Park98 Privacy Policy –
How We Handle Your Data in Pakistan

1 Introduction

This Privacy Policy explains how Park98 ("we", "us", "our") collects, uses, stores and protects personal data in connection with your use of the Park98 platform, accessible at park98.app and through the associated mobile application (the "App").

When you create a Park98 account, deposit PKR, place a bet, play a Casino game or contact our support team, you share information with us. This policy is about being transparent with you about what that information is and what happens to it.

By using the Park98 platform you acknowledge you have read and understood this Privacy Policy. If you do not agree with how we handle your data, you should not use the platform.

2 Data We Collect

Park98 collects personal data in the following categories:

We do not collect full payment card numbers directly. Card transactions are handled by a certified payment processor that operates under its own data security standards. Park98 only retains a transaction reference, amount and status.

3 How We Use Your Data

The data Park98 collects is used for specific, documented purposes. These are:

• Account management: Creating and maintaining your Park98 account, processing login requests and managing account security settings.
• Payment processing: Handling PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, Bank Transfer and cards. Verifying that transactions originate from accounts held in your name.
• Identity verification: Confirming that registered users are who they say they are, particularly for withdrawal requests and when unusual account activity is detected.
• Fraud prevention: Monitoring for patterns that may indicate account misuse, multi-accounting, bonus abuse or financial crime. This is an ongoing process and uses automated systems as well as manual review.
• Responsible gaming: Identifying account activity that may indicate problem gambling behaviour and enabling the responsible gaming tools — deposit limits, self-exclusion — to function correctly.
• Platform improvement: Analysing aggregate usage data (not individual profiling) to understand which features are used, where technical issues arise and how the platform can be made better for Pakistan players.
• Customer support: Reviewing communication history to assist with queries, disputes and account investigations.
• Legal obligations: Maintaining transaction records for the periods required under applicable record-keeping obligations.

4 Legal Basis for Processing

Park98 processes personal data on one or more of the following grounds depending on the type of data and the purpose:

• Contractual necessity: Processing your data is required to deliver the services you have requested — account registration, deposits, withdrawals and game access.
• Legitimate interests: Fraud prevention, platform security monitoring and responsible gaming checks are carried out in the legitimate interests of both Park98 and its user base.
• Legal obligation: Certain data must be retained for defined periods to comply with record-keeping requirements.
• Consent: Where data is processed for optional purposes such as marketing communications, it is done so only with your explicit consent, which you may withdraw at any time.

5 Data Sharing

Park98 does not sell, rent or trade your personal data. Sharing is limited to the following categories of recipient:

• Payment processors: JazzCash, Easypaisa, Raast and bank transfer partners receive the minimum data required to process your transactions — typically your account reference, transaction amount and a confirmation token. These processors operate under their own privacy and security frameworks.
• Identity verification services: Where third-party document verification tools are used, your submitted documents are processed by the verification provider solely for the purpose of confirming identity. Park98 does not authorise any secondary use of your documents by these providers.
• Internal fraud and risk systems: Data may be shared across Park98's internal security and compliance systems for fraud detection and responsible gaming monitoring.
• Law enforcement or regulatory bodies: If Park98 receives a lawful request from a relevant authority — such as in connection with a fraud investigation or court order — we will comply with that request to the extent required. Where legally permitted, we will notify you that such a disclosure has been made.

6 Payment Data & PKR Transactions

All financial transactions on Park98 are in PKR. When you make a deposit or request a withdrawal through JazzCash, Easypaisa, Raast or bank transfer, the transaction is processed by the respective payment provider. Park98 retains a record of the transaction amount, date, method and status for account management and fraud prevention purposes.

Park98 does not store full card numbers, CVV codes or full banking credentials. These are handled exclusively by the payment provider's secure systems. Park98 retains only a tokenised reference that allows the transaction to be identified without exposing sensitive financial details.

Transaction records are retained for a period consistent with standard financial record-keeping practices. These records are used to resolve disputes, process refunds where applicable and respond to support queries about deposit or withdrawal history.

7 Cookies & Device Data

Park98 uses cookies and similar technologies when you access the platform through a browser. Cookies are small data files stored on your device that help the platform function correctly and remember your preferences.

The types of cookies used on Park98:

• Session cookies: Keep you logged in while you navigate between pages. These expire when you close your browser.
• Preference cookies: Remember your language and display settings between visits.
• Security cookies: Help detect unusual login patterns and protect against CSRF attacks.
• Analytics cookies: Used internally to understand which parts of the platform are used most and where technical problems occur. This is aggregate, anonymised data — it is not used to build individual profiles.

You can configure your browser to refuse or delete cookies, though doing so may affect the functionality of the Park98 platform — for example, you may need to log in on every visit rather than remaining authenticated between sessions.

Device information collected during your visit — such as IP address, browser type and device model — is used for security monitoring, fraud detection and ensuring the platform renders correctly on your device. This data is not used to individually track users across third-party websites.

8 Data Retention

Park98 retains personal data for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable record-keeping obligations. The general retention framework is:

• Active account data: Retained for the duration of your account being active on Park98.
• Transaction and financial records: Retained for a minimum of five years following the date of the transaction, consistent with standard financial record-keeping practices.
• Identity verification documents: Retained for the duration of the account and for a defined period following account closure to support potential future fraud investigations.
• Support communications: Retained for a minimum of two years to allow for dispute resolution referencing past interactions.
• Closed accounts: On account closure, marketing data and preference data are deleted promptly. Financial and identity records are retained for their required periods, after which they are securely deleted.

9 Data Security

Park98 applies a range of technical and organisational security measures to protect your personal data:

• All data in transit between your device and Park98 servers is protected by SSL/TLS encryption. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Account passwords are stored using a one-way cryptographic hash function. Park98 employees cannot read your password — if you forget it, it must be reset, not retrieved.
• Access to personal data within Park98's systems is restricted on a need-to-know basis. Support agents have access to the account data required to assist with your query, and no more.
• Payment data is handled exclusively by certified payment processors operating under PCI-DSS standards or equivalent frameworks. Raw payment credentials do not pass through Park98's own servers.
• Systems are monitored continuously for unusual access patterns, injection attempts and security events.

Despite these measures, no internet-connected system can be guaranteed 100% secure. In the event of a data breach that affects your personal data, Park98 will notify affected users as soon as reasonably practicable and outline the steps being taken to address the breach.

10 Your Rights

You have the following rights regarding the personal data Park98 holds about you. To exercise any of these rights, contact Park98 support — details are in Section 13.

11 Children's Privacy

Park98 is strictly an adults-only platform. No person under the age of 18 is permitted to register, deposit or use any part of the Park98 gaming service.

Park98 does not knowingly collect personal data from anyone under 18. If we become aware that a user under this age has registered, the account will be closed immediately and any deposit will be returned to the originating payment method. If you believe a minor has registered on Park98, contact support immediately with the relevant information.

12 Changes to This Policy

Park98 may update this Privacy Policy periodically to reflect changes in platform operations, applicable requirements or best practice in data protection. When material changes are made:

• The updated policy will be published on this page with a revised "last updated" date.
• Active users may be notified of significant changes via the platform notification system or by email to the address registered on their account.
• Continued use of the Park98 platform after the effective date of any change constitutes acceptance of the updated Privacy Policy.

We recommend checking this page periodically if privacy matters are important to your use of the platform. The current version of this policy is always the one displayed here.

13 Contact Us

If you have questions about this Privacy Policy, want to exercise any of your data rights, or need to report a privacy concern, please contact the Park98 support team:

• Live chat: Available through the Park98 platform when you are logged in — 24 hours a day, 7 days a week.
• Email: The support email address is displayed in the footer of every page on the platform. Include your registered username and a description of your query for fastest response.

For privacy-related requests specifically — access, correction, deletion or objection — please identify your query as a "Data Rights Request" so it can be directed to the appropriate team. Park98 aims to acknowledge all privacy requests within five business days and to resolve straightforward requests within thirty days.