n98 Privacy Policy

1 Introduction & Scope

n98 ("n98", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the n98 platform at n98.cam. This Privacy Policy applies to all personal data collected through the n98 website, mobile-optimised platform, live support chat, email correspondence, and any other channel through which you provide information to n98.

This Policy is to be read alongside our Terms & Conditions. By using the n98 platform or registering an account, you confirm that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy applies to all registered players, prospective players who have visited the platform without registering, and any individual who contacts n98 through any available support channel.

2 Data Controller

For the purposes of applicable data protection law, n98 is the data controller in respect of the personal data collected through the n98 platform. As data controller, n98 determines the purposes for which your personal data is processed and the manner in which that processing takes place.

n98 operates under an international gaming license. All data processing activities are conducted in compliance with the data protection obligations imposed by that licensing framework, as well as any applicable local obligations relevant to the territories in which n98 operates.

Where n98 engages third-party service providers to process personal data on its behalf — for example, KYC verification providers, payment processors, or analytics platforms — those providers act as data processors under written agreements that bind them to process data only on n98's instructions and to maintain appropriate security standards.

3 Data We Collect

n98 collects personal data through several channels and for several distinct purposes. The categories of personal data we collect are as follows:

3.1 Registration Data

When you create an n98 account, we collect the information you provide during the registration process, including:

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Pakistani mobile number
• Email address
• Residential address
• Username and password (stored in encrypted form)

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, we collect and process identity documents when required, including:

• CNIC (Computerised National Identity Card) or equivalent government-issued photo ID
• Proof of address documentation
• Source of funds documentation where required by our compliance procedures

3.3 Transaction Data

We record all financial transactions on your n98 account, including deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20, as well as all withdrawal transactions, bonus credits, and wager records.

3.4 Usage & Technical Data

We automatically collect certain technical data when you access the n98 platform, including your IP address, device type, operating system, browser type, session duration, pages visited, and in-game activity logs.

3.5 Communications Data

If you contact n98 via live chat, email, or any other support channel, we retain records of that correspondence, including the content of messages and any attachments.

4 How We Use Your Data

n98 processes your personal data for the following purposes:

• Account administration: Creating and managing your n98 account, processing login requests, and maintaining your account history and preferences.
• Age and identity verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity in compliance with KYC obligations.
• Payment processing: Processing deposits and withdrawals through your selected PKR payment method and maintaining accurate financial records of all transactions.
• Fraud prevention and security: Monitoring account activity for indicators of fraud, unauthorised access, money laundering, or prohibited conduct as defined in our Terms & Conditions.
• Regulatory compliance: Fulfilling obligations imposed by our gaming license, anti-money laundering frameworks, and any applicable data protection legislation.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality and accountability purposes.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and to enforce deposit limits, cooling-off periods, or self-exclusion requests where applicable.
• Platform improvement: Analysing aggregated usage data to improve the performance, security, and user experience of the n98 platform.
• Marketing communications: Sending promotional communications where you have provided consent to receive them. You may opt out of marketing communications at any time through your account settings or by contacting support.

5 Legal Basis for Processing

n98 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to perform the contract between you and n98, including account registration, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable law, including KYC identity verification, anti-money laundering monitoring, and regulatory reporting obligations under our gaming license.
• Legitimate interests: Processing carried out for the legitimate interests of n98, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of direct marketing communications. Where consent is the basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

6 Cookies & Tracking

n98 uses cookies and similar tracking technologies to provide a functional, personalised, and secure experience on the platform. A cookie is a small text file placed on your device when you visit a website. n98 uses the following categories of cookies:

• Strictly necessary cookies: These are required for the n98 platform to function correctly. They include session management cookies that keep you logged in during your visit and security cookies that protect your account from unauthorised access. These cookies cannot be disabled.
• Functional cookies: These remember your preferences, such as your preferred language, display settings, and responsible gaming limit configurations, so you do not need to re-enter them on each visit.
• Analytics cookies: These collect aggregated, anonymised information about how players use the n98 platform — such as which pages are visited most frequently and how long sessions last — enabling us to improve platform performance and content.
• Security and fraud prevention cookies: These help n98 detect and prevent fraudulent activity by identifying unusual device or behaviour patterns during a session.

You may control cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the n98 platform. Strictly necessary cookies cannot be disabled without preventing core platform features from operating.

7 Data Sharing

n98 does not sell your personal data to any third party. We share your personal data only in the following limited circumstances:

• Payment processors: Your transaction data is shared with your selected payment provider (such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, or USDT TRC20 processing partners) to the extent necessary to complete the transaction. These providers are bound by their own regulatory and contractual data protection obligations.
• KYC and identity verification providers: Where n98 uses a third-party provider to assist with identity document verification, your KYC documents and personal data may be shared with that provider solely for the purpose of completing the verification. These providers operate as data processors under binding agreements with n98.
• Game software providers: Certain game providers integrated into the n98 platform may receive limited technical data — such as a player session token or anonymised player ID — to facilitate gameplay. No directly identifying personal data is shared with game providers beyond what is operationally necessary.
• Regulatory and legal authorities: n98 may disclose your personal data to competent authorities, regulators, law enforcement agencies, or courts where required to do so by applicable law, court order, or our gaming license obligations. We will only disclose the minimum data necessary to fulfil the legal requirement.
• Fraud prevention agencies: In cases where n98 has reasonable grounds to suspect fraudulent activity, money laundering, or other prohibited conduct, we may share relevant data with fraud prevention agencies or financial intelligence units as required.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of n98's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

8 International Transfers

As an internationally licensed online gaming platform, n98 may process and store personal data in jurisdictions outside Pakistan. Where personal data is transferred internationally, n98 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to, or greater than, the protections afforded under applicable data protection frameworks.

Such safeguards may include contractual clauses binding the recipient to data protection standards, the use of processors located in jurisdictions with recognised adequacy determinations, or other lawful transfer mechanisms available under applicable law.

9 Data Retention

n98 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or our gaming license obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a minimum of five (5) years following permanent account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following the end of the customer relationship, as required by applicable AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for a minimum of three (3) years following the resolution of the support interaction, or longer where records are relevant to an ongoing dispute or legal proceeding.
• Technical and usage data: Retained in identifiable form for up to twelve (12) months, after which data is anonymised or deleted.

When personal data is no longer required for any lawful purpose, n98 will securely delete or anonymise it using industry-standard data destruction procedures.

10 Data Security

n98 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the n98 platform is encrypted using TLS (Transport Layer Security). Passwords are stored using strong one-way cryptographic hashing algorithms and are never stored in plain text.
• Access controls: Access to personal data within n98's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access to sensitive data is logged and subject to regular audit.
• Infrastructure security: n98's platform infrastructure is hosted in secure data centres with physical access controls, network firewalls, and intrusion detection systems.
• Regular security assessments: n98 conducts periodic security reviews and vulnerability assessments of its systems and data handling processes.
• Incident response: n98 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, n98 will notify the relevant supervisory authority and affected players in accordance with applicable legal obligations.

While n98 takes all reasonable steps to protect your personal data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your n98 account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

11 Your Rights

Subject to applicable law and the limitations imposed by our legal and regulatory obligations, you have the following rights in relation to your personal data held by n98:

• Right of access: You have the right to request a copy of the personal data n98 holds about you, along with information about how that data is processed.
• Right to rectification: You have the right to request that n98 correct any inaccurate or incomplete personal data held about you. Certain data corrections may require supporting documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to limitations where n98 is required to retain data by law — for example, AML record-keeping requirements will take precedence over an erasure request.
• Right to restrict processing: You may request that n98 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of n98's legitimate grounds.
• Right to data portability: Where processing is based on your consent or a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on n98's legitimate interests. n98 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact n98 support via live chat or email at [email protected]. n98 will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case n98 will notify you of the extension and the reasons for it.

12 Children & Minors

The n98 platform is strictly intended for adults aged 21 years and older. n98 does not knowingly collect, process, or store personal data belonging to individuals under the age of 21.

If n98 discovers or has reason to believe that a registered player is under 21 years of age, the account will be immediately suspended, any outstanding bets or game rounds will be voided, and the account will be closed following confirmation of the player's age. Any funds remaining in the account will be returned to the verified payment method after completion of age verification procedures.

If you believe that a minor has registered an account on n98 or that n98 has inadvertently collected personal data belonging to a minor, please contact n98 support immediately at [email protected] so that the matter can be investigated and resolved promptly.

n98 employs age verification technology and KYC procedures as the primary mechanism for preventing underage access to the platform. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling services.

13 Third-Party Services

The n98 platform integrates with third-party service providers to deliver certain functionality, including game content from licensed game studios, payment processing via local Pakistani payment networks, and identity verification technology. While n98 carefully selects and contracts with reputable providers, each of these third parties operates under its own privacy policy and data handling practices.

n98 is not responsible for the privacy practices of third-party providers whose services are integrated into the platform. Where personal data is shared with these providers as described in Section 7, n98 ensures that appropriate data processing agreements are in place. However, players are encouraged to review the privacy policies of any third-party providers with which they interact directly.

The n98 platform does not contain links to external third-party websites for general browsing purposes. Any third-party integrations present on the platform are limited to operationally necessary service providers.

14 Policy Updates

n98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our gaming license obligations. When material changes are made to this Policy, n98 will notify registered players by sending a notification to the email address associated with their account and by publishing a prominent notice on the n98 platform.

The revised Privacy Policy will take effect from the date stated in the notice. Continued use of the n98 platform after the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not agree to the amended terms, you should cease using the platform and contact support to request account closure.

The current version of this Privacy Policy is always accessible at n98.cam/privacy-policy. The "Last Updated" date at the top of this document reflects when the most recent revision was made. We recommend reviewing this Policy periodically to remain informed of how n98 handles your personal data.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or n98's data processing practices, please contact us through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the n98 platform after logging into your account.

n98 aims to acknowledge all privacy-related correspondence within 24 hours and to provide a substantive response within 30 days. For data rights requests, please include your registered name, registered mobile number, and a brief description of your request to enable us to locate your account and action your request efficiently.