m998 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how m998 ("m998", "we", "us", "our") collects, processes, stores, shares and protects personal data in connection with the m998 website, mobile platform and associated services (collectively, the "Platform" or "Services").

By registering an account on m998 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

This Policy is to be read alongside the m998 Terms & Conditions and our Responsible Gambling policy, both of which are incorporated by reference. Where any conflict arises between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail.

2. Definitions

For the purposes of this Policy, the following definitions apply:

3. Personal Data We Collect

3.1 Registration Data

When you create an m998 account, we collect the information you provide during the registration process, which may include:

• Full legal name
• Date of birth
• Email address
• Mobile phone number
• Country and city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
• Chosen username and encrypted password
• Currency preference

3.2 Identity Verification (KYC) Data

To comply with age verification and anti-money laundering obligations, we may request and process:

• Government-issued photo identification (such as a National Identity Card (CNIC), passport or driving licence)
• Proof of address documentation
• Proof of payment method ownership
• Source-of-funds documentation where required by our compliance procedures

3.3 Financial Transaction Data

When you make deposits or withdrawals, we process transaction data including payment method reference details, transaction amounts, timestamps and currency information. References to payment methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are for contextual identification only; these providers do not endorse or support gambling on this platform.

3.4 Platform Usage Data

We automatically collect data about how you interact with the Platform, including:

• IP address and approximate geolocation
• Device type, operating system and browser version
• Session start and end times
• Pages visited, games played and betting activity
• Responsible gambling tool usage

3.5 Communications Data

When you contact our support team or submit feedback, we retain a record of that communication, including its content and any Personal Data included within it, for the purpose of resolving your query and improving our services.

4. How We Collect Your Data

m998 collects Personal Data through the following channels:

• Directly from you: Information you provide during registration, KYC verification, deposit and withdrawal transactions, customer support interactions, and survey or feedback responses.
• Automatically: Technical data collected via cookies, log files, pixel tags and similar technologies when you access or use the Platform.
• From third parties: Identity verification providers, fraud prevention services, payment processors and, where applicable, analytics partners. All third-party data providers are required to confirm they have the right to share data with us.

5. Purposes of Data Processing

m998 processes your Personal Data for the following purposes:

6. Legal Basis for Processing

m998 processes your Personal Data on the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform the contract between you and m998, including account management, service delivery and payment processing.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC/AML requirements and regulatory reporting.
• Legitimate Interests: Processing for purposes of fraud prevention, platform security, responsible gambling monitoring and internal analytics, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given specific, informed and withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Third Parties

7.1 General Principle

m998 does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only where necessary for the delivery of our Services, for compliance purposes or as required by law.

7.2 Categories of Recipients

• Identity Verification Providers: Third-party KYC and AML screening services used to verify your identity and comply with regulatory obligations.
• Payment Processors: Financial service providers that facilitate deposit and withdrawal transactions. Each processor is subject to their own privacy policy and applicable financial regulations.
• Technology Providers: Cloud hosting, database management, analytics and customer support software providers engaged under data processing agreements that restrict their use of your data.
• Regulatory & Law Enforcement Authorities: Where m998 is legally required to disclose Personal Data to government authorities, regulatory bodies, courts or law enforcement agencies, we will do so in accordance with applicable law.
• Fraud Prevention Services: Third-party fraud intelligence platforms that assist in detecting and preventing financial crime on the Platform.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or a material part of m998's assets, your Personal Data may be transferred to the relevant successor entity. You will be notified of any such transfer and of any material changes to this Policy that result from it.

8. International Data Transfers

m998 operates internationally and your Personal Data may be transferred to, stored in, or processed in countries other than your country of residence. These countries may not have data protection laws equivalent to those in your jurisdiction.

Where Personal Data is transferred internationally, m998 takes steps to ensure that appropriate safeguards are in place, including the use of standard contractual clauses, data processing agreements with third-party processors, and other mechanisms consistent with internationally recognised data protection standards.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to other jurisdictions as described in this section.

9. Data Retention

m998 retains your Personal Data for as long as your account remains active and for a further period as required by our legal and regulatory obligations. The following general retention principles apply:

• Account Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, consistent with standard AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of completion of the business relationship or the date of the relevant transaction, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years following the date of the transaction.
• Support Communications: Retained for up to two (2) years following resolution of the relevant query, unless a longer retention period is required for legal or compliance purposes.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it will be suppressed from marketing lists but may be retained in anonymised form for analytics.

10. Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit the Platform. They are widely used to make websites function efficiently and to provide information to the website operator. m998 uses cookies and similar technologies including pixel tags and session storage.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies, authentication tokens and security cookies. These cannot be disabled without materially impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gambling tool configurations, to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform. This information helps us improve performance and user experience.
• Marketing Cookies: Used, where you have given consent, to deliver relevant promotional messages. These are not enabled by default and require your explicit opt-in.

10.3 Managing Cookies

You may manage or disable cookies through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. Instructions for managing cookies in common browsers are available through those browsers' help documentation.

11. Your Rights as a Data Subject

Subject to applicable law and certain conditions, you have the following rights in relation to your Personal Data held by m998:

• Right of Access: You may request a copy of the Personal Data we hold about you and information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data held about you.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records.
• Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that your Personal Data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to processing of your Personal Data carried out on the basis of legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

12. Children's Privacy

m998 is strictly an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 18 — or the higher minimum age required by the operator's license jurisdiction. Age verification is a mandatory component of the KYC process and m998 takes all reasonable steps to prevent minors from accessing the Platform.

If m998 becomes aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and close the relevant account. Any funds deposited by a minor will be returned to the payment method used, net of any applicable administrative costs, and all associated wagers will be voided.

If you have reason to believe a minor is using m998, please contact our support team immediately at [email protected]. We take such reports seriously and will act on them promptly.

13. Data Security

m998 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encrypted storage of sensitive data at rest, including passwords (which are hashed and salted, never stored in plain text)
• Role-based access controls limiting internal access to Personal Data to authorised personnel only
• Regular security assessments and penetration testing
• Two-factor authentication available for all user accounts
• Secure data disposal procedures for Personal Data that is no longer required

While m998 takes all reasonable precautions to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security and encourage you to take your own precautions, including using a strong, unique password for your m998 account and enabling two-factor authentication.

In the event of a Personal Data breach that poses a risk to your rights and freedoms, m998 will notify affected users and relevant authorities in accordance with applicable law and without undue delay.

14. Changes to This Privacy Policy

m998 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or platform features. The date of the most recent revision is displayed at the top of this page.

Where a change is material, we will notify you by email or by displaying a prominent notice on the Platform prior to the change taking effect. Your continued use of the Platform after a revised Privacy Policy has taken effect constitutes your acceptance of the updated terms.

We encourage you to review this Policy periodically to stay informed about how m998 is protecting your information.

15. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or your Personal Data, please contact our support team using the details below. We are committed to addressing all privacy-related queries promptly and transparently.