qqaa Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Information We Collect

qqaa collects personal information from players through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and occasionally from trusted third-party service providers. The categories of information we collect are described below.

1.1 Information You Provide Directly

When you register an account, complete identity verification, contact customer support, or participate in promotions, you may provide us with the following categories of personal information:

• Identity information: full legal name, date of birth, gender, and nationality as appearing on your national identity card (NID) or passport.
• Contact information: residential address in Bangladesh (including district, upazila, and post code), email address, and mobile phone number.
• Financial information: mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details (where applicable), and transaction references used to verify deposits and withdrawals.
• Identity documents: scanned or photographed copies of government-issued identification submitted as part of our Know Your Customer (KYC) verification process, which may include NID, passport, or birth certificate.
• Communications: the content of messages, emails, and chat transcripts exchanged with our customer support team.
• Self-reported information: responsible gaming preferences, deposit limits, and self-exclusion requests that you submit voluntarily.

1.2 Information Collected Automatically

When you access the qqaa Platform, certain technical information is automatically collected by our systems. This includes:

• Device information: device type, operating system, browser type and version, screen resolution, and language settings.
• Network information: IP address, internet service provider, and approximate geographic location derived from IP geolocation (not GPS).
• Usage data: pages visited, games played, betting history, session duration, clickstream data, and features accessed within the Platform.
• Transaction data: a complete record of all deposits, withdrawals, bonus claims, wagers placed, and game outcomes associated with your account.
• Cookie and tracking data: information gathered through cookies, pixel tags, local storage, and similar technologies as described in Section 4 of this Policy.

1.3 Information From Third Parties

In limited circumstances, qqaa may receive personal information about you from third-party sources, including payment service providers (such as bKash, Nagad, and Rocket) who confirm transaction status, identity verification bureaus used to cross-check KYC documents, and fraud prevention services that flag suspicious account activity. Information received from third parties is handled with the same standard of care as information you provide directly and is used only for the purposes described in this Policy.

2 How We Use Your Information

qqaa processes personal information only for legitimate purposes that are necessary to operate the Platform, fulfil our obligations to players, and comply with applicable legal requirements. The table below summarises the primary purposes for which we use your data and the legal basis for each processing activity.

2.1 Marketing Communications

qqaa may send you promotional emails, SMS notifications, or in-platform messages regarding new games, bonus offers, seasonal promotions (such as Eid special offers, BPL season promotions, or Pohela Boishakh campaigns), and Platform updates. All marketing communications are sent only where you have provided explicit consent during account registration or have subsequently opted in. You may withdraw consent at any time by contacting [email protected] or by using the unsubscribe mechanism included in any marketing email. Withdrawing consent for marketing does not affect the lawfulness of processing carried out prior to withdrawal, nor does it affect your ability to use the Platform.

2.2 Automated Decision-Making

qqaa uses automated systems to detect unusual account activity, identify potential fraudulent transactions, and flag accounts that may require responsible gaming intervention. Where an automated decision has a significant effect on your account (for example, a temporary suspension pending fraud review), you have the right to request human review of that decision by contacting [email protected] with a written request.

3 Data Sharing and Disclosure

qqaa does not sell, rent, or trade your personal information to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Service Providers and Processors

We engage trusted third-party service providers to support the operation of the Platform. These providers act as data processors on our behalf and are contractually bound to process your information only under our documented instructions and to maintain appropriate technical and organisational security measures. Categories of processors we work with include:

• Payment processing providers, including mobile financial services (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard), to facilitate deposits and withdrawals.
• KYC and identity verification service providers who assist in validating the identity documents you submit during account verification.
• Cloud hosting and infrastructure providers that store Platform data on secured servers.
• Game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and NetEnt) who deliver game software and maintain their own game-level data records in accordance with their own privacy policies.
• Fraud detection and anti-money-laundering compliance tools that analyse transaction patterns for suspicious activity.
• Customer support platform providers that power our live chat and email ticketing systems.

3.2 Legal and Regulatory Disclosures

qqaa may disclose personal information to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where we are legally compelled to do so by a valid court order, regulatory directive, or statutory reporting obligation. In such cases, we will disclose the minimum information required to fulfil the legal obligation and, where permissible by law, will notify you of any such disclosure.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of qqaa's business assets, personal information held by qqaa may form part of the transferred assets. If such a transaction occurs, the acquiring entity will be required to honour the privacy commitments described in this Policy, and you will be notified via your registered email address prior to your data being transferred to or governed by a different privacy policy.

4 Cookies and Tracking Technologies

qqaa uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and analyse how the Platform is used. A cookie is a small text file placed on your device by a web server. The cookies we use fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged into your qqaa account and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Used to remember your language preferences, display settings, and responsible gaming configuration so that these persist across sessions. Disabling these cookies may reduce your experience of the Platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the Platform, which games are most popular, and where technical errors occur. This data helps us improve Platform performance and content quality.
• Performance cookies: Used to monitor page load times, server response performance, and error rates. Data collected through performance cookies is used solely for technical optimisation and is not linked to individual player identity.

4.1 Managing Your Cookie Preferences

You can control cookie settings through your browser's privacy settings at any time. Most modern browsers allow you to block or delete cookies, or to receive a warning before a cookie is stored. Please note that blocking strictly necessary cookies will prevent you from logging into your qqaa account. Blocking functional or analytics cookies will not prevent you from using the Platform but may affect the accuracy of your personalised settings. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

4.2 Local Storage and Session Storage

In addition to cookies, qqaa may use HTML5 local storage and session storage to retain small amounts of non-sensitive preference data on your device between pages and sessions. This data is stored locally on your device and is not transmitted to qqaa servers independently of your normal Platform activity. You can clear local storage through your browser's developer tools or privacy settings.

5 Data Security and Retention

qqaa implements a range of technical and organisational security measures designed to protect your personal information against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the qqaa Platform.
• Encryption of sensitive data fields (including financial account references and identity document scans) at rest on our servers.
• Role-based access controls that restrict internal access to personal data to only those employees and contractors who require it to perform their job functions.
• Regular security assessments and penetration testing of Platform infrastructure.
• Secure, redundant data storage with automated backups to prevent data loss.
• Multi-factor authentication requirements for internal systems that handle player personal data.

5.1 Data Retention Periods

qqaa retains personal information only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identified or identifiable individual. If you request deletion of your account, qqaa will process that request subject to any overriding legal obligations that require us to retain specific categories of data for the periods set out above.

5.2 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, qqaa will notify affected players without undue delay after becoming aware of the breach, providing clear information about the nature of the breach, the categories of data affected, and the steps you should take to protect yourself. Notification will be sent to your registered email address and, where appropriate, communicated via a prominent notice on the Platform.

6 Your Privacy Rights

qqaa respects your rights over your own personal data. Depending on applicable law, you may exercise the following rights with respect to the personal information we hold about you:

• Right of access: You may request a copy of the personal information qqaa holds about you, along with information about how it is being processed.
• Right to rectification: If any personal information we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure: You may request deletion of your personal information where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction of processing: You may request that we restrict our processing of your data in certain circumstances, for example while a dispute is being investigated.
• Right to data portability: Where processing is carried out on the basis of your consent or a contract, you may request that we provide your personal data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interest, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.1 How to Exercise Your Rights

To exercise any of the rights listed above, please submit a written request in English to [email protected], including your full name, registered email address, and a clear description of the right you wish to exercise and the specific data to which your request relates. qqaa will respond to all valid data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further two months, and you will be notified of the extension within the initial thirty-day period.

7 Third-Party Services and Links

The qqaa Platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers deliver game software directly within the qqaa environment and may collect certain technical data (such as session identifiers and game outcome records) as part of operating their games. Each game provider maintains its own privacy policy governing the data collected through their software. qqaa is not responsible for the data practices of third-party game providers beyond the terms of our contractual agreements with them.

Payment service providers integrated with qqaa, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card networks, process transaction data according to their own privacy policies and regulatory obligations. When you initiate a deposit or withdrawal on qqaa, relevant transaction data is exchanged with the applicable payment provider to process the transaction. qqaa shares only the minimum data necessary to complete the transaction and does not share your qqaa account credentials or game history with payment providers.

7.1 No External Links Policy

The qqaa Platform does not contain links to external third-party websites. All navigation within qqaa remains within the qqaa.club domain. This Policy does not therefore apply to any external websites, and qqaa accepts no responsibility for the privacy practices of websites or services outside of the qqaa Platform.

8 Updates to This Privacy Policy

qqaa may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our privacy programme. When we make material changes to this Policy, we will update the effective date at the top of this page and, where the changes are significant, we will notify you via your registered email address or through a prominent notice on the Platform prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how qqaa protects your information. The most current version of this Policy will always be available at qqaa.club/privacy-policy. Your continued use of the Platform after any update to this Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way qqaa handles your personal information, please contact our support team in English at [email protected]. We are committed to resolving all privacy-related enquiries promptly, professionally, and in accordance with the standards described in this Policy.