Table of Contents
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. Purposes of Processing
- 6. Legal Basis for Processing
- 7. Data Sharing & Disclosure
- 8. International Data Transfers
- 9. Data Retention
- 10. Security Measures
- 11. Cookies & Tracking
- 12. Your Rights
- 13. Minors & Age Verification
- 14. Third-Party Links
- 15. Changes to This Policy
- 16. Contact & Data Requests
q889 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users ("you", "your", "User") who access our online sports betting and casino platform at https://q889.cam. This Privacy Policy ("Policy") explains our data practices in plain, professional English and is intended for Pakistani users and any other individuals who interact with q889 from around the world.
This Policy applies to all personal data processed by q889 in connection with the operation of the Platform, including data collected during account registration, identity verification (KYC), deposits and withdrawals, betting and gaming activity, customer support interactions and marketing communications.
Pakistani Users: Pakistan currently does not have a comprehensive data protection law directly equivalent to international frameworks such as the EU GDPR. However, q889 applies data protection standards consistent with international best practice regardless of your location. This Policy does not constitute legal advice. If you have concerns about your data rights under Pakistani law, we recommend consulting a qualified legal professional.
For the purposes of this Policy, the following definitions apply:
- "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, directly or indirectly (e.g., name, email address, CNIC number, IP address, device identifier).
- "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer or deletion.
- "Data Controller" — q889, which determines the purposes and means of processing your personal data.
- "Data Processor" — a third party that processes personal data on behalf of q889, under written instruction and subject to contractual data protection obligations.
- "KYC" — Know Your Customer identity verification procedures, including the collection and verification of identity documents and proof of address.
- "Cookies" — small text files stored on your device by the Platform to enable functionality, analytics and personalisation.
- "Special Category Data" — sensitive personal data including health information, criminal records or financial vulnerability indicators, processed only where legally required (e.g., responsible gambling assessments).
q889 collects personal data across several categories depending on how you interact with the Platform. The table below summarises the types of data we process:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC / passport number, nationality | Registration & KYC verification |
| Contact Data | Email address, phone number, city of residence (e.g., Karachi, Lahore, Islamabad) | Registration & support interactions |
| Financial Data | PKR deposit/withdrawal amounts, payment method references (e.g., mobile wallet identifier, bank account reference), transaction history | Deposits, withdrawals & KYC |
| Account Activity Data | Bets placed, games played, session duration, win/loss history, bonus claims, VIP tier status | Ongoing platform use |
| Technical Data | IP address, browser type, device type, operating system, time zone, cookie identifiers | Each platform visit |
| Document Data | Copies of government-issued ID, proof of address, source of funds declarations | KYC & AML compliance |
| Communication Data | Support chat transcripts, email correspondence, feedback submissions | Customer support interactions |
| Responsible Gambling Data | Self-exclusion status, deposit/loss/time limits set, affordability check responses | Responsible gambling tool usage |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or biometric data beyond what is strictly necessary for identity verification (where a photograph on an ID document is unavoidably processed).
q889 collects personal data through the following means:
- Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support, or respond to promotional offers.
- Automatically — when you visit the Platform, our servers and analytics tools automatically record technical data including your IP address, browser information and session activity via cookies and similar technologies.
- From third parties — identity verification providers, fraud screening services, payment processors and AML compliance tools may supply data about you as part of our due-diligence obligations. Geolocation data derived from your IP address is used for compliance purposes.
- From payment references — when you deposit using familiar Pakistani payment channels such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah, we receive a transaction reference and confirmation identifier. We do not receive your full account credentials from these providers. These providers do not endorse or support online gambling.
q889 processes your personal data for the following purposes, each tied to a lawful basis described in Clause 6:
- Account management — creating, maintaining and securing your q889 account and enabling you to access Platform services.
- Identity & age verification — verifying that you meet the minimum age requirement (18+, or higher where required by the applicable license jurisdiction) and that your identity matches your account details.
- Transaction processing — processing PKR deposits and withdrawals securely and accurately, including the use of payment reference data from mobile wallets and bank transfers.
- AML & fraud prevention — detecting and preventing money laundering, fraudulent activity, bonus abuse and unauthorised account access.
- Responsible gambling obligations — monitoring gambling patterns, administering self-exclusion requests, applying deposit and loss limits, and intervening where signs of problematic gambling behaviour are detected.
- Customer support — responding to your queries, resolving complaints and maintaining records of support interactions.
- Legal compliance — complying with regulatory, licensing, tax and law enforcement obligations applicable to our operations.
- Platform improvement — analysing aggregated usage data to improve performance, design and user experience across devices used by Pakistani players.
- Marketing communications — where you have given consent, sending promotional offers, bonus notifications and platform updates. You may opt out at any time.
q889 relies on the following legal bases to process your personal data:
- Contract performance — processing necessary to provide the services you have requested by registering and using q889 (identity data, financial data, account activity data).
- Legal obligation — processing required to comply with AML regulations, licensing conditions, tax reporting requirements and court orders (KYC documents, transaction records, responsible gambling data).
- Legitimate interests — processing necessary for fraud prevention, security monitoring, platform analytics and improvement, where our legitimate interests do not override your fundamental rights.
- Consent — marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
q889 does not sell your personal data to third parties. We share your data only in the following circumstances:
- Service providers (Data Processors) — KYC and identity verification providers, payment processors, fraud detection services, IT infrastructure providers, customer support platforms and email delivery services. All processors operate under written data processing agreements.
- Regulatory and licensing authorities — where required by our operating license, we may be obliged to share account and transaction data with the relevant gaming regulator or licensing body.
- Law enforcement and legal proceedings — where we receive a valid legal order, court warrant or regulatory notice requiring disclosure of user data. We will notify you of such requests where permitted by law.
- AML and financial intelligence bodies — where transaction activity triggers AML reporting obligations, we may be required to file reports with relevant financial intelligence authorities without notifying the account holder ("tipping off" restrictions apply).
- Business transfers — in the event of a merger, acquisition or sale of q889 assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.
We do not share your personal data with advertisers, data brokers or unaffiliated marketing companies. Any promotional communications from q889 are sent exclusively by us, not by third-party marketers using your data.
As an internationally operated platform, q889 may store and process your personal data on servers located outside Pakistan. Where data is transferred to countries that may not provide a level of data protection equivalent to internationally recognised standards, q889 implements appropriate safeguards including:
- Standard contractual clauses or equivalent data transfer mechanisms with all receiving entities
- Contractual obligations on service providers to implement appropriate technical and organisational security measures
- Regular review of data processor compliance with agreed protection standards
By using q889, you acknowledge that your data may be processed internationally and consent to such transfers subject to the safeguards described above.
q889 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligation. Indicative retention periods are as follows:
| Data Category | Indicative Retention Period | Basis |
|---|---|---|
| Account & identity data | Duration of account + 5 years post-closure | AML / licensing obligation |
| Transaction records | Minimum 5 years from transaction date | AML / financial regulation |
| KYC documents | Minimum 5 years post-account closure | Regulatory requirement |
| Support communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing consent records | Until consent withdrawn + 3 years | Consent & legal compliance |
| Technical / log data | Up to 13 months | Security & fraud prevention |
After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual.
q889 implements technical and organisational measures designed to protect your personal data against unauthorised access, loss, destruction, alteration or disclosure. These measures include:
- SSL/TLS encryption for all data transmitted between your device and the Platform
- Encryption of personal data at rest, particularly financial and identity data
- Two-factor authentication (2FA) available for all user accounts
- Role-based access controls limiting staff access to personal data on a need-to-know basis
- Regular security audits and penetration testing of Platform infrastructure
- Intrusion detection and monitoring systems operating on a continuous basis
- Staff training on data protection obligations and incident response procedures
No data transmission over the internet is completely secure. While we apply industry-standard protections, we cannot guarantee the absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials. If you suspect unauthorised access to your account, contact support immediately at [email protected].
q889 uses cookies and similar tracking technologies to operate the Platform, analyse usage patterns and, where consent is given, deliver relevant content. Cookie categories used by q889 are described below:
- Strictly Necessary Cookies — required for the Platform to function (e.g., session authentication, bet-slip state, currency preference). These cannot be disabled without impairing Platform functionality.
- Performance & Analytics Cookies — collect anonymised data about how Users navigate the Platform to help us improve page performance and user experience. Activated only with your consent.
- Functional Cookies — remember your preferences (e.g., language, time zone, PKT/UTC display) to personalise your experience. Activated only with your consent.
- Marketing Cookies — used to deliver relevant promotional content. q889 does not use third-party advertising networks that track you across unrelated websites. Activated only with your explicit consent.
You can manage your cookie preferences at any time via your browser settings. Disabling certain cookies may affect the functionality of specific Platform features.
Subject to applicable law and any overriding legal or regulatory obligation, you have the following rights in relation to your personal data held by q889:
- Right of Access — request a copy of the personal data we hold about you and information about how it is being processed.
- Right to Rectification — request correction of inaccurate or incomplete personal data.
- Right to Erasure — request deletion of your personal data where it is no longer necessary for the purpose collected, subject to overriding legal obligations (e.g., AML retention requirements).
- Right to Restriction — request that we restrict processing of your data in certain circumstances (e.g., while you dispute the accuracy of data we hold).
- Right to Portability — receive a structured, machine-readable copy of the data you provided to us for transfer to another service, where technically feasible.
- Right to Object — object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease immediately.
- Right to Withdraw Consent — withdraw consent for any processing based on consent (e.g., marketing emails) at any time, without affecting prior lawful processing.
To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and aim to respond fully within 30 days. Identity verification will be required before we fulfil any access or erasure request.
q889 is strictly for adults aged 18 and above, or the higher minimum age required by the operator or applicable license jurisdiction. We do not knowingly collect personal data from individuals below the applicable minimum age.
All accounts are subject to age verification as part of the KYC process. Where an account is found to belong to a minor, it will be closed immediately, all bets and wagers will be voided, and any deposits will be returned to the originating payment method. We urge parents and guardians to install parental control software if minors have access to devices used for internet browsing.
If you believe a minor has registered an account on q889, please contact us immediately at [email protected] so that the account can be investigated and closed without delay.
The q889 Platform does not contain links to third-party websites or services other than as referenced in navigation and footer links within this site. However, the payment processing journey may redirect you briefly to a payment provider's interface. In such cases, the payment provider's own privacy policy governs how they handle your data during that interaction. q889 is not responsible for the data practices of third-party payment processors beyond the contractual obligations we impose on them as Data Processors.
References to payment methods familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided for user familiarity only. These providers do not endorse gambling activity on q889.
q889 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements or Platform functionality. Where changes are material, we will notify you by email or in-platform notification at least 14 days before the revised Policy takes effect.
The date at the top of this Policy indicates when it was last reviewed. Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. It is your responsibility to review this page periodically. The most current version is always available at https://q889.cam/privacy-policy.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a data protection concern, please contact us using the details below. All communications must be submitted in English and will be treated as confidential.
Data Enquiries & Rights Requests:
Subject Line Format:
"Data Rights Request – [Your Registered Email Address]"
The email address above is provided as plain text for contact purposes only and is not a clickable link. Please copy it manually into your email client. Do not send sensitive identity documents or financial data via unencrypted email. We will provide a secure upload channel upon receiving your initial request.
Your Privacy Rights at a Glance
A quick-reference summary of the rights you hold in relation to your personal data on q889 — exercisable by contacting support at any time.
Right of Access
Request a full copy of the personal data we hold about you, along with details of how it is being used and who it has been shared with.
Right to Rectification
Request correction of any inaccurate or outdated personal data in your q889 profile — such as a misspelled name or incorrect contact detail.
Right to Erasure
Request deletion of your personal data where it is no longer necessary, subject to overriding AML and regulatory retention requirements.
Right to Restriction
Ask us to pause processing of your data in specific circumstances — for example, while you dispute the accuracy of information we hold.
Right to Object
Object to processing based on our legitimate interests, or opt out of direct marketing communications at any time with immediate effect.
Withdraw Consent
Withdraw any consent you have given — such as marketing email consent — at any time without affecting the lawfulness of prior processing.
How q889 Protects Your Data
Six core practices that underpin our commitment to responsible data handling for Pakistani users and all platform members worldwide.
SSL Encryption End-to-End
All data transmitted between your browser or mobile device and q889 is encrypted via SSL/TLS. This protects your login credentials, payment references and personal details from interception in transit.
No Data Selling — Ever
Your personal data is never sold, rented or traded to advertisers, data brokers or third-party marketers. We share data only with verified service providers under strict contractual obligations.
Minimal Staff Access
Access to your personal data within q889 is restricted to staff with a direct need to view it for their job function. Role-based controls and audit logs ensure accountability at every level.
Clear Retention Schedules
We retain your data for defined periods tied to legal obligations and legitimate purposes only. Once those periods expire, data is securely deleted or anonymised — not held indefinitely.
Easy Rights Exercising
You can exercise your data rights — access, correction, erasure, objection — by emailing [email protected]. We acknowledge requests within 5 business days and respond fully within 30 days.
Responsible Gambling Data Handled with Care
Data from self-exclusion requests, deposit limits and affordability checks is treated with the highest sensitivity and used only to protect your wellbeing — never for marketing profiling.
We Handle Your Data Responsibly.
Your privacy matters to us as much as your betting experience. If you have read this Policy and have questions about your data, contact our support team or visit the FAQ for quick answers. When you are ready to explore the platform, head home.
18+ only. Online gambling may be restricted in your jurisdiction. Users are responsible for compliance with local laws.