Privacy Policy — q589

This Privacy Policy ("Policy") describes how q589 ("q589", "Operator", "we", "us", "our"), the operator of the platform located at https://q589.cam, collects, uses, stores, discloses and protects personal data relating to individuals ("User", "you", "your") who access or use the q589 platform and associated services (collectively, the "Platform").

q589 is an English-language online gambling information and entertainment platform. Our primary user base consists of individuals located in Pakistan and other English-speaking markets. We are committed to handling your personal data responsibly, transparently and in a manner consistent with applicable international data protection standards.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, please discontinue your use of the Platform immediately.

This Policy applies to all personal data q589 processes in its capacity as data controller. Where q589 processes data on behalf of a third-party operator (data processor relationship), the relevant controller's privacy policy will also apply.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, CNIC number, payment details, IP address, device identifiers and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure and erasure.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. q589 is the Data Controller for the purposes of this Policy.
• "Data Processor" means an entity that processes Personal Data on behalf of a Data Controller.
• "KYC Data" means identity verification documentation, including a valid Pakistani CNIC, proof of address and related materials submitted to satisfy Know Your Customer requirements.
• "Cookies" means small data files placed on your device when you visit the Platform, used to maintain session state, preferences and analytics.
• "Third Party" means any entity that is not q589 or the User.
• "Sensitive Data" means a subset of Personal Data warranting heightened protection, including financial details, identity documents and data relating to responsible gambling self-assessments.

q589 collects the following categories of Personal Data from Users:

3.1 Registration & Identity Data

Full name, username, date of birth, email address, country of residence, and any other details provided during account registration or subsequent profile updates.

3.2 KYC & Verification Data

Government-issued identification documents (such as a Pakistani CNIC), proof of address, selfie or biometric confirmation where required, and payment method verification documents. This data is required to comply with anti-money laundering (AML) and identity verification obligations.

3.3 Financial & Transaction Data

Deposit and withdrawal history, transaction amounts in PKR, payment method references (e.g., bank account details, mobile wallet identifiers), and bonus redemption records. Note: payment provider names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are used as reference context for Pakistani users only; their availability as actual payment channels is subject to the Operator's cashier configuration.

3.4 Technical & Device Data

IP address, browser type and version, operating system, device identifiers, screen resolution, time zone, referring URL and session duration.

3.5 Behavioural & Activity Data

Pages visited, game types accessed, betting patterns, search queries within the Platform, click-through data, and session activity logs. This data is used to personalise your experience and to support responsible gambling monitoring.

3.6 Communication Data

Records of correspondence with our support team, including live chat transcripts and email exchanges. Chat support is provided primarily in English; Urdu-language records may be generated on request.

q589 collects Personal Data through the following mechanisms:

• Direct submission: Data you provide when registering an account, completing KYC, making deposits or withdrawals, contacting support, or updating your profile.
• Automated collection: Technical and behavioural data gathered automatically when you access the Platform, through cookies, server logs and similar tracking technologies.
• Third-party sources: Identity verification agencies, fraud prevention services, payment processors and, where applicable, publicly available data sources used to verify your identity or assess account risk.
• Responsible gambling assessments: Where you voluntarily complete a responsible gambling self-assessment or activate limit-setting tools, that data is recorded to manage your account appropriately.

q589 processes your Personal Data for the following purposes:

• Account management: Creating, maintaining, verifying and closing user accounts; processing deposits, withdrawals and bonus allocations.
• KYC & AML compliance: Verifying your identity and age (18+ or higher minimum as required), preventing money laundering, fraud and other financial crimes.
• Service delivery: Providing access to betting markets, casino games, live sports content and associated platform features.
• Responsible gambling: Monitoring gambling patterns, enforcing self-imposed limits, identifying signs of problem gambling and facilitating self-exclusion requests.
• Customer support: Responding to queries, resolving disputes and managing complaints received via live chat or email.
• Analytics & improvement: Understanding how users interact with the Platform, identifying technical issues and improving the user experience for Pakistani users across cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.
• Legal compliance: Meeting obligations under applicable law, including responding to lawful requests from regulatory authorities.
• Security: Detecting, investigating and preventing fraudulent transactions, abuse and other prohibited conduct.

Where applicable data protection law requires a legal basis for processing, q589 relies on the following:

• Contractual necessity: Processing necessary to perform the agreement between you and q589 (including account registration, transaction processing and platform access).
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML and age verification obligations.
• Legitimate interests: Processing for fraud prevention, platform security, analytics and responsible gambling monitoring, where these interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent for specific processing activities (such as optional marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

q589 does not sell, rent or trade your Personal Data. We may share your data with the following categories of recipients only where strictly necessary and under appropriate data protection safeguards:

• Payment processors: To facilitate deposits and withdrawals. Payment processor details depend on the Operator's cashier configuration. Pakistani payment-provider names referenced on this Platform (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) are for user familiarity context only and do not imply a sharing relationship unless confirmed in the Operator's cashier.
• Identity verification providers: Third-party KYC and AML service providers used to verify identity documents, including CNIC submissions.
• Fraud prevention services: Agencies and databases used to detect and prevent fraudulent activity on the Platform.
• Technical service providers: Cloud hosting, analytics, cybersecurity and IT infrastructure providers bound by data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order or regulatory directive.
• Group companies: Affiliated entities within the q589 corporate group, subject to equivalent data protection standards.

All third parties who process Personal Data on q589's behalf are required to maintain appropriate technical and organisational security measures and are prohibited from using that data for any purpose beyond the specific service they provide.

q589 may transfer your Personal Data to countries outside your country of residence, including countries that may not have data protection laws equivalent to those in your jurisdiction. Where such transfers occur, q589 implements appropriate safeguards, which may include:

• Standard contractual clauses approved by applicable data protection authorities;
• Binding corporate rules within the q589 corporate group;
• Adequacy decisions where the destination country is recognised as providing an adequate level of data protection.

Pakistani users should note that Pakistani data protection regulation is evolving. The Personal Data Protection Bill and the Prevention of Electronic Crimes Act, 2016 (PECA) are relevant to online data handling in Pakistan. This is not legal advice; consult independent counsel for your specific situation.

q589 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Active accounts: Personal Data is retained for the duration of your account relationship with q589.
• Closed accounts: Following account closure, q589 retains certain data (including KYC records, transaction history and responsible gambling records) for a minimum period as required by applicable AML, regulatory and legal obligations — typically five (5) years following the end of the business relationship, unless a longer period is required by law.
• Self-excluded users: Records of self-exclusion are retained for the duration of the exclusion period plus a further period as required to prevent re-registration in violation of the exclusion.
• Technical logs: Server and session logs may be retained for shorter periods consistent with security and fraud detection purposes.

When Personal Data is no longer required, it is securely deleted or anonymised in accordance with q589's data disposal procedures.

q589 uses cookies and similar tracking technologies to operate the Platform, maintain session state, remember your preferences and gather aggregated analytics data. The following cookie categories are used:

• Essential cookies: Required for the Platform to function. These cannot be disabled without impacting core functionality such as login sessions and security tokens.
• Functional cookies: Used to remember your language preferences, display settings and responsible gambling tool configurations.
• Analytics cookies: Used to collect aggregated, anonymised data about how users interact with the Platform. This helps us improve performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic and unauthorised access attempts.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. q589 does not use cookies to serve third-party advertising or to track your activity outside of the Platform.

Subject to applicable law, you have the following rights in relation to your Personal Data held by q589:

To exercise any of the above rights, please contact our support team using the details in Section 16 of this Policy. We will respond to verified requests within a reasonable timeframe in accordance with applicable law. We may request proof of identity before processing a data rights request.

The Platform is strictly for adults aged 18 years or above — or the higher minimum age required by the Operator or license jurisdiction. q589 does not knowingly collect Personal Data from individuals below the minimum required age. If we become aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who believe their child has registered on the Platform should contact us immediately at [email protected] (plain text — not a clickable link). Age verification procedures are in place at registration and may be triggered at any subsequent point.

q589 implements a range of technical and organisational security measures to protect your Personal Data from unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols;
• Encryption of sensitive data at rest;
• Role-based access controls limiting data access to authorised personnel with a business need;
• Regular security assessments and vulnerability testing;
• Audit logging of data access events;
• Two-factor authentication (2FA) availability for user accounts;
• Incident response procedures for potential data breaches.

While q589 takes reasonable and appropriate technical measures, no data transmission over the internet or electronic storage system is completely secure. Users are encouraged to use strong, unique passwords, enable 2FA where available and protect their login credentials. q589 is not liable for security breaches resulting from a User's failure to maintain reasonable account security practices.

The Platform may contain references to third-party services, payment processors, sports data providers or other external content. This Policy applies solely to Personal Data processed by q589 in connection with the Platform. q589 is not responsible for the privacy practices, security standards or content of third-party services.

Users who interact with third-party services — including payment channels referenced as familiarity context (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) — are subject to the respective privacy policies of those third parties. q589 does not represent that these services are available in Pakistan or that they affiliate with this Platform.

q589 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users via email notification or a prominent in-platform notice prior to the effective date of the change.

Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. The version of this Policy bearing the most recent "Last Updated" date shown at the top of this page supersedes all prior versions. We recommend reviewing this Policy periodically to stay informed about how your data is protected.

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your Personal Data, please contact the q589 Data Protection team using the channels below. The email address is displayed as plain text only and is not a clickable link.

For questions about responsible gambling, self-exclusion and account management, please refer to our Responsible Gambling page and our FAQ.