q798 Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which q798 ("q798", "we", "us", or "our") collects, processes, uses, stores, and discloses personal information obtained from individuals ("you", "your", or "the player") who access or use the q798 online gaming platform at q798.app, including all associated mobile interfaces, sub-pages, and services offered through the Platform.

By registering an account on q798, by logging into the Platform, or by otherwise making use of any q798 service, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this Policy, you should not use the Platform.

q798 takes its data protection obligations seriously. We apply industry-standard security practices across all systems, limit data collection to what is strictly necessary, and do not monetise personal data in any form. Our approach to privacy is designed with the Pakistani gaming community in mind — where trust, discretion, and security are especially valued.

q798 is an internationally licensed online gaming platform operating under a valid gaming licence issued by its relevant regulatory authority. The Platform is built specifically for the Pakistan market, offering products including cricket betting, PSL season markets, live casino, online slots, poker, and specialty games such as Mahjong Ways.

For the purposes of this Privacy Policy, q798 is the data controller — meaning we determine the purposes and means by which your personal data is processed. Where we engage third-party processors (such as payment providers or KYC verification services), we do so under formal data processing agreements that bind those parties to equivalent data protection standards.

All privacy-related inquiries, data subject requests, and complaints can be directed to our support team, who are available around the clock in English and Urdu. Contact details are provided in Section 15 of this Policy.

q798 collects personal data through several channels: directly from you during registration and account activity, automatically via your use of the Platform, and from third parties such as KYC verification providers and payment processors. The categories of data we may collect include:

• Full legal name as it appears on your national identity documentation.
• Date of birth (used primarily to verify you meet our 21+ age requirement).
• Residential address, including city, province, and postal code within Pakistan.
• Email address and mobile phone number used to create and access your account.
• Username and encrypted password credentials.
• Copies of government-issued identification documents (CNIC, passport) submitted during KYC.

• JazzCash mobile account number or EasyPaisa wallet details (masked, not stored in full).
• HBL, UBL, or Meezan Bank account details used for deposits and withdrawals (partial details only, per payment provider security protocols).
• Raast ID where applicable for instant bank transfers.
• Transaction history, including deposit amounts, withdrawal requests, bonus redemptions, and wager records in PKR.
• Source of funds documentation provided during enhanced due diligence checks.

• IP address, device type, browser version, and operating system at time of login.
• Pages visited, game sessions initiated, markets accessed, and time spent on Platform.
• Betting patterns and game history used for responsible gaming monitoring.
• Session duration data used to trigger responsible gaming alerts where applicable.

• Content of messages sent to q798 support via live chat or email.
• Records of account-related notifications sent to you by q798.
• Feedback, complaints, or dispute records lodged through official q798 channels.

q798 uses personal data collected from you for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below, and we do not process your data beyond what is reasonably necessary for each stated purpose.

Where q798 relies on legitimate interests as a legal basis, we have assessed that those interests are not overridden by your rights and freedoms — particularly in the context of security monitoring and platform fraud prevention, which ultimately protect all players on the Platform.

q798 processes your personal data only where a valid legal basis exists. Depending on the nature of the processing activity, we rely on one or more of the following legal bases:

• Contract Performance — Processing is necessary to provide the services you have requested, including account management, gameplay, and financial transactions.
• Legal Obligation — q798 is subject to regulatory requirements including anti-money laundering (AML) rules, KYC obligations, and responsible gaming mandates. Certain data processing is mandatory under these frameworks.
• Legitimate Interests — q798 processes certain data where it is in our legitimate interest to do so and where this does not prejudice your fundamental rights — for example, fraud detection, platform security, and business analytics performed on anonymised datasets.
• Consent — Where we send you promotional communications or use optional cookies, we will first obtain your explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

q798 does not sell your personal data. We share your data only where it is strictly necessary to deliver the Platform's services, comply with our legal obligations, or protect the security of the Platform and its users. The categories of third parties with whom we may share data are described below:

To facilitate deposits and withdrawals, q798 shares the minimum necessary financial information with payment service providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast. These providers are contractually bound to use your data solely for the purpose of processing your transaction and are prohibited from using it for any secondary purpose.

q798 uses regulated third-party identity verification services to conduct KYC checks as required under our licensing obligations. Identity documents and verification data submitted by you are processed by these partners under strict data processing agreements and are not retained by the partner beyond the period necessary to complete the verification.

Third-party game providers whose products are featured on q798 — including providers of live casino games, slot engines, poker platforms, and Mahjong Ways — may receive anonymised session data to facilitate game delivery and resolve technical disputes. These providers do not receive your name, contact details, or financial data.

q798 may disclose your personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. In such cases, we will disclose only what is legally required and will notify you where permitted to do so.

q798 applies heightened security standards to all financial data. We do not store full card numbers, full bank account numbers, or complete mobile wallet credentials on our servers. Payment data is tokenised at the point of entry, meaning only an encrypted reference token is retained — not the raw account details.

• JazzCash and EasyPaisa wallet numbers are masked after verification — only the last four digits are retained in your transaction record.
• HBL, UBL, and Meezan Bank account details provided for withdrawal are stored in encrypted form and are accessible only by authorised finance team members during the processing of your withdrawal request.
• Raast ID transfers are processed via the State Bank of Pakistan's Raast infrastructure. q798 does not retain Raast ID data beyond the transaction confirmation period.
• Transaction history in PKR is retained for a minimum of five (5) years to meet regulatory record-keeping requirements for licensed gaming platforms.

All financial transactions are conducted over encrypted channels. q798 does not request payment information via live chat, email, or phone. If you receive any communication purporting to be from q798 requesting full financial account details, please report it to our support team immediately as this may indicate a phishing attempt.

q798 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

Once the applicable retention period has elapsed, personal data is securely deleted or anonymised such that it can no longer be associated with any identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

q798 uses cookies and similar technologies to operate and improve the Platform. Cookies are small text files placed on your device when you access q798.app. They help us keep you logged in, remember your preferences, and maintain a secure session.

• Strictly Necessary Cookies — Required for the Platform to function. These include session authentication tokens that keep you logged in during a game session. These cannot be disabled.
• Performance Cookies — Collect anonymised information about how players use the Platform (e.g., most visited pages, error rates) to help us improve load times and user experience. No personally identifiable information is collected.
• Functional Cookies — Remember your preferences such as language settings, preferred game categories, and layout choices. These improve your experience but are not essential to Platform operation.
• Security Cookies — Used to detect and prevent fraudulent or abusive behaviour, including bot activity and brute-force login attempts. These are essential to keeping your account safe.

q798 does not use third-party advertising cookies, behavioural tracking pixels from external ad networks, or social media tracking cookies. You can manage or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will prevent you from accessing certain features of the Platform, including remaining logged in to your account.

q798 implements a layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, and disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers — the same standard used by Pakistan's major commercial banks.
• Passwords stored using industry-standard one-way hashing with salting — q798 staff cannot view your password in plain text under any circumstances.
• Two-factor authentication (2FA) available to all registered players and mandatory for high-value account actions.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity professionals.
• Strict internal access controls — only authorised personnel with a documented business need may access player personal data, and all such access is logged.
• Server infrastructure hosted in ISO 27001-certified data centres with physical security controls, redundant power, and 24/7 monitoring.
• Automated anomaly detection that flags unusual login patterns, IP address changes, and high-velocity financial activity for manual review.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, q798 will notify you without undue delay and will report the breach to the relevant regulatory authority as required by applicable law.

As a data subject, you hold a number of rights in relation to the personal data q798 holds about you. q798 respects and upholds these rights and has put in place procedures to handle requests promptly and transparently.

• Right of Access — You may request a copy of all personal data q798 holds about you. We will provide this in a structured, commonly used format within 30 days of your request.
• Right to Rectification — If any personal data we hold is inaccurate or incomplete, you have the right to request correction. For account details, many fields can be updated directly from your account settings.
• Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. We cannot delete data that we are legally required to retain (e.g., AML transaction records).
• Right to Restriction — In certain circumstances, you may request that we restrict processing of your data — for example, while a dispute about the accuracy of your data is resolved.
• Right to Data Portability — Where processing is based on your consent or a contract, you may request that we provide your personal data in a portable electronic format, or transfer it to another controller where technically feasible.
• Right to Object — You have the right to object to processing based on legitimate interests, including profiling. q798 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent — Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support.

To exercise any of the above rights, please contact our support team with the subject line "Data Rights Request" and include your registered username and a description of your request. We will verify your identity before processing any data rights request and will respond within 30 days. Complex requests may take up to 60 days, in which case we will notify you of the extension.

q798 is strictly an adult gaming platform. Access to the Platform is permitted only to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from any individual under the age of 21, and under no circumstances do we permit minors to register or participate in any gaming activity on q798.

During registration, every applicant is required to declare their date of birth. All accounts are subject to KYC verification, during which age is confirmed against government-issued identity documents including the Pakistani CNIC (which itself requires the holder to be 18 or older) and, where necessary, a valid passport. Any account found to belong to an individual under 21 will be immediately suspended, any funds held will be returned to the source payment method, and all personal data associated with that account will be securely deleted as soon as legally permissible.

q798 operates as an internationally licensed platform. This means that certain data processing activities — particularly those involving KYC verification providers, game content servers, and fraud prevention systems — may involve the transfer of your personal data to servers or processors located outside Pakistan.

Where such transfers occur, q798 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within the Platform's home jurisdiction. Safeguards include contractual clauses in data processing agreements that impose data protection obligations on the recipient party, and — where possible — selection of processors whose data centres are located in jurisdictions that maintain adequate data protection frameworks.

q798 does not transfer your personal data to any party in a country where there is no adequate data protection framework and where no additional contractual safeguards have been put in place. If you have questions about the international transfer safeguards we use, please contact our support team as detailed in Section 15.

q798 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. When material changes are made to this Policy, we will notify registered players via email to the address on file, and by posting a prominent notice on the Platform for a minimum of 30 days following the update.

The "Effective Date" displayed at the top of this Policy will be updated whenever changes are published. We encourage you to review this Policy periodically to remain informed of how we handle your personal data. Your continued use of the Platform following the posting of changes constitutes your acceptance of those changes.

Where a proposed change to this Policy would require new consent — for example, where we wish to use your data for a purpose not previously covered — we will seek that consent from you separately before the change takes effect, and will not apply the new processing to your data unless and until such consent is received.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data q798 holds about you, please contact our Data Privacy team using the details below. Our support team is available 24/7 and handles privacy inquiries in both English and Urdu.

When submitting a data rights request, please include your registered username and a clear description of the request in the subject line of your email or the opening message of your live chat. This helps us verify your identity and route your request to the appropriate team promptly.