aq998 Privacy Policy — How We Handle Your Personal Data

Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person. This includes names, email addresses, phone numbers, IP addresses, device identifiers, and financial account details.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, and any combination thereof.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, aq998.
• "Data Processor" means any third party that processes personal data on behalf of aq998 under a data processing agreement — for example, payment service providers and identity verification partners.
• "User" means any individual who accesses, registers with, or uses the aq998 platform.
• "Platform" means the aq998 website at https://aq998.io and all services, games, and features available through it.
• "KYC" means Know Your Customer — the identity and document verification process required for withdrawal eligibility.
• "Cookie" means a small text file placed on a user's device by a website to store session information, preferences, and analytical data.

Data Controller Identity

The Data Controller responsible for personal data collected through the aq998 platform is the operator of aq998, reachable at the contact details provided in Section 14 of this policy. As Data Controller, aq998 is responsible for ensuring that personal data is collected, stored, and processed lawfully, fairly, and transparently in accordance with this Privacy Policy and applicable data protection principles.

Where aq998 engages third-party Data Processors to handle personal data on its behalf — such as payment gateway operators, identity verification services, and cloud infrastructure providers — those processors are bound by contractual obligations requiring them to process data only on aq998's documented instructions, to implement appropriate security measures, and to delete or return data upon termination of the service relationship.

Personal Data We Collect

aq998 collects personal data through several channels: directly from users during registration and account management, automatically through your interaction with the platform, and from third-party providers where required for verification and fraud prevention purposes. The categories of data collected are set out in the table below.

aq998 does not intentionally collect special category personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless this is directly required for regulatory compliance and you have given explicit consent. If you believe special category data has been collected inadvertently, please contact [email protected] immediately.

How We Use Your Personal Data

aq998 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your user account, authenticating your identity at login, managing account preferences, and communicating important account-related notices.
• Service delivery: Processing deposits and withdrawals, settling bets and game results, applying bonuses and promotional rewards, and providing access to all betting and gaming products on the platform.
• Identity verification (KYC): Confirming your identity and age in compliance with anti-money laundering and know-your-customer obligations. KYC verification is mandatory before any withdrawal is approved.
• Fraud prevention and security: Monitoring transactions and platform activity for suspicious patterns, detecting multiple accounts, preventing money laundering, and investigating reports of fraud or policy violations.
• Responsible gaming: Monitoring for signs of problematic gambling behaviour, enforcing deposit limits and self-exclusion requests, and complying with age verification requirements. All registered users must be 21 years of age or older.
• Legal compliance: Meeting obligations under applicable anti-money laundering laws, data protection regulations, and requirements from licensing and regulatory authorities.
• Platform improvement: Analysing usage patterns and performance data to improve the platform's functionality, game selection, and user experience.
• Customer support: Responding to queries, complaints, and service requests submitted through live chat, email, or any other supported channel.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to users who have not opted out of marketing communications. You may opt out at any time by contacting [email protected].

Legal Basis for Processing

aq998 processes personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to perform the contract between aq998 and the user — including account operation, bet settlement, and payment processing. Without this processing, aq998 cannot deliver its services.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering regulations, KYC obligations, and financial record-keeping requirements.
• Legitimate interests: Processing carried out in aq998's legitimate interests, provided those interests are not overridden by your rights and interests. This includes fraud detection, platform security monitoring, responsible gaming oversight, and analytical improvement of platform services.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Third-Party Processors

aq998 does not sell personal data to third parties. Personal data may be disclosed to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers: bKash, Nagad, Rocket, Upay, and bank partners receive financial transaction data necessary to process deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
• Identity verification partners: Third-party KYC and age verification services receive identity document data to perform compliance checks required before withdrawal processing.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to deliver game content. They do not receive your full identity or financial details.
• Cloud infrastructure providers: aq998 uses secure cloud hosting services to store platform data. These providers operate as Data Processors under contractual obligations restricting their use of data to infrastructure services only.
• Fraud and security services: Anti-fraud platforms and device fingerprinting services may receive technical data (IP address, device identifiers) to identify suspicious activity patterns.
• Regulatory and law enforcement authorities: aq998 will disclose personal data to competent authorities when required by law, court order, or regulatory instruction, without prior notice to the user where legally prohibited.

aq998 requires all third-party processors to maintain data security standards consistent with this Privacy Policy and to process personal data only for the purposes specified in their data processing agreements with aq998.

Cookies & Tracking Technologies

The aq998 platform uses cookies and similar tracking technologies to maintain session integrity, personalise your experience, and gather analytical data about platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without impairing platform functionality.
• Functional cookies: Store your preferences such as language settings, currency display, and last-visited game categories to improve your experience on return visits.
• Analytical cookies: Collect anonymised or pseudonymised data about how users interact with the platform — pages visited, session durations, error events — to help aq998 improve platform performance.
• Marketing cookies: Used to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. These cookies are activated only with your consent.

Most web browsers allow you to control cookie behaviour through their settings. You may block or delete cookies at any time; however, disabling strictly necessary cookies will prevent you from logging into your account or using core platform features. Disabling analytical and marketing cookies will not affect your access to betting or gaming services.

Data Retention Periods

aq998 retains personal data for as long as necessary to fulfil the purposes described in this policy, or to meet applicable legal and regulatory retention requirements. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. Where deletion is not technically feasible within a live system, data is archived in a restricted-access environment and quarantined from active processing until deletion is completed.

Data Security Measures

aq998 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, and destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or app and the aq998 platform is encrypted in transit using industry-standard TLS protocols.
• Password security: User passwords are never stored in plain text. They are processed through a one-way cryptographic hash function with a unique salt per account, making them computationally infeasible to reverse.
• Access controls: Access to personal data within aq998 is restricted on a strict need-to-know basis. Staff members can only access data relevant to their assigned function, and all access events are logged and auditable.
• Two-factor authentication: aq998 recommends and supports the use of two-factor authentication on user accounts to add an additional layer of protection against unauthorised access.
• Penetration testing and vulnerability scanning: The platform undergoes regular security assessments by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: aq998 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights, aq998 will notify affected users without undue delay and take all reasonable steps to contain and mitigate the incident.

While aq998 takes all reasonable precautions to protect your data, no system connected to the internet can guarantee absolute security. You are also responsible for keeping your account credentials secure and for notifying aq998 promptly if you suspect unauthorised access to your account.

Your Data Protection Rights

As a user of the aq998 platform, you have the following rights in respect of your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". aq998 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data aq998 holds about you, together with information about how it is being used and who it has been shared with.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Some corrections can be made directly through your account settings.
• Right to erasure ("right to be forgotten"): In certain circumstances, you may request deletion of your personal data. This right is subject to overriding legal obligations — for example, aq998 cannot delete transaction records that are subject to mandatory regulatory retention periods.
• Right to restriction of processing: You may request that aq998 restrict the processing of your personal data in certain circumstances — for example, while a complaint is being investigated or while you contest the accuracy of data held about you.
• Right to data portability: You have the right to receive a copy of personal data you have provided to aq998 in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on aq998's legitimate interests. aq998 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests and rights.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
• Right to opt out of marketing: You may opt out of promotional communications at any time by contacting [email protected] or using the unsubscribe mechanism included in marketing emails. Opting out of marketing will not affect transactional or account-related communications.

Children's Privacy — 21+ Platform

The aq998 platform is strictly intended for adults aged 21 years and older. aq998 does not knowingly collect personal data from any individual under the age of 21. All users are required to confirm their age during registration, and identity verification is mandatory before any withdrawal is processed.

If aq998 discovers or has reasonable grounds to suspect that a registered user is under the age of 21, the account will be immediately suspended, all pending bets will be voided, and all deposited funds (excluding any Bonus Funds) will be returned through the original payment method. The incident will be flagged in accordance with applicable responsible gaming obligations.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account with aq998, please contact [email protected] immediately so that appropriate action can be taken without delay.

International Data Transfers

aq998's platform infrastructure and some of its third-party service providers may be located in jurisdictions outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that applicable in the user's jurisdiction, aq998 implements appropriate safeguards to ensure that your personal data remains protected to the standard described in this policy.

Appropriate safeguards for international transfers may include:

• Standard contractual clauses approved by recognised data protection authorities, incorporated into data processing agreements with the receiving entity.
• Binding corporate rules where data is transferred within a group of companies subject to a common privacy governance framework.
• Transfers to countries or organisations that have been assessed as providing an adequate level of data protection by a relevant supervisory authority.

By using the aq998 platform, you acknowledge that your personal data may be processed in countries outside Bangladesh and consent to such transfers subject to the safeguards described above.

Amendments to This Privacy Policy

aq998 reserves the right to update or amend this Privacy Policy at any time in response to changes in data protection law, platform features, business practices, or regulatory guidance. The effective date at the top of this document will be updated whenever a revision is published.

For material changes — defined as changes that affect how your personal data is used, who it is shared with, or your rights as a data subject — aq998 will provide at least 7 days' prior notice by email to your registered address and by displaying a notice on the platform. Your continued use of the platform after the notice period constitutes acceptance of the revised policy.

For non-material changes — such as clarifications, corrections of typographical errors, or formatting updates that do not alter the substance of the policy — aq998 will update the document without prior notice, although the effective date will always reflect the most recent revision.

Contact Us & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way aq998 handles your personal data, please get in touch using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: Data Rights Request — [Your Username]
• Subject line for privacy complaints: Privacy Complaint — [Your Username]
• Live Chat: Available 24 hours a day, 7 days a week via the aq998 platform
• Response time: All privacy-related requests acknowledged within 5 business days; substantive response within 30 calendar days
• Support hours: 24/7, Bangladesh Standard Time (UTC+6)

aq998 takes all privacy complaints seriously and will investigate every submission in good faith. If you remain dissatisfied following aq998's response to a privacy complaint, you may have the right to refer the matter to a competent data protection supervisory authority in your jurisdiction.