How qx99 Collects, Uses & Protects Your Personal Data

Introduction

qx99 ("we", "us", "our") operates an online casino and sports betting platform accessible at qx99.io, serving players primarily based in Bangladesh. We are committed to handling all personal data with the utmost care, transparency, and respect for your privacy. This Privacy Policy explains our data practices in full and is intended to give you a clear and honest account of how your information is managed from the moment you visit our platform.

This Privacy Policy applies to all personal data collected through the qx99 website, mobile-optimised interface, and any related communications channels including live chat and email correspondence with our support team. It applies equally to registered account holders and to visitors who browse the platform without creating an account.

By accessing the qx99 platform or registering an account, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein. If you do not agree to this Privacy Policy, you must discontinue use of the qx99 platform immediately. This Privacy Policy should be read alongside the qx99 Terms & Conditions, which govern the overall relationship between qx99 and its players.

Data Controller

For the purposes of applicable data protection law, qx99 is the data controller responsible for the personal data of its platform users. As the data controller, qx99 determines the purposes for which personal data is collected and the manner in which it is processed. Where qx99 engages third-party service providers to process personal data on its behalf (for example, payment processors or game providers), those parties act as data processors and are contractually bound to handle personal data only in accordance with qx99's instructions and this Privacy Policy.

All data protection enquiries, access requests, correction requests, deletion requests, and complaints regarding qx99's data practices should be directed to the qx99 data protection contact point: [email protected]. Please mark the subject line of your email as "Data Protection Enquiry" to ensure it is routed to the appropriate team member.

Data We Collect

qx99 collects only personal data that is necessary for the specific purposes described in this Privacy Policy. The categories of personal data we collect are set out in the table below.

We do not collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond responsible gaming self-disclosure), or biometric data unless you voluntarily provide such information in the course of a support interaction or responsible gaming request, in which case it will be handled with heightened care and used only for the purpose for which it was provided.

How We Collect Data

qx99 collects personal data through the following channels and methods:

• Direct interactions: Data you provide when completing the qx99 registration form, submitting KYC verification documents, making deposits or withdrawal requests, contacting our support team via live chat or email, or updating your account preferences.
• Automated platform technologies: Technical and usage data collected automatically during your use of the qx99 platform, including cookies, server logs, and session tracking tools. See Section 11 (Cookies & Tracking) for full details.
• Payment processors: Financial transaction data relayed to qx99 by your selected payment provider (bKash, Nagad, Rocket, or bank) to confirm the status of deposit and withdrawal transactions.
• Identity verification services: Where qx99 uses a third-party KYC service to verify the authenticity of identity documents you submit, that service may return verification outcome data to qx99.
• Fraud prevention and security partners: Technical signals (such as device fingerprint data, IP reputation scores, and velocity checks) provided by fraud detection partners to help qx99 identify and prevent unauthorised account access and bonus abuse.

qx99 does not purchase personal data from data brokers or any third-party data marketplaces. All personal data held by qx99 originates either directly from you or from the contracted service providers listed above.

Legal Basis for Processing

qx99 processes personal data only where a valid legal basis exists. The principal legal bases on which qx99 relies are as follows:

• Contractual necessity: Processing that is necessary to create and maintain your qx99 account, process your deposits and withdrawals, and deliver the gaming and betting services you have requested. Without this processing, qx99 cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering (AML) obligations, age verification requirements, and the retention of financial transaction records.
• Legitimate interests: Processing carried out on the basis of qx99's legitimate business interests, where those interests are not overridden by your rights and interests. This includes fraud detection, platform security, responsible gaming monitoring, and internal analytics used to improve the platform.
• Consent: Processing based on your freely given, specific, and informed consent. This applies principally to marketing communications (promotional emails and SMS). You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

How We Use Your Data

qx99 uses the personal data it collects for the following specific purposes. We do not use personal data for any purpose not listed here without first providing notice and, where required, obtaining your consent.

• Account creation and management: Creating your qx99 player account, maintaining your account profile, processing password resets, and managing account settings including responsible gaming limits.
• Identity and age verification (KYC): Verifying that you are who you say you are, that you meet the minimum age requirement of 21 years, and that you are not subject to any self-exclusion or restriction that would prevent your use of the platform.
• Payment processing: Receiving deposits from and sending withdrawal payments to your verified bKash, Nagad, Rocket, or bank account. All payment processing is handled via encrypted, tokenised payment channels.
• Fraud prevention and platform security: Detecting and preventing account takeover attempts, multi-accounting, bonus abuse, money laundering, and other activities that could harm the integrity of the qx99 platform or other players.
• Responsible gaming: Monitoring your usage patterns to identify potential signs of problem gambling, enforcing self-imposed deposit limits and session reminders, and ensuring self-exclusion orders are respected across all platform touchpoints.
• Customer support: Responding to your enquiries, resolving account disputes, investigating complaints, and maintaining records of support interactions for quality assurance purposes.
• Regulatory compliance: Meeting our obligations under applicable Bangladeshi law and international standards, including the retention of financial records, the reporting of suspicious transactions, and the maintenance of age verification records.
• Platform improvement: Using aggregated, anonymised usage data to identify areas of the qx99 platform that can be improved, to test new features, and to optimise the gaming experience for Bangladesh-based players.
• Marketing communications (with consent only): Sending you promotional offers, bonus notifications, tournament announcements (including BPL, IPL, and T20 World Cup betting promotions), and seasonal offers related to events such as Eid and Pohela Boishakh, where you have given explicit consent to receive such communications.

Data Sharing & Disclosure

qx99 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — for the sole purpose of processing your deposit and withdrawal transactions. Payment providers receive only the minimum data necessary to complete the relevant transaction.
• Game technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios — for the purpose of delivering licensed casino games on the qx99 platform. Game providers may receive technical session data to initialise and maintain your game session. They do not receive financial or identity data.
• Identity verification (KYC) service providers: Third-party KYC platforms contracted by qx99 to verify the authenticity of identity documents and confirm the age and identity of players. These providers are contractually prohibited from using your data for any purpose other than the verification service they are contracted to perform.
• Fraud detection and security services: Anti-fraud and cybersecurity partners who provide technical signals to help qx99 identify and prevent unauthorised access, account fraud, and platform abuse. These partners process only technical data such as IP addresses and device attributes.
• Regulatory and law enforcement authorities: Where qx99 is required by applicable Bangladeshi law, court order, or lawful authority request to disclose personal data, we will comply with such obligations. Where legally permissible, qx99 will notify the affected account holder of any such disclosure request.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of qx99's business assets, personal data held by qx99 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any changes to this Privacy Policy that may result.

All third-party data processors engaged by qx99 are subject to contractual data processing agreements that require them to implement appropriate technical and organisational security measures and to process personal data only on documented instructions from qx99.

International Data Transfers

The qx99 platform serves players based in Bangladesh. However, some of the third-party service providers engaged by qx99 — particularly game technology providers and fraud detection partners — may store or process data on servers located outside Bangladesh. Where such international transfers occur, qx99 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Privacy Policy.

Safeguards used for international transfers include contractual clauses requiring the receiving party to maintain data protection standards consistent with qx99's obligations, technical encryption of data in transit and at rest, and data minimisation practices that limit the volume and sensitivity of data transferred internationally.

If you have questions about the specific countries to which your data may be transferred and the safeguards applied, you may submit an enquiry to [email protected] with the subject line "International Transfer Enquiry".

Data Retention

qx99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised or aggregated data (which cannot identify you) may be retained indefinitely for statistical and platform improvement purposes.

Security Measures

qx99 takes the security of your personal data seriously and implements a layered set of technical and organisational safeguards designed to protect against unauthorised access, accidental loss, destruction, or disclosure. Our current security measures include:

• Encryption at rest: All personal data stored on qx99 servers is encrypted using AES-256 encryption, the same standard used by international financial institutions.
• Encryption in transit: All data transmitted between your device and the qx99 platform is protected by TLS 1.3 protocol. The qx99 website enforces HTTPS for all connections and uses HTTP Strict Transport Security (HSTS).
• Access controls: Access to personal data within the qx99 organisation is restricted on a strict need-to-know basis. Staff with access to personal data receive mandatory data protection training and are subject to confidentiality obligations.
• Two-factor authentication (2FA): qx99 strongly recommends that all players enable SMS OTP-based 2FA on their accounts, available free of charge through account security settings. Internal qx99 staff systems also require multi-factor authentication.
• Penetration testing: The qx99 platform undergoes regular third-party security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident response: qx99 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in risk to your rights, qx99 will notify affected players promptly and take immediate remediation steps.

While qx99 employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for keeping your registered email address and mobile banking accounts secure. If you suspect unauthorised access to your qx99 account, contact our support team immediately via live chat or at [email protected].

Cookies & Tracking Technologies

qx99 uses cookies and similar tracking technologies on its platform to ensure the website functions correctly, to improve performance, and to understand how players interact with the platform. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are required for the qx99 platform to function. They maintain your login session, remember your account preferences, and ensure security features such as CSRF protection operate correctly. These cookies cannot be disabled without preventing access to the platform.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors use the qx99 platform — for example, which game pages are most visited and where players encounter errors. This data is used solely to improve platform performance and the player experience. No personally identifiable information is collected through analytics cookies.
• Functional cookies: These cookies remember your optional preferences, such as your chosen display settings, to provide a more personalised experience on return visits.

qx99 does not use third-party advertising cookies, behavioural tracking cookies, or retargeting pixels. We do not share cookie data with ad networks, data brokers, or social media platforms.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality. Disabling performance or functional cookies will not prevent you from accessing or using the platform but may reduce the quality of your experience.

Your Data Rights

As a qx99 player, you hold the following rights in relation to your personal data. qx99 is committed to honouring these rights promptly and without undue delay. To exercise any right listed below, please email [email protected] with the subject line "Data Rights Request" and include your registered account username and a description of the right you wish to exercise.

• Right of access: You have the right to request a copy of the personal data qx99 holds about you and to receive information about how it is processed. qx99 will respond to access requests within 30 days.
• Right to rectification: If any personal data qx99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account profile settings.
• Right to erasure ("right to be forgotten"): You may request that qx99 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to qx99's legal obligation to retain certain data (see Section 9).
• Right to restriction of processing: You may request that qx99 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is contested or while a legitimate interests objection is being assessed.
• Right to data portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests. qx99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (principally marketing communications), you may withdraw consent at any time through your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Children & Minors

The qx99 platform is strictly prohibited for use by individuals under the age of 21. qx99 does not knowingly collect personal data from anyone below this age threshold. Age verification is a mandatory step in the qx99 registration and KYC process, and accounts suspected of being held by underage individuals are suspended immediately pending verification.

If you believe that a person under 21 has created a qx99 account or provided personal data to qx99, please notify us immediately at [email protected] with the subject line "Underage Account Report". qx99 will investigate promptly, suspend the account, delete any personal data collected in connection with it, and return any deposited funds via the original payment method. Any winnings generated on an underage account are void and will not be paid out.

Parents and guardians in Bangladesh who are concerned about underage access to online gambling platforms are encouraged to use parental control software to restrict access to gambling websites on shared or family devices.

Marketing Preferences

qx99 sends marketing communications — including promotional bonus offers, tournament betting notifications (BPL, IPL, T20 World Cup), seasonal campaigns (Eid, Pohela Boishakh, Victory Day), and new game announcements — only to players who have given explicit opt-in consent at the time of registration or through their account settings.

You may update your marketing preferences at any time by logging into your qx99 account and navigating to the notification preferences section of your account settings, or by emailing [email protected] with the subject line "Marketing Opt-Out". Opt-out requests are processed within 5 business days. Please note that transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — are not marketing communications and will continue to be sent regardless of your marketing preference settings, as they are necessary for the operation of your account.

qx99 does not send unsolicited marketing communications via SMS, email, or any other channel to individuals who have not opted in. If you receive an unsolicited communication purporting to be from qx99 that you did not consent to receive, please report it to [email protected] immediately, as it may be a phishing attempt.

Policy Changes

qx99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When material changes are made to this Privacy Policy, qx99 will notify registered players via email to the address on file or through an on-platform notification, at least seven (7) days before the revised policy takes effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to remain informed about how qx99 handles your personal data. Your continued use of the qx99 platform following the publication of any revision constitutes acceptance of the updated Privacy Policy. If you do not agree to any revision, you must cease using the platform and may request account closure by contacting [email protected].

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about the way qx99 handles your personal data, please contact us using the details below. All privacy-related communications should include your registered account username and clearly state the nature of your enquiry.

• Email: [email protected] — Subject line: "Privacy Policy Enquiry"
• Data Rights Requests: [email protected] — Subject line: "Data Rights Request"
• Underage Account Reports: [email protected] — Subject line: "Underage Account Report"
• Live Chat: Available 24/7 through your qx99 account dashboard — average response time under 3 minutes

qx99 aims to respond to all privacy-related enquiries within 48 hours and to resolve all data rights requests within 30 calendar days of receipt. Where a request is particularly complex or where qx99 receives a high volume of requests simultaneously, this period may be extended by a further 30 days with prior notice to you.