- 1. Introduction
- 2. Data We Collect
- 3. How We Use Your Data
- 4. Legal Basis
- 5. Who We Share Data With
- 6. Payment Data
- 7. Cookies & Tracking
- 8. Data Retention
- 9. Security Measures
- 10. Your Rights
- 11. Minors
- 12. Policy Updates
- 13. Contact Us
1 Introduction
This Privacy Policy ("Policy") describes how q999 ("q999", "we", "us") collects, uses, stores, and protects personal information when you use the q999.world platform. It applies to all players registered with q999, to visitors who browse q999.world without registering, and to anyone who contacts q999's customer support team.
q999 is committed to handling personal data responsibly and transparently. We understand that Pakistani players entrust us with sensitive financial and personal information when they register and transact on the platform, and we take that responsibility seriously. This Policy tells you exactly what we do with that information, in plain English, without hiding anything in legal jargon.
By registering an account on q999.world, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of q999's overall Terms and Conditions, which are available at q999.world/terms-conditions. If you do not agree with this Policy, please do not register an account or use q999.
2 Data We Collect
q999 collects personal data in several ways: information you provide directly when registering or contacting support, data generated automatically when you use the platform, and in limited circumstances, information received from third-party payment providers and fraud prevention services.
2.1 Registration Data
When you create a q999 account, you provide:
- Full legal name (as on your CNIC or passport)
- Date of birth
- Pakistani mobile phone number
- Email address
- Residential address
- Password (stored in hashed form — never readable)
2.2 Identity Verification Data
To comply with anti-money laundering (AML) and Know Your Customer (KYC) requirements, q999 may request identity verification documents at any point, and specifically before processing withdrawals above certain thresholds. Documents requested may include:
- CNIC (National Identity Card) — front and back
- Passport
- Driver's licence
- Proof of address (utility bill, bank statement dated within 3 months)
- Selfie photograph for liveness verification
2.3 Financial and Transaction Data
q999 records all financial transactions associated with your account, including deposit amounts, deposit methods, withdrawal requests, bet history, win/loss records, and PKR wallet balance at any given time. Payment method identifiers (such as your Easypaisa or JazzCash mobile number, or the last four digits of a card) are stored; full card numbers are processed exclusively by our PCI-DSS certified payment gateway and are not stored on q999's servers.
2.4 Technical and Device Data
q999 automatically collects the following technical data when you access the platform:
This technical data is used for fraud detection, platform security, and improving the q999 experience for Pakistani players on mobile devices and various network conditions.
2.5 Communication Data
When you contact q999's customer support team — whether by live chat or email — we retain records of those communications, including the content of your messages and our responses. This helps us maintain service quality, resolve disputes, and train our support team.
3 How We Use Your Personal Data
q999 uses your personal data only for legitimate purposes directly related to operating the platform and serving Pakistani players. The table below summarises the main uses:
| Purpose | Data Used | Why Necessary |
|---|---|---|
| Account creation & management | Registration data, contact details | To provide your q999 account and gaming access |
| Age & identity verification | KYC documents, date of birth | Legal requirement — must confirm 18+ and real identity |
| Processing PKR deposits & withdrawals | Payment identifiers, transaction history | Required to complete financial transactions |
| Anti-money laundering (AML) checks | Transaction patterns, KYC data | Legal obligation under AML regulations |
| Fraud detection & prevention | IP addresses, device data, behaviour patterns | Protecting q999 and all players from fraud |
| Customer support | Account data, communication history | Resolving your queries and complaints |
| Responsible gaming enforcement | Betting history, session data, self-exclusion flags | Fulfilling responsible gaming obligations |
| Platform improvement | Anonymised usage analytics | Making q999 better for all Pakistani players |
| Marketing communications | Email address, preference history | Sending offers where you have opted in (opt-out any time) |
q999 does not use your personal data to build profiles for sale to advertisers, to make automated decisions that produce legal or similarly significant effects on you, or for any purpose not listed above without first informing you and obtaining consent where required.
4 Legal Basis for Processing
q999 processes your personal data on the following legal grounds, depending on the purpose:
- Contractual necessity: Processing your registration data, transaction data, and communication history is necessary to perform the contract between you and q999 (i.e., to provide you with the gaming platform you signed up to use).
- Legal obligation: KYC identity verification, AML transaction monitoring, and age verification are required by law and q999's operating licence. q999 cannot conduct these on an opt-out basis.
- Legitimate interests: Fraud detection, platform security, technical data collection, and abuse prevention are processed under q999's legitimate interest in operating a secure and fair gaming environment.
- Consent: Marketing emails and promotional notifications are sent only where you have opted in. You may withdraw this consent at any time by clicking "unsubscribe" in any marketing email or by contacting support.
6 Payment Data and PKR Transactions
Given that q999 operates entirely in Pakistani Rupees (PKR) and processes transactions through Pakistani fintech platforms, payment data security is a particular priority. Here is specifically how q999 handles payment-related information:
When you make a deposit or withdrawal using Easypaisa or JazzCash, q999 records your registered mobile number for that wallet and the transaction reference number. The full transaction is processed through the payment provider's secure API — q999 never has access to your Easypaisa or JazzCash PIN or full account credentials.
For Visa/Mastercard transactions, card details are entered directly into the payment gateway's secure form (not q999's own servers). q999 receives only a tokenised reference and the last four digits of your card number for account reconciliation purposes. Full card data is processed and stored by the PCI-DSS certified payment gateway only.
For IBFT bank transfers, q999 records your bank name, account title, and IBAN solely for the purpose of routing your withdrawal correctly. This information is retained only for the period necessary to complete and verify the transaction and for the retention period required by AML regulations.
All payment transaction records form part of your q999 account history, which you can view at any time in your account dashboard. These records are retained for a minimum of five years as required by anti-money laundering regulation, even if you close your account.
7 Cookies and Tracking Technologies
q999 uses cookies and similar technologies to make the platform function correctly, to keep you logged in, and to understand how players use the site so we can improve it. Below is a summary of what q999 uses and why:
7.1 Essential Cookies
These are necessary for q999 to function. They manage your session (keeping you logged in as you navigate between pages), store your preference settings (such as language and display options), and maintain security tokens that protect against CSRF attacks. You cannot opt out of essential cookies without disabling q999 entirely.
7.2 Analytics Cookies
q999 uses analytics to understand aggregate patterns in how players use the platform — which games are most popular, where players encounter problems, how long typical sessions last. This data is collected in aggregate and anonymised form. It helps q999 improve the platform for all Pakistani players. You can opt out of analytics cookies through your browser's cookie settings.
7.3 Functional Cookies
Functional cookies remember preferences you set on q999 — for example, your preferred game view, your last active game, or recently visited sections of the platform. These are conveniences and can be disabled through your browser settings without affecting core platform functionality.
7.4 Managing Cookies
All major mobile browsers (Chrome on Android, Safari on iPhone) allow you to view, manage, and delete cookies through the browser's settings menu. Disabling certain categories of cookies may affect your q999 experience — in particular, disabling all cookies will prevent you from staying logged in. q999 does not use third-party advertising tracking cookies.
8 Data Retention
q999 does not keep your personal data for longer than is necessary for the purposes described in this Policy. The retention periods q999 applies are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | 5 years after account closure | AML regulation & licensing requirement |
| KYC identity documents | 5 years after account closure | AML regulation |
| Financial transaction records | 5 years from transaction date | AML regulation & financial records law |
| Betting & gaming history | 5 years after account closure | Licensing requirement & dispute resolution |
| Customer support communications | 3 years after last contact | Dispute resolution & service quality |
| Technical & device logs | 12 months from collection | Security monitoring |
| Marketing consent records | Until consent withdrawn + 12 months | Demonstrating lawful consent |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming compliance |
After the applicable retention period expires, q999 securely deletes or anonymises your data so that it can no longer be associated with you as an individual.
9 Security Measures
q999 invests significantly in protecting the personal data of its Pakistani players. The security measures in place include:
- TLS/SSL encryption: All data transmitted between your browser or app and q999's servers is encrypted using TLS 1.2 or higher. This prevents interception of your data in transit.
- Passwords hashed: q999 never stores your password in readable form. Passwords are one-way hashed using a modern cryptographic algorithm. Even q999's own staff cannot read your password.
- Two-factor authentication (2FA): q999 supports 2FA for your account login, adding a second layer of protection beyond your password.
- PCI-DSS payment processing: All card payment data is handled exclusively by PCI-DSS Level 1 certified payment gateways. q999's servers do not handle or store raw card data.
- Access controls: Internal access to player data is restricted to staff whose roles require it and is logged for audit purposes. q999 operates a need-to-know principle.
- Session management: q999 sessions time out after a period of inactivity. Active sessions are invalidated when you log out, preventing replay attacks.
- Security monitoring: q999 operates continuous monitoring for suspicious access patterns, unusual transaction behaviour, and attempted intrusions.
10 Your Rights Over Your Personal Data
As a q999 player, you have the following rights regarding your personal data. To exercise any of these rights, contact q999 at support@q999.world. q999 will respond within 30 days.
You can request a copy of all personal data q999 holds about you. q999 will provide this within 30 days.
If any of your data held by q999 is inaccurate, you have the right to have it corrected. Update basic details in your account settings or contact support for document-related corrections.
You may request deletion of your personal data. Note that data subject to legal retention requirements (AML, licensing) cannot be deleted until the mandatory period expires.
You may ask q999 to restrict processing of your data while a complaint or correction request is being resolved.
For data you provided to q999 and which is processed by automated means, you may request it in a structured, machine-readable format.
You may object to processing based on legitimate interests (such as analytics). You may also withdraw marketing consent at any time without affecting your ability to use q999.
11 Minors and Age Protection
q999 is strictly an 18+ platform. q999 does not knowingly collect personal data from any person under the age of 18. If you are a parent or guardian and believe your child has created an account on q999, please contact support@q999.world immediately. q999 will close the account, delete all personal data associated with it (subject to any AML retention obligations), and return any deposited balance to the funding source.
Age verification is a core part of q999's KYC process. All accounts are required to verify age using official identity documents before the account is fully activated and before any withdrawal can be processed. q999 takes this obligation seriously and maintains a zero-tolerance policy toward underage gambling.
12 Changes to This Privacy Policy
q999 reviews this Privacy Policy periodically and updates it to reflect changes in how the platform operates, changes in applicable data protection law, or improvements in how q999 communicates privacy practices to Pakistani players.
The "Last Updated" date at the top of this page reflects when the current version was published. For material changes — those that meaningfully affect how q999 processes your personal data — q999 will send notification to your registered email address at least 7 days before the change takes effect. Minor corrections such as fixing typos or clarifying existing practices may be made without advance notice.
The version of this Policy in force at the time you use q999 governs the processing of your data. Continued use of q999 following a material update constitutes your acceptance of the revised Policy.
13 Contact q999 About Privacy
If you have any questions about this Privacy Policy, want to exercise one of your data rights, have a concern about how q999 is handling your personal data, or wish to make a privacy-related complaint, please contact q999 at:
- Email: support@q999.world — please write "Privacy Request" in the subject line
- Live Chat: Available 24/7 on q999.world — the support team can handle general privacy questions directly
q999 aims to respond to all privacy requests within 30 days. For complex requests, q999 may require additional time and will inform you of the extended timeline. If you are not satisfied with q999's handling of a privacy concern after going through our internal process, you have the right to raise the matter with the relevant data protection authority or q999's licensing regulator.