q99 Privacy Policy
Your privacy matters to q99. This Privacy Policy explains exactly what personal data we collect from players in Bangladesh, why we collect it, how we use and store it, and what rights you have over your own information. We are committed to handling your data with care, transparency, and respect.
How q99 Protects Your Privacy
These cards summarise our core data-protection commitments. The complete legal text follows in the sections below.
SSL Encryption
All data transmitted between your browser and q99.cam is protected by industry-standard SSL/TLS encryption. Payment transactions via bKash, Nagad, and Rocket are processed over encrypted channels, and your financial details are never stored in plain text on our servers.
No Data Selling
q99 does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Your data is used solely to operate your q99 account, process transactions, deliver customer support, and comply with legal obligations.
Your Rights, Respected
You have the right to access, correct, export, or request deletion of your personal data at any time. Submit a request to [email protected] and our team will respond within 30 days. We will verify your identity before actioning any data request to protect your account security.
Transparent Cookie Use
q99 uses cookies and similar technologies solely for session management, fraud prevention, and anonymised platform analytics. We do not use cross-site tracking cookies or sell cookie data to advertising networks. Our full cookie policy is described in Section 6 of this document.
Payment Data Handled Securely
q99 does not store your full bKash, Nagad, Rocket, or bank account credentials on our platform. Payment processing is handled by the respective payment providers under their own security frameworks. q99 only retains transaction reference IDs and amounts for accounting and dispute resolution purposes.
KYC & Fraud Prevention
Identity verification data collected during KYC checks — such as copies of your National ID Card or passport — is stored in a separate, access-controlled document vault. Only authorised compliance personnel can access these documents, which are retained solely for anti-fraud and regulatory compliance purposes.
Data Controller
q99 (operating at q99.cam) is the data controller in respect of all personal data collected from players who access the q99 platform. As data controller, q99 determines the purposes for which your personal data is processed and the means by which it is processed. This Privacy Policy applies to all personal data collected via q99.cam, including data collected during account registration, gameplay, deposits, withdrawals, customer support interactions, promotional opt-ins, and responsible gaming tool usage.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by q99, you may contact our support team at any time:
- Email: [email protected] (plain text — not a clickable link)
- Support hours: 24 hours a day, 7 days a week, including Bangladeshi public holidays
- Response time: We aim to respond to all privacy-related enquiries within 5 business days
This Privacy Policy is written in English. In the event that any translated version of this policy is made available as a convenience, the English-language version shall govern and shall take precedence in the event of any inconsistency.
Information We Collect
q99 collects personal data from players through several channels: directly from you when you register or use the platform, automatically when you interact with q99.cam, and in limited circumstances from third-party verification providers. The table below sets out the categories of data we collect and the context in which each category is obtained.
| Data Category | Examples | How Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, NID / passport number, photograph | Registration form; KYC document upload |
| Contact Data | Email address, registered Bangladeshi mobile number, residential address | Registration form; account settings updates |
| Financial Data | Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account holder name, transaction reference IDs, deposit/withdrawal amounts | Cashier / payment flow; transaction logs |
| Account & Gaming Data | Username, account balance, betting history, game session logs, bonus redemption history, responsible gaming limit settings | Platform activity; game engine logs |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session timestamps | Automatic collection via server logs and cookies |
| Usage Data | Pages visited, features used, referral source, click-stream data, search queries within the platform | Automatic collection via analytics tools |
| Communications Data | Content of emails, support chat transcripts, feedback submissions | Direct correspondence with q99 support |
| Marketing Preferences | Opt-in / opt-out status for promotional emails and SMS, preferred contact channel | Registration form; account preferences |
Data We Do Not Collect
q99 does not collect or store full payment card numbers, CVV codes, or online banking credentials. q99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where health-related information is voluntarily disclosed by a player seeking responsible gaming support (in which case it is processed solely for that purpose and retained only as long as necessary to provide the requested support).
Children's data: q99 does not knowingly collect personal data from anyone under the age of 18. If we become aware that an account has been opened by a minor, we will close the account immediately and delete all associated personal data to the extent technically possible. Parents or guardians who believe a minor has registered on q99 should contact [email protected] immediately.
How We Use Your Data
q99 processes your personal data only for specific, legitimate purposes directly related to the operation of the platform and the provision of services to you as a player. We do not process your data for purposes that are incompatible with those stated below.
Account Management
Your identity and contact data are used to create and maintain your q99 account, to verify your identity, to communicate account-related notifications (such as login alerts, password resets, and KYC status updates), and to enforce the one-account-per-player rule as required by our Terms & Conditions.
Transaction Processing
Your financial data is used to process deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and supported bank transfer methods. Transaction records are maintained for accounting, audit, and dispute resolution purposes. q99 does not use your financial data for any purpose other than processing and recording transactions related to your account.
Fraud Prevention & Security
Technical data, identity data, and gaming data are analysed by q99's fraud monitoring systems to detect and prevent unauthorised account access, bonus abuse, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions. Where fraud is suspected, q99 may share relevant data with payment providers, regulatory authorities, or law enforcement agencies as required by law.
Responsible Gaming
Gaming behaviour data — including session frequency, bet sizes, deposit patterns, and self-imposed limit settings — is monitored to identify players who may be showing signs of problem gambling. Where such indicators are present, q99 may proactively contact the player with responsible gaming information or temporarily restrict account functionality as part of our duty-of-care commitments. Full details are available on the Responsible Gaming page.
Customer Support
Communications data from your support interactions is used to resolve your enquiries, to train support staff, and to improve the quality of our customer service. Support transcripts are retained for a period of 24 months from the date of the interaction.
Platform Improvement & Analytics
Anonymised and aggregated usage data is used to understand how players interact with q99.cam, to identify technical issues, and to prioritise platform improvements. Where analytics tools involve individual-level tracking, this is disclosed in the Cookies section below.
Marketing Communications
If you have opted in to receiving marketing communications during registration or via your account preferences, q99 may use your contact data to send you promotional emails or SMS messages about new games, bonus offers, and seasonal promotions such as those tied to Eid, Pohela Boishakh, BPL season, and Victory Day. You may opt out of marketing communications at any time by updating your preferences in your account dashboard or by contacting [email protected].
Marketing opt-out: Opting out of marketing communications will not affect transactional communications (such as deposit confirmations, withdrawal notifications, or KYC status emails), which are sent regardless of marketing preferences as they are necessary for account operation.
Legal Basis for Processing
q99 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:
- Contractual necessity: Processing required to fulfil our obligations under the account agreement with you — including account creation, transaction processing, KYC verification, and customer support.
- Legitimate interests: Processing necessary for q99's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics — provided that these interests are not overridden by your privacy rights.
- Legal obligation: Processing required for q99 to comply with applicable laws and regulatory obligations, including anti-money-laundering (AML) requirements, record-keeping obligations, and mandatory reporting to relevant authorities.
- Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.
Where q99 relies on legitimate interests as the legal basis for processing, we have conducted an assessment confirming that our interests do not unduly override your right to privacy, taking into account the limited scope and nature of the data involved and the safeguards in place to protect it.
Data Sharing & Third Parties
q99 does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. Your personal data is shared with third parties only in the following limited circumstances:
Payment Processors
To process your deposits and withdrawals, q99 shares the minimum necessary financial and identity data with your chosen payment provider (bKash, Nagad, Rocket, Upay, or your designated bank). Each payment provider operates under its own privacy policy and security standards. q99 is not responsible for the data practices of these third-party payment providers once data has been transmitted to them for processing purposes.
Game Studios & Content Providers
Games on q99 are provided by third-party studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. To load and operate these games within your session, limited technical data (such as your session token and account identifier) is transmitted to the relevant game studio's servers. Game studios do not receive your full personal profile, financial data, or contact information. Each studio operates under its own data processing agreements with q99 and is contractually prohibited from using your data for any purpose other than game delivery.
Identity Verification Providers
During KYC verification, q99 may use accredited third-party identity verification services to authenticate documents you submit. These providers process your identity documents solely for verification purposes and are contractually bound to delete the documents upon completion of verification, retaining only the outcome (pass/fail) and reference ID.
Legal & Regulatory Authorities
q99 may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other regulatory bodies where required to do so by applicable law — including obligations under anti-money-laundering regulations. q99 will not notify you of such disclosures where doing so is prohibited by law or would obstruct an ongoing investigation.
Business Transfers
In the event that q99 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via email to your registered address before your data is transferred and becomes subject to a different privacy policy.
Data processing agreements: All third parties who process personal data on q99's behalf are required to enter into a data processing agreement with q99. These agreements require third parties to process data only on q99's documented instructions, to implement appropriate technical and organisational security measures, and to assist q99 in fulfilling its obligations to players regarding data subject rights.
Cookies & Tracking Technologies
q99 uses cookies and similar technologies (including local storage and session storage) on q99.cam. Cookies are small text files stored by your browser on your device. They allow q99 to recognise your browser across page loads and sessions, and to provide a functional, secure, and personalised experience.
Types of Cookies We Use
- Strictly necessary cookies: These cookies are essential for q99.cam to function. They manage your login session, maintain your game state, prevent cross-site request forgery (CSRF), and enforce security policies. These cookies cannot be disabled without breaking core platform functionality.
- Functional cookies: These cookies remember your preferences — such as your preferred language (English), your responsible gaming limit settings, and your last-used payment method — so you do not have to re-enter them on every visit.
- Analytics cookies: q99 uses anonymised, first-party analytics tools to understand how players navigate q99.cam. This data is aggregated and does not identify you personally. It is used solely to improve platform usability and performance.
- Fraud-prevention cookies: Device fingerprinting and session-integrity cookies are used to detect multi-accounting, bot activity, and unauthorised access attempts. These are processed on the basis of q99's legitimate interest in maintaining platform security.
Cookies We Do Not Use
q99 does not use third-party advertising cookies, cross-site tracking cookies, or any cookie that shares your browsing data with advertising networks or data brokers. No Facebook Pixel, Google Ads tags, or programmatic advertising trackers are deployed on q99.cam.
Managing Cookies
You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. For guidance on cookie management, refer to your browser's help documentation. Because q99 does not use advertising cookies, opting out of third-party ad-tracking tools has no practical effect on your q99.cam experience.
Session cookies vs persistent cookies: Most cookies used by q99 are session cookies, which are deleted automatically when you close your browser. Persistent cookies — such as those remembering your responsible gaming limit preferences — have a maximum lifespan of 12 months, after which they expire and are renewed only if you continue to use the platform.
Data Retention
q99 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal obligation; fraud prevention; dispute resolution |
| Financial & Transaction Data | 7 years from transaction date | Anti-money-laundering (AML) regulatory requirements |
| KYC Documents | 5 years after account closure | AML compliance; regulatory audit requirements |
| Gaming & Betting History | Duration of account + 3 years after closure | Dispute resolution; responsible gaming monitoring |
| Support Transcripts | 24 months from interaction date | Quality assurance; dispute resolution |
| Marketing Preferences | Until opt-out or account closure | Consent management |
| Technical & Usage Data | 13 months (rolling) | Analytics; security monitoring |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data cannot be immediately deleted due to technical constraints (for example, data held in backup archives), it is isolated from active processing systems until deletion is technically feasible.
Your Privacy Rights
As a q99 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact q99 at [email protected]. q99 will verify your identity before processing any data subject request and will respond within 30 days. In exceptional cases involving complex or multiple requests, this period may be extended by a further 30 days, and you will be informed of the extension and the reason for it.
Right of Access
You have the right to request a copy of all personal data that q99 holds about you. This is commonly known as a Subject Access Request (SAR). Upon receipt of a verified SAR, q99 will provide a full copy of your personal data in a structured, commonly used format within 30 days.
Right to Rectification
If you believe that any personal data q99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as updating your contact email or phone number — can be made directly within your account settings. For corrections to identity documents or registered name, contact [email protected] with supporting documentary evidence.
Right to Erasure ("Right to be Forgotten")
You may request that q99 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that q99 may be required to retain certain data for legal and regulatory reasons (as set out in Section 7) notwithstanding an erasure request. q99 will inform you of the extent to which your erasure request can be fulfilled and the reasons for any partial refusal.
Right to Restrict Processing
You have the right to request that q99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being considered. During a restriction period, q99 will continue to store your data but will suspend active processing except where required by law.
Right to Data Portability
Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, machine-readable format (such as JSON or CSV) and to transmit it to another service provider. This right applies to data you have directly provided to q99 — it does not extend to data that q99 has derived or inferred from your platform activity.
Right to Object
You have the right to object to processing of your personal data where q99 relies on legitimate interests as the legal basis. q99 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
Right to Withdraw Consent
Where q99 processes your data on the basis of your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal. To withdraw consent for marketing communications, update your preferences in your account dashboard or email [email protected].
How to submit a data request: Email [email protected] with the subject line "Privacy Request – [type of request]" (e.g., "Privacy Request – Subject Access Request" or "Privacy Request – Erasure"). Include your registered email address and account username. For security, q99 will send a verification step to your registered mobile number or email before actioning any request.
Data Security
q99 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly in line with evolving security standards and threat intelligence.
Technical Measures
- SSL/TLS encryption: All data in transit between your device and q99.cam is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
- Encryption at rest: Sensitive data — including identity documents and financial records — is encrypted at rest using AES-256 encryption on q99's servers.
- Access controls: Access to player personal data is restricted to q99 personnel and authorised contractors who need it to perform their job functions. Access is controlled via role-based permissions and requires multi-factor authentication.
- Intrusion detection: q99's infrastructure is monitored continuously by automated intrusion detection and anomaly-alerting systems. Security events are reviewed by q99's operations team on a 24/7 basis.
- Penetration testing: q99 conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
Organisational Measures
- All q99 staff with access to personal data undergo background checks and receive data protection training as part of onboarding and on an annual refresher basis.
- q99 maintains a formal data breach response procedure. In the event of a breach that is likely to result in risk to players' rights and freedoms, affected players will be notified without undue delay at their registered email address, along with a description of the nature of the breach, the data affected, and the steps being taken to address it.
- Third-party vendors with access to personal data are assessed for security compliance before engagement and are required to maintain appropriate security standards as a contractual obligation.
Your role in security: While q99 takes extensive measures to protect your data, no online platform can guarantee absolute security. You play an important role by keeping your q99 account password strong and confidential, enabling two-factor verification, and reporting any suspicious activity on your account to [email protected] immediately. q99 will never ask for your password via email, chat, or phone.
Policy Updates & Contact
Updates to This Privacy Policy
q99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to the q99 platform. When material changes are made to this policy, q99 will notify registered players by email to their registered address and will display a prominent notice on q99.cam for a minimum of 7 days prior to the updated policy taking effect.
The effective date of the current version of this Privacy Policy is stated at the top of this page. You are encouraged to review this page periodically to stay informed about how q99 protects your personal data. Your continued use of q99.cam following the effective date of any updated Privacy Policy constitutes your acceptance of the updated version.
Links to Third-Party Sites
q99.cam does not contain links to external third-party websites. However, game studios whose titles are hosted on the q99 platform operate their own server infrastructure. q99 is not responsible for the privacy practices of game studio servers, which are governed by each studio's own privacy policy. q99's contractual agreements with game studios do require them to handle any player session data in a manner consistent with applicable data protection standards.
Cross-Border Data Transfers
q99's servers and those of its game studio partners may be located outside Bangladesh. Where personal data is transferred to servers located in other jurisdictions, q99 ensures that appropriate safeguards are in place — including contractual data protection clauses with the relevant third parties — to maintain a level of protection equivalent to the standards described in this Privacy Policy.
Contact Us
For all privacy-related enquiries, data subject requests, or concerns about q99's handling of your personal data, please contact our support team:
- Email: [email protected]
- Response time: Within 5 business days for privacy enquiries; within 30 days for formal data subject requests
- Support language: English, 24 hours a day, 7 days a week
q99 takes all privacy complaints seriously. If you submit a privacy complaint and are not satisfied with q99's response, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.
Summary: q99 collects only the data it needs, uses it only for stated purposes, shares it only with necessary partners, retains it only as long as required, and gives you clear rights over your own information. If you have any questions about this Privacy Policy, the team at [email protected] is available around the clock to help.
Ready to Play at q99?
Now that you know how q99 protects your privacy, explore our full range of slots, live casino games, and cricket betting markets — all secured by SSL encryption and powered by certified game studios.