b58q Privacy Policy

This Privacy Policy ("Policy") describes how b58q ("b58q", "we", "us", "our") collects, uses, stores, shares, and protects personal information provided by or generated by users ("Player", "you", "your") of the b58q online casino and sports betting platform, accessible at b58q.vip.

This Policy applies to all personal data processed in connection with your use of the b58q Platform, whether you access the service via a desktop browser, mobile browser, or any other supported device. It covers data collected at account registration, during the course of gameplay, during deposit and withdrawal transactions, and through any communications you have with b58q customer support.

By registering a b58q account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the b58q Terms & Conditions and Responsible Gaming Policy, which together form the full agreement between you and b58q.

b58q acts as the data controller in respect of the personal information collected through the b58q Platform. As data controller, b58q determines the purposes for which and the manner in which your personal data is processed. b58q operates under an international gaming licence and its data handling practices are subject to the data protection obligations imposed by the relevant licensing authority.

If you have any questions about how b58q processes your personal data, or if you wish to exercise any of your privacy rights, you may contact the b58q Data Privacy team through the contact details provided in Section 14 of this Policy.

b58q collects personal information through several channels. The categories of data we collect are set out below:

3.1 Registration Data. When you create a b58q account, we collect:

• Full legal name
• Date of birth (to verify that you are 21 years of age or older)
• Email address
• Mobile phone number
• Residential address (city, province, postal code)
• Username and password (password is stored in encrypted form only)

3.2 Identity Verification (KYC) Data. As part of our Know Your Customer obligations under our gaming licence, we may collect:

• Copies of government-issued identification documents (CNIC, passport, or driving licence)
• Proof of address documents (utility bill, bank statement)
• Proof of payment method ownership (mobile wallet screenshot, bank statement header)

3.3 Transaction Data. We collect records of all financial transactions conducted on the Platform, including deposit amounts, withdrawal amounts, timestamps, payment method used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or crypto), and transaction reference numbers.

3.4 Gameplay Data. We collect records of your activity on the Platform, including games played, bet amounts, game outcomes, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, and dispute resolution.

3.5 Technical Data. We automatically collect certain technical information when you access the Platform, including your IP address, device type, browser type and version, operating system, and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance analysis.

3.6 Communications Data. If you contact b58q customer support via live chat or email, we retain records of those communications for quality assurance, training, and dispute resolution purposes.

b58q uses the personal data it collects for the following purposes:

b58q does not use your personal data for any purpose not listed above without first obtaining your explicit consent or where otherwise permitted by applicable law.

b58q processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process transactions, and deliver the b58q service as described in the Terms & Conditions.
• Legal obligation: Processing required to comply with our gaming licence obligations, including KYC verification, anti-money laundering checks, and responsible gaming monitoring.
• Legitimate interests: Processing conducted for fraud prevention, security monitoring, platform improvement, and customer support, where b58q's legitimate interests do not override your privacy rights.
• Consent: Processing for optional promotional communications, where you have explicitly opted in. You may withdraw this consent at any time by contacting b58q support or updating your account preferences.

b58q does not sell or rent your personal data. We may share your data with the following categories of third parties, strictly for the purposes described:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners receive the transaction data necessary to process your PKR deposits and withdrawals. These processors are contractually bound to handle your data securely and only for payment purposes.
• Identity verification providers: Third-party KYC service providers who assist b58q in verifying player identity and age as required under our gaming licence.
• Game content providers: Licensed game studios and sportsbook data providers that power the b58q game library and sports markets. These providers receive only the session and gameplay data necessary to deliver the game experience.
• Regulatory and law enforcement authorities: b58q will disclose personal data to gaming regulators, law enforcement agencies, or courts where required by law, court order, or the terms of our gaming licence.
• Fraud prevention services: Industry-standard fraud detection and responsible gaming screening services that help b58q identify and prevent fraudulent account activity.

In all cases where b58q shares your data with third parties, we require those parties to maintain appropriate data security standards and to use your data only for the stated purpose.

Given that the majority of b58q's Pakistani players transact via local payment methods — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — b58q applies specific data handling standards to PKR transaction data:

• Full payment account credentials (such as JazzCash wallet PINs or bank account passwords) are never requested by b58q and must never be shared with any b58q representative.
• Transaction reference numbers, deposit amounts, and withdrawal confirmations are stored securely and retained in accordance with the data retention schedule in Section 9.
• b58q does not store full bank account numbers or complete mobile wallet account numbers on its own servers. Payment data is tokenised and processed via the relevant payment gateway infrastructure.
• In the event of a payment dispute, b58q may share relevant transaction records with the relevant payment processor to facilitate resolution.

b58q uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and monitor Platform security. The categories of cookies used are:

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your b58q account during a browsing session. These cookies cannot be disabled without impairing Platform functionality.
• Performance cookies: Used to collect anonymised data about how players interact with the Platform — such as which pages are visited most frequently — to help b58q improve the user experience. No personally identifiable information is collected via performance cookies.
• Security cookies: Used to detect and prevent fraudulent access attempts, bot traffic, and other security threats to the b58q Platform.
• Preference cookies: Used to remember your language, display, and account settings between sessions.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your b58q account. b58q does not use third-party advertising or behavioural targeting cookies.

b58q retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods required under our gaming licence:

• Account and KYC data: Retained for a minimum of 5 years from the date of account closure, as required by anti-money laundering regulations applicable under b58q's gaming licence.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gameplay records: Retained for a minimum of 3 years from the date of each gaming session.
• Communications data: Retained for a minimum of 2 years from the date of the communication, or longer if the communication relates to an unresolved dispute.
• Technical and session data: Typically retained for 12 months from the date of collection, unless retained longer for active security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with b58q's internal data destruction procedures.

As a b58q player, you have the following rights in relation to your personal data. To exercise any of these rights, contact b58q support via the details in Section 14.

The b58q Platform is strictly for players aged 21 years and over. b58q does not knowingly collect personal data from individuals under the age of 21. If b58q becomes aware that personal data has been collected from a minor, that data will be immediately deleted and the associated account will be suspended.

If you are a parent or guardian and you believe that your child has registered on the b58q Platform, please contact b58q support immediately using the details in Section 14. We take underage access seriously and will act promptly on any such report.

b58q implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest, including passwords and KYC documents, is encrypted using industry-standard encryption algorithms.
• Access controls: Access to player data within b58q's internal systems is restricted on a strict need-to-know basis, with role-based permissions and multi-factor authentication for all staff access.
• Penetration testing: b58q's infrastructure undergoes regular security testing and vulnerability assessments conducted by independent security specialists.
• Incident response: b58q maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights, b58q will notify affected players and the relevant regulatory authority within the timeframes required by applicable obligations.

While b58q takes every reasonable precaution to protect your data, no digital system can be guaranteed to be 100% secure. You are also responsible for keeping your b58q account credentials confidential and for using a strong, unique password.

b58q reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or the services we offer. Any material changes to this Policy will be communicated to registered players via the email address on file or via an in-platform notification.

The effective date at the top of this Policy will be updated each time a revision is made. Continued use of the b58q Platform following notification of a policy update constitutes your acceptance of the revised Privacy Policy. We recommend reviewing this page periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way b58q handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 inside your b58q Account dashboard — recommended for urgent data or account security matters.
• Email: [email protected]

Please include your registered username and a clear description of your request or concern so that the b58q team can assist you efficiently. b58q aims to acknowledge all privacy-related requests within 48 hours and to resolve them within 30 days.

If you are not satisfied with b58q's response to a privacy concern, you may escalate your complaint to the relevant gaming authority or data protection supervisory body applicable under b58q's licence jurisdiction.