b998 Privacy Policy
Your Data. Protected.

This Privacy Policy applies to all personal data collected, processed, stored, or transmitted by b998 in connection with the operation of the b998 online casino and sports betting platform, accessible at b998.club. This Policy applies to all users of the b998 platform regardless of the device or method of access, including desktop browsers, mobile browsers, and any b998 applications made available to Pakistani players.

b998 operates as a data controller in respect of the personal data it collects from registered account holders. This means that b998 is responsible for determining the purposes and means by which your personal data is processed. Where b998 engages third-party service providers who process personal data on b998's behalf — such as payment processors and identity verification partners — those parties act as data processors under b998's instruction and are bound by contractual data protection obligations.

This Policy does not apply to third-party websites or services that may be linked to or from the b998 platform. b998 is not responsible for the privacy practices of external parties and encourages Pakistani players to review the privacy policies of any third-party services they access independently of b998.

b998 collects personal data in the following categories. The data collected at each stage reflects what is strictly necessary to provide the relevant service or meet the applicable legal obligation.

b998 does not collect special categories of sensitive personal data (such as biometric data used for identification, health data, or political opinions) except where biometric comparison is required as part of a mandatory identity verification process, in which case it is collected solely for that purpose and is not retained beyond the verification procedure.

b998 collects your personal data through the following channels and mechanisms:

• Direct submission: Data you provide directly to b998 during account registration, identity verification, payment method setup, support interactions, and responsible gaming tool activation.
• Automated technical collection: Data collected automatically when you access or interact with the b998 platform, including IP address, session cookies, device fingerprint data, and gameplay event logs.
• Payment partner verification: Confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay in connection with processing your PKR transactions, limited to what is necessary to validate and settle each transaction.
• Identity verification partners: Verification confirmation data from b998's authorised KYC partners where automated CNIC validation is used as part of the account verification process.
• Fraud prevention systems: Risk signals generated by b998's internal fraud detection systems based on patterns of account activity, device usage, and transaction behaviour.

b998 processes your personal data only where a valid legal basis exists. The following table sets out the primary purposes for which b998 processes personal data and the corresponding legal basis for each:

Where b998 relies on legitimate interest as the legal basis for processing, we have conducted a balancing assessment to ensure that our legitimate interests are not overridden by your privacy rights and fundamental freedoms. You may request a copy of any such assessment by contacting b998 support.

b998 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Your personal data may be shared only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processing partners receive the minimum data necessary to process and reconcile your PKR transactions.
• Identity verification partners: b998's authorised KYC providers receive CNIC data and verification photographs solely for the purpose of confirming your identity and age in accordance with our legal obligations.
• Game software providers: Third-party game studios and live dealer platform providers receive your b998 player ID and game session data necessary to deliver the game service. They do not receive your CNIC, payment account details, or contact information.
• Fraud prevention and cybersecurity partners: Anonymised or pseudonymised risk data may be shared with b998's fraud prevention technology partners to identify and block fraudulent activity patterns across the platform.
• Legal and regulatory authorities: b998 will disclose personal data to Pakistani law enforcement, financial intelligence units, or regulatory bodies where required to do so by applicable law, valid court order, or regulatory instruction. b998 will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of b998's business or assets, personal data held by b998 may be transferred to the acquiring entity, subject to equivalent data protection obligations being maintained.

b998 processes all financial transactions in Pakistani Rupees (PKR) through regulated payment channels. The following specific rules apply to the handling of payment-related personal data on the b998 platform:

• b998 does not store your full JazzCash PIN, EasyPaisa wallet password, HBL internet banking credentials, or any other payment account authentication details. b998 receives only a confirmation reference from the payment provider following a completed transaction.
• Your JazzCash or EasyPaisa mobile number is stored in encrypted form and is used exclusively for transaction reconciliation and identity verification purposes. It is never shared with third parties for marketing.
• USDT TRC20 wallet addresses submitted to b998 for cryptocurrency withdrawals are stored in encrypted form and are used solely to process your withdrawal instruction. b998 does not perform blockchain analytics on wallet addresses beyond what is necessary for AML compliance.
• All transaction records — including deposit amounts, withdrawal amounts, timestamps, and payment method references — are retained by b998 for a minimum of five years in compliance with applicable anti-money laundering record-keeping obligations.
• Where a withdrawal request is subject to identity verification, b998 may share your name and payment account reference with the relevant payment provider to confirm account ownership. This sharing is limited to what is strictly necessary for the verification process.

b998 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data held by b998:

Following the expiry of the applicable retention period, b998 will securely delete or anonymise your personal data. Where anonymisation is used, the resulting anonymised data set — which can no longer be linked to you as an individual — may be retained by b998 indefinitely for statistical and platform improvement purposes.

b998 employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The following technical and organisational measures are in place across the b998 platform:

• TLS 1.3 encryption is enforced on all data transmitted between your device and b998's servers. Unencrypted HTTP connections are automatically redirected to HTTPS.
• AES-256 encryption at rest is applied to all personally identifiable data and financial data stored in b998's databases, including CNIC references, payment account identifiers, and contact details.
• Access controls: Access to personal data within b998's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Two-factor authentication (2FA) is available to all b998 account holders and is enforced for internal staff accessing production systems and player data.
• Regular penetration testing is conducted by independent security specialists to identify and remediate vulnerabilities in b998's platform infrastructure before they can be exploited.
• Incident response plan: b998 maintains a formal data breach incident response plan. In the event of a confirmed breach, affected Pakistani players will be notified within 72 hours with clear guidance on protective actions.

While b998 takes all reasonable technical and organisational steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your b998 account credentials, including not sharing your password or OTP with any person, including individuals claiming to represent b998 support.

b998 uses cookies and similar client-side tracking technologies to operate the platform, remember your preferences, maintain your session, and measure platform performance. The following categories of cookies are used on the b998 platform:

• Strictly necessary cookies: These cookies are essential for the b998 platform to function. They maintain your login session, remember your language preference, and enable core platform features. These cookies cannot be disabled without disrupting your ability to use b998.
• Functional cookies: These cookies remember your b998 account preferences — such as responsible gaming limit settings, game display preferences, and notification settings — so you do not need to reconfigure them on each visit.
• Analytics cookies: b998 uses anonymised analytics data to understand how Pakistani players navigate the platform, which features are most used, and where improvements can be made. This data does not identify you personally.
• Security cookies: Short-lived cookies used by b998's fraud detection and bot prevention systems to distinguish legitimate human users from automated scripts attempting to access the platform.

b998 does not use third-party advertising cookies or cross-site tracking cookies. You can manage cookie preferences for functional and analytics cookies through your browser settings. Disabling strictly necessary cookies may impair your ability to log in and use the b998 platform.

As a b998 account holder, you have the following rights in respect of the personal data b998 holds about you. These rights can be exercised at any time by contacting b998 support via live chat and identifying yourself as a registered b998 player:

• Right of access: You have the right to request a copy of all personal data that b998 holds about you, including your account data, transaction history, and communications records.
• Right to rectification: If any personal data b998 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Note that corrections to KYC identity data may require re-verification.
• Right to erasure ("right to be forgotten"): You may request that b998 delete your personal data. This right is subject to b998's legal retention obligations — for example, AML regulations require transaction records to be retained for five years and this cannot be overridden by an erasure request.
• Right to restriction of processing: You may request that b998 restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or object to a particular processing purpose.
• Right to data portability: You may request that b998 provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to b998 processing your personal data on the basis of legitimate interest, including processing for direct marketing purposes. Upon receiving a valid objection, b998 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where b998 processes your data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

b998 will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case b998 will notify you of the extension and the reasons for it. There is no fee for exercising your data rights, although b998 reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

The b998 platform is strictly intended for adults aged 21 and above. b998 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the b998 account registration and KYC process, and b998 reserves the right to suspend or permanently close any account where the account holder is found to be under 21 years of age.

Where b998 discovers that personal data has been collected from a minor through a fraudulently created account, the following steps will be taken without delay:

• The account will be immediately suspended pending investigation.
• All funds held in the account will be frozen pending review and, where applicable, returned to the payment source.
• All personal data associated with the account will be permanently deleted from b998's systems, subject only to any legally mandated retention obligations.
• The incident will be reported to b998's responsible gaming team and, where required by law, to the relevant regulatory authority.

Parents and guardians in Pakistani households are encouraged to make use of internet filtering tools and parental control software to restrict access to online gambling platforms on devices accessible to minors. b998 can provide guidance on recommended tools upon request via live chat support.

b998 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or the way in which the b998 platform operates. The current version of the Privacy Policy is always available on this page and is identified by its version number and effective date at the top of the document.

Where a change to this Privacy Policy is material — meaning it significantly affects how b998 processes your personal data or your rights as a player — b998 will notify registered account holders by means of a platform notification, an SMS to the mobile number registered to your b998 account, or an email to your registered address. The notification will be sent at least 14 days before the updated Policy takes effect, giving you time to review the changes and, if you do not agree, close your account.

Your continued use of the b998 platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with a material change to this Policy, you may close your b998 account and request erasure of your personal data subject to applicable legal retention obligations by contacting b998 support via live chat.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which b998 handles your personal data, please contact b998's data protection team through the following channels:

• Live Chat: Available 24/7 on the b998 platform — average response time 3–5 minutes. Request to be connected to the data protection team when prompted.
• Email: [email protected] — please include "DATA PROTECTION REQUEST" in your subject line for priority routing. Responses to data protection enquiries are provided within 5 business days.

b998 takes all data protection enquiries seriously and treats them with strict confidentiality. All correspondence with the b998 data protection team is logged for audit and quality assurance purposes and is not shared with parties outside b998's data protection function without your consent or a legal obligation to do so.

b998 is committed to resolving all data protection concerns directly with Pakistani players in the first instance. If you feel that b998 has not adequately addressed your concern, you retain the right to escalate the matter to the relevant supervisory authority in your jurisdiction.