qe99 Privacy Policy — How We Protect Your Personal Data
At qe99, your privacy is a core responsibility, not an afterthought. This Privacy Policy explains exactly what personal data we collect when you use the qe99 platform, how we use it, who we share it with, and what rights you hold over it at all times.
Privacy at a Glance
Six Core Privacy Principles
These principles govern every decision qe99 makes when handling your personal information.
Purpose Limitation
qe99 collects only the personal data that is strictly necessary to operate the platform, verify your identity, process payments, and deliver customer support. We do not collect data for purposes beyond those described in this policy.
Data Security
All data transmitted between your device and the qe99 platform is encrypted using industry-standard TLS/SSL protocols. Account passwords are stored using one-way hashing. We conduct regular internal security reviews to protect stored data.
Your Data Rights
You have the right to access, correct, or request deletion of your personal data at any time. Requests are processed within 30 days of receipt. Submit your request in writing to [email protected] from your registered email address.
Consent-Based Marketing
qe99 will only send you promotional communications if you have explicitly opted in during registration or from your account preferences panel. You may withdraw this consent at any time by updating your preferences or emailing [email protected].
Limited Third-Party Sharing
We do not sell your personal data to advertisers or data brokers. Data is shared only with trusted service partners — such as payment processors and KYC verification providers — and only to the extent required to deliver those services.
Defined Retention Periods
qe99 retains personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable legal and regulatory obligations. Inactive account data is reviewed and purged on a scheduled cycle.
Contents
- 1. Who We Are
- 2. Data We Collect
- 3. How We Use Your Data
- 4. Legal Basis for Processing
- 5. Cookies and Tracking
- 6. Third-Party Sharing
- 7. Data Retention
- 8. Your Privacy Rights
- 9. Children's Privacy
- 10. Data Security
- 11. International Transfers
- 12. Marketing Communications
- 13. Changes to This Policy
- 14. Contact Us
1 Who We Are
qe99 operates an online casino and sports betting platform accessible at qe99.io. The platform is designed and operated specifically for the Bangladesh market, providing players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh with access to casino games, live dealer tables, sports betting markets, and associated account services.
For the purposes of this Privacy Policy, qe99 acts as the data controller — meaning qe99 determines the purposes and means of processing your personal data. All references in this document to "qe99", "we", "us", or "our" refer to the qe99 platform and its operating entity.
If you have any questions about how qe99 processes your personal data, or wish to exercise any of the rights described in this policy, you may contact our Data Protection contact point at any time by emailing [email protected]. We aim to acknowledge all data-related enquiries within two business days and to provide a substantive response within thirty (30) calendar days.
2 Data We Collect
qe99 collects personal data in three ways: data you provide to us directly, data generated automatically by your use of the platform, and data received from trusted third-party service providers. The following table summarises the categories of personal data we collect and the context in which each category arises.
| Category | Data Points | How Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Registration form and KYC verification documents |
| Contact Data | Email address, mobile phone number, residential address | Registration form and subsequent account updates |
| Financial Data | bKash/Nagad/Rocket/Upay account reference, Visa/Mastercard last-four digits, transaction history | Payment processing and cashier activity |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone | Automatically collected via server logs and platform analytics |
| Usage Data | Pages visited, games played, bets placed, session duration, click paths, search queries | Automatically collected via platform activity tracking |
| Communications Data | Live chat transcripts, support email content, complaint records | Customer support interactions |
| Verification Data | Copies of government-issued ID, proof of address documents, payment method confirmation screenshots | KYC verification process prior to withdrawal processing |
| Responsible Gaming Data | Deposit limit settings, self-exclusion status, session time preferences, reality check configurations | Account dashboard settings and support-initiated restrictions |
3 How We Use Your Data
qe99 uses personal data collected from you for the following clearly defined purposes. We do not use your personal data for any purpose that is incompatible with the purposes listed here without first obtaining your explicit consent or being required to do so by law.
3.1 Account Management and Platform Access
Your identity and contact data are used to create and maintain your qe99 account, authenticate your login sessions, and enable you to access the full range of platform features. This includes processing password reset requests, managing multi-device sessions, and maintaining an accurate record of your account preferences.
3.2 Payment Processing and Transaction Management
Financial data is used to process deposit requests, execute withdrawal payments to your registered payment method, maintain a complete and accurate transaction history within your account, and investigate any payment disputes or discrepancies. All payment data is processed in strict accordance with the security standards required by the relevant payment networks.
3.3 Identity Verification and Fraud Prevention
Verification data and technical data are used to confirm that you are who you say you are, that you meet the minimum age requirement of 21 years, and that your account activity is consistent with legitimate recreational gambling behaviour. qe99 employs automated risk-scoring systems that flag unusual patterns — such as rapid multi-account registration from the same IP address or device — for manual review. Where fraud is suspected, the relevant data may be shared with law enforcement authorities.
3.4 Responsible Gaming Monitoring
Usage data and responsible gaming data are used to monitor player behaviour for indicators of problem gambling, including unusually long session durations, rapid escalation of stake sizes, and frequent unsuccessful attempts to exceed self-imposed deposit limits. Where such indicators are detected, qe99's responsible gaming team may initiate a welfare check via your registered email address or in-platform notification.
3.5 Customer Support
Communications data — including live chat transcripts and email correspondence — is used to resolve your support queries, maintain a record of any complaints raised, and improve the quality and efficiency of our support service. Support interactions are retained for a period of three years from the date of the interaction.
3.6 Platform Improvement and Analytics
Aggregated and anonymised usage data is analysed to understand how players interact with the qe99 platform, identify areas for user-experience improvement, optimise game lobby layouts, and inform product development decisions. Where data is used for analytics purposes, it is anonymised to a standard at which it can no longer be attributed to an identifiable individual.
3.7 Legal and Regulatory Compliance
qe99 processes personal data to the extent required to comply with its anti-money laundering (AML) obligations, respond to lawful requests from competent authorities, and maintain records required under applicable financial and gaming regulations. This processing is mandatory and cannot be opted out of.
4 Legal Basis for Processing
qe99 relies on one or more of the following legal bases when processing your personal data, depending on the specific purpose for which the data is being processed:
- Contractual necessity: Processing required to perform the contract between you and qe99, including account creation, payment processing, game access, and customer support. Without this processing, qe99 cannot provide its services to you.
- Legal obligation: Processing required to comply with qe99's legal obligations, including KYC/AML verification requirements, record-keeping obligations, and cooperation with lawful authority requests.
- Legitimate interests: Processing carried out in pursuit of qe99's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and analytics — provided those interests are not overridden by your fundamental privacy rights.
- Consent: Processing based on your explicit, freely given, and informed consent — specifically for marketing communications and for the use of non-essential analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5 Cookies and Tracking Technologies
5.1 What Are Cookies
Cookies are small text files stored on your device by your browser when you visit a website. qe99 uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate essential platform functions, maintain your login session, and gather usage analytics.
5.2 Types of Cookies Used by qe99
- Essential cookies: Required for the platform to function correctly. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
- Analytics cookies: Used to collect aggregated data about how players navigate the platform, which games are most visited, and where users encounter friction. This data is used solely for internal product improvement purposes.
- Preference cookies: Used to remember your language preference, display settings, and responsible gaming configuration so that they persist across sessions.
- Security cookies: Used to detect and prevent fraudulent login attempts, account takeovers, and automated bot activity.
5.3 Managing Cookies
You may configure your browser to refuse non-essential cookies at any time. Instructions for managing cookie settings are available in your browser's help documentation. Please note that disabling essential cookies will impair or prevent access to the qe99 platform. qe99 does not use third-party advertising cookies or tracking pixels for the purpose of delivering targeted advertisements on external websites.
6 Third-Party Sharing
qe99 does not sell, rent, or trade your personal data to any third party for commercial gain. Personal data is shared with third parties only in the limited circumstances described below, and only to the minimum extent necessary to fulfil the stated purpose.
6.1 Payment Service Providers
To process deposits and withdrawals, qe99 shares the minimum necessary financial and identity data with your chosen payment service provider — bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, Visa, or Mastercard. Each of these providers operates under its own privacy policy and is independently responsible for the security of data processed through their respective infrastructure.
6.2 KYC and Identity Verification Partners
To fulfil its identity verification obligations, qe99 may engage a specialist third-party KYC provider to assist in verifying the authenticity of identity documents submitted by players. These providers are contractually bound to process your data solely for the purpose of verification and to apply security standards equivalent to those maintained by qe99.
6.3 Game Content Providers
Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi supply the game software and, in the case of live dealer games, host the game servers. Limited technical data — such as your session token and game history for the current session — is transmitted to the relevant game provider's servers in real time to enable game play. Game providers do not receive your full personal profile or financial data.
6.4 Legal and Regulatory Authorities
qe99 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent public authorities where required to do so by law, pursuant to a valid legal order, or where qe99 reasonably believes disclosure is necessary to prevent an imminent risk of serious harm or criminal activity.
6.5 Business Successors
In the event of a merger, acquisition, or sale of all or part of qe99's business, personal data held by qe99 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified via their registered email address prior to any such transfer, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.
7 Data Retention
qe99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, accounting, fraud prevention, and regulatory requirements. The following retention schedule applies to the principal categories of data held by qe99:
- Active account data: Retained for the lifetime of the account and for a period of five (5) years following permanent account closure.
- KYC and verification documents: Retained for a minimum of five (5) years from the date of submission, in accordance with applicable AML record-keeping obligations.
- Transaction records: Retained for five (5) years from the date of each transaction.
- Customer support communications: Retained for three (3) years from the date of the interaction.
- Marketing consent records: Retained for the duration of the consent period plus two (2) years following withdrawal of consent, to provide an audit trail of consent history.
- Analytics data: Anonymised after twelve (12) months and retained in anonymised form for up to five (5) years for trend analysis purposes.
- Server and access logs: Retained for ninety (90) days and then securely deleted, unless flagged for retention as part of a fraud or security investigation.
When personal data is no longer required, it is securely deleted or anonymised using processes that render re-identification effectively impossible. Players may request earlier deletion of their data subject to the limitations described in Section 8 below.
8 Your Privacy Rights
You hold a number of rights in relation to the personal data that qe99 holds about you. qe99 is committed to facilitating the exercise of these rights promptly and without unnecessary friction. To exercise any of the rights listed below, please submit a written request to [email protected] from the email address registered to your qe99 account.
- Right of access: You have the right to request a copy of all personal data qe99 holds about you, along with information about how it is being processed. qe99 will provide this information within thirty (30) days of receiving a valid request.
- Right to rectification: If you believe that any personal data qe99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Basic account details such as email address and phone number can be updated directly within the account settings panel.
- Right to erasure: You may request that qe99 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. This right is subject to qe99's legal retention obligations — data that must be retained to comply with AML or other regulatory requirements cannot be deleted early.
- Right to restriction of processing: You may request that qe99 temporarily suspend processing of your personal data — for example, while the accuracy of the data is under dispute — without requiring full deletion of the data.
- Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
- Right to object: You have the right to object to processing based on qe99's legitimate interests. qe99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
- Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
9 Children's Privacy
The qe99 platform is strictly intended for adults aged 21 years and above. qe99 does not knowingly collect, process, or store personal data relating to any individual under the age of 21. If qe99 discovers or is notified that personal data belonging to a person under the age of 21 has been collected — whether as a result of a falsified date of birth during registration or any other circumstance — the following steps will be taken immediately:
- The account will be suspended pending investigation.
- All personal data associated with the underage account will be securely deleted within seven (7) business days of confirmation of the account holder's age.
- Any account balance — including deposited funds — will be handled in accordance with applicable law and, where possible, returned to the payment source.
- The matter will be reviewed by qe99's responsible gaming compliance team and, where appropriate, reported to the relevant authority.
If you believe that a person under the age of 21 has registered an account on the qe99 platform, please notify us immediately at [email protected]. qe99 takes its obligations in this area extremely seriously and will act on any such report without delay.
10 Data Security
qe99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes the following controls:
- Transport encryption: All data transmitted between your device and the qe99 platform is encrypted using TLS 1.2 or higher. Connections using outdated protocol versions are refused.
- Password hashing: Account passwords are never stored in plain text. qe99 uses a modern, salted one-way hashing algorithm to store password credentials, ensuring that even qe99 staff cannot read your password.
- Access controls: Access to personal data within qe99's internal systems is restricted on a strict need-to-know basis. Staff who do not require access to personal data to perform their role are not granted it. All staff with data access are subject to confidentiality obligations.
- Intrusion detection: qe99 operates automated monitoring systems that detect and alert on unusual access patterns, including login attempts from unrecognised devices or IP addresses, rapid successive login failures, and suspicious data export activity.
- Regular security reviews: qe99's technical infrastructure undergoes regular internal security assessments. Critical vulnerabilities identified during these reviews are remediated on a priority basis.
In the event of a personal data breach that poses a risk to your rights and freedoms, qe99 will notify affected users via their registered email address as soon as practicable after the breach has been identified and contained. The notification will describe the nature of the breach, the categories of data affected, and the steps qe99 has taken in response.
11 International Data Transfers
qe99 operates primarily within the Bangladesh market and processes the majority of personal data on servers and infrastructure located within the Asia-Pacific region. However, certain service providers — including game content providers and KYC verification partners — may process data in other jurisdictions.
Where personal data is transferred to a third party located outside the jurisdiction in which it was collected, qe99 takes appropriate steps to ensure that the transfer is protected by adequate safeguards. These safeguards may include: contractual data processing agreements that impose data protection obligations equivalent to those described in this policy; or transfer only to jurisdictions that maintain an adequate level of data protection as determined by the relevant standard.
Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate internationally and maintain their own data protection frameworks in accordance with their respective regulatory obligations. qe99 ensures that the data sharing arrangements in place with each provider include appropriate contractual protections for player data.
12 Marketing Communications
qe99 may send you promotional emails, SMS messages, or in-platform notifications about new games, upcoming promotions, seasonal offers (such as Eid, Pohela Boishakh, and BPL season specials), and other qe99 news — but only if you have expressly opted in to receive marketing communications. We will not send marketing communications to players who have not opted in, and we will not use third-party marketing lists or purchased contact data.
Each marketing communication you receive from qe99 will include a clear and easy-to-use unsubscribe mechanism. You may also manage your marketing preferences at any time from the notifications section of your account dashboard, or by emailing [email protected] with the subject line "Unsubscribe".
Transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC status updates — are not subject to marketing opt-in and will be sent to all account holders as required for the operation of the platform. These communications cannot be disabled without closing your account.
13 Changes to This Privacy Policy
qe99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When a material change is made to this policy — meaning a change that significantly affects your privacy rights or the way we use your personal data — qe99 will notify all registered players via email to their registered address and via a prominent notice displayed on the platform for a period of no less than fourteen (14) days before the change takes effect.
Minor amendments — such as typographical corrections, clarifications that do not alter the substance of the policy, or updates to reflect new payment methods or game providers — may be made without individual notification. The effective date displayed at the top of this document will be updated to reflect the date of the most recent revision in all cases.
We encourage you to review this Privacy Policy periodically to stay informed about how qe99 protects your personal data. Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the updated policy.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to qe99's handling of your personal data, please contact us through one of the following channels:
- Email: [email protected] — Please use the subject line "Privacy Request" and include your registered username and a clear description of your query. Responses are provided within four (4) hours during normal operating hours.
- Live chat: Available 24/7 directly on the qe99 platform at qe99.io. Average response time is two to five minutes. For formal data rights requests, please follow up with an email for documentation purposes.
All formal privacy requests — including access requests, erasure requests, and objections to processing — must be submitted in writing via email to [email protected] to ensure they are handled through our formal data rights process. Requests made via live chat will be acknowledged and redirected to our email process for fulfilment.
Keep Exploring
Ready to Play on qe99?
Now that you understand how qe99 protects your data, explore 500+ certified games, live cricket betting, and instant bKash and Nagad payments. For players aged 21 and above only.