Privacy Policy – How qr789 Handles Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how qr789 ("qr789", "the Platform", "we", "us", "our") collects, processes, stores, uses, and protects the personal data of individuals ("Player", "User", "you") who register an account on or otherwise interact with the qr789 platform at qr789.org and any associated digital properties operated under the qr789 brand.

By registering an account on qr789, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not create an account or use the qr789 platform.

This Policy should be read together with the qr789 Terms and Conditions, which are accessible at qr789.org/terms-conditions and which form part of the overall agreement between you and qr789.

2. Data Controller

For the purposes of applicable data protection laws, qr789 acts as the data controller in respect of the personal data collected from players via the qr789 platform. As data controller, qr789 determines the purposes for which and the means by which personal data is processed.

Any queries regarding the handling of your personal data, or any requests to exercise your data subject rights, should be directed to qr789 via the support channel at the contact details set out in Section 14 of this Policy.

3. Personal Data We Collect

qr789 collects personal data in the following categories, depending on how you interact with the platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your CNIC
• Date of birth (for age verification — players must be 18+)
• Pakistani mobile number (in 03xx format)
• Email address
• Residential address
• CNIC number and copy (collected during KYC verification)

3.2 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• JazzCash account reference, Easypaisa account reference, or bank account details used for transactions
• PKR wallet balance history and transaction logs

3.3 Gaming & Betting Activity Data

• Game sessions, bet amounts, game outcomes, and win/loss records
• Sports betting selections, stake amounts, and settlement records
• Responsible gaming limit settings and self-exclusion records

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type and version
• Pages visited on qr789.org, session duration, referral source
• Cookie identifiers and session tokens (see Section 6)

3.5 Communications Data

• Records of live chat and email communications with qr789 support
• Support ticket contents and resolution history

qr789 does not knowingly collect special categories of sensitive personal data (such as racial origin, political opinions, health data, or biometric identifiers) except where specifically required by regulatory obligations and with appropriate consent or legal basis.

4. How We Use Your Personal Data

The personal data collected by qr789 is used for the following specific purposes:

5. Legal Basis for Processing

qr789 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the account agreement with you — account registration, payment processing, game operation, and support.
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, age verification obligations, and gaming regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and improving the quality of services offered on qr789, where such interests are not overridden by your rights.
• Consent: Processing for direct marketing communications, where you have given clear and informed consent that can be withdrawn at any time.

6. Cookies & Tracking Technologies

qr789 uses cookies and similar tracking technologies on qr789.org to operate the platform and to improve the user experience. The categories of cookies used are as follows:

6.1 Strictly Necessary Cookies

These cookies are essential for the operation of qr789 and cannot be disabled. They include session authentication tokens, security cookies, and load-balancing cookies. Without these cookies, the platform cannot function.

6.2 Functional Cookies

These cookies remember your preferences — such as your preferred language, game lobby view settings, and responsible gaming reminder intervals — to personalise your experience on qr789.

6.3 Analytics Cookies

qr789 uses analytics tools to understand how players navigate the platform, which pages are visited most frequently, and where technical issues occur. This data is aggregated and anonymised and is used solely to improve platform performance.

You may manage your cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain features on qr789.

7. Sharing Personal Data with Third Parties

qr789 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared only in the following limited circumstances:

• Payment processors: Financial data is shared with JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah solely to process your deposit and withdrawal transactions.
• Game providers: Technical session data is shared with game studios (such as PG Soft, Pragmatic Play, Evolution Gaming) to operate individual game titles and to resolve disputes regarding game outcomes.
• KYC and fraud prevention services: Identity data may be passed to third-party verification providers to complete KYC processes and to verify the legitimacy of player accounts and transactions.
• Legal and regulatory authorities: qr789 will disclose personal data to regulatory authorities, law enforcement, or courts where required to do so by applicable law or valid legal process.
• Service providers: Technical infrastructure providers, cloud hosting services, and customer support platforms that process data on behalf of qr789 under appropriate data processing agreements.

All third parties with whom qr789 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the specific service they provide to qr789.

8. International Data Transfers

qr789's technical infrastructure and certain service providers may be located outside of Pakistan. Where personal data is transferred outside Pakistan, qr789 takes appropriate steps to ensure that such transfers are made with adequate safeguards in place, including contractual data protection clauses that impose obligations on the receiving party consistent with applicable data protection requirements.

9. Data Retention

qr789 retains personal data for the following periods:

• Active account data: For the duration of your account relationship with qr789 and for a period of up to five (5) years following account closure, in compliance with applicable anti-money laundering regulations.
• KYC documentation: For a minimum of five (5) years following the last transaction on your account, as required by applicable regulatory obligations.
• Transaction records: For a minimum of five (5) years from the date of the transaction.
• Communications data: For up to three (3) years from the date of the communication, for dispute resolution and quality assurance purposes.
• Technical and usage data: For up to twenty-four (24) months from collection, in anonymised or aggregated form thereafter.

Upon expiry of applicable retention periods, personal data will be securely deleted or anonymised.

10. Your Data Rights

Subject to applicable law and any overriding regulatory obligations, you have the following rights in relation to your personal data held by qr789:

• Right of Access: You may request a copy of the personal data qr789 holds about you at any time.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that qr789 restrict the processing of your data in certain circumstances, for example while a dispute is being investigated.
• Right to Data Portability: You may request a copy of certain personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests and to direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact qr789 using the details in Section 14. qr789 will respond to all valid data subject requests within thirty (30) calendar days. Where a request is complex or numerous, this period may be extended by up to a further sixty (60) days with prior notification.

11. Security Measures

qr789 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and qr789's servers
• Encryption of sensitive data fields at rest within qr789's database infrastructure
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security audits and penetration testing of the qr789 platform
• Two-factor authentication requirements for all administrative access to backend systems
• Incident response procedures designed to contain, investigate, and remediate security incidents promptly

While qr789 takes all reasonable steps to protect your data, no data transmission or storage system can be guaranteed to be 100% secure. In the event of a security breach that poses a material risk to your personal data, qr789 will notify you without undue delay.

12. Children's Privacy

qr789 is strictly an 18+ platform. qr789 does not knowingly collect personal data from individuals under the age of 18. Age verification checks are carried out during the registration process and as part of the KYC verification procedure. If qr789 becomes aware that personal data has been collected from an individual under 18, that data will be deleted promptly and the associated account will be permanently closed.

If you are a parent or guardian and believe your child may have registered an account on qr789, please contact support immediately using the details in Section 14.

13. Changes to This Privacy Policy

qr789 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. Where changes are material, qr789 will notify registered players via their registered email address or via a prominent notice on the platform. The "Last Reviewed" date at the top of this Policy will be updated accordingly.

Continued use of qr789 following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

14. Contact & Data Requests

For all privacy-related queries, data subject rights requests, or to report a privacy concern, please contact qr789 via the 24/7 live chat on the platform or in writing at the following address (plain text — not a clickable link):

Privacy Contact: [email protected]

Please include your registered email address and a clear description of your request. qr789 aims to acknowledge all privacy requests within 48 hours of receipt and to provide a substantive response within 30 calendar days.