q678 Privacy Policy

Introduction

This Privacy Policy (hereinafter "Policy") is issued by q678 (the "Operator", "we", "us" or "our") and applies to all personal data collected from individuals (hereinafter "User", "you" or "your") who access, register on, or otherwise interact with the q678 Platform, accessible at q678.cam and its associated subdomains and interfaces (collectively the "Platform").

q678 is committed to handling personal data with transparency, integrity and in compliance with applicable data protection legislation in the jurisdiction under which the Operator is licensed. This Policy is designed to help you understand what data we collect, why we collect it, and what your rights are in relation to it.

By accessing the Platform or creating an Account, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein. If you do not accept this Policy, you must not use the Platform.

Definitions

For the purposes of this Privacy Policy, the following terms apply:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, directly or in combination with other available data.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, transfer or deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, q678.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "KYC" means Know Your Customer — the identity verification process applied to confirm a User's identity, age, address and payment method ownership.
• "Cookies" means small text files stored on a User's device by the Platform to facilitate functionality, session management and analytics.
• "Account" means the registered user profile created on the Platform for the purpose of accessing betting and gaming services.
• "Sensitive Data" means categories of personal data that warrant heightened protection, including government-issued identity documents and financial information.

Personal Data We Collect

q678 collects the minimum personal data necessary for the specified purposes. The categories of data we collect, together with examples of data points in each category, are set out below.

q678 does not knowingly collect Sensitive Data beyond what is required for identity verification (KYC) purposes. KYC documents are processed through verified third-party identity verification partners and are not stored beyond the retention period required by the Operator's regulatory obligations.

Legal Basis for Processing

q678 processes personal data on one or more of the following legal bases, depending on the specific Processing activity:

• Contractual necessity: Processing required to enter into and perform the contract with you — including Account registration, processing deposits and withdrawals, and settling wagers.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, anti-money laundering obligations and regulatory record-keeping.
• Legitimate interests: Processing carried out in pursuit of the Operator's legitimate business interests, including fraud prevention, security monitoring, platform improvement and responsible gambling monitoring — where such interests are not overridden by your fundamental rights.
• Consent: Where you have given specific, informed consent to a particular Processing activity — such as receiving marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior Processing.

How We Use Your Personal Data

q678 uses personal data collected from Users for the following purposes:

• Account management: Creating, maintaining and closing User Accounts; communicating account-related notices, security alerts and operational updates.
• Identity and age verification: Conducting KYC checks to confirm that the User is the person they claim to be, is of eligible age, and that their payment methods are legitimately owned by them.
• Transaction processing: Facilitating deposits and withdrawals via the payment methods available in the Platform's live cashier. References to local methods familiar to Pakistani users — such as bank transfers and mobile wallets — are context only; q678 does not store payment provider credentials.
• Fraud prevention and security: Detecting, investigating and preventing fraudulent activity, money laundering, collusion, bonus abuse and unauthorised Account access.
• Regulatory compliance: Meeting the Operator's obligations under applicable gaming, anti-money laundering and data protection regulations in the licence jurisdiction.
• Responsible gambling: Monitoring patterns of play to identify potential indicators of gambling-related harm and applying responsible gambling tools where appropriate.
• Customer support: Responding to support requests, managing complaints, and maintaining records of communications for quality and compliance purposes.
• Platform improvement: Analysing aggregated usage data to improve the Platform's functionality, performance and content.
• Marketing communications: Where you have given consent, sending relevant promotional offers and platform updates. You may withdraw marketing consent at any time via Account settings or by contacting support.

Data Sharing & Third Parties

6.1   q678 may share personal data with third parties only in the following circumstances, and only to the extent necessary:

• Identity verification providers: Third-party KYC and age verification partners who process identity documents on the Operator's behalf under contractual data processing agreements.
• Payment processors: Payment gateway providers required to process deposits and withdrawals. These providers operate under their own privacy and data security terms and are selected based on recognised data protection standards.
• Fraud detection and AML services: Specialist providers assisting the Operator in detecting suspicious activity, money laundering indicators and fraudulent patterns of behaviour.
• Technology and infrastructure partners: Hosting, cloud storage and platform technology providers who access data only as necessary for operational support, under contractual obligations no less protective than this Policy.
• Regulatory and law enforcement authorities: Where required by applicable law, court order or regulatory direction, q678 may disclose personal data to the relevant authorities in the licence jurisdiction or, where legally compelled, in any other jurisdiction.
• Gaming content providers: Where necessary for the provision of specific game titles or live dealer services, limited session data may be passed to content providers for the purpose of game functionality only.

6.2   All third-party Data Processors with whom q678 shares personal data are required to handle that data in accordance with applicable data protection obligations and under contracts that impose standards consistent with this Policy.

6.3   q678 does not share personal data with advertisers, data brokers, analytics companies for external profiling, or any party for commercial purposes unrelated to the operation of the Platform.

Cookies & Tracking Technologies

7.1   The q678 Platform uses cookies and similar tracking technologies to enable core functionality, maintain session security, and support platform performance analysis. The categories of cookies in use include:

• Strictly necessary cookies: Essential for the Platform to function — including session management, authentication tokens and security state. These cannot be disabled without impairing basic functionality.
• Functional cookies: Remember preferences such as language settings, odds display format and layout choices to personalise your experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how Users interact with the Platform — pages visited, navigation paths, session duration — used solely to improve Platform performance. Individual user data is not identified or shared externally for this purpose.
• Security cookies: Used to detect anomalous session behaviour, manage device fingerprinting for fraud prevention, and enforce login security policies.

7.2   Upon first accessing the Platform, you will be presented with a cookie consent notice. Strictly necessary cookies are applied automatically; all others are subject to your consent. You may adjust your cookie preferences at any time via the Platform's cookie settings.

7.3   Most browsers also provide controls to manage, block or delete cookies independently. Disabling strictly necessary cookies will affect Platform functionality including session persistence and login security.

Data Retention

8.1   q678 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligation.

8.2   As a general guide, the following retention periods apply, subject to the Operator's regulatory requirements in the licence jurisdiction:

• Account and registration data: Retained for the duration of the Account and for a minimum period following Account closure as required by applicable gaming and anti-money laundering regulations (typically five years from Account closure, or longer where required by law).
• Transaction and betting records: Retained for the period required by applicable gaming regulation — generally a minimum of five years from the date of the transaction.
• KYC documentation: Retained for the regulatory minimum period following the completion of the KYC process or Account closure, whichever is later.
• Support communications: Retained for a period sufficient to resolve any ongoing disputes and to satisfy quality assurance and compliance obligations — typically two years from the date of the last communication.
• Marketing preference records: Retained for as long as the Account is active, or until consent is withdrawn and confirmed.

8.3   Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual.

Data Security

9.1   q678 applies technical and organisational security measures proportionate to the sensitivity of the personal data processed and the risks involved. These include, but are not limited to:

• TLS/SSL encryption for all data in transit between your device and the Platform;
• Encryption of sensitive data at rest, including financial records and identity documents;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability monitoring of Platform infrastructure;
• Multi-factor authentication options for Account login;
• Secure, audited third-party data centre infrastructure.

9.2   While q678 takes reasonable steps to protect personal data, no internet transmission or electronic storage system is entirely immune to security risks. Users are encouraged to use strong, unique passwords, enable available Account security features, and report any suspected unauthorised Account access to support immediately.

9.3   In the event of a personal data breach that poses a risk to affected Users' rights, q678 will notify the relevant supervisory authority and affected Users in accordance with applicable data protection law.

International Data Transfers

10.1   As an internationally operated platform, q678 may transfer personal data to countries outside the jurisdiction in which it is processed. Such transfers may occur in connection with the Platform's use of third-party technology infrastructure, KYC providers and payment processors whose systems are hosted in various countries.

10.2   Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to that in the Operator's licence jurisdiction, q678 will apply appropriate safeguards — such as standard contractual clauses or equivalent data transfer mechanisms — to ensure the data remains protected.

10.3   By using the Platform and accepting this Policy, you acknowledge that your personal data may be transferred, processed and stored in countries outside your country of residence, including outside Pakistan.

Your Data Rights

Subject to applicable data protection law and the Operator's regulatory obligations, you have the following rights in relation to your personal data held by q678:

To exercise any of the above rights, please contact the q678 support team via live chat or at the support email address listed in Section 14. The Operator will respond to verified data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, with notice provided within the initial 30-day period.

Children's Privacy

The q678 Platform is strictly for adults aged 18 years or older, or the higher minimum age required by the Operator's licence jurisdiction. The Platform does not knowingly collect personal data from individuals under the applicable minimum age.

If q678 becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, that data will be deleted without delay, the associated Account will be closed, and any transactions associated with the Account will be handled in accordance with the Terms & Conditions.

If you are a parent or guardian and believe that your child has submitted personal data to the Platform, please contact us immediately at the support email address listed in Section 14 so that we can take appropriate action.

Changes to This Privacy Policy

13.1   q678 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, applicable law, regulatory requirements or Platform functionality.

13.2   Material changes — those that significantly affect your rights or the way your data is used — will be communicated to registered Users via in-account notification or email at least 14 days before the amendment takes effect, except where immediate change is required by law.

13.3   The date of the most recent revision is indicated in the "Last updated" notice at the top of this page. Continued use of the Platform after a Policy update constitutes acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and close your Account.

Contact Us

For any questions about this Privacy Policy, to exercise a data subject right, or to submit a privacy-related complaint, please contact the q678 data protection team through either of the following channels:

• Live Chat: Available 24/7 directly on the Platform. For urgent account or security matters, live chat is the fastest route.
• Support Email: [email protected] (plain text only — this address is not a clickable link). Please include "Privacy Request" in the subject line and provide sufficient information to verify your identity.

The Operator will acknowledge privacy requests within 5 business days and will aim to resolve them within 30 calendar days. For complex requests this period may be extended, with notice provided within the initial 30-day window.

For additional information on your rights as a Platform user, including responsible gambling tools and Terms & Conditions, please visit the relevant pages linked throughout this site.