This Privacy Policy ("Policy") describes how qk98 ("qk98", "we", "us", "our") collects, uses, stores, and shares personal information about players and visitors ("you", "your") who access or use the qk98 platform at qk98.org and any associated mobile applications or services.
qk98 is committed to protecting the privacy of all Pakistani players who register and play on our platform. We understand that your personal data is valuable and sensitive, and we take our obligations as a data controller seriously. This Policy explains your rights and our responsibilities in plain, clear language.
By registering a qk98 account, making a deposit, or continuing to use the qk98 platform after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
This Policy should be read alongside qk98's Terms and Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with qk98.
qk98 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the website, and from third parties such as payment processors and identity verification services. The categories of data we collect include:
Registration & Identity Data:
- Full legal name as it appears on your government-issued ID.
- Date of birth (to verify the 21+ age requirement).
- Pakistani CNIC number or passport number (for KYC verification).
- Residential address, including city (e.g. Karachi, Lahore, Islamabad, Faisalabad).
- Email address and mobile phone number.
- Username and encrypted account password.
Financial & Transaction Data:
- JazzCash and EasyPaisa wallet identifiers used for deposits and withdrawals.
- HBL, UBL, and Meezan Bank account details provided for bank transfer transactions.
- Visa/Mastercard details (tokenised and never stored in plain text).
- Transaction history including deposit amounts, withdrawal requests, and PKR balances.
- Bonus and promotional activity records.
Technical & Usage Data:
- IP address, device type, operating system, and browser type.
- Session timestamps, pages visited, and features used within qk98.
- Game play logs including bet amounts, game outcomes, and session duration.
- Geolocation data (country-level only, derived from IP address).
- Cookies and similar tracking technologies (see Section 6).
Communications Data:
- Records of live chat conversations with qk98 support staff.
- Email correspondence sent to or received from qk98.
- Responses to surveys, feedback forms, or promotional campaigns.
Sensitive Data: qk98 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information. If such data is incidentally included in communications you send us, it will not be processed for any purpose other than responding to your query.
qk98 uses the personal data we collect for the following purposes:
- Account Management: To create, maintain, and manage your qk98 player account, including processing deposits, withdrawals, and bonus credits.
- Identity Verification (KYC): To verify your identity and age in compliance with anti-money laundering (AML) and responsible gaming obligations before processing withdrawals or activating certain account features.
- Transaction Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard in PKR.
- Customer Support: To respond to your queries, resolve disputes, and provide assistance via live chat and email.
- Regulatory Compliance: To comply with applicable laws including AML regulations, licensing requirements, and data protection obligations.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct.
- Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to apply responsible gaming tools such as deposit limits and self-exclusion where requested or required.
- Platform Improvement: To analyse usage patterns, improve site functionality, personalise your qk98 experience, and develop new features and games.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS — where you have consented to receive such communications. You may withdraw consent at any time via your account settings or by contacting qk98 support.
qk98 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by applicable law.
qk98 processes your personal data under the following legal bases:
- Contractual Necessity: Processing required to fulfil our contractual obligations to you under the qk98 Terms and Conditions — including account management, game provision, payment processing, and customer support.
- Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC obligations, gaming licence conditions, and regulatory reporting requirements.
- Legitimate Interests: Processing carried out for qk98's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement — provided such interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for which you have given explicit consent, including receipt of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.
qk98 does not sell or rent your personal data. We may share your data with third parties only in the following circumstances and only to the extent necessary:
- Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard payment networks — to process your deposits and withdrawals.
- Identity Verification Providers: Third-party KYC and AML service providers who assist in verifying your identity and screening for sanctions and fraud risk.
- Game Software Providers: Licensed game developers whose software powers certain qk98 casino games and slots. These providers may receive anonymised gameplay data for technical and audit purposes.
- IT and Hosting Providers: Cloud infrastructure and cybersecurity partners who host and protect the qk98 platform under strict data processing agreements.
- Regulatory and Law Enforcement Authorities: Where required by law, court order, gaming licence condition, or at the direction of a competent regulatory authority.
- Anti-Money Laundering Bodies: Financial intelligence units and AML compliance networks where suspicious activity reporting obligations require disclosure.
All third parties with whom qk98 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for their own commercial purposes. qk98 maintains data processing agreements with all third-party processors.
qk98 uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the platform. The categories of cookies we use are:
- Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cookies cannot be disabled without breaking core qk98 functionality.
- Functional Cookies: Used to remember your preferences such as language, display settings, and last-visited game categories. These improve your qk98 experience but are not essential for core operation.
- Analytical Cookies: Used to collect anonymised information about how players use qk98 — including pages visited, session duration, and feature engagement. This data helps qk98 improve the platform. No personally identifiable information is included in analytical data.
No Advertising Cookies: qk98 does not use third-party advertising or retargeting cookies. We do not participate in cross-site advertising networks or allow third-party ad trackers on the qk98 platform.
You may manage cookie preferences through your browser settings. Disabling functional or analytical cookies will not prevent you from using qk98 but may affect the quality of your experience. Disabling strictly necessary cookies may render parts of the platform inoperable.
qk98 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
- Active Account Data: Retained for the duration of your qk98 account and for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
- KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the transaction to which they relate, as required by AML regulations.
- Transaction Records: Retained for a minimum of five (5) years following the date of each transaction.
- Customer Support Records: Retained for three (3) years following the closure of each support interaction.
- Marketing Consent Records: Retained for the duration of your account plus three (3) years, to demonstrate consent compliance.
- Analytical and Technical Data: Anonymised and aggregated after thirteen (13) months. Raw session logs are purged after ninety (90) days.
Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. qk98 conducts periodic data audits to ensure retention schedules are applied consistently.
qk98 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:
- All data in transit is encrypted using TLS 1.3 with strong cipher suites.
- Stored personal and financial data is encrypted at rest using AES-256 encryption.
- Payment card data is tokenised at point of entry and never stored in plain text on qk98 systems.
- Access to personal data within qk98 is restricted on a strict need-to-know basis. Staff with access to player data receive regular data protection training.
- qk98 infrastructure undergoes regular penetration testing and vulnerability assessments by independent security specialists.
- Multi-factor authentication is required for all qk98 administrative access.
- qk98 maintains an incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, qk98 will notify affected players and relevant authorities within the timeframes required by applicable law.
While qk98 employs industry-standard security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your qk98 account credentials. Never share your password with anyone, including qk98 support staff — who will never ask for your password.
As a qk98 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact qk98 support with your full name, account username, and a description of your request. qk98 will respond within 30 calendar days.
| Right |
What It Means |
Limitations |
| Access |
Request a copy of the personal data qk98 holds about you. |
Identity verification required before disclosure. |
| Rectification |
Request correction of inaccurate or incomplete personal data. |
KYC-verified data changes require supporting documentation. |
| Erasure |
Request deletion of your personal data where no longer necessary. |
Cannot erase data required for AML compliance or active legal disputes. |
| Restriction |
Request that processing of your data be temporarily restricted. |
May limit your ability to use certain qk98 features during restriction. |
| Portability |
Receive your personal data in a structured, machine-readable format. |
Applies only to data you provided directly and processed by consent or contract. |
| Objection |
Object to processing based on legitimate interests or for direct marketing. |
Marketing objections are processed immediately; other objections assessed case by case. |
| Withdraw Consent |
Withdraw previously given consent for marketing or non-essential processing. |
Does not affect the lawfulness of processing before withdrawal. |
Exercising your data rights will not result in any penalty or adverse treatment of your qk98 account. However, certain rights — such as erasure — may be limited where retention of data is required to comply with legal obligations, including AML requirements that mandate record retention for a minimum of five years.
qk98 operates a strict 21+ only policy. The qk98 platform is not intended for and must not be used by any person under the age of 21. qk98 does not knowingly collect personal data from individuals under 21 years of age.
During the registration process, all players are required to confirm that they are 21 or older. qk98 further verifies age through KYC documentation review prior to processing any withdrawal. Where an account is found to belong to a person under 21:
- The account will be immediately closed and all access suspended.
- Any deposit funds will be returned to the originating payment method.
- All bonus funds, free spin winnings, and gameplay winnings associated with the account will be forfeited.
- All personal data collected in connection with the underage account will be securely deleted as soon as legally permissible, except for records required for AML or regulatory reporting purposes.
If you are a parent or guardian and believe that a minor in your household has accessed or registered on qk98, please contact qk98 support immediately. qk98 also strongly recommends the use of parental control software to prevent access to online gambling platforms by underage individuals.
qk98 may process and store your personal data on servers located outside of Pakistan. Where personal data is transferred internationally, qk98 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.
Safeguards used for international transfers include:
- Standard contractual clauses incorporated into data processing agreements with all third-party service providers.
- Transfer of data only to jurisdictions with adequate data protection frameworks or to recipients who have implemented binding corporate rules.
- Regular review of international data transfer arrangements to ensure continued adequacy.
By using the qk98 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan in connection with the services described in this Policy.
qk98 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made — meaning changes that significantly affect your rights or the way we process your personal data — qk98 will notify you by email to your registered address and by prominent notice on the qk98 website at least 14 days before the changes take effect.
For minor, non-material amendments, changes will take effect upon publication on the qk98 website. The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of qk98 following the effective date of any update constitutes your acknowledgement of the revised Policy.
We encourage all qk98 players to review this Privacy Policy periodically. If at any time you are not comfortable with the way qk98 processes your personal data, you have the right to close your account and request deletion of your data as described in Section 9.