qa777 Privacy Policy

This Privacy Policy ("Policy") describes how qa777 ("we", "us", "our", "the Company") collects, uses, stores, shares, and protects personal information relating to individuals ("you", "your", "the Player") who access or use the qa777 platform, including the website at https://qa777.io, any associated mobile interfaces, applications, and related services (collectively, "the Platform").

This Policy applies to all personal data processed in connection with your registration, use of services, participation in promotions, customer support interactions, and any other engagement with qa777. It covers data collected both online through the Platform and, where applicable, through any offline channels such as email or live chat communications.

This Policy should be read alongside the qa777 Terms & Conditions, which govern the overall contractual relationship between you and qa777. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

qa777 acts as the data controller in respect of the personal data it collects from players using the Platform. As data controller, qa777 determines the purposes for which and the means by which personal data is processed.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact us at any time using the contact details provided in Section 14 of this Policy. We aim to respond to all data-related enquiries within ten business days of receipt.

The categories of personal data that qa777 may collect about you include, but are not limited to, the following:

Category	Examples	When Collected
Identity Data	Full name, date of birth, gender, nationality, government-issued ID number	At registration and during KYC verification
Contact Data	Email address, mobile phone number, residential address, city, postcode	At registration and when updating account details
Financial Data	bKash/Nagad/Rocket account numbers, bank account details, transaction amounts, deposit and withdrawal history	When making deposits or requesting withdrawals
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, session duration	Automatically on each platform visit
Usage Data	Pages visited, games played, bets placed, features used, time spent on platform	Automatically during platform use
Communications Data	Live chat transcripts, email correspondence, support ticket content	When contacting qa777 support
Verification Documents	Copies of National ID, passport, utility bills, selfie photographs	During KYC and AML verification processes

We do not collect special categories of sensitive personal data (such as health information, racial or ethnic origin, religious beliefs, or political opinions) unless you voluntarily provide such information in the context of a responsible gaming self-exclusion request or similar welfare-related interaction.

qa777 collects personal data through the following primary mechanisms:

• Direct Submission: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, participating in promotions, contacting support, or filling out any form on the Platform.
• Automated Technical Collection: Data collected automatically when you access the Platform, including your IP address, device identifiers, browser information, and behavioural usage data, collected via server logs, cookies, and similar technologies.
• Third-Party Sources: Information received from identity verification service providers, payment processors (including bKash, Nagad, Rocket, and Upay), and fraud prevention partners, where such sharing is necessary to verify your identity or process a transaction.
• Public Sources: In limited circumstances where required for anti-money laundering or fraud prevention purposes, qa777 may consult publicly available sources such as sanctions lists or politically exposed persons databases.

qa777 processes your personal data only where we have a lawful basis for doing so. The table below outlines the primary purposes for which we process your data and the corresponding legal basis:

Purpose	Legal Basis
Creating and managing your qa777 account	Performance of a contract
Processing deposits and withdrawals	Performance of a contract
Verifying your identity (KYC/AML compliance)	Legal obligation
Detecting and preventing fraud and money laundering	Legal obligation and legitimate interests
Providing customer support services	Performance of a contract
Sending transactional and account-related communications	Performance of a contract
Sending promotional offers and bonus notifications	Consent (you may withdraw at any time)
Platform analytics and performance improvement	Legitimate interests
Responsible gaming monitoring and intervention	Legal obligation and legitimate interests
Compliance with legal and regulatory obligations	Legal obligation

Where we rely on your consent as the legal basis for processing (for example, for marketing communications), you have the right to withdraw that consent at any time by contacting our support team or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

qa777 does not sell or rent your personal data to third parties. We may share your personal information with the following categories of recipients only where strictly necessary and under appropriate data protection safeguards:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, for the purposes of processing deposits and withdrawals.
• Identity Verification Partners: Third-party KYC and AML service providers engaged to verify your identity and screen against sanctions and fraud databases.
• Technology and Infrastructure Providers: Cloud hosting, platform security, and technical operations partners who process data on our behalf under strict data processing agreements.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session and fairness-related data necessary to deliver their games on our platform.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or a lawful request from a government or regulatory body, qa777 may disclose personal data without prior notice to you.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of qa777's business assets, your personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

As an internationally operated platform, qa777 may transfer your personal data to servers or service providers located outside of Bangladesh. Where such transfers occur, qa777 takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to that which applies within your home jurisdiction.

These safeguards may include the use of standard contractual clauses, data processing agreements incorporating appropriate technical and organisational security measures, or transfers to countries that have been assessed as providing an adequate level of data protection. By using the qa777 Platform, you consent to your personal data being transferred internationally in accordance with the safeguards described in this section.

qa777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law or regulation. The following general retention periods apply:

• Account Data: Retained for the duration of your account relationship with qa777, plus a minimum of five years following account closure, in compliance with anti-money laundering and financial record-keeping obligations.
• Transaction Records: Retained for a minimum of seven years from the date of the transaction, in accordance with applicable financial regulations.
• Identity Verification Documents: Retained for a minimum of five years following the completion of the KYC process, or five years after account closure, whichever is later.
• Customer Support Records: Retained for three years from the date of the last interaction, unless the content is relevant to an ongoing dispute or legal matter.
• Marketing Consent Records: Retained for the duration of your marketing consent, plus a reasonable period thereafter to evidence compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction policy. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

qa777 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate and improve the Platform. Cookies are small data files stored on your device when you visit a website. They help us recognise returning users, maintain login sessions, and understand how the Platform is being used.

The categories of cookies used by qa777 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session management cookies, security tokens, and load-balancing cookies. No personal data beyond technical session identifiers is stored in these cookies.
• Functional Cookies: These cookies remember your preferences, such as language settings and display options, to personalise your experience on return visits.
• Analytics Cookies: We use anonymised analytics cookies to understand aggregate usage patterns on the Platform, such as which pages are most visited and how users navigate between sections. These cookies do not identify individual users.

qa777 does not use third-party advertising cookies, retargeting cookies, or any cookies that track your activity across external websites outside of the qa777 Platform. You may configure your browser settings to block or delete cookies at any time; however, disabling strictly necessary cookies may impair the functionality of the Platform.

qa777 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the qa777 Platform.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Role-based access controls ensuring that only authorised personnel can access personal data, strictly on a need-to-know basis.
• Automated intrusion detection and real-time security monitoring across all platform infrastructure.
• Regular third-party security audits and penetration testing conducted by independent cybersecurity specialists.
• Multi-factor authentication requirements for internal administrative access to systems holding personal data.
• Formal data breach response procedures, including notification protocols in the event of a breach that affects your personal data.

While qa777 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are also responsible for protecting your own account credentials and for notifying us immediately if you believe your account has been compromised.

As a qa777 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details provided in Section 14:

• Right of Access: You may request a copy of the personal data that qa777 holds about you, together with information about how and why it is being processed.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you. You may also update certain account details directly through your account settings page.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to limitations where retention is required by applicable law (for example, anti-money laundering or financial record-keeping obligations).
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in specific circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and processing is carried out by automated means, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis. You also have an unconditional right to object to processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to all valid data rights requests within ten business days. In complex cases we may extend this period by up to a further twenty business days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for handling data rights requests, except in cases of manifestly unfounded or excessive requests.

The qa777 Platform is strictly intended for adults aged 21 years and above. qa777 does not knowingly collect personal data from any person under the age of 21. If you are under 21 years of age, you must not use the Platform, create an account, or provide any personal information to qa777.

If qa777 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered with qa777, please contact us immediately at the address in Section 14 so that we can investigate and take appropriate action.

qa777 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last updated" date at the top of this page and, where practicable, provide registered players with advance notice via email. We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data.

Your continued use of the qa777 Platform following the posting of a revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any material change to this Policy, you should discontinue use of the Platform and contact our support team to close your account and arrange for the deletion of your data where permissible.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by qa777, please contact our Data Privacy team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the qa777 Platform
• Response Time: We aim to respond to all privacy-related enquiries within ten business days

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. qa777 takes all privacy complaints seriously and is committed to resolving them in a fair, transparent, and timely manner.