Privacy Policy — How qe999 Collects, Uses, and Protects Your Data

qe999 ("we", "us", "our") operates the online betting and gaming platform available at qe999.io. We are committed to protecting the privacy and security of all personal data entrusted to us by players, visitors, and prospective account holders, particularly those accessing the platform from Bangladesh and the surrounding region.

This Privacy Policy sets out in formal terms the basis on which personal data collected through your use of the qe999 platform will be processed by us. It covers the categories of data we collect, the purposes for which that data is used, the parties with whom it may be shared, the security measures we employ to protect it, and the rights you hold over your own information.

This policy should be read alongside the qe999 Terms & Conditions and Responsible Gaming Policy, which together constitute the full agreement between you and qe999. In the event of any inconsistency between this policy and the Terms & Conditions on matters of data privacy, this Privacy Policy shall take precedence.

If you have questions about this policy or wish to exercise any of your data rights, you may contact our support team at any time using the contact details provided in Section 15 of this document.

qe999 collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the types of personal data we collect and the context in which each type is gathered:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless it is voluntarily provided in the context of a responsible gaming self-exclusion or support request, in which case it is handled with additional safeguards.

qe999 collects personal data through the following methods:

• Direct Provision: Data you provide voluntarily when registering an account, completing KYC verification, making deposits or withdrawals, contacting support via live chat or email, or participating in promotions.
• Automated Technical Collection: Data collected automatically as you interact with the qe999 website, including IP address logging, session cookies, browser fingerprinting for fraud detection, and server-side access logs.
• Payment Provider Data: Transaction confirmation data passed to qe999 by payment processors including bKash, Nagad, Rocket, Upay, Visa, and Mastercard upon successful deposit or withdrawal processing.
• Analytics Tools: Anonymised or pseudonymised usage and performance data generated by website analytics services used to monitor platform health and player experience.
• Fraud and Risk Systems: Device fingerprint data, IP geolocation data, and behavioural pattern signals collected by qe999's internal fraud detection and risk management infrastructure.
• Third-Party Identity Verification Providers: Where qe999 uses a third-party KYC service to verify identity documents, that provider may share verification outcome data (pass/fail) and document metadata with qe999 as part of the verification process.

qe999 processes personal data on the following legal bases depending on the purpose of processing:

• Contractual Necessity: The majority of data processing by qe999 is necessary for the performance of the contract between qe999 and the registered player — specifically, the agreement established by the qe999 Terms & Conditions upon account registration. This includes identity verification, payment processing, account management, and delivery of betting and gaming services.
• Legal Obligation: qe999 processes certain data categories to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) regulations, and fraud prevention mandates.
• Legitimate Interests: qe999 processes technical and usage data on the basis of its legitimate interests in maintaining platform security, improving service quality, detecting and preventing fraudulent activity, and conducting internal analytics. These interests do not override the fundamental rights and freedoms of data subjects.
• Consent: Where qe999 processes personal data for marketing communications (including promotional offers, bonus notifications, and platform news), it does so on the basis of your explicit opt-in consent at the time of account registration or via your account preferences. You may withdraw this consent at any time by updating your marketing preferences or contacting support.

qe999 uses the personal data it collects for the following specific purposes, each of which is tied to a lawful basis as described in Section 4:

• Account Registration and Management: Creating and maintaining your qe999 account, authenticating your identity at login, and enabling access to the platform's full range of services.
• KYC and Age Verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity before processing withdrawal requests, in compliance with applicable regulations.
• Payment Processing: Facilitating deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard), reconciling transactions, and maintaining financial records.
• Fraud Detection and Prevention: Monitoring account activity, transaction patterns, and device signals to identify and prevent fraudulent behaviour, money laundering, and multi-account abuse.
• Responsible Gaming: Monitoring betting patterns to identify potential signs of problem gambling behaviour and, where appropriate, applying responsible gaming tools such as deposit limits, time-outs, or account flags.
• Customer Support: Responding to live chat, email, and other support queries, resolving account disputes, and maintaining support interaction records for quality assurance.
• Platform Improvement: Analysing aggregated usage data to identify trends, resolve technical issues, improve navigation, and enhance the overall player experience on qe999.
• Marketing Communications: Sending you information about bonuses, promotions, new game launches, and platform updates — only where you have given explicit consent to receive such communications.
• Legal Compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and enforcing the qe999 Terms & Conditions.

qe999 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your deposit and withdrawal requests. These providers operate under their own privacy policies and data processing agreements.
• KYC and Identity Verification Providers: Where qe999 uses a third-party service to verify identity documents submitted during the KYC process, your document data and personal details are shared with that provider under a strict data processing agreement limiting its use to verification purposes only.
• Game Technology Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session and gameplay data necessary to deliver the games and ensure fair play certification. These providers do not receive your financial or identity data.
• Fraud and Risk Management Partners: qe999 may share technical data (IP addresses, device fingerprints, transaction patterns) with specialist fraud detection service providers for the purpose of identifying and preventing fraudulent activity across the platform.
• Legal and Regulatory Authorities: qe999 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a court order, or a lawful regulatory request. qe999 will notify affected players of such disclosures where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of the qe999 business, personal data held about registered players may be transferred to the acquiring entity as part of that transaction. Players will be notified of such a transfer and the privacy terms applicable to their data post-transfer.

All third parties with whom qe999 shares personal data are required to maintain appropriate technical and organisational security measures and to process that data only in accordance with qe999's instructions and the purposes described in this policy.

qe999 uses cookies and similar technologies (including local storage, session tokens, and pixel tags) to operate the platform effectively and to understand how players interact with our services. The following categories of cookies are used on qe999.io:

Strictly necessary cookies cannot be disabled as they are essential for the operation of the qe999 platform. Functional and analytics cookies may be managed through your browser settings; however, disabling certain cookies may affect the performance or usability of the platform.

qe999 does not use third-party advertising cookies or retargeting pixels that track your activity across external websites.

qe999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the active account relationship, plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of 5 years from the date of verification, or for the duration required by the applicable regulatory framework, whichever is longer. Documents are securely deleted upon expiry of the retention period.
• Financial and Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations.
• Gameplay and Betting Logs: Retained for a minimum of 3 years from the date of each session, used for dispute resolution, responsible gaming monitoring, and regulatory audits.
• Support Communications: Retained for 2 years from the date of the last interaction in a support thread, used for quality assurance and dispute resolution purposes.
• Technical and Usage Data: Anonymised or aggregated after 13 months; raw IP logs and device data retained for up to 12 months for fraud and security investigation purposes.
• Marketing Consent Records: Retained for the duration of the consent, plus 3 years following withdrawal of consent, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, qe999 will securely delete or anonymise the personal data in question using industry-standard deletion methods. Anonymised data (data from which all identifying information has been irreversibly removed) may be retained indefinitely for analytical purposes.

qe999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser and qe999.io is encrypted using TLS 1.2 or higher. This applies to all pages, including account login, the cashier, and any form submission.
• Data Encryption at Rest: Sensitive data fields — including passwords (stored as salted cryptographic hashes), payment method identifiers, and KYC document references — are encrypted in the database using AES-256 or equivalent standards.
• Access Controls: Access to systems holding personal data is restricted on a need-to-know basis. All internal access is authenticated via multi-factor authentication and is logged for audit purposes.
• Intrusion Detection: qe999's infrastructure is monitored 24 hours a day, 7 days a week by automated intrusion detection and anomaly alerting systems. Security incidents are escalated to the technical team for immediate investigation.
• Third-Party Security Audits: qe999 undergoes periodic security reviews by independent third-party auditors to assess the effectiveness of its data protection controls and identify vulnerabilities.
• Staff Training: All qe999 personnel with access to personal data receive regular data protection and security awareness training.

While qe999 takes all reasonable steps to protect your personal data, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your own account password and for ensuring that your device is adequately protected against malware and unauthorised access.

As an internationally operated online betting platform, qe999 may process or store personal data on servers or through service providers located outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that applicable in the player's home jurisdiction, qe999 ensures that appropriate safeguards are in place before the transfer takes place.

Such safeguards may include:

• Standard contractual data protection clauses incorporated into agreements with the relevant data processor or sub-processor;
• Transfer to recipients in jurisdictions recognised as providing an adequate level of data protection by applicable regulatory standards;
• Binding corporate rules where data is transferred within the qe999 corporate group.

By registering an account with qe999 and accepting the Terms & Conditions, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh, subject to the safeguards described above. If you have questions about the specific safeguards applicable to your data, please contact [email protected].

As a registered qe999 player whose personal data we process, you hold a set of rights in relation to that data. These rights are described below and may be exercised at any time by contacting [email protected]:

To exercise any of the above rights, send a written request to [email protected] with the subject line "Data Rights Request" and include your registered account username. qe999 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further 30 days; qe999 will notify you of any such extension.

qe999 reserves the right to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised third party.

The qe999 platform integrates a number of third-party services that are necessary for the delivery of its betting and gaming products. These include game technology providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others), live sports data feed providers, and payment processing infrastructure.

Where third-party game content is loaded within the qe999 interface, that content is delivered from the provider's own servers. The relevant game provider may independently collect session data, device data, and gameplay logs subject to their own privacy policies. qe999 does not control and is not responsible for the data practices of third-party game technology providers operating within their own licensed environments.

Payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) operate under their own published privacy policies, which govern how they handle transaction data processed through their networks. qe999 is not responsible for the privacy practices of these payment service providers.

qe999 is strictly an adult platform. All betting and gaming services offered through qe999.io are intended exclusively for individuals aged 21 years or older. qe999 does not knowingly collect, store, or process the personal data of any individual under the age of 21.

During the account registration process, all applicants are required to confirm that they are 21 years of age or older. As part of the KYC verification process, qe999 verifies the date of birth provided by each player against an official government-issued identity document. Any account found to belong to an individual under the age of 21 will be closed immediately, all funds will be returned to the depositing payment method where technically possible, and all personal data associated with that account will be securely deleted.

If you are a parent or guardian and you have reason to believe that a minor in your care has created an account or submitted personal data to qe999, please contact our support team immediately at [email protected]. We will treat such reports as a priority and take immediate action to investigate and, where confirmed, to close the account and delete the associated data without delay.

qe999 reserves the right to amend, update, or replace this Privacy Policy at any time in order to reflect changes to our data processing practices, changes in applicable law or regulatory requirements, changes to the services offered on the platform, or improvements to our privacy controls.

When a material change is made to this Privacy Policy, qe999 will:

• Update the "Last Updated" date displayed at the top of this page;
• Display a prominent notice on the qe999.io homepage for a minimum of 14 days following the change;
• Send an email notification to all registered account holders at the email address associated with their account, where the change materially affects how their personal data is processed.

Your continued use of the qe999 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any material change to this policy, you have the right to close your account and request deletion of your personal data in accordance with the process described in Section 11.

We encourage you to review this Privacy Policy periodically so that you remain informed about how qe999 is protecting and using your personal information. All previous versions of this policy are archived and may be requested by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way qe999 processes your personal data, you may contact our Data Protection team using any of the following methods:

• Email: [email protected] — please include "Privacy Policy Enquiry" in the subject line.
• Live Chat: Available 24 hours a day, 7 days a week through the qe999.io platform. Select "Account & Privacy" from the support menu.
• Response Time: qe999 aims to respond to all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to resolve substantive data rights requests within 30 calendar days.

For formal data subject access requests, erasure requests, or portability requests, please use the email address above with the subject line "Data Rights Request" and include your registered username to allow us to locate your account securely.