bq999 Privacy
Policy & Data Rights

bq999 ("we", "us", "our", or "the Company") is committed to protecting and respecting the privacy of all individuals who interact with our platform at bq999.io (the "Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed.

This policy applies to all users of the bq999 Platform, including registered account holders, visitors who browse without registering, and any other individuals whose personal data we process in connection with our services. It covers data collected through the website, mobile interface, customer support channels, and any other bq999 touchpoints.

This Privacy Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy. In the event of a conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency, except where the conflict specifically concerns data protection matters, in which case this Privacy Policy governs.

bq999 is committed to processing personal data in a lawful, fair, and transparent manner. We collect data only for specified, explicit, and legitimate purposes and do not process it in any manner incompatible with those purposes.

For the purposes of applicable data protection legislation, bq999 is the data controller in respect of personal data processed through the Platform. As data controller, bq999 determines the purposes and means of processing personal data collected via the Platform.

The Platform is operated and maintained to serve users located in Bangladesh. bq999 is committed to handling all personal data in accordance with applicable international data protection standards and the responsible practices outlined in this Privacy Policy.

bq999 collects personal data from you through several means, including data you provide directly during registration and account use, data collected automatically through your use of the Platform, and data obtained from authorised third-party sources for verification purposes. The categories of personal data we may collect include:

bq999 does not collect or process special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or biometric data for identification purposes) unless explicitly required by applicable law for a specific regulatory compliance obligation, in which case you will be notified separately.

bq999 processes your personal data only where a lawful basis for processing exists. The following table outlines the primary purposes for which we process your data and the corresponding legal basis for each:

Where processing is based on your consent (for example, receiving promotional emails about bq999 offers, BPL season promotions, or Eid bonus campaigns), you have the right to withdraw that consent at any time by contacting [email protected] or adjusting your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

bq999 does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. We may share your data with the following categories of trusted third parties, strictly for the purposes listed and subject to binding data processing agreements:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and associated banking partners receive the minimum financial data necessary to process your deposit and withdrawal transactions.
• Identity Verification Providers: Regulated KYC/AML service providers receive identity documents and biometric data solely for the purpose of verifying your identity in compliance with our anti-money laundering obligations.
• Fraud Detection Systems: Automated fraud screening platforms receive technical and behavioural data (IP address, device fingerprint, bet patterns) to detect and prevent fraudulent activity on the Platform.
• Game Content Providers: Third-party game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) receive session and bet data necessary to deliver and settle game rounds. These providers operate their own certified gaming platforms.
• IT and Cloud Infrastructure Providers: Hosting and database service providers with whom bq999 maintains data processing agreements and who process data only on bq999's documented instructions.
• Legal and Regulatory Authorities: bq999 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or legal process, without prior notice to you where legally prohibited from doing so.

All third-party processors engaged by bq999 are contractually required to maintain the confidentiality of your data, implement appropriate security measures, and process your data only in accordance with bq999's written instructions.

bq999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, tax, or accounting obligations. The following retention periods apply as a general guide:

• Account and identity data is retained for the duration of your account and for a minimum of 5 years following account closure, to meet anti-money laundering record-keeping requirements.
• Transaction and financial records are retained for a minimum of 7 years following the date of each transaction, in accordance with financial record-keeping obligations.
• Customer support communications are retained for 3 years from the date of the last interaction, to support dispute resolution and quality assurance processes.
• Technical and usage logs (IP addresses, session logs) are retained for 12 months for security monitoring and fraud prevention purposes.
• Marketing preferences and consent records are retained for the duration of your account or until you withdraw consent, plus an additional 12 months as a compliance record.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Where data has been anonymised, it may be retained indefinitely as it no longer constitutes personal data.

bq999 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and the bq999 Platform is encrypted using industry-standard TLS protocols. A valid SSL certificate is maintained at all times.
• Data-at-Rest Encryption: Personal and financial data stored in bq999 databases is encrypted using AES-256 encryption standards.
• Access Controls: Access to personal data is restricted to authorised bq999 employees and contractors who require it in the course of their duties, on a strictly enforced least-privilege basis. All access events are logged and audited.
• Two-Factor Authentication: Administrative systems holding personal data are protected by mandatory multi-factor authentication.
• Security Audits: bq999 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the Platform.
• Incident Response: bq999 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a high risk to your rights and freedoms, we will notify affected users without undue delay.

While bq999 employs robust security measures, no method of transmission over the internet or method of electronic storage is completely secure. You are responsible for maintaining the confidentiality of your account password and for all activities conducted under your account. Report any suspected security incident to [email protected] immediately.

bq999 uses cookies and similar tracking technologies on the Platform to enable core functionality, analyse usage patterns, and improve the overall user experience. The following categories of cookies are in use:

bq999 does not deploy third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You may manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your account.

As a user of the bq999 Platform, you hold a number of rights in relation to your personal data. bq999 is committed to honouring these rights in a timely and transparent manner. Your rights include:

• Right of Access: You have the right to request a copy of the personal data bq999 holds about you. We will provide this within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. Minor account details (email address, phone number) can be updated directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal retention obligations described in Clause 6.
• Right to Restriction: You may request that bq999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction over erasure.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where bq999 relies on legitimate interests as the legal basis, including profiling based on those interests. bq999 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". bq999 will acknowledge your request within 48 hours and respond in full within 30 calendar days. We may ask you to verify your identity before processing your request to prevent unauthorised access to your data.

The bq999 Platform is strictly intended for adults aged 21 years and above. bq999 does not knowingly collect, process, or retain personal data from individuals under the age of 21. All account registrations require confirmation that the applicant is aged 21 or above, and identity verification procedures are designed to detect and reject applications from underage individuals.

If bq999 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account. Any funds deposited by a verified underage user will be returned to the originating payment method after deducting any withdrawal processing costs, and any winnings generated will be forfeited.

Parents and guardians who believe that a minor in their care has registered on the bq999 Platform should contact [email protected] immediately. We treat all such reports with the highest priority and will investigate and respond within 24 hours.

In the course of operating the bq999 Platform, your personal data may be transferred to, and stored or processed in, countries outside Bangladesh. This may occur, for example, where our IT infrastructure partners or game content providers operate servers in other jurisdictions.

Whenever personal data is transferred outside Bangladesh, bq999 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that which applies within Bangladesh. These safeguards may include:

• Contractual data protection clauses in agreements with all third-party processors receiving transferred data.
• Transfers only to jurisdictions that bq999 has assessed as providing an adequate level of data protection for the categories of data being transferred.
• Technical safeguards including end-to-end encryption of data in transit between jurisdictions.
• Strict limitations on the purposes for which transferred data may be used by recipients, with prohibition on onward transfer to further third parties without bq999's prior written consent.

By using the bq999 Platform, you acknowledge and consent to your personal data being transferred internationally as described in this clause, subject to the protections set out above.

bq999 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or Platform functionality. When we make material changes to this policy, we will:

• Update the "Last Reviewed" date displayed at the top of this page and in the document version bar.
• Send a notification to the email address registered to your bq999 account, where the changes materially affect how we process your personal data.
• Display a prominent notice on the Platform for a reasonable period following the publication of significant changes.

Your continued use of the bq999 Platform after the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must cease using the Platform and may request account closure in accordance with the process described in our Terms & Conditions. It is your responsibility to review this Privacy Policy periodically to stay informed of any updates.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bq999 processes your personal data, please contact our support team using the details below. All data protection enquiries should be submitted in writing to ensure a formal record is maintained.

For formal data protection complaints, please email [email protected] with the subject line "Data Protection Complaint". bq999 will acknowledge your complaint within 48 hours and aim to provide a full written response within 10 business days. If you remain unsatisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.