q99 Privacy Policy

q99 collects personal information in the following categories when you use the Platform:

• Registration data: Your full name, date of birth, email address, and mobile phone number provided when you create a q99 account.
• Identity verification data: Copies of government-issued identity documents such as a National Identity Card (NID) or passport, where required to verify your age or identity.
• Financial data: Your bKash, Nagad, Rocket, or Upay mobile wallet number used for deposits and withdrawals. We do not store full PINs or banking credentials.
• Transaction data: Records of all deposits, withdrawals, bonus credits, wagers placed, and game results associated with your q99 account.
• Device and technical data: Your IP address, browser type, operating system, device identifiers, and session duration, collected automatically when you access the Platform.
• Communications data: Records of messages you send to our support team at [email protected], including the content of those messages and any attachments.
• Usage data: Information about how you navigate the q99 Platform, including pages visited, games played, time spent, and features accessed, used to improve the Platform experience.

q99 uses your personal data for the following lawful purposes:

• To create, maintain, and manage your q99 account and provide access to the Platform's casino games, live dealer tables, slots, and sports betting markets.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels, and to maintain accurate financial records of all transactions.
• To verify your identity and age in accordance with responsible gaming obligations and our Terms & Conditions. Players must be 21 years of age or older.
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• To personalise your experience on the q99 Platform, including recommending relevant games and promotions based on your activity history.
• To send transactional communications by email or SMS, including account confirmations, deposit receipts, withdrawal notifications, and security alerts.
• To send promotional communications about q99 bonuses, seasonal offers, and new features — only where you have given explicit consent to receive such communications.
• To comply with applicable legal obligations, including responding to requests from law enforcement or regulatory authorities where required by law.
• To analyse Platform usage trends and improve the q99 user experience, game selection, and technical performance.

q99 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the Platform, helping us identify areas for improvement.
• Preference cookies: Store your Platform preferences such as language and display settings so they are remembered on your next visit.

You may control cookie preferences through your browser settings. Note that disabling essential cookies may impair Platform functionality, including your ability to log in or complete transactions.

q99 does not sell or rent personal data to third parties. We may share your information only in the following limited circumstances:

• Payment processors: Your mobile wallet number and transaction details are shared with bKash, Nagad, Rocket, or Upay solely to process your deposit or withdrawal.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session tokens and anonymised player identifiers necessary to deliver games. They do not receive your full personal profile.
• Identity verification services: Where required, your identity documents may be shared with a trusted KYC (Know Your Customer) verification provider to confirm your age and identity.
• Legal and regulatory authorities: q99 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where legally required to do so, or where necessary to protect the rights, property, or safety of q99, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of q99 assets, your personal data may be transferred as part of that transaction, subject to the same privacy protections set out in this Policy.

All third parties with whom q99 shares personal data are required to maintain appropriate technical and organisational security measures and to use your data only for the specific purpose for which it was shared.

q99 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser or app and our servers.
• Encrypted storage of sensitive data fields, including identity document copies and financial records, at rest on our servers.
• Role-based access controls ensuring that only authorised q99 personnel with a legitimate business need may access personal data.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Automatic session timeouts and multi-factor authentication options to protect against unauthorised account access.

While q99 takes all reasonable steps to protect your data, no internet-based system is completely impenetrable. In the event of a data breach that poses a risk to your rights, q99 will notify affected players promptly in accordance with applicable notification requirements.

q99 retains your personal data for as long as your account is active and for a further period as required by applicable law and our internal data retention policy. Specific retention periods include:

• Account registration and identity data is retained for the duration of the active account relationship and for a minimum of five (5) years thereafter, in accordance with anti-money laundering record-keeping obligations.
• Transaction and financial records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for three (3) years from the date of the final message in the conversation thread.
• Technical and usage data (logs, session data) are typically retained for ninety (90) days for security and diagnostic purposes, unless a longer retention period is required in connection with an ongoing investigation.

Once retention periods have elapsed, data is securely deleted or irreversibly anonymised so that it can no longer be linked to an individual.

As a q99 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

The q99 Platform is strictly for adults aged 21 years and above. q99 does not knowingly collect or process personal data relating to individuals under the age of 21. If we become aware that a minor has registered an account or provided personal data without parental consent, we will immediately close the account, delete the associated personal data, and return any deposited funds where possible. If you believe a minor is using the q99 Platform, please contact us immediately at [email protected].

q99 may transfer your personal data to servers or service providers located outside Bangladesh, including to our game providers and technical infrastructure partners. Where such transfers occur, q99 takes appropriate steps to ensure that your data receives an equivalent level of protection to that provided under this Policy, including through the use of contractual safeguards with the receiving parties.

The q99 Platform may reference third-party payment providers such as bKash, Nagad, Rocket, and Upay. These services operate under their own independent privacy policies, and q99 is not responsible for the data practices of those providers. We recommend reviewing the privacy policy of any third-party service you use in connection with your q99 account.

q99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When a material change is made, we will notify players via the email address registered to their account and display a prominent notice on the Platform for a reasonable period. The "Last updated" date at the top of this page will be revised to reflect the date of the most recent change. Continued use of the q99 Platform after a Policy update constitutes your acceptance of the revised terms.

If you have any questions, concerns, or complaints about how q99 handles your personal data, or if you wish to exercise any of your data rights as described in Section 7, please contact our support team. All privacy-related correspondence should include the subject line "Privacy Enquiry" or "Data Rights Request" to ensure it is routed to the appropriate team.