q788 Privacy Policy

This Privacy Policy ("Policy") is issued by q788 ("q788", "we", "us", "our") and applies to all personal data collected from individuals ("you", "your", "User") who access or use the q788 website at q788.app and all associated services, including casino games, sports betting, live dealer games, slot games, video poker, account management, and customer support (collectively, the "Services").

By registering for a q788 account or otherwise using the Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should not use the q788 platform.

This Policy should be read in conjunction with q788's Terms & Conditions and Responsible Gaming Policy, both of which are published on the q788 website and are incorporated into this Policy by reference. In the event of any conflict between this Policy and those documents, this Policy shall govern in respect of data protection matters.

q788 reserves the right to update this Policy at any time. Material changes will be communicated to registered users via the platform or by email. Your continued use of the Services following notification of changes constitutes acceptance of the revised Policy.

q788 uses the personal data it collects for the following specific purposes:

• Account management: To create, maintain, and administer your q788 account, verify your identity and age (18+), and facilitate the KYC process required for withdrawal processing;
• Service delivery: To provide access to all q788 Services, process deposits and withdrawals in PKR via JazzCash, Easypaisa, and other supported methods, and resolve disputes;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other prohibited conduct;
• Responsible gaming: To monitor usage patterns for indicators of problem gambling behaviour and, where appropriate, trigger safeguarding interventions in accordance with q788's Responsible Gaming Policy;
• Legal compliance: To comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and any lawful requests from regulatory or law enforcement authorities;
• Communications: To send transactional communications (account statements, deposit/withdrawal confirmations, security alerts) and, where you have consented, promotional communications about q788 offers and new features;
• Platform improvement: To analyse usage data for the purposes of improving platform performance, game selection, user experience, and customer support quality.

q788 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where such processing is necessary for fraud detection or legal compliance and appropriate safeguards are in place.

q788 processes personal data on the following legal bases, depending on the category of data and the specific processing purpose:

• Contractual necessity: Processing required to perform the contract between you and q788, including providing access to casino games and sports betting markets, processing PKR transactions, and managing your q788 account;
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, AML, age verification, and tax reporting requirements;
• Legitimate interests: Processing necessary for q788's legitimate interests, including fraud detection, platform security, responsible gaming monitoring, and business analytics — provided these interests are not overridden by your own privacy rights;
• Consent: Processing based on your explicit consent, principally in the context of optional marketing communications. Where consent is the legal basis, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

q788 does not sell, rent, or otherwise disclose your personal data to third parties for their own independent commercial purposes. q788 shares personal data with third parties only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard network processors, and other supported payment providers — to process deposits, withdrawals, and refunds in PKR;
• Game providers: Third-party casino game studios providing slots, live dealer, table game, and video poker content available in the q788 lobby — to the extent necessary to enable gameplay and resolve game disputes;
• Identity verification services: Third-party KYC and identity verification providers used to authenticate user identity documents and satisfy age verification requirements;
• Regulatory and law enforcement authorities: Where q788 is required by law, court order, or regulatory direction to disclose personal data. q788 will, where legally permissible, notify affected users of such disclosures;
• Professional advisers: Lawyers, auditors, and other professional advisers who are bound by duties of confidentiality;
• Business transfers: In connection with any merger, acquisition, sale of assets, or restructuring involving q788, where personal data may be transferred as a business asset, subject to equivalent privacy protections.

All third parties with whom q788 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for purposes beyond those for which it was shared.

q788 uses cookies and similar tracking technologies (together, "Cookies") to operate and improve the platform. Cookies are small text files stored on your device by your browser. q788 uses the following categories of Cookies:

• Strictly necessary Cookies: Essential for the platform to function — these include session authentication Cookies that keep you logged in to your q788 account and security Cookies that protect against CSRF attacks. These cannot be disabled;
• Functional Cookies: Remember your preferences such as language settings, preferred game lobby view, and responsible gaming settings;
• Analytics Cookies: Used to understand how users interact with the q788 platform — which pages are visited most, where users exit, and how features are used — to inform platform improvements;
• Fraud prevention Cookies: Used as part of q788's fraud detection and account security systems to identify unusual or suspicious session behaviour.

You can manage Cookie preferences through your browser settings. Please note that disabling certain Cookies may impair the functionality of the q788 platform, including the ability to remain logged in to your account.

q788 implements technical and organisational measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and q788's servers;
• Encryption at rest for sensitive personal and financial data stored in q788's systems;
• Access controls limiting internal access to personal data to authorised personnel with a documented business need;
• Two-factor authentication options for user accounts to protect against unauthorised login;
• Regular security assessments, vulnerability testing, and patch management;
• Incident response procedures governing detection, containment, and notification of data security incidents.

Despite these measures, no system is completely secure. q788 cannot guarantee the absolute security of data transmitted over the internet. You are responsible for maintaining the security of your q788 account credentials and for notifying us promptly if you suspect any unauthorised access to your account.

q788 retains personal data for as long as necessary to fulfil the purposes described in this Policy, or for as long as required by applicable legal, regulatory, or audit obligations, whichever is the longer.

In practice, this means:

• Account data is retained for the duration of your active q788 account and for a minimum period after account closure as required by applicable AML and regulatory obligations;
• Transaction records, including deposit and withdrawal histories, are retained for the period required under applicable financial record-keeping regulations;
• KYC documentation is retained for the period required under applicable AML regulations from the date of account closure;
• Customer support communications are retained for a reasonable period after resolution of the relevant query or complaint to support quality assurance and dispute resolution;
• Marketing preferences and consent records are retained for as long as necessary to demonstrate compliance with applicable consent requirements.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be attributed to an identifiable individual.

Subject to applicable law, you have the following rights in relation to the personal data q788 holds about you:

• Right of access: To request a copy of the personal data q788 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data in certain circumstances — subject to q788's legal and regulatory data retention obligations which may require retention for defined periods regardless of your request;
• Right to restrict processing: To request that q788 temporarily restrict the processing of your data while a dispute about its accuracy or use is resolved;
• Right to data portability: To receive a copy of personal data you have provided to q788 in a structured, commonly used machine-readable format;
• Right to object: To object to processing based on legitimate interests, including direct marketing processing;
• Right to withdraw consent: Where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior consent-based processing.

To exercise any of the above rights, please contact q788's customer support team via live chat or the contact email address published on the q788 website. q788 will respond to verifiable requests within 30 days. Identity verification may be required before q788 can fulfil a data rights request.

The q788 platform is strictly intended for adults aged 18 and above. q788 does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory part of the q788 account registration and KYC process.

If q788 becomes aware that it has collected personal data from a person under the age of 18, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the q788 platform or that q788 has inadvertently collected data from a person under 18, please notify q788 immediately via customer support.

q788 supports the use of parental controls and internet filtering tools to prevent minors from accessing gambling websites. Resources for parental control software are referenced in q788's Responsible Gaming Policy.

q788 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the Services we offer. Where changes are material, q788 will provide notice via the q788 platform or by email to registered users at least 14 days before the changes take effect.

The effective date at the top of this Policy reflects when it was last reviewed and updated. We encourage you to review this Policy periodically to stay informed about how q788 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or q788's data practices, please contact our customer support team via the live chat facility available within your q788 account. For formal data protection enquiries and rights requests, you may contact q788 via the email address published in plain text in the footer of the q788 website.

q788 takes all privacy enquiries seriously. We aim to acknowledge all contacts within 5 business days and to provide a substantive response within 30 days. If you are not satisfied with q788's response to a data protection enquiry, you may have the right to escalate the matter to an applicable data protection authority in your jurisdiction.