Privacy Policy — qa999

Introduction and Scope

This Privacy Policy ("Policy") is issued by qa999 ("we", "us", "our") and applies to all personal data collected from users ("you", "your") of the qa999 online gaming platform at qa999.ws (the "Platform"). It describes the categories of personal data we collect, the purposes for which we process that data, with whom we share it, how long we retain it, and the rights you hold in respect of your personal information.

By registering an account on the Platform, you acknowledge that you have read and understood this Policy, and you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not create an account or use the Platform.

This Policy should be read in conjunction with our Terms and Conditions. Defined terms used in this Policy that are not separately defined herein carry the meaning given to them in the Terms and Conditions.

Personal Data We Collect

We collect the following categories of personal data when you register, use, or interact with the qa999 Platform:

How We Use Your Personal Data

qa999 uses your personal data only for the purposes listed below. We do not use your data in ways that are incompatible with the purposes for which it was originally collected without first obtaining your explicit consent.

• Account creation and management: to set up and maintain your qa999 player account, verify your identity in accordance with our KYC obligations, and process your requests to update account details.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to detect and prevent fraudulent transactions.
• Platform delivery: to provide access to sports betting, live casino, slots, crash games, and all other content available on the qa999 Platform.
• Customer support: to respond to your queries, handle disputes, and manage complaints submitted via [email protected].
• Responsible gaming compliance: to monitor gaming activity for signs of problem gambling, apply deposit limits and self-exclusion settings you have selected, and send responsible gaming reminders where required.
• Legal and regulatory compliance: to fulfil our anti-money laundering (AML) obligations, respond to lawful requests from competent authorities, and maintain records as required by applicable law.

Legal Basis for Processing

We process your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: processing is required to perform the contract between you and qa999 — specifically to provide you with a player account, process transactions, and deliver gaming services.
• Legal obligation: processing is required to comply with applicable laws, including AML regulations, age verification requirements, and orders issued by competent courts or regulatory authorities.
• Legitimate interests: processing is necessary for qa999's legitimate interests in operating a secure gaming platform, preventing fraud, detecting bonus abuse, and improving our services — provided these interests are not overridden by your rights.
• Consent: where we send you direct marketing communications or use non-essential cookies, we rely on your consent, which you may withdraw at any time.

Sharing Your Personal Data

qa999 does not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors and mobile banking partners (bKash, Nagad, Rocket, Upay, and card networks Visa and Mastercard) for the purpose of completing and verifying financial transactions on the Platform.
• Game software providers (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt) where game delivery or dispute resolution requires the transmission of session and transaction data.
• Identity verification and KYC service providers engaged by qa999 to authenticate player identities and screen for sanctions or politically exposed persons (PEPs).
• Competent authorities, law enforcement agencies, or courts where disclosure is required by applicable law, a valid court order, or a regulatory directive — in which case qa999 will disclose only the minimum data necessary.

Cookies and Tracking Technologies

The qa999 Platform uses cookies and similar tracking technologies to improve your experience, maintain your session, and analyse Platform usage. The following categories of cookies are in use:

• Strictly necessary cookies: required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional cookies: store your preferences such as language settings and responsible gaming limits so they persist across sessions. These can be disabled via your browser, but doing so may affect Platform functionality.
• Analytics cookies: allow qa999 to understand how players navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is aggregated and anonymised before analysis.
• Game performance cookies: used by third-party game providers (Pragmatic Play, Evolution Gaming, etc.) to deliver their game content, maintain game state between page loads, and record game results for dispute resolution purposes.

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from using the Platform. For all other cookie types, you may opt out via your browser's cookie management tools without losing access to the Platform, though some features may be limited.

Data Retention

qa999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to our legal and regulatory retention obligations. In practice, this means: account data and transaction records are retained for a minimum of five years from the date of the last transaction or account closure, whichever is later, in order to satisfy AML record-keeping requirements. Game session logs are retained for a minimum of three years. Marketing consent records are retained for as long as you remain opted in, plus a further 12 months after you unsubscribe, for compliance audit purposes.

When retention periods expire, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible, data is aggregated so that it can no longer be linked to any individual.

Data Security Measures

qa999 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and the Platform, encrypted storage of sensitive data fields at rest, access controls that restrict internal staff access to personal data on a need-to-know basis, regular security audits and penetration testing of Platform infrastructure, and monitoring for anomalous access patterns indicative of a data breach.

While qa999 takes all reasonable steps to protect your data, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, qa999 will notify affected users without undue delay and will take immediate steps to contain the breach.

Your Data Protection Rights

As a user of the qa999 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

• Right of access: you may request a copy of all personal data qa999 holds about you, together with information about how it is used, with whom it is shared, and for how long it is retained.
• Right to rectification: you may request that inaccurate or incomplete personal data held by qa999 be corrected. For account details such as your registered mobile number, this can often be done directly in your account settings.
• Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our legal retention obligations.
• Right to restrict processing: you may request that qa999 temporarily suspend processing of your data — for example, while a rectification request is being assessed or while you contest the lawfulness of processing.
• Right to data portability: where processing is based on your consent or on the performance of a contract, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: you may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case qa999 will assess whether its interests override your rights.

qa999 will respond to all verified data rights requests within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it.

Marketing Communications

With your consent, qa999 may send you promotional communications via SMS to your registered Bangladeshi mobile number or via push notification if you have enabled notifications on the qa999 app. These communications may include information about new games, bonuses, seasonal promotions (such as BPL season offers, Eid promotions, or Pohela Boishakh special offers), and responsible gaming reminders.

You may opt out of marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe", or by following the unsubscribe instructions in any marketing message you receive. Opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, or security alerts, which are sent regardless of marketing preferences.

Protection of Minors

The qa999 Platform is strictly for adults aged 21 and above. qa999 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a minor, we will delete that data immediately and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

Changes to This Privacy Policy

qa999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, we will post the updated Policy on this page with a revised "Last Updated" date and, where practicable, notify registered users via their registered mobile number.

Your continued use of the Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the changes, please discontinue use of the Platform and contact [email protected] to request account closure.

Contact Our Data Team

For all privacy-related inquiries, data rights requests, or concerns about how qa999 handles your personal data, please contact our dedicated data protection team using the details below. We aim to respond to all privacy requests within 30 calendar days.