qg33 Privacy Policy

1Introduction

This Privacy Policy ("Policy") describes how qg33 ("we", "us", "our") collects, uses, stores, shares and protects the personal data of players and visitors who access the qg33 online gaming platform at qg33.app (the "Platform"). By registering an account or using the Platform in any capacity, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy applies to all personal data processed by qg33 in connection with the Platform, including data collected via the website, account registration, payment processing, customer support interactions and any marketing communications. We are committed to handling your personal information responsibly, transparently and in accordance with applicable data protection principles.

2Information We Collect

qg33 collects personal data in the following categories. The table below summarises the types of data we collect, along with the context in which each type is gathered:

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data or biometric data unless specifically required for the purpose of identity verification by applicable law. Where such data is strictly required, it is collected under explicit consent and retained only for the minimum period necessary.

3How We Use Your Information

qg33 uses the personal data it collects strictly for the purposes set out in this Policy. We do not use personal data for any purpose that is incompatible with the original reason it was collected. The specific purposes for which we process personal data are:

• Account creation and management: to register your account, verify your identity and age, manage your profile settings, and enable login access to the Platform.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket and bank transfer; to verify ownership of payment methods; and to maintain accurate financial records for compliance purposes.
• Platform operation and improvement: to provide access to games and features, monitor platform performance, diagnose technical issues and improve the overall quality of the gaming experience for players in Bangladesh and beyond.
• Responsible gaming: to monitor gaming patterns that may indicate problem gambling behaviours, to apply account restrictions or self-exclusions where requested or where qg33 determines player protection measures are appropriate, and to ensure the Platform is not accessed by underage users.
• Fraud prevention and security: to detect, investigate and prevent fraudulent activity, money laundering, identity theft, multi-accounting, bot usage and other forms of prohibited conduct as defined in the qg33 Terms and Conditions.
• Customer support: to respond to your enquiries, complaints and support requests; to maintain a record of communications; and to improve the quality of our support services.
• Marketing and promotions: to send you promotional communications about qg33 bonuses, seasonal offers and platform news — but only where you have opted in to receive such communications. You may opt out at any time by contacting [email protected] or using the unsubscribe option in any marketing email.

4Legal Basis for Processing

qg33 processes your personal data on one or more of the following lawful bases, depending on the purpose of processing:

• Contractual necessity: processing is necessary to perform the contract between qg33 and the player — including account registration, payment processing, game access and customer support.
• Legal obligation: processing is required to comply with applicable legal or regulatory obligations, including anti-money laundering checks, age verification, fraud reporting and the maintenance of financial records.
• Legitimate interests: processing is necessary for the legitimate interests of qg33, including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided these interests are not overridden by your rights and freedoms.
• Consent: where you have given explicit consent to a specific processing activity — for example, opting in to receive marketing communications — we will process your data on the basis of that consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5Sharing Your Information

qg33 does not sell, rent or trade your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the relevant purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay and partner banks receive transactional data strictly as required to process deposits and withdrawals. These providers are bound by their own data protection obligations and do not receive data beyond what is necessary for transaction processing.
• Identity verification providers: third-party KYC service providers receive identity and document data to carry out age and identity verification checks. These providers operate under strict data processing agreements with qg33.
• Game studios and platform providers: game session data is shared with third-party game studios (including Pragmatic Play, Evolution Gaming, Spribe and others) to the extent required to deliver games, settle bets and resolve disputes.
• Regulatory and law enforcement authorities: qg33 may disclose personal data to relevant authorities where required to do so by applicable law, court order, regulatory direction or where disclosure is necessary for the prevention, detection or investigation of a crime.

6Payment Data and Financial Information

When you make a deposit or withdrawal on qg33 using bKash, Nagad, Rocket, Upay or a bank transfer, the transactional details — including the mobile wallet number or bank account details and the transaction amount — are recorded by qg33 for the purposes of payment processing, account reconciliation, fraud prevention and regulatory compliance. These records are retained for the minimum period required by applicable financial record-keeping obligations.

qg33 does not store full payment card numbers. Where card payments are supported, card data is handled exclusively by PCI-DSS compliant payment processors. qg33 retains only a masked reference to the payment instrument (for example, the last four digits of a card or the registered mobile number associated with a bKash account) for the purpose of verifying payment method ownership during withdrawal requests.

7Cookies and Tracking Technologies

qg33 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. qg33 uses the following categories of cookies:

• Essential cookies: strictly necessary for the Platform to function. These enable core features such as session management, login authentication, secure payment flows and account settings. Essential cookies cannot be disabled without preventing the Platform from operating correctly.
• Performance cookies: collect anonymous data about how visitors use the Platform — such as which pages are visited most frequently and how long sessions last. This data is used in aggregate form to improve Platform performance and navigation.
• Functional cookies: remember your preferences — such as language settings and responsible gaming tool configurations — to provide a more personalised experience when you return to the Platform.
• Analytics cookies: used by qg33 to understand aggregate player behaviour patterns, identify technical issues, measure the effectiveness of promotions and inform product development decisions. Analytics data is pseudonymised and not used to identify individual players.

You may manage cookie preferences through your browser settings. Please note that disabling non-essential cookies may affect certain features of the Platform. qg33 does not use third-party advertising cookies or cross-site tracking technologies that profile your behaviour across external websites.

8Data Retention

qg33 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention principles apply:

• Active accounts: personal data associated with an active player account is retained for the duration of the account relationship and for a reasonable period after account closure to allow for dispute resolution, regulatory auditing and fraud investigation purposes.
• Financial records: transaction data, deposit and withdrawal records and payment method details are retained for the minimum period required under applicable financial record-keeping obligations, which may exceed the standard account retention period.
• Marketing data: where you have opted in to receive marketing communications, your contact details and marketing preferences are retained until you withdraw consent. Following opt-out, your data is removed from active marketing lists within a reasonable period, subject to any legal retention obligations.

9Data Security

qg33 implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, alteration or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption applied to all data transmitted between player devices and the Platform. This ensures that personal data, account credentials and financial information cannot be intercepted in transit.
• Secure server infrastructure with access controls limiting internal access to personal data on a strict need-to-know basis. Staff who handle personal data are subject to confidentiality obligations and receive regular data protection training.
• Fraud detection systems that monitor account activity in real time to identify suspicious login patterns, unusual transaction volumes and other indicators of account compromise or fraudulent use.
• Regular security assessments and vulnerability testing of Platform systems. Where a security vulnerability is identified, qg33 has incident response procedures in place to assess, contain and remediate the issue as quickly as possible.

While qg33 takes all reasonable steps to protect your personal data, no internet-based system can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying qg33 immediately if you suspect unauthorised access to your account.

10Your Rights Over Your Personal Data

As a data subject, you have the following rights in respect of the personal data that qg33 holds about you. To exercise any of these rights, please contact [email protected] with your request:

• Right of access: you have the right to request a copy of the personal data qg33 holds about you, along with information about how that data is being processed.
• Right to rectification: if any personal data qg33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: in certain circumstances, you have the right to request that qg33 delete your personal data. This right is subject to legal exceptions — for example, qg33 may be required to retain financial records for a defined period regardless of a deletion request.
• Right to restrict processing: you have the right to request that qg33 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format.
• Right to object: you have the right to object to the processing of your personal data where that processing is based on qg33's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.

qg33 will respond to all data rights requests within a reasonable timeframe and in any event within 30 days of receipt. Where a request is complex or involves multiple rights, qg33 may extend this period by a further 30 days with prior notification to you.

11Children's Privacy

qg33 is an online gaming platform strictly intended for adults aged 21 and above. We do not knowingly collect, process or retain personal data belonging to individuals under the age of 21. During the account registration process, players are required to confirm their age, and qg33 may request documentary proof of age at any point. If qg33 becomes aware that an account has been registered by or on behalf of a person under 21, the account will be immediately suspended, all personal data associated with the account will be deleted as soon as reasonably practicable, and any deposits made will be returned to the payment source.

12Marketing Communications

qg33 may send promotional communications to players who have explicitly opted in to receive them. These may include notifications about welcome bonuses, reload offers, free spins, BPL and IPL cricket betting promotions, Eid and Pohela Boishakh seasonal campaigns, and general Platform news. Marketing communications are delivered via email or on-Platform notification and are clearly identified as promotional content.

You may opt out of marketing communications at any time by sending an opt-out request to [email protected]. Your opt-out will be processed promptly and you will be removed from active marketing lists within a reasonable period. Opting out of marketing does not affect essential account communications such as transaction confirmations, security alerts or support responses.

13Third-Party Links

The qg33 Platform may contain references to third-party game studios, payment providers and other service partners. Where such references include links, qg33 is not responsible for the privacy practices of any third-party website or service. This Policy applies only to data processed by qg33 in connection with the Platform. We recommend that you review the privacy policy of any third-party service you access independently.

14Changes to This Privacy Policy

qg33 reserves the right to update this Privacy Policy at any time. When a material change is made to this Policy, qg33 will endeavour to notify active players via email or an on-Platform notification prior to the change taking effect. The updated Policy will be published at qg33.app/privacy-policy with a revised Last Updated date.

Your continued use of the Platform following any update to this Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should discontinue use of the Platform and contact [email protected] to arrange account closure.

15Contact and Data Requests

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a data protection concern, please contact the qg33 privacy team. All privacy enquiries are handled in English and responses are provided within 30 days of receipt. Responses to data rights requests are provided free of charge unless the request is manifestly unfounded or excessive.