell, rent, or trade your personal data to third parties for any purpose. The only data shared externally is the minimum required to process payments, verify identity, or comply with a legal obligation.
You have the right to access, correct, or request deletion of your personal data held by s98com at any time. Submit a data request to support@s98com.app and we will respond within 30 days.
s98com processes your data in the context of serving Pakistani players — including PKR transaction processing, JazzCash and Easypaisa integration, and CNIC-based identity verification aligned with local requirements.
If s98com makes material changes to this Privacy Policy, you will be notified via your registered mobile number or email address at least 14 days before changes take effect, giving you time to review and respond.
s98com is an online gaming and sports betting platform accessible at s98com.app. For the purposes of this Privacy Policy, s98com is the data controller responsible for the personal information of registered players and website visitors collected through and in connection with the s98com platform.
This Privacy Policy applies to all users of s98com — whether you are a registered player, a prospective player browsing the site, or a former account holder whose data we are required to retain under applicable legal obligations. It covers all data collected through the s98com website, mobile site, and any associated mobile applications.
If you have questions about your personal data, the privacy team at s98com can be reached at support@s98com.app. Please include "Privacy Request" in the subject line of your email so your query is routed to the correct team.
s98com collects personal data in several categories. The table below sets out what we collect, why we collect it, and whether it is required or optional.
| Data Category | Specific Data | Required? |
|---|---|---|
| Identity | Full legal name, date of birth, CNIC number, CNIC scan copy | Required for KYC |
| Contact | Mobile number, email address | Required at registration |
| Financial | Easypaisa/JazzCash wallet numbers, bank account details (for IBFT), card details (last four digits only — full card data handled by payment processor) | Required for transactions |
| Technical | IP address, device type, browser type, operating system, session data | Automatic (required) |
| Behavioural | Betting history, game history, login times, session durations, pages visited | Automatic (required) |
| Communications | Support chat logs, emails to s98com, complaint records | When you contact us |
| Verification | Selfie photograph for live identity check (where requested during KYC) | Required for high-value accounts |
s98com does not collect sensitive personal data beyond what is required for identity verification and responsible gaming monitoring. We do not collect data about your religion, ethnicity, political views, or health status.
s98com collects your personal data through three main channels:
Data you give us directly: When you register an account on s98com, you provide your name, mobile number, date of birth, and a password. When you complete KYC verification, you provide your CNIC details. When you make a deposit or withdrawal, you provide payment account details. When you contact support, you provide the content of your communication.
Data collected automatically: When you use the s98com platform, we automatically collect technical data including your IP address, device identifiers, browser type, and interaction data. This is standard across virtually all internet services and is necessary to operate the platform securely and diagnose technical issues.
Data from third parties: When you make a payment via Easypaisa, JazzCash, NayaPay, SadaPay, or bank transfer, the payment provider confirms the transaction reference and, where applicable, the sending account details. For KYC verification, we may use a third-party identity verification service that cross-references your CNIC details against official records.
s98com uses your personal data for the following specific purposes. We do not use your data for any purpose not listed below.
Every use of your personal data by s98com is grounded in a defined legal basis. This is important because it means s98com is not simply processing your data because it is convenient — there is a specific, recognised reason for each processing activity.
s98com does not sell, rent, or trade your personal data. The only external parties who receive your data are those necessary to operate the platform and comply with legal requirements. The specific categories of third parties who may receive your data are:
Some of the third-party providers used by s98com — particularly cloud infrastructure and anti-fraud services — may process data in locations outside Pakistan. Where your data is transferred internationally, s98com takes steps to ensure that it receives an equivalent level of protection as it would within Pakistan.
These steps include requiring all international data processors to operate under data processing agreements that mandate appropriate security standards and restrict data use to the contracted purpose. s98com does not transfer personal data to countries or territories without ensuring adequate protections are in place.
Payment data processed for Easypaisa and JazzCash transactions is handled within Pakistan-based infrastructure by those respective payment providers, and is not transferred internationally as part of standard transaction processing.
s98com retains personal data only for as long as necessary for the purpose it was collected, or as required by applicable law. The following retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account identity data (name, CNIC, DOB) | 5 years after account closure | AML legal requirement |
| Transaction records (deposits, withdrawals, bets) | 7 years from transaction date | Financial record legal requirement |
| KYC documents (CNIC copy, selfie) | 5 years after account closure | AML compliance |
| Support communications | 3 years from last contact | Complaint resolution / legal |
| Technical logs (IP, device, session) | 12 months | Security and fraud detection |
| Marketing preference records | Until withdrawal of consent + 12 months | Evidence of consent basis |
| Responsible gaming records | 5 years after account closure | Duty of care compliance |
After the applicable retention period, personal data is securely deleted or anonymised (so it can no longer be associated with you individually). Anonymous, aggregated statistical data derived from player activity may be retained indefinitely for platform analytics purposes.
s98com uses cookies and similar tracking technologies on the platform. Cookies are small data files stored on your device that help the platform function correctly and improve your experience. The types of cookies used on s98com are:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Keep you logged in to your s98com account, maintain your session, process bets and transactions. These cookies are strictly necessary for the platform to function. | No — disabling these will prevent s98com from functioning | |
| Remember your preferences such as language, odds format, and display settings. These improve your experience but are not strictly required. | Yes — via your browser settings | |
| Collect anonymised data about how pages on s98com are used, which features are popular, and where users encounter problems. This data helps improve the platform. | Yes — opt out via cookie settings on the platform |
s98com does not use advertising tracking cookies or third-party retargeting scripts that would allow other websites to track your s98com activity. Most browsers allow you to view, manage, and delete cookies through browser settings. Disabling essential cookies will affect your ability to log in and use s98com.
As a player on s98com, you have a number of rights with respect to your personal data. These rights are meaningful and s98com takes them seriously. To exercise any of the rights below, contact support@s98com.app with the subject line "Data Rights Request" and your registered mobile number.
Data security is not an afterthought at s98com — it is built into how the platform operates at every level. The security measures protecting your personal data include:
All data in transit between your device and s98com servers is encrypted using 256-bit SSL — the same standard used by major banks. The padlock icon in your browser confirms encryption is active on every s98com page.
Personal data stored in s98com databases is encrypted at rest. Financial data is stored on PCI-DSS compliant infrastructure. KYC documents are stored in encrypted file storage with access restricted to authorised KYC staff only.
s98com staff can access player data only to the extent necessary for their specific role. A customer support agent can see your account settings and recent transaction history — not your full KYC documents. Access is logged and audited regularly.
All withdrawal requests require confirmation via a one-time password (OTP) sent to your registered mobile number. This means even if someone obtains your login credentials, they cannot withdraw from your account without access to your physical mobile device.
s98com operates 24/7 security monitoring to detect unusual account activity, suspicious login attempts, and potential data breaches. Detected incidents trigger immediate investigation and, where a breach affects player data, notification procedures aligned with applicable requirements.
s98com is strictly for players aged 18 and over. s98com does not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not use s98com or provide any personal information through the platform.
If s98com becomes aware that personal data has been collected from a minor — through age declaration fraud during registration or otherwise — the account will be immediately closed, all data associated with the account will be deleted (except where retention is required for legal compliance), and any funds will be handled in accordance with s98com's terms regarding underage accounts.
Parents or guardians who believe their child may have created an s98com account should contact support@s98com.app immediately. s98com will investigate and act promptly on any verified report of a minor's account.
s98com sends promotional communications — including bonus offers, event notifications, and platform updates — only to players who have opted in to receive them. You can opt in or out at any time through the communication preferences section of your account settings.
Marketing communications from s98com are sent via SMS to your registered mobile number and/or via email to your registered email address. s98com does not send promotional communications through messaging apps or social media without your explicit consent to that specific channel.
Transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — are not marketing communications and will be sent regardless of your marketing preferences, as they are necessary for account operation and security.
s98com may update this Privacy Policy from time to time as the platform evolves, regulations change, or new data processing activities are introduced. The "Last Updated" date at the top of this page reflects when the policy was most recently revised.
For material changes — meaning changes that meaningfully affect how your data is used or your rights in respect of it — s98com will notify registered players via SMS and/or email at least 14 days before the change takes effect. This gives you time to review the change and, if you disagree with it, to take action including closing your account and withdrawing your balance before the new policy applies.
For minor clarifications that do not change the substance of how your data is handled, the policy will be updated without advance notification, though the "Last Updated" date will always reflect the current version. Continued use of s98com after a Privacy Policy update constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or how s98com handles your personal data, please get in touch with the privacy team:
s98com will acknowledge privacy-related contacts within 24 hours and provide a substantive response within 30 calendar days. For data rights requests (subject access, erasure, portability), the 30-day period begins from the date identity is verified.
If you are not satisfied with s98com's response to a privacy concern, you have the right to escalate the matter to the applicable data protection authority. Contact details for the relevant authority are available from s98com support on request.
Step-by-step guide to making a data rights request — access, correction, deletion, or opt-out of marketing.
Decide what type of request you are making — access to your data, correction of inaccurate data, deletion of your data, or opt-out of marketing. Each has a slightly different process.
Send an email with the subject line "Data Rights Request" to support@s98com.app. Include your registered mobile number and a clear description of what you are requesting. This creates a formal record of your request.
s98com will ask you to verify that the request is genuinely coming from the account holder — typically via your registered mobile number OTP. This protects you from someone else making data requests about your account.
s98com will provide a substantive response to your data rights request within 30 calendar days of identity verification. For access requests, you will receive your data in a readable format. For deletion requests, confirmation of what was deleted and what was retained (with reasons) will be provided.
Your personal data is secure, your PKR transactions are encrypted, and your rights are protected. Join over 500,000 Pakistani players who trust s98com for cricket betting, live casino, jackpot slots and esports.
18+ only. Please gamble responsibly. Responsible Gaming Policy