q988 Privacy Policy

This Privacy Policy ("Policy") describes how q988 ("Platform", "we", "us", "our") collects, processes, stores, shares and protects the personal data of individuals ("User", "you", "your") who access or use the q988 online betting and casino information platform available at https://q988.cam.

q988 is an English-language information platform designed for the Pakistan market. We take your privacy seriously and are committed to handling all personal data in a responsible, transparent and lawful manner. This Policy explains what information we collect, why we collect it, how long we keep it and what rights you have in relation to it.

By registering an account or using q988 in any capacity, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not accept the terms of this Policy, you should discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — that is, any data that can directly or indirectly identify you as an individual.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, erasure or destruction.
• "Data Controller" means q988, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of q988 pursuant to a data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process that requires Users to submit documentation prior to accessing full Platform functionality.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences and analytical data.
• "Sensitive Data" means categories of personal data requiring heightened protection, including government-issued identity document details (such as CNIC numbers), financial account information and biometric data where applicable.
• "Third Party" means any entity other than the User and q988, including service providers, payment processors and analytics partners.

We collect the following categories of personal data from Users of the Platform. The specific data collected depends on your level of engagement with q988 — some data is collected during registration, while additional data is collected during KYC verification and ongoing account activity.

We do not collect Sensitive Data beyond what is strictly necessary for KYC and AML compliance obligations. We do not collect information about racial or ethnic origin, political opinions, religious beliefs or trade union membership unless these arise incidentally in correspondence and are immediately disregarded as irrelevant.

q988 collects personal data through the following methods:

• Direct Submission: Data you provide voluntarily when registering an account, completing KYC verification, submitting support requests, or configuring account settings.
• Automatic Collection: Technical data collected automatically when you access the Platform, including IP addresses, browser identifiers and usage patterns, collected through server logs and similar technologies.
• Cookies and Similar Technologies: Session and preference data collected through cookies, pixel tags and local storage as described in Section 10.
• Third-Party Sources: Identity verification data obtained from approved KYC/AML service providers as part of the verification process, and fraud-prevention data obtained from industry-standard risk management partners.
• Transaction Processing: Financial data arising from your deposit and withdrawal activity, received through applicable payment processing infrastructure.

We process your personal data only for specified, explicit and legitimate purposes. The following table sets out the primary purposes for which q988 processes personal data:

• Account Administration: To create, maintain and manage your q988 account, including processing registration, enabling login and managing account preferences.
• Identity & Age Verification (KYC): To verify your identity, confirm that you meet the minimum age requirement of 18 years (or higher where required by the operator's license jurisdiction), and satisfy anti-money-laundering obligations.
• Transaction Processing: To process deposits and withdrawals in PKR, apply bonuses, record betting and gaming activity, and maintain accurate financial records.
• Customer Support: To respond to your enquiries, resolve disputes, manage complaints and provide assistance in English and Urdu through Live Chat, email and the Help Center.
• Platform Security & Fraud Prevention: To detect, investigate and prevent fraudulent activity, account abuse, multi-accounting, money laundering and other prohibited conduct as defined in our Terms & Conditions.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable anti-money-laundering, counter-terrorism financing, and data protection regulations as required by the operator's license jurisdiction.
• Responsible Gambling: To administer responsible gambling tools — including deposit limits, loss limits, time reminders and self-exclusion — and to monitor for signs of problem gambling behaviour where required by our duty of care obligations.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, functionality and user experience of the Platform for all Pakistani users.
• Marketing Communications: To send you promotional content, bonus notifications and platform updates where you have provided explicit consent or where permitted by applicable law. You may withdraw marketing consent at any time through your account settings.

q988 relies on one or more of the following legal bases when processing your personal data, depending on the specific purpose:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accept when registering — including account management, payment processing and service delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring and mandatory record-keeping obligations imposed by the operator's license jurisdiction.
• Legitimate Interests: Processing carried out in pursuit of q988's legitimate business interests — for example, fraud detection, platform security, improving user experience and responsible gambling monitoring — where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific and informed consent — for example, the receipt of marketing communications or the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

q988 does not sell your personal data to third parties under any circumstances. We may share personal data with third parties only in the following limited circumstances:

• KYC & Identity Verification Partners: Approved third-party identity verification service providers who process your submitted documents (including CNIC, passport and selfie data) solely for the purpose of completing your verification. These providers operate under contractual data processing agreements with q988.
• Payment Processing Infrastructure: Payment service providers involved in facilitating your deposit and withdrawal transactions. Data shared is limited to what is strictly necessary to execute the relevant transaction. References to Pakistani payment rails such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are contextual only — these providers do not endorse or affiliate with q988's gambling services.
• Fraud Prevention & Risk Management: Industry-standard fraud prevention and risk management partners who assist in identifying suspicious activity, multi-accounting and financial crime. Data shared with these partners is processed under strict contractual controls.
• Legal & Regulatory Authorities: Where required by law, court order or regulatory direction — for example, in connection with AML reporting obligations or a law enforcement investigation — we may disclose personal data to the relevant authority. We will, where legally permitted, notify you of such disclosure.
• Professional Advisers: Legal, financial and compliance advisers bound by professional confidentiality obligations who require access to personal data in connection with advice provided to q988.
• Platform Technology Providers: Cloud hosting, infrastructure and software-as-a-service providers who process personal data on q988's behalf under binding data processing agreements with appropriate security obligations.

All third-party recipients of your personal data are required to implement appropriate technical and organisational security measures and to process your data only in accordance with q988's documented instructions.

q988 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Account & Identity Data: Retained for the duration of your active account and for a minimum period following account closure, as required by the operator's license obligations and applicable AML regulations. This period is typically a minimum of five years from the date of the last transaction or account closure, whichever is later.
• KYC Verification Documents: Retained for the period required by the operator's license jurisdiction, typically a minimum of five years following the end of the business relationship. Documents are stored in encrypted format.
• Financial Transaction Records: Retained for the period required by applicable financial record-keeping regulations — typically a minimum of five years from the date of each transaction.
• Support Communications: Retained for a period of up to three years from the date of the last interaction, for quality assurance, dispute resolution and training purposes.
• Technical & Usage Data: Aggregated and anonymised analytical data may be retained indefinitely as it no longer constitutes personal data. Raw technical logs are typically retained for a shorter period of up to twelve months.
• Marketing Consent Records: Retained for the duration of your marketing consent and for a reasonable period thereafter to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures. Where deletion is not immediately possible — for example, due to backup storage cycles — the data is isolated and protected from further processing until deletion can be completed.

q988 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• HTTPS/TLS Encryption: All data transmitted between your device and the q988 Platform is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols. Never access q988 over a connection that does not display a valid HTTPS certificate.
• Encrypted Data Storage: Personal data — particularly Sensitive Data including KYC documents and financial records — is stored in encrypted form at rest, using encryption standards appropriate to the sensitivity of the data.
• Access Controls: Access to personal data within q988's systems is strictly controlled on a least-privilege basis. Only personnel with a legitimate operational need may access specific categories of personal data.
• Session Management: Active sessions are managed with time-out controls and secure session token practices to reduce the risk of session hijacking.
• Infrastructure Security: The Platform is hosted on infrastructure with appropriate physical and network-level security controls, including firewalls, intrusion detection and routine security assessments.
• Staff Training: All personnel with access to personal data receive data protection and information security training appropriate to their role.

q988 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to analyse usage patterns and to remember your preferences. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies, security tokens and load-balancing cookies. These cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Store your preferences such as language settings, responsible gambling limit configurations and notification preferences, so these do not need to be re-entered on each visit.
• Analytical Cookies: Collect anonymised data about how Users interact with the Platform — including pages visited, time on page and navigation paths — to help us improve performance and content for Pakistani users.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns, only where you have provided consent to marketing communications.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies are available in your browser's help documentation. Note that strictly necessary cookies cannot be disabled as they are required for the Platform to operate.

Subject to applicable data protection law and the operator's license jurisdiction requirements, you hold the following rights in relation to your personal data held by q988. To exercise any of these rights, please contact us using the details in Section 15.

Please note that these rights are not absolute. In certain circumstances — for example, where processing is necessary to comply with AML legal obligations or to defend legal claims — we may be unable to fulfil a request immediately or in full. We will respond to all valid rights requests within a reasonable period and will explain any applicable limitations.

The q988 Platform is strictly for adults aged 18 years or older — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect or process personal data from individuals below the applicable minimum age.

Mandatory KYC verification is in place to confirm that all registered Users meet the age eligibility requirement before accessing full Platform functionality. Where we discover or reasonably suspect that an Account belongs to an individual below the minimum age, we will immediately suspend the Account, void any associated activity and delete the minor's personal data as soon as practicable.

If you are a parent or guardian and believe that a minor has registered on the Platform, please contact our support team at [email protected] using the contact details in Section 15.

In connection with the operation of the Platform and the use of third-party service providers — including cloud infrastructure, KYC verification partners and fraud prevention services — your personal data may be transferred to and processed in countries outside Pakistan.

Where such transfers occur, q988 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with this Policy. Applicable safeguards may include contractual data processing agreements with third-party processors, standard contractual clauses or binding corporate rules as appropriate to the specific transfer.

By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan. If you have concerns about cross-border data transfers in relation to your specific personal data, please contact us using the details in Section 15.

q988 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or Platform features. The "Last Updated" date displayed at the top of this document indicates when the Policy was most recently revised.

Where changes are material — meaning they significantly affect your rights or the way in which your personal data is processed — we will take reasonable steps to notify you, for example by displaying a prominent notice on the Platform or by sending a notification to the email address registered to your Account.

We recommend that you review this Privacy Policy periodically. Your continued use of the Platform following the publication of any updated Policy constitutes your acceptance of the revised terms. If you do not accept any material change, you may close your Account and request deletion of your personal data in accordance with Section 11.

If you have any questions, concerns or requests relating to this Privacy Policy or to the processing of your personal data by q988, please contact us through the following channels:

When submitting a rights request, please provide sufficient information to verify your identity — without which we may be unable to fulfil your request. We will not ask you to provide your full password or financial PIN in connection with any identity verification for a rights request.

If you believe that q988 has not handled your personal data in accordance with this Policy, you have the right to raise a complaint with the relevant supervisory authority in the operator's license jurisdiction. Details of the applicable supervisory authority will be provided upon request.