Privacy Policy

rpk98 (hereinafter referred to as "rpk98", "we", "us" or "our") operates the online sports betting and live casino information platform accessible at rpk98.cam. This Privacy Policy describes how rpk98 collects, uses, stores, discloses and protects personal data relating to individuals (hereinafter "you", "your" or "User") who access or use the Platform, register an account, or interact with our services in any capacity.

rpk98 is committed to handling your personal data responsibly, transparently and in accordance with the data protection requirements of the jurisdiction under which we hold our international operating licence. This Policy applies to all personal data processed by rpk98 in connection with the Platform, regardless of whether you access it from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or any other location.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately. This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy, both of which form part of your overall agreement with rpk98.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Account" means a registered user account on the rpk98 Platform.
• "Controller" means the entity that determines the purposes and means of processing personal data — in this context, rpk98.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed by rpk98.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, device identifiers and financial transaction records.
• "Platform" means the rpk98 website, mobile site and any associated applications operated at rpk98.cam.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, alteration and deletion.
• "Processor" means any third party that processes personal data on behalf of rpk98 under a data processing agreement.
• "Sensitive Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data or data concerning a person's sex life or sexual orientation.

rpk98 collects only the categories of personal data that are necessary for the purposes described in this Policy. The categories of data we collect include:

3.1 Identity Data

Full legal name, date of birth, nationality and government-issued identification numbers (such as your Pakistani National Identity Card (CNIC) number, passport number or driving licence number) collected as part of the KYC (Know Your Customer) verification process.

3.2 Contact Data

Email address, mobile phone number and residential address, including city (e.g., Karachi, Lahore, Islamabad) and postcode, as provided during registration or account updates.

3.3 Financial Data

Bank account details, mobile wallet identifiers (contextual references only — e.g., Easypaisa, JazzCash, Raast account references), transaction history, deposit and withdrawal records, and account balance information.

3.4 Technical Data

IP address, browser type and version, device type, operating system, time zone, session duration, pages visited, clickstream data, and other diagnostic information automatically collected when you access the Platform.

3.5 Behavioural Data

Betting history, game preferences, wagering patterns, promotional offer usage, and responsible gambling tool activations (such as deposit limit changes or self-exclusion requests).

3.6 Communications Data

Records of communications between you and rpk98 customer support, including live chat transcripts, emails and any documents submitted in connection with a complaint or KYC request.

rpk98 collects personal data through the following means:

• 4.1 Direct Collection: Data you provide actively when registering an Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• 4.2 Automated Collection: Technical and behavioural data collected automatically through cookies, web beacons, server logs and similar tracking technologies when you access the Platform.
• 4.3 Third-Party Sources: Identity verification and fraud-screening data from licensed KYC/AML service providers; payment transaction data from payment processors; and geolocation data from IP-lookup services used to enforce jurisdictional access controls.
• 4.4 Publicly Available Sources: Information from publicly accessible databases or registries used solely for the purpose of verifying identity or detecting fraudulent activity.

rpk98 processes your personal data for the following purposes. The table below summarises the primary processing activities, their purpose and the corresponding legal basis:

rpk98 processes personal data under one or more of the following legal bases:

• 6.1 Contractual Necessity: Processing required to perform our contract with you — including account management, transaction processing and customer support.
• 6.2 Legal Obligation: Processing required to comply with applicable law, including KYC/AML obligations under our international licensing framework.
• 6.3 Legitimate Interests: Processing carried out in pursuit of rpk98's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring and service improvement, where such interests are not overridden by your data protection rights.
• 6.4 Consent: Processing for marketing communications and non-essential cookies, where your explicit prior consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

rpk98 does not sell, rent or trade your personal data to any third party for their independent marketing or commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• 7.1 KYC/AML Service Providers: Licensed identity verification and fraud-screening vendors engaged to assist with regulatory compliance obligations.
• 7.2 Payment Processors: Third-party payment service providers processing deposits and withdrawals on behalf of users, including providers operating in Pakistan-relevant payment rails.
• 7.3 Technology Providers: Cloud hosting, platform software, analytics and cybersecurity vendors operating under contractual data processing agreements with rpk98.
• 7.4 Regulatory Authorities: Licensing bodies, law enforcement agencies or courts where disclosure is required by applicable law, regulation or a valid legal order.
• 7.5 Responsible Gambling Organisations: Where a User has requested self-exclusion, relevant data may be shared with cross-operator self-exclusion register operators as required by our licensing framework.
• 7.6 Group Companies: Affiliated entities within the rpk98 corporate group, solely for internal administrative, compliance or audit purposes.

rpk98 operates under an international licensing framework, which means that your personal data may be transferred to, stored and processed in countries outside of Pakistan. Some of these countries may not provide the same level of data protection as your home jurisdiction.

Where personal data is transferred internationally, rpk98 ensures that appropriate safeguards are in place, including contractual protections between rpk98 and the receiving party that are consistent with the requirements of our licensing authority's data protection framework. By using the Platform, you acknowledge and consent to such international transfers of your personal data.

rpk98 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention guidelines apply:

• 9.1 Account Data: Retained for the duration of your Account and for a minimum period of five (5) years following Account closure, in line with standard AML record-keeping obligations.
• 9.2 Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, or longer if required by applicable law.
• 9.3 KYC Documents: Retained for a minimum of five (5) years following Account closure or the completion of the KYC process, whichever is later.
• 9.4 Customer Support Records: Retained for two (2) years from the date of the most recent interaction, or until the resolution of any outstanding dispute.
• 9.5 Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent previously given.
• 9.6 Technical/Log Data: Typically retained for thirteen (13) months for analytics and security purposes, after which it is aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

Subject to applicable law and the terms of our licensing framework, you have the following rights in relation to your personal data held by rpk98. To exercise any of these rights, please contact us using the details in Section 15.

rpk98 uses cookies and similar tracking technologies to enhance Platform performance, remember your preferences and support analytics. The categories of cookies we use are as follows:

• 11.1 Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies and security tokens. They cannot be disabled without impairing core Platform functionality.
• 11.2 Performance & Analytics Cookies: Used to understand how Users interact with the Platform — which pages are visited most frequently, where Users drop off, and how features perform. Data collected is aggregated and anonymised where possible.
• 11.3 Functional Cookies: Store your preferences such as language settings, notification preferences and interface customisations to provide a more personalised experience on subsequent visits.
• 11.4 Marketing Cookies: Used only with your explicit prior consent to deliver relevant promotional communications and to measure the effectiveness of marketing campaigns. These may be set by trusted third-party advertising partners operating under data processing agreements with rpk98.

You may manage, restrict or delete cookies at any time through your browser settings. Please note that disabling certain cookies may affect the availability or functionality of some Platform features. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

The rpk98 Platform is strictly intended for adults aged 18 years and above, or the higher minimum age required by the operator or licence jurisdiction applicable to your location. rpk98 does not knowingly collect, use or store personal data relating to children under the applicable minimum age.

If rpk98 becomes aware that personal data has been collected from a person below the minimum eligible age, that Account will be immediately suspended, all associated personal data will be reviewed and securely deleted where legally permissible, and any funds held in the Account will be handled in accordance with our licensing authority's requirements.

If you are a parent or guardian and believe that a minor has registered an Account or provided personal data to rpk98, please contact our support team immediately using the details provided in Section 15. We will treat such reports as a priority.

rpk98 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security framework includes:

• 13.1 Encryption: All data transmitted between your device and the Platform is encrypted using Transport Layer Security (TLS). Sensitive data at rest is encrypted using industry-standard encryption protocols.
• 13.2 Access Controls: Personal data is accessible only to rpk98 personnel and authorised processors who have a legitimate need to access it. All access is governed by the principle of least privilege and is subject to logging and audit.
• 13.3 Intrusion Detection: rpk98 employs continuous monitoring, intrusion detection and vulnerability scanning to identify and respond to potential security threats in real time.
• 13.4 Incident Response: In the event of a confirmed personal data breach that poses a risk to the rights and freedoms of affected individuals, rpk98 will notify the relevant regulatory authority and affected Users in accordance with applicable legal requirements.
• 13.5 Staff Training: All rpk98 personnel with access to personal data receive regular data protection training and are bound by confidentiality obligations.

While rpk98 takes all reasonable precautions to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. You use the Platform at your own risk and are responsible for keeping your own login credentials confidential.

rpk98 reserves the right to update or modify this Privacy Policy at any time in response to changes in applicable law, our licensing requirements, business practices or the services we provide. When material changes are made to this Policy, we will notify registered Users by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the Platform after any such changes have been communicated constitutes your acceptance of the revised Policy.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way in which rpk98 handles your personal data, or if you wish to exercise any of your data subject rights set out in Section 10, please contact our Data Protection team through the following channels:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly via the Platform
• Support Languages: English and Urdu
• Typical Email Response Time: 2–6 hours for general queries; up to 30 days for formal rights requests

When submitting a data subject rights request, please include your full name, registered email address and a clear description of the right you wish to exercise. rpk98 may need to verify your identity before processing your request. We will not charge a fee for processing rights requests unless they are manifestly unfounded or excessive.