Privacy Policy — How qd999 Protects Your Data

Information We Collect

qd999 collects personal information only where it is necessary to provide you with our services, comply with applicable legal obligations, or protect the security and integrity of our platform. The categories of information we may collect are described below.

Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, contact our support team, or participate in a promotion, you may provide us with the following types of personal information:

• Full legal name and date of birth
• Email address and mobile phone number
• Residential address (city, district, and postal code)
• National Identity Card (NID) number or passport details — for KYC verification
• Payment method details (bKash account number, Nagad number, Rocket number, bank account details, card details) — stored in tokenised form only
• Username and password (passwords are stored as salted hashes — never in plain text)
• Support chat transcripts and email correspondence

Information Collected Automatically

When you access the qd999 Platform, certain technical information is collected automatically by our systems. This information is used to maintain platform security, detect fraud, and improve service performance. It includes:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session timestamps — login time, session duration, logout time
• Pages visited, games played, and in-platform navigation patterns
• Referral source (e.g., which URL directed you to qd999.club)
• Cookie identifiers and local storage tokens (see Section 04 for full cookie details)

Information from Third Parties

In certain circumstances, qd999 may receive personal information about you from third parties in order to verify your identity, confirm your payment status, or fulfil our anti-fraud and anti-money laundering obligations. Third-party sources may include:

• Payment processors (bKash, Nagad, Rocket, Upay, DBBL, Visa/Mastercard network partners) — for transaction confirmation and fraud screening
• Identity verification service providers — for KYC document authentication
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — for game session logs and dispute resolution data

How We Use Your Data

qd999 processes personal data only for clearly defined and legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was collected. The primary purposes for which we use your personal information are set out below.

Account Management

Your identity, contact, and security credentials are used to create and maintain your player account, verify your identity at login, process password resets, and communicate important account-related notices (such as changes to these policies, security alerts, or account status updates).

Transaction Processing

Financial data and payment method details are processed exclusively to facilitate deposits, process withdrawal requests, apply bonuses, and maintain accurate account balance records. All payment data is handled in compliance with industry-standard tokenisation practices — we do not store raw card numbers or full mobile wallet credentials on our servers.

Legal & Regulatory Compliance

qd999 is obligated to process certain categories of personal data in order to comply with anti-money laundering (AML) requirements, Know Your Customer (KYC) protocols, and responsible gaming regulations. This includes verifying your age and identity before allowing real-money gameplay, monitoring transaction patterns for suspicious activity, and retaining records as required by applicable law.

Platform Security & Fraud Prevention

Technical data including IP addresses, device fingerprints, and session logs are used to detect and prevent unauthorised access, account takeover attempts, bonus abuse, multi-accounting, and other fraudulent behaviour. This processing is essential to maintaining a fair and secure environment for all qd999 players.

Service Improvement

Aggregated and anonymised usage data — from which individual players cannot be identified — is used to analyse Platform performance, identify popular games and features, improve navigation and user experience, and inform product development decisions. No individually identifiable data is used for this purpose.

Customer Support

When you contact our support team via live chat or email, we retain a record of the conversation in order to handle your query effectively, maintain quality assurance, and use as a reference in any subsequent related dispute. Support records are retained for a period consistent with our data retention policy outlined in Section 05.

Data Sharing & Third Parties

qd999 does not sell, lease, or trade your personal information to any third party for commercial purposes. We share data only in limited, clearly defined circumstances, each of which is described in this section. All third parties who receive personal data from qd999 are contractually obligated to handle it in accordance with applicable data protection standards.

Service Providers

We engage carefully selected third-party service providers to assist in the operation of the qd999 Platform. These providers access your data only to the extent necessary to perform their specific contracted services and are not permitted to use it for any other purpose. Service providers include:

• Payment processors — bKash, Nagad, Rocket, Upay, DBBL, Visa, and Mastercard network partners, for transaction processing and fraud screening.
• KYC and identity verification providers — for document authentication and age verification in support of regulatory compliance.
• Game providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios, who receive minimal session data necessary to operate the game and resolve disputes.
• Customer support platform providers — for the operation of our live chat and ticketing system.
• Hosting and infrastructure providers — for secure server-side storage and processing of Platform data.

Legal Disclosures

qd999 may disclose your personal data to law enforcement agencies, regulatory bodies, or other public authorities if we are required to do so by applicable law, court order, or lawful regulatory request. We may also disclose data where disclosure is necessary to protect the legal rights of qd999, our players, or third parties — for example, in the context of fraud investigations, disputed transactions, or legal proceedings.

Business Transfers

In the event that qd999 is involved in a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will endeavour to ensure that the receiving party provides equivalent data protection standards, and we will notify affected players as required by applicable law.

Cookies & Tracking Technologies

qd999 uses cookies and similar technologies (such as local storage tokens and session identifiers) to operate the Platform effectively, maintain your login session, remember your preferences, and gather aggregated analytics data. This section explains exactly what we use and why.

What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They allow the website to recognise your device on subsequent visits, maintain session state, and store lightweight preference data. Cookies do not contain executable code and cannot be used to install software on your device.

Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and language preference cookies. These cannot be disabled without breaking core functionality.
• Functional cookies: Used to remember your preferences such as your chosen game lobby view, currency display settings, and notification preferences. These are optional but enhance your experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the Platform — which pages are most visited, average session duration, and device type distribution. This data informs platform improvements. Individual players are not identified in analytics reports.
• Security cookies: Used to detect and prevent fraudulent activity, identify suspicious login patterns, and flag bot traffic. These are essential for Platform security.

Cookies We Do NOT Use

qd999 does not deploy third-party advertising cookies, retargeting pixels, social media tracking pixels, or any cross-site behavioural tracking technology. We do not share cookie data with advertising networks.

Managing Cookies

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of the qd999 Platform — in particular, blocking strictly necessary cookies will prevent you from maintaining a login session. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Data Security & Retention

qd999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security practices are reviewed regularly and updated in response to emerging threats.

Security Measures

• All data transmissions are encrypted using TLS 1.3 (Transport Layer Security).
• Passwords are stored as bcrypt-hashed, individually salted values — raw passwords are never stored or transmitted.
• Payment data is tokenised — full card numbers and mobile wallet credentials are never stored on qd999 servers.
• Access to personal data within qd999's internal systems is restricted to authorised personnel on a strict need-to-know basis, enforced via role-based access controls.
• Internal systems are protected by multi-factor authentication, intrusion detection systems, and regular third-party penetration testing.
• Database backups are encrypted at rest and stored in geographically separate secure facilities.

Data Retention

qd999 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, or accounting obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical constraints (e.g., backup rotation cycles), it is isolated from active processing until deletion is completed.

Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, qd999 will notify affected players without undue delay — and in any event within 72 hours of becoming aware of the breach — providing a clear description of what data was affected, what steps we are taking to contain the breach, and what actions you can take to protect yourself.

Your Privacy Rights

As a qd999 player, you have a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team via live chat or email.

Right of Access

You have the right to request a copy of all personal data that qd999 holds about you. Upon receiving a verified access request, we will provide a structured, commonly used, machine-readable export of your data within 10 business days. This is sometimes referred to as a Subject Access Request (SAR).

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Minor corrections (e.g., updating your email address or phone number) can be made directly through your account settings. For changes to identity documents or date of birth, our support team will assist you and may require supporting documentation.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, if you close your account and the data is no longer necessary for the purpose for which it was collected. Please note that this right is not absolute: we may be required to retain certain data for legal, regulatory, or anti-fraud purposes even after your account is closed, as described in our retention schedule in Section 05.

Right to Restrict Processing

In certain circumstances — for example, if you contest the accuracy of data we hold, or if you have objected to processing and a determination is pending — you may request that we restrict (pause) our processing of your data while the matter is resolved.

Right to Data Portability

Where processing is based on your consent or on a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. This allows you to transfer your data to another service provider if you choose to do so.

Right to Withdraw Consent

Where our processing of your data is based on your consent (primarily for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal. You can withdraw marketing consent via your account settings or by contacting support.

Marketing Communications

qd999 may send you promotional communications about bonuses, new games, seasonal offers, and platform updates via email and SMS, subject to your marketing preferences. We will only send you marketing communications if you have opted in at the time of registration or subsequently updated your preferences to allow them.

What We Send

• Welcome bonus and new player offer notifications
• Seasonal promotions tied to BPL, IPL, T20 World Cup, Eid, Pohela Boishakh, and other Bangladesh-relevant events
• New game launch announcements from our game providers
• Personalised bonus offers based on your gameplay preferences (only where you have consented to personalisation)
• Platform news, including updates to game lobbies, payment methods, and support availability

How to Opt Out

Every marketing email and SMS sent by qd999 includes a clear unsubscribe mechanism. For emails, this is a one-click unsubscribe link in the footer of the message. For SMS, reply STOP to any promotional message. You may also manage all marketing preferences — including opting out of specific channel types — directly from the Notifications section of your account settings. Changes take effect within 24 hours.

Transactional Communications

Please note that opting out of marketing communications does not stop you from receiving transactional messages. Transactional messages — such as deposit confirmations, withdrawal notifications, security alerts, and account verification codes — are essential to the operation of your account and cannot be disabled while your account is active.

Policy Updates & Contact

qd999 reserves the right to update or amend this Privacy Policy at any time. We will notify you of material changes by posting a prominent notice on the Platform and, where appropriate, by sending a notification to your registered email address. The "Effective Date" at the top of this page reflects the version currently in force.

We encourage you to review this Privacy Policy periodically to stay informed about how qd999 protects your personal data. Your continued use of the Platform following the publication of any update constitutes your acknowledgement of the revised Policy.

Contact & Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which qd999 handles your personal data, please do not hesitate to contact us. Our support team is available 24/7 and will direct your query to the appropriate data handling team.

Email: [email protected]  |  Live Chat: Available 24/7 on the Platform

Response time for privacy-related queries: 2 business days for acknowledgement, 10 business days for full resolution.