888q Privacy Policy — How We Collect, Use & Protect Your Personal Data

This Privacy Policy ("Policy") describes how 888q ("888q", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "User") who access or use the 888q platform at https://888q.im, including all associated games, betting markets, support channels, and related services (collectively, "the Platform").

888q takes data privacy seriously. We understand that Pakistani players are entrusting us with sensitive personal and financial information, and we treat that responsibility with the seriousness it deserves. This Policy is designed to give you complete clarity on our data practices — written in straightforward language, not obscured in technical jargon.

This Policy applies to all users of the 888q platform, including registered account holders, users who browse the platform without registering, and individuals who contact our customer support. By registering an account or continuing to use the 888q platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside the 888q Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

For the purposes of applicable data protection law, the data controller responsible for your personal data is 888q, operating the platform at https://888q.im under an international gaming licence. As data controller, 888q determines the purposes and means by which your personal data is processed.

888q has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and with applicable data protection obligations. The DPO can be contacted at [email protected] (please mark your message "DPO — Data Protection Query" in the subject line for direct routing).

Where 888q engages third-party service providers to process personal data on its behalf (for example, KYC verification providers or payment processors), those providers act as data processors operating under written data processing agreements that bind them to process data only on 888q's instructions and in accordance with this Policy.

888q collects the following categories of personal data from users of the platform:

3.1 Registration & Identity Data

• Full legal name (as shown on a valid Pakistani CNIC or other government-issued ID);
• Date of birth (for mandatory age verification — 888q is a 21+ platform);
• Pakistani CNIC number;
• Residential address (including city — e.g. Karachi, Lahore, Faisalabad, Rawalpindi, Islamabad);
• Email address;
• Mobile phone number;
• Username and encrypted password.

3.2 Financial & Transaction Data

• JazzCash or EasyPaisa mobile wallet number associated with deposits and withdrawals;
• Bank account details (where bank transfer is used — including HBL, UBL, Meezan Bank, or other Pakistani banking institutions);
• Deposit and withdrawal transaction history (amounts, dates, payment method used);
• Bet and gaming transaction history (game played, stake, outcome, winnings or losses);
• Bonus and promotion redemption history.

3.3 Identity Verification (KYC) Documents

• Scanned copy or photograph of front and back of Pakistani CNIC;
• Proof of address documents (utility bill, bank statement — no older than 90 days);
• Selfie photograph, which may be compared against the identity document using automated facial comparison technology operated by a licensed third-party KYC provider.

3.4 Technical & Device Data

• IP address at time of registration and subsequent logins;
• Device type, operating system, and browser version;
• Mobile device identifiers (where the platform is accessed via mobile);
• Session duration and login/logout timestamps;
• Geolocation data (country and approximate city level, derived from IP address).

3.5 Communications Data

• Content of any messages sent to 888q via the live chat support, email, or support ticket system;
• Records of any telephone or voice communications with 888q support (where applicable and where you have been informed of recording);
• Your preferences regarding marketing communications from 888q.

888q collects personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact customer support, or update your account settings;
• Automatically: when you access the 888q platform, our servers automatically record technical data including your IP address, device information, and browsing behaviour within the platform via cookies and similar tracking technologies (see Section 9);
• From third parties: 888q may receive data from identity verification providers who confirm your identity against Pakistani government databases; from payment processors who confirm the status of financial transactions; and from fraud prevention and anti-money-laundering screening services.

The table below summarises the purposes for which 888q processes your personal data and the legal basis under applicable data protection law for each processing activity:

888q does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances:

6.1 Service Providers (Data Processors)

888q engages the following categories of third-party service providers who process personal data on our behalf under written data processing agreements:

• KYC & identity verification providers: to confirm your age and identity against Pakistani CNIC records and international watchlists;
• Payment processors: JazzCash, EasyPaisa, and banking partners to process PKR deposits and withdrawals;
• AML screening services: to screen account holders and transactions against sanctions lists and politically exposed person (PEP) databases;
• Cloud hosting and infrastructure providers: to host and operate the 888q platform securely;
• Customer support software providers: to manage and route support tickets and live chat sessions;
• Analytics and fraud prevention providers: to monitor for unusual platform usage patterns that may indicate fraud or account compromise.

6.2 Regulatory & Legal Disclosure

888q may disclose personal data to regulatory authorities, gaming licence supervisory bodies, law enforcement agencies, financial intelligence units, or courts where we are legally required to do so, or where disclosure is necessary to defend 888q's legal rights. 888q will always seek to minimise the scope of such disclosures to what is strictly required.

6.3 Business Transfers

In the event that 888q undergoes a merger, acquisition, or sale of all or substantially all of its business assets, personal data held by 888q may form part of the transferred assets. You will be notified via email and/or a prominent platform notice in advance of any such transfer if your data will be subject to a materially different privacy policy as a result.

888q retains personal data for as long as is necessary to fulfil the purposes described in this Policy, and thereafter for such additional periods as are required by our legal, regulatory, and licensing obligations.

• Active account data: retained for the duration of the account relationship plus a minimum of five (5) years following account closure, in compliance with anti-money-laundering record-keeping obligations;
• KYC verification documents: retained for a minimum of five (5) years from the date of verification, or longer if required by our gaming licence authority;
• Transaction and betting history: retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications: retained for three (3) years from the date of the most recent communication in each support thread;
• Technical and device logs: typically retained for 12 months on a rolling basis unless required for an ongoing investigation;
• Marketing preferences: retained for as long as your account is active, or until you withdraw consent, whichever is earlier.

When personal data is no longer required for any of the above purposes, 888q will securely delete or anonymise it. Anonymised, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

888q implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: all data transmitted between your device and the 888q platform is encrypted using TLS 1.2 or higher, indicated by the HTTPS padlock in your browser;
• Encryption at rest: sensitive stored data including CNIC numbers, bank details, and authentication credentials is encrypted using AES-256 at the database level;
• Password security: user passwords are never stored in plaintext — they are stored as salted cryptographic hashes;
• Access controls: access to personal data within 888q is restricted on a need-to-know basis; internal access is logged and audited;
• Two-factor authentication (2FA): available for all 888q accounts and strongly recommended, particularly for users in Karachi, Lahore, and other major cities where shared device usage is more common;
• Regular security testing: 888q conducts periodic penetration testing and vulnerability assessments of the platform infrastructure;
• Incident response: 888q maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected users and relevant regulatory authorities within the timeframes required by applicable law.

888q uses cookies and similar technologies (such as pixel tags and local storage) on the platform. Below is a summary of the types of cookies used:

9.1 Strictly Necessary Cookies

These cookies are essential for the 888q platform to function and cannot be disabled. They include session authentication cookies that keep you logged in, security tokens that prevent cross-site request forgery, and cookies that remember your language and currency preferences. No consent is required for these cookies as they are technically necessary.

9.2 Analytics Cookies

888q uses first-party analytics to understand how users interact with the platform — which pages are most visited, where users encounter difficulties, and how the platform can be improved. Analytics data is aggregated and does not identify individual users by name. You may opt out of analytics cookies in the cookie preference centre.

9.3 Functional Cookies

These cookies remember your preferences on the platform — such as your preferred game category, table limits, or responsible gaming settings — to provide a more personalised experience on 888q. They are optional and can be disabled without affecting core platform functionality.

9.4 Managing Your Cookie Preferences

You can manage your cookie preferences at any time through the cookie consent banner displayed on your first visit to 888q, or through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 888q platform.

Subject to applicable data protection law and certain exceptions, you have the following rights in relation to the personal data that 888q holds about you:

To exercise any of the above rights, please contact the 888q Data Protection Officer at [email protected] with the subject line "Data Rights Request — [Right Type]". We will acknowledge your request within 48 hours and respond substantively within 30 calendar days. We may request additional identity verification before processing a data rights request to ensure the request is made by the account holder.

The 888q platform is strictly intended for individuals who are 21 years of age or older. 888q does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the 888q registration and KYC process, and is enforced through CNIC verification.

If 888q becomes aware that personal data belonging to a person under 21 has been collected — for example, where a user has provided a falsified date of birth during registration — we will immediately close the associated account, delete all personal data associated with it, void any pending bets, and forfeit any balances, in accordance with our Terms and Conditions.

If you are a parent or guardian and you believe that a person under 21 in your care has registered an account on 888q, please contact us immediately at [email protected] so that we can take prompt action.

888q's primary platform infrastructure is hosted in data centres that may be located outside of Pakistan. In operating the platform and engaging the service providers described in Section 6, your personal data may be transferred to and processed in countries other than Pakistan.

Where personal data is transferred internationally, 888q takes appropriate steps to ensure that your data receives an adequate level of protection, including by entering into contractual arrangements with data recipients that require them to comply with data protection standards equivalent to those described in this Policy. These arrangements may include standard contractual clauses approved by relevant data protection authorities.

By using the 888q platform, you acknowledge and consent to the transfer of your personal data outside of Pakistan to the extent necessary for 888q to provide the Services described in these policies.

888q may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material — meaning they significantly affect how we use your data or your rights in relation to it — we will notify you in advance by email to your registered address and/or via a prominent notice on the 888q platform, giving you at least 14 days' notice before the updated Policy takes effect.

For non-material changes (such as typographical corrections or minor clarifications that do not alter the substance of any provision), we may update the Policy without advance individual notice, although the "Last Updated" date at the top of the page will always reflect the most recent revision.

We encourage you to review this Policy periodically to stay informed about how 888q is protecting your information. Continued use of the 888q platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or want to raise a concern about how 888q handles your personal data, please contact us:

• Email: [email protected] — mark your message "DPO — Privacy Query" for direct routing to our Data Protection Officer
• Live Chat: Available 24/7 through the 888q platform support widget
• Response Commitment: We acknowledge all privacy-related queries within 48 hours and aim to provide a full response within 30 calendar days

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the supervisory authority responsible for overseeing 888q's gaming licence, or to any other competent data protection authority with jurisdiction over your matter. Details of the applicable supervisory authority are available on request from the 888q Data Protection Officer.