qqvip Privacy Policy — How We Protect Your Data

qqvip collects personal data from you in order to provide a safe, compliant, and enjoyable online gaming experience. We collect information in three main ways: directly from you when you register or interact with the platform; automatically as you use our services; and from third parties such as payment processors and identity verification providers.

1.1 Information You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, nationality, and government-issued identification number (National Identity Card, passport number, or driving licence number).
• Contact data: Email address, mobile phone number (Bangladesh-registered), and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).
• Financial data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), card details (Visa, Mastercard), and cryptocurrency wallet addresses (USDT).
• KYC documents: Scanned or photographed copies of government-issued photo ID, proof of address documents, and payment method ownership confirmations.
• Communications data: Records of your correspondence with our customer support team via live chat, email, or in-app messaging — including support tickets, complaints, and feedback.
• Promotional data: Bonus claims, promotional opt-in preferences, and survey or competition responses.

1.2 Information Collected Automatically

When you access and use the qqvip platform, our systems automatically collect certain technical and behavioural data:

• Device and access data: IP address, device type and model, operating system and version, browser type and version, screen resolution, and time zone setting.
• Usage data: Pages visited, features used, games played (including game titles, session start and end times, bet amounts, and game outcomes), deposit and withdrawal transaction history, and navigation paths through the platform.
• Session data: Login timestamps, session duration, logout events, and authentication activity including failed login attempts.
• Cookie and tracking data: See Section 4 (Cookies & Tracking) for full details of our cookie practices.

1.3 Information from Third Parties

We may receive personal data about you from the following categories of third parties in connection with operating the qqvip platform:

• Payment providers: Transaction confirmation details from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank partners.
• Identity verification services: Results of automated or manual identity checks performed by third-party KYC and AML screening providers.
• Fraud detection services: Risk scores, device fingerprints, and behavioural signals from fraud prevention technology partners.
• Responsible gaming databases: Self-exclusion status information from responsible gaming registries.

qqvip processes your personal data only for defined, lawful purposes. The table below sets out the primary purposes for which we use your data, together with the legal basis on which each processing activity rests.

Marketing Communications

qqvip will only send you marketing communications — including promotional emails, SMS notifications about bonuses, and seasonal offer alerts (e.g., Eid promotions, BPL season offers, Pohela Boishakh specials) — if you have explicitly opted in to receive them during registration or subsequently via your account preferences. You may withdraw your consent to receive marketing at any time by updating your notification settings in your account dashboard or by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Automated Decision-Making

qqvip uses automated systems for certain processes, including fraud detection scoring, responsible gaming trigger alerts, and bonus eligibility checks. Where an automated decision produces a significant effect on you (for example, a temporary account restriction triggered by an automated fraud alert), you have the right to request human review of that decision. Contact our support team to exercise this right.

qqvip does not sell your personal data to third parties. We share personal data with external parties only where strictly necessary to operate the platform, comply with legal obligations, or protect the security of the platform and its users. All third parties with whom we share data are contractually required to protect it in accordance with standards equivalent to those described in this Privacy Policy.

Categories of Third Parties

• Payment processing partners: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the minimum financial and identity data necessary to process your transactions.
• Game technology providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, Habanero, and Jili receive session tokens and anonymised gameplay data to deliver game content. These providers do not receive your full identity or financial data.
• KYC and AML verification providers: Identity verification partners receive copies of your KYC documents and identity data to perform mandatory age and identity checks.
• Fraud prevention technology providers: Risk management partners receive device fingerprint data, IP addresses, and behavioural signals to detect and prevent fraudulent activity.
• Cloud infrastructure providers: qqvip's platform is hosted on enterprise-grade cloud infrastructure. Hosting providers may process data on our behalf but may not use it for any independent purpose.
• Customer support platform providers: Our live chat and ticketing system provider processes support communications data to facilitate customer service delivery.
• Legal and regulatory authorities: We may be required by applicable law to disclose personal data to government bodies, law enforcement agencies, or financial intelligence units in response to a lawful request or order. qqvip will only comply with requests that meet a defined legal standard and will notify affected users where legally permissible to do so.

International Data Transfers

Some of qqvip's service providers and technology partners operate from locations outside Bangladesh. Where personal data is transferred internationally, qqvip ensures that appropriate safeguards are in place, including standard contractual clauses, data processing agreements, and technical security measures, to ensure your data receives a level of protection equivalent to that described in this Privacy Policy.

qqvip uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate core platform functionality, maintain your logged-in session, keep the platform secure, and gather aggregated analytics data to improve the user experience. We do not use third-party advertising networks or cross-site tracking technologies.

Types of Cookies We Use

Managing Your Cookie Preferences

You may manage non-essential cookies through your account preferences panel under Settings > Privacy > Cookie Preferences. You can also control cookies via your web browser settings; most modern browsers allow you to view, block, or delete cookies stored by specific websites. Note that disabling strictly necessary or security cookies will prevent you from logging in and using the platform.

qqvip does not respond to "Do Not Track" browser signals at this time, as there is no universally accepted standard for how such signals should be interpreted. However, our analytics cookies are first-party only and are not used for cross-site tracking or advertising profiling.

qqvip retains personal data only for as long as is necessary to fulfill the purposes described in this Privacy Policy, to comply with applicable legal and regulatory obligations, and to resolve any ongoing disputes or enforce our agreements. The following table summarises our standard retention periods by data category.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked back to you as an individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

qqvip takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction. Our security framework covers infrastructure, application, and operational levels.

Technical Security Measures

• Encryption in transit: All data transmitted between your device and the qqvip platform is encrypted using TLS 1.3. We enforce HTTPS across all pages and APIs; HTTP access is automatically redirected.
• Encryption at rest: All personal data, KYC documents, and financial records stored in qqvip's databases are encrypted using AES-256.
• Access controls: Access to personal data within qqvip is strictly limited to personnel who require it to perform their job functions. Role-based access controls (RBAC) and the principle of least privilege are enforced across all internal systems.
• Two-factor authentication: qqvip enforces two-factor authentication (2FA) for all internal staff access to systems containing personal data. We strongly recommend that players also enable 2FA on their accounts.
• Vulnerability management: qqvip conducts regular security assessments, penetration tests, and code reviews to identify and remediate potential vulnerabilities before they can be exploited.
• Intrusion detection: Automated intrusion detection and anomaly monitoring systems are active 24/7 across qqvip's infrastructure.

Organisational Security Measures

• All personnel with access to personal data undergo background screening and are bound by confidentiality obligations.
• Data security training is provided to all relevant staff on an ongoing basis.
• Third-party vendors with access to personal data are subject to security due diligence assessments and contractual data protection obligations before engagement.
• qqvip maintains an internal incident response plan to ensure rapid, coordinated action in the event of a suspected data breach.

Your Responsibility

While qqvip implements robust security controls on our side, account security also depends on you. You are responsible for keeping your login credentials — including your password and 2FA codes — confidential and for ensuring that no unauthorised person has access to your device when logged into qqvip. Use a strong, unique password and do not reuse it across other platforms. If you suspect your account has been compromised, contact support immediately at [email protected].

As a player on qqvip, you hold a number of rights in relation to the personal data we hold about you. These rights are summarised below. To exercise any of these rights, please contact our data protection team at [email protected] with the subject line "Privacy Rights Request". We will respond within five business days of receiving your request and will aim to fulfill it within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data we hold about you, together with information about how it is used and with whom it is shared. This is sometimes called a "Subject Access Request" (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as email address or phone number) directly via your account settings panel.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that certain data must be retained for legal and regulatory compliance reasons even after an erasure request — we will inform you of any such limitations at the time of your request.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling. You also have an absolute right to object to your personal data being used for direct marketing at any time.
• Right Not to be Subject to Solely Automated Decisions: Where a significant decision about you is made solely on the basis of automated processing (without human review), you have the right to request human reconsideration of that decision.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way qqvip handles your personal data, please contact our data protection and privacy team using the details below.

Primary Contact

Email: [email protected] (subject line: "Privacy Enquiry" or "Data Protection Request")
Response time: Within 4 hours during business hours; within 24 hours outside business hours. All times in BST (UTC+6).
Live Chat: Available 24/7 via the qqvip platform in-app messaging system.

What to Include in Your Request

To help us process your enquiry as efficiently as possible, please include the following information in your initial contact:

• Your full registered name and qqvip username.
• Your registered email address or mobile number.
• A clear description of your request or concern.
• The specific right you wish to exercise (if applicable — e.g., "Right of Access", "Right to Erasure").
• Any relevant reference numbers (e.g., transaction IDs, support ticket numbers).

Complaints Process

If you are dissatisfied with how qqvip has handled your personal data or has responded to a privacy rights request, you have the right to raise a formal complaint. Please follow the steps below:

1. Step 1 — Internal complaint: Submit your complaint in writing to [email protected] with the subject line "Formal Privacy Complaint". We will acknowledge your complaint within 48 hours and aim to provide a full written response within 15 business days.
2. Step 2 — Escalation: If you are not satisfied with our response at Step 1, you may request escalation to qqvip's senior data protection officer. Requests for escalation should be submitted to the same email address, clearly marked "Escalation — Data Protection".
3. Step 3 — External review: If you remain dissatisfied following our internal complaints process, you may seek external review through any applicable consumer protection or data protection authority in your jurisdiction.

Policy Updates

qqvip may update this Privacy Policy from time to time to reflect changes in our practices, platform features, legal obligations, or regulatory requirements. When we make material changes, we will notify registered players via email or an in-platform notification at least 14 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this page periodically so that you remain informed about how your data is protected.

Your continued use of the qqvip platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any material change, you have the right to close your account before the effective date of the change by contacting our support team.