gq999 Privacy Policy
Your Data, Protected

Introduction

This Privacy Policy ("Policy") is issued by gq999 ("the Platform", "we", "us", "our") and governs the collection, processing, storage, and disclosure of personal data relating to registered players, prospective players, and visitors to the gq999 platform accessible at gq999.io ("the Platform").

We are committed to protecting the privacy and personal data of all individuals who interact with gq999. This Policy is designed to be transparent about our data practices and to ensure that you understand exactly how your information is handled when you use our services.

This Policy should be read alongside the gq999 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated into the overall regulatory framework governing your use of the platform.

Who We Are

gq999 operates as an online betting and casino entertainment platform serving players in Bangladesh. The platform offers sports betting markets including cricket (BPL, IPL, T20 World Cup, and international matches), live casino games, slot games, virtual sports, and instant games.

gq999 is the data controller in respect of personal data collected through the gq999.io platform and the services accessible through it. As data controller, gq999 determines the purposes for which personal data is collected and the means by which it is processed.

For all data-related enquiries, requests to exercise your rights, or formal privacy complaints, please contact us at: [email protected]

Data We Collect

gq999 collects the following categories of personal data about you, depending on how you interact with the platform:

• Identity Data: Your full legal name as it appears on your National Identity Card (NID), date of birth, NID number or passport number (for KYC verification purposes), and a copy of your identity document where requested during the verification process.
• Contact Data: Your registered mobile phone number (Bangladesh-issued), email address, and city or district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Account Data: Your chosen username, encrypted password, account creation date, account status, and a record of your account verification steps.
• Financial Data: The mobile financial service wallet identifier (bKash, Nagad, Rocket, or Upay number), bank account holder name and account number (where bank transfer is used), transaction amounts, transaction dates, and a record of all deposits and withdrawals processed through your account.
• Betting & Gaming Data: A complete record of all bets placed, games played, wagers made, results, bonus usage, and associated account balance movements.
• Technical Data: Your IP address at the time of login and platform activity, device type, operating system, browser type and version, screen resolution, and time zone settings.
• Usage Data: Pages visited on the gq999 platform, features accessed, session start and end times, click-stream data, search queries entered within the platform, and game launch history.
• Communications Data: Records of all communications between you and gq999 support, including live chat transcripts, email correspondence, and any formal complaint submissions.
• Marketing Preference Data: Records of your opt-in consent to receive promotional communications, and your subsequent opt-out actions if applicable.

How We Collect Data

gq999 collects personal data through the following means:

• Direct Interaction: Data you provide when completing the gq999 registration form, submitting KYC verification documents, completing a deposit or withdrawal transaction, contacting our support team, or updating your account profile.
• Automated Technologies: Technical and usage data collected automatically when you access the gq999 platform, including via server logs, cookies, web beacons, pixel tags, and similar tracking technologies embedded in the platform. See Section 9 for full details of our cookie practices.
• Third-Party Verification Services: Where gq999 engages third-party identity verification providers to confirm the accuracy of the information you provide during registration or KYC review, those providers may supply us with verification results and associated data.
• Payment Service Providers: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a linked bank account, the relevant payment service provider supplies gq999 with transaction confirmation data including the wallet or account identifier and the transaction amount.
• Fraud Prevention Partners: gq999 may receive data from fraud detection and anti-money-laundering service providers who flag accounts or transactions as requiring additional scrutiny.

How We Use Your Data

gq999 uses the personal data it collects for the following specific purposes:

• Account Creation & Management: To register your account, verify your identity and age (21+), maintain your account profile, and provide you with access to the gq999 platform and its features.
• Payment Processing: To process deposits and withdrawals through your nominated payment method (bKash, Nagad, Rocket, Upay, or bank transfer), verify that payment accounts are registered in your name, and maintain accurate financial records.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, match-fixing, and other prohibited conduct as defined in the gq999 Terms & Conditions.
• Regulatory Compliance: To comply with applicable anti-money-laundering (AML) obligations, know-your-customer (KYC) requirements, and any requests from law enforcement or regulatory authorities.
• Responsible Gaming: To monitor betting and gaming behaviour for indicators of problem gambling, to enforce player-requested deposit limits, cooling-off periods, and self-exclusion orders, and to flag accounts that may benefit from responsible gaming intervention.
• Customer Support: To respond to your enquiries, resolve complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Platform Improvement: To analyse aggregated usage data and technical data to identify performance issues, improve navigation, and enhance the overall player experience on gq999.
• Promotional Communications: Where you have provided explicit opt-in consent, to send you notifications about bonuses, promotions, seasonal offers (e.g., BPL season promotions, Eid bonus campaigns, Pohela Boishakh offers), and new game launches. You may withdraw consent at any time.

Legal Bases for Processing

gq999 processes personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to fulfil our contractual obligations to you as a registered player, including account management, payment processing, and provision of betting and gaming services.
• Legal Obligation: Processing that is required to comply with applicable legal obligations, including KYC verification, AML record-keeping, and responses to lawful requests from competent authorities.
• Legitimate Interest: Processing carried out for the legitimate business interests of gq999, provided those interests are not overridden by your privacy rights. This includes fraud detection, security monitoring, platform analytics, and responsible gaming oversight.
• Consent: Processing carried out on the basis of your explicit consent, including the sending of marketing and promotional communications. Where consent is the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

Sharing Your Data

gq999 does not sell, rent, or trade your personal data to unaffiliated third parties. We may share your personal data with the following categories of recipients, strictly limited to what is necessary for each stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and AML service providers engaged by gq999 to verify the identity and age of players and to screen transactions for financial crime indicators.
• Game Software Providers: Companies such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive the minimum technical data necessary (e.g., session tokens, player identifiers) to operate their games within the gq999 platform. These providers do not receive your full identity or financial data.
• IT & Platform Infrastructure Providers: Cloud hosting, server infrastructure, and cybersecurity service providers who process data on gq999's behalf under strict data processing agreements.
• Legal & Regulatory Authorities: Law enforcement agencies, courts, and regulatory bodies where gq999 is required by law to disclose personal data, or where disclosure is necessary to protect the legal rights of gq999 or third parties.
• Fraud Prevention Networks: Where a player account is identified as connected to fraudulent activity, data may be shared with other platform operators via fraud prevention databases to prevent cross-platform fraud.

All third-party service providers who process personal data on behalf of gq999 are required to enter into data processing agreements that bind them to process data only for the specific purposes for which it was shared and to maintain appropriate security standards.

International Transfers

Some of gq999's third-party service providers — including game software providers and cloud infrastructure providers — may be located outside Bangladesh and may process your personal data in other countries. When personal data is transferred internationally, gq999 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections applicable in Bangladesh.

These safeguards may include contractual clauses binding the receiving party to process data in accordance with applicable data protection standards, or reliance on the receiving country's adequacy status where applicable. If you have questions about international data transfers or wish to obtain a copy of the safeguards in place, please contact us at [email protected].

Cookies & Tracking Technologies

gq999 uses cookies and similar technologies on the gq999.io platform to provide a functional, secure, and user-friendly experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account security settings, and enable core features such as the bet slip and game loading. These cookies cannot be disabled without breaking platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised or aggregated data about how players navigate the gq999 platform — which pages are visited most frequently, where errors occur, and how long sessions last. This data is used to improve platform performance. These cookies do not identify you personally.
• Functional Cookies: These cookies remember your in-platform preferences, such as your preferred odds format (decimal or fractional), your preferred language setting, and your last visited sports market, to provide a more personalised experience.
• Security Cookies: These cookies support gq999's fraud detection and account security systems, including detection of unusual login patterns and prevention of cross-site request forgery (CSRF) attacks.

Most web browsers allow you to manage cookie preferences through your browser settings, including the ability to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the gq999 platform, including your ability to log in. Disabling performance or functional cookies will not prevent you from using the platform but may reduce the quality of your experience.

Data Security

gq999 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and the gq999 platform is encrypted using 256-bit SSL (Secure Sockets Layer) technology, the same standard used by international banking institutions.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial account identifiers, is stored in encrypted form at rest.
• Access Controls: Access to personal data within the gq999 organisation is restricted to authorised personnel who have a legitimate need to access that data in the course of their duties. All staff with data access undergo background checks and data security training.
• OTP Authentication: Sensitive account actions — including password resets, withdrawal requests above certain thresholds, and changes to registered payment methods — require one-time password (OTP) verification to the registered mobile number.
• Intrusion Detection: gq999's infrastructure is monitored continuously for signs of unauthorised access, unusual activity patterns, and security vulnerabilities. Security patches are applied on a prompt and regular basis.

Data Retention

gq999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active gq999 account is retained for the duration of the account's active status plus a period of five years following account closure, to comply with anti-money-laundering record-keeping obligations.
• Transaction Records: Financial transaction records (deposits, withdrawals, bets, and game results) are retained for a minimum of seven years following the date of the transaction, in line with standard financial record-keeping requirements.
• KYC & Identity Documents: Identity verification documents submitted for KYC purposes are retained for five years following account closure, or longer where required by applicable law.
• Support Communications: Records of support interactions are retained for three years following the date of the last communication, to support dispute resolution.
• Marketing Consent Records: Records of marketing opt-in consent are retained for the duration of the consent plus three years following withdrawal of consent or account closure, whichever is earlier.
• Technical & Log Data: Server logs and technical data are typically retained for 12 months, after which they are deleted or anonymised.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

Your Rights

As a data subject, you have the following rights in relation to the personal data that gq999 holds about you:

• Right of Access: You have the right to request a copy of the personal data gq999 holds about you, together with information about how it is being processed. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data gq999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request that gq999 delete the personal data it holds about you. This right is not absolute — it does not apply where gq999 is required by law to retain the data, or where the data is necessary for the establishment, exercise, or defence of legal claims.
• Right to Restriction of Processing: You have the right to request that gq999 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, while gq999 verifies that accuracy.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to gq999 processing your personal data on the basis of legitimate interest, including profiling carried out for responsible gaming monitoring purposes. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where gq999 processes your data on the basis of your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

gq999 will not charge a fee for processing a rights request unless the request is manifestly unfounded or excessive. In such cases, gq999 may charge a reasonable administrative fee or decline to act on the request, and will notify you accordingly with reasons.

Children & Minors

The gq999 platform is strictly for adults aged 21 and above. gq999 does not knowingly collect personal data from any individual under the age of 21. Registration on the gq999 platform constitutes a declaration by the registrant that they are 21 years of age or older.

gq999 implements age verification checks during the account registration process, including the collection of date of birth and, where required, identity document verification to confirm the registrant's age. Accounts where the player's age cannot be confirmed will be suspended pending satisfactory verification.

Parents and guardians who believe that a minor in their care has registered a gq999 account should contact the support team immediately at [email protected] so that the account can be reviewed and closed.

Marketing Communications

gq999 sends promotional and marketing communications — including bonus offers, match promotions, seasonal campaigns, and new game announcements — only to players who have provided explicit opt-in consent during registration or at a later point through their account settings.

Marketing communications from gq999 may be delivered via email to your registered email address, or via SMS to your registered mobile number. We do not send unsolicited marketing communications to individuals who have not opted in.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link included at the bottom of every gq999 promotional email;
• Updating your notification preferences within your gq999 account settings; or
• Sending an email with the subject line "Unsubscribe" to [email protected].

Withdrawal of marketing consent will be processed within five business days. Please note that withdrawal of marketing consent does not affect transactional communications — gq999 will continue to send you account-related notifications such as deposit confirmations, withdrawal processing updates, security alerts, and OTPs, as these are necessary for the operation of your account.

Third-Party Links

The gq999 platform may, on occasion, contain references or informational mentions of third-party services such as payment providers or game studios. Where any such external sites are linked, please be aware that those sites operate under their own independent privacy policies, and gq999 accepts no responsibility or liability for their content, privacy practices, or data handling.

gq999 recommends that you read the privacy policy of any third-party website before submitting any personal data to it. The inclusion of any third-party reference on the gq999 platform does not constitute an endorsement by gq999 of that site's privacy practices.

Changes to This Policy

gq999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform services. When material changes are made, the updated Policy will be published on the gq999 platform at gq999.io/privacy-policy, and the "Last updated" date at the top of this document will be revised accordingly.

Where changes are significant, gq999 may notify registered players via email or via an in-platform notification. Your continued use of the gq999 platform following publication of any updated Privacy Policy constitutes your acceptance of the updated terms.

It is your responsibility to review this Policy periodically. If you disagree with any material change to this Policy, you should stop using the gq999 platform and may request account closure in accordance with the Terms & Conditions.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to submit a formal privacy complaint, please contact gq999 using the details below:

• Privacy & Data Enquiries Email: [email protected]
• Subject Line for Data Rights Requests: "Data Rights Request"
• Subject Line for Privacy Complaints: "Privacy Complaint"
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Acknowledgement: Within 2 business days of receipt
• Full Response: Within 10 business days of receipt

gq999 is committed to resolving all privacy concerns fairly, transparently, and promptly. We take every data protection concern seriously and will provide written responses to all formal privacy complaints.