q588 Privacy
Policy

This Privacy Policy ("Policy") describes how q588 ("q588", "we", "us", or "our") collects, processes, stores, and protects personal data when you use the q588 online casino and sports betting platform, accessible at q588.org and through any associated mobile applications or sub-domains (collectively, the "Platform").

q588 operates the Platform primarily for players based in Pakistan and the wider South Asian market. We take the privacy of our players seriously and are committed to handling personal data responsibly, transparently, and in accordance with our obligations under applicable data protection frameworks and our international gaming licence conditions.

This Policy applies to all individuals who visit, register on, or otherwise interact with the Platform. By creating a q588 account or by continuing to use the Platform, you confirm that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

q588 collects several categories of personal data. The specific data collected depends on your level of interaction with the Platform, ranging from anonymous browsing to full account registration and active gameplay. The categories are as follows:

Identity & Contact Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used for mandatory age verification — 21+ requirement)
• Residential address, city, and province (e.g., Karachi, Lahore, Islamabad, Faisalabad)
• Email address
• Mobile phone number
• Scanned or photographed copy of your CNIC (Computerised National Identity Card) or passport, submitted during KYC verification

Financial Data

• JazzCash or EasyPaisa mobile wallet account number
• Bank account details for HBL, UBL, Meezan Bank, or other registered payment methods
• Debit or credit card details (processed exclusively through our PCI-DSS compliant payment gateway — full card numbers are never stored on q588 servers)
• Transaction history: deposits, withdrawals, bonus credits, and adjustments

Gameplay & Behavioural Data

• Game session logs: games played, bets placed, outcomes, session duration, and wager amounts in PKR
• Sportsbook activity: markets selected, bet types, PSL and cricket betting history, cash-out activity
• Bonus and promotional participation history
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, cooling-off periods)

Technical & Device Data

• IP address and geolocation data (country and city level)
• Device type, operating system, browser type and version
• Cookie identifiers and session tokens
• Platform access timestamps and login history

Communications Data

• Records of support chat transcripts, email correspondence, and feedback submissions
• Marketing communication preferences (opt-in and opt-out records)

q588 collects personal data through the following channels:

• Direct provision: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Data collected automatically as you use the Platform, including through cookies, pixel tags, and server logs that record technical and behavioural information.
• Third-party verification providers: Data received from identity verification services and fraud detection partners where we have instructed them to verify information you have provided to us.
• Payment processors: Transactional data received from JazzCash, EasyPaisa, bank transfer processors, and card payment gateways confirming the status of deposits and withdrawals.
• Publicly available sources: In limited circumstances, q588 may verify information against publicly available records to meet our anti-money laundering (AML) obligations.

q588 uses collected personal data for the following purposes:

q588 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except in the context of fraud detection systems where automated flags are always subject to manual review by our compliance team.

q588 processes personal data on the following legal bases:

• Contractual necessity: Processing required to register your account, provide Platform services, process transactions, and fulfil the obligations set out in the q588 Terms & Conditions.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, and gaming licence conditions.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform improvement, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights and interests.
• Consent: Processing for optional marketing communications and non-essential cookies, where you have provided explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

q588 does not sell your personal data. We may share data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment gateway providers, solely for the purpose of processing transactions you initiate.
• Identity verification providers: Third-party KYC service providers who verify the authenticity of identity documents submitted during account registration or withdrawal processing.
• Fraud and AML screening providers: Services that screen transactions and account activity against known fraud patterns and AML watchlists in accordance with our regulatory obligations.
• IT infrastructure providers: Cloud hosting and security providers who process data on q588's behalf under strict data processing agreements that prohibit independent use of the data.
• Regulatory authorities and law enforcement: Where q588 is under a legal obligation to disclose data — for example, in response to a valid court order, regulator request, or law enforcement inquiry. q588 will notify affected users of such disclosures where legally permitted to do so.
• Business transfers: In the event that q588's business or relevant assets are acquired, merged, or transferred, your personal data may be included as part of the transferred assets, subject to equivalent privacy protections.

As an internationally operated Platform, q588 may transfer your personal data to, and process it in, countries outside Pakistan. This may occur when data is processed by our cloud infrastructure providers or KYC verification partners who operate data centres in other jurisdictions.

Where personal data is transferred internationally, q588 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities
• Transfers to countries that have been deemed to provide an adequate level of data protection
• Binding corporate rules applicable to our group entities and approved processors

You may request further information about the specific safeguards applied to any international transfer of your data by contacting the q588 support team.

q588 uses cookies and similar tracking technologies to provide a functional, personalised, and secure experience on the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without disrupting core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred currency display, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how players navigate and use the Platform, allowing q588 to identify usability issues and improve the product. No personally identifiable information is included in analytics data.
• Marketing cookies: Used to measure the effectiveness of promotional campaigns where you have opted in to receive marketing communications from q588. These are not used to build advertising profiles for third-party ad networks.

You can manage non-essential cookie preferences through the cookie consent panel available on the Platform. You may also manage cookies through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

q588 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, and in accordance with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account relationship with q588, plus a minimum of five (5) years following account closure, in accordance with standard AML and gaming regulatory requirements.
• KYC documentation: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years for financial regulatory compliance purposes.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing preferences and consent records: Retained until you withdraw consent or close your account, plus one (1) year for compliance audit purposes.
• Anonymised analytics data: Retained indefinitely as it no longer constitutes personal data.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you. Where deletion is not immediately possible due to backup system cycles, data will be isolated and protected until secure deletion can be completed.

As a q588 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the q588 support team with your registered email address and the specific right you wish to exercise. q588 will respond within 30 calendar days of receiving a valid request.

q588 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• TLS 1.3 encryption on all data in transit between your device and the Platform
• AES-256 encryption for all personal data stored at rest on q588 servers
• PCI-DSS compliance for all card payment processing — full card numbers are never stored on Platform servers
• Role-based access controls ensuring that only authorised personnel with a specific operational need can access player personal data
• Multi-factor authentication on all internal administrative systems
• Regular independent penetration testing and vulnerability assessments conducted by third-party cybersecurity specialists
• Intrusion detection systems monitoring Platform infrastructure for anomalous access patterns 24 hours a day
• Incident response procedures in place to identify, contain, and notify affected players of any data security incident within the timeframes required by applicable regulations

While q588 takes all reasonable measures to protect your data, no digital transmission or storage system is entirely impervious to risk. You also play a role in protecting your account by using a strong, unique password and enabling two-factor authentication where available.

The q588 Platform is strictly restricted to individuals who are 21 years of age or older. q588 does not knowingly collect personal data from individuals under 21 years of age. All account registrations are subject to age verification as part of the KYC process.

If q588 becomes aware that personal data has been collected from an individual under the age of 21, the account will be immediately suspended and all associated personal data will be permanently deleted from our systems without delay. Any funds deposited by an underage user will be returned to the originating payment method after deducting any applicable processing costs.

q588 strongly recommends that all households with minors install parental control software on shared devices to prevent unauthorised access to gambling platforms.

q588 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, Platform features, applicable laws, or regulatory requirements. The date of the most recent revision is always displayed at the top of this document.

When material changes are made to this Policy, q588 will notify registered players via email to the address associated with their account, and/or through a prominent notice displayed within the Platform, prior to the changes taking effect. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

If you disagree with any changes made to this Policy, you have the right to close your q588 account before the updated Policy takes effect. Any personal data collected prior to your account closure will continue to be handled in accordance with the version of the Policy that was in effect at the time of collection, except where applicable law requires otherwise.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way q588 handles your personal data, please get in touch with our dedicated privacy support team through the following channel:

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week
• Languages: English and Urdu
• Response target: Within 24 hours for email queries; under 2 minutes for live chat

When submitting a data rights request, please include your registered email address and a clear description of the right you wish to exercise. q588 may need to verify your identity before processing the request to ensure we do not disclose data to an unauthorised party.