How aqq9 Collects, Uses and Saf eguards Your Personal Data

This Privacy Policy ("Policy") describes how aqq9 ("aqq9", "we", "us", "our") collects, processes, stores, protects and shares the personal data of individuals ("you", "Player", "User") who access or use the online betting and casino platform operated at https://aqq9.io and any associated subdomains, mobile applications or digital services (collectively, the "Platform").

aqq9 is committed to protecting the privacy and personal data of all its players, with particular regard to players accessing the Platform from Bangladesh. This Policy has been drafted in compliance with internationally recognised data protection principles including those set out in the General Data Protection Regulation (GDPR) framework, which aqq9 applies as a global standard of best practice regardless of the player's country of residence.

By registering an account on the aqq9 Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must cease using the Platform and contact us to close your account.

aqq9 is an online betting and casino platform operating under an international gaming licence. The Platform is operated by aqq9 and is accessible globally, with a primary focus on serving players in the Bangladesh market. For the purposes of data protection law, aqq9 is the data controller in respect of all personal data collected through the Platform.

aqq9's designated contact for privacy-related matters is the Data Protection Officer ("DPO"), reachable at [email protected] with the subject line "Privacy — DPO Request". All formal data protection inquiries, subject access requests and erasure requests should be directed to this contact.

aqq9 collects the following categories of personal data from players. The specific data collected depends on the features you use and the stage of your relationship with aqq9:

aqq9 does not intentionally collect special category data (as defined under GDPR Article 9) such as health data, biometric data for the purposes of unique identification, racial or ethnic origin, political opinions, religious beliefs or sexual orientation. If you voluntarily disclose such information in a support communication, it will be used only to address your specific query and will not be stored in your profile.

aqq9 collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Collection: Data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and device fingerprinting technologies. This includes your IP address, device identifiers, and browsing behaviour on aqq9.io.
• Third-Party Sources: Identity and fraud-risk data obtained from KYC verification partners, credit reference agencies, and AML screening databases when you submit a verification request. Payment confirmation data received from bKash, Nagad, Rocket, Upay, and bank payment gateways when you initiate a transaction.
• Publicly Available Sources: In limited circumstances related to AML compliance, aqq9 may cross-reference data against publicly available sanctions lists, politically exposed persons (PEP) registers, and adverse media databases.

aqq9 uses your personal data for the following specific purposes:

• Account Management: Creating, maintaining and administering your player account, including resetting passwords, updating account settings, and processing account closure requests.
• Identity Verification (KYC): Verifying your identity, age (21+), and eligibility to use the Platform in accordance with our legal obligations and internal compliance policies.
• Payment Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa and Mastercard. Verifying that payment methods are registered in your name.
• Anti-Money-Laundering (AML) & Fraud Prevention: Monitoring transactions and account activity for indicators of money laundering, fraud, bonus abuse, or other prohibited conduct. Reporting suspicious activity to relevant authorities where required by law.
• Customer Support: Responding to your queries, resolving disputes, processing complaints, and providing assistance via live chat and email.
• Responsible Gaming: Monitoring your gaming behaviour to identify potential problem gambling indicators and, where appropriate, proactively contacting you with responsible gaming information or applying protective limits.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the Platform's design, performance, game offering and user experience.
• Marketing Communications: Sending you personalised promotions, bonus offers and platform news — but only where you have explicitly opted in to receive such communications. You may withdraw consent at any time.
• Legal Compliance: Fulfilling aqq9's obligations under applicable laws, gaming regulations, and court or regulatory authority orders.
• Security: Detecting and preventing unauthorised access to your account, protecting the integrity of the Platform, and maintaining audit logs for security investigation purposes.

aqq9 will not use your personal data for any purpose that is incompatible with the purposes described above without first notifying you and, where required, obtaining your consent.

aqq9 processes your personal data on the following legal bases as defined under internationally recognised data protection law:

• Contract Performance: Processing that is necessary to provide you with the services described in aqq9's Terms & Conditions — including account management, payment processing, and game access — is carried out on the basis of contract performance.
• Legal Obligation: Processing that aqq9 is required to perform in order to comply with applicable laws and regulations — including KYC identity verification, AML transaction monitoring, and regulatory reporting — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, dispute resolution and Platform improvement is based on aqq9's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for the purposes of sending marketing communications, setting non-essential cookies, or any other purpose not covered by the above bases is carried out only where you have given aqq9 your freely given, specific, informed and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

aqq9 does not sell, rent or trade your personal data. We share personal data only in the following limited and controlled circumstances:

• KYC & Identity Verification Partners: Specialist third-party providers who verify the authenticity of identity documents and perform liveness checks on behalf of aqq9. These providers act as data processors under written data processing agreements.
• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa and Mastercard receive transaction-specific data necessary to process your deposits and withdrawals. aqq9 does not retain full card or wallet account numbers.
• AML & Fraud Screening Services: Third-party services that screen transactions and player profiles against sanctions lists, PEP registers, and known fraud databases as part of aqq9's compliance programme.
• Technology & Hosting Partners: Cloud infrastructure providers and technology vendors that host and maintain the Platform infrastructure. These providers process data solely on aqq9's instructions and under strict confidentiality agreements.
• Game Studio Providers: Live dealer and RNG game studios (such as Pragmatic Play, Evolution Gaming, Ezugi and others) may receive limited session and stake data necessary to deliver the game experience. They do not receive your identity or payment data.
• Regulatory & Law Enforcement Authorities: aqq9 will disclose personal data to relevant authorities (including financial intelligence units, gaming regulators and law enforcement) where required to do so by law, court order, or regulatory direction.

All third parties with whom aqq9 shares personal data are contractually required to process that data only for the specified purpose, to implement appropriate security measures, and to comply with applicable data protection obligations. aqq9 does not permit any third-party processor to use player data for their own commercial purposes.

As aqq9 operates an international platform, your personal data may be transferred to, stored in, and processed in countries outside Bangladesh. Some of these countries may not have data protection laws that are equivalent to those in your home jurisdiction.

Where such transfers occur, aqq9 ensures that appropriate safeguards are in place to protect your data, including:

• Standard Contractual Clauses (SCCs) approved under internationally recognised data protection frameworks, incorporated into contracts with all relevant service providers
• Binding corporate rules where data is transferred within aqq9's group of affiliated entities
• Transfers to countries or organisations that have received an adequacy determination from a recognised data protection authority

By using the aqq9 Platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred internationally in accordance with the safeguards described above.

aqq9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention requirements. The following retention periods apply:

• Account Data: Retained for the duration of your active account plus 5 years following account closure, to comply with AML regulations and potential dispute resolution obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping requirements.
• KYC Documents: Retained for the duration of your active account plus 5 years following account closure. In some regulatory contexts, a longer retention period of up to 7 years may apply.
• Customer Support Records: Retained for 3 years from the date of the last interaction, unless the communication is relevant to a live dispute or investigation.
• Marketing Preference Data: Retained until you withdraw your consent or for 3 years of inactivity, whichever comes first.
• Technical & Log Data: Retained for 12 months from collection, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard data destruction methods, or irreversibly anonymised so that it can no longer be linked to any individual.

aqq9 uses cookies and similar tracking technologies (such as web beacons, local storage objects and device fingerprinting) on the Platform to support essential functionality and to improve the user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These are essential for the Platform to function correctly. They enable core features such as user login sessions, account authentication, and security token validation. These cookies cannot be disabled without breaking Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players use the Platform — such as which pages are visited most frequently and where errors occur — enabling aqq9 to improve Platform performance and design.
• Functional Cookies: These cookies remember your preferences (such as language settings, preferred game categories, and display options) to deliver a personalised experience across sessions.
• Session Security Cookies: Used to detect and prevent fraudulent sessions, concurrent login attempts from different locations, and suspicious account activity.

Most web browsers allow you to manage cookie settings through the browser's preferences panel. You may block or delete cookies at any time; however, disabling strictly necessary cookies may prevent certain Platform features from functioning correctly, including your ability to log in and access your account.

As a player on the aqq9 Platform, you have the following rights in relation to your personal data. aqq9 is committed to honouring these rights promptly and without unnecessary barriers:

• Right of Access: You may request a copy of all personal data aqq9 holds about you (a Subject Access Request or "SAR"). aqq9 will respond within 30 days of a verified request.
• Right to Rectification: If any of your personal data held by aqq9 is inaccurate or incomplete, you have the right to request correction. You can update most account details directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. Note that aqq9 may be legally obliged to retain certain data (such as financial transaction records) and erasure requests cannot override statutory retention obligations.
• Right to Restriction of Processing: You may request that aqq9 suspends processing of your data in specific circumstances — for example, while the accuracy of the data is being contested, or where processing is unlawful but you prefer restriction over erasure.
• Right to Data Portability: You may request your personal data in a structured, commonly used and machine-readable format (such as JSON or CSV), and have it transmitted to another data controller where technically feasible and where processing is based on consent or contract.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time. aqq9 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, use the unsubscribe link in any marketing email or contact support.

To exercise any of the above rights, contact the aqq9 Data Protection Officer at [email protected] with the subject line "Data Rights Request — [Right Type]". aqq9 may need to verify your identity before processing a request. Responses will be provided within 30 calendar days; in complex cases, this may be extended by a further 60 days with prior notice.

The aqq9 Platform is strictly for individuals aged 21 years and above. aqq9 does not knowingly collect, process or store personal data from any individual under the age of 21. Age verification is conducted as part of the account registration and KYC process to enforce this restriction.

If aqq9 becomes aware — through internal review, third-party report, or player disclosure — that an account has been accessed or operated by an individual under the age of 21, the following actions will be taken immediately:

• The account will be suspended and access to the Platform revoked
• All personal data associated with the underage user will be securely deleted, except where retention is required for legal or regulatory compliance purposes
• Any deposits made by the underage user will be returned to the source payment method after verification
• All winnings and bonus funds accumulated during the period of underage access will be forfeited

Parents or guardians who suspect that a minor has accessed the aqq9 Platform should contact [email protected] immediately. aqq9 recommends the use of parental control software to prevent underage access to online gambling platforms.

aqq9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the aqq9 Platform is encrypted using industry-standard TLS 1.2 or higher protocols, preventing interception during transit.
• AES-256 Data Encryption at Rest: Sensitive personal data stored on aqq9's servers — including KYC documents, payment details, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to authorised aqq9 personnel and approved third-party processors who require access for legitimate business purposes. Role-based access controls and the principle of least privilege are enforced across all internal systems.
• Multi-Factor Authentication (MFA): All internal staff accounts with access to personal data are protected by mandatory multi-factor authentication. Players are also encouraged to enable MFA on their aqq9 accounts for additional protection.
• Intrusion Detection & Monitoring: aqq9's infrastructure is monitored 24/7 by automated intrusion detection systems that identify and alert on suspicious activity, unusual access patterns, and potential security incidents in real time.
• Vulnerability Management: aqq9 conducts regular security assessments, penetration tests and code reviews to identify and remediate vulnerabilities before they can be exploited.
• Data Pseudonymisation: Where technically feasible, aqq9 applies pseudonymisation to personal data used in analytics and testing environments, reducing the risk of exposure in non-production systems.
• Incident Response Plan: aqq9 maintains a documented data breach response plan. In the event of a confirmed data breach affecting your personal data, aqq9 will notify affected players and relevant authorities within the timeframes required by applicable law (typically 72 hours for regulatory notification).

While aqq9 takes all reasonable precautions to secure your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying aqq9 immediately at [email protected] if you suspect unauthorised access to your account.

The aqq9 Platform may contain references to or integrations with third-party services, such as game studio providers (Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming), payment processors (bKash, Nagad, Rocket, Upay), and identity verification services. While aqq9 carefully selects its third-party partners and maintains contractual data protection obligations with them, aqq9 does not control and is not responsible for the privacy practices of independent third-party platforms.

If you navigate to any third-party website or service from the aqq9 Platform, please review that party's own privacy policy before providing any personal data. aqq9's Privacy Policy applies only to data collected through the aqq9 Platform at https://aqq9.io and does not extend to any external site, application or service.

aqq9 reserves the right to update, revise or replace this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, our data processing practices, or the features available on the Platform. All amendments will be published on this page at https://aqq9.io/privacy-policy with an updated "Last Updated" date.

Where a proposed amendment is material — meaning it significantly changes how aqq9 collects, uses or shares your personal data — aqq9 will provide advance notice via email to your registered address at least 14 days before the amendment takes effect. Your continued use of the Platform after the effective date of an amendment constitutes your acceptance of the revised Privacy Policy.

For all privacy-related queries, data subject rights requests, or concerns about how aqq9 processes your personal data, please contact our Data Protection Officer using the details below:

If you are not satisfied with aqq9's response to a privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. aqq9 will cooperate fully with any such authority in the resolution of your complaint.

For general customer support inquiries unrelated to data protection, please contact [email protected] or use the live chat feature available on the Platform. Our customer support team is available 24/7 and aims to respond to all queries within a few hours.