mqwin Privacy Policy — How We Collect, Use, and Protect Your Personal Data

§ 01 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "mqwin", "we", "us", or "our" — the operator of the mqwin platform at mqwin.biz and any associated services.
• "Platform" — the mqwin website, mobile-optimised interfaces, APIs, and all services offered therethrough.
• "Player", "you", or "your" — any individual who accesses the Platform, registers an account, or uses any mqwin service.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, mobile number, email address, financial data, device identifiers, and IP addresses.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. In the context of this Policy, the Data Controller is mqwin.
• "Third-Party Processor" — an external service provider that processes Personal Data on behalf of mqwin under a written data processing agreement.
• "KYC" — Know Your Customer verification procedures required under mqwin's gaming licence and applicable anti-money-laundering regulations.
• "Cookie" — a small data file placed on your device by the Platform to support core functionality, analytics, and personalisation.

§ 02 Data Controller Identity

The Data Controller responsible for your Personal Data in connection with your use of the mqwin Platform is the licensed operating entity behind mqwin.biz. For all data privacy enquiries, requests to exercise your rights, or complaints relating to the processing of your Personal Data, please contact us at the address set out in Section 17 of this Policy.

§ 03 Personal Data We Collect

mqwin collects the following categories of Personal Data from Players, depending on the nature of their interaction with the Platform:

3.1 Registration Data

When you create a mqwin account, we collect your full legal name, date of birth, Pakistani mobile number (with +92 country code), email address, and a self-selected username and password. This data is required to create and maintain your account and cannot be omitted.

3.2 Identity Verification (KYC) Data

To comply with our gaming licence requirements and anti-money-laundering obligations, we collect copies of government-issued identity documents (National Identity Card, Passport, or Driver's Licence), proof of address documentation, and where applicable, source-of-funds documentation for higher-value deposits.

3.3 Financial Data

We collect records of your deposit and withdrawal transactions, including the payment method used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, or GrabPay), transaction amounts in PKR, timestamps, and transaction reference numbers. We do not store full payment account credentials — payment processing is handled by certified third-party payment processors.

3.4 Gaming Activity Data

We maintain records of all gaming and betting activity conducted through your mqwin account, including game sessions, bet amounts, outcomes, bonus utilisation, and cash-out events. This data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

3.5 Technical and Device Data

When you access the Platform, we automatically collect technical data including your IP address, browser type and version, operating system, device type and identifiers, screen resolution, session duration, and pages visited. This data is used to ensure Platform security, detect fraud, and optimise the user experience.

3.6 Communications Data

Records of your communications with mqwin customer support — including live chat transcripts, email correspondence, and any attachments you provide — are retained to document support interactions and improve service quality.

§ 04 How We Collect Your Data

mqwin collects Personal Data through the following channels:

• Directly from you: when you complete the registration form, submit KYC documentation, make deposits or withdrawal requests, contact support, or update your account settings;
• Automatically through the Platform: via cookies, server logs, and analytics tools when you access or navigate the mqwin website or mobile interface;
• From third-party payment processors: transaction confirmation data received from JazzCash, EasyPaisa, and other integrated payment partners following a completed deposit or withdrawal;
• From identity verification service providers: where we use automated or manual KYC services to validate documents submitted as part of the verification process;
• From fraud prevention and security services: IP reputation data, device fingerprinting, and behavioural analytics data used to identify and prevent fraudulent account activity.

§ 05 Why We Use Your Personal Data

mqwin processes your Personal Data for the following specific purposes:

§ 06 Legal Basis for Processing

mqwin processes your Personal Data on the following legal bases, as referenced in the table in Section 5:

• Contract Performance: processing is necessary for the performance of our contract with you — i.e., the provision of the mqwin platform services as set out in the Terms & Conditions you accepted on registration;
• Legal Obligation: processing is required to comply with applicable laws and regulations, including our gaming licence conditions, anti-money-laundering requirements, and age verification obligations;
• Legitimate Interest: processing is in our legitimate interests or those of a third party, provided those interests do not override your fundamental privacy rights. Legitimate interests include platform security, fraud prevention, and service improvement;
• Consent: where we rely on your consent as the legal basis for processing — primarily for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

§ 07 Data Sharing & Third Parties

mqwin does not sell your Personal Data. We may share your data with the following categories of third parties, strictly in accordance with the purposes described in this Policy:

7.1 Payment Service Providers

We share the minimum necessary financial data with payment processors (including JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, and GrabPay) to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.

7.2 Identity Verification Providers

KYC documentation may be processed by certified third-party identity verification service providers acting as data processors on our behalf under signed data processing agreements. These providers are permitted to use your data only for the specific purpose of identity verification as instructed by mqwin.

7.3 Regulatory and Law Enforcement Authorities

mqwin may be required to disclose Personal Data to regulatory bodies, gaming authorities, financial intelligence units, or law enforcement agencies where required by applicable law, court order, or the conditions of our gaming licence. We will, where legally permissible, inform you of such disclosure.

7.4 Game Content Providers

Certain technical data (such as session identifiers and game logs) may be shared with licensed game providers — including Evolution Gaming (EVO) and Microgaming — for the purpose of game delivery, dispute resolution, and RNG audit compliance. No personally identifiable information beyond the minimum required for game operation is shared with content providers.

7.5 Analytics and Security Providers

We use third-party analytics and security tools to monitor platform performance, detect fraud, and prevent abuse. These providers process technical data on our behalf and are contractually prohibited from using that data for their own commercial purposes.

§ 08 Data Retention Periods

mqwin retains Personal Data for the periods set out below, after which data is securely deleted or anonymised:

Where a longer retention period is required by a specific legal obligation or regulatory requirement, that longer period will apply. Following the expiry of the applicable retention period, data is deleted from live systems and backup archives within 90 days.

§ 09 Cookies & Tracking Technologies

The mqwin Platform uses cookies and similar tracking technologies to support core functionality, maintain session security, analyse usage patterns, and — where you have provided consent — deliver relevant promotional content. The following categories of cookies are used:

• Strictly Necessary Cookies: essential for the Platform to function, including session authentication, security tokens, and language preference storage. These cookies cannot be disabled without impairing Platform functionality;
• Performance and Analytics Cookies: used to collect aggregated, anonymised data about how Players interact with the Platform, enabling us to identify performance issues and improve the user experience;
• Functional Cookies: used to remember your preferences — such as your preferred login method, last visited game category, or responsible gaming tool settings — to provide a more consistent experience across sessions;
• Marketing Cookies: used only where you have explicitly consented to receive promotional content. These cookies help us deliver relevant bonus and promotional notifications based on your Platform activity.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect Platform functionality. A detailed Cookie Policy is available on request by contacting [email protected].

§ 10 Data Security Measures

mqwin implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, disclosure, or destruction:

• TLS encryption for all data transmitted between your device and mqwin servers;
• Encryption at rest for all stored Personal Data, including KYC documents and financial records;
• Bcrypt hashing for all account passwords — passwords are never stored or transmitted in plain text;
• Role-based access controls ensuring that mqwin personnel can access Personal Data only to the extent required for their specific operational function;
• Two-factor authentication for all administrative system access;
• Regular third-party penetration testing and security audits of the Platform infrastructure;
• Automated anomaly detection systems that flag unusual access patterns or data extraction attempts;
• Segregated data environments for different categories of sensitive information.

In the event of a data breach that poses a risk to your rights and freedoms, mqwin will notify affected Players and relevant regulatory authorities in accordance with applicable notification requirements and without undue delay.

§ 11 Your Data Protection Rights

Subject to applicable law and the conditions of our gaming licence, you have the following rights in relation to your Personal Data held by mqwin:

To exercise any of the rights listed above, please contact mqwin at [email protected] with your registered account identifier and a clear description of your request. We will respond within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 60 days and will notify you accordingly.

§ 12 Minors and the 21+ Requirement

As part of our KYC process, mqwin verifies the age of all registered Players before permitting deposits or gaming activity. Where mqwin has reason to believe that a Player is under 21 years of age, the account will be immediately suspended pending verification, and any funds deposited by an underage individual will be returned subject to our terms and regulatory requirements.

If you believe that an individual under 21 has registered a mqwin account using false information, please report this to us immediately at [email protected]. We take underage gambling extremely seriously and will take prompt action on any verified report.

§ 13 International Data Transfers

Some of the third-party processors used by mqwin — including game content providers and analytics platforms — may process data in jurisdictions outside of Pakistan. Where such transfers occur, mqwin ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by recognised data protection authorities;
• Data processing agreements that impose obligations on the recipient equivalent to those applicable under international data protection best practices;
• Transfer to jurisdictions that have been determined to provide an adequate level of data protection by a recognised regulatory authority.

You may request further information about the specific safeguards in place for any international data transfer by contacting mqwin at [email protected].

§ 14 Marketing Communications

mqwin may send you promotional communications — including bonus offers, PSL season promotions, and platform updates — via email or SMS to your registered Pakistani mobile number. Such communications are sent only where you have expressly opted in to receive them during registration or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings or by contacting us at [email protected] with the subject line "Unsubscribe from Marketing". Withdrawal of consent does not affect the lawfulness of marketing communications sent prior to the withdrawal.

Please note that withdrawal of marketing consent does not affect transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — which are sent as part of our contractual obligations to you and cannot be opted out of while your account remains active.

§ 15 Third-Party Links and Platforms

The mqwin Platform may contain links to third-party websites or content — for example, links to the Pakistan Cricket Board for fixture schedules or to responsible gaming resource providers. This Privacy Policy applies solely to the mqwin Platform and does not extend to any third-party websites you may access via links from the Platform.

mqwin has no control over the privacy practices of third-party websites and accepts no responsibility for their data handling. We recommend that you review the privacy policy of any third-party website you visit, particularly before submitting any personal information.

§ 16 Changes to This Privacy Policy

mqwin reserves the right to update or amend this Privacy Policy at any time. Where changes are material — affecting the basis on which we process your data, the categories of data we collect, or the rights available to you — we will notify registered Players via email to their registered address or via an in-platform notification at least 14 days before the changes take effect.

The version number and effective date at the top of this document are updated whenever the Policy is revised. We recommend that you review this page periodically. Your continued use of the mqwin Platform after any such notification constitutes acceptance of the revised Privacy Policy.

§ 17 Contact & Privacy Enquiries

For all privacy-related enquiries, data subject access requests, complaints relating to the processing of your Personal Data, or reports of underage account activity, please contact mqwin using the details below. Please include your registered account identifier or mobile number so we can locate your account promptly.

For information about the terms governing your use of the Platform, please review our Terms & Conditions. For responsible gaming support, deposit limits, and self-exclusion, please visit our Responsible Gaming page.