qd999 Privacy Policy — Your Data, Your Rights

1. Introduction and Scope

This Privacy Policy ("Policy") applies to all users of the qd999 online gaming platform accessible at https://qd999.ws and any associated domains, mobile web applications, or digital services operated under the qd999 brand (collectively, "the Platform"). It governs the collection, storage, use, and disclosure of personal data submitted to or collected by qd999 in connection with your use of the Platform.

By registering an account on qd999, by using any part of the Platform, or by submitting any personal information to qd999, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your information as described herein. If you do not agree with this Policy, you must immediately cease using the Platform.

2. Personal Data We Collect

qd999 collects personal data through three principal mechanisms: information you provide directly when registering or using the platform; information collected automatically as you interact with the platform; and information received from third-party payment providers for the purpose of processing and verifying financial transactions.

Information You Provide Directly

• Bangladesh mobile phone number (required for registration and account identification).
• Full legal name, as required during KYC identity verification to comply with anti-money-laundering obligations.
• Date of birth, collected to verify that you are 21 years of age or older as required by our age restriction policy.
• Identity documents submitted during KYC verification, which may include national ID card, passport, or driving licence.
• Any information you voluntarily share with qd999 support staff during live chat conversations, support tickets, or email exchanges.

Information Collected Automatically

• Device information including device type, operating system version, browser type and version, and screen resolution — used to optimise platform performance for your specific device.
• IP address and general geolocation data (country and city level only), collected to ensure compliance with geographic access restrictions and to detect unusual login activity that may indicate account compromise.
• Session data, including login timestamps, pages visited, games played, bets placed, and session duration — used for responsible gaming monitoring and platform analytics.
• Cookie data and local storage identifiers used to maintain your logged-in session and remember your platform preferences. See Section 9 (Cookies and Tracking) for full details.

Information from Payment Providers

• Transaction reference numbers and confirmation codes from bKash, Nagad, Rocket, Upay, and other approved payment providers — used solely to credit your account and maintain an accurate transaction history.
• Payment account identifiers (such as the registered mobile number associated with your bKash or Nagad wallet) to verify that the payment source is registered in your name, as required by our anti-money-laundering obligations.
• Refund and chargeback records where applicable, retained as required by financial regulations for audit and compliance purposes.

3. How We Use Your Personal Data

qd999 uses personal data only for the purposes described in this Policy and only to the extent necessary for each stated purpose. The table below summarises the primary data uses and the legal basis for each.

4. Legal Basis for Processing

qd999 processes personal data only where a valid legal basis exists for doing so. The following legal bases apply to qd999's data processing activities.

1. Contract performance: processing is necessary to enter into or perform the contract between qd999 and the player, including creating and operating your account, processing deposits and withdrawals, and delivering the gaming services you have requested.
2. Legal obligation: processing is required to comply with applicable legal and regulatory obligations, including age verification, identity verification (KYC), anti-money-laundering checks, and the retention of financial transaction records for the legally mandated minimum period.
3. Legitimate interest: processing is necessary for qd999's legitimate business interests, including fraud detection and prevention, responsible gaming monitoring, platform security, and improving the quality of our services, where these interests are not overridden by your rights and interests as a data subject.
4. Consent: where qd999 sends you promotional communications about bonuses, new games, or platform features, such communications are sent on the basis of your consent, which you may withdraw at any time by contacting qd999 support or by using the unsubscribe mechanism in any promotional message.

5. Sharing Your Personal Data

qd999 does not sell your personal data. We share personal data with third parties only in the limited circumstances set out below, and only to the minimum extent necessary for each stated purpose.

1. Payment processing partners (bKash, Nagad, Rocket, Upay, and other approved providers): we share the minimum transaction data required to process your deposits and withdrawals. These partners operate under their own privacy policies and are themselves bound by applicable financial data protection regulations.
2. Technology and platform service providers: qd999 uses a limited number of third-party technology vendors to operate the platform, including game content providers (Pragmatic Play, Evolution Gaming, Spribe, and others), server hosting providers, and cybersecurity services. These vendors process data only as directed by qd999 and under strict data processing agreements.
3. Fraud prevention and compliance services: qd999 may share data with third-party identity verification services, fraud screening tools, and anti-money-laundering monitoring platforms as required to comply with our legal obligations.
4. Law enforcement and regulatory authorities: qd999 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, by a valid court order, or where qd999 has a good-faith belief that disclosure is necessary to prevent criminal activity or protect the safety of any person.

6. Payment Data and Financial Information

qd999 takes the security of payment data with the utmost seriousness. All financial transactions on the Platform are processed through approved payment channels and are protected by industry-standard security measures.

qd999 does not store full payment account credentials such as bank account numbers, card numbers, or full bKash/Nagad wallet PINs on its own servers. Payment authentication is handled directly by the respective payment provider through their secure interfaces.

1. Transaction records including amounts, timestamps, reference numbers, and the payment method type used are retained by qd999 for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping requirements.
2. If a fraudulent transaction is identified or reported, qd999 reserves the right to freeze the affected account balance pending investigation and to share relevant transaction data with the relevant payment provider or law enforcement authority as required.
3. qd999 requires that all deposits originate from a payment account registered in the player's own name. This requirement exists to protect players from fraud and to ensure compliance with anti-money-laundering regulations. Deposits from third-party accounts will be returned to source where possible and the originating qd999 account may be suspended pending investigation.

7. Cookies and Tracking Technologies

qd999 uses cookies and similar browser storage technologies to operate and improve the Platform. This section explains what types of cookies qd999 uses and how you can manage them.

Types of Cookies Used by qd999

• Essential cookies: strictly necessary for the platform to function. These include session authentication cookies that keep you logged in during a visit, and security cookies that detect suspicious login attempts. These cookies cannot be disabled without breaking the platform's core functionality.
• Preference cookies: used to remember your platform settings such as language preference and display options so you do not need to reconfigure them on each visit.
• Analytics cookies: used to collect aggregated, anonymised data about how players interact with the qd999 platform — which pages are most visited, which games are most popular, and where technical errors occur. This data is used solely to improve the platform and is never linked back to individual player identities.
• No third-party advertising cookies: qd999 does not deploy third-party advertising or retargeting cookies. No external advertising platform has access to your browsing activity on qd999.

You may manage or disable non-essential cookies through your mobile browser settings at any time. Please note that disabling essential cookies may prevent you from logging in or using core platform features. qd999 does not currently support a cookie preference centre but will introduce one if required by applicable law.

8. Data Retention

qd999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any longer minimum retention periods required by applicable law. The following retention guidelines apply.

1. Active account data (account details, transaction history, gaming history, and KYC documents) is retained for the duration of your active account plus a minimum of 5 years following account closure, in compliance with financial record-keeping regulations.
2. Support communication records (live chat logs, email exchanges, and support tickets) are retained for a minimum of 2 years from the date of the last communication in that thread, to ensure continuity of support and for dispute resolution purposes.
3. Where a player has exercised their right to deletion and no legal obligation requires qd999 to retain the data, personal data will be securely deleted or irreversibly anonymised within 30 days of the deletion request being approved. Anonymised, aggregated analytics data from which individuals cannot be identified may be retained indefinitely.

9. Your Data Protection Rights

As a user of qd999, you have the following rights in relation to your personal data. To exercise any of these rights, contact qd999 support at [email protected]. We will respond to all valid rights requests within 14 working days.

1. Right of access: you have the right to request a copy of all personal data that qd999 holds about you, along with information about how that data is being used. This is provided free of charge.
2. Right to rectification: if any personal data that qd999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details such as your registered name or date of birth may require identity document verification before they can be updated.
3. Right to erasure: you have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where qd999 has no legitimate overriding interest in retaining it. This right is subject to legal retention obligations.
4. Right to restrict processing: you have the right to request that qd999 suspend the processing of your personal data in certain circumstances, such as while qd999 is verifying the accuracy of data you have disputed.
5. Right to withdraw consent: where qd999 is processing your data on the basis of your consent (for example, for promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10. Data Security Measures

qd999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit; encrypted storage of sensitive data at rest; role-based access controls limiting staff access to personal data on a strictly need-to-know basis; regular security audits and vulnerability assessments; automated intrusion detection systems; and secure, geographically redundant server infrastructure.

Despite our best efforts, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, qd999 will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

11. Children and Minors

qd999 is strictly an adults-only platform. Registration and use of the Platform are restricted to individuals who are 21 years of age or older. qd999 does not knowingly collect personal data from anyone under the age of 21. If qd999 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will immediately delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered on qd999, please contact us immediately at [email protected] so that we can take prompt action.

12. Changes to This Privacy Policy

qd999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When we make material changes to this Policy, we will update the effective date at the top of this document and will endeavour to notify registered players via the platform or by SMS to their registered mobile number.

Your continued use of the qd999 platform following any update to this Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically. If you do not agree with the updated Policy, you must stop using the platform and may request account closure by contacting qd999 support.

13. Contact Us and Data Controller Information

The data controller responsible for your personal data collected through the qd999 platform is qd999, operating the website at https://qd999.ws. For all privacy-related enquiries, data rights requests, complaints, or questions about this Privacy Policy, please contact our data team at [email protected]. We aim to acknowledge receipt of all privacy enquiries within 1 working day and to provide a substantive response within 5 working days.

qd999 is committed to resolving all privacy complaints fairly and promptly. If you are not satisfied with our response to your privacy complaint, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.