q98gam Privacy Policy —
How We Protect Your Personal Data

1 Introduction & Scope

This Privacy Policy describes how q98gam ("q98gam", "we", "us", "our") collects, uses, stores, shares, and protects personal data in connection with the operation of the q98gam online gaming platform accessible at q98gam.net. It applies to all individuals who access, register with, or use the q98gam platform in any capacity, including but not limited to Pakistani players accessing the platform via desktop or mobile browser.

q98gam is committed to handling personal data responsibly, transparently, and in accordance with the data protection obligations imposed by its international gaming license. This Policy should be read in conjunction with the q98gam Terms & Conditions and the Responsible Gaming Policy.

Where you access q98gam on behalf of another person — for example, by sharing a device — it is your responsibility to ensure that the other person has read and understood this Privacy Policy before their data is submitted to q98gam. q98gam processes only the data of individuals who have directly registered an Account on the platform.

2 Data Controller Identity

For the purposes of applicable data protection law, q98gam acts as the data controller in respect of all personal data collected through the q98gam platform. As data controller, q98gam determines the purposes for which personal data is collected and the manner in which it is processed.

q98gam operates under an international gaming license, which imposes specific data protection and anti-money laundering obligations on the platform. These obligations form part of the lawful basis for certain categories of personal data processing described in this Policy.

3 Data We Collect

q98gam collects the following categories of personal data in connection with the operation of the platform:

q98gam does not collect any special categories of personal data — such as biometric data, health information, or political opinions — unless explicitly required by a specific regulatory obligation, in which case the collection will be separately disclosed to you.

4 How We Collect Data

q98gam collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account settings.
• Automated technical collection: Data collected automatically when you access the q98gam platform, including IP addresses, device identifiers, browser information, and session data, via server logs and platform analytics tools.
• Cookies and similar technologies: q98gam uses cookies and local storage to maintain login sessions, remember user preferences, and analyse platform performance. See Section 7 for full details.
• Third-party payment providers: When you make a deposit via JazzCash, EasyPaisa, HBL, UBL, or SadaPay, q98gam receives transaction confirmation data from those providers, including transaction reference numbers and confirmation of account ownership.
• Identity verification services: q98gam may use third-party KYC verification providers to cross-reference identity documents submitted by players. These providers process data under strict contractual data protection obligations.

5 Purposes & Legal Basis for Processing

q98gam processes personal data for the following specific purposes, each supported by a defined legal basis:

• Account creation and management — Necessary for the performance of the contract between you and q98gam, as described in the Terms & Conditions.
• Identity and age verification (KYC) — Required to comply with q98gam's legal obligations under its international gaming license, including the obligation to prevent underage gambling and to verify player identity.
• Processing deposits and withdrawals — Necessary for the performance of the contract, and for compliance with AML obligations.
• Fraud detection and prevention — Legitimate interest of q98gam in protecting the platform, its players, and the integrity of the gaming environment from fraudulent or abusive activity.
• Responsible gaming compliance — Legal obligation to monitor gambling behaviour and to enforce responsible gaming tools including deposit limits and self-exclusion.
• Customer support delivery — Necessary for the performance of the contract and to respond to player enquiries and complaints.
• Platform improvement and analytics — Legitimate interest of q98gam in understanding how the platform is used in order to improve performance, reliability, and the player experience.
• Marketing communications — Based on your explicit consent, where you have opted in to receive promotional communications from q98gam. You may withdraw consent at any time via your account settings or by contacting support.

6 Data Sharing & Disclosure

q98gam does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share personal data with the following categories of recipient in the circumstances described:

• Payment processing providers — JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT network processors receive the minimum data necessary to execute deposit and withdrawal transactions.
• KYC and identity verification services — Third-party identity verification providers receive document data submitted during KYC processes, under binding data processing agreements that prohibit use of the data for any purpose other than verification.
• Game software providers — Certified game providers whose titles appear on the q98gam platform may receive Technical Data and gaming activity data for the purpose of game delivery and RNG certification. No Identity Data is shared with game providers.
• Regulatory and licensing authorities — q98gam is obligated to report certain information to its licensing authority and to law enforcement agencies in cases involving suspected money laundering, fraud, or other criminal activity. Such disclosures are made only as legally required.
• Legal and professional advisers — Where necessary for the purposes of legal advice, litigation, or regulatory proceedings, personal data may be shared with legal counsel, auditors, or other professional advisers, subject to professional confidentiality obligations.
• Platform security and fraud prevention services — Technical Data, including IP addresses and device identifiers, may be shared with security service providers for the purpose of fraud detection and DDoS protection.

All third parties with whom q98gam shares personal data are contractually required to process that data in accordance with applicable data protection standards and solely for the purposes for which it was shared. q98gam does not permit third-party service providers to use your data for their own marketing or commercial purposes.

7 Cookies & Tracking Technologies

q98gam uses cookies and similar browser-based tracking technologies to operate the platform, maintain login sessions, and improve the player experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences — such as language settings, preferred stake levels, and display configurations — so that the q98gam platform presents consistently on return visits.
• Analytics cookies: q98gam uses first-party analytics tools to understand aggregated player behaviour on the platform, including which sections are most used and where performance bottlenecks occur. These cookies do not identify you individually.
• Security cookies: Used by q98gam's fraud detection system to identify unusual login patterns, bot traffic, and potential account compromise. These cookies are essential to protecting your account security.

q98gam does not use third-party advertising or retargeting cookies. Your session data is not shared with advertising networks. You may adjust cookie preferences via your browser settings; however, disabling strictly necessary cookies will prevent you from using the q98gam platform.

8 Data Retention

q98gam retains personal data for as long as is necessary for the purpose for which it was collected, subject to the following framework:

• Active account data: Identity Data, Contact Data, Financial Data, and Gaming Activity Data are retained for the duration of the active Account relationship.
• Post-closure retention: Following account closure — whether voluntary or at q98gam's initiative — personal data is retained for a minimum of five years to comply with AML obligations under the applicable gaming license framework. This period may be extended where required by a regulatory investigation or legal proceedings.
• KYC documentation: Identity documents submitted for verification purposes are retained for a minimum of five years post-account-closure to meet regulatory record-keeping requirements.
• Communications Data: Live chat transcripts and support correspondence are retained for up to three years from the date of the interaction, or for the duration of any dispute resolution process if longer.
• Technical Data: Server logs and access records are retained for up to 12 months from collection, unless a specific security investigation requires extended retention.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9 Security Measures

q98gam maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and q98gam servers.
• AES-256 encryption for all personal and financial data stored on q98gam infrastructure.
• Multi-factor authentication requirements for all q98gam administrative access to player data systems.
• Real-time intrusion detection and prevention systems monitoring all network traffic to q98gam infrastructure.
• Strict role-based access controls ensuring that q98gam staff can only access personal data to the extent necessary for their specific job function.
• Regular third-party penetration testing of the q98gam platform and infrastructure.
• Segregated player fund accounts, ensuring that player balances are held separately from operational funds and cannot be accessed in the event of company insolvency.

10 Your Data Rights

As a q98gam player, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting the q98gam support team via live chat:

q98gam will not charge a fee for the exercise of any data right unless the request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply. q98gam may need to verify your identity before processing any data rights request to prevent unauthorised disclosure.

11 Minors & Age Policy

The q98gam platform is strictly restricted to individuals aged 21 years and above. q98gam does not knowingly collect or process personal data from individuals under the age of 21. The collection of data from underage individuals is a direct violation of q98gam's licensing obligations and these Terms & Conditions.

Where q98gam identifies, through KYC verification or other means, that an Account was registered by or on behalf of an individual under the age of 21, the Account will be immediately and permanently suspended. Any Real Funds held in that Account will be returned to the deposit source. All associated gaming activity data will be retained solely for the purpose of regulatory reporting and will not be used for any other purpose.

12 International Data Transfers

q98gam operates under an international gaming license, and certain data processing activities — including KYC verification services, platform security monitoring, and game delivery infrastructure — may involve the transfer of personal data to third-party processors located outside Pakistan. Such transfers are made only where:

• The recipient country or organisation provides an adequate level of data protection as assessed by the applicable licensing jurisdiction.
• q98gam has entered into binding contractual clauses with the recipient requiring them to protect your data to a standard no less protective than the obligations imposed on q98gam under its licensing framework.
• The transfer is necessary for the performance of the contract between you and q98gam — for example, processing a deposit via a payment provider that operates internationally.

q98gam does not transfer personal data to parties in jurisdictions that do not provide adequate data protection safeguards without the contractual protections described above.

13 Third-Party Links & Services

The q98gam platform does not contain links to external third-party websites or services for commercial or advertising purposes. Where links to third-party services are provided for legitimate purposes — such as responsible gaming support organisations — q98gam has no control over the privacy practices of those external sites and accepts no responsibility for the way they collect or handle personal data.

Game software displayed on the q98gam platform is delivered by certified third-party game providers. These providers operate under their own privacy and data protection frameworks in relation to game software delivery. q98gam's contracts with game providers prohibit them from collecting any Identity Data or Contact Data from q98gam players. Only anonymised technical data necessary for game delivery is transmitted to game provider infrastructure.

14 Changes to This Privacy Policy

q98gam reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they affect the categories of data collected, the purposes for which data is used, or your rights under this Policy — q98gam will provide notice via account notification or to the registered email address at least 14 days before the changes take effect.

Minor corrections, clarifications, or updates that do not alter the substance of how your data is processed may be published without prior individual notification. The "Last Updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically to remain informed of how q98gam protects your data.

Continued use of the q98gam platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way q98gam processes your personal data, please contact the q98gam Data Protection team via the 24/7 live chat support facility. The support team will acknowledge your enquiry and ensure it is directed to the appropriate team member.

If you are not satisfied with q98gam's response to a data protection enquiry, you have the right to escalate the matter through the formal complaints process described in the q98gam Terms & Conditions, Section 14. q98gam will provide a formal written response to escalated data protection complaints within 15 working days.