n998 Privacy Policy

01 Introduction

Welcome to n998 — Pakistan's leading online casino and sports betting platform, designed from the ground up for mobile-first Pakistani players. n998 is operated under an internationally recognised gaming license and is committed to protecting the personal data of every user who accesses our platform, whether from Karachi, Lahore, Islamabad, Faisalabad, or anywhere else across Pakistan.

This Privacy Policy ("Policy") describes in full detail how n998 ("we", "us", "our", "the Platform") collects, stores, processes, and shares personal information relating to registered users and site visitors ("you", "the User", "the Player"). It applies to all interactions with the n998 platform, including account registration, deposits and withdrawals in PKR, cricket betting, live casino gameplay, slot sessions, and any communication with our 24/7 support team.

This Policy is to be read alongside n998's Terms & Conditions and Responsible Gaming Policy. Together, these three documents form the complete agreement between you and n998 regarding your use of the platform.

By registering an n998 account, making a deposit, or otherwise using the platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not create an account or continue using the n998 platform.

02 Data We Collect

n998 collects personal data that is strictly necessary for operating a licensed gaming platform safely, compliantly, and effectively. We do not collect data for its own sake — every category of data we gather serves a specific, defined purpose. The categories of personal data n998 collects include:

03 How We Use Your Data

All personal data collected by n998 is used for specific, legitimate purposes directly related to the operation of the platform and the delivery of services to Pakistani players. n998 does not use your personal data for any purpose that is incompatible with the purposes listed at the time of collection.

• Account Management: Creating, maintaining, and securing your n998 registered account; authenticating your identity at login; processing account closure or self-exclusion requests;
• Identity & Age Verification: Confirming that you are at least 21 years of age; verifying that the identity details you have provided are accurate and belong to you personally;
• Financial Processing: Processing PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; processing withdrawal requests to your verified payment method; reconciling transaction records;
• Gaming Services: Enabling cricket betting markets including PSL fixtures and Pakistan national team matches; providing access to live casino games, slot titles, and other gaming content;
• Fraud Prevention & AML Compliance: Monitoring transaction patterns for money laundering indicators; detecting and preventing duplicate accounts, bonus abuse, and unauthorised access;
• Customer Support: Responding to your queries, complaints, and support requests via live chat and email; maintaining records of support interactions for quality and compliance purposes;
• Responsible Gaming: Monitoring gaming activity to identify signs of problem gambling behaviour; enforcing deposit limits, loss limits, and self-exclusion decisions;
• Marketing Communications: Sending you details of relevant promotions, bonuses, and platform updates — only where you have given explicit consent to receive such communications. You may withdraw this consent at any time via your account settings.

04 Legal Basis for Processing

n998 processes personal data on the following legal bases, in accordance with the data protection framework applicable under our international gaming license:

• Contractual Necessity: Processing required to fulfil our obligations to you as a registered n998 user — including account creation, PKR transaction processing, and delivery of gaming services;
• Legal Obligation: Processing required to comply with our obligations under our gaming license, Anti-Money Laundering (AML) regulations, and Know Your Customer (KYC) requirements — including identity verification and transaction monitoring;
• Legitimate Interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, and improvement of our services — where these interests are not overridden by your own rights and interests;
• Consent: Processing for marketing communications — conducted only where you have provided clear, informed, and freely given consent. This consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

05 Data Sharing & Disclosure

n998 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Full stop. Your data is shared only in the following specific circumstances, and only to the minimum extent necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency gateway providers receive the transaction data necessary to process your deposits and withdrawals. These parties are contractually bound to use your data only for payment processing purposes;
• Game Content Providers: Third-party game studios and live casino providers that supply games on the n998 platform receive anonymised or pseudonymised session data necessary to deliver their games. They do not receive your full identity profile;
• Identity Verification Services: Where required by our KYC obligations, we may share identity documents with licensed verification service providers. These partners operate under strict data handling agreements;
• Regulatory & Law Enforcement Authorities: n998 is legally required to disclose relevant player data to licensing authorities, financial intelligence units, and law enforcement agencies where a lawful request is received — for example, in connection with an AML investigation or a court order;
• Responsible Gaming Organisations: In cases where self-exclusion is requested through a multi-operator exclusion scheme, limited data may be shared with the relevant scheme administrator to enforce the exclusion across participating platforms;
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of n998's operating entity, user data may be transferred to a successor operator under the same or equivalent data protection obligations.

06 Payment Data & PKR Transactions

n998 operates a PKR-denominated wallet system for all Pakistani registered players. All deposit and withdrawal transactions in Pakistani Rupees are processed through our approved payment channels: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and supported cryptocurrency networks.

Payment data — including mobile wallet numbers, bank account details, and transaction reference numbers — is handled with the highest level of security. n998 does not store full payment credentials on our own servers beyond what is necessary for transaction reconciliation and AML record-keeping. Sensitive payment details are tokenised and encrypted at rest using AES-256 encryption.

n998 retains PKR transaction records for a minimum of five years following the last transaction, as required under our international gaming license's AML compliance obligations. These records are stored in a restricted-access, encrypted environment and are only accessible to authorised compliance personnel and, where legally required, to relevant regulatory authorities.

07 Cookies & Tracking Technologies

n998 uses cookies and similar tracking technologies to operate the platform effectively, maintain your login session, analyse usage patterns, and where applicable, deliver relevant promotional content to users who have consented to marketing communications.

The categories of cookies used on the n998 platform are as follows:

• Essential Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens, and load balancing cookies. These cannot be disabled without breaking core functionality;
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and responsible gaming tool configurations. These improve your experience but are not strictly essential;
• Analytics Cookies: Used to understand how players interact with the n998 platform — which pages are visited most, how long sessions last, and where users encounter friction. This data is aggregated and anonymised and is used to improve the platform;
• Marketing Cookies: Used only where you have consented to receive promotional communications from n998. These allow us to understand which promotions you have viewed and to avoid sending you duplicate offers.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling essential cookies will affect your ability to use the n998 platform normally, including the ability to stay logged in and process transactions.

08 Data Retention

n998 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your registered account plus a minimum of five years following account closure;
• Financial & Transaction Records: Retained for a minimum of five years following the date of the last transaction, as required for AML compliance under our gaming license conditions;
• Identity Verification Documents: Retained for five years following account closure or the conclusion of any regulatory investigation, whichever is later;
• Support Communication Records: Live chat transcripts and email correspondence are retained for three years following the closure of the relevant support interaction;
• Gaming Activity Logs: Retained for three years following the last gaming session or account closure, whichever is later;
• Marketing Consent Records: Retained for the duration of consent plus three years, to demonstrate compliance with consent requirements.

Once the applicable retention period expires, data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual user.

09 Security Measures

n998 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Security is not an afterthought at n998 — it is a core operational requirement of our international gaming license.

• Transport Layer Security: All data transmitted between your device and the n998 platform is encrypted using TLS 1.3, the current industry standard for secure web communications;
• At-Rest Encryption: Personal data stored on n998 servers is encrypted at rest using AES-256 encryption. Payment data is additionally tokenised;
• Access Controls: Access to personal data within n998's systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and regularly audited;
• Intrusion Detection: n998 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time;
• Two-Factor Authentication: n998 supports and encourages the use of two-factor authentication (2FA) on all registered accounts as an additional layer of protection against unauthorised login;
• Penetration Testing: The n998 platform undergoes regular independent security penetration testing to identify and remediate vulnerabilities before they can be exploited.

10 Your Rights

As an n998 registered user, you hold a number of rights in relation to your personal data. These rights are grounded in the data protection framework that governs our international gaming license and reflect our commitment to treating your information with respect and transparency.

• Right of Access: You may request a copy of all personal data n998 holds about you at any time. We will respond to verified access requests within 30 days;
• Right to Rectification: If any personal data n998 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For name and date of birth corrections, supporting identity documentation will be required;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that AML and gaming license requirements mean we cannot delete transaction and identity data within the mandatory retention periods even on request;
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data while a rectification or objection request is being assessed;
• Right to Data Portability: You may request that your personal data be provided to you in a structured, commonly used, machine-readable format where technically feasible;
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming monitoring purposes. We will assess each objection on its merits;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of these rights, please contact n998's support team via the live chat on the platform or via email at [email protected]. We will verify your identity before processing any data rights request.

11 Minors & Age Verification

Age verification is a mandatory step in the n998 account registration process. Users are required to confirm their date of birth at the point of registration, and n998 reserves the right to request government-issued photo ID to verify this information at any stage. This process may involve sharing identity documents with a licensed third-party verification provider, as described in Section 5 of this Policy.

If you are a parent or guardian and have reason to believe that a minor under your care has registered an n998 account or accessed our platform, please contact our support team immediately via live chat or by emailing [email protected]. We take all such reports seriously and will respond within 24 hours.

12 International Data Transfers

n998 is operated under an international gaming license and its technical infrastructure may involve data processing in jurisdictions outside Pakistan. When personal data is transferred outside Pakistan — for example, to servers operated by our gaming license authority's jurisdiction — n998 ensures that appropriate safeguards are in place to protect that data to an equivalent standard as described in this Policy.

Safeguards used for international data transfers include contractual data processing agreements with all third-party processors, adherence to the data protection standards required under our gaming license, and the use of encryption for all data in transit regardless of geographic route.

n998 does not transfer personal data to any jurisdiction that does not provide an adequate level of data protection without first implementing additional contractual or technical safeguards to compensate for that difference.

13 Changes to This Policy

n998 reserves the right to update, amend, or replace this Privacy Policy at any time. When a material change is made — one that meaningfully affects how your personal data is collected, used, or shared — we will notify you via the email address registered to your n998 account and/or via a prominent notice displayed on the platform upon your next login.

Minor updates, such as clarifications of existing language or corrections to typographical errors, may be made without individual notification. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Your continued use of the n998 platform following the effective date of any change constitutes your acceptance of the updated Policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data n998 holds about you, our support team is available 24 hours a day, 7 days a week via live chat on the n998 platform. For formal data subject requests or compliance enquiries, please use the contact details below.