Privacy Policy

q589 ("we", "us", "our", "the Company") operates the online gaming platform accessible at q589.org and all associated subdomains and mobile applications (collectively, the "Platform"). We are committed to protecting the personal data of all individuals who interact with us, including registered players, prospective players, and visitors to our Platform.

This Privacy Policy ("Policy") describes in full how q589 collects, uses, stores, shares, and protects personal data in connection with the operation of the Platform. It also explains the rights available to you as a data subject and how you may exercise those rights.

This Policy applies to all personal data processing activities carried out by q589, whether conducted online through the Platform or offline in connection with account management, KYC verification, payment processing, or customer support. It should be read alongside our Terms and Conditions and our Responsible Gaming Policy.

q589 processes personal data of players located in Pakistan. Our player base primarily consists of English-speaking Pakistani users transacting in PKR through local payment methods including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. This context informs both the data we collect and the regulatory framework within which we operate.

q589 collects personal data in three principal ways: data you provide directly, data generated through your use of the Platform, and data received from third parties for verification or fraud prevention purposes.

Data you provide directly:

• Registration data: Full legal name, date of birth, nationality, residential address, email address, and mobile phone number submitted during account creation.
• Identity verification (KYC) documents: Copies of government-issued identification (CNIC, passport), proof of address documents, and proof of payment method ownership submitted to satisfy our Know Your Customer obligations.
• Financial data: Payment method details including JazzCash account numbers, EasyPaisa wallet numbers, bank account information (HBL, UBL, Meezan Bank), and bank transfer references. q589 does not store full card numbers on its own servers.
• Communications: The content of messages you send to our support team via live chat, email, or any other support channel, including any attachments you submit.
• Responsible gaming data: Deposit limits, loss limits, self-exclusion requests, and any other responsible gaming preferences you configure through your account settings.

Data generated through Platform use:

• Transaction records: Deposit amounts, withdrawal requests, bonus usage, and full betting and gaming history including stakes, odds, game types, and outcomes.
• Technical data: IP address, device type, operating system, browser version, screen resolution, and referring URL collected automatically when you access the Platform.
• Session data: Login timestamps, session duration, pages visited, and navigation paths within the Platform.
• Geolocation data: Approximate geolocation derived from your IP address, used to apply applicable geo-restrictions and personalise payment method availability for Pakistani players.

q589 uses personal data only for specified, lawful purposes directly connected to the operation of the Platform and our obligations to you as a player. We do not use your data for purposes that are incompatible with those for which it was originally collected.

• Account management: Creating, maintaining, and administering your q589 account, including processing login requests, password resets, and account settings changes.
• Identity and age verification: Confirming that you are at least 21 years of age and that the identity you have registered matches your KYC documentation, as required under our licensing obligations.
• Payment processing: Processing deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer in PKR. Financial data is shared with our payment processing partners solely to execute transactions.
• Fraud and security monitoring: Detecting, investigating, and preventing fraudulent activity, account compromise, bonus abuse, money laundering, and other prohibited conduct described in our Terms and Conditions.
• Regulatory compliance: Meeting our obligations under our international gaming licence, including anti-money laundering (AML) record-keeping, responsible gaming obligations, and cooperation with lawful regulatory inquiries.
• Customer support: Responding to your queries, resolving disputes, and improving our support quality by reviewing support interaction records.
• Responsible gaming: Monitoring your gaming patterns to identify potential problem gambling indicators and enabling you to use self-imposed limit and exclusion tools effectively.
• Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience for Pakistani players.
• Marketing: Sending promotional communications about q589 offers, bonuses, and new games — only where you have given explicit consent or where we have a legitimate interest to do so under applicable law. You may opt out at any time; see Article 11.

q589 processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing required to perform the contract between you and q589 — i.e., to operate your account, process bets, and execute deposits and withdrawals. Without this processing, we cannot provide the Platform services to you.
• Legal obligation: Processing required to comply with applicable law, including AML record-keeping obligations, age verification requirements under our gaming licence, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing undertaken to pursue legitimate business interests of q589 that are not overridden by your rights and interests, including fraud prevention, security monitoring, and analytics for Platform improvement. We conduct balancing tests before relying on this basis.
• Consent: Processing for marketing communications, certain cookies, and other discretionary data uses where we have requested and obtained your explicit, freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

q589 does not sell, rent, or trade your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and our banking partners receive financial data necessary to process your transactions. These partners are contractually bound to process your data solely for payment execution and in accordance with applicable financial regulations.
• Identity verification providers: Third-party KYC and identity verification services may receive copies of your identity documents and personal details to complete mandatory age and identity checks. These providers operate under strict data processing agreements with q589.
• Fraud prevention services: Aggregated risk signals and, where necessary, specific transaction data may be shared with fraud detection partners to identify and prevent fraudulent activity across the Platform.
• Gaming platform and software providers: Game providers and platform technology vendors may receive certain technical and behavioural data — such as session identifiers and game activity logs — in order to deliver and audit the gaming experience. They do not receive your identity or financial data unless strictly required for game integrity purposes.
• Regulatory and law enforcement authorities: q589 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts when required to do so by law, court order, or in connection with our licensing obligations. We will notify you of such disclosures where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of q589's business assets, personal data may be transferred to the acquiring entity, subject to that entity assuming the same data protection obligations set out in this Policy. Affected players will be notified of any such change in advance.

All third parties who process personal data on behalf of q589 are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than that for which it was shared.

q589 uses cookies and similar tracking technologies on the Platform to ensure core functionality, improve performance, and — where you have given consent — to personalise your experience and analyse usage patterns.

Types of cookies used by q589:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, carry your account authentication tokens, and enable core features such as the cashier and live game interface. These cannot be disabled without breaking the Platform's functionality.
• Functional cookies: These remember your preferences — such as your preferred language, deposit method, or display settings — to provide a more personalised experience on return visits.
• Analytics cookies: With your consent, we use analytics tools to collect aggregated, anonymised data on how players navigate the Platform. This helps us identify technical issues and improve usability. These cookies do not identify you personally.
• Marketing cookies: Only where you have explicitly consented, marketing cookies may be used to track your interaction with q589 promotional content and to measure campaign effectiveness. These cookies do not result in your data being sold or shared with advertisers.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. A cookie consent banner is displayed on your first visit to q589.org, giving you granular control over non-essential cookie categories.

q589 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Retention periods vary by data category:

On expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

As a data subject, you have a number of rights in relation to the personal data q589 holds about you. These rights are set out below. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request", including your registered username and a description of your request.

• Right of Access: You have the right to request a copy of the personal data q589 holds about you, along with information about how it is processed. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update most account information directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing on legitimate interest grounds and we have no overriding justification to continue. This right is subject to our legal retention obligations — see Article 7.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while we investigate an accuracy dispute or consider an objection you have raised.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

q589 will respond to all data rights requests within 30 calendar days. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

We will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

q589 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Technical measures include:

• TLS encryption for all data in transit between your device and the q589 Platform;
• AES-256 encryption for sensitive data at rest, including financial records and identity documents;
• Multi-factor authentication options available to all q589 account holders;
• Automated intrusion detection and real-time security monitoring of Platform infrastructure;
• Regular third-party penetration testing and vulnerability assessments of Platform systems;
• Secure, access-controlled data centres with physical security protocols.

Organisational measures include:

• Mandatory data protection training for all q589 staff with access to personal data;
• Role-based access controls ensuring staff access only the data necessary for their specific function;
• A documented incident response plan covering detection, containment, notification, and recovery procedures;
• Data processing agreements with all third-party processors requiring equivalent security standards.

Whilst q589 takes all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. If you suspect your q589 account has been compromised, please contact us at [email protected] immediately.

q589 operates a strict 21+ policy. The Platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. We take the protection of minors extremely seriously and apply mandatory age verification checks to all new account registrations.

If q589 discovers that personal data has been collected from a person under the age of 21, the following steps will be taken immediately:

• The account will be suspended and closed;
• All deposits will be returned to the originating payment method;
• Any wagering activity or winnings will be voided and forfeited;
• All personal data collected in connection with the underage account will be deleted from our systems, except where retention is required by law for AML or regulatory reporting purposes.

If you are a parent or guardian and believe that your child has registered an account on the q589 Platform, please contact us immediately at [email protected]. We will investigate and take appropriate action within 48 hours of receiving your report.

q589 may send you promotional communications about bonuses, new games, PSL cricket betting markets, slot launches, and other Platform offers. We will only send marketing communications to you in the following circumstances:

• You have explicitly opted in to receive marketing communications during or after registration; or
• You are an existing q589 player and we are promoting products or services similar to those you have previously used, and you have not opted out — this is a "soft opt-in" permitted under applicable law.

Marketing communications may be sent by email, SMS, or push notification to your registered mobile number, depending on the channels you have enabled in your account notification settings.

Opting out: You may unsubscribe from q589 marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email;
• Updating your notification preferences in your q589 account settings; or
• Contacting our support team at [email protected] with the subject line "Marketing Opt-Out".

Opting out of marketing communications will not affect the delivery of transactional and account-management communications, such as deposit confirmations, withdrawal notifications, and security alerts, which are essential to the operation of your account and cannot be disabled.

q589 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our business operations. The effective date at the top of this Policy indicates when it was last revised.

Where changes are material — meaning they significantly affect your rights or the way your data is processed — q589 will provide advance notice of at least 7 days by email to your registered address before the revised Policy takes effect. For minor or administrative changes, we may update the Policy without prior notice.

Your continued use of the q589 Platform after the effective date of any revised Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised Policy, you should stop using the Platform and contact our support team to close your account.

We recommend that you review this Policy periodically. The most current version is always available at q589.org/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how q589 has handled your personal data, please contact our Data Protection team through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24/7 through the q589 Platform after logging in. For data rights requests, please follow up in writing via email to create a documented record.
• Support Page: Visit our Support page for additional contact options and response time information.

We aim to respond to all privacy-related enquiries within 5 business days. Data rights requests will be acknowledged within 3 business days and resolved within 30 calendar days.

If you are not satisfied with q589's response to a privacy concern or data rights request, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable to your complaint. q589 is committed to cooperating fully with supervisory authorities and will comply with any binding determination made in connection with a complaint.