q988 Privacy Policy

This Privacy Policy ("Policy") is issued by q988 ("the Company", "We", "Us", "Our"), the operator of the online gaming and sports betting platform accessible at q988.bet ("the Platform"). This Policy explains how q988 collects, uses, stores, shares, and protects personal data relating to registered members, prospective members, and visitors to the Platform ("You", "Your", "Member").

q988 is committed to handling all personal data in a manner consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, integrity, confidentiality, and accountability. We take these obligations seriously and have implemented comprehensive technical and organisational measures to give effect to them across every aspect of our operations.

This Policy should be read alongside the q988 Terms & Conditions and Responsible Gaming Policy, both of which contain additional information relevant to how we process member data in specific operational contexts.

q988 collects personal data through multiple channels — directly from you during registration and account use, automatically through your interactions with the Platform, and from third-party verification and payment service providers. The following table summarises the categories of personal data we collect and the primary source of each.

q988 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in standard government-issued identity documents submitted for age verification purposes.

q988 processes your personal data for the following specific and documented purposes. Data collected for one purpose is not repurposed for an unrelated activity without your explicit consent or a clearly applicable lawful basis.

• Account Registration & Management: To create, maintain, and administer your q988 member account, including verifying your identity and age (21+ requirement) through our KYC process.
• Service Delivery: To provide access to q988 casino games, sports betting markets (including PSL cricket), fishing games, and all other Platform features you use.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, and to maintain accurate financial records.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, terrorist financing, and other financial crime in accordance with our international gaming licence obligations.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, enforce self-exclusion requests, and apply deposit and session limits set by members.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat and email support.
• Legal & Regulatory Obligations: To comply with applicable laws, respond to lawful requests from regulatory authorities, and maintain records as required under our operating licence.
• Marketing Communications: To send you promotional offers, bonus notifications, and PSL seasonal promotions where you have provided consent. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated usage patterns, improve game offerings, optimise user interface design, and enhance overall Platform performance.

Every data processing activity conducted by q988 is underpinned by at least one lawful basis. The principal lawful bases relied upon by q988 are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the q988 Terms & Conditions — including account management, game access, and payment processing — is carried out on the basis that it is necessary to perform the contract between you and q988.
• Legal Obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring, record retention, and responses to regulatory requests — are mandatory under the laws and licensing conditions applicable to q988's operation.
• Legitimate Interests: q988 processes certain data (including technical and usage data for fraud prevention, platform security, and service improvement) on the basis of legitimate interests, having assessed that these interests are not overridden by your privacy rights.
• Consent: Where q988 relies on your consent — primarily for marketing communications and the use of non-essential cookies — that consent is obtained explicitly and separately. You may withdraw consent at any time without affecting the lawfulness of prior processing.

q988 uses cookies and similar tracking technologies on the Platform to ensure core functionality, improve performance, and (where you have consented) deliver personalised content. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for Platform operation — including session management, security token storage, and authentication state. These cookies cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how members interact with the Platform — pages visited, features used, error encounters. Used to improve Platform performance. Requires your consent.
• Functionality Cookies: Remember your preferences such as language, display settings, and responsible gaming tool configurations. These improve your experience across sessions.
• Marketing & Targeting Cookies: Used to deliver relevant promotional content within the q988 Platform based on your usage patterns. Only deployed with your explicit consent, which you may withdraw at any time via account settings.

You can manage your cookie preferences through the q988 cookie consent interface presented on your first visit. You may also adjust browser-level cookie settings, though disabling strictly necessary cookies may impair your ability to access Platform features.

q988 does not sell your personal data. We share personal data only with the following categories of third parties, strictly on a need-to-know basis and subject to contractual data protection obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals securely.
• KYC & Identity Verification Providers: Specialist third-party services that assist q988 in verifying member identities, checking age compliance (21+), and screening against sanctions and politically exposed person (PEP) lists.
• Game Content Providers: Licensed game studios that supply slot games, live dealer tables, fishing games, and virtual sports receive only the minimum data required for game session management — typically a pseudonymous session token.
• Cloud Infrastructure & Security Providers: Hosting and security service providers who process data on q988's behalf under strict data processing agreements and are prohibited from using that data for their own purposes.
• Regulatory Authorities: q988 may disclose member data to gaming regulators, financial intelligence units, law enforcement agencies, and other competent authorities where required by law, court order, or regulatory obligation.

q988 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation. The following retention periods apply as general guidelines:

Upon expiry of the applicable retention period, q988 will securely delete or anonymise your personal data such that it can no longer be associated with you as an identifiable individual.

q988 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• AES-256 encryption for all personal data stored on q988 servers, including identity documents and financial records.
• TLS 1.3 encryption for all data transmitted between your device and the q988 Platform.
• Multi-factor authentication options for member account access, including SMS-based two-factor verification.
• Role-based access controls ensuring that q988 staff access personal data only to the extent required for their specific job function.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists.
• Continuous automated monitoring for anomalous access patterns, potential data breaches, and suspicious account activity.
• Staff training on data protection obligations and security procedures as part of the q988 onboarding and annual compliance review process.

In the event of a data breach that is reasonably likely to result in risk to member rights and freedoms, q988 will notify affected members and relevant regulatory authorities in accordance with applicable notification obligations and within the timeframes prescribed by applicable law.

As a q988 member, you hold the following rights in respect of your personal data. These rights may be exercised by contacting our support team, and q988 will respond within 30 calendar days of receiving a valid request.

q988 operates a strict minimum age policy: the Platform is available only to individuals who are 21 years of age or older. q988 does not knowingly collect personal data from any person under the age of 21. All accounts are subject to mandatory age verification as part of the KYC process before any real-money gameplay is permitted.

q988 uses age estimation and document verification technology as part of its KYC process to identify attempts to create accounts by underage individuals. We continuously review and strengthen these controls as part of our responsible gaming obligations.

With your explicit consent, q988 may send you promotional communications including bonus offers, PSL cricket betting promotions, new game announcements, and seasonal campaigns via email and SMS. Your consent to receive marketing communications is obtained separately from your account registration consent and is entirely optional.

• You may opt out of marketing communications at any time by updating your communication preferences in your q988 account settings or by contacting our support team.
• Withdrawal of marketing consent does not affect the lawfulness of marketing sent prior to withdrawal, nor does it affect your ability to continue using q988 services.
• q988 does not share your contact details with third-party marketers. All promotional communications originate from q988 directly.
• Transactional and service communications — such as deposit confirmations, withdrawal notifications, and security alerts — are not marketing and will continue to be sent regardless of your marketing consent status, as they are necessary for account operation.

q988 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform features. The effective date displayed at the top of this document indicates the version currently in force.

Where changes to this Policy are material — meaning they significantly affect your rights or how your data is used — q988 will notify you by email to your registered address and/or via a prominent in-Platform notice at least 14 days before the changes take effect. For non-material changes such as clarifications or formatting updates, the Policy will be updated without advance notice.

Your continued use of the q988 Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to remain informed about how q988 protects your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or q988's data processing practices, please contact our dedicated support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly within the q988 Platform. This is the fastest channel for privacy-related queries, with an average response time under 3 minutes.
• Support Email: [email protected] — displayed as plain text only and is not a clickable link. Please include your registered username and describe your data protection request clearly.
• Response Timeline: Data subject rights requests will be acknowledged within 5 business days and fully responded to within 30 calendar days. Complex requests may require additional time, in which case q988 will notify you of the extended timeline.