At 298pk, protecting your personal information is taken as seriously as securing your funds. This Privacy Policy explains exactly what data we collect, why we collect it, how we use and store it, who we may share it with, and the rights you hold over your own information. Whether you are browsing from Karachi, Lahore, Islamabad, or anywhere else in Pakistan, these protections apply fully to you.
298pk is Pakistan's premier online gaming platform operating at 298pk.org. The platform offers sports betting — including cricket, PSL, and international fixtures — as well as live casino games, slots, Plinko, and instant games. All services are denominated in Pakistani Rupees (PKR) and are designed specifically for Pakistani players.
For the purposes of this Privacy Policy, "298pk", "we", "us", and "our" refer to the operator of the 298pk platform. "You" and "your" refer to any individual who accesses, registers with, or otherwise interacts with 298pk.org. This Privacy Policy applies to all data collected through the 298pk website, mobile-optimised site, and any associated customer support channels.
298pk operates under an international gaming licence and is committed to handling all personal data in accordance with internationally recognised data protection standards. This includes implementing appropriate technical and organisational measures to protect your information and ensuring that any third parties who process data on our behalf maintain equivalent standards of protection.
Quick Summary: 298pk collects only the data it genuinely needs to operate your account, comply with legal obligations, and improve your experience. We do not sell your personal data to third-party marketers. We do not share your data with unrelated businesses. You have clear rights to access, correct, and delete your data — and this policy explains exactly how to exercise them.
298pk collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the site, and occasionally from third parties such as payment processors and identity verification services. The categories of data we collect are set out below.
| Category | Examples | How Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC / passport number, photograph | Registration form & KYC upload |
| Contact Data | Email address, mobile number, residential address | Registration form |
| Financial Data | JazzCash / EasyPaisa account details, bank account number (HBL, UBL, Meezan), card BIN (first six digits) | Deposit & withdrawal forms |
| Transaction Data | Deposit amounts, withdrawal requests, bet history, game session records, bonus activity | Automatically via platform activity |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session duration | Automatically via cookies & server logs |
| Usage Data | Pages visited, games played, features accessed, click-through paths, search queries on site | Automatically via analytics tools |
| Communications Data | Live chat transcripts, support emails, complaint correspondence, survey responses | Customer support interactions |
| Verification Data | Third-party identity check results, PEP/sanctions screening outcomes, source-of-funds documentation | KYC & AML compliance checks |
We do not collect special category data (such as biometric data, health information, or political opinions) unless it is voluntarily provided by you in support communications and is strictly necessary to resolve your query. In that case, it is used solely for the stated purpose and not retained beyond the resolution of the matter.
298pk uses the personal data it collects for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which 298pk processes your personal data are:
298pk processes your personal data only where a valid legal basis exists for doing so. Depending on the type of data and the purpose of processing, we rely on one or more of the following legal bases:
298pk does not sell, rent, or trade your personal data with any third party for their own marketing purposes. We may share your data with carefully selected third parties only where it is necessary for the lawful purposes described in this Policy, and only subject to appropriate data protection safeguards. The categories of third parties with whom 298pk may share data are:
Data Processing Agreements: All third parties that process personal data on behalf of 298pk are required to enter into a data processing agreement (DPA) that imposes contractual obligations equivalent to those 298pk itself operates under. Third parties are prohibited from using your data for any purpose beyond the specific, documented purpose for which it was shared.
298pk uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies enable 298pk to recognise your device across sessions, maintain your login state, and understand how the platform is being used.
| Cookie Type | Purpose | Retention |
|---|---|---|
| Session management, login authentication, security tokens, fraud prevention flags. Cannot be disabled without breaking core platform functionality. | Session / up to 30 days | |
| Language preferences, game display settings, deposit method memory, responsible gaming limit confirmations. | Up to 12 months | |
| Anonymised page view tracking, funnel analysis, feature usage metrics. Used to improve the 298pk platform experience. | Up to 24 months | |
| Promotional campaign tracking, bonus offer attribution, opt-in marketing preference management. Only active if you have consented. | Up to 12 months |
You can manage cookie preferences through your browser settings at any time. Disabling essential cookies will impair the functionality of your 298pk account. Disabling analytics and marketing cookies will not affect your ability to play, deposit, or withdraw. On your first visit to 298pk.org, a cookie consent notice will be displayed allowing you to accept or customise your cookie preferences.
298pk retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:
When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Data that has been anonymised such that you can no longer be identified from it is not subject to this Privacy Policy and may be retained for analytical purposes indefinitely.
298pk employs a multi-layered approach to data security, combining technical controls, organisational procedures, and staff training to protect your personal information against unauthorised access, loss, destruction, alteration, or disclosure. Our principal security measures include:
Data Breach Protocol: In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, 298pk will notify affected players and relevant regulatory authorities within 72 hours of becoming aware of the breach, in accordance with applicable data protection law. Notifications will be sent to your registered email address and displayed as an in-account alert.
As a 298pk account holder or website visitor, you hold a number of rights in relation to your personal data. These rights are outlined below. To exercise any of these rights, contact the 298pk Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days and may request proof of identity before processing your request.
298pk's servers and some of its third-party service providers may be located outside Pakistan. Where personal data is transferred to countries that may not provide the same level of data protection as your home jurisdiction, 298pk ensures that appropriate safeguards are in place before any such transfer takes place. These safeguards may include contractual clauses that impose data protection obligations equivalent to those that apply to 298pk itself, or transfers only to jurisdictions that are recognised as providing an adequate level of data protection by the relevant licensing authority.
Payment processing partners — including JazzCash and EasyPaisa — are Pakistan-based entities subject to State Bank of Pakistan (SBP) regulatory oversight and process data in accordance with Pakistan's applicable financial data regulations. International card processing networks (Visa/Mastercard) operate under their own globally recognised data security standards (PCI-DSS compliance).
298pk's services are strictly intended for individuals who are 21 years of age or older. The platform does not knowingly collect, store, or process personal data from any individual under the age of 21. Age verification is a mandatory part of the 298pk registration and KYC process; all accounts must provide valid government-issued identification confirming the account holder is 21 or above before any withdrawal is processed.
If 298pk becomes aware that personal data has been collected from an individual under the age of 21, the account will be closed immediately, the data will be deleted as quickly as the applicable legal retention obligations permit, and any funds held in the account will be dealt with in accordance with applicable regulations. Parents or guardians who believe a minor has registered a 298pk account are urged to contact [email protected] immediately.
21+ Only: This is a non-negotiable requirement enforced through mandatory KYC verification. No exceptions are made. If there is any doubt about a player's age, 298pk reserves the right to suspend access until full identity verification is completed and confirmed.
298pk may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new game launches, PSL cricket betting promotions, and other offers relevant to your account — but only where you have opted in to receive such communications during registration or through your account settings.
You may opt out of marketing communications at any time by:
Opting out of marketing communications does not affect your receipt of transactional communications — such as deposit confirmations, withdrawal notifications, KYC requests, or responsible gaming alerts — which are sent on the basis of contractual necessity or legal obligation and cannot be disabled.
298pk reserves the right to update or amend this Privacy Policy at any time to reflect changes in the law, our data processing activities, or our operational practices. Material changes — those that meaningfully affect how your personal data is used — will be communicated to registered players via email to the address on file and via an in-platform notification, with a minimum of 14 days' notice before the change takes effect.
The version of the Privacy Policy published on this page at the time of any data processing activity is the version that governs that activity. The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically, particularly before making any significant transactions on the platform.
If you have any questions, concerns, or requests relating to this Privacy Policy or 298pk's handling of your personal data, please reach out to the 298pk Data Protection team using the following contact details:
We take all privacy concerns seriously. If you are not satisfied with our response to your query or complaint, you have the right to escalate your concern to the relevant supervisory authority or the data protection regulator applicable under your gaming licence jurisdiction.
Six core principles that guide how 298pk handles your personal data — every day, on every transaction.
298pk collects only the personal data that is genuinely necessary for a specific, documented purpose. We do not gather data speculatively or "just in case" — if we don't need it, we don't ask for it.
Your personal information is never sold, rented, or traded to third-party marketers. Period. 298pk generates revenue from gaming operations — not from monetising player data.
All data transmitted between your device and 298pk is protected by TLS encryption. Sensitive records at rest are secured with AES-256 encryption — the same standard used by international financial institutions.
Access, correct, delete, or export your data at any time. 298pk honours data rights requests within 30 days — no bureaucratic runaround, no unexplained refusals.
Data is kept only as long as legally required or operationally necessary. Once the retention period expires, records are securely deleted or irreversibly anonymised — not quietly archived indefinitely.
Material changes to this Privacy Policy are communicated to all registered players by email with a minimum of 14 days' notice. You will never discover a policy change retroactively after it has already affected your data.
A quick-reference summary of every right you hold over your personal data at 298pk.
Request a full copy of all personal data 298pk holds about you, free of charge.
Correct any inaccurate or incomplete personal data without delay.
Request deletion of data that is no longer necessary or lawfully held.
Pause processing of your data while accuracy or objections are being resolved.
Receive your data in a machine-readable format to transfer elsewhere.
Object to processing based on legitimate interests or for direct marketing.
Revoke consent for marketing or non-essential cookies at any time.
Escalate unresolved concerns to the relevant supervisory authority.
Your data is protected. Your account is secure. 298pk is built for Pakistani players who demand both great gaming and genuine privacy. Join thousands of players from Karachi to Islamabad who trust 298pk with their game.
21+ only | Secure & Encrypted | KYC Verified Platform