Privacy Policy — How q987 Protects Your Personal Data

q987 is an online gaming and sports betting platform operated by q987 Ltd ("the Company", "the Controller"), serving players primarily in Pakistan. The Company acts as the Data Controller in relation to the personal data of all registered players and website visitors, meaning it determines the purposes and means by which personal data is processed.

For any privacy-related enquiries, you can contact us at privacy@q987.app. We aim to respond to all privacy requests within 72 hours and to resolve them fully within 30 days. The q987 Data Protection Officer (DPO) is responsible for overseeing this Policy and ensuring ongoing compliance with applicable data protection laws.

q987 collects personal data only where it is necessary to provide the platform's services, comply with legal obligations, or prevent fraud. The categories of data we collect are described below. This is not an exhaustive list — where q987 collects additional data in specific circumstances, it will be disclosed at the point of collection.

q987 uses personal data for a limited set of defined purposes. We do not repurpose data for uses that are incompatible with the original purpose without first obtaining your consent or identifying a new legal basis. The main purposes are:

• Account Management: Creating, verifying, and maintaining your q987 account. Processing your registration, managing your profile, and sending service-related communications such as deposit confirmations, bet settlement notifications, and password reset messages.
• Identity Verification (KYC): Confirming your identity and age to comply with anti-money laundering obligations and to ensure that the platform is not used by individuals under 18 years of age.
• Transaction Processing: Executing deposits, processing withdrawal requests, and maintaining accurate transaction records. This includes sharing necessary data with payment providers such as Easypaisa, JazzCash, NayaPay, and partner banks.
• Fraud Prevention and Security: Monitoring account activity for suspicious patterns, preventing unauthorised access, detecting bonus abuse, and investigating potential breaches of q987's Terms and Conditions.
• Responsible Gaming: Analysing play patterns to identify potential problem gambling behaviour and to apply responsible gaming tools — such as automatic session limits — where player welfare may be at risk.
• Legal Compliance: Meeting obligations imposed by applicable law, including responding to lawful requests from regulatory or law enforcement bodies and maintaining records as required.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players use q987 and to make improvements to the platform, game library, and user experience. This analysis is conducted on anonymised data and does not involve profiling at an individual level without your consent.
• Marketing (with consent): Sending you promotional communications, bonus notifications, and platform updates where you have opted in to receive such communications. You can opt out at any time by updating your communication preferences in account settings or by emailing privacy@q987.app.

q987 processes personal data only when there is a valid legal basis to do so. The legal bases we rely on are:

• Contract Performance: Processing necessary to provide the q987 service you have signed up for — including account creation, transaction processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable law — including KYC verification, anti-money laundering checks, and record-keeping obligations.
• Legitimate Interests: Processing for purposes that are in q987's or your legitimate interests and that are proportionate and not overridden by your privacy rights — including fraud detection, security monitoring, and platform analytics.
• Consent: Processing for marketing communications and optional personalisation features, where you have given clear, voluntary consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

q987 does not sell your personal data. We share data with third parties only in the following specific, limited circumstances:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and bank partners receive the financial data necessary to process your deposits and withdrawals. These providers are contractually obligated to use your data only for payment processing and to maintain appropriate security standards.
• Identity Verification Providers: Third-party KYC services may process your identity documents to verify your age and identity. These providers act as data processors under binding data processing agreements with q987.
• Game Software Suppliers: Licensed game providers may receive technical session data necessary to deliver their games on the q987 platform. This does not include your full personal profile or financial data.
• Fraud Detection Services: Specialist security services may process technical and behavioural data to identify fraudulent account activity. These services do not receive your identity or financial data beyond what is strictly necessary.
• Regulatory and Law Enforcement Bodies: q987 will disclose personal data to competent authorities where required to do so by law, court order, or regulatory direction. We will notify you of such disclosure where we are legally permitted to do so.

q987 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and analyse how the platform is used. A cookie is a small text file placed on your device when you visit q987.app.

The types of cookies used by q987 are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and game volume. Disabling these may reduce your experience but will not prevent you from using q987.
• Analytics Cookies: Collect anonymised data about how the platform is used — which pages are visited most, where sessions start and end, and which games are most popular. This data helps q987 improve the platform. These cookies are activated only with your consent.
• Security Cookies: Assist in fraud detection and protection against malicious automated access to q987.

You can manage cookie preferences through your browser settings at any time. Please note that disabling cookies beyond strictly necessary ones may affect certain platform features. q987 does not use third-party advertising cookies or tracking pixels that serve content from external advertising networks.

q987 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• TLS 1.3 encryption for all data in transit between your device and q987's servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Multi-factor authentication requirements for all q987 staff with access to player data systems.
• Role-based access controls ensuring that employees only access the specific data necessary for their job function.
• Regular independent security audits and penetration testing of the q987 platform infrastructure.
• 24/7 automated monitoring of system access logs for anomalous behaviour.
• Secure, geographically redundant data storage with strict physical access controls.

Despite these measures, no internet transmission or electronic storage system is entirely risk-free. In the unlikely event of a data breach that poses a risk to your rights, q987 will notify you and applicable authorities within 72 hours of becoming aware of the incident, in line with applicable data protection law.

q987 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by law. The standard retention periods applied at q987 are:

• Account and Identity Data: Retained for the duration of your active account plus 5 years after account closure, to meet anti-money laundering record-keeping obligations.
• Transaction Records: Retained for 7 years from the date of the transaction, in line with standard financial record-keeping requirements.
• KYC Verification Documents: Retained for 5 years from account closure or 5 years from the date of the most recent identity verification — whichever is later.
• Support Communications: Retained for 2 years from the date of the last message, unless the communication relates to an ongoing dispute or investigation.
• Technical and Usage Data: Retained in identifiable form for 13 months and then anonymised for analytical purposes.
• Marketing Consent Records: Retained for 3 years from the date consent was given or last renewed.

When data reaches the end of its retention period and there is no ongoing legal basis for continued storage, q987 securely deletes the data or irreversibly anonymises it so it can no longer be attributed to any individual.

As a q987 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact privacy@q987.app with your full name, account details, and a clear description of the right you wish to exercise. q987 will respond within 30 days.

q987 is strictly an 18+ platform. We do not knowingly collect or process personal data from individuals under the age of 18. Age verification is performed at registration for all new accounts, and additional KYC documentation may be requested at any point to confirm age.

If q987 becomes aware that an account was registered by or on behalf of a minor, the account will be immediately closed, all data associated with the account will be deleted in accordance with applicable law, and any funds deposited will be returned to the original payment source following investigation.

If you are a parent or guardian and believe your child has registered a q987 account, please contact privacy@q987.app immediately with the account details and supporting information.

The majority of q987's data processing and storage occurs on servers located in secure data centres. In limited circumstances — such as where a game software provider or fraud detection service is based outside Pakistan — your data may be transferred internationally. In all such cases, q987 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied in Pakistan.

Safeguards used for international transfers include contractual clauses that impose data protection obligations on the receiving party, and transfers to jurisdictions with recognised adequate data protection frameworks. q987 does not transfer data internationally beyond what is strictly necessary to provide the platform's core services.

q987 reviews this Privacy Policy regularly and may update it to reflect changes in the way the platform operates, changes in applicable data protection law, or feedback from players. Where changes are material — meaning they significantly alter the way your data is used or your rights under this Policy — q987 will provide at least 14 days' notice by email to your registered address before the changes take effect.

Minor updates — such as clarifications that do not affect the substance of the Policy — may be made without advance notice. The current version of this Policy is always accessible at q987.app/privacy-policy. The version number and last-updated date at the top of this document will always reflect the most recent revision.

Your continued use of q987 after the effective date of any material change to this Policy constitutes your acceptance of the revised terms. If you disagree with any change, you should close your account before the change takes effect and request deletion of your data by contacting privacy@q987.app.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how q987 handles your personal data, please contact us through the following channels:

• Data Protection Officer: privacy@q987.app — for all data rights requests and privacy enquiries. We aim to acknowledge within 72 hours and resolve fully within 30 days.
• General Support: support@q987.app — for account-related queries that may involve data, including data correction requests you can't make through account settings.

If you are not satisfied with q987's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. Details of the applicable authority will be provided in q987's response to your complaint.