Privacy Policy — How q999 Collects, Uses and Protects Your Data

q999 is an online betting and gaming platform operated at https://q999.cash, offering sports betting, cricket and PSL wagering, esports betting, jackpot slots, ludo games, fishing games, and virtual sports to registered users in Pakistan. When this Privacy Policy refers to "q999", "we", "us", or "our", it means the operating entity behind the q999 platform. When it refers to "you" or "your", it means any person who registers an account on, accesses, or otherwise uses the q999 platform.

q999 acts as the data controller in respect of all personal information collected through the platform. This means we are responsible for deciding how and why your personal data is used, and we are accountable for keeping it secure. If you have any questions about our role as data controller or about anything in this policy, you can contact us at support@q999.cash at any time.

q999 collects different categories of personal information depending on how you interact with the platform. Below is a clear breakdown of what we collect and why each category is necessary.

q999 collects your personal data through the following channels:

• Direct registration: When you create a q999 account, you provide your name, mobile number, and date of birth directly. Any additional verification details (such as a CNIC copy) are collected only when specifically required for identity or payment verification purposes.
• Platform activity: Your betting history, game sessions, deposit and withdrawal records, and in-platform behaviour are automatically recorded as you use q999. This is necessary to operate your account and settle bets correctly.
• Payment providers: When you deposit or withdraw via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, q999 receives confirmation data from the payment provider. Full payment credentials are processed exclusively by the payment provider and are not transmitted to q999's servers.
• Device and browser: Standard technical data (IP address, device model, browser version, session timestamps) is collected automatically when you access the q999 platform. This is used for security, fraud detection, and platform optimisation.
• Customer support interactions: Any messages, emails, or chat conversations you have with the q999 support team are recorded. This allows us to maintain consistent support and resolve disputes accurately.
• Cookies and tracking technologies: q999 uses cookies and similar technologies on its website. Full details are provided in Section 9 of this policy.

q999 uses your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

• Account management: To create, maintain, and administer your q999 account, including login authentication, balance management, and account settings.
• Payment processing: To process deposits from and withdrawals to your registered payment methods. Your financial data is used exclusively for this purpose and for confirming transaction legitimacy.
• Identity verification and age checks: To confirm that you are at least 18 years of age and that you are who you say you are. q999 is legally and ethically obligated to prevent access by minors and to prevent identity fraud.
• Fraud prevention and security: To detect, investigate, and prevent suspicious activity, including multiple account creation, payment fraud, and exploitation of promotional mechanics.
• Responsible gaming compliance: To monitor betting patterns that may indicate problematic gambling behaviour, to process self-exclusion and limit requests, and to enforce account restrictions where required for player safety.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Platform improvement: Aggregated, anonymised usage data helps q999 understand how the platform is being used so we can improve performance, design, and content relevance for Pakistani users.
• Legal and regulatory compliance: To maintain records required by applicable laws and to respond to lawful requests from regulatory or law enforcement authorities.
• Marketing communications (opt-in only): Where you have explicitly opted in, q999 may send you promotional communications about new features, offers, and events on the platform. You can opt out at any time by contacting support.

Every time q999 processes your personal data, there is a lawful basis for doing so. The main legal bases we rely on are:

• Contract performance: Processing necessary to deliver the services you have registered for — operating your account, settling bets, processing payments. Without this processing, q999 cannot provide you with its services.
• Legal obligation: Processing required to comply with applicable laws — maintaining transaction records, responding to lawful authority requests, enforcing age restrictions.
• Legitimate interests: Processing for purposes that are reasonably expected by users and that do not override your privacy rights — fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics for platform improvement.
• Consent: Where we rely on your consent — primarily for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of marketing consent does not affect your ability to use q999.

q999 does not sell your personal data to any third party, under any circumstances. We share your data only in the limited situations described below, and only to the minimum extent necessary for the stated purpose.

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing banks, and Visa/Mastercard network processors receive the payment-related data necessary to execute transactions. All payment providers are required to handle data securely and are subject to their own regulatory obligations.
• Identity verification providers: Where q999 engages licensed third-party identity verification services to confirm your identity or age, the minimum necessary data (typically name and CNIC details) is shared with that provider for this specific purpose.
• Game content providers: q999's slot titles, ludo games, fishing games, and virtual sports products are supplied by licensed game studios. These providers may receive anonymised session data as part of their platform integration. No personally identifiable data is passed to game providers beyond what is technically necessary.
• IT and platform service providers: Companies that provide cloud hosting, technical infrastructure, customer support software, or analytics tools may process data on q999's behalf. These processors are contractually bound to process data only on q999's instructions and to maintain appropriate security standards.
• Regulatory and law enforcement authorities: q999 will disclose personal data to relevant authorities where required by applicable law or valid legal process — for example, a lawful request from the Federal Investigation Agency (FIA) or a court order. q999 will only comply with requests that are legally valid and will not voluntarily disclose more than is legally required.

q999 retains your personal data only for as long as is necessary for the purposes for which it was collected, or for as long as is required by applicable law — whichever is longer. Specific retention periods are as follows:

• Active account data: Retained for the duration your account remains active on q999.
• Transaction records (deposits, withdrawals, bets): Retained for a minimum of 5 years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• Identity verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the interaction, except where the communication relates to an ongoing dispute or legal matter, in which case it is retained until final resolution.
• Technical and usage logs: Retained for a maximum of 12 months, after which they are deleted or anonymised.
• Marketing consent records: Retained for as long as the consent is active, plus 2 years after withdrawal of consent to evidence compliance.

When retention periods expire, data is securely deleted or irreversibly anonymised so it can no longer be connected to any individual.

Protecting your personal data from unauthorised access, loss, or misuse is a priority at q999. We have implemented technical and organisational security measures appropriate to the nature and sensitivity of the data we hold.

• Encryption in transit: All data transmitted between your device and the q999 platform is encrypted using TLS (Transport Layer Security). This protects your login credentials, payment information, and personal data from interception.
• Encrypted data storage: Sensitive data fields — including passwords and payment identifiers — are stored in encrypted form. Passwords are hashed using a one-way algorithm; q999 staff cannot see your password.
• Access controls: Internal access to personal data is restricted to q999 staff who have a genuine operational need for it. Access is logged and reviewed regularly. No staff member has blanket access to all user data.
• OTP authentication: Account login and sensitive account changes on q999 require OTP (one-time password) verification to your registered mobile number, providing a second layer of authentication beyond your password.
• Fraud monitoring: Automated systems monitor transaction patterns and login behaviour for signs of suspicious activity. Flagged events trigger immediate review by the q999 security team.
• Third-party security standards: All third-party service providers that process q999 user data are required to maintain security standards commensurate with their role — including PCI-DSS compliance for payment processors.

q999 uses cookies and similar tracking technologies on its web platform. Cookies are small text files stored on your device by your browser when you visit a website. They serve several purposes on q999:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit, and security cookies that help prevent fraudulent activity. These cannot be disabled without affecting your ability to use q999.
• Functional cookies: Remember your preferences — such as your preferred display settings or previously used payment methods — to improve your experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the q999 platform. This helps us identify which features are being used, where users encounter problems, and how to improve the platform. q999 uses analytics data internally and does not share identifiable analytics data with third parties.
• Marketing cookies (opt-in): Where you have consented to marketing communications, certain cookies help q999 understand the effectiveness of its communications and avoid showing you promotions you have already responded to.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking essential cookies will affect your ability to log in and use the q999 platform normally. Blocking analytics or marketing cookies will not prevent you from using q999's core features.

As a q999 user, you have the following rights over your personal data. These rights are meaningful — exercising them will not affect your ability to use the platform and will not result in any disadvantage to your account:

To exercise any of these rights, contact q999 support at support@q999.cash with the subject line "Data Rights Request". We will acknowledge your request within 3 business days and aim to fulfil it within 30 days. We may need to verify your identity before processing your request to protect against unauthorised access to your data.

q999 is strictly an adult platform. The minimum age to register and use q999 is 18 years. We do not knowingly collect personal data from anyone under 18 years of age. If you are a parent or guardian and believe that a minor has registered a q999 account or provided personal data to our platform, please contact us immediately at support@q999.cash. We will investigate, close the account, and delete all associated data as a matter of priority.

q999's age verification procedures are designed to catch underage registrations before account activation. Where a user passes initial checks but is subsequently found to be under 18, their account will be closed, all bets voided, and any deposited funds returned to the originating payment method.

q999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements in our data practices. When we make material changes, we will notify registered users via their registered mobile number or email address at least 7 days before the updated policy takes effect, except where immediate changes are required by law.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage all q999 users to review this policy periodically. Continued use of the q999 platform after a revised policy has taken effect constitutes your acceptance of the updated terms.

If you have any questions about this Privacy Policy, about how q999 handles your personal data, or if you wish to exercise any of your data rights, please contact us through any of the following channels:

• Email: support@q999.cash — mark your subject line "Privacy Query" or "Data Rights Request" for fastest routing.
• Live Chat: Available 24/7 within the q999 platform. Log in and use the live chat icon in the bottom corner of any page.
• Response time: q999 support responds to privacy-related enquiries within one business day and aims to acknowledge all data rights requests within 3 business days.

For general platform questions not related to privacy, our FAQ page covers a wide range of common topics and may provide a faster answer than contacting support directly.