qa9 Privacy Policy — Your Data, Your Rights

qa9 is committed to protecting the privacy and security of the personal information of all players who use the qa9 platform. This Privacy Policy sets out in clear terms the categories of personal data that qa9 collects, the purposes for which that data is processed, the legal basis on which qa9 relies for processing, how long data is retained, and the rights available to you as a data subject. qa9 handles all personal data in a manner that is consistent with applicable data protection standards and the expectations of players based in Bangladesh.

This Privacy Policy should be read alongside qa9's Terms & Conditions. If you have any questions about how qa9 handles your personal data, our support team is available 24/7 via live chat. You can also write to us at [email protected]. Please note that this email address is provided as plain text for correspondence only and is not a clickable link.

When you register and use your qa9 account, we collect personal data in several ways — directly from you when you provide it, automatically through your use of the platform, and in some cases from third-party sources such as payment processors. The main categories of personal data we collect are:

• Identity and contact data: your full name, date of birth, mobile number, and email address collected during account registration.
• Financial data: transaction records including deposit amounts, withdrawal amounts, payment method identifiers (such as bKash or Nagad wallet references), and account balance history.
• Gaming activity data: records of all bets placed, games played, wager amounts, winnings, and session history on the qa9 platform.
• Technical and device data: your IP address, browser type and version, device type, operating system, and session timestamps collected automatically when you access the platform.
• Communications data: records of your interactions with the qa9 support team via live chat, including chat transcripts and support ticket history, retained to improve service quality and resolve disputes.

qa9 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. qa9 does not collect data from persons under the age of 21 knowingly — if we become aware that data has been collected from a person below this age threshold, we will delete it immediately and close the associated account.

qa9 uses the personal data we collect for specific, legitimate purposes only. We do not use your data for purposes that are incompatible with those stated in this policy. The primary purposes for which we process your personal data are:

• To create and manage your qa9 account, process your deposits and withdrawals, and provide full access to all platform features.
• To verify your identity and age in compliance with our 21+ age policy and to conduct KYC checks where required.
• To detect and prevent fraud, money laundering, multi-accounting, and other forms of prohibited activity on the qa9 platform.
• To provide 24/7 customer support, respond to your queries and complaints, and resolve disputes fairly and efficiently.
• To personalise your experience on qa9 by displaying game recommendations and promotional offers that are relevant to your playing history and preferences.
• To fulfil our responsible gaming obligations, including applying deposit limits and self-exclusion periods requested by players, and monitoring gaming patterns that may indicate problem gambling behaviour.

qa9 processes your personal data only where a valid legal basis exists. Depending on the specific processing activity, qa9 relies on one or more of the following legal bases:

• Contractual necessity: processing that is required to perform the contract between you and qa9, including account creation, payment processing, and game access.
• Legal obligation: processing that is necessary to comply with applicable legal requirements, including KYC obligations, anti-money laundering duties, and age verification requirements.
• Legitimate interests: processing carried out for qa9's legitimate business interests — such as fraud prevention, platform security, and improving service quality — where those interests are not overridden by your privacy rights.
• Consent: where you have given explicit consent for specific processing activities, such as receiving marketing communications about promotions and offers. You may withdraw consent at any time by contacting qa9 support via live chat.

qa9 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances and only to the extent necessary for each purpose:

• Payment processors and financial service providers: we share transaction-related data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment service providers solely to process your deposits and withdrawals.
• Game content and platform technology providers: game providers such as Pragmatic Play, Evolution Gaming, and Spribe may receive anonymised session data for game integrity and RNG certification purposes.
• Regulatory and law enforcement authorities: we will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction — for example in connection with anti-money laundering investigations.
• Fraud prevention and security services: anonymised or pseudonymised data may be shared with specialist fraud detection partners who assist qa9 in identifying and blocking fraudulent account activity.

All third parties with whom qa9 shares personal data are bound by contractual data processing agreements that require them to handle your data securely, to use it only for the specified purpose, and to apply data protection standards consistent with this Privacy Policy.

All financial transactions on qa9 — whether initiated via bKash, Nagad, Rocket, Upay, or an international card — are encrypted during transmission using SSL technology. Transaction records are retained for the period required by applicable financial record-keeping regulations. If you believe there has been an unauthorised transaction on your account, you must contact qa9 support via live chat immediately.

qa9 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and understand how players interact with different sections of the site. There are two main categories of cookies used on qa9: essential cookies, which are strictly necessary for the platform to function and cannot be disabled, and analytics cookies, which collect anonymised usage data to help us improve the platform. qa9 does not use advertising or third-party tracking cookies that profile players for external marketing purposes.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may prevent you from logging in or using certain features of the qa9 platform. Clearing cookies will log you out of any active session. qa9 does not use any persistent cross-site tracking technology that follows you outside of the qa9.club domain.

qa9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. As a general rule, account data and transaction records are retained for a minimum of five years following account closure to satisfy financial record-keeping requirements. Gaming activity logs are retained for a minimum of three years. Communications data such as live chat transcripts are retained for two years from the date of the interaction, after which they are securely deleted.

When the retention period for any category of personal data expires, qa9 will securely delete or irreversibly anonymise that data so that it can no longer be associated with you as an individual. If you request early deletion of your account data, qa9 will process your request to the extent permitted by our legal retention obligations. In cases where data must be retained beyond your account closure — for example in connection with an ongoing regulatory investigation — qa9 will notify you of the reason for the extended retention where we are legally permitted to do so.

qa9 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include SSL encryption for all data in transit, access controls restricting internal access to personal data to authorised personnel only, regular security audits and vulnerability assessments, and secure server infrastructure with intrusion detection monitoring. qa9 treats all player data as confidential and requires all staff who have access to personal data to comply with strict confidentiality obligations.

Notwithstanding the security measures described above, no internet-based system can be guaranteed to be completely secure. qa9 cannot guarantee the absolute security of data transmitted over the internet. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, qa9 will notify affected players promptly in accordance with applicable notification requirements. If you suspect that your account has been compromised, you must change your password immediately and contact qa9 support via live chat without delay.

As a player on the qa9 platform, you have the following rights in relation to the personal data that qa9 holds about you. To exercise any of these rights, please contact qa9 support via live chat or email at [email protected]. qa9 will respond to all valid requests within 30 days of receipt. In some cases, particularly complex requests may require an extension of up to an additional 60 days, and we will notify you if this applies to your request.

• Right of access: you have the right to request a copy of the personal data that qa9 holds about you, together with information about how it is being processed.
• Right to rectification: you have the right to request correction of any inaccurate or incomplete personal data that qa9 holds about you.
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: you have the right to request that qa9 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being reviewed.
• Right to withdraw consent: where qa9 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Please note that some rights are subject to conditions and exceptions under applicable data protection law. For example, qa9 may decline an erasure request where the data must be retained to comply with a legal obligation or to defend a legal claim. qa9 will explain the reason for any refusal when responding to your request.

The qa9 platform is strictly restricted to persons aged 21 and above. qa9 does not knowingly collect, process, or retain personal data from persons under the age of 21. If you are a parent or guardian and believe that a person under 21 in your care has registered an account on qa9, please contact our support team immediately via live chat. Upon confirmation, qa9 will promptly close the account and delete all associated personal data. qa9 encourages parents and guardians of young people in Bangladesh to use parental control software to prevent underage access to online gaming platforms.

The qa9 platform may reference or integrate third-party services such as game providers and payment processors. qa9 is not responsible for the privacy practices of these third-party services. Each third-party provider operates under its own privacy policy, which governs how they handle any data they independently collect. qa9 recommends that players review the privacy policies of any third-party service they interact with in connection with their qa9 account. qa9 does not embed or link to external third-party websites outside of its own platform domain.

qa9 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date displayed at the top of this page and, where appropriate, notify registered players via their registered mobile number or email address. Your continued use of the qa9 platform after any update to this Privacy Policy constitutes your acceptance of the revised policy. We encourage all players to review this page periodically to stay informed about how qa9 protects their personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way qa9 handles your personal data, please contact our support team via live chat, available 24/7. You may also reach us by email at [email protected] — please note this address is displayed as plain text and is not a clickable link. Our team handles all privacy queries in both English and Bangla and will respond within 30 days of receiving your request.