b58q Privacy Policy

1. Who We Are

b58q is an online casino and sports betting platform operated under an international gaming licence and accessible to players at b58q.org. In the context of data protection law, b58q acts as the data controller in respect of the personal information you provide when registering an account, making deposits, placing wagers, or otherwise interacting with the platform.

References to "b58q", "we", "us", or "our" throughout this Privacy Policy refer to the b58q platform and its operating entities. References to "you" or "your" refer to any individual who accesses, registers with, or uses any part of the b58q platform, whether as a guest browser or a fully verified, depositing player.

If you have questions about how we handle your personal data or wish to exercise any of the rights described in Section 9 of this Policy, please contact our Data Protection team using the details provided in Section 14.

2. Personal Data We Collect

b58q collects personal data from you in three primary ways: data you provide directly, data generated automatically through your use of the platform, and data received from third-party verification or payment partners. The categories of data collected are set out below.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, gender, residential address (city, province — e.g., Karachi, Lahore, Islamabad), email address, and mobile phone number.
• Identity verification (KYC) data: Scanned copy or photograph of your Pakistani CNIC (Computerised National Identity Card), proof of residential address, and — where required — source-of-funds documentation.
• Payment data: JazzCash / EasyPaisa mobile wallet numbers, bank account details (HBL, UBL, Meezan Bank), USDT TRC20 wallet addresses, and transaction reference numbers. Full card numbers are never stored by b58q directly; card transactions are handled by our PCI-DSS compliant payment processors.
• Communications data: Content of support chat conversations, emails sent to b58q, and feedback or complaint submissions.
• Responsible gaming data: Self-exclusion elections, deposit limit settings, loss limit preferences, and session time limit configurations.

2.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone.
• Usage and behavioural data: Pages visited, games played, wager amounts, session duration, click patterns, and navigation paths within the platform.
• Cookie and tracking data: Data collected via cookies, pixel tags, and similar technologies as described in Section 5 of this Policy.
• Geolocation data: Approximate location derived from IP address, used for regulatory compliance and fraud prevention purposes only.

2.3 Data Received from Third Parties

• Identity verification results from our KYC/AML screening partners.
• Transaction confirmation data from payment service providers (JazzCash, EasyPaisa, Raast, banking partners).
• Fraud risk scores and device fingerprint data from our security partners.
• Responsible gaming status data from self-exclusion registers where applicable.

3. How We Use Your Personal Data

b58q uses the personal data described in Section 2 for the following specific and lawful purposes:

b58q will not use your personal data for any purpose not listed above without first obtaining your explicit consent, or where otherwise required or permitted by applicable law.

4. Legal Basis for Processing

b58q processes personal data on the following legal grounds, consistent with internationally recognised data protection standards:

• Contract Performance: Processing is necessary to fulfil the contractual relationship between you and b58q — including operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: b58q is required by its international gaming licence conditions and applicable AML/CTF regulations to collect, verify, and retain certain categories of personal data. This includes KYC verification, transaction monitoring, and suspicious activity reporting.
• Legitimate Interests: b58q processes certain data based on its legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gaming monitoring, and internal analytics.
• Consent: Where b58q relies on your consent as the legal basis for processing — primarily for marketing communications and optional analytics cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Cookies & Tracking Technologies

b58q uses cookies and similar tracking technologies to operate the platform effectively, maintain your session, detect fraud, and — with your consent — analyse usage patterns to improve the player experience. The following categories of cookies are in use on b58q.org:

• Strictly Necessary Cookies: Essential to the operation of the platform — including session authentication, security token management, and load balancing. These cannot be disabled without preventing core platform functionality. No consent is required for these cookies.
• Functional Cookies: Remember your preferences, such as language settings, preferred payment method, and responsible gaming limit configurations. Disabling these cookies may reduce the quality of your experience.
• Analytics Cookies: Collect anonymised data about how players navigate the platform — including pages visited, time on page, and error encounters. This data is used internally to improve the b58q platform. Activated only with your consent.
• Fraud Prevention & Security Cookies: Used by b58q's security partners to generate device fingerprints and detect unusual access patterns. These are treated as strictly necessary given b58q's regulatory obligations.
• Marketing Cookies: Used to tailor promotional content shown within the b58q platform to your demonstrated preferences. Activated only with your explicit consent and subject to your opt-out rights at any time.

You may manage your cookie preferences at any time via the Cookie Settings panel available in your b58q account dashboard. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform.

6. Data Sharing & Disclosure

b58q does not sell your personal data to third parties. We share personal data only in the following specific and controlled circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast receive transaction-level data necessary to process your deposits and withdrawals. Each provider operates under its own privacy framework and applicable Pakistani financial regulations.
• KYC & AML Compliance Partners: Identity verification data — including CNIC details — is shared with our licensed KYC screening partners for the purpose of age verification, identity confirmation, and sanctions screening as required by b58q's gaming licence conditions.
• Fraud Prevention & Security Partners: Device and behavioural data may be shared with security technology providers for the purpose of detecting and preventing fraudulent account activity, bonus abuse, and unauthorised access.
• Game Software Providers: Where third-party game studios provide games on the b58q platform, they may receive pseudonymised gameplay data (e.g., session IDs, game outcomes) for the purpose of game performance monitoring. No directly identifying personal data is shared with game providers.
• Regulatory Authorities & Law Enforcement: b58q will disclose personal data to regulatory authorities, licensing bodies, or law enforcement agencies where required to do so by law, court order, or regulatory instruction. b58q will not notify you of such disclosures where doing so would be unlawful or would prejudice an investigation.
• Corporate Restructuring: In the event of a merger, acquisition, or sale of assets involving b58q's operating entities, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

7. International Data Transfers

b58q operates as an international platform, and some of the third-party service providers with whom we share data — including KYC partners, cloud infrastructure providers, and fraud prevention vendors — may process data in jurisdictions outside Pakistan. Where such transfers occur, b58q takes steps to ensure that appropriate safeguards are in place, including:

• Contractual data protection clauses equivalent to internationally recognised standard contractual terms between b58q and its data processors.
• Verification that recipient entities are located in jurisdictions with data protection standards adequate to those required under b58q's licensing obligations.
• Encryption of personal data in transit and at rest, regardless of the jurisdiction in which it is processed.

By registering a b58q account, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan for the operational purposes described in this Policy.

8. Data Retention

b58q retains personal data for as long as is necessary to fulfil the purposes described in this Policy, and for as long as required by b58q's gaming licence conditions and applicable financial regulations. The following general retention periods apply:

• Active account data: Retained for the full duration of the account's active status.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of account closure, in compliance with AML regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping obligations.
• Responsible gaming records (self-exclusion, limit settings): Retained for the duration of the exclusion period plus five (5) years thereafter.
• Support communications: Retained for three (3) years from the date of closure of the support interaction.
• Marketing consent records: Retained for three (3) years from the date of last consent action, or until consent is withdrawn, whichever is earlier.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, such that it can no longer be associated with any identifiable individual.

9. Your Data Protection Rights

As a b58q player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact b58q's Data Protection team using the contact details in Section 14. b58q will respond to all valid data subject requests within 30 calendar days.

• Right of Access: You may request a copy of the personal data b58q holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data b58q holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and there is no other legal basis, or where you object to processing and there are no overriding legitimate grounds. Note that this right is subject to b58q's legal data retention obligations described in Section 8.
• Right to Restriction of Processing: In certain circumstances, you may request that b58q restricts the processing of your data — for example, while the accuracy of the data is contested, or pending resolution of an objection to processing.
• Right to Data Portability: Where processing is based on consent or contract performance and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing of your personal data where b58q relies on legitimate interests as the legal basis. b58q will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where b58q relies on your consent as the basis for processing, you may withdraw that consent at any time via your account settings or by contacting support.

10. Children & Minors

The b58q platform is strictly intended for adults aged 21 years and over. b58q does not knowingly collect personal data from individuals under the age of 21, and registration by persons under this age is expressly prohibited under b58q's Terms and Conditions.

If b58q becomes aware, whether through our own age verification procedures or through a third-party notification, that personal data has been collected from an individual under the age of 21, we will take immediate steps to suspend the relevant account, reverse any transactions where possible, and securely delete all associated personal data.

If you are a parent or guardian and believe that your child has registered an account on b58q, please contact our support team immediately at [email protected]. We will treat all such notifications as priority matters and respond within one business day.

11. Security Measures

b58q employs a layered security framework designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• Encryption: All data in transit is protected by TLS 1.2 or higher. Sensitive data at rest — including KYC documents and payment information — is encrypted using AES-256.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All internal access is governed by role-based permissions, multi-factor authentication, and detailed access logging.
• Infrastructure Security: b58q's platform infrastructure is hosted in ISO 27001-certified data centres with physical security controls, network intrusion detection, and 24/7 security monitoring.
• Vulnerability Management: Regular penetration testing and vulnerability scanning are conducted by independent security professionals. Critical vulnerabilities are remediated within defined SLA timeframes.
• Incident Response: b58q maintains a documented data breach response plan. In the event of a breach that is likely to result in risk to affected players, b58q will notify affected individuals and relevant authorities in accordance with applicable legal requirements.
• Employee Training: All b58q personnel with access to personal data receive mandatory data protection and security awareness training at the time of onboarding and on an annual basis thereafter.

While b58q implements robust security measures, no online platform can guarantee absolute security. Players are responsible for maintaining the security of their own account credentials and should notify b58q immediately of any suspected unauthorised access.

12. Third-Party Services & Links

The b58q platform may contain links to or integrations with third-party services — including payment processors, identity verification providers, and game software studios. This Privacy Policy applies solely to data processed by b58q directly. It does not cover the privacy practices of third-party services accessed via the b58q platform.

b58q encourages all players to review the privacy policies of any third-party services with which they interact in connection with their b58q account — in particular, the privacy policies of payment providers such as JazzCash and EasyPaisa, which govern how those providers handle your payment data on their own platforms.

b58q is not responsible for the privacy practices, content, or security of any third-party services and cannot accept liability for data handled independently by those parties.

13. Updates to This Privacy Policy

b58q reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. Where a material change is made to this Policy, b58q will notify registered players via a notification displayed upon login to the b58q platform, and — where a valid email address is on file — by email, at least seven (7) days prior to the change taking effect.

Continued use of the b58q platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. We therefore recommend that you review this page periodically. The effective date and version number at the top of this document will be updated with each revision.

If you do not accept a revised Privacy Policy, you must cease using the platform and may request account closure in accordance with the procedure described in b58q's Terms and Conditions.

14. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or b58q's handling of your personal data, please contact our Data Protection team using the details below. All privacy-related enquiries are treated with strict confidentiality.

• Data Protection Email: [email protected]
• Subject Line: Please use "Privacy Request — [Your Registered Email]" for data subject access and erasure requests
• Response Time: Privacy enquiries acknowledged within 2 business days; substantive responses within 30 calendar days
• Live Chat: Available within the b58q platform after login, 24 hours a day, seven days a week

If you are dissatisfied with b58q's response to a privacy complaint, you may escalate your complaint to the data protection or gaming regulatory authority applicable under b58q's international gaming licence. Details of the relevant supervisory authority are available upon request from b58q's Data Protection team.