Welcome to the q98com Privacy Policy. This document explains how q98com ("we", "us", "our", "the Platform") collects, uses, stores and protects the personal information of players registered on q98com.app ("the Platform"). It applies to all users who access q98com from Pakistan or anywhere else, regardless of the device or connection method used.
q98com is committed to handling personal data responsibly, lawfully and with full transparency. This Privacy Policy is written in plain language because we believe every Pakistan player deserves to understand exactly what happens to their information — not just lawyers and compliance officers. If anything in this Policy is unclear, you can ask the q98com support team to explain it at any time via live chat.
By registering a q98com account or continuing to use the platform after this Policy has been updated, you confirm that you have read and understood the terms set out here. If you do not agree with how q98com handles personal data, you should not use the platform.
Plain English Summary: This Policy tells you what information q98com keeps about you, what it is used for, who (if anyone) sees it, how long it is kept, and what you can do if you want to change or delete it.
q98com collects personal data in three main ways: information you provide directly, data generated automatically when you use the platform, and information obtained from third parties for identity and payment verification purposes.
Information You Provide Directly
- Registration data: Full name, date of birth, mobile number, email address, and the city or region in Pakistan where you are located.
- Identity verification documents: CNIC (Computerised National Identity Card), passport or other government-issued ID uploaded during the account verification process.
- Payment information: Easypaisa account number, JazzCash wallet details, NayaPay or SadaPay details, bank account number for IBFT transfers, or card details for Visa/Mastercard transactions. Note: full card numbers are never stored directly on q98com systems — they are tokenised by our payment processor.
- Support communications: Messages sent to the q98com support team via live chat or email, including the content of queries and any documents attached.
- Responsible gaming settings: Deposit limits, self-exclusion requests, cool-off preferences and any other responsible gaming tool settings you activate on your account.
Data Collected Automatically
- Device and browser data: Device type, operating system version, browser type and version, screen resolution, and mobile network operator.
- Usage and behaviour data: Pages visited, games played, bet amounts and frequency, session duration, login timestamps, and in-platform navigation patterns.
- IP address and approximate location: Used for geolocation compliance checks and fraud prevention. q98com does not collect your precise GPS location.
- Cookies and similar technologies: See Section 06 for full details on cookie usage.
Data from Third Parties
- Payment processor confirmations: Transaction status, reference numbers and fraud signals from Easypaisa, JazzCash, NayaPay, SadaPay, and card processing networks.
- Identity verification services: Confirmation results from third-party KYC (Know Your Customer) services used to verify CNIC details against official records.
- Anti-fraud databases: Risk scores and flagging information from industry-standard fraud prevention databases used to protect q98com and its players.
| Data Category | Examples | Collected When | Required? |
|---|---|---|---|
| Identity | Name, DOB, CNIC | Registration / KYC | Required |
| Contact | Mobile, email | Registration | Required |
| Payment | Easypaisa, IBFT | First deposit | Required |
| Device / Technical | IP, browser | Every session | Automatic |
| Behavioural | Bets, games played | Active use | Automatic |
Every piece of personal data that q98com collects has a specific, documented purpose. We do not collect data speculatively or hold information we have no genuine use for. The following are the purposes for which your data is used:
- Account creation and management: To register your q98com account, verify your identity, process your PKR deposits and withdrawals, and maintain accurate records of your gaming activity and balance.
- Platform personalisation: To show you relevant promotions, remember your game preferences, and surface content that is more likely to match your interests as a Pakistan-based player. This personalisation is based on your platform behaviour, not on profiling by third parties.
- Fraud prevention and security: To detect and prevent unauthorised account access, bonus abuse, money laundering and other forms of financial crime. Behavioural and device data plays an important role in identifying unusual activity that may indicate account compromise.
- Legal and regulatory compliance: To meet Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations, to respond to lawful requests from regulatory authorities, and to maintain the records required under applicable financial regulations.
- Responsible gaming monitoring: To identify players who may be showing signs of problem gambling, to apply the responsible gaming tools you have activated, and to ensure self-exclusion and cool-off requests are honoured across the platform.
- Customer support: To respond to your queries, investigate complaints, and maintain a record of support interactions for quality assurance and dispute resolution purposes.
- Communications: To send you important account notices (balance alerts, verification reminders, security notifications) and, where you have opted in, promotional communications about q98com offers. You can opt out of promotional communications at any time through your account settings.
- Platform improvement: Aggregated, anonymised usage data is used to understand how Pakistan players interact with q98com, identify performance issues, and prioritise new features. This data cannot be traced back to individual players.
q98com processes personal data only where there is a valid legal basis for doing so. The primary legal bases applicable to q98com's data processing activities are:
- Contractual necessity: Processing your registration data, payment information and gaming activity records is necessary to provide you with the q98com service you have signed up for. Without this processing, q98com cannot operate your account.
- Legal obligation: Processing required to meet AML, KYC and other regulatory obligations is mandated by applicable law. q98com cannot waive this processing even if requested to do so by a player.
- Legitimate interests: Fraud detection, platform security, responsible gaming monitoring and aggregate analytics are processed under q98com's legitimate interest in maintaining a safe, compliant and well-functioning platform. These interests have been balanced against player privacy rights and do not override your fundamental privacy expectations.
- Consent: Where processing is based on your consent — such as receiving promotional emails about q98com offers — you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
q98com does not sell, rent or exchange your personal data with third parties for their own commercial or marketing purposes. Your data is shared only in the limited circumstances described below, and only to the extent necessary for each specific purpose.
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank networks and card processors receive the payment data necessary to process your PKR deposits and withdrawals. These processors operate under their own privacy policies and are regulated entities.
- Identity verification providers: Third-party KYC services receive your identity documents to verify their authenticity. These providers are bound by strict data processing agreements and may not use your data for any purpose other than the verification task.
- Game providers: When you play a game on q98com, the game provider receives a pseudonymous player identifier and the game session data necessary to run the game and calculate results. Game providers do not receive your name, CNIC, phone number or financial details.
- Fraud prevention services: Industry-standard fraud detection networks receive device fingerprints and behavioural signals to help identify account compromise and coordinated abuse. No directly identifying data is shared with these services beyond what is technically necessary.
- Legal and regulatory disclosure: q98com will disclose personal data to law enforcement agencies, regulatory bodies or courts when required to do so by a valid legal order or where disclosure is necessary to prevent serious harm. q98com will notify affected players of such disclosures wherever legally permitted to do so.
- Business transfers: In the event of a merger, acquisition or sale of all or part of the q98com business, player data may be transferred to the acquiring entity. Players will be notified in advance of any such transfer and given the opportunity to close their accounts if they do not wish their data to be transferred.
q98com will never share your personal data with advertisers, data brokers, social media companies, or any other third party for commercial profiling purposes. If you ever receive a communication claiming to be from a partner of q98com asking for your account details, treat it as fraudulent and report it to the q98com support team immediately.
q98com uses cookies and similar tracking technologies to make the platform work correctly, improve your experience, and understand how Pakistan players interact with the site. Here is a plain breakdown of the cookies q98com uses:
- Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security cookies that protect against cross-site request forgery, and cookies that remember your chosen language and currency settings. These cannot be disabled without breaking the platform.
- Functional cookies: Remember your preferences — such as your last-used payment method, responsible gaming settings, and game lobby filters. Disabling these cookies will not prevent platform access but may mean some preferences need to be reset each session.
- Analytics cookies: Collect anonymised data about how pages are used, which games are most popular among Pakistan players, and where technical errors occur. This data is aggregated and cannot be used to identify individual players. q98com uses this information to improve the platform.
- Security and fraud detection cookies: Capture device fingerprinting data used to identify suspicious login attempts and coordinated bot activity. These are essential for account security.
You can manage cookie preferences through your browser settings. Note that blocking essential and security cookies will affect your ability to log in and use q98com normally. Most modern browsers provide granular cookie controls — consult your browser's help documentation for specific instructions.
Note for Pakistan mobile users: If you access q98com via a mobile browser (Chrome for Android, Safari on iOS), cookie settings are managed within your mobile browser's privacy settings, not through the phone's system settings.
q98com retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply:
- Active account data: Retained for the lifetime of your q98com account plus a minimum of 5 years after account closure. This retention is required for AML compliance and dispute resolution purposes.
- Identity verification documents: Retained for a minimum of 5 years from the date of verification, as required by applicable anti-money laundering regulations.
- Payment transaction records: Retained for a minimum of 5 years from the date of each transaction for financial compliance and audit purposes.
- Support communication records: Retained for 3 years from the date of the interaction to support quality assurance, dispute resolution and training activities.
- Behavioural and usage logs: Retained for 2 years from the date of collection. Aggregated, anonymised versions of this data may be retained indefinitely for platform analytics.
- Marketing consent records: Retained for as long as the consent is active plus 1 year after it is withdrawn, to demonstrate compliance with consent requirements.
When data reaches the end of its retention period, it is securely deleted or anonymised in accordance with q98com's internal data disposal procedures. Players who have submitted a deletion request will be informed when their data has been removed, subject to the legal retention obligations described above.
q98com takes the security of player data seriously and maintains a range of technical and organisational measures to protect against unauthorised access, loss, alteration or disclosure of personal data.
- Encryption in transit: All data transmitted between your device and the q98com platform is encrypted using TLS 1.2 or higher (256-bit encryption). This applies to both the web platform and all API connections used by payment processors.
- Encryption at rest: Sensitive fields including identity document images, financial details and authentication credentials are encrypted at rest in the q98com database using industry-standard encryption algorithms.
- Access controls: Access to production systems and player data is restricted to q98com staff who have a documented business need. All access is logged and reviewed. Privileged access requires multi-factor authentication.
- Intrusion detection: q98com operates continuous monitoring of platform infrastructure to detect unusual access patterns, injection attempts and other security threats in real time.
- Regular security assessments: The platform undergoes regular penetration testing and security audits by qualified third-party security professionals. Findings are prioritised and remediated according to their severity.
- Staff training: All q98com staff who handle player data receive regular privacy and security training covering their obligations under this Policy and applicable data protection standards.
No online platform can guarantee absolute security against all possible threats. If you become aware of any security vulnerability affecting q98com, please report it to the support team immediately. q98com investigates all reported security concerns promptly and in confidence.
As a q98com player, you have a number of rights regarding the personal data we hold about you. These rights can be exercised at any time by contacting the q98com support team via live chat or email at support@q98com.app.
Right to Access
Request a copy of all personal data q98com holds about you. We will provide this within 30 days of a verified request in a structured, readable format.
Right to Rectification
If any of your personal data held by q98com is inaccurate or incomplete, you have the right to have it corrected. Some data fields can be updated directly from your account settings.
Right to Erasure
Request deletion of your personal data where there is no legal obligation requiring its retention. Note that AML and financial regulations require certain records to be kept for a minimum of 5 years.
Right to Restriction
Ask q98com to restrict processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
Right to Portability
Receive a copy of the personal data you provided to q98com in a machine-readable format (JSON or CSV) for transfer to another platform, where technically feasible.
Right to Object
Object to processing of your personal data that is based on legitimate interests, including profiling for responsible gaming monitoring. q98com will assess your objection and respond within 30 days.
Right to Withdraw Consent
Where processing is based on your consent (such as promotional communications), you may withdraw that consent at any time through your q98com account settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.
To exercise any of the above rights, contact the q98com support team via live chat or at support@q98com.app. We will ask you to verify your identity before acting on any data rights request to protect against unauthorised requests. All responses will be delivered within 30 days.
q98com is strictly an 18+ platform. We do not knowingly collect, store or process personal data from individuals under the age of 18. If a person under 18 has accessed q98com by misrepresenting their age, q98com will close the account immediately upon discovery, void all gameplay, return any deposited funds to the payment source, and delete all associated personal data as soon as legally permissible.
If you believe a minor has registered on q98com, please contact the support team immediately at support@q98com.app with the details you have available. q98com takes reports of underage access extremely seriously and will investigate and act on any credible report within 24 hours.
Parents and guardians in Pakistan who are concerned about their children's access to online gambling platforms are encouraged to use parental control software to restrict access to betting and casino websites. The q98com support team can provide guidance on such tools on request.
q98com may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or our data processing practices. When we make material changes — changes that meaningfully affect how your personal data is handled — we will notify you in advance via the platform's notification system and/or by email to your registered address.
The "Last Updated" date at the top of this page will always reflect the most recent revision. Minor changes such as grammatical corrections or clarifications that do not alter the substance of the Policy will be made without separate notification.
Your continued use of q98com following the effective date of a revised Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must stop using the platform and may request account closure via the support team. Any data collected under a prior version of the Policy will continue to be handled in accordance with the version of the Policy that was in force at the time of collection, except where updated practices are more protective of your privacy.
Staying informed: q98com recommends that Pakistan players review this Privacy Policy whenever they receive a notification about updates, or at minimum once every six months if you are a regular user of the platform.
If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern about q98com, the following contact options are available:
- Live Chat: Available on every page of the q98com platform, 24 hours a day, 7 days a week. The quickest way to get an initial response to a privacy query.
- Email: support@q98com.app — use this for formal data rights requests, deletion requests, or detailed privacy complaints that require written documentation.
- FAQ: The q98com FAQ page covers the most common privacy questions from Pakistan players.
Formal privacy complaints submitted in writing will be acknowledged within 24 hours. q98com aims to provide a full written response within 10 business days. If you are not satisfied with our response to a privacy complaint, you may escalate through the dispute resolution process described in the q98com Terms and Conditions.
This Privacy Policy was last reviewed and updated in January 2025. It represents the complete and authoritative statement of q98com's data protection practices as they apply to all registered Pakistan players and any other users of q98com.app.