qa999 Privacy Policy

1. Introduction

1.1 qa999 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every player who uses our online betting and casino services. This Privacy Policy ("Policy") sets out a transparent account of the types of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to you as a data subject.

1.2 This Policy applies to all users of the qa999 platform, whether accessed via desktop browser, mobile browser, or any other means, and covers all services offered by qa999, including sports betting, live casino, slots, and any other gaming or account-related features.

1.3 This Policy should be read together with the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated into the overall user agreement between you and qa999.

1.4 We review and update this Policy periodically to reflect changes in our data practices, applicable law, or the services we offer. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Material changes will be communicated to registered players via the contact details held on their account.

2. Data Controller

2.1 For the purposes of applicable data protection law, qa999 acts as the data controller in respect of personal data collected through the qa999 platform. As data controller, qa999 determines the purposes and means of processing your personal data.

2.2 If you have any questions, concerns, or requests regarding this Policy or the processing of your personal data, please contact our dedicated data protection team using the contact details in Section 15 of this Policy.

2.3 Where qa999 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those providers act as data processors and are bound by contractual obligations that require them to process data only on qa999's instructions and to maintain appropriate security measures.

3. Data We Collect

3.1 The personal data we collect from you falls into the following categories:

3.1 Identity & Contact Data

• Full legal name as it appears on your national identity card (NID) or passport
• Date of birth (used to verify the 21+ age requirement)
• Mobile phone number (used for account access, 2FA, and communications)
• Email address (if provided during registration or support interactions)
• Residential address in Bangladesh (if requested during identity verification)

3.2 Financial & Transaction Data

• Mobile wallet numbers associated with bKash, Nagad, Rocket, or Upay accounts linked to deposits and withdrawals
• Bank account details (account number, bank name) for players who transact via Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank
• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Betting activity, including stake amounts, markets wagered on, and win/loss outcomes

3.3 Technical & Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Unique device identifiers and session tokens
• Pages visited, features used, time spent on platform, and navigation paths
• Error logs and performance data generated during platform use

3.4 Communications Data

• Content of messages exchanged with qa999 customer support
• Responses to surveys, promotions, or feedback requests
• Records of consent given or withdrawn for marketing communications

3.5 Verification Documents

• Copies of identity documents (NID, passport, driving licence) submitted during the account verification process
• Proof-of-payment documents (mobile wallet screenshots, bank statements) submitted to support withdrawal requests or source-of-funds checks
• Selfie or liveness images submitted for biometric verification purposes, where applicable

4. How We Collect Your Data

4.1 Directly from you. The majority of data we hold is provided by you directly when you register an account, complete identity verification, make a deposit or withdrawal, place a bet, or contact our support team.

4.2 Automatically during platform use. When you access qa999, our servers and analytics tools automatically collect technical data about your device and browsing behaviour. This includes cookies, session tokens, and server log data.

4.3 From payment partners. When you deposit or withdraw using bKash, Nagad, Rocket, Upay, or a bank transfer, we receive transaction confirmation data from the payment provider to reconcile your account balance.

4.4 From identity verification providers. Where third-party document verification services are used to validate your NID or passport, those providers return a verified status and relevant identity attributes to qa999.

4.5 From fraud prevention tools. Fraud detection platforms may provide qa999 with risk scores or flags associated with your device, IP address, or transaction patterns to assist in identifying potentially fraudulent activity.

5. Purposes & Legal Basis for Processing

5.1 The table below sets out the purposes for which qa999 processes your personal data and the legal basis relied upon for each purpose.

5.2 Where processing is based on your consent (for example, receiving promotional emails or SMS offers from qa999), you have the right to withdraw that consent at any time by contacting support or updating your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Data Sharing & Disclosure

6.1 qa999 does not sell, rent, or otherwise trade your personal data to third parties for their own marketing or commercial purposes. Data is shared only where necessary to deliver our services, comply with our legal obligations, or protect the legitimate interests of qa999 and its players.

6.2 Payment processors. We share financial and identity data with payment partners (including bKash, Nagad, Rocket, Upay, and partner banks) strictly to process your deposit and withdrawal transactions. Each payment partner is bound by its own privacy and security standards.

6.3 Identity verification providers. We share identity document data with accredited third-party KYC (Know Your Customer) verification services to confirm that you meet our age and identity requirements. These providers process data only for verification purposes and are contractually prohibited from using it for any other purpose.

6.4 Fraud prevention and AML partners. Transaction and device data may be shared with fraud analytics platforms and financial crime screening services to detect and prevent money laundering, account takeover, and other fraudulent activity.

6.5 Law enforcement and regulatory bodies. We may disclose personal data to law enforcement authorities, financial intelligence units, or other regulators where required to do so by law, court order, or regulatory direction. In cases of suspected financial crime, we may be legally prohibited from notifying you of such disclosure.

6.6 Business transfers. In the event of a merger, acquisition, or sale of all or part of the qa999 business, personal data held by qa999 may be transferred to the acquiring entity. You will be notified in advance of any such transfer and your data will continue to be processed in accordance with this Privacy Policy or a successor policy.

7. Cookies & Tracking Technologies

7.1 qa999 uses cookies and similar tracking technologies to operate the platform efficiently, maintain your login session, detect security threats, and understand how players interact with our service.

7.2 Essential cookies are strictly necessary for the platform to function and cannot be disabled. They include session authentication tokens, CSRF protection cookies, and load-balancing identifiers.

7.3 Analytics cookies help us understand aggregate usage patterns on the qa999 platform, including which pages are visited most frequently, where players drop off during the deposit flow, and how long sessions last. This data is used in aggregate form and is not used to identify individual players.

7.4 Preference cookies remember your account display preferences, such as language settings and odds format, so they are restored on subsequent visits.

7.5 Security cookies assist in identifying and blocking suspicious access attempts, bot traffic, and account takeover attempts by fingerprinting device and browser characteristics.

7.6 You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the qa999 platform, including login persistence and display preferences.

8. Data Retention

8.1 qa999 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to any minimum retention periods imposed by applicable law or regulation.

8.2 Active account data (identity, contact, transaction records) is retained for the lifetime of your account plus a minimum of five years from the date of your last transaction, to satisfy anti-money-laundering record-keeping requirements.

8.3 Identity verification documents are retained for a minimum of five years from the date of verification, in line with financial crime compliance obligations.

8.4 Customer support communications are retained for a period of three years from the date of the interaction, to support the resolution of any subsequent disputes or complaints.

8.5 Technical and usage logs (IP addresses, session records, error logs) are retained for 12 months from the date of generation, after which they are automatically purged or anonymised.

8.6 Closed account data is retained for the applicable minimum retention period and then securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

8.7 Where you have submitted a self-exclusion request via our Responsible Gaming tools, a record of that self-exclusion is retained for a minimum of five years to prevent circumvention through a new account registration.

9. Security Measures

9.1 qa999 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction.

9.2 Encryption in transit. All communications between your device and the qa999 platform are encrypted using 256-bit TLS (Transport Layer Security). This applies to all page loads, API calls, login requests, and payment transactions.

9.3 Encryption at rest. Sensitive data stored in qa999's databases — including passwords (stored as salted hashes), payment method references, and identity document images — is encrypted at rest using AES-256 encryption.

9.4 Access controls. Access to personal data within qa999's internal systems is restricted to authorised personnel on a need-to-know basis. All internal access is logged and subject to periodic review.

9.5 Two-factor authentication. qa999 offers 2FA for player accounts to provide an additional layer of protection against unauthorised login. Players are strongly encouraged to enable 2FA in their account security settings.

9.6 Security audits. qa999's platform and infrastructure undergo regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.

9.7 Incident response. In the event of a confirmed personal data breach that is likely to result in a risk to your rights or freedoms, qa999 will take prompt remediation steps and notify affected individuals in accordance with applicable law.

10. Your Data Rights

10.1 As a qa999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all verified requests within 30 days.

10.2 To exercise any of the above rights, please submit a written request to [email protected]. We may need to verify your identity before processing your request to ensure data is not disclosed to an unauthorised party. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

11. International Data Transfers

11.1 qa999 primarily processes and stores data within secure data centres serving the South Asia region. However, some of our third-party service providers (including cloud infrastructure providers, fraud detection platforms, and KYC verification services) may process data in locations outside Bangladesh.

11.2 Where personal data is transferred to a third party in a jurisdiction that may not offer an equivalent level of data protection, qa999 ensures that appropriate safeguards are in place, including contractual data processing agreements incorporating standard data protection clauses, prior to authorising any such transfer.

11.3 By registering an account and using the qa999 platform, you acknowledge that your data may be transferred and processed in the locations described above, subject to the safeguards set out in this Policy.

12. Minors

12.1 The qa999 platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21.

12.2 As part of our registration process, we collect date of birth information and may carry out age verification checks using third-party identity verification services to confirm that users meet the minimum age requirement before their account is activated.

12.3 If qa999 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on qa999, please contact us immediately at [email protected].

13. Third-Party Links

13.1 The qa999 platform may contain references to payment partners, game providers, or sports data feeds operated by third parties. While we take care to work only with reputable partners, qa999 has no control over the privacy practices of third-party services accessed independently of the qa999 platform.

13.2 This Privacy Policy applies solely to data collected and processed by qa999 in the course of operating the qa999 platform. It does not extend to any third-party website, application, or service that you may access independently. We encourage you to read the privacy policies of any third-party services you use.

14. Changes to This Privacy Policy

14.1 qa999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. All revisions will be published on this page with an updated "Last Updated" date.

14.2 Where changes are material — meaning they significantly affect how your data is used or your rights as a data subject — qa999 will provide prior notice by displaying a prominent notice on the platform or by sending a notification to the contact details associated with your account, at least 14 days before the changes take effect.

14.3 Your continued use of the qa999 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes, you should discontinue use of the platform and may request closure of your account by contacting support.

15. Contact Us

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which qa999 processes your personal data, please contact our data protection team using the details below. We aim to respond to all privacy-related enquiries within five working days.

15.2 Email: [email protected]

15.3 Platform: You may also submit a data request or privacy enquiry directly through the Help & Support section of your registered qa999 account.

15.4 When submitting a request, please include your registered mobile number or username, a clear description of your request, and any relevant account reference numbers. This will help us locate your data records promptly and respond to your request without unnecessary delay.

15.5 qa999 takes all privacy complaints seriously. If you are not satisfied with our response to your complaint, you may have the right to escalate the matter to a relevant data protection authority in your jurisdiction.