Privacy Policy for q987

1 Introduction

This Privacy Policy ("Policy") describes how q987, the operator of the platform accessible at https://q987.cam ("Platform", "we", "us", "our"), collects, uses, stores, discloses and protects the personal data of individuals ("Users", "you") who register for, access or interact with our online betting and casino services.

q987 operates under applicable international licensing jurisdictions and is committed to handling personal data responsibly. This Policy has been prepared with reference to internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity and confidentiality.

By registering an account on q987 or using our Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should not use the Platform. This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform as a whole.

2 Definitions

The following terms carry specific meanings throughout this Policy:

3 Personal Data We Collect

q987 collects personal data through your direct interactions with the Platform, automatically through your use of the service and, where applicable, from third-party sources such as KYC verification providers. The categories of data we collect are as follows:

3.1 Registration & Account Data

• Full name as it appears on official identity documents.
• Email address and/or mobile phone number used at registration.
• Date of birth, for age verification purposes.
• Chosen username and encrypted account password.
• Country and city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar).

3.2 Identity Verification (KYC) Data

• Copy of valid government-issued identity document — CNIC for Pakistani nationals, or passport for other nationalities.
• Proof of address documentation, where required for higher-tier verification.
• Selfie or liveness check images submitted through the secure verification portal.
• Source-of-funds documentation for users reaching defined transaction thresholds.

3.3 Financial & Transaction Data

• Deposit and withdrawal records, including amounts in PKR, transaction dates and payment method references.
• Payment method identifiers (e.g., wallet reference numbers or masked bank account details). Full payment credentials are not stored by q987 — these are handled by the relevant payment processor.
• Account balance history and bonus credit/debit records.

3.4 Betting & Gaming Activity Data

• Wagering history, including markets, stakes, odds and outcomes.
• Casino and games play history, including session duration and game titles accessed.
• Responsible gambling tool settings, including any limits or restrictions you have applied to your account.

3.5 Technical & Device Data

• IP address and approximate geolocation data derived from it.
• Device type, operating system, browser type and version.
• Session timestamps, page navigation data and feature interaction logs.
• Cookie identifiers and similar tracking technologies, as described in Section 7.

3.6 Communications Data

• Records of your communications with q987 support, including live chat transcripts and email correspondence.
• Feedback, complaints and any formal written submissions made to q987.

4 Legal Basis for Processing

q987 processes personal data on the basis of one or more of the following legal grounds, consistent with internationally recognised data protection frameworks:

5 How We Use Your Personal Data

Your personal data is used for the following specific purposes:

5.1 Account Management & Service Delivery

• Creating, maintaining and administering your q987 account.
• Processing deposits, withdrawals and wager settlements in PKR.
• Providing access to betting markets, casino games and platform features.
• Communicating account-related notifications, including security alerts and transaction confirmations.

5.2 Identity Verification & Compliance

• Conducting KYC checks to verify identity, age and address as required by applicable regulations.
• Performing AML screening and ongoing transaction monitoring to detect and prevent financial crime.
• Complying with legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.

5.3 Security & Fraud Prevention

• Monitoring account activity to detect and investigate fraud, collusion, bonus abuse and other prohibited conduct.
• Verifying that each user operates only one account on the Platform.
• Protecting the Platform and its users from unauthorised access, technical attacks and data breaches.

5.4 Responsible Gambling Monitoring

• Monitoring patterns in betting and gaming activity to identify potential indicators of problematic gambling behaviour.
• Administering self-imposed limits, cool-off periods and self-exclusion requests placed on your account.
• Providing relevant responsible gambling information and signposting to support resources where appropriate.

5.5 Platform Improvement

• Analysing aggregated, anonymised usage data to understand how the Platform is used and where improvements can be made.
• Testing new features and evaluating platform performance across different devices and connection types commonly used in Pakistan.

5.6 Marketing Communications (Consent-Based Only)

Where you have provided explicit consent, we may send you promotional communications about relevant offers, new game releases or platform updates. You may opt out of marketing communications at any time by using the unsubscribe mechanism in any marketing email or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of any processing that occurred prior to withdrawal.

6 Data Sharing & Third-Party Disclosure

q987 does not sell, rent or trade personal data to third-party marketers. We share personal data only in the following defined circumstances:

• Payment Processors — To facilitate deposits and withdrawals, we share necessary transaction data with the relevant payment service provider. Payment method references familiar to Pakistani users (such as those used for mobile wallet or bank transfer transactions) are processed by those providers under their own privacy policies.
• KYC & Identity Verification Providers — Identity documents and verification data are shared with contracted KYC service providers for the purpose of conducting required identity and age checks.
• AML & Fraud Screening Services — Transaction and identity data may be shared with specialist compliance partners for the purpose of AML screening and fraud risk assessment.
• IT & Infrastructure Providers — Data is hosted on and processed by secure cloud infrastructure providers engaged by the operator under data processing agreements.
• Regulatory & Law Enforcement Authorities — We will disclose personal data to competent authorities where required to do so by applicable law, court order or regulatory instruction, including AML-related reporting obligations.
• Business Transfers — In the event of a merger, acquisition or sale of all or part of the operator's business, user data may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

7 Cookies & Tracking Technologies

q987 uses cookies and similar technologies to enable the Platform to function correctly, maintain your login session and collect performance data that helps us improve the user experience.

7.1 Types of Cookies Used

7.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will impair the functionality of the Platform and you will not be able to remain logged in. Instructions for managing cookies are available in the help documentation of all major browsers. q987 does not use cookies to build advertising profiles or share tracking data with third-party advertising networks.

8 Data Retention

We retain personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention principles apply:

• Active Account Data — Retained throughout the period your account remains active and for a defined period after account closure, as required by our AML and regulatory obligations.
• KYC & Identity Documents — Retained for the period required by applicable AML regulations in the operator's licence jurisdiction. This is typically a minimum of five years from the date of the last transaction or account closure, whichever is later.
• Transaction Records — Financial transaction records are retained in accordance with applicable AML, tax and audit obligations, generally for a minimum of five years.
• Support Communications — Retained for a period sufficient to resolve any ongoing disputes and as required for audit and compliance purposes.
• Marketing Consent Records — Retained for as long as necessary to demonstrate the legal basis for any marketing communication sent.
• Technical & Log Data — Server and access logs are retained for a shorter period, typically 90 days, unless extended retention is required for a specific security investigation.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where anonymisation is used, the resulting data may be retained for analytical purposes without privacy implications.

9 Data Security

q987 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include but are not limited to:

• SSL/TLS encryption for all data in transit between your device and the Platform's servers.
• Encryption of sensitive data at rest, including stored passwords (hashed and salted) and KYC documentation.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a documented need to access it.
• Regular internal security reviews and vulnerability assessments of Platform infrastructure.
• Mandatory secure upload portals for all KYC document submissions — documents must never be sent via unencrypted channels.
• Monitoring and alerting systems for unusual access patterns, potential data exfiltration and other security anomalies.

While q987 takes reasonable and industry-standard precautions, no system is entirely immune to security risks. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and, where required, the relevant supervisory authority, within the timeframe required by applicable regulations.

10 Your Data Rights

Subject to applicable law and the legal basis on which we process your data, you have the following rights in relation to your personal data held by q987. To exercise any of these rights, please submit a written request to our support email.

We aim to respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by up to a further 60 days, with notice provided to you. We may request verification of your identity before processing a data rights request to ensure that information is not disclosed to unauthorised parties.

11 Processing of Data Relating to Minors

q987 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 18 — or the higher minimum age required by the operator's licence jurisdiction.

Age verification is a mandatory component of the KYC process. Where an account is identified as being held by a minor, all associated personal data will be deleted as promptly as technically possible, subject to any legal obligations that may require short-term retention for investigative or reporting purposes. The account will be permanently closed and any deposited funds will be returned to the source payment method pending investigation.

If you believe that a minor has registered an account on q987, please report this to [email protected] immediately.

12 International Data Transfers

As an internationally operated platform, q987 may transfer personal data to service providers and infrastructure partners located in jurisdictions outside the country in which you reside, including outside Pakistan. Such transfers may include data processed by KYC verification providers, payment processors and cloud infrastructure providers operating across multiple regions.

Where personal data is transferred internationally, q987 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within the operator's primary jurisdiction. This may include the use of data processing agreements incorporating appropriate contractual clauses, or transferring data only to jurisdictions recognised as providing an adequate level of data protection.

13 Amendments to This Policy

q987 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements or Platform functionality. Material changes will be communicated to registered users by email or via an in-platform notification prior to the amended Policy taking effect, where practically possible.

The updated Policy will be published on this page with a revised effective date. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should discontinue use of the Platform and may close your account in accordance with the process set out in our Terms & Conditions.

14 Contact Us — Data & Privacy Enquiries

For any questions about this Privacy Policy, to exercise a data subject right, to raise a privacy-related complaint or to report a potential data security issue, please contact q987 using the details below. All communications should be in English and should reference "Privacy Enquiry" in the subject line.