Privacy Policy — q58com

1 Introduction

This Privacy Policy ("Policy") is issued by q58com ("q58com", "we", "us", "our"), the operator of the online gaming platform available at q58com.net and its associated mobile applications, features, and services (collectively the "Platform").

This Policy describes how q58com collects, uses, discloses, stores, and protects personal data about individuals ("you", "your") who interact with the Platform — including registered players, visitors who browse without registering, and individuals who contact our customer support team.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming page, both of which are incorporated by reference. Where any conflict arises between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail.

2 Data Controller

q58com acts as the data controller in respect of personal data collected via the Platform. As data controller, q58com is responsible for determining the purposes and means by which your personal data is processed. Where q58com engages third-party processors to handle data on its behalf — such as payment providers or KYC verification services — those parties act as data processors under q58com's instructions and are contractually bound to process data only for specified, legitimate purposes.

For all privacy-related queries, requests, or complaints, you may contact our designated privacy team at the details set out in Section 14.

3 Data We Collect

q58com collects personal data across several categories depending on the nature of your interaction with the Platform. The table below summarises the main categories of personal data we process:

4 How We Collect Data

q58com collects personal data through the following channels:

• Direct interactions: Information you provide when creating a q58com account, completing KYC verification, submitting deposit or withdrawal requests, contacting customer support, or responding to surveys and promotions.
• Automated technologies: Technical and usage data collected automatically via cookies, web beacons, pixel tags, and server logs when you access and navigate the Platform. See Section 9 for full details on cookies.
• Third-party sources: Identity and fraud screening data from KYC and anti-money-laundering (AML) verification service providers; payment transaction data from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency network providers; and analytics data from platform performance monitoring tools.
• Publicly available sources: In limited circumstances, q58com may verify information against publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, or adverse media databases as part of our AML and responsible gaming obligations.

5 Purpose & Legal Basis for Processing

q58com processes personal data only where there is a valid legal basis for doing so. The primary purposes for which we process your data — and the corresponding legal basis — are set out below:

• Account registration and management — Processing is necessary for the performance of the contract between you and q58com (our Terms & Conditions). This includes creating your account, managing your player profile, processing deposits and withdrawals in PKR, and providing access to games.
• Identity verification and KYC — Processing is necessary to comply with q58com's legal obligations under applicable anti-money-laundering regulations and gaming licensing requirements. KYC verification is mandatory before withdrawals are processed.
• Fraud prevention and platform security — Processing is necessary for the purposes of q58com's legitimate interests in protecting the integrity of the Platform, detecting and preventing fraudulent activity, money laundering, bonus abuse, and other forms of prohibited conduct.
• Responsible gaming — Processing is necessary to comply with responsible gaming obligations imposed by q58com's gaming licence, including monitoring player behaviour for indicators of problem gambling and operating self-exclusion tools. Please visit our Responsible Gaming page for more information.
• Customer support — Processing is necessary for the performance of our contract with you and for q58com's legitimate interest in providing effective customer service.
• Marketing communications — Where you have provided explicit consent, q58com may send you promotional communications about new games, bonuses, PSL cricket betting markets, and other q58com offers. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.
• Platform analytics and improvement — Processing is based on q58com's legitimate interest in understanding how the Platform is used in order to improve performance, fix technical issues, and enhance the player experience.
• Legal and regulatory compliance — Processing is necessary to comply with applicable laws and regulatory requirements, including responding to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.

6 Sharing Your Data

q58com does not sell your personal data to third parties. We share personal data only in the following limited circumstances and always with appropriate contractual safeguards in place:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency network operators require transaction data to process deposits and withdrawals. These providers process data only as strictly necessary to complete transactions.
• KYC and AML providers: Third-party identity verification and anti-money-laundering screening services that assist q58com in meeting its regulatory obligations. These providers process identity and financial data on q58com's behalf under strict data processing agreements.
• Game technology providers: Software studios and game content providers whose titles appear on the q58com Platform may receive limited technical and session data necessary to deliver game functionality. These providers do not receive your full identity or financial details.
• Platform analytics and security tools: Technology providers that assist q58com in monitoring platform performance, detecting fraud, and maintaining cybersecurity. Only anonymised or pseudonymised data is shared where technically feasible.
• Legal and regulatory authorities: q58com will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. q58com will notify you of such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of q58com's business, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

7 Data Retention

q58com retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, accounting, or reporting obligations. The following general retention periods apply:

Where personal data is no longer required, q58com will securely delete or anonymise it in accordance with our internal data lifecycle procedures. Anonymised data (which can no longer be used to identify you) may be retained indefinitely for statistical and research purposes.

8 Security Measures

q58com implements a robust, layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS 1.3): All data in transit between your device and q58com servers is encrypted using current TLS protocols. Our platform is served exclusively over HTTPS.
• AES-256 Data Encryption: Sensitive data at rest — including payment credentials and identity documents — is stored using AES-256 encryption.
• Access Controls: Access to personal data within q58com is strictly limited to authorised personnel who require it to perform their job functions, governed by role-based access control (RBAC) policies.
• Multi-Factor Authentication (MFA): Internal systems holding player data require MFA for all staff access. We strongly recommend players enable MFA on their q58com accounts as well.
• Regular Security Audits: q58com conducts periodic penetration testing and vulnerability assessments to identify and remediate security weaknesses in the Platform.
• Incident Response: q58com maintains a formal data breach incident response plan. In the event of a confirmed breach affecting personal data, q58com will act promptly to contain the breach and notify affected parties as required by law.

9 Cookies & Tracking Technologies

q58com uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage — to operate the Platform, remember your preferences, analyse usage patterns, and support security functions. The main categories of cookies used by q58com are:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core functionality such as user authentication, session management, and security. These cookies cannot be disabled as the Platform cannot operate without them.
• Functional Cookies: These cookies remember your preferences — such as language settings, preferred game categories, and display options — to personalise your experience on q58com.
• Analytics Cookies: q58com uses analytics tools to understand how players navigate the Platform, which features are most popular, and where technical issues occur. Data collected via analytics cookies is aggregated and anonymised where possible.
• Security & Fraud Detection Cookies: These cookies help q58com detect and prevent fraudulent activity, duplicate account creation, and other forms of Platform abuse.

When you first visit q58com, a cookie consent banner will be displayed. You may accept all cookies, reject non-essential cookies, or manage your preferences individually. Strictly necessary cookies are always active. You can update your cookie preferences at any time through the cookie settings panel accessible from the Platform footer.

Please note that disabling certain categories of cookies may affect the functionality and performance of the q58com Platform.

10 Your Data Rights

Subject to applicable data protection law and certain conditions, you have the following rights in relation to your personal data held by q58com:

• Right of Access: You may request a copy of the personal data that q58com holds about you, together with information about how it is processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data held by q58com is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain information directly through your q58com account settings.
• Right to Erasure: In certain circumstances — for example where data is no longer necessary for the purpose for which it was collected — you may request that q58com delete your personal data. Note that this right is subject to overriding legal and regulatory obligations (such as AML record-keeping requirements) which may prevent full erasure.
• Right to Restrict Processing: You may request that q58com restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request that q58com provide your personal data in a structured, commonly-used, machine-readable format.
• Right to Object: You may object to q58com processing your personal data where the legal basis for processing is q58com's legitimate interests. You also have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

11 Minors — 21+ Only

The q58com Platform is strictly intended for adults aged 21 years and over. q58com does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the q58com registration and KYC process.

If q58com discovers that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be permanently closed, and any deposits made will be returned in accordance with applicable regulatory requirements.

12 International Data Transfers

q58com operates under international gaming licensing standards and engages service providers located in various jurisdictions globally. As a result, your personal data may be transferred to, stored in, and processed in countries outside of Pakistan.

Where personal data is transferred internationally, q58com takes appropriate steps to ensure that such transfers are conducted in compliance with applicable data protection requirements. Safeguards employed include contractual data processing agreements incorporating standard contractual clauses, adequacy assessments of the recipient jurisdiction, and vendor-level security certifications where available.

By using the q58com Platform, you acknowledge that your personal data may be processed internationally for the purposes described in this Policy, subject to the safeguards outlined above.

13 Changes to This Policy

q58com reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Any material changes to this Policy will be communicated to registered players via email notification and/or a prominent notice on the q58com Platform prior to the changes taking effect.

The "Last Updated" date displayed at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how q58com protects your personal data. Your continued use of the Platform following notification of any changes constitutes your acceptance of the revised Policy.

Where a proposed change materially affects your rights or the way in which q58com processes your personal data, we will provide a minimum of 14 days' advance notice before the change takes effect. If you do not agree with the proposed changes, you may close your account prior to the effective date by contacting our support team.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which q58com processes your personal data, please contact our dedicated privacy team using the details below. q58com is committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Live Chat: Available 24/7 via the q58com Platform
• Response Time: We aim to acknowledge all privacy enquiries within 2 business days and provide a full response within 30 days.

If you are not satisfied with q58com's response to your privacy complaint, you may have the right to escalate the matter to a relevant supervisory authority or data protection regulator depending on your jurisdiction.