Privacy Policy

This Privacy Policy ("Policy") describes how q7890 ("we", "us", "our", "the Operator") collects, processes, stores, shares and protects personal data provided by or generated by users ("you", "User", "Player") of the q7890 online gaming platform accessible at https://q7890.cam ("the Platform").

We are committed to handling your personal data responsibly and in accordance with applicable data protection principles under the Operator's licensing framework. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy applies alongside our Terms & Conditions. In the event of a conflict between this Policy and the Terms, the specific provision most protective of your privacy shall prevail.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably identify a living individual, directly or indirectly, including name, email address, device identifiers and financial account details.
• "Processing" means any operation performed on personal data, including collection, storage, use, transmission, restriction, erasure or destruction.
• "Data Controller" means the Operator, being the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of the Operator under a written data processing agreement.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age-verification process required by the Operator's licensing obligations.
• "Sensitive Data" means personal data warranting heightened protection, including identity document numbers, payment card details and source-of-funds information.
• "Cookie" means a small text file placed on your device by the Platform to enable session management, analytics and personalisation.

3.1 Data You Provide Directly

When you register, verify your identity or interact with the Platform, we collect the following categories of personal data:

• Full legal name and date of birth
• Email address and, where provided, a mobile phone number
• Residential address (city, province, country — relevant for users in Karachi, Lahore, Islamabad, Rawalpindi, Peshawar, Faisalabad, Multan and other cities)
• Government-issued identity document details (for KYC verification)
• Payment method details required to process deposits and withdrawals
• Source-of-funds documentation where required by our AML obligations
• Communications you send to our support team

3.2 Data Collected Automatically

When you access or use the Platform, we automatically collect:

• IP address and approximate geolocation (country/city level)
• Device type, operating system and browser version
• Session timestamps, pages visited and features used
• Cookie and tracking technology data (see Section 7)
• Betting and gaming activity data, including wager amounts, game selections and outcomes

3.3 Data from Third Parties

We may receive personal data about you from:

• KYC and identity verification service providers
• Payment processors and fraud-screening services
• Anti-money laundering (AML) database providers
• Responsible gambling self-exclusion registries, where applicable

We use the personal data we collect for the following purposes:

Where data protection law requires us to identify a legal basis for processing your personal data, we rely on one or more of the following:

• Contract Performance: Processing is necessary to perform our contract with you — specifically, to provide the Platform services, manage your account and process transactions.
• Legal Obligation: Processing is required for us to comply with our regulatory and licensing obligations, including KYC, AML and responsible gambling requirements.
• Legitimate Interest: Processing serves our legitimate interests in operating a secure, fair and commercially viable platform, provided those interests are not overridden by your fundamental rights. This includes fraud prevention, security monitoring and platform analytics.
• Consent: For non-essential processing such as marketing communications and non-essential cookies, we rely on your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 Service Providers

We share personal data with carefully selected third-party service providers who process data on our behalf under written data processing agreements. These providers include identity verification services, payment processors, fraud-detection vendors, cloud infrastructure providers and customer support platforms. They are permitted to use your data only for the specific purposes we have instructed and are contractually required to maintain appropriate security measures.

6.2 Regulatory and Legal Disclosure

We may disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies or courts where required by applicable law or a valid legal process. We will, where permitted, notify you of such disclosures.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of the Operator's business, personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any material change to the data controller's identity in advance where practicable.

6.4 No Sale of Data

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These manage your login session, remember your language preference, and maintain security tokens. They cannot be disabled without breaking core functionality.
• Analytics Cookies: Used to understand how users interact with the Platform — pages visited, time spent, error rates — so we can improve performance. Data is aggregated and anonymised where possible.
• Functional Cookies: Remember your preferences such as display settings and notification choices to improve your experience on return visits.
• Marketing Cookies: Used to deliver relevant promotional content. These are deployed only with your explicit consent and can be withdrawn at any time.

7.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to use the Platform. Clearing all cookies will log you out of your account.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. Our standard retention periods are as follows:

• Account and Transaction Data: Retained for the duration of your account plus a minimum of five (5) years after account closure, in accordance with AML and licensing record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from submission, or longer if required by our licensing regulator.
• Customer Support Records: Retained for three (3) years from the date of last interaction.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever is earlier.
• Analytics and Log Data: Retained in aggregated or anonymised form for up to twenty-four (24) months.

When personal data is no longer required and no retention obligation applies, it is securely deleted or irreversibly anonymised.

We implement and maintain appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and our servers
• Encryption at rest for sensitive data categories including payment information and identity documents
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular penetration testing and vulnerability assessments of Platform infrastructure
• Multi-factor authentication requirements for internal administrative systems
• Incident response procedures with defined timelines for breach detection, containment and notification

Despite these measures, no internet-based system can guarantee absolute security. You are responsible for keeping your account credentials confidential. If you suspect your account has been compromised, contact us immediately at [email protected].

Subject to applicable law and the Operator's licensing obligations, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. For account details, you can update most information directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes collected and no overriding legal obligation requires its retention.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interest, including profiling for direct marketing purposes. Marketing opt-out takes effect immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

q7890 operates internationally and may transfer personal data to servers and service providers located in countries other than your country of residence. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place, including contractual clauses that require recipient entities to protect data to standards consistent with applicable data protection law.

By using the Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions that may have different data protection standards from those in your country of residence, including Pakistan. We take this responsibility seriously and apply consistent data handling standards regardless of where data is processed.

The Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the Operator's license jurisdiction. We do not knowingly collect personal data from individuals under the required minimum age.

If we become aware that personal data has been collected from a person below the minimum age requirement, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has provided us with personal data, please contact us promptly at [email protected].

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements or applicable law. When we make material changes, we will notify registered users via their registered email address and display a prominent notice on the Platform at least fourteen (14) days before the changes take effect, except where immediate implementation is required by law.

The "Last Reviewed" date at the top of this Policy indicates when it was most recently updated. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not accept the revised terms, you must cease using the Platform and contact us to close your account.

If you have any questions, concerns or requests regarding this Privacy Policy or the way we handle your personal data, please contact our support team. We are committed to resolving privacy-related queries promptly and transparently.

Email (plain text — not a link):
[email protected]

For information about your account rights and gaming terms, please review our Terms & Conditions. For responsible gambling tools and resources, visit our Responsible Gambling page.