qr999 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction

qr999 ("we," "us," "our," "the Company") operates qr999.net, Pakistan's online gaming and sports betting platform. As part of delivering our services to registered players in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan, we necessarily collect and process certain categories of personal information.

This Privacy Policy has been prepared to comply with internationally recognised data protection principles and the requirements of qr999's applicable gaming licence framework. It explains in clear and accessible language what data we collect, why we collect it, how long we keep it, and what your rights are as a data subject.

qr999 processes personal data in relation to Pakistani players primarily for the following broad purposes: providing online gaming and betting services, processing financial transactions in PKR through JazzCash, EasyPaisa, and bank channels, verifying player identities under KYC requirements, preventing fraud and money laundering, and communicating with players about their accounts and promotions where consent has been given.

2. Data Controller

For the purposes of data protection law, the data controller responsible for personal data processed through qr999.net is the legal entity operating qr999 under its international gaming licence. As the data controller, qr999 determines the purposes and means by which your personal data is processed.

All data protection queries, access requests, correction requests, and deletion requests should be directed to the qr999 Data Protection contact at the email address provided in Section 15 of this Privacy Policy. qr999 aims to respond to all data protection requests within 30 calendar days of receipt.

3. Categories of Personal Data We Collect

3.1 Registration and Identity Data

When you register a qr999 account, we collect the following information:

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — qr999 requires all players to be 21 years of age or older);
• Pakistani mobile phone number (used as primary login identifier and for OTP delivery);
• Email address;
• Residential address.

3.2 Identity Verification (KYC) Documents

As part of the mandatory Know Your Customer (KYC) process, qr999 may collect:

• Copies of government-issued photo identification (CNIC, passport, or driver's licence);
• Proof of address documentation (utility bills, bank statements);
• Proof of payment method ownership (e.g., screenshots of JazzCash or EasyPaisa accounts registered in your name).

3.3 Financial Transaction Data

qr999 collects data in connection with deposits and withdrawals, including:

• Transaction amounts in PKR;
• Payment method used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Allied Bank, or USDT TRC20);
• Transaction reference numbers and timestamps;
• Wallet or bank account identifiers associated with each transaction.

3.4 Gaming and Account Activity Data

• Game play history (games accessed, bet amounts, win/loss outcomes);
• Sportsbook betting history (including PSL, cricket, and other sports markets);
• Login timestamps, session durations, and device information;
• Bonus and promotion usage history;
• Responsible gaming limit settings and self-exclusion records.

3.5 Communications Data

• Records of live chat support conversations;
• Email correspondence with qr999 support;
• Responses to surveys or feedback requests where voluntarily provided.

3.6 Technical and Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Cookies and similar tracking data as described in Section 8.

4. How We Collect Your Data

qr999 collects personal data through the following channels:

• Directly from you: when you register a qr999 account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey;
• Automatically: through cookies, web analytics, and server logs as you navigate and interact with qr999.net;
• From payment processors: transaction confirmation data shared by JazzCash, EasyPaisa, and other integrated payment providers to confirm deposit and withdrawal status;
• From identity verification services: where third-party KYC service providers are engaged to validate the authenticity of identity documents submitted during verification.

5. How We Use Your Personal Data

qr999 uses your personal data for the following purposes:

5.1 Service Delivery

To create and manage your qr999 account, process deposits and withdrawals in PKR, provide access to gaming and betting products, and deliver customer support in English and Urdu.

5.2 Identity Verification and Fraud Prevention

To verify your identity and age as required under qr999's licensing obligations, to detect and prevent fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct as defined in qr999's Terms & Conditions.

5.3 Regulatory Compliance

To meet obligations under applicable gaming, anti-money laundering (AML), and Know Your Customer (KYC) regulations as required by qr999's international gaming licence framework. This may include retaining transaction records for defined statutory periods.

5.4 Responsible Gaming

To monitor account activity for signs of problem gambling, to apply player-requested limits, cooling-off periods, and self-exclusions, and to intervene proactively where qr999 identifies patterns consistent with harmful gambling behaviour.

5.5 Marketing Communications

Where you have provided explicit consent, qr999 may contact you with information about promotions, bonuses, PSL season offers, and new gaming products. You may withdraw marketing consent at any time by updating your account settings or contacting qr999 support.

5.6 Platform Improvement

To analyse aggregated, anonymised usage data for the purpose of improving qr999's platform performance, game selection, payment processing, and user experience. Aggregated analytics data does not identify individual players.

6. Legal Basis for Processing

qr999 processes personal data on one or more of the following legal bases depending on the purpose of processing:

• Contractual Necessity: processing required to fulfil qr999's obligations under the account agreement, including service delivery, payment processing, and account management;
• Legal Obligation: processing required to comply with AML, KYC, and gaming regulatory requirements under qr999's licence framework;
• Legitimate Interests: processing carried out for fraud prevention, platform security, and responsible gaming monitoring, where qr999's interests are balanced against player rights;
• Consent: processing for marketing communications, where opt-in consent has been freely given and can be withdrawn at any time.

7. Data Sharing and Third Parties

7.1 Who We Share Data With

qr999 does not sell, rent, or trade your personal data. We may share data with the following categories of third parties only where necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Allied Bank, and USDT TRC20 infrastructure providers, to process your deposits and withdrawals;
• KYC and identity verification providers: third-party services that assist qr999 in verifying the authenticity of identity documents submitted by players;
• Gaming software providers: game content providers such as Pragmatic Play, PG Soft, and Evolution Gaming receive session and wagering data necessary to deliver the games themselves, but do not receive broader personal profile data;
• Regulatory and law enforcement authorities: where qr999 is required by applicable law, court order, or its gaming licence obligations to disclose information about specific accounts or transactions;
• Fraud prevention and AML services: third-party compliance tools used to screen transactions against sanctions lists and detect suspicious activity.

7.2 Data Processing Agreements

All third parties who process personal data on behalf of qr999 are required to enter into data processing agreements that bind them to process data only as instructed by qr999, implement appropriate security measures, and not use the data for their own unrelated purposes.

8. Cookies and Tracking Technologies

qr999.net uses cookies and similar technologies to ensure proper platform functionality and to understand how players use the site. Cookies are small text files stored on your device by your browser when you visit qr999.net.

8.1 Types of Cookies Used

• Essential cookies: Required for the qr999 platform to function correctly. These enable login sessions, maintain account states, and support secure payment processing. These cannot be disabled without impairing platform functionality;
• Analytical cookies: Used to collect anonymised data about how players navigate qr999.net, which pages are most visited, and where errors occur. This data helps qr999 improve the platform experience;
• Preference cookies: Store your language preferences, display settings, and other personalisation choices so qr999 can remember them across sessions.

8.2 Managing Cookies

You can manage, restrict, or delete cookies through your browser settings. Please note that disabling essential cookies will prevent the qr999 login system and payment processing from functioning correctly. Analytical and preference cookies can be disabled without affecting core platform access.

9. Data Retention

qr999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active account plus a minimum of five years following account closure, as required by AML and gaming regulatory record-keeping obligations;
• Financial transaction records: Retained for a minimum of five years from the date of the transaction;
• Gaming activity logs: Retained for a minimum of three years from the date of activity;
• Support communications: Retained for a minimum of two years from the date of the last communication;
• Marketing consent records: Retained for the duration of the consent, plus a reasonable period following withdrawal of consent to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

10. Data Security

qr999 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• TLS/SSL encryption for all data transmitted between your device and qr999.net;
• Encrypted storage of sensitive personal and financial data at rest;
• Strict access controls ensuring that only authorised qr999 personnel can access personal data, limited to those who need it to perform their role;
• Regular security assessments and penetration testing of the qr999 platform infrastructure;
• OTP-based secondary authentication for account login from new devices;
• Monitoring systems designed to detect and respond to potential data breaches promptly.

11. Your Data Rights

As a qr999 account holder, you have the following rights in relation to your personal data, which may be exercised by contacting qr999 support:

To exercise any of the above rights, please contact qr999's Data Protection contact via email at [email protected], clearly stating the right you wish to exercise and providing sufficient information to verify your identity. qr999 will acknowledge your request within five business days and aim to fulfil it within 30 calendar days.

12. Children's Privacy and Underage Players

qr999 is a real-money gaming platform restricted exclusively to individuals aged 21 years and above. qr999 does not knowingly collect personal data from anyone under the age of 21, and does not direct any of its services or marketing toward minors.

Where qr999 discovers or has reasonable cause to believe that a registered account belongs to a person under 21 years of age, the account will be immediately suspended. All deposits held in the account will be refunded to the original payment method following verification, and all gaming activity conducted on the account will be reviewed. qr999 may report confirmed cases of underage access to relevant regulatory authorities.

If you are a parent or guardian and believe that a person under 21 has accessed qr999 without authorisation, please contact qr999 support immediately via live chat or email. qr999 will investigate and take appropriate action promptly.

13. International Data Transfers

qr999 operates under an international gaming licence and may process or store personal data on servers located outside Pakistan. Where personal data is transferred to countries that may not provide the same level of data protection as the jurisdiction in which you reside, qr999 ensures that appropriate safeguards are in place to protect your data, including contractual protections with data processors operating in those jurisdictions.

In practice, the personal data of Pakistani qr999 players is primarily processed within secure server infrastructure associated with the platform's international hosting and gaming licence arrangement. qr999 does not transfer Pakistani player data to countries for the purpose of circumventing applicable data protection standards.

14. Changes to This Privacy Policy

qr999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, new third-party processors, or changes to retention periods — qr999 will notify registered players via email or by an in-platform notification displayed upon next login.

The effective date at the top of this document will always reflect the date of the most recent revision. Continued use of qr999 following the effective date of a revised Privacy Policy constitutes acceptance of the revised terms. If you do not agree to the revised Privacy Policy, you should cease using qr999 and may request account closure in accordance with the Terms & Conditions.

15. Contact Information

For any questions, concerns, or requests relating to this Privacy Policy or the personal data qr999 holds about you, please contact us through the following channels:

• Live Chat: Available 24/7 through qr999.net — the fastest route for urgent data protection queries;
• Email: [email protected] — for formal data subject access requests, correction requests, or erasure requests. Please mark the subject line as "Data Protection Request" for faster routing;
• Support Languages: English and Urdu.

qr999 aims to acknowledge all data protection-related communications within five business days. Players in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan are equally entitled to exercise the data rights described in this policy. qr999's support team is fully equipped to handle data-related queries in both English and Urdu.

If you believe qr999 has not handled your personal data appropriately, and you have not received a satisfactory resolution through the qr999 support process, you may have the right to lodge a complaint with the relevant data protection supervisory authority under qr999's applicable licensing jurisdiction.