q689 Privacy Policy — How We Handle Your Data

q689 operates as an internationally licensed online gaming platform serving users across Pakistan, including major cities such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi. As a licensed operator, q689 is subject to data protection obligations imposed by its regulatory framework, and we take those obligations seriously.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by q689. Please read this document carefully. It explains your rights, our obligations, and the standards we hold ourselves to when handling your information.

The q689 Platform includes our website at q689.net, our mobile-optimised web experience, and all related services including sports betting, live casino, slot games, crash games, and customer support channels. References to the "Platform" throughout this document cover all of the above.

If you have questions about how your data is handled that are not answered here, please contact our support team at [email protected] at any time.

q689 collects personal data in a number of categories. The table below summarises the types of data we collect, together with examples of the specific data points within each category:

q689 does not collect any special category data (such as medical data, biometric data, or religious beliefs) unless specifically required by our regulatory obligations and with your explicit consent where required.

q689 collects personal data through the following channels:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your profile settings.
• Automated technologies: Technical and usage data collected automatically when you access the q689 Platform, including via cookies, server logs, and similar tracking technologies. See Section 8 for full details on cookies.
• Payment processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK, our payment processing partners may share transaction reference data with q689 to confirm payment status and for fraud prevention purposes.
• KYC and identity verification providers: Where q689 uses a third-party identity verification service to validate your CNIC or other documents, that provider will share verification results (pass/fail and identity data extracted from your documents) with q689.
• Fraud prevention and regulatory databases: q689 may receive data from anti-fraud services, self-exclusion registries, and regulatory watchlists as part of its compliance obligations.

q689 does not purchase personal data from data brokers or third-party marketing list providers. All data we hold has been collected through the channels described above.

q689 uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your account in good standing on the q689 Platform.
• Service delivery: To provide you with access to cricket betting, PSL markets, live casino, slot games, crash games, and all other products available on the q689 Platform.
• Payment processing: To process PKR deposits and withdrawals via your chosen payment method, and to maintain accurate financial records of all transactions on your account.
• Regulatory compliance: To fulfil our obligations under our international gaming licence, including KYC verification, anti-money laundering (AML) checks, responsible gaming monitoring, and reporting to regulatory bodies where required.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, multiple account abuse, bonus abuse, and any other form of platform manipulation that could harm q689 or other users.
• Responsible gaming: To monitor betting and gaming patterns that may indicate problem gambling behaviour, to enforce deposit and loss limits you have set, and to action self-exclusion requests promptly.
• Customer support: To respond to your queries, complaints, and requests submitted via live chat, email, or support ticket.
• Marketing communications: Where you have given your consent, to send you information about q689 promotions, bonuses, and new features. You may withdraw marketing consent at any time via your account settings or by contacting support.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the design, performance, and content of the q689 Platform.

q689 processes your personal data on the following legal bases, depending on the purpose of the processing:

• Contractual necessity: Processing required to create and manage your account, execute transactions, and deliver the gaming and betting services you have requested — this processing is necessary to perform our contract with you.
• Legal obligation: Processing required to comply with q689's regulatory obligations under its gaming licence, including KYC, AML, responsible gaming reporting, and record-keeping requirements imposed by our licensing authority.
• Legitimate interests: Processing undertaken for fraud prevention, platform security, product improvement, and responsible gaming monitoring — where our legitimate interests in operating a safe, fair, and compliant platform do not override your rights and interests.
• Consent: Processing for marketing communications and optional analytics features — where consent is the legal basis, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where q689 relies on legitimate interests as a legal basis, we have assessed that those interests are not overridden by your data protection rights, taking into account the reasonable expectations of users of a licensed gaming platform and the safeguards q689 has in place.

q689 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for each purpose:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive the minimum data required to process your transaction. These providers operate under their own privacy policies and are bound by their own regulatory obligations.
• Identity verification providers: Third-party KYC service providers who verify your identity documents on our behalf. These providers act as data processors and may only use your data for verification purposes.
• Fraud prevention and AML services: We may share data with anti-fraud databases and AML screening services to fulfil our licensing obligations and protect users from financial crime.
• Regulatory and law enforcement authorities: Where required by law or by the terms of our gaming licence, q689 will disclose user data to relevant regulatory bodies, law enforcement agencies, or courts of competent jurisdiction. We will notify you of any such disclosure where legally permitted to do so.
• Technology and infrastructure providers: Cloud hosting, customer support platforms, and analytics services used in the operation of the q689 Platform may have limited access to certain data as part of their service delivery. All such providers are contractually bound to process data only on q689's instructions and to maintain appropriate security standards.
• Business transfers: In the event of a merger, acquisition, or sale of q689's business assets, user data may form part of the transferred assets. In such circumstances, q689 will notify affected users prior to their data being transferred to a new entity and will ensure the receiving entity is bound by equivalent data protection obligations.

q689 retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by our regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, q689 will securely delete or anonymise your personal data. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

q689 uses cookies and similar technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the q689 website. The categories of cookies we use are as follows:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core features such as account login session management, security token validation, and load balancing. These cookies cannot be disabled without breaking the Platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — so you do not have to reset them on every visit.
• Analytical cookies: These cookies help us understand how users interact with the q689 Platform — which pages are visited most, where users encounter errors, and how session flows can be improved. The data collected is aggregated and does not identify individual users.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and account takeover attempts.

You can control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will prevent you from logging in to your q689 account. For all other cookie categories, you may opt out without affecting your ability to use the Platform's core features.

• Right of access: You have the right to request a copy of the personal data q689 holds about you, along with information about how that data is being used. We will respond to access requests within 30 days.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data fields can be updated directly via your account profile; others may require verification before amendment.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. This right is subject to our regulatory obligations to retain certain data (see Section 7). We cannot delete data we are legally required to retain.
• Right to restriction: You have the right to request that q689 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate interests.
• Right to data portability: Where processing is based on your consent or on a contract with you, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, and to withdraw consent for processing based on consent (including marketing communications) at any time.
• Right not to be subject to automated decisions: You have the right not to be subject to decisions that have a significant legal or similarly significant effect on you that are made solely by automated means, without human review. Where q689 uses automated processes in risk assessment or responsible gaming monitoring, human oversight is maintained for decisions that materially affect your account.

q689 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the q689 Platform, ensuring that login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage for sensitive personal data fields, including financial details and identity document data, using industry-standard encryption at rest.
• Access controls and role-based permissions ensuring that q689 staff can only access personal data to the extent required for their specific job function. Access to sensitive data is logged and audited.
• Multi-factor authentication options available to users to protect account access, and mandatory for q689 staff accessing internal systems containing personal data.
• Regular security assessments including penetration testing and vulnerability scanning of the q689 Platform infrastructure.
• Data breach response procedures: In the event of a personal data breach that poses a risk to your rights, q689 will notify affected users and relevant regulatory authorities within the timeframes required by our licensing obligations.

While q689 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You also have a role to play: please use a strong, unique password for your q689 account, do not share your login credentials with anyone, and contact support immediately if you suspect unauthorised activity on your account.

If you are a parent or guardian and believe that a person under your care may have accessed the q689 Platform or provided personal information to us, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.

q689 strongly recommends that parents and guardians in Pakistani households make use of available device-level parental controls and internet filtering tools to prevent minors from accessing online gaming platforms. Responsible access to online gaming content is a shared responsibility between platform operators and families.

q689 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform features. When we make material changes, we will update the "Last Updated" date at the top of this document and, where appropriate, notify registered users via email or an on-Platform notification.

We encourage you to review this Privacy Policy periodically. Your continued use of the q689 Platform after any update constitutes your acknowledgment of the revised policy. If you disagree with any changes to this Privacy Policy, you should cease using the Platform and may request voluntary account closure in accordance with our Terms & Conditions.

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data by q689, please reach out to our support team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the q689 Platform
• Priority Support Hours: 9:00 AM – 2:00 AM PKT

When submitting a data rights request, please include your registered account username, the specific right you wish to exercise, and any relevant details that will help us locate and process your request efficiently. q689 will acknowledge all data rights requests within five (5) business days and will respond in full within thirty (30) calendar days of receipt.