e98win Privacy
Policy

1 Introduction

This Privacy Policy ("Policy") describes how e98win ("we", "us", "our") collects, processes, stores, and protects personal data provided by users ("you", "your") of the e98win platform, accessible at https://e98win.net and any associated mobile applications (collectively, the "Platform").

e98win is an internationally licensed online gaming and sports betting platform serving players across Pakistan. We understand that privacy is a serious matter — particularly in the context of financial transactions and identity verification — and we are fully committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles.

By registering an e98win account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

2 Data We Collect

e98win collects personal data through multiple channels: directly from you during registration and account use, automatically through your interactions with the Platform, and from third-party verification partners during the KYC process. The categories of data we collect are as follows:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information beyond what may be voluntarily disclosed by a player in the context of a responsible gaming self-exclusion request.

3 How We Use Your Data

e98win processes your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and operating your e98win account, including processing your e98win login credentials securely;
• Transaction Processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard;
• Identity Verification (KYC): Complying with our anti-money laundering (AML) and counter-terrorism financing (CTF) obligations by verifying your identity before processing withdrawals;
• Fraud Prevention: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, and other prohibited behaviours outlined in our Terms & Conditions;
• Responsible Gaming: Monitoring usage patterns that may indicate problem gambling behaviour and facilitating self-exclusion, deposit limit, or cooling-off requests where applicable;
• Customer Support: Responding to your queries, complaints, and account-related requests in a timely and effective manner;
• Platform Improvement: Analysing aggregated usage data to improve game performance, user interface design, and overall platform experience;
• Legal Compliance: Meeting obligations under applicable international gaming regulations, financial regulations, and law enforcement requests;
• Marketing Communications: Sending promotional offers, bonus notifications, and event updates — only where you have opted in to receive such communications.

4 Legal Basis for Processing

e98win processes personal data only where a valid legal basis exists. The applicable legal bases for our data processing activities are:

• Contractual Necessity: Processing required to fulfil our obligations under the account registration agreement — including processing transactions, maintaining account records, and delivering gaming services;
• Legal Obligation: Processing required to comply with AML regulations, KYC obligations, and requests from regulatory or law enforcement authorities with legal authority to demand such information;
• Legitimate Interests: Processing conducted for fraud prevention, platform security, and improving the e98win gaming experience — provided such interests are not overridden by your fundamental privacy rights;
• Consent: Processing of data for direct marketing communications and optional analytics features, carried out only where you have given freely given, informed, and specific consent that can be withdrawn at any time.

5 Data Sharing & Disclosure

e98win does not sell, rent, or trade your personal data. We share data only in the following limited and controlled circumstances:

• Payment Processors: Financial data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card networks solely for the purpose of processing your deposits and withdrawals. Each payment partner is contractually bound to handle your data securely and in accordance with applicable financial regulations;
• KYC & Identity Verification Partners: Identity documents are shared with our contracted third-party KYC verification providers to complete the identity verification process. These providers are contractually prohibited from using your data for any purpose other than identity verification on behalf of e98win;
• Fraud Prevention Services: Technical data including IP addresses and device fingerprints may be shared with fraud detection services to identify multi-accounting, bonus abuse, and suspicious activity patterns;
• Regulatory & Law Enforcement Authorities: Where required by a valid court order, regulatory directive, or legally binding government request, e98win may disclose your data to the relevant authority. We will notify you of such disclosure where legally permitted to do so;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of e98win's business, your personal data may be transferred to the acquiring entity. You will be notified of such a transfer and any change in applicable privacy terms.

6 Cookies & Tracking Technologies

e98win uses cookies and similar technologies (including local storage and session tokens) on the Platform. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. You cannot opt out of strictly necessary cookies as the Platform cannot function without them;
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options. These enhance your experience but are not essential;
• Analytics Cookies: Collect aggregated, anonymised information about how players navigate the Platform — which pages are most visited, how long sessions last, and which games are most popular. This data is used solely to improve e98win's platform and services;
• Security Cookies: Help detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts by recognising trusted devices associated with your account.

e98win does not use third-party advertising or retargeting cookies. You can manage or delete cookies at any time through your browser settings. Note that disabling functional or analytics cookies may affect your experience on the Platform but will not prevent you from accessing core gaming features.

7 Data Retention

e98win retains your personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, and licensing obligations. The following retention periods apply:

• Account Data: Retained for the lifetime of your active account plus a minimum of 5 years following account closure, as required by AML regulations;
• KYC Documents: Retained for a minimum of 5 years from the date of submission, or longer if required by our licensing authority;
• Transaction Records: Retained for a minimum of 5 years in accordance with financial record-keeping obligations;
• Support Communications: Retained for 3 years from the date of the last interaction;
• Analytics Data: Retained in aggregated, anonymised form indefinitely; individual usage logs are purged after 24 months;
• Marketing Consent Records: Retained for the period of your account plus 3 years thereafter as proof of consent.

Once the applicable retention period expires, your data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.

8 Data Security

e98win employs a multi-layered security architecture designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard TLS 1.2 or higher;
• AES-256 Encryption at Rest: Sensitive data stored in our databases — including KYC documents and financial records — is encrypted using AES-256 at the storage level;
• Two-Factor Authentication (2FA): e98win enforces OTP-based 2FA for all account logins via your registered Pakistani mobile number;
• Access Controls: Internal access to personal data is strictly role-based. Only personnel with a legitimate operational need may access player records, and all internal access is logged and audited;
• Regular Security Audits: Our platform undergoes periodic third-party penetration testing and security audits to identify and remediate vulnerabilities proactively;
• Breach Response Protocol: In the event of a data breach that poses a risk to your rights, e98win will notify affected players and relevant authorities within 72 hours of confirmed discovery.

9 Your Rights

As an e98win player, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting us at [email protected]:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this within 30 days of a valid request;
• Right to Rectification: If any data we hold about you is inaccurate or incomplete, you may request that we correct it without undue delay;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that certain data must be retained for legal and regulatory compliance and cannot be deleted on request alone;
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances — for example, while a dispute regarding its accuracy is being resolved;
• Right to Data Portability: You may request that we provide your account data in a structured, machine-readable format where technically feasible;
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10 Children's Privacy

e98win is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps, and full KYC verification is required before any withdrawal is processed.

If we become aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on e98win, please report this to us immediately at [email protected] so that we can investigate and act swiftly.

11 International Data Transfers

As an internationally licensed gaming platform, e98win may transfer your personal data to servers and service providers located outside Pakistan. Such transfers are necessary to operate the Platform and engage our KYC, fraud prevention, and payment processing partners.

Whenever personal data is transferred internationally, e98win ensures that adequate safeguards are in place. These safeguards include:

• Contractual data processing agreements with all third-party recipients that mandate data protection standards equivalent to those applied by e98win;
• Transfer only to jurisdictions that provide an adequate level of data protection as assessed by our compliance team;
• Use of encrypted transmission channels for all cross-border data transfers.

12 Third-Party Services

The e98win Platform integrates with third-party service providers to deliver certain features. These include game content providers, live streaming infrastructure, KYC verification platforms, payment gateways, and customer support tools.

Each third-party service provider has its own privacy practices. While e98win carefully vets all partners and requires them to comply with our data protection standards via contractual agreements, e98win cannot be held responsible for the independent privacy practices of third-party services accessed outside the e98win Platform itself. We do not include external links to third-party websites on the e98win Platform.

13 Changes to This Privacy Policy

e98win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Any material changes will be communicated to registered players via email notification to the address on file and/or a prominent notice on the Platform.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this page periodically. Your continued use of the e98win Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree with a material change to this Policy, you may request account closure by contacting customer support. Any verified real-money balance will be returned to you via your registered payment method following completion of final KYC checks.

14 Contact & Complaints

For all privacy-related enquiries, data rights requests, or complaints regarding e98win's handling of your personal data, please contact our Data Protection team:

• Email: [email protected]
• Subject Line: Use "Privacy Request – [Your Full Name]" to ensure your request is routed to the correct team;
• Response Time: We aim to acknowledge all privacy requests within 3 business days and resolve them within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or gaming regulatory body under whose jurisdiction e98win operates. Details of the applicable regulatory authority are available on request.