mqwin Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how mqwin ("the Company", "we", "us", "our") collects, uses, stores, discloses, and protects personal information relating to individuals ("you", "your", "Player") who access or use the mqwin platform available at mqwin.bet, including its associated subdomains, mobile applications, and related digital services (collectively, "the Platform").

mqwin operates as an internationally licensed online gambling and sports betting platform serving English-speaking Pakistani users across Karachi, Lahore, Faisalabad, Islamabad, and elsewhere. As part of that operation, we are required to process certain personal data to deliver our services, comply with our regulatory obligations, and maintain the security and integrity of the Platform. We take those responsibilities seriously.

This Policy should be read alongside mqwin's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and mqwin. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

---

2. Data Controller

For the purposes of applicable data protection legislation, mqwin acts as the data controller in respect of the personal data it collects and processes in connection with the Platform. This means mqwin determines the purposes for which your personal data is processed and the means by which that processing is carried out.

Where mqwin engages third-party service providers — such as payment processors, game content providers, or KYC verification partners — those third parties may act as data processors on mqwin's behalf, processing your data only on mqwin's documented instructions and subject to appropriate contractual safeguards. A non-exhaustive list of the categories of third parties we work with is set out in Section 6 of this Policy.

---

3. Personal Data We Collect

The categories of personal data that mqwin collects and processes in connection with the Platform include, but are not limited to, the following:

3.1 Identity and Registration Data

When you register a Player account on mqwin, we collect information necessary to establish and verify your identity, including your full legal name, date of birth, gender, and a copy of a government-issued identification document such as your CNIC, passport, or driver's licence.

3.2 Contact Data

We collect your email address, residential address (including city and postal code), and where provided, your mobile phone number. This information is used for account communications, KYC correspondence, and, where you have opted in, marketing communications.

3.3 Financial Data

To process deposits and withdrawals, we collect details of the payment methods you use — including JazzCash account identifiers, EasyPaisa mobile numbers, bank account details (HBL, UBL, Meezan Bank), and masked card numbers for Visa and Mastercard transactions. We do not store full card numbers or CVV codes on our servers; these are handled directly by our certified payment processors.

3.4 Transaction and Gaming Data

We maintain records of all financial transactions associated with your account, including deposit amounts, withdrawal requests, bonus activations, and wagering history across sports betting markets — including cricket and PSL — and casino games. This data is used for account management, dispute resolution, and our regulatory reporting obligations.

3.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical information including your IP address, device type and operating system, browser type and version, session timestamps, pages visited, and referring URLs. This data is used for security monitoring, fraud detection, and Platform performance optimisation.

3.6 Communications Data

Where you contact mqwin's customer support team or submit a complaint, we retain records of that correspondence, including the content of messages, the date and time of contact, and any resolution reached. This allows us to maintain a complete and accurate history of interactions with each Player.

3.7 Responsible Gaming Data

Where you make use of mqwin's responsible gaming tools — including deposit limits, self-exclusion requests, or cooling-off periods — we record those preferences and the dates on which they were applied. This data is treated with heightened sensitivity and is used solely for the purpose of implementing and enforcing the Player's stated responsible gaming preferences.

---

4. How We Collect Your Data

mqwin collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact customer support, or update your account preferences.
• Automatically — when you access or browse the Platform, through server logs, session tracking, and cookies and similar tracking technologies as described in Section 9.
• From third parties — including identity verification providers, fraud prevention agencies, payment processors, and where applicable, publicly available data sources used in AML screening.

---

5. Purpose & Legal Basis for Processing

mqwin processes personal data only for specific, documented purposes and only where a valid legal basis for that processing exists. The table below summarises the primary purposes for which we process Player data and the corresponding legal basis in each case.

---

6. Sharing Your Personal Data

mqwin does not sell, rent, or trade your personal data to third parties for their own independent commercial purposes. We may, however, share your personal data with the following categories of recipients where necessary and proportionate to the purposes set out in this Policy:

• Payment processors and banking partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card scheme partners, for the purpose of processing financial transactions on your account.
• Identity verification and KYC providers — third-party services that assist mqwin in verifying player identities and screening against sanction lists and politically exposed person (PEP) databases.
• Game content providers — including Ezugi and other licensed casino game studios, which may receive session and wagering data necessary to deliver their game content through the Platform.
• Fraud prevention and cybersecurity providers — specialist services that help mqwin detect, investigate, and prevent fraudulent activity and unauthorised access to the Platform.
• Customer support platform providers — third-party helpdesk and live chat software operators who process support communications on mqwin's behalf.
• Regulatory and law enforcement authorities — where mqwin is required by applicable law, court order, or regulatory directive to disclose personal data to governmental or supervisory bodies.
• Professional advisers — including lawyers, auditors, and accountants, subject to obligations of confidentiality, where necessary for mqwin to obtain professional advice or manage legal proceedings.

Where mqwin shares data with third-party processors, it does so under contractual terms that require those processors to implement appropriate technical and organisational security measures and to process data only in accordance with mqwin's written instructions.

---

7. Data Retention

mqwin retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overriding retention obligations imposed by applicable law or our gaming licence conditions. The following general retention periods apply:

• Active account data — retained for the duration of your account relationship with mqwin.
• KYC and identity documents — retained for a minimum of five (5) years following account closure or the last transaction, in accordance with standard AML compliance requirements.
• Transaction and wagering records — retained for a minimum of five (5) years following each transaction date.
• Customer support correspondence — retained for three (3) years following the resolution of the relevant inquiry or complaint.
• Marketing consent records — retained for as long as the consent remains active and for three (3) years following withdrawal of consent, to demonstrate compliance.
• Technical and log data — typically retained for twelve (12) months for security monitoring purposes, after which it is anonymised or deleted.

Where personal data is no longer required for any documented purpose and no legal retention obligation applies, mqwin will securely delete or irreversibly anonymise that data in accordance with its internal data lifecycle management procedures.

---

8. Security Measures

mqwin implements a comprehensive set of technical and organisational security measures to protect Player personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mqwin Platform
• Encryption of sensitive data at rest within mqwin's database infrastructure
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication requirements for administrative access to systems holding personal data
• Continuous automated monitoring for suspicious access patterns, intrusion attempts, and anomalous activity
• Regular penetration testing and security audits conducted by independent cybersecurity specialists
• Documented incident response procedures, including mandatory breach notification protocols

While mqwin takes all reasonable and proportionate steps to protect your personal data, no transmission of data over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying mqwin immediately if you suspect any unauthorised access to your account.

---

9. Cookies & Tracking Technologies

mqwin uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the mqwin website. The following categories of cookies are used on the Platform:

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may affect the functionality of the Platform. For marketing cookies, you can withdraw your consent at any time through the cookie preference centre accessible in the Platform footer.

---

10. International Data Transfers

As an internationally licensed online gambling operator, mqwin may transfer personal data to, and process it in, countries outside Pakistan. Where such transfers occur, mqwin ensures that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that applied within the Platform's primary operating jurisdiction. These safeguards may include standard contractual clauses, data processing agreements incorporating appropriate technical and organisational measures, or transfers to recipients located in jurisdictions that provide an adequate level of data protection as recognised by the relevant licensing authority.

By using the mqwin Platform, you acknowledge and consent to the transfer of your personal data to countries outside Pakistan where such transfers are necessary to provide the services described in these Terms.

---

11. Your Data Protection Rights

Subject to applicable law and certain exceptions, you have the following rights in respect of the personal data mqwin holds about you. To exercise any of these rights, please contact mqwin's support team using the contact details provided in Section 15.

---

12. Protection of Minors

The mqwin Platform is strictly intended for adults aged 21 years and over. mqwin does not knowingly collect, process, or retain personal data from individuals under the age of 21. If mqwin becomes aware that personal data has been collected from a person under the minimum age, that data will be immediately deleted and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor in your care has registered an account on mqwin, please contact us immediately at the email address set out in Section 15 so that we can investigate and take appropriate action without delay.

---

13. Third-Party Content

The mqwin Platform may reference or display content sourced from third-party game providers and service partners. These third-party services operate under their own privacy policies and data practices, which are independent of this Policy. mqwin is not responsible for the privacy practices of third-party service providers operating within the Platform. We encourage you to review the privacy documentation of any such providers where relevant to your use of the Platform.

---

14. Changes to This Privacy Policy

mqwin reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or change the basis on which we share data with third parties — we will notify registered Players by means of a prominent notice on the Platform and/or an email to the address associated with your account. The updated Policy will specify the date on which it takes effect.

Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. We recommend reviewing this Policy periodically to stay informed of how mqwin protects your information.

---

15. Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or wish to submit a data-related complaint, please contact the mqwin Data Protection team. All requests will be acknowledged within five (5) business days and responded to within thirty (30) days, in accordance with applicable data protection obligations.

You may reach the mqwin support and data protection team at:

mqwin is committed to resolving all privacy-related concerns fairly and transparently. Where a concern cannot be resolved through our internal process, you may have the right to escalate the matter to the relevant data protection supervisory authority under mqwin's applicable licensing jurisdiction.