Privacy Policy — q988 Gaming Platform

q988 is a licensed online gaming platform accessible at https://q988.club, serving English-speaking Pakistani players across cities including Karachi, Lahore, Islamabad, Faisalabad, and beyond. q988 is operated under an international gaming licence and offers a full suite of gaming products including cricket betting, PSL markets, live casino, slots, Pool Rummy, and Fishing Kui Li.

For the purposes of this Privacy Policy, q988 is the data controller in respect of the personal information you provide when registering for an account, making deposits or withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT, and interacting with the platform in any other way. As data controller, q988 determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the q988 website at https://q988.club, the mobile-optimised platform interface, and any communication channels operated by q988 including email, live chat, and support ticketing systems.

q988 collects personal data in three primary ways: data you provide directly when registering or transacting, data generated automatically through your use of the platform, and data received from third-party service providers such as payment processors and KYC verification partners. The categories of data collected are set out in the table below.

q988 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected without first obtaining your explicit consent.

• Account Creation and Management: To create and administer your q988 account, verify your identity and age (21+ requirement), and maintain your account profile and preferences;
• Processing Financial Transactions: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT, and to maintain accurate financial records associated with your account;
• Delivering Gaming Services: To provide access to cricket betting, PSL markets, live casino, slots, Pool Rummy, Fishing Kui Li, and all other gaming products available on the q988 platform;
• KYC and AML Compliance: To fulfil the Know Your Customer and Anti-Money Laundering obligations imposed by q988's international gaming licence, including identity verification, source of funds checks, and transaction monitoring;
• Responsible Gaming: To monitor gaming activity for patterns that may indicate problem gambling, to apply responsible gaming tools you have activated, and to initiate welfare check-ins where appropriate under q988's duty of care obligations;
• Fraud Prevention and Security: To detect and prevent fraud, multiple account creation, bonus abuse, match-fixing related activity, unauthorised account access, and other platform security threats;
• Customer Support: To respond to your support queries, complaints, and account-related requests via live chat and email in Urdu and English;
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how Pakistani players interact with the platform and to improve the user experience, game selection, and payment processes;
• Marketing Communications (with consent): To send you promotional emails, bonus offers, and platform updates where you have expressly opted in to receive such communications. You may opt out at any time via the unsubscribe link in any marketing email or through your account settings;
• Legal Compliance: To comply with applicable laws, regulatory directives, court orders, or requests from competent authorities.

q988 processes your personal data only where a valid legal basis exists for doing so. The legal bases applicable to q988's data processing activities are as follows:

• Contractual Necessity: Processing your identity, contact, financial, and gaming activity data is necessary for q988 to perform the contract it has with you under the q988 Terms & Conditions. Without this processing, q988 cannot operate your account or deliver gaming services;
• Legal Obligation: Processing for KYC, AML, and regulatory reporting purposes is required to comply with q988's obligations under its international gaming licence and applicable financial crime prevention standards;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics is carried out on the basis of q988's legitimate interests in operating a safe, secure, and compliant gaming platform — provided those interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing for direct marketing communications is carried out only where you have provided your explicit prior consent. This consent can be withdrawn at any time without affecting the lawfulness of prior processing.

q988 does not sell, rent, or trade your personal data to any third party. Your data may be shared only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT network providers receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated;
• KYC Verification Partners: q988 uses licensed third-party KYC and identity verification providers to validate CNIC documents, age verification, and source of funds checks. These providers process your identity data solely for verification purposes under strict data processing agreements with q988;
• Gaming Software Studios: Live casino, slot, Pool Rummy, and Fishing Kui Li game providers receive anonymised session data necessary to deliver game content and calculate outcomes. They do not receive your identity or financial data;
• Regulatory and Law Enforcement Authorities: q988 may disclose your data to its licensing authority, financial intelligence units, or law enforcement agencies where required by law, by court order, or where q988 has a good-faith belief that disclosure is necessary to prevent financial crime, protect the safety of users, or comply with legal process;
• Professional Advisors: q988's legal counsel, auditors, and compliance consultants may access your data on a strictly need-to-know basis under professional confidentiality obligations;
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of q988's assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and given the opportunity to close your account if you do not wish your data to be transferred.

q988 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, remember your preferences, maintain your logged-in session, and understand how Pakistani players use the site so we can keep improving it. A cookie is a small text file placed on your device by the q988 server when you visit the platform.

The categories of cookies q988 uses are as follows:

• Strictly Necessary Cookies: These cookies are essential for the q988 platform to function. They maintain your login session, remember your language preference (Urdu or English), and enable secure financial transactions. These cookies cannot be disabled without breaking core platform functionality;
• Functional Cookies: These cookies remember your platform preferences — such as your preferred payment method (JazzCash or EasyPaisa), your responsible gaming limits display, and your sports betting market selections — to personalise your q988 experience;
• Analytical Cookies: q988 uses anonymised analytical data to understand which games are most popular with Pakistani players, where users encounter friction in the deposit or withdrawal flow, and how the platform can be improved. This data is aggregated and does not identify individual users.

q988 does not use cookies to serve third-party advertising, to track you across external websites, or to build advertising profiles. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the q988 platform.

q988 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and q988's international gaming licence obligations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active q988 account, and for a minimum of five (5) years following account closure — as required by AML and gaming licence regulations for audit and regulatory reporting purposes;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements under q988's gaming licence;
• KYC Documentation: Identity documents submitted for KYC verification are retained for five (5) years from the date of submission or from account closure, whichever is later;
• Gaming Activity Records: Bet history, casino session logs, and game records are retained for five (5) years from the date of the activity. Anonymised aggregated gaming data may be retained indefinitely for platform analytics purposes;
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction;
• Marketing Consent Records: Records of your marketing consent or withdrawal of consent are retained for the duration of your account and for three (3) years thereafter as evidence of compliance;
• Self-Exclusion Records: Records of any self-exclusion or responsible gaming restriction you have applied are retained permanently to prevent re-registration in breach of the exclusion, in accordance with responsible gaming best practice.

When retention periods expire and no legal obligation requires continued storage, q988 securely destroys or anonymises your personal data in accordance with its data disposal procedures.

q988 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and q988 servers is encrypted in transit using 256-bit SSL/TLS. This includes login credentials, financial transactions, and all platform API communications;
• AES-256 Encryption at Rest: Sensitive data stored on q988 servers — including identity documents, financial records, and KYC data — is encrypted at rest using AES-256 encryption;
• Password Hashing: q988 account passwords are never stored in plain text. They are hashed using bcrypt with an appropriate work factor so that even in the event of a server compromise, raw passwords are not exposed;
• Two-Factor Authentication (2FA): q988 strongly encourages all registered users to enable 2FA on their accounts. 2FA is available via authenticator app or SMS to your registered Pakistani mobile number;
• Access Controls: Access to personally identifiable user data within q988's internal systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication for internal systems;
• Regular Security Audits: q988's platform infrastructure is subject to regular independent security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited;
• Intrusion Detection: q988 operates 24/7 automated intrusion detection and anomaly monitoring systems on its server infrastructure to identify and respond to potential security incidents in real time.

As a registered q988 user, you hold the following rights in respect of the personal data q988 processes about you. To exercise any of these rights, please contact the q988 support team via live chat or at [email protected]. q988 will respond to all rights requests within thirty (30) calendar days.

Please note that certain rights are subject to limitations where q988 has overriding legal obligations — for example, q988 cannot delete KYC records that are required to be retained under gaming licence regulations, even where an erasure request is received.

q988 implements the following measures to prevent underage registration and use of the platform:

• Mandatory date-of-birth declaration at registration, cross-referenced against CNIC verification;
• KYC identity verification required before any withdrawal is processed, including independent validation of age against government-issued documents;
• Automated flagging of accounts where declared age is inconsistent with other profile data or device usage patterns;
• Parental control compatibility — q988 is listed with recognised parental control software providers so that parents and guardians in Pakistan can block access to the q988 platform on shared or family devices.

q988 is an international gaming platform and its infrastructure, including servers, KYC verification partners, and gaming software studios, may be located outside Pakistan. Where your personal data is transferred outside Pakistan, q988 ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Privacy Policy.

Safeguards used by q988 for international data transfers include:

• Data processing agreements with all third-party service providers that include contractual data protection obligations aligned with international best practice standards;
• Transfers to jurisdictions that maintain adequate data protection regimes as recognised by q988's licensing authority;
• Encryption of all data in transit using 256-bit SSL/TLS, regardless of the destination jurisdiction;
• Minimum data transfer principles — only the data strictly necessary for the third party to perform their contracted service is transferred.

For further information about the international transfers that may apply to your personal data, or to request details of the specific safeguards in place for a particular transfer, please contact the q988 support team.

q988 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes in q988's gaming licence obligations. When material changes are made — for example, changes to the categories of data collected, changes to how data is shared, or changes to retention periods — q988 will notify registered users via email to the address on file or via a prominent on-platform notification.

The updated Privacy Policy will be published at https://q988.club/privacy-policy with a revised "Last Updated" date. Your continued use of the q988 platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the updated Privacy Policy, you should stop using the platform and close your account.

For non-material changes — such as corrections of typographical errors, clarifications of existing policy language, or updates to contact details — q988 may update this page without sending individual notifications. We therefore recommend checking this page periodically.

If you have any question, concern, or complaint about this Privacy Policy or about how q988 processes your personal data, please contact the q988 support team in the first instance. We aim to resolve all privacy-related queries promptly and transparently.

If you are not satisfied with q988's response to your privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority or to the dispute resolution mechanism provided by q988's international gaming licence authority. q988 will provide full details of the applicable escalation routes upon request.