ab98 Privacy Policy

This Privacy Policy ("Policy") describes how ab98 ("ab98", "we", "us", "our") collects, processes, stores, and protects the personal information of individuals ("you", "your", "Player", "User") who access or use the ab98 online gaming platform available at ab98.club, including all associated services, games, betting markets, account features, and promotional activities (collectively, the "Services").

ab98 is committed to protecting your personal data in accordance with internationally recognised data protection principles and applicable privacy standards. We understand that players across Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan trust us with sensitive personal and financial information, and we treat that trust as a serious obligation.

By registering an ab98 account or using our Services in any capacity, you acknowledge that you have read and understood this Policy, and you consent to the collection, processing, and use of your personal data as described herein. This Policy is incorporated by reference into our Terms and Conditions, which govern your use of the ab98 platform.

ab98 collects the following categories of personal data from users of the platform. The specific data collected in respect of any individual player will depend on the nature of their use of the Services and the account verification requirements applicable at that time.

ab98 does not collect special category personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless expressly required for regulatory compliance purposes and with your explicit consent.

ab98 collects your personal data through the following methods:

• Direct collection: Information you provide directly to ab98 when creating an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access or use the ab98 platform, including through cookies, session tracking technologies, and server logs. Please refer to Section 8 (Cookies & Tracking) for more detail.
• Third-party sources: Identity and fraud-prevention data received from our KYC verification partners, payment processors (including JazzCash and EasyPaisa integration providers), and anti-money laundering screening services, strictly as necessary to verify your identity and comply with regulatory obligations.
• Publicly available sources: In limited circumstances, ab98 may verify information against publicly available databases for fraud detection and compliance purposes.

ab98 uses your personal data for the following purposes, always in accordance with the legal basis described in Section 5 of this Policy:

• Account management: To create and manage your ab98 account, verify your identity, process login requests, and maintain the security of your account.
• Service delivery: To provide access to all ab98 games and betting markets, process bets and game outcomes, and deliver the full range of Services available on the platform.
• Financial processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment channels; to settle winnings and apply bonuses to your account.
• Regulatory compliance: To fulfil our Know Your Customer (KYC) obligations, conduct anti-money laundering (AML) screening, verify age eligibility (21+), and comply with applicable international gaming standards and directives.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, multi-accounting, abuse of promotions, and other prohibited conduct as described in our Terms and Conditions.
• Customer support: To respond to your support requests, complaints, and enquiries; to manage responsible gaming tool activations including deposit limits and self-exclusion requests.
• Platform improvement: To analyse usage patterns, identify technical issues, conduct A/B testing, and improve the overall performance and user experience of the ab98 platform.
• Marketing and promotions: To send you relevant promotional offers, bonus notifications, and news about new games — but only where you have provided your consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.

ab98 processes your personal data under the following legal bases, as applicable to each processing activity:

• Contract performance: Processing that is necessary to perform our contractual obligations to you under the Terms and Conditions — including account management, bet settlement, deposit and withdrawal processing, and Service delivery.
• Legal obligation: Processing that is required to comply with applicable legal and regulatory requirements, including KYC verification, AML screening, age verification, and reporting obligations under applicable international standards.
• Legitimate interests: Processing carried out in pursuit of ab98's legitimate business interests, where those interests are not overridden by your rights and interests — including fraud prevention, platform security, responsible gaming monitoring, and analytics for platform improvement.
• Consent: Processing activities for which we rely on your freely given, informed, and specific consent — principally, the sending of direct marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

ab98 does not sell, rent, or otherwise disclose your personal data to third parties for their own independent commercial purposes. Your data may be shared in the following limited, controlled circumstances only:

• Payment processors: Financial data is shared with our regulated payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank integration providers — strictly as necessary to process deposits and withdrawals in Pakistani Rupees (PKR).
• Identity verification providers: Identity data is shared with licensed KYC and AML service providers to enable mandatory age and identity verification in accordance with our regulatory obligations.
• Technology and infrastructure providers: Technical data may be processed by our cloud hosting, content delivery network, and cybersecurity providers, who are contractually bound to process data only on our instructions and in accordance with appropriate security standards.
• Game content providers: Where ab98 offers games operated by third-party licensed providers (e.g., live casino tables), limited session and technical data may be shared with those providers for game integrity and customer support purposes. These providers operate under their own privacy policies and licensing requirements.
• Legal and regulatory authorities: ab98 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or legitimate regulatory request — including disclosures related to anti-money laundering investigations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ab98's business, your personal data may be transferred to the acquiring entity, subject to the same protections described in this Policy.

All third parties with whom ab98 shares your personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the specific purposes for which it was shared.

Given the financial nature of the ab98 platform, the processing of payment and identity data is subject to additional requirements that reflect our obligations under applicable international anti-money laundering and Know Your Customer standards.

When you make a deposit or request a withdrawal on ab98, the following data processing activities take place:

• Your payment method details (JazzCash wallet number, EasyPaisa account, bank account details) are verified against your registered account name to confirm they belong to you and not a third party.
• Transaction data — including amounts, dates, payment channels, and counterparty details — is logged in our secure transaction records for regulatory reporting and dispute resolution purposes.
• For withdrawals above defined thresholds, or where our monitoring systems flag unusual transaction patterns, ab98 may request additional source-of-funds documentation before processing the transaction.

All payment data is transmitted using TLS encryption. ab98 does not store full payment card numbers or sensitive authentication data. KYC documents submitted by players are stored in encrypted form and accessed only by authorised compliance personnel on a strict need-to-know basis.

ab98 uses cookies and similar tracking technologies on our platform to enhance your experience, ensure the security of your session, and collect analytics data that helps us improve the Services. The following categories of cookies are used on the ab98 platform:

You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the ab98 platform. Strictly necessary and security cookies cannot be disabled as they are essential to the operation and integrity of the Services.

ab98 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active ab98 account, and for a minimum of five (5) years following account closure, to comply with AML record-keeping requirements and to handle any post-closure disputes or regulatory enquiries.
• Transaction records: Financial transaction data — including deposit records, withdrawal records, bet history, and bonus transactions — is retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: Identity verification documents are retained for the period required under applicable international AML standards, which is typically five (5) years following the end of the customer relationship.
• Support communications: Live chat transcripts and email correspondence are retained for up to two (2) years from the date of the communication, unless a longer retention period is required for an ongoing dispute or investigation.
• Usage and analytics data: Aggregated usage data is retained for analytical purposes and may be kept indefinitely in anonymised form. Individual-level usage data is retained for up to two (2) years.
• Marketing consent records: Records of your marketing preferences and consent history are retained for as long as you hold an active ab98 account, and for one (1) year following account closure.

When personal data is no longer required and no legal basis for continued retention exists, ab98 will securely delete or irreversibly anonymise that data in accordance with our internal data management procedures.

ab98 respects your rights in relation to your personal data. The following rights are available to you, subject to applicable legal limitations and verification of your identity before any request is actioned:

To exercise any of these rights, please contact our support team via live chat within your ab98 account dashboard or by emailing [email protected]. ab98 will respond to verified requests within thirty (30) days. We may request proof of identity before processing your request to ensure your data is not disclosed to unauthorised parties.

ab98 operates a strict 21 years of age minimum policy. Our Services are not directed at, and are not intended for use by, anyone under the age of 21. ab98 does not knowingly collect personal data from individuals under the age of 21.

As part of our registration and KYC verification process, all players are required to provide proof of age. Any account found to belong to a player under the age of 21 will be immediately suspended, all funds held in the account will be dealt with in accordance with our Terms and Conditions, and the matter may be referred to the appropriate authorities where required.

If you have reason to believe that a person under the age of 21 has registered an ab98 account or is accessing our platform, please contact our support team immediately via live chat or at [email protected]. We take underage gambling extremely seriously and will act swiftly on any credible report.

ab98 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the ab98 platform is encrypted using TLS (Transport Layer Security) protocols. Our platform enforces HTTPS across all endpoints.
• Encryption at rest: Sensitive personal and financial data stored in our databases is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted to authorised ab98 personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Multi-factor authentication: ab98 supports and encourages the use of two-factor authentication (2FA) on player accounts to reduce the risk of unauthorised account access.
• Continuous monitoring: Our infrastructure is monitored around the clock for anomalous activity, attempted intrusions, and data breach indicators. Automated alerting systems are in place to enable rapid incident response.
• Third-party security assessments: ab98 conducts periodic security reviews and vulnerability assessments of our platform infrastructure to identify and remediate potential security weaknesses before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ab98 will notify affected players without undue delay in accordance with our breach notification obligations.

ab98 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable legal requirements, or improvements to our Services. The current version of this Policy, along with its effective date, will always be published on this page.

Where we make material changes to this Policy — changes that significantly affect your rights or how your data is processed — we will notify you proactively via email to your registered address or via a prominent notice within your ab98 account dashboard, prior to the changes taking effect.

Your continued use of the ab98 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should discontinue use of the Services and contact our support team to close your account.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way ab98 processes your personal data, please contact our support team using any of the following channels:

• Live chat: Available 24/7 via your ab98 account dashboard — the fastest way to reach us for any privacy-related query.
• Email: [email protected] — for formal privacy requests, data subject access requests, or complaints. Please include "Privacy Request" in your subject line to ensure your message is routed to our compliance team.

ab98 will acknowledge all privacy-related requests within five (5) business days and will endeavour to resolve substantive requests within thirty (30) calendar days. Complex requests — particularly those involving large volumes of data or requiring legal review — may take longer, in which case we will inform you of the extended timeline.

ab98 is committed to resolving privacy complaints internally in the first instance. However, if you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.