sultan88 Privacy Policy —
How We Protect Your Data

For the purposes of applicable data protection law, sultan88 — operating the platform at sultan88.fyi — is the data controller responsible for personal data collected from Pakistan players in connection with their use of sultan88's casino, sportsbook, Cockfighting, jackpot slots, live dealer, and PKR payment services.

Questions, requests, or complaints relating to the processing of personal data under this Privacy Policy should be directed to sultan88's data protection contact at [email protected], clearly marked "Privacy Request" in the subject line.

sultan88 collects personal data across several categories. The table below summarises the key data categories, specific data points within each category, and the primary purpose for which each category is collected:

sultan88 collects personal data through the following channels:

• Direct provision: Data you provide when registering an account, completing KYC, making a deposit or withdrawal request, contacting customer support, or updating account settings;
• Automated collection: Technical data collected automatically when you access sultan88.fyi — including IP address, browser type, device identifier, and session timing via cookies and server logs;
• Payment processors: Transaction confirmation and payment status data received from Easypaisa, JazzCash, Raast, HBL, UBL, MCB Bank, Meezan Bank, and USDT TRC20 processing networks when you make PKR deposits or withdrawals;
• Third-party identity verification: Where sultan88 uses third-party KYC verification services to confirm identity documents, those services may return verification status data and document authenticity indicators to sultan88;
• Fraud detection systems: Automated risk-scoring systems may generate derived data points (such as risk flags or pattern indicators) based on gameplay and transaction behaviour.

sultan88 processes personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil our contractual obligations to you — including account management, game access, PKR payment processing, and customer support. This is the primary basis for the majority of sultan88's data processing;
• Legal obligation: Processing required to comply with regulatory requirements, including KYC identity verification, AML transaction monitoring, responsible gaming reporting, and response to lawful authority requests;
• Legitimate interests: Processing for fraud prevention, platform security, duplicate account detection, and improving platform performance — where those interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and personalised promotional offers, where you have explicitly opted in. You may withdraw marketing consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing communication.

sultan88 does not sell, rent, or commercially transfer Pakistan player personal data to third parties. Data is shared only in the following circumstances and only to the extent strictly necessary:

• Payment processors: Easypaisa, JazzCash, Raast, HBL, UBL, MCB Bank, Meezan Bank, and USDT TRC20 operators receive the minimum necessary data to process PKR deposits and withdrawals (typically account number, amount, and transaction reference);
• Game providers: Licensed game developers and live casino providers receive anonymised session identifiers and stake/outcome data necessary to verify round integrity and resolve disputes — not your personal identity information;
• Identity verification services: Third-party KYC providers receive document images and personal details for the sole purpose of verifying your identity against submitted CNIC or passport documents;
• Regulatory and law enforcement authorities: sultan88 is legally required to disclose account and transaction data to competent regulatory authorities, anti-money-laundering agencies, and law enforcement bodies upon receipt of a valid legal request;
• Professional advisors: Legal, accounting, and auditing professionals engaged by sultan88 may access limited account data under strict confidentiality obligations where necessary for the provision of their professional services.

All third parties who receive sultan88 player data are contractually required to process that data only for the stated purpose and to maintain data security standards consistent with sultan88's own.

sultan88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of the active account and for a minimum of 5 years following account closure, in compliance with anti-money-laundering regulatory requirements;
• PKR transaction records: Retained for a minimum of 7 years from the date of each transaction, consistent with financial record-keeping obligations;
• Gameplay records: Retained for 5 years from the date of each session or bet, for regulatory reporting and dispute resolution purposes;
• Support communications: Retained for 3 years from the date of the communication;
• Marketing data: Retained only while marketing consent is active. Upon withdrawal of consent, marketing data is deleted within 30 days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual. Anonymised, aggregated data — which cannot identify any individual Pakistan player — may be retained indefinitely for statistical and platform improvement purposes.

sultan88 implements the following technical and organisational security measures to protect Pakistan player personal data:

• 256-bit SSL encryption for all data transmitted between your browser or mobile device and sultan88's servers;
• AES-256 encryption for all personal data stored at rest on sultan88's database infrastructure;
• Access controls restricting internal access to personal data on a strict need-to-know basis, with access logs maintained for all data interactions;
• Two-Factor Authentication available to all Pakistan players for account access, and mandatory for internal staff access to player data systems;
• Regular security audits and penetration testing conducted by qualified third-party security professionals;
• Automated threat monitoring detecting and alerting on anomalous access patterns, potential data breach indicators, and intrusion attempts in real time.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to Pakistan player rights or freedoms, sultan88 will notify affected players and relevant regulatory authorities within 72 hours of becoming aware of the breach, in line with applicable data protection law.

sultan88 uses cookies and similar tracking technologies to operate and improve the platform experience for Pakistan players. The categories of cookies used by sultan88 are:

• Strictly necessary cookies: Essential for platform functionality — including session management, login state, and security tokens. These cannot be disabled without preventing basic platform use;
• Functional cookies: Remember your preferences such as language settings and recently visited game categories, improving the sultan88 experience on repeat visits;
• Analytics cookies: Collect anonymised data about how Pakistan players use sultan88 — which games are most played, where users encounter friction, and how navigation flows are used — to guide platform improvements;
• Security cookies: Support fraud detection and duplicate account identification by tracking device and browser characteristics across sessions.

sultan88 does not use third-party advertising cookies or tracking pixels that share your behavioural data with external advertising networks. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will affect platform functionality.

As a Pakistan player using sultan88, you have the following rights in relation to your personal data. To exercise any of these rights, contact sultan88 at [email protected] with your request, clearly identifying the right you are exercising and providing sufficient information to verify your identity.

sultan88 is strictly restricted to individuals aged 18 and over. sultan88 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 18. Age verification is a mandatory step in the sultan88 account registration and KYC process for all Pakistan players.

If sultan88 becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account permanently closed. If you believe sultan88 may have inadvertently collected data from a minor, please contact [email protected] immediately.

sultan88's primary data processing infrastructure is located within the jurisdiction in which the platform is licensed. Where personal data of Pakistan players is transferred internationally — for example, to game providers, KYC verification services, or payment processors operating in other countries — such transfers are made only to entities that provide adequate data protection, either through contractual commitments or recognised certification standards.

sultan88 ensures that all international data transfers are governed by appropriate safeguards, including data processing agreements that impose obligations on the receiving party equivalent to those set out in this Privacy Policy.

sultan88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, data protection practices, or the platform's services. Material changes — those that significantly affect the way sultan88 processes your data or alter your rights — will be communicated to all registered Pakistan players by email at the address associated with their account, at least 14 days before the changes take effect.

Non-material clarifications may be updated without advance notice. The "Last updated" date at the top of this policy will be revised with each update. We encourage Pakistan players to review this Privacy Policy periodically. Continued use of sultan88 following notification of a material change constitutes acceptance of the updated policy.

For any questions, concerns, or requests relating to this Privacy Policy or sultan88's processing of your personal data, please contact us using one of the following channels:

• Email: [email protected] (subject line: "Privacy Request")
• Live Chat: Available 24/7 at sultan88.fyi — average response 2–5 minutes
• WhatsApp & Telegram: Support available 24/7 in English for Pakistan players

sultan88 aims to acknowledge all privacy-related enquiries within 24 hours and provide a substantive response within 30 days. Complex requests — particularly data access, erasure, or portability requests — may require identity verification before processing begins.