q888 Privacy
Policy

This Privacy Policy ("Policy") describes the practices of q888 ("q888", "we", "us", "our") with respect to the collection, use, storage, disclosure, and protection of personal data relating to users ("you", "your") of the q888 online gaming platform accessible at q888.blog and its associated services (collectively, the "Platform").

q888 operates as an internationally licensed online gaming operator providing cricket betting, live casino gaming, slot games, Kalaka Bingo, table tennis betting, and related services to eligible adult users, including players based in Pakistan. The Platform serves users across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and throughout Pakistan.

This Policy applies to all personal data processed by q888 in connection with your use of the Platform, regardless of the device, browser, or method through which you access q888's services. It covers data collected during account registration, identity verification, deposits and withdrawals, gameplay activity, customer support interactions, and all marketing communications you consent to receive from q888.

This Policy should be read together with q888's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on a data protection matter, this Policy shall prevail.

For the purposes of applicable data protection law, q888 is the Data Controller responsible for your personal data collected through the Platform. As Data Controller, q888 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing complies with applicable data protection principles.

q888 processes personal data in accordance with internationally recognised data protection standards, including principles analogous to those established under the General Data Protection Regulation (GDPR) where applicable, and in line with the data protection requirements associated with its international gaming licence.

All enquiries regarding q888's data processing activities, your rights as a data subject, or this Privacy Policy should be directed to q888's designated Privacy contact, reachable at [email protected] with the subject line "Privacy Enquiry".

q888 collects the following categories of personal data from and about you in the course of operating the Platform:

q888 does not collect special category data (such as health data, racial or ethnic origin, political opinions, or religious beliefs) unless specifically required to do so for responsible gaming purposes (for example, when processing a self-exclusion request that references mental health concerns). Where such data is provided voluntarily by you in a support context, it will be treated with the highest level of confidentiality and used solely for the purpose of providing the requested assistance.

q888 collects your personal data through the following channels and mechanisms:

• Direct provision by you: Data you enter into q888's registration form, account settings, deposit and withdrawal interfaces, responsible gaming tools, and support chat or email;
• Automated technical collection: Data collected automatically through cookies, web beacons, session tracking scripts, and server logs when you visit or use the Platform — including IP addresses, device identifiers, and browsing behaviour within q888;
• Payment processors: Transaction confirmation data, payment method ownership verification, and fraud screening data received from q888's approved payment processing partners (including JazzCash, EasyPaisa, and banking partners);
• Identity verification services: Age and identity verification data returned from CNIC verification services and other KYC compliance tools used by q888 to verify the eligibility of account holders;
• Game providers: Gameplay outcome data, round history, and session metadata transmitted from q888's certified game provider partners (including Evolution Gaming, Pragmatic Play, and others) for the purpose of maintaining accurate gaming records;
• Anti-fraud and risk management systems: Device fingerprinting data, geolocation data (at country/city level), and behavioural analytics used to detect and prevent fraud, account takeover, and multi-accounting.

q888 processes your personal data only where a lawful basis exists for doing so. The primary purposes for which q888 processes personal data and the corresponding legal bases are as follows:

• Contract performance: Processing necessary to provide you with a q888 account, facilitate deposits and withdrawals in PKR, deliver gaming services, and fulfil all obligations under the q888 Terms & Conditions to which you have agreed;
• Legal obligation: Processing required to comply with q888's obligations under its international gaming licence, including KYC/AML (anti-money laundering) requirements, age verification, responsible gaming record-keeping, and regulatory reporting;
• Legitimate interests: Processing necessary to detect and prevent fraud, protect the Platform and other users from abuse, conduct security monitoring, analyse Platform performance, and improve the q888 user experience — where such processing does not override your fundamental privacy rights;
• Consent: Processing based on your explicit consent, including the sending of promotional communications (bonus offers, match alerts, VIP programme updates) via SMS or email. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

q888 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your personal information is shared only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Licensed game providers: q888 shares the minimum necessary session and account data with certified game provider partners (such as Evolution Gaming, Pragmatic Play, and Ezugi) to facilitate game delivery and maintain accurate round and payout records;
• Payment processing partners: Transaction data is shared with q888's approved payment service providers — including JazzCash, EasyPaisa, and banking partners — to process deposits and withdrawals in PKR and to verify payment method ownership;
• KYC and identity verification providers: Identity data is shared with q888's approved KYC compliance partners to conduct CNIC verification and age confirmation as required under q888's licensing obligations;
• Regulatory and licensing authorities: q888 is required to share certain account and transaction data with its licensing authority and relevant regulatory bodies on request, or as part of routine compliance reporting. q888 will comply with valid legal orders from competent authorities;
• Fraud prevention and security: Data may be shared with industry fraud prevention networks and cybersecurity service providers to identify and prevent fraudulent activity, money laundering, or unauthorised account access;
• Legal proceedings: Where required by a valid court order, statutory obligation, or the enforcement of q888's legal rights, personal data may be disclosed to relevant legal and law enforcement bodies.

All third parties with whom q888 shares personal data are contractually required to process such data only for the specified purpose, to implement appropriate technical and organisational security measures, and to handle your data in accordance with applicable data protection standards. q888 does not permit its service providers to use your data for their own commercial purposes.

q888 operates as an internationally licensed gaming operator, and some of its infrastructure, game provider partners, and service providers are located outside of Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan. This may include countries within the European Economic Area (EEA), as well as jurisdictions in Asia and other regions where q888's technology and service partners operate.

Where personal data is transferred internationally, q888 ensures that appropriate safeguards are in place to protect your information in accordance with internationally recognised data protection standards. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities and incorporated into q888's agreements with service providers;
• Processing only within jurisdictions that provide an adequate level of data protection under applicable international standards;
• Technical measures including end-to-end encryption that protect data in transit between systems regardless of the geographic location of processing.

q888 retains your personal data for as long as your account remains active and for a period thereafter as required by law or legitimate business need. Specific retention periods applicable to the main categories of data held by q888 are as follows:

• Account registration and identity data: Retained for the lifetime of your account plus a minimum of 5 years following account closure, as required under anti-money laundering and gaming licence regulations;
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations under q888's licensing requirements;
• Gaming activity records: Retained for a minimum of 3 years following account closure, to support dispute resolution, responsible gaming assessments, and regulatory reporting;
• Communication and support records: Retained for 2 years from the date of the most recent communication, unless a longer period is required for an unresolved dispute or legal matter;
• Marketing consent records: Retained for the duration of your marketing consent plus 3 years following withdrawal of consent, to demonstrate compliance with marketing opt-in requirements;
• Technical and log data: Typically retained for 12 months from the date of collection, unless longer retention is required for security or fraud investigation purposes.

Following the applicable retention period, q888 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you. Where data is anonymised rather than deleted, it may be retained and used for statistical and analytical purposes without restriction.

q888 uses cookies and similar tracking technologies on the Platform to provide, personalise, and improve our services. Cookies are small text files stored on your device when you visit q888, which allow the Platform to recognise your browser and remember certain information about your session and preferences.

The following categories of cookies are used on q888:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your login session, enabling secure access to your q888 account, and facilitating PKR deposit and withdrawal transactions. These cookies cannot be disabled without significantly impairing Platform functionality;
• Performance and Analytics Cookies: Used to collect anonymised data about how users interact with the q888 Platform — including pages visited, session duration, and navigation patterns — to help q888 understand and improve Platform performance;
• Functionality Cookies: Used to remember your preferences such as language settings, preferred game categories, and display options so that your q888 experience is personalised to your choices;
• Security Cookies: Used to support fraud detection, multi-accounting prevention, and the authentication of your q888 login session. These cookies are strictly necessary for Platform security and cannot be disabled.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may impair your ability to use some features of the q888 Platform, including account login and deposit functionality. q888 does not use cookies to serve third-party advertising on behalf of external brands.

q888 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and q888's servers is encrypted using industry-standard 256-bit SSL/TLS protocols, preventing interception of your personal and financial data in transit;
• Encrypted data storage: Sensitive personal data — including identity documents, financial account details, and CNIC information — is stored in encrypted form within q888's secure server infrastructure;
• Access controls: Access to personal data is restricted on a strict need-to-know basis. q888 team members only access the minimum personal data necessary to perform their specific role, and all access is subject to logging and regular audit review;
• Two-factor authentication: q888 offers optional two-step verification for account login, providing an additional layer of protection against unauthorised access to your account even if your password is compromised;
• Intrusion detection and monitoring: q888's platform infrastructure is subject to continuous security monitoring, intrusion detection systems, and regular independent security assessments;
• Incident response procedures: q888 maintains documented data breach response procedures. In the event of a data breach that poses a risk to your rights and freedoms, q888 will notify affected users and relevant authorities in accordance with applicable legal obligations.

As a q888 user, you have the following rights in relation to the personal data q888 holds about you. q888 is committed to facilitating the exercise of these rights promptly and without undue bureaucratic burden:

To exercise any of the above rights, please contact q888's Privacy team at [email protected] with the subject line "Data Subject Request". q888 will acknowledge your request within 5 business days and respond substantively within 30 calendar days. Where requests are complex or numerous, this period may be extended by up to a further 30 days, with notice provided to you.

Identity verification is required before q888 can process any data subject request, to ensure that personal data is not disclosed to or actioned on behalf of an unauthorised party.

All q888 accounts undergo CNIC-based age verification during the registration process. Where q888 has reason to believe that a registered user may be under 21 years of age, the account will be immediately suspended pending re-verification. Where it is confirmed that an account belongs to a minor, the account will be permanently closed, all balances will be returned to the originating payment method where technically possible, and q888 will delete all associated personal data subject to any mandatory regulatory retention obligations.

If you are a parent or guardian and you believe that a minor in your care has created a q888 account, please contact q888 support immediately at [email protected]. q888 will investigate and act promptly upon receipt of a credible report of underage account access.

q888 may send you promotional communications — including bonus offers, match alerts, PSL betting promotions, new game announcements, and VIP programme updates — via SMS to your registered Pakistani mobile number and via email to your registered email address, where you have provided explicit consent to receive such communications during registration or thereafter.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in the Notifications section of your q888 account settings;
• Clicking the unsubscribe link included at the bottom of any q888 marketing email;
• Contacting q888 support via live chat or at [email protected] with a clear request to opt out of marketing communications.

Withdrawal of marketing consent will be processed within 5 business days. Please note that even after opting out of promotional communications, q888 will continue to send you essential service communications relating to your account — including transaction confirmations, security alerts, KYC verification requests, and responsible gaming notifications. These essential communications are not subject to marketing opt-out as they are necessary for the proper operation of your q888 account.

The q888 Platform may contain references to third-party services including certified game providers, licensed payment processors, and other service partners. Where the Platform directs you to a third-party service (for example, a JazzCash or EasyPaisa payment interface), that third party's own privacy policy will govern the processing of your personal data within their system. q888 is not responsible for the privacy practices of third-party services and recommends that you review the privacy policy of any third-party service before providing your personal information.

q888 exercises care in selecting third-party partners and requires all service providers to maintain appropriate data protection standards. However, q888 cannot guarantee the data protection practices of third parties and accepts no liability for data processing carried out by third parties acting outside of their contractual obligations to q888.

q888 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal or regulatory requirements, or improvements to the q888 Platform. When material changes are made to this Policy, q888 will notify registered users via email to their registered address and/or through an in-platform notification displayed on their next login.

The updated Privacy Policy will take effect from the date specified in the notification. Your continued use of the q888 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and request voluntary account closure prior to the effective date of the changes.

The date of the most recent update to this Privacy Policy is always displayed at the top of this page and in the table of contents sidebar. q888 recommends that you review this Policy periodically to remain informed of how your personal data is being handled.

If you have any questions, concerns, or complaints regarding this Privacy Policy or q888's handling of your personal data, you are encouraged to contact q888 directly in the first instance. q888 is committed to resolving all privacy-related concerns promptly and fairly.

• Live Chat: Available directly on the q888 Platform, 24 hours a day, 7 days a week. Average response time: under 2 minutes. Supported in English and Urdu.
• Privacy Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Subject Request" as appropriate. Responses within 24 hours for general enquiries; formal data subject requests acknowledged within 5 business days.

Where you are not satisfied with q888's response to a privacy complaint, you have the right to escalate your concern to q888's licensing authority's designated complaints body or, where applicable, the relevant data protection supervisory authority in the jurisdiction in which q888 is licensed to operate.