This Privacy Policy describes how q89 collects, uses, stores, shares, and protects the personal data of players and visitors who use the q89 platform. q89 is committed to handling your information with transparency, care, and full respect for your privacy rights.
Your Privacy Matters: By registering an account on q89 or by continuing to use the q89 platform after the effective date of this Policy, you acknowledge that you have read and understood how q89 handles your personal data as described herein. If you do not agree, you must not use or access the q89 platform.
q89.biz ("q89", "we", "us", "our") operates an online casino and sports betting platform serving players in Pakistan and other permitted jurisdictions. We understand that your personal data is important to you, and we take our responsibility as its custodian seriously. This Privacy Policy ("Policy") sets out in plain, honest terms what data we collect, why we collect it, how long we keep it, and what rights you have over it.
This Policy applies to all personal data collected through the q89 website, mobile-optimised interface, customer support channels, payment processing workflows, marketing communications, and any other q89 service or product. It should be read alongside the q89 Terms and Conditions and, where applicable, any specific consent notices presented to you at the time of data collection.
q89 processes personal data in accordance with applicable international data protection standards and the requirements of our gaming licence. We do not sell your personal data. We do not share it with advertisers for their own marketing purposes. Every use of your data described in this Policy serves a specific, legitimate purpose directly connected to delivering the q89 service to you.
q89.biz is the data controller responsible for the personal data you provide or that q89 collects about you in connection with your use of the platform. As data controller, q89 determines the purposes for which and the means by which personal data is processed.
Where q89 engages third-party processors — such as payment service providers, KYC verification services, or responsible gaming monitoring platforms — those parties act only on q89's documented instructions and are bound by data processing agreements that impose obligations equivalent to those applicable to q89 itself.
Data protection enquiries may be directed to the q89 support team at [email protected]. This is a plain-text address — not a clickable link. Please mark the subject line of your email with "Data Protection Request" for priority routing.
q89 collects personal data through several channels and in several categories. The table below summarises the principal categories of data collected and the context in which each arises.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC / passport number, nationality | Registration; KYC verification |
| Contact Data | Email address, Pakistan mobile number, city of residence | Registration; account updates |
| Financial Data | JazzCash / EasyPaisa account reference, bank account name, deposit and withdrawal history | Deposit; withdrawal; KYC |
| Verification Documents | CNIC scan or photograph, passport bio-data page, selfie for liveness check | KYC verification process |
| Transaction Data | Deposit amounts in PKR, withdrawal requests, bonus activations, bet history, game session records | Ongoing platform use |
| Technical Data | IP address, device type, operating system, browser version, session timestamps | Platform access; login events |
| Usage Data | Pages visited, games played, betting markets accessed, time on platform, clickstream data | Ongoing platform use |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer support interactions |
| Responsible Gaming Data | Deposit limit settings, self-exclusion requests, cooling-off period records | RG tool activation; monitoring |
q89 does not collect sensitive personal data (such as health data, biometric data beyond liveness checks for KYC, or political opinions) except where strictly required by our licensing obligations — for instance, where a responsible gaming assessment requires us to record a Player's self-reported vulnerability.
q89 uses the personal data it collects for the following specific purposes:
q89 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except for real-time fraud risk scoring during payment transactions, which is subject to manual override on request.
q89 processes your personal data only where a valid legal basis exists for doing so. The primary legal bases applicable to q89's processing activities are as follows:
q89 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. q89 shares personal data only in the following specific and limited circumstances:
All third-party data processors engaged by q89 are subject to written data processing agreements that impose data protection obligations at least equivalent to those described in this Policy.
As q89 operates internationally and employs cloud-based infrastructure, your personal data may be transferred to and stored on servers located outside Pakistan. Where such transfers occur, q89 ensures that appropriate safeguards are in place — including contractual protections equivalent to applicable international data transfer standards — to maintain the same level of protection that applies when your data is held within Pakistan.
Players in Pakistan should be aware that data protection law in other jurisdictions may differ from any protections available domestically. q89's contractual safeguards are designed to bridge this gap and ensure your data receives consistent, high-quality protection regardless of where it is physically stored.
q89 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by our licensing obligations and applicable law. The key retention periods applied by q89 are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | 5 years after account closure | Licensing & AML obligations |
| Transaction Records | 5 years after each transaction | Financial regulatory requirements |
| KYC Documents | 5 years after account closure | Licensing obligations |
| Support Communications | 3 years after resolution | Legitimate interests (dispute evidence) |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Demonstrating consent compliance |
| Self-Exclusion Records | Duration of exclusion + 5 years | Licensing & responsible gaming obligations |
| Technical & Usage Logs | 13 months on a rolling basis | Security monitoring & fraud prevention |
Upon expiry of the relevant retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis and service improvement purposes.
q89 implements and maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:
Despite these measures, no internet-based system is completely impenetrable. In the event of a personal data breach that is likely to result in a high risk to your rights and interests, q89 will notify you without undue delay and take all reasonable steps to mitigate the impact.
q89 uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device by your browser when you visit a website. q89 uses cookies for the following purposes:
You may manage your cookie preferences through your browser settings. Please note that disabling non-essential cookies does not affect q89's ability to deliver the core service to you.
Subject to applicable law and our licensing obligations, you have the following rights in relation to the personal data q89 holds about you:
You may request a copy of the personal data q89 holds about you, together with information about how it is processed.
You may request correction of any inaccurate or incomplete personal data held about you.
You may request deletion of your personal data where processing is no longer necessary, subject to our legal retention obligations.
You may request that q89 restricts processing of your data in certain circumstances, for example while a rectification request is under review.
You may request a machine-readable copy of personal data you have provided to q89, where processing is based on consent or contract.
You may object to processing based on legitimate interests. q89 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
To exercise any of the above rights, please contact the q89 support team via live chat on q89.biz. q89 will respond to all valid data rights requests within thirty (30) calendar days. Where a request is complex or numerous, q89 may extend this period by a further two months, with notification of the extension provided within the initial thirty-day window.
Exercising your data rights will not affect the quality of service you receive from q89. q89 is strictly prohibited from penalising any Player for making a legitimate data rights request.
q89 is strictly a 21+ platform. q89 does not knowingly collect personal data from any person under the age of 21. All registrations are subject to mandatory age verification via CNIC or passport documentation before a withdrawal is processed, and q89 conducts ongoing age-related due diligence as required by its licensing conditions.
If q89 becomes aware that personal data has been collected from a person under the age of 21, that account will be suspended immediately, all balances will be held pending investigation, and any winnings will be forfeited. The data will be deleted as soon as practicable following the resolution of any applicable regulatory or legal hold requirements.
q89's responsible gaming monitoring systems process transaction data, session data, and behavioural pattern data to identify indicators of problem gambling. This processing is conducted under q89's legitimate interests as a licensed gaming operator — specifically the interest in protecting vulnerable players — and under our licensing obligations.
Responsible gaming data, including deposit limit settings, self-exclusion requests, and cooling-off period records, is processed confidentially and is not shared with third parties except where required to give effect to an industry-wide self-exclusion scheme. This data is retained for the duration described in Section 8 to ensure that self-exclusion orders remain enforceable.
All responsible gaming tools — including deposit limits, session reminders, cooling-off periods, and full self-exclusion — are accessible to every q89 Player at no cost through their account settings, 24 hours a day, 7 days a week.
q89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or regulatory guidance. Material changes will be communicated to registered Players by posting the updated Policy on the q89 platform and, where practicable, by email notification to your registered address, with a minimum of fourteen (14) days' notice before the changes take effect.
The "Last Updated" date at the top of this Policy indicates the date on which the most recent version came into effect. Your continued use of the q89 platform after the effective date of any revised Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how q89 protects your information.
If you have any questions, concerns, or requests related to this Privacy Policy or to q89's handling of your personal data, please reach out to the q89 support team. All data protection queries are handled with priority and in strict confidence.
q89 aims to acknowledge all data protection enquiries within 24 hours and to provide a full response within 30 calendar days. Where a request falls under formal data rights legislation, q89 will confirm receipt and the applicable processing timeline in writing.
Six concrete commitments that define how q89 approaches your personal data — not as a legal formality, but as a genuine operating principle.
q89 does not sell, rent, or trade your personal data to advertisers, data brokers, or any third party for commercial gain. Your data serves your service — nothing else.
All data transmitted between your device and q89 is protected by 256-bit SSL encryption. Data stored on q89 servers is encrypted at rest. Your financial and identity data is never stored in plaintext.
q89 collects only the personal data that is genuinely necessary to deliver the service, meet our legal obligations, or protect you and other Players. We do not harvest data speculatively.
Access, correct, export, restrict, or request deletion of your data at any time through the q89 support team. Your data rights are real and q89 processes all requests within 30 days.
q89 retains personal data only for as long as legally required or operationally necessary. When the retention period ends, data is securely deleted or anonymised — not kept indefinitely by default.
This Privacy Policy explains in plain language what data q89 collects, why, and who sees it. No hidden data flows. No vague clauses. What you read is what q89 does.
You've read the Policy. Now experience Pakistan's premier online casino with complete confidence — live dealer games, PSL cricket betting, and 500+ slots, all under industry-standard data protection. Players must be 21 years or older.
Go to q89 Login Explore q89 Casino