Data Protection

Privacy Policy — qe999

This Privacy Policy explains how qe999 collects, processes, stores and protects your personal information. We are committed to handling your data responsibly and transparently. Please read this document in full before using the Platform.

Effective: 1 January 2026 Version 1.0

Your Privacy at a Glance

These cards highlight key principles of how qe999 handles your data. They are a summary only — the full legally binding policy text follows below.

We Do Not Sell Your Data

qe999 does not sell, rent or trade your personal information to third parties for their independent marketing purposes. Data is shared only as described in this policy and where necessary for platform operation.

Purpose-Limited Processing

Your data is collected only for specific, legitimate purposes — account operation, KYC/AML compliance, customer support and platform improvement. We do not use your data for unrelated purposes.

Defined Retention Periods

Personal data is retained only as long as necessary for the purpose for which it was collected, or as required by the applicable legal and regulatory framework. Retention periods are detailed in this policy.

1 Introduction

This Privacy Policy ("Policy") sets out how qe999 ("qe999", "we", "us", "our"), operating the Platform at qe999.cam, collects, uses, stores, discloses and otherwise processes the personal data of individuals ("Players", "Users", "you") who register accounts, access the Platform or interact with qe999 in any manner.

qe999 is committed to protecting the privacy of all Players, including those accessing the Platform from Pakistan and other jurisdictions. We recognise that Pakistani players may be subject to the provisions of Pakistan's applicable data-protection and privacy frameworks, and we endeavour to handle personal data with the standards of care that those frameworks reflect, even where the specific legal instruments of a given jurisdiction do not directly apply to the Platform operator.

By registering an Account or using qe999, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not accept this Policy, you must discontinue use of the Platform immediately.

This Policy should be read together with qe999's Terms & Conditions and Responsible Gambling Policy. Capitalised terms not defined in this document carry the meanings given to them in the Terms & Conditions.

2 Definitions

The following terms have specific meanings throughout this Privacy Policy:

Term Definition
"Personal Data" Any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers and factors specific to that person's identity.
"Processing" Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure and deletion.
"Data Controller" The entity that determines the purposes and means of processing Personal Data — in this context, the qe999 Platform operator.
"Data Processor" A third party that processes Personal Data on behalf of the Data Controller under a data-processing agreement.
"KYC Data" Identity and age-verification documents collected for Know Your Customer compliance, including CNIC, passport and proof-of-address documents.
"Cookies" Small text files placed on a User's device by the Platform to store session information, preferences and analytical data.
"Consent" Freely given, specific, informed and unambiguous agreement to the processing of Personal Data for a stated purpose.

3 Personal Data We Collect

qe999 collects Personal Data across several categories depending on the nature of your interaction with the Platform:

3.1 Registration and Identity Data

  • Full legal name as it appears on official government-issued identification;
  • Date of birth (for age-verification purposes);
  • Country and city of residence (Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or other);
  • Email address (primary contact and account communication channel);
  • Username and encrypted password credentials.

3.2 KYC and Verification Data

  • Copies of government-issued identity documents: Pakistani CNIC (both sides), passport bio-data page or equivalent;
  • Proof of address documentation (recent bank statement, utility bill or equivalent);
  • Selfie photograph or liveness-check image for face-matching purposes;
  • Source-of-funds documentation where required for AML compliance.

3.3 Financial Transaction Data

  • Deposit and withdrawal transaction records including amounts in PKR or applicable currency, dates, method used and transaction reference numbers;
  • Payment method identifiers (such as masked account or wallet references) associated with your Account. Full payment credentials are handled by payment processors and are not stored by qe999 directly;
  • Account balance history and wagering activity.

3.4 Technical and Usage Data

  • IP address and approximate geographic location derived therefrom;
  • Device type, operating system, browser type and version;
  • Pages visited, features used, session duration and navigation paths within the Platform;
  • Timestamps of login events, deposits, withdrawals and game sessions.

3.5 Communication Data

  • Records of communications with the qe999 support team, including chat transcripts and email correspondence;
  • Responsible gambling requests, self-exclusion applications and limit-change requests.

qe999 does not collect categories of sensitive personal data beyond what is strictly necessary for KYC, AML, age verification and responsible gambling compliance. We do not collect biometric data beyond liveness-check images used for identity verification and deleted after the verification process is complete.

4 How We Collect Your Data

qe999 collects Personal Data through the following channels and mechanisms:

4.1 Directly from You

The majority of Personal Data is provided directly by you during: account registration; the KYC verification process; deposit and withdrawal transactions; communications with the support team; and when you set responsible gambling preferences such as deposit limits or self-exclusion requests.

4.2 Automatically via the Platform

Certain technical and usage data is collected automatically when you access the Platform. This includes data collected through cookies, server logs and similar tracking technologies as described in Section 8 of this Policy. Automated data collection enables Platform security, fraud detection, and service-quality monitoring.

4.3 From Third-Party Service Providers

Where you interact with third-party payment processors (such as services associated with Easypaisa, JazzCash, Raast or banking channels like HBL, UBL, Meezan Bank or Bank Alfalah — referenced as contextual examples only), those providers may share transaction confirmation data with qe999 for the purpose of crediting your Account and verifying payment method ownership. qe999 does not receive your full payment credentials from these providers. References to these payment brands do not imply that they are affiliated with or endorse qe999.

Identity verification providers engaged by qe999 as Data Processors may process KYC document data on our behalf as part of automated or assisted verification workflows.

5 Purposes of Processing & Legal Basis

qe999 processes your Personal Data for the specific purposes outlined below. Each purpose is associated with a legal basis for processing:

Purpose Data Used Legal Basis
Account creation and management Registration data, contact data Contract performance
Age and identity verification (KYC) KYC documents, selfie data Legal obligation / Contract
Anti-money-laundering (AML) checks Financial data, identity data Legal obligation
Processing deposits and withdrawals Financial transaction data Contract performance
Fraud detection and prevention Technical data, transaction data Legitimate interests
Responsible gambling compliance Betting activity, limit settings Legal obligation / Contract
Customer support Communication data, account data Contract performance
Platform improvement and analytics Usage data (anonymised where possible) Legitimate interests
Marketing communications (where opted in) Contact data, preferences Consent
Legal and regulatory compliance All relevant categories Legal obligation

6 Data Sharing & Disclosure

qe999 does not sell your Personal Data to third parties. We share Personal Data only in the circumstances described below, and only to the minimum extent necessary for each purpose:

6.1 Service Providers (Data Processors)

qe999 engages third-party service providers who process Personal Data on our behalf under written data-processing agreements. These include: KYC and identity-verification providers; payment processing and fraud-prevention services; cloud infrastructure and hosting providers; customer-support platform providers; and analytics service providers. These processors are contractually prohibited from using your data for their own purposes.

6.2 Regulatory and Law Enforcement Authorities

qe999 may disclose Personal Data to competent governmental, regulatory or law-enforcement authorities where required to do so by applicable law, court order, AML reporting obligation or other legal requirement. Such disclosures are made to the minimum extent necessary and, where legally permissible, we will notify you.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of qe999's business assets, Personal Data held by qe999 may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained by the acquirer.

6.4 With Your Consent

We may share your Personal Data with third parties in circumstances not described above where you have given your explicit, informed consent to such sharing. You may withdraw such consent at any time by contacting support.

qe999 does not share your Personal Data with advertising networks, social media platforms or data brokers for targeted advertising purposes without your explicit consent.

7 International Data Transfers

As an international online platform, qe999 may process and store your Personal Data in countries other than your country of residence, including Pakistan. Some of the third-party service providers used by qe999 may operate from jurisdictions outside Pakistan.

Where Personal Data is transferred internationally, qe999 takes steps to ensure that appropriate safeguards are in place, including: contractual clauses requiring recipient entities to apply data-protection standards equivalent to those described in this Policy; and selecting service providers that are subject to recognised data-protection frameworks in their operating jurisdictions.

By using qe999, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Pakistan for the purposes described in this Policy.

8 Cookies & Tracking Technologies

qe999 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, remember your preferences and gather anonymised usage statistics. The following cookie categories are used:

Category Purpose Consent Required
Essential Session management, login authentication, security tokens. These cookies are necessary for the Platform to function and cannot be disabled without disrupting core functionality. No (strictly necessary)
Functional Remembering display preferences, language settings and responsible gambling limit configurations set by the Player. Yes
Analytics Aggregated, anonymised data on page performance, feature usage and navigation flows used to improve the Platform. No individual Player is identifiable from analytics data. Yes

You may manage cookie preferences through your browser settings. Blocking essential cookies will impair your ability to use the Platform. Blocking non-essential cookies will not affect core gaming or betting functionality.

9 Data Retention

qe999 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention principles apply:

  • Account data: Retained for the duration of the active Account relationship plus a period of up to five years following Account closure, to comply with AML record-keeping obligations and to address any post-closure disputes or regulatory enquiries.
  • KYC documents: Retained for a minimum of five years following the date of verification, or longer where required by applicable AML regulations. Documents are stored in encrypted form with access restricted to authorised compliance personnel.
  • Transaction records: Retained for a minimum of five years from the date of each transaction in accordance with financial-record-keeping obligations.
  • Support communications: Retained for up to three years following resolution of the relevant matter, or longer where the communication relates to an ongoing legal or regulatory process.
  • Technical and usage data: Retained in aggregated or anonymised form. Identifiable technical data is typically retained for up to 12 months before anonymisation or deletion.

When Personal Data is no longer required for any of the purposes outlined above and no legal retention obligation applies, qe999 will securely delete or permanently anonymise that data.

10 Security Measures

qe999 implements technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, alteration, disclosure or destruction. These measures include:

  • TLS/HTTPS encryption for all data transmitted between your device and the Platform;
  • Encryption at rest for sensitive data stores including KYC documents and financial records;
  • Access controls restricting internal access to Personal Data on a need-to-know basis, with role-based permissions and authentication requirements for staff;
  • Pseudonymisation of analytics data where technically practicable;
  • Regular security reviews of Platform infrastructure and third-party Data Processors;
  • Incident response procedures for identifying, containing and reporting data breaches within appropriate timeframes.

No data security system is completely impenetrable. In the event of a data breach that poses a risk to your rights, qe999 will notify affected Players and relevant authorities in accordance with applicable obligations.

Players are responsible for maintaining the security of their own Account credentials. Always use a strong, unique password for your qe999 Account and do not share your login details with any third party. If you suspect unauthorised access, contact support immediately.

11 Your Data Rights

qe999 respects your rights in relation to your Personal Data. Subject to applicable law and certain exceptions, you have the following rights:

Right of Access

Request a copy of the Personal Data qe999 holds about you. We will respond within a reasonable period, typically within 30 days.

Right of Rectification

Request correction of inaccurate or incomplete Personal Data held about you. Some data fields can be updated directly in your Account settings.

Right of Erasure

Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected and no overriding legal obligation requires its retention.

Right to Restrict Processing

Request restriction of processing of your Personal Data in specific circumstances, such as where accuracy is contested or processing is unlawful.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, request your data in a structured, machine-readable format.

Right to Object

Object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to marketing, we will cease processing immediately.

Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, submit a written request to [email protected]. We may require identity verification before processing your request to prevent unauthorised disclosure of Personal Data. We will acknowledge your request promptly and aim to fulfil it within 30 days, subject to any applicable legal exceptions.

12 Children's Privacy

qe999 is strictly an adults-only platform. The Platform is not directed to, and we do not knowingly collect Personal Data from, individuals under the age of 18 years — or the higher minimum age required by the operator or licence jurisdiction.

If qe999 becomes aware that Personal Data has been collected from an individual below the applicable minimum age, we will take immediate steps to delete that data and close the associated Account. Any deposits or winnings associated with an underage Account will be withheld pending investigation and handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe that a minor has registered an Account on qe999 or provided us with Personal Data, please contact us immediately at [email protected].

13 Marketing Communications

qe999 may send you promotional communications — including bonus offers, sports-betting promotions, platform updates and related content — where you have provided your consent to receive such communications during registration or through your Account settings.

You may opt out of marketing communications at any time by: updating your communication preferences in your Account settings; clicking the unsubscribe link included in any marketing email; or contacting support at [email protected] with a request to remove you from marketing lists.

Opting out of marketing communications will not affect transactional and service-related communications, which are necessary for Account management and are not subject to opt-out.

Important: qe999 will not send marketing communications to Players who have activated self-exclusion or similar responsible gambling restrictions. If you receive promotional material after setting a self-exclusion, please contact support immediately.

14 Third-Party Links and Services

The qe999 Platform may contain references to third-party payment providers, sports data services and other external resources. This Privacy Policy applies solely to data processed by qe999 and does not govern the data-processing practices of any third party. qe999 has no control over, and accepts no responsibility for, the privacy practices or content of third-party services.

If you interact with a third-party payment channel (such as those associated with banking services like HBL, UBL, Meezan Bank, Bank Alfalah or mobile wallet providers) in connection with your qe999 Account, those providers handle your data under their own privacy policies. The mention of those providers in this Policy or on the Platform does not constitute endorsement or affiliation.

15 Amendments to This Policy

qe999 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, Platform functionality, data-processing practices or organisational structure. The current version of this Policy, together with the effective date, is always available on this page.

Where amendments are material — that is, where they significantly affect your rights or our processing obligations — qe999 will notify registered Players by email and/or an in-Platform notification at least 14 days before the amended Policy takes effect. Continued use of the Platform following the effective date of an amended Policy constitutes acceptance of the updated terms.

If you do not accept the amended Privacy Policy, you must close your Account and withdraw any available balance prior to the effective date of the changes.

16 Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by qe999, please contact us using the details below. All privacy-related requests must be submitted in writing.

Data Enquiries & Rights Requests:

Email: [email protected]

Availability: 24 hours a day, 7 days a week

Please include "Privacy Request" in the subject line of your email. We will acknowledge receipt within 3 business days and respond fully within 30 days.

Related policy documents:

Questions About Your Data or Account?

Our support team is available 24/7 to assist with privacy requests, data-access enquiries and all other account matters. You can also explore our full platform policies below.