Your Privacy Matters
at gq99 — We Protect Your Data

1 Introduction

gq99 is an online betting and casino platform built specifically for players in Bangladesh. We offer a wide range of products including cricket betting, live casino games, slots, and other gaming content, all accessible via convenient local payment methods such as bKash, Nagad, and Rocket. In delivering these services, we necessarily collect and process certain personal data relating to our players.

We take this responsibility seriously. gq99 is committed to handling all personal data lawfully, fairly, and transparently. This Privacy Policy sets out in plain language exactly what data we collect about you, why we collect it, how we use it, who we share it with, how long we keep it, and what choices and rights you have in relation to your own information.

This Policy applies to all personal data collected by gq99 through the gq99.io website, any associated mobile-optimised interface, and through direct communications such as email and live chat support interactions. It does not apply to third-party websites or services that may be linked from the gq99 platform — those are governed by their own privacy policies.

2 Personal Data We Collect

gq99 collects the following categories of personal data from players:

2.1 Identity & Registration Data

When you create a gq99 account, we collect:

• Full legal name (as it appears on your government-issued identification document);
• Date of birth (to verify that you are 21 years of age or older);
• Residential address in Bangladesh (including district, division, and postal code);
• Email address;
• Mobile phone number;
• Username and hashed password (passwords are never stored in plain text).

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to process withdrawals, we may request:

• A copy of your National Identity Card (NID), passport, or driver's licence;
• A recent utility bill or bank statement confirming your registered address;
• A selfie or live photo for identity confirmation purposes.

2.3 Financial & Transaction Data

We collect records of all financial transactions conducted through your gq99 account, including:

• Deposit amounts, dates, times, and payment methods used (bKash, Nagad, Rocket, Upay, Visa, Mastercard);
• Withdrawal requests, amounts, and processing status;
• Bonus credits received, wagering progress, and bonus settlement records;
• Mobile wallet account numbers or card BINs (first six and last four digits of a card only — never the full card number).

2.4 Gaming & Betting Activity Data

We collect detailed records of your activity on the gq99 platform, including:

• All bets placed: sport, event, market, odds, stake amount, and settlement outcome;
• All casino game sessions: game title, provider, session duration, bet amounts, and win/loss records;
• Responsible gaming settings you have applied (deposit limits, cooling-off periods, self-exclusion requests).

2.5 Technical & Device Data

When you access gq99, our servers automatically collect:

• IP address and approximate geographic location (country, city);
• Device type, operating system, and browser version;
• Pages visited, time spent on each page, click events, and navigation paths;
• Session tokens and authentication data;
• Referring URL (the address of the site that directed you to gq99.io, if applicable).

2.6 Communications Data

We retain records of all communications between you and gq99, including:

• Email correspondence sent to or received from [email protected];
• Live chat transcripts from sessions with our support agents;
• Complaint or dispute submissions and our responses.

3 How We Collect Your Data

gq99 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey;
• Automatically through the platform — via server logs, cookies, session tracking, and analytics tools as you use gq99.io;
• From payment service providers — transaction confirmation data received from bKash, Nagad, Rocket, Upay, and card networks when you complete a financial transaction;
• From game providers — session and outcome data from third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi when you play their games through the gq99 platform;
• From fraud and compliance partners — risk-scoring signals and identity-verification data from third-party compliance tools used to fulfil our anti-money-laundering (AML) obligations.

4 How We Use Your Personal Data

gq99 uses your personal data for the following specific purposes:

gq99 will not use your personal data for any purpose not listed above without first informing you and, where required, obtaining your explicit consent.

5 Legal Basis for Processing

gq99 processes your personal data on the following legal grounds:

• Contract Performance: Processing your data is necessary to fulfil our contractual obligations to you as a registered player — including account management, transaction processing, and delivery of gaming services.
• Legal Obligation: gq99 is required to process certain data to comply with applicable legal requirements, including Know Your Customer (KYC) identity verification, anti-money-laundering (AML) checks, and responsible gaming obligations.
• Legitimate Interests: In some cases, gq99 processes data based on our legitimate business interests — including fraud prevention, platform security, technical performance monitoring, and dispute management — provided those interests are not overridden by your own privacy rights.
• Consent: Where we send you direct marketing communications (e.g., promotional emails about new offers or games), we do so only on the basis of your explicit consent. You may withdraw consent at any time by contacting [email protected].

6 Sharing Your Personal Data

gq99 does not sell, rent, or trade your personal data to any third party. We share data only in the following limited circumstances:

6.1 Payment Service Providers

To process your deposits and withdrawals, we share necessary transaction data (such as your account identifier, transaction amount, and mobile wallet or card details) with our payment partners: bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers are contractually bound to use your data solely for the purpose of processing your transaction and are prohibited from using it for any other purpose.

6.2 Game Providers

When you launch a casino game or live dealer table hosted by a third-party studio (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, or Habanero), a session token and anonymised player identifier are passed to that provider to authenticate your game session. Full identity data is not shared with game providers.

6.3 KYC and Compliance Partners

gq99 works with third-party identity verification and AML compliance services to fulfil our legal obligations. When you submit KYC documents, these may be processed by a certified identity verification provider operating under a strict data processing agreement with gq99. These partners are not permitted to retain or use your data beyond the scope of their verification function.

6.4 Legal and Regulatory Authorities

gq99 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by law, court order, or binding regulatory instruction. We will inform you of any such disclosure where we are legally permitted to do so.

6.5 Business Transfers

In the event that gq99 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the data protection arrangements in place for the receiving entity prior to the transfer taking effect.

7 Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language and login session — making your next visit easier and the site more useful to you.

7.2 Cookies Used by gq99

7.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete cookies after each browsing session. Please note that disabling essential cookies will prevent you from logging into your gq99 account and using core platform features. Analytics and preference cookies can be disabled without affecting your ability to use gq99.

8 Data Retention

gq99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

When data is no longer required and its retention period has expired, gq99 will securely delete or anonymise the data using industry-standard data destruction methods. Anonymised aggregate data (which can no longer be linked to any individual) may be retained indefinitely for statistical and platform improvement purposes.

9 Data Security

gq99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and gq99 servers;
• Encrypted data storage for all sensitive personal and financial data at rest;
• Password hashing using industry-standard algorithms — your password is never stored in plain text and is not accessible to gq99 staff;
• Role-based access controls ensuring that gq99 staff can only access player data relevant to their specific job function;
• Access logging and audit trails for all internal access to personal data;
• Regular security assessments and penetration testing of the gq99 platform infrastructure;
• Two-factor authentication (2FA) available for player accounts to provide an additional layer of login security.

While gq99 takes all reasonable precautions to safeguard your data, no internet-based platform can guarantee absolute security. You play an important role in keeping your account secure by using a strong, unique password, not sharing your login credentials with anyone, and contacting us immediately if you suspect unauthorised access.

10 Your Data Protection Rights

As a player on the gq99 platform, you have the following rights in relation to your personal data:

• Right of Access: You have the right to request a copy of all personal data gq99 holds about you. We will provide this within 14 business days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 8.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, such as when you have contested its accuracy and we are verifying it.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to gq99 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests. Where you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered username, a description of the right you wish to exercise, and (where applicable) a copy of your identity document so we can verify your identity before processing the request. We will acknowledge your request within 3 business days and provide a full response within 14 business days.

11 Children & Underage Players

gq99 is strictly an adult platform. Our services are intended exclusively for players aged 21 years and above. gq99 does not knowingly collect personal data from anyone under the age of 21. If we become aware that an account has been registered by or on behalf of an individual under 21, we will immediately suspend the account, delete any personal data collected in connection with it, and void any associated transactions.

If you are a parent or guardian and believe that your child has registered an account on gq99, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and take prompt action.

12 Third-Party Links

The gq99 platform may contain references to game providers, payment partners, and other third-party services. While gq99 selects its partners carefully, we are not responsible for the privacy practices of any third-party website, service, or application that may be accessible from or mentioned on gq99.io.

We encourage you to read the privacy policies of any third-party service before providing your personal data to them. The fact that a third party is mentioned or linked from gq99 does not constitute an endorsement of their privacy or data protection practices.

13 Updates to This Privacy Policy

gq99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this Policy, we will notify registered players by email to their registered address with at least 7 days' notice before the updated Policy takes effect.

The "Last Updated" date at the top of this page will be revised each time changes are made. We encourage you to review this Policy periodically to stay informed about how gq99 is protecting your information. Your continued use of the gq99 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the platform and may request account closure by contacting [email protected].

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gq99 handles your personal data, please contact our support team using the details below. Our team operates 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6), and all communications are conducted in English.

When contacting gq99 regarding a privacy matter, please include your registered account username and a clear description of your query or request to help us assist you efficiently. All data rights requests will be handled confidentially and processed in strict accordance with this Privacy Policy.