qa9999 Privacy Policy —
How We Handle Your Data

1 Information We Collect

When you register for and use the qa9999 platform, we collect personal data in several ways. Understanding what information we gather is the foundation of a transparent relationship between qa9999 and every player on the platform.

Information you provide directly: During account registration, we ask you for your full legal name, date of birth, residential address, email address, and a chosen username and password. If you contact our support team via live chat or email, we retain records of that correspondence. When you participate in promotions, surveys, or competitions, we may collect additional information you voluntarily submit.

Identity and verification documents: As part of our Know Your Customer (KYC) and age verification procedures, we may request copies of government-issued identity documents such as a National ID card, passport, or birth certificate. These documents are stored securely and processed only for the purposes of identity verification and regulatory compliance.

Financial and transaction data: When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, we collect transaction identifiers, amounts, timestamps, and the payment method reference associated with each transaction. We do not store complete card numbers, full mobile-money account credentials, or payment PINs.

Technical and usage data: We automatically collect certain technical information when you access the qa9999 platform, including your IP address, device type, operating system, browser type and version, referring URL, pages visited, session duration, and in-game activity logs. This data is used for security monitoring, fraud prevention, and service improvement purposes.

2 How We Use Your Data

qa9999 uses the personal data we collect for clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your personal information are set out below.

• Account creation and management: To register your player account, verify your identity and age, maintain your account settings, and provide you with access to all qa9999 services.
• Transaction processing: To process deposits and withdrawals, reconcile transaction records, and communicate confirmation of payment activity to you.
• Customer support: To respond to your enquiries, resolve disputes, handle complaints, and maintain a record of our interactions for quality assurance purposes.
• Regulatory compliance and fraud prevention: To comply with applicable anti-money laundering (AML) obligations, perform KYC checks, monitor for suspicious activity, and report to relevant authorities where legally required.
• Responsible gaming: To monitor player activity for signs of problem gambling behaviour, apply self-exclusion orders, enforce deposit limits, and deliver responsible gaming communications to players who may be at risk.
• Platform improvement and analytics: To analyse usage patterns, identify technical issues, test new features, and improve the overall quality and performance of the qa9999 platform.
• Marketing communications: To send promotional offers, bonus notifications, tournament announcements, and seasonal promotions (such as BPL season offers and Eid specials) to players who have explicitly opted in to marketing communications.
• Security monitoring: To detect and prevent unauthorised access to player accounts, identify bot activity, investigate fraud, and protect the integrity of the platform.

3 Legal Basis for Processing

qa9999 processes personal data only where a valid legal basis exists for doing so. The legal grounds on which we rely vary depending on the specific processing activity. The principal legal bases we apply are as follows:

• Contractual necessity: Where processing is necessary to perform our contract with you as a registered player — for example, creating your account, processing transactions, and providing gaming services.
• Legal obligation: Where processing is required to comply with applicable laws and regulations — including AML obligations, age verification requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Where processing is in our legitimate interests and those interests are not overridden by your data protection rights — including fraud prevention, security monitoring, and platform analytics. Where we rely on legitimate interests, we have conducted a balancing assessment to confirm that our interests are proportionate.
• Consent: Where you have freely given, specific, informed, and unambiguous consent to processing — primarily for the purpose of sending you marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4 Data Sharing & Third Parties

qa9999 does not sell, rent, or otherwise trade your personal data to third-party advertisers, data brokers, or marketing companies. We share your data only where strictly necessary and only with the categories of third party described in this section.

• Payment processors: To facilitate deposits and withdrawals, we share transaction-relevant data with our payment processing partners, including mobile money operators (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard). These partners are contractually bound to process data only for the specific purpose of executing your transaction.
• Game providers: To deliver casino and sports betting services, your gameplay activity may be processed by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate under their own privacy frameworks and are selected by qa9999 only where they maintain appropriate data protection standards.
• Identity verification services: We use specialist KYC service providers to verify the identity and age of players. These services process identity documents on our behalf and are bound by strict confidentiality obligations.
• Fraud prevention and security providers: We work with third-party security services to detect and prevent fraudulent activity, bot behaviour, and unauthorised account access. These providers receive technical data (such as IP addresses and device fingerprints) for this limited purpose.
• Regulatory and law enforcement authorities: Where required by applicable law or in response to a lawful request from a competent authority, qa9999 may disclose personal data without your prior consent. We will notify you of any such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of qa9999's business, personal data held by qa9999 may be transferred to the relevant successor entity, subject to the protections described in this Privacy Policy continuing to apply.

5 Cookies & Tracking Technologies

qa9999 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and gather analytical data about how the platform is used. A cookie is a small text file that is placed on your device when you visit the qa9999 website. Cookies allow the platform to recognise your device on subsequent visits and to retain certain preferences and session information.

The following categories of cookies are used on the qa9999 platform:

You can manage your cookie preferences through your web browser settings. Most modern browsers allow you to block or delete cookies, or to alert you when a cookie is being set. Please note that disabling strictly necessary or fraud detection cookies may impair your ability to use the qa9999 platform, including logging into your account.

6 Data Retention

qa9999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting obligations. The specific retention periods we apply to different categories of data are outlined below.

• Account and identity data: Retained for the duration of your account's active lifetime, plus a period of at least 5 years following account closure, in compliance with AML record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction to comply with financial crime regulations and to resolve any retrospective disputes.
• KYC and identity verification documents: Retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Customer support communications: Retained for 2 years from the date of the most recent interaction to support quality assurance and dispute resolution.
• Gameplay and session logs: Retained for 2 years from the date of the session to support dispute resolution and responsible gaming monitoring.
• Marketing preference data: Retained until you withdraw your consent to marketing communications, at which point your preferences are updated immediately and no further marketing messages are sent.
• Technical and analytical data: Aggregated and anonymised analytical data may be retained indefinitely as it no longer constitutes personal data once anonymisation is applied.

When the applicable retention period expires, personal data is either securely deleted or irreversibly anonymised. In the event that data must be retained beyond the stated periods due to an ongoing investigation, legal dispute, or regulatory requirement, we will inform you where we are legally permitted to do so.

7 Your Privacy Rights

As a qa9999 player, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and without unnecessary delay. The rights available to you include the following:

• Right of access: You may request a copy of the personal data qa9999 holds about you, along with information about how it is used, the legal basis for processing, and the recipients with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly through your account settings panel.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and no other legal basis applies), or where you believe the data has been processed unlawfully. Please note that this right is subject to our legal obligations to retain certain data (e.g., AML records), which will override erasure requests where applicable.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to data portability: Where processing is carried out on the basis of your consent or contractual necessity, and by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You have the right to object to the processing of your personal data where qa9999 relies on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

qa9999 does not charge a fee for processing rights requests unless the request is manifestly unfounded or excessive. Where a fee is applicable, we will inform you of the amount before proceeding.

8 Data Security

qa9999 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, loss, destruction, alteration, or disclosure. While no online platform can guarantee absolute security, our security programme reflects current industry best practices for online gaming platforms serving the Bangladesh market.

Our security measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and qa9999's servers is encrypted using Transport Layer Security (TLS) protocols. Our platform runs exclusively over HTTPS.
• Password security: Player passwords are stored as cryptographic hashes using a strong hashing algorithm. qa9999 staff cannot view your password in plain text under any circumstances.
• Access controls: Internal access to player personal data is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to confidentiality obligations and regular security training.
• Intrusion detection and monitoring: Our systems are monitored continuously for suspicious activity, unauthorised access attempts, and anomalous behaviour patterns that may indicate a security incident.
• Incident response: qa9999 maintains a documented security incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities within the timeframes required by applicable law.
• Third-party security assessments: Our platform and infrastructure undergoes periodic security reviews and penetration testing by qualified third-party specialists.

9 Contact & Data Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way qa9999 processes your personal data, please contact us using the details below. We are committed to responding to all data-related enquiries promptly and transparently.

General privacy enquiries and rights requests:
Email: [email protected]
Subject line: "Privacy Policy Enquiry" or "Privacy Rights Request"
Response time: Within 72 hours for acknowledgement; up to 30 days for a full response.

Security incidents and suspected data breaches:
If you believe your qa9999 account has been compromised, or if you have discovered a potential security vulnerability on our platform, please email [email protected] immediately with the subject line "Security Incident". Our security team monitors this address around the clock, 7 days a week, including Bangladesh public holidays.

qa9999 reserves the right to update or revise this Privacy Policy at any time. Material changes will be communicated to registered players via a notice displayed prominently on the platform. The effective date at the top of this document will be updated to reflect the date of the most recent revision. Continued use of the qa9999 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.