Privacy Policy

1. Who We Are

This Privacy Policy applies to s988, an online gaming platform accessible at s988.org, operated under an international gaming license. s988 provides sports betting, live casino, and slot gaming services primarily to players located in Pakistan, including users in Karachi, Lahore, Faisalabad, Islamabad, and other cities across the country.

For the purposes of this Privacy Policy, "s988", "we", "us", and "our" refer to the operator of the s988 platform. "You" and "your" refer to any individual who accesses, registers on, or uses the s988 platform in any capacity.

By registering an account or continuing to use the s988 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data We Collect

s988 collects several categories of personal data in connection with your use of the platform. The specific data collected depends on how you interact with s988 and the services you use.

s988 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information, except where directly relevant to responsible gaming assessments and with appropriate safeguards in place.

3. How We Collect Data

3.1 Data You Provide Directly

The majority of personal data s988 holds about you is information you provide voluntarily during the account registration process, when completing KYC verification, when making a deposit or withdrawal, when contacting customer support, or when responding to platform surveys or promotional communications.

3.2 Data Collected Automatically

When you access the s988 platform, certain technical data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser configuration, and details of pages and features you interact with. This data is used primarily for security monitoring, fraud detection, and platform performance analysis.

3.3 Data from Third Parties

s988 may receive personal data about you from third-party sources including:

• Identity verification and KYC service providers who confirm the authenticity of your submitted documents
• Payment processors such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank who confirm transaction status
• Fraud prevention and anti-money laundering screening services
• Publicly available databases used for sanctions screening and PEP (Politically Exposed Persons) checks

Where data is received from third parties, s988 ensures that such data was obtained and transferred to us on a lawful basis.

4. How We Use Your Data

s988 uses personal data collected from you for the following purposes:

• Account Management: To create, maintain, and manage your s988 player account, including authentication and access control
• Service Delivery: To process bets, casino game sessions, slot play, deposits, and withdrawals in PKR
• Identity & Age Verification: To confirm that you are 21 years of age or older and that your identity details are genuine, as required by our gaming license obligations
• Regulatory Compliance: To meet our obligations under anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and the conditions of our international gaming license
• Fraud & Security: To detect, investigate, and prevent fraudulent activity, account compromise, collusion, and other integrity violations on the platform
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling and to administer deposit limits, session limits, and self-exclusion requests
• Customer Support: To respond to your enquiries, process complaints, and resolve disputes relating to your account or gaming activity
• Communications: To send you account-related notifications, security alerts, and — where you have opted in — promotional communications about bonuses and new features
• Platform Improvement: To analyse usage patterns, troubleshoot technical issues, and improve the performance and user experience of the s988 platform
• Legal Obligations: To respond to lawful requests from regulatory authorities, law enforcement agencies, or courts with jurisdiction over s988's operations

5. Legal Basis for Processing

s988 processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to perform our obligations under the player account agreement, including delivering gaming services and processing PKR transactions
• Legal Obligation: Processing required to comply with AML legislation, KYC regulations, gaming license conditions, and lawful requests from competent authorities
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and analytical purposes, where these interests are not overridden by your data protection rights
• Consent: Processing for optional purposes such as marketing communications, where you have provided freely given, informed consent that you may withdraw at any time

6. Sharing Your Data

s988 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data with the following categories of recipients, strictly as necessary and under appropriate data protection arrangements:

6.1 Service Providers

Third-party companies engaged by s988 to provide operational services, including payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard, cryptocurrency processors), KYC and identity verification providers, customer support platform providers, cloud hosting and infrastructure services, and email delivery services. All such providers are bound by data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

6.2 Regulatory and Law Enforcement Authorities

s988 may disclose personal data to governmental authorities, regulators, or law enforcement agencies where required to do so by law, court order, or the conditions of our international gaming license. Where permitted, s988 will endeavour to notify you of such disclosure in advance.

6.3 Fraud Prevention and AML Networks

Personal data may be shared with industry fraud prevention databases and AML screening services for the purpose of detecting and preventing financial crime. Information shared in this context may be used by other participating organisations to make decisions about fraud risk.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of s988's business operations, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being transferred.

7. International Data Transfers

s988 operates under an international gaming license and may engage service providers located in various countries. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, s988 ensures that appropriate safeguards are in place, including:

• Contractual clauses that require overseas processors to protect your data to a standard equivalent to applicable data protection principles
• Use of service providers located in jurisdictions with recognised data protection frameworks
• Technical and organisational security measures appropriate to the sensitivity of the data transferred

By using the s988 platform, you acknowledge that your data may be processed outside Pakistan as described in this section.

8. Data Retention

s988 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by law or regulation. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account registration plus a post-closure period as required by gaming license and AML obligations (typically five to seven years)
• Transaction Records: Financial transaction data is retained for a minimum of five years from the date of the transaction, in accordance with AML regulatory requirements
• KYC Documents: Identity verification documents are retained for the period required by our gaming license conditions, generally five years post-account closure
• Support Communications: Customer support records are retained for three years from the date of the last interaction
• Marketing Consent Records: Records of marketing consent and opt-out history are retained for the duration necessary to demonstrate compliance with applicable communication regulations

Upon expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents reconstruction of personal information.

9. Cookies & Tracking Technologies

s988 uses cookies and similar technologies on its platform to support core functionality, improve user experience, and assist with security and fraud detection. The types of cookies used by s988 include:

• Essential Cookies: Required for the platform to function correctly. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without disrupting your use of s988.
• Functional Cookies: Used to remember your preferences such as language settings, game layout preferences, and responsible gaming limits you have set.
• Analytical Cookies: Used to collect aggregated, anonymised data about how players use the platform, which pages they visit most frequently, and where technical errors occur. This data helps s988 improve the platform.
• Security & Fraud Detection Cookies: Used to identify unusual patterns of access or behaviour that may indicate fraudulent activity or account compromise.

You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the s988 platform.

10. Security Measures

s988 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS encryption for all data in transit between your device and s988 servers
• AES-256 encryption for sensitive data stored at rest, including financial records and identity documents
• Multi-factor authentication options for player account access
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security audits and penetration testing conducted by independent security specialists
• Intrusion detection and real-time security monitoring systems
• Incident response procedures for the identification, containment, and reporting of data security incidents

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, s988 will notify you without undue delay in accordance with applicable notification obligations.

11. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by s988. To exercise any of these rights, please contact us using the details in Section 14.