qu999 Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") is published by qu999 ("we", "us", "our", "the Platform") and applies to all personal data collected from individuals ("you", "the Player") who access or use the qu999 website at qu999.io, including all associated services such as sports betting, casino games, live dealer tables, payment processing, and customer support.

qu999 acts as the data controller in respect of the personal data it collects directly from players. Where qu999 engages third-party service providers to process data on its behalf — such as payment processors, identity verification providers, and game content suppliers — those providers act as data processors under appropriate contractual agreements.

This Policy should be read alongside the qu999 Terms & Conditions and Responsible Gaming Policy. By registering an account with qu999 or continuing to use the platform, you confirm that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

2 Data We Collect

qu999 collects the following categories of personal data from players. The specific data points collected depend on which services you use and the stage of your account lifecycle.

qu999 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required for responsible gaming interventions and only with your explicit consent.

3 How We Collect Data

qu999 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when completing the account registration form, submitting identity verification documents, making a deposit or withdrawal request, or contacting our support team.
• Automated technical collection: Data collected automatically when you visit qu999.io, including IP address, browser fingerprint, device identifiers, and session activity via server logs and analytics tools.
• Cookies and similar technologies: Data collected through first-party cookies placed on your device during your qu999 session. See Section 7 for full cookie details.
• Third-party identity verification: Where you submit documents for KYC verification, our identity verification partner may return enriched data points such as document validity status and match scores.
• Payment providers: Transaction confirmation data and payment status updates received from bKash, Nagad, Rocket, Upay, and card payment processors when you complete a deposit or withdrawal.
• Game providers: Aggregated session and bet data received from game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi to support account-level responsible gaming monitoring.

4 How We Use Your Data

qu999 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your consent.

• Account creation and management: To register your qu999 account, verify your identity, manage your preferences, and maintain your account in good standing.
• Transaction processing: To process deposits and withdrawals via your chosen payment method, including bKash, Nagad, Rocket, and Upay, and to maintain accurate transaction records.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming: To monitor your gaming patterns and intervene where indicators of potential problem gambling are identified, including activation of deposit limits or referral to self-exclusion tools.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements.
• Customer support: To investigate and resolve complaints, account queries, disputed bets, and payment issues efficiently.
• Platform improvement: To analyse aggregate usage data and improve the qu999 platform, game offering, and user experience for all Bangladesh players.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS, but only where you have given explicit opt-in consent.

5 Legal Basis for Processing

qu999 processes your personal data on the following legal bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary to fulfil the contract between you and qu999 — specifically, to operate your account, process bets, and handle deposits and withdrawals.
• Legal obligation: Processing your identity and financial data for KYC and AML purposes is required by applicable law and cannot be waived.
• Legitimate interests: Processing technical and usage data for fraud prevention, platform security, and responsible gaming monitoring is carried out on the basis of qu999's legitimate interest in operating a safe and secure platform. This interest does not override your fundamental privacy rights.
• Consent: Processing your contact data for marketing communications is carried out only with your explicit opt-in consent, which you may withdraw at any time.

6 Data Sharing & Disclosure

qu999 does not sell, rent, or trade your personal data. Data may be shared with the following categories of third parties only to the extent strictly necessary for the purposes identified in this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Visa/Mastercard networks receive the minimum data necessary to process your deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC service providers receive copies of identity documents you submit for the sole purpose of verifying their authenticity and confirming your age and identity.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session-level data necessary to deliver their games within the qu999 platform. These providers operate under their own privacy frameworks.
• Platform technology partners: Hosting, cloud infrastructure, and analytics service providers who process data on our behalf under strict data processing agreements that prohibit them from using your data for their own purposes.
• Law enforcement and regulators: qu999 may disclose personal data to law enforcement agencies or competent authorities where required by law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to persons.

All third-party data processors engaged by qu999 are required to implement appropriate technical and organisational measures to protect the data they process on our behalf, consistent with the data protection standards described in this Policy.

7 Cookies & Tracking Technologies

qu999 uses cookies and similar tracking technologies on qu999.io to ensure the platform operates correctly, to remember your session, and to gather aggregate analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your qu999 session. These cookies cannot be disabled without disrupting your use of the platform.
• Functional cookies: Used to remember your preferences such as language settings, display options, and responsible gaming limits you have applied to your account.
• Analytics cookies: First-party analytics cookies used to understand how players navigate qu999.io, which pages are most visited, and where technical errors occur. This data is aggregate and non-identifying.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and suspicious login attempts on the qu999 platform.

qu999 does not use third-party advertising cookies or behavioural retargeting cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your qu999 account.

8 Data Security

qu999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and qu999.io.
• Encryption of sensitive data fields — including identity document images and financial data — at rest in our database systems.
• Role-based access controls that restrict access to personal data to only those employees and contractors who require it to perform their duties.
• Regular security audits and vulnerability assessments of the qu999 platform infrastructure.
• Multi-factor authentication requirements for internal systems that store or process player personal data.
• Secure deletion procedures for data that has reached the end of its defined retention period.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, qu999 will notify affected players promptly and take immediate steps to contain the breach and mitigate any potential harm.

9 Data Retention

qu999 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any legal or regulatory obligation that requires a longer retention period. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account's active status on the qu999 platform.
• Closed account data: Identity and financial transaction data is retained for a minimum of seven years following account closure for AML compliance and dispute resolution purposes.
• Support and communications data: Chat transcripts and support emails are retained for three years from the date of the interaction.
• Technical and usage data: Server logs and session data are retained for twelve months and then purged or anonymised.
• Marketing consent records: Records of your marketing opt-in or opt-out preference are retained for the duration of your account and for three years following account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with qu999's internal data lifecycle procedures.

10 Your Rights

As a qu999 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request.

• Right of access: You may request a copy of the personal data qu999 holds about you, along with information on how it is being used and with whom it has been shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data qu999 holds about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to qu999's legal obligations to retain certain data.
• Right to restriction: You may request that qu999 restricts the processing of your data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing.
• Right to data portability: You may request a structured, machine-readable export of the personal data you have provided to qu999 for the purpose of transferring it to another service.
• Right to object: You may object to processing carried out on the basis of qu999's legitimate interests, including profiling for responsible gaming purposes, where your individual circumstances justify the objection.
• Right to withdraw consent: Where processing is based on your consent — specifically, marketing communications — you may withdraw that consent at any time with no effect on your account.

qu999 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, the response period may be extended by a further 30 days, with written notice provided to you before the initial deadline.

11 Children & Minors

The qu999 platform is strictly intended for adults aged 21 and above. qu999 does not knowingly collect personal data from any individual under the age of 21. The registration process requires players to confirm their age, and qu999 may require identity document verification to confirm that a player meets the minimum age requirement.

If qu999 discovers that personal data has been collected from an individual under the age of 21 — whether through a false declaration during registration or any other means — the account will be immediately suspended, all funds will be withheld pending investigation, and the relevant personal data will be securely deleted in accordance with our data lifecycle procedures.

Parents or guardians who believe that a minor has registered with qu999 are encouraged to contact us immediately at [email protected]. qu999 will investigate and take appropriate action without delay.

12 Third-Party Services

The qu999 platform integrates third-party services — including game content from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — that may operate under their own privacy policies and data handling practices. qu999 is not responsible for the privacy practices of these third-party providers beyond the data processing agreements in place between qu999 and those providers.

qu999.io does not contain links to third-party websites. However, if you access game provider content through the qu999 platform, the game provider's own software environment may collect technical usage data in accordance with their own privacy documentation. qu999 recommends that you review the privacy policies of any third-party game providers whose content you use through the qu999 platform.

Payment service providers — including bKash, Nagad, Rocket, and Upay — process your payment data under their own privacy frameworks and terms of service. qu999 does not store full payment account credentials; only the minimum reference data required to identify your payment method for future withdrawal processing is retained.

13 Policy Updates

qu999 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, we will notify registered players via the email address associated with their qu999 account or via a prominent notice displayed on the platform upon next login.

The effective date at the top of this document reflects the date on which the current version of the Policy came into force. Continued use of the qu999 platform following the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with an updated Policy, you should cease using the platform and may request account closure by contacting support.

The most current version of this Privacy Policy is always available at qu999.io/privacy-policy. We recommend reviewing this page periodically to stay informed of how qu999 protects your data.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data qu999 holds about you, please contact our support team using the details below. All privacy-related enquiries are handled in English and responded to within 30 calendar days.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request – [Your Username]"
• Response time: Within 30 calendar days, Bangladesh Standard Time (BST, UTC+6)
• Support hours: 24 hours a day, 7 days a week via live chat on qu999.io