pq999 Privacy Policy

01 Overview & Scope

This Privacy Policy ("Policy") applies to all personal data collected and processed by pq999 ("pq999", "we", "us", "our") in connection with the operation of the online betting and gaming platform available at https://pq999.cc. It applies to all registered players, visitors, and any individual whose personal data is processed by pq999 in the course of providing its services.

pq999 is committed to handling personal data responsibly and with full transparency. We collect only the data that is necessary to provide a safe, functional, and legally compliant gaming service to players across Bangladesh, including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

This Policy should be read in conjunction with the pq999 Terms & Conditions and Responsible Gaming Policy, both of which are available on the pq999 website. By using the pq999 platform, you consent to the data practices described in this Policy. If you do not agree with how pq999 handles personal data, you should not register or continue to use the platform.

02 Data We Collect

pq999 collects personal data from players through several channels: the registration process, ongoing account activity, payment transactions, communications with our support team, and automated technical data collection. The categories of personal data we collect include the following:

Registration & Identity Data:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (collected to verify compliance with the 21+ age restriction).
• Mobile phone number and email address (used as primary contact methods).
• Username selected during the registration process.
• Copies of identity verification documents provided during KYC, such as a National Identity Card (NID), passport, or other government-issued photo identification.

Financial & Transaction Data:

• Mobile wallet identifiers associated with bKash, Nagad, Rocket, or Upay accounts used for deposits and withdrawals.
• Deposit amounts, withdrawal amounts, transaction reference numbers, and timestamps.
• Bonus claims, wagering history associated with promotional offers, and net win/loss records.

Gameplay & Behavioural Data:

• Bet history, game session logs, game types played, and outcomes.
• Time and duration of gaming sessions on the pq999 platform.
• Responsible gaming tool usage, including self-imposed deposit limits and cooling-off periods.

Technical & Device Data:

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser version.
• Session timestamps, page visit logs, and referral source.
• Cookie identifiers and similar tracking data (see Section 6 for full details).

Communications Data:

• Content of support tickets, live chat logs, and email correspondence with the pq999 support team.
• Feedback and survey responses submitted voluntarily through the platform.

03 How We Use Your Data

pq999 uses the personal data it collects for specific, legitimate purposes directly related to the operation of the platform and the delivery of a safe betting and gaming service. We do not process personal data for purposes that are incompatible with those described here without first obtaining your explicit consent.

Where pq999 sends promotional communications to registered players (such as bonus offer notifications), players may opt out of receiving these communications at any time by contacting the support team at [email protected]. Opting out of marketing communications does not affect your ability to use the pq999 platform or receive service-related notifications that are necessary for account operation.

04 Legal Basis for Processing

pq999 processes personal data on the following legal bases, depending on the specific purpose for which the data is used:

1. Contractual Necessity: Processing is necessary to perform the contract between pq999 and the player — specifically, to operate the account, process bets, and facilitate deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay.
2. Legal Obligation: Processing is required to comply with applicable legal obligations, including KYC identity verification, age verification (21+), AML compliance, and fraud prevention obligations.
3. Legitimate Interests: Processing is carried out in the legitimate interests of pq999 in maintaining platform security, preventing fraud, detecting prohibited conduct, and improving the quality of the betting and gaming service. These interests are balanced against the rights and freedoms of players.
4. Consent: Where processing is based on consent — such as sending promotional and marketing communications — pq999 will obtain your explicit consent before processing your data for that purpose. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

05 Data Sharing & Disclosure

pq999 does not sell, rent, or commercially exploit personal data to third parties. However, pq999 may share personal data with the following categories of third parties where strictly necessary for the purposes described in this Policy:

• Payment Service Providers: Mobile wallet operators and payment processors (such as bKash, Nagad, and Rocket) receive transaction data necessary to process deposits and withdrawals. These providers are independently subject to their own privacy and data handling obligations.
• Game Technology Providers: Game studios and platform providers (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe) may receive game session data required to resolve disputes, calculate outcomes, and maintain certified RNG records.
• Identity Verification Services: Third-party KYC and identity verification providers may receive identity documents and biographical data to assist with age and identity verification processes.
• Fraud Prevention and AML Providers: Specialist fraud detection and AML compliance service providers may receive transaction and behavioural data under binding data processing agreements that restrict their use of the data to the contracted purpose.
• Legal and Regulatory Authorities: pq999 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or legal process. In such cases, pq999 will disclose only the minimum data necessary to comply with the legal requirement.
• Professional Advisers: Legal counsel, auditors, and other professional advisers who require access to personal data in connection with the lawful provision of their services are bound by professional confidentiality obligations.

06 Cookies & Tracking Technologies

pq999 uses cookies and similar tracking technologies on the pq999 platform to enable core functionality, improve performance, and deliver a more personalised experience. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to log in to and use the pq999 platform. Disabling other cookie categories will not prevent access to the platform but may reduce the quality of certain features.

pq999 does not use third-party advertising cookies or behavioural tracking cookies that profile players for external advertising purposes.

07 Data Retention

pq999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention periods apply as general guidelines:

• Active Account Data: Personal data associated with an active pq999 account is retained for the full duration that the account remains open and active.
• Closed Account Data: Following account closure, pq999 retains identity verification records, transaction history, and AML-related documentation for a minimum of five (5) years, in line with standard financial compliance retention requirements.
• KYC Documents: Identity documents submitted for KYC verification are retained for the duration of the account plus five (5) years post-closure.
• Support Communications: Customer support correspondence is retained for up to three (3) years following the last interaction, or longer where the content relates to an ongoing dispute or investigation.
• Technical & Log Data: Server logs and device/IP data are retained for up to twelve (12) months for security and fraud monitoring purposes, after which they are anonymised or deleted.
• Marketing Consent Records: Records of consent to receive marketing communications are retained for as long as the player's account is active, plus three (3) years following withdrawal of consent or account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Players may request early deletion of their data in accordance with Section 9, subject to any overriding legal retention obligations.

08 Data Security

pq999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between players and the pq999 platform is protected using 256-bit Transport Layer Security (TLS/SSL) encryption. This applies to all registration data, login credentials, payment information, and support communications.
• Encryption at Rest: Sensitive data stored on pq999 servers — including identity documents and financial records — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data is strictly limited on a need-to-know basis. Internal access permissions are reviewed regularly, and multi-factor authentication is required for all staff accounts with access to player data.
• Intrusion Detection: pq999 operates real-time intrusion detection and monitoring systems that alert the security team to suspicious access patterns, unusual login activity, or potential data breach events.
• Vendor Security Assessments: All third-party providers who process personal data on behalf of pq999 undergo security assessments prior to engagement, and are subject to binding contractual data protection obligations.
• Incident Response: pq999 maintains a documented data breach incident response procedure. In the event of a data breach affecting player data, affected players will be notified promptly in accordance with applicable legal notification requirements.

09 Your Data Rights

As a registered pq999 player whose personal data is processed by pq999, you have the following rights in relation to your data. These rights may be exercised by contacting pq999 at [email protected]:

pq999 will respond to all data rights requests within a reasonable timeframe, typically within 30 days of receipt. Where a request is complex or pq999 receives a high volume of requests, the response period may be extended by a further 30 days, with prior notification to the requesting player. There is no charge for exercising any of the rights described above in standard circumstances.

10 Protection of Minors

The pq999 platform is strictly intended for adults aged 21 years and above. pq999 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. The minimum age requirement is enforced through our KYC identity and age verification process, which requires all players to submit valid government-issued identification confirming their date of birth before full account access is granted.

If pq999 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a false declaration during registration or any other means — pq999 will immediately suspend the relevant account, initiate a review of any associated transactions, and permanently delete or anonymise all personal data relating to that individual to the extent permitted by applicable law.

Parents and guardians are encouraged to make use of internet filtering and parental control software to prevent minors from accessing online gambling platforms. pq999 supports responsible gaming and works actively to prevent underage gambling in accordance with its Responsible Gaming Policy.

11 International Data Transfers

pq999 primarily serves players based in Bangladesh and processes the majority of personal data within its core operating infrastructure. However, certain third-party service providers engaged by pq999 — including game technology providers such as Pragmatic Play, Evolution Gaming, and Spribe, as well as cloud hosting and fraud prevention partners — may process personal data on servers located outside Bangladesh.

Where personal data is transferred to service providers in other countries, pq999 ensures that appropriate safeguards are in place to protect the data at a standard equivalent to that described in this Policy. These safeguards include binding contractual data processing agreements that impose data protection obligations consistent with this Policy on all recipient parties.

By registering on the pq999 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to third-party processors in other jurisdictions, where necessary for the purposes described in this Policy and subject always to the safeguards described above.

12 Policy Changes

pq999 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or data processing practices. Any material changes to this Policy will be communicated to registered players via email notification or a prominent notice on the pq999 platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will be revised each time a new version is published. Continued use of the pq999 platform following notification of changes to this Policy constitutes acceptance of the revised version. If you do not agree with the changes, you should cease using the platform and may request account closure and data deletion in accordance with Section 9.

13 Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 9, or want to raise a concern about how pq999 handles your personal data, please contact the pq999 data support team using the details below:

• Email: [email protected]
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Time: pq999 aims to acknowledge all data-related enquiries within 48 hours and to provide a substantive response within 30 days.
• Subject Line: When emailing about a data rights request, please include "Data Rights Request" in the subject line along with your registered username or account email address to help us locate your records promptly.