qcs86 Privacy Policy —
How We Collect, Protect, and
Handle Your Personal Data

qcs86 ("we", "us", "our", "the Platform") is the data controller responsible for the personal information collected through the qcs86 website and all associated services accessible at qcs86.net. As data controller, qcs86 determines the purposes and means by which your personal data is processed.

For all data protection enquiries, subject access requests, correction requests, deletion requests, or complaints relating to the handling of your personal data by qcs86, you may contact our Data Protection team via the live chat available inside your qcs86 account dashboard, or by writing to [email protected] with "Data Protection Request" in the subject line.

This Privacy Policy applies to all individuals who visit, register on, or use the qcs86 Platform, including registered account holders, prospective players who begin but do not complete registration, and visitors who browse the Platform without registering.

qcs86 collects personal data through several channels: directly from you when you register, make deposits, or contact support; automatically through your use of the Platform; and from third-party payment processors and identity verification providers as part of our KYC process. The categories of personal data we collect are set out below.

We do not collect sensitive personal data such as biometric data, health information, political opinions, or religious beliefs. We collect only the data that is necessary for the purposes described in this Privacy Policy.

qcs86 uses the personal data we collect for the following purposes:

• Account creation and management: To register your qcs86 account, verify your identity, authenticate your logins, and maintain the security and integrity of your account throughout your use of the Platform.
• Age verification and KYC compliance: To verify that you are 21 years of age or older as required by our gaming licence conditions, and to fulfil our obligations under applicable anti-money-laundering (AML) and know-your-customer (KYC) requirements.
• Payment processing: To process your deposits and withdrawal requests via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other supported payment methods. Financial data is shared with our licensed payment processing partners solely for the purpose of executing your transactions.
• Platform operation and game delivery: To deliver the casino games, sports betting markets, bingo products, and other Platform features you access. Gaming activity data is used to calculate real-time balances, record wager outcomes, and apply bonus terms correctly.
• Customer support: To respond to your enquiries, resolve complaints, investigate disputed transactions, and provide assistance with your qcs86 account. Support communications are retained for quality assurance and dispute resolution purposes.
• Responsible gaming: To monitor account activity for indicators of problem gambling behaviour, enforce self-exclusion requests, apply deposit and loss limits, and comply with our responsible gaming obligations. This use of gaming activity data is in the legitimate interest of protecting vulnerable players.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, underage gambling, and other prohibited conduct on the Platform. Technical data including IP addresses and device identifiers is used for this purpose.
• Marketing communications: To send you promotional offers, bonus notifications, PSL season updates, and other marketing communications via SMS, email, or in-platform notification — but only where you have provided consent to receive such communications or where permitted under applicable law. You may withdraw marketing consent at any time through your Account Settings.
• Legal and regulatory compliance: To fulfil qcs86's obligations under its gaming licence, applicable AML legislation, tax reporting requirements, and any other applicable law or regulatory direction.

qcs86 processes your personal data on the following legal bases depending on the processing activity:

• Performance of a contract: Processing necessary to deliver the qcs86 Platform services you have registered for, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations under our gaming licence conditions, age verification requirements, and tax reporting obligations.
• Legitimate interests: Processing carried out for qcs86's legitimate interests in operating a secure, fraud-free platform, including fraud detection, security monitoring, responsible gaming oversight, and improving the Platform experience — where such interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have expressly opted in to receive such communications. Consent may be withdrawn at any time.

qcs86 shares your personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

• Licensed payment processors: JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank receive the financial data necessary to process your deposits and withdrawals. These providers are bound by their own data protection obligations and are not permitted to use your financial data for any purpose other than processing your transactions.
• Game technology providers: Casino game providers such as Evolution Gaming, Pragmatic Play, PG Soft, Ezugi, and Hacksaw Gaming receive the gaming session data necessary to deliver their games and calculate outcomes. These providers operate under their own licences and data protection agreements with qcs86.
• Identity verification providers: Third-party KYC and age verification service providers receive identity data (including CNIC information) for the purpose of verifying your identity and age in compliance with our regulatory obligations. These providers are contractually bound to process your data only for verification purposes.
• Fraud prevention and security services: Specialist fraud detection and cybersecurity service providers may receive technical data including IP addresses and device identifiers for the purpose of identifying and preventing fraudulent activity.
• Regulatory and law enforcement authorities: qcs86 will disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where required to do so by law, by regulatory direction, or by a valid court order. qcs86 will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of qcs86's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material change to the processing of your data that results from it.

All third parties with whom qcs86 shares personal data are required to maintain appropriate technical and organisational data security measures and to process your personal data only for the specified purpose, in accordance with qcs86's written instructions and applicable data protection law.

qcs86 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, including for the duration of your account and for a period thereafter as required by our legal and regulatory obligations.

• Active account data — Retained for the full duration of your active qcs86 account relationship.
• Identity and KYC data — Retained for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements. In some jurisdictions, a longer retention period may apply.
• Financial transaction data — Retained for a minimum of five (5) years following the date of each transaction, for financial reporting and regulatory compliance purposes.
• Gaming activity logs — Retained for a minimum of three (3) years following account closure for dispute resolution and regulatory audit purposes.
• Support communications — Retained for up to two (2) years following the closure of each support interaction, for quality assurance and dispute reference purposes.
• Marketing preference data — Retained until you withdraw consent or close your account, at which point marketing data is deleted within 30 days.

Once the applicable retention period expires, qcs86 will securely delete or anonymise your personal data so that it can no longer be associated with you.

qcs86 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the qcs86 servers.
• Encryption of stored sensitive data including CNIC numbers and financial account identifiers using industry-standard encryption at rest.
• Role-based access controls ensuring that qcs86 staff can only access personal data where strictly necessary for their job function.
• Two-factor authentication available to all players for account access, and mandatory for qcs86 administrative access.
• Regular penetration testing and security audits of the qcs86 Platform infrastructure by independent cybersecurity specialists.
• Automated intrusion detection and real-time monitoring of the qcs86 server environment.
• Secure disposal procedures for physical and digital data at the end of the applicable retention period.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, qcs86 will notify affected users without undue delay and will take all reasonable steps to mitigate the impact of the breach.

qcs86 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device by your browser when you visit qcs86. They allow qcs86 to recognise your device, maintain your session, and improve your Platform experience.

qcs86 uses the following categories of cookies:

• Strictly necessary cookies: These are essential to the operation of the qcs86 Platform and cannot be disabled. They include session authentication cookies that keep you logged in during your visit, security cookies that protect against cross-site request forgery, and load balancing cookies. These cookies do not collect personal data for marketing purposes.
• Functional cookies: These cookies remember your preferences such as your preferred language, display settings, and responsible gaming tool configurations. They are not strictly necessary but improve your Platform experience. You may disable these in your browser settings, though doing so may affect Platform functionality.
• Analytics cookies: qcs86 uses first-party analytics to understand how players navigate the Platform — which game categories are most visited, where players encounter friction, and how Platform performance can be improved. This data is aggregated and does not identify individual players.
• Marketing and attribution cookies: Where you have arrived at qcs86 through a specific promotional channel, attribution cookies record the source of your visit for internal reporting purposes. qcs86 does not use third-party advertising cookies or share cookie data with ad networks.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your qcs86 account. For instructions on managing cookies in your specific browser, consult your browser's help documentation.

qcs86 treats the protection of minors as a non-negotiable obligation. At the point of registration, every prospective player is required to provide their CNIC number, which encodes the holder's date of birth. qcs86's automated KYC system verifies the age indicated by the CNIC before account activation is permitted. Where the CNIC indicates that the applicant is under 21, the registration is rejected and no account is created.

If qcs86 discovers at any subsequent point that an active account is held by a person under the age of 21 — whether through KYC verification, a complaint, or any other means — the account will be immediately suspended, all wagering activity during the underage period will be voided, any deposits made will be returned to the originating payment method net of any winnings accumulated, and the incident will be reported to relevant regulatory authorities where required by law.

If you believe that a minor in your household has registered on qcs86, please contact qcs86 Customer Support immediately via the 24/7 live chat. We will investigate and act on all such reports promptly.

qcs86 respects your rights over your personal data. Depending on the applicable data protection laws in your jurisdiction, you may have the following rights with respect to the personal data qcs86 holds about you:

To exercise any of these rights, contact the qcs86 Data Protection team via live chat inside your qcs86 account or by writing to [email protected] with "Data Protection Request" in the subject line. qcs86 will respond to all valid data subject requests within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, qcs86 may extend this period by an additional 60 days, with prior notice to you.

qcs86 may decline requests where they conflict with qcs86's legal obligations, where the requested data cannot be separated from data pertaining to other individuals, or where the request is manifestly unfounded or excessive.

As an internationally licensed online gaming platform, qcs86 may transfer your personal data to countries outside Pakistan for processing by the third-party service providers described in this Privacy Policy, including game technology providers, fraud prevention services, and cloud infrastructure providers that operate globally.

Where personal data is transferred internationally, qcs86 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan. Such safeguards include contractual data processing agreements incorporating internationally recognised data protection clauses, and the transfer of data only to service providers in jurisdictions with recognised adequate data protection standards.

Your data will not be transferred to any jurisdiction for the purpose of avoiding data protection obligations applicable to qcs86 under its gaming licence or applicable law.

The qcs86 Platform integrates with third-party payment services including JazzCash and EasyPaisa for transaction processing. When you initiate a payment transaction, you will interact with the interface and systems of the relevant payment provider, which is governed by that provider's own terms and privacy policy. qcs86 does not control and is not responsible for the privacy practices of third-party payment providers.

Casino games delivered on qcs86 by third-party game providers such as Evolution Gaming, Pragmatic Play, and PG Soft are delivered through secure APIs. These providers collect game session data necessary to calculate game outcomes and return results to qcs86. Their data processing activities are governed by their own data processing agreements with qcs86 and their applicable privacy policies.

qcs86 does not embed third-party advertising networks, social media tracking pixels, or unrelated third-party analytics scripts on the Platform. The only third-party scripts present on qcs86 are those directly necessary for payment processing, game delivery, and first-party analytics.

qcs86 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — qcs86 will notify you via a prominent notice on the Platform and, where appropriate, by email to your registered address, at least 14 days before the changes take effect.

Minor clarifications, corrections of typographical errors, or amendments that do not materially affect your privacy rights may be made without prior notice. The version date displayed at the top of this document indicates when the current version was last revised. We recommend checking this page periodically for updates.

Your continued use of qcs86 following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept the amended Privacy Policy, you must cease using the Platform and contact support to close your account.

For all privacy-related enquiries, data subject access requests, or complaints about how qcs86 handles your personal data, please contact the qcs86 Data Protection team through one of the following channels:

• Live chat: Available 24/7 inside your qcs86 account dashboard. Average response time is under 4 minutes.
• Email: Write to [email protected] with "Data Protection Request" or "Privacy Complaint" in the subject line. Written responses are provided within 5 business days for standard enquiries and within 30 days for formal subject access requests.

If you are not satisfied with qcs86's response to your privacy complaint, you may escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to your account, or to the regulatory body that issued qcs86's gaming licence.