q999 Privacy Policy

Introduction

q999 is committed to protecting the personal data of every individual who visits, registers on, or interacts with the q999 platform. This Privacy Policy explains in plain, accessible English how q999 collects, processes, stores, and protects your personal information in connection with your use of the q999 website, mobile-optimised platform, and all associated services available at q999.im.

This policy applies to all users of the q999 platform regardless of their location, including — and with particular relevance to — players based in Bangladesh. It covers data collected through account registration, identity verification (KYC), deposits and withdrawals, betting and gaming activity, customer support interactions, and passive data collected through cookies and analytics tools.

By creating a q999 Account or by continuing to use the q999 platform, you confirm that you have read this Privacy Policy, that you understand how your personal data will be processed, and that you consent to such processing where consent is the applicable legal basis. If you do not agree with any part of this policy, you should not create an Account or continue to use the platform.

Who We Are

For the purposes of this Privacy Policy, "q999", "we", "us", and "our" refer to the operator of the q999 online gaming platform, which holds an international offshore gaming licence and operates the domain q999.im. q999 is the data controller in respect of personal data collected through the q999 platform, meaning that q999 determines the purposes and means by which your personal data is processed.

q999 is an internationally licensed online casino and sports betting platform built specifically for the Bangladesh market. We offer cricket betting on BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures, live casino games powered by Evolution Gaming and Pragmatic Play, 500+ slot titles from leading studios including NetEnt, Microgaming, and Habanero, and fishing games — all accessible via instant bKash, Nagad, and Rocket deposits.

Questions, requests, or complaints relating to data privacy should be addressed to our support team at the contact details provided in Section 16 of this policy.

Data We Collect

q999 collects the following categories of personal data from players and platform visitors:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If any such data is incidentally included in documents submitted during KYC, it is not used for any processing purpose beyond identity verification and is stored with heightened access controls.

How We Collect Data

q999 collects personal data through the following channels:

• Direct interactions: Data you provide voluntarily during account registration, identity verification, deposit or withdrawal requests, bonus claim forms, and support communications.
• Automated technologies: Technical and usage data collected automatically when you visit or interact with the q999 platform, including through cookies, server logs, web beacons, and analytics SDKs. See Section 7 for detailed cookie information.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and card processing partners when a payment is initiated or completed. q999 does not store full card numbers — only masked references provided by the payment processor.
• Game studios and providers: Aggregated gaming activity data (session results, RTP outcomes) shared by certified game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Habanero, Spribe, and Ezugi for the purposes of dispute resolution and platform integrity monitoring.
• Identity verification services: Confirmation signals from third-party KYC verification partners when documentary evidence is cross-checked against official records.
• Referral and affiliate systems: If you arrive at q999 via an affiliate link, the referring affiliate identifier is recorded for commission tracking purposes. The affiliate does not receive access to your personal data.

How We Use Your Data

q999 uses personal data collected from players and visitors for the following purposes:

• Account management: Creating, maintaining, and securing your q999 Account, including verifying your identity at registration and during KYC, resetting passwords, and processing account closure requests.
• Service delivery: Processing deposits and withdrawals in BDT, settling bets and casino game outcomes, crediting bonuses and promotions, and delivering the full range of q999 gaming and betting services.
• Legal and regulatory compliance: Conducting Know Your Customer (KYC) checks, anti-money laundering (AML) monitoring, responsible gaming interventions, fraud detection, and age verification in compliance with our international gaming licence obligations.
• Customer support: Responding to your enquiries, resolving disputes, investigating complaints, and communicating with you about your Account and transactions.
• Platform improvement: Analysing aggregated usage data and gaming activity to improve platform performance, game selection, user interface design, and payment processing efficiency.
• Marketing communications: Sending promotional offers, bonus notifications, seasonal promotions (e.g. BPL season offers, Eid bonuses, Pohela Boishakh specials), and platform updates to players who have opted in to receive such communications. See Section 13 for opt-out options.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, prohibited conduct (including bot usage and multi-accounting), and match-fixing-related betting patterns.
• Personalisation: Tailoring game recommendations, promotions, and content to your gaming preferences and activity history to improve your experience on the platform.

q999 does not use automated decision-making or profiling in a manner that produces legal effects or similarly significant impacts on any player without human review. Responsible gaming interventions triggered by automated pattern detection are always reviewed by a member of the q999 player protection team before action is taken on an Account.

Legal Basis for Processing

q999 processes personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as an Account holder — including identity verification, payment processing, bet settlement, and customer support — is carried out on the basis that it is necessary for the performance of the contract between you and q999.
• Legal obligation: Processing required to comply with our obligations under our international gaming licence, including KYC, AML monitoring, age verification, and responsible gaming requirements, is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, analytics, and platform improvement is carried out on the basis of q999's legitimate interest in operating a secure, fair, and commercially viable gaming platform. We have assessed these interests against your rights and are satisfied that they do not override your fundamental privacy interests.
• Consent: Processing for marketing communications and personalised promotional targeting is carried out on the basis of your freely given consent, provided during account registration or updated at any time through your account communication settings. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Cookies & Tracking Technologies

q999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and collect analytical data about how the platform is used. The following categories of cookies are used:

• Essential cookies: Strictly necessary for the platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against CSRF attacks, and cookies that manage your active bet slip or game session. These cannot be disabled without breaking core platform functionality.
• Analytical cookies: Used to collect aggregated, anonymised data about platform usage — including pages visited, session duration, navigation paths, and device types — to help q999 understand how the platform is used and identify areas for improvement. The data is processed in aggregate and does not identify individual players.
• Functional cookies: Used to remember your preferences such as language settings, preferred payment method, and responsible gaming limits you have configured in your Account settings.
• Marketing cookies: Used to track whether you arrived at q999 via an affiliate or advertising partner link, so that the referring partner can be attributed credit for your registration. Marketing cookies do not track your browsing activity on third-party websites.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in or using core platform features. Disabling analytical or marketing cookies will not affect your ability to use the platform but will reduce the accuracy of our platform improvement efforts and affiliate attribution.

Data Sharing & Disclosure

q999 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. q999 shares personal data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and our card processing partners receive the minimum personal and financial data required to process your deposit or withdrawal transaction. Each partner operates under their own privacy policy and data protection obligations.
• Game studios and platform providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Habanero, Spribe, Ezugi, and other certified game providers receive a session token and anonymised player identifier to initialise game sessions and log game outcomes. They do not receive your full name, contact details, or financial data.
• KYC and identity verification partners: Our third-party KYC service providers receive identity document images and personal details solely for the purpose of verifying your identity in compliance with our licence obligations. These partners are contractually bound to use the data for no other purpose.
• Fraud prevention and AML monitoring services: Aggregated transaction and behavioural data may be shared with specialist fraud prevention and AML screening services to detect suspicious activity. Data shared for these purposes is subject to strict contractual confidentiality obligations.
• Legal and regulatory authorities: q999 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by law, by court order, or by our licensing authority. q999 will notify the relevant player of such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of q999's business, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified in advance of any such transfer and will have the opportunity to close their Accounts if they do not wish their data to be transferred.

All third-party service providers who receive personal data from q999 are required to process that data only for the specified purpose, to maintain appropriate technical and organisational security measures, and to comply with applicable data protection laws.

Data Retention

q999 retains personal data for the periods necessary to fulfil the purposes for which it was collected, subject to the following minimum retention standards required by our international gaming licence:

• Account and identity data: Retained for the duration of your Account and for a minimum of 5 years following permanent Account closure, to satisfy our AML and KYC record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• Gaming and betting activity logs: Retained for a minimum of 3 years from the date of the relevant bet or game session, to support dispute resolution and platform integrity monitoring.
• Customer support communications: Retained for 2 years from the date of the last communication in a support thread, unless the matter involves an active dispute or regulatory investigation, in which case records are retained until the matter is fully resolved.
• Marketing consent records: Retained for the duration of your Account and for 2 years following Account closure or consent withdrawal, to demonstrate compliance with marketing consent obligations.
• Technical and usage data (cookies, logs): Retained for up to 12 months in identifiable form, after which it is aggregated and anonymised for long-term analytics purposes.

When personal data is no longer required for its original purpose and no legal obligation to retain it exists, q999 will securely delete or anonymise it. Anonymised data that cannot be re-linked to an individual may be retained indefinitely for statistical analysis purposes.

Data Security

q999 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the q999 platform, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted data storage for all sensitive personal data held in q999's databases, including identity documents, financial records, and authentication credentials. Passwords are stored using a one-way cryptographic hashing algorithm and are never stored in plain text.
• Role-based access controls limiting internal access to personal data to those q999 staff members who have a legitimate operational need to access it. Access is logged and audited.
• Two-factor authentication (2FA) available to all players via SMS OTP, and mandatory for all q999 internal staff accessing systems that process personal data.
• Regular penetration testing and security audits conducted by independent third-party security firms to identify and remediate vulnerabilities before they can be exploited.
• Data breach response procedures that require q999 to identify, contain, and assess any suspected data breach within 72 hours of detection and to notify affected players without undue delay where the breach is likely to result in a risk to their rights.

Your Rights

As a data subject whose personal data is processed by q999, you hold the following rights in relation to your personal information. q999 is committed to honouring these rights promptly and without unnecessary delay:

• Right of access: You have the right to request a copy of all personal data q999 holds about you. q999 will respond to verified access requests within 30 days of receipt.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by q999 be corrected or updated. Minor corrections (e.g. email address or phone number) can be made directly through your Account settings. Corrections to identity data require documentary evidence.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent is the basis for processing), or where you object to processing and there is no overriding legitimate interest. This right is subject to q999's legal obligation to retain data for the minimum periods specified in Section 9.
• Right to restriction: You have the right to request that q999 restricts the processing of your personal data while a rectification or objection request is being assessed.
• Right to data portability: You have the right to receive a copy of personal data you have provided to q999 in a structured, machine-readable format, and to request that it be transferred directly to another service provider where technically feasible.
• Right to object: You have the right to object to processing of your personal data where q999 relies on legitimate interests as the legal basis. q999 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw consent at any time through your Account communication settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact q999 support at [email protected] with the subject line "Data Rights Request". q999 may need to verify your identity before processing the request. There is no charge for exercising these rights under normal circumstances.

Children's Privacy

The q999 platform is strictly intended for adults aged 21 years and above. q999 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification checks are conducted at the point of registration and again during the KYC process for withdrawal requests above ৳10,000.

If q999 discovers or is notified that personal data has been collected from an individual under the age of 21, the relevant Account will be immediately suspended, all personal data associated with that Account will be deleted as promptly as legally permissible, and the matter will be reported in accordance with applicable child protection standards.

Marketing Communications

q999 may send promotional emails, SMS messages, and in-platform notifications to players who have provided consent to receive marketing communications. These communications may include welcome bonus offers, reload bonus announcements, BPL and IPL season betting promotions, Eid and Pohela Boishakh special offers, cashback campaigns, and new game announcements.

You may update your marketing preferences at any time through the Communication Settings section of your q999 Account dashboard, or by contacting q999 support at [email protected] and requesting removal from marketing lists. q999 will process opt-out requests within 5 business days.

Please note that withdrawing consent to marketing communications does not affect the delivery of transactional and operational communications — including deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which q999 is required to send regardless of marketing preferences as part of the service contract.

q999 does not send marketing communications to players who have activated any responsible gaming restriction, including deposit limits, cooling-off periods, or self-exclusion. If you receive a marketing communication after activating a restriction, please contact q999 support immediately so that the issue can be investigated and rectified.

Third-Party Links

The q999 platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay), game studio platforms, and sports data providers. While q999 takes care to work only with reputable partners, we have no control over the privacy practices of third-party websites or services and are not responsible for their content or privacy policies.

This Privacy Policy applies solely to data collected through the q999 platform at q999.im. We encourage you to review the privacy policies of any third-party service you interact with in connection with your q999 experience, particularly your mobile banking provider's terms before initiating a deposit or withdrawal transaction.

Policy Changes

q999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made — meaning changes that substantially affect how your personal data is used or your rights in relation to it — q999 will provide at least 7 days' advance notice by displaying a prominent banner on the q999 platform and, where practicable, sending a notification to your registered email address.

The effective date at the top of this page and the "Last Updated" notice will be revised each time this policy is amended. We recommend that you review this page periodically to stay informed about how q999 protects your data. Continued use of the q999 platform after the effective date of a revised policy constitutes your acceptance of the changes.

For non-material amendments — such as typographical corrections or the clarification of existing practices without substantive change — q999 may update the policy without advance notice.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy, the personal data q999 holds about you, or the exercise of any data rights described in Section 11, please contact the q999 data privacy team:

Please note that the support email address above is provided as plain text only and is not a clickable link. Always verify that you are writing to the official [email protected] address before sharing any personal or Account details in your correspondence.