🔐 Data & Privacy

Privacy Policy — How qa9 Protects Your Data

At qa9, your privacy is taken seriously. This Privacy Policy explains exactly what personal information we collect from Bangladeshi players, why we collect it, how it is stored, and how you can control it.

Last updated: January 2026  |  Applies to all qa9 registered users

🛡️ Our Commitment to Your Privacy

📌 Key Principle

qa9 collects only the personal data that is genuinely necessary to deliver our services, verify player identity, process payments, and comply with applicable fraud prevention obligations. We do not sell, rent, or share your personal data with third-party marketing organisations.

🔒
SSL Encryption on Every Session
All data exchanged between your device and qa9's servers is protected using 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal information are never transmitted in plain text.
🚫
No Sale of Personal Data
qa9 does not sell, rent, or trade your personal information to any third-party advertisers, data brokers, or marketing companies. Your data is used solely to operate and improve the qa9 service.
🗃️
Minimal Data Collection
We follow a data minimisation principle — collecting only what is strictly required for account operation, identity verification, and payment processing. We do not request data unrelated to these purposes.
✏️
Your Right to Access and Correct
You may request a full copy of the personal data we hold about you at any time, and you may request corrections to any inaccurate information. Contact us at [email protected] to make such a request.
🗑️
Right to Deletion
You may request deletion of your qa9 account and associated personal data at any time by contacting our support team. Deletion requests are processed subject to applicable legal data retention obligations.
📵
Opt-Out of Marketing at Any Time
Promotional communications from qa9 are optional. You may withdraw your consent to receive marketing emails or messages at any time via your account settings or by contacting support, with no effect on your ability to use the platform.

1. Personal Data We Collect

1.1 Information You Provide Directly
Registration Data
Full name, date of birth, email address, mobile phone number, and country of residence. This data is required to create and maintain your qa9 account.
Identity Verification Documents
National ID card, passport, or other government-issued identification documents that may be requested to verify your age and identity in compliance with our Know Your Customer (KYC) obligations.
Payment Information
Mobile financial account identifiers (bKash, Nagad, Rocket, Upay numbers) and bank account details provided for deposit and withdrawal purposes. qa9 does not store full card numbers or payment PINs.
Support Communications
The content of any messages, emails, or Telegram conversations you send to our support team, retained to provide assistance and improve service quality.
1.2 Automatically Collected Data
Device and Technical Data
IP address, device type, operating system, browser type, screen resolution, and unique device identifiers collected automatically when you access qa9.
Usage and Behavioural Data
Pages visited, games played, bets placed, session duration, click patterns, and in-app navigation paths. Used to personalise your experience and detect suspicious activity.
Transaction Logs
A complete record of all deposits, withdrawals, wagers, bonus activations, and account balance changes, retained for regulatory compliance and dispute resolution purposes.
Cookies and Similar Technologies
Session cookies, persistent cookies, and local storage tokens used to maintain your login session, remember preferences, and measure platform performance. See Section 6 for full cookie details.
1.3 Data from Third Parties

2. How We Use Your Personal Data

Account Creation and Management
To set up, maintain, and authenticate your qa9 account. Basis: Performance of contract.
Age and Identity Verification (KYC)
To confirm that you meet the minimum age requirement of 21 years and that your identity matches the payment methods used. Basis: Legal obligation and legitimate interest.
Payment Processing
To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks. Basis: Performance of contract.
Fraud Prevention and Security
To detect and prevent unauthorised access, bonus abuse, money laundering, and other fraudulent activity on the platform. Basis: Legitimate interest and legal obligation.
Customer Support
To respond to your queries, resolve disputes, and improve our support service. Basis: Performance of contract and legitimate interest.
Personalisation and Platform Improvement
To tailor game recommendations, display relevant promotions, and improve the overall qa9 user experience based on aggregated usage patterns. Basis: Legitimate interest.
Responsible Gaming Monitoring
To identify patterns of play that may indicate problem gambling and to apply voluntary or mandatory restrictions where appropriate. Basis: Legal obligation and player welfare.
Marketing Communications
To send promotional offers, bonus alerts, and platform news via email or Telegram, where you have provided explicit consent. Basis: Consent (withdrawable at any time).

3. Data Sharing and Third-Party Disclosure

  • Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other approved payment partners receive only the transaction data necessary to process your deposit or withdrawal.
  • Identity Verification Partners: Third-party KYC service providers receive identity documents and verification data solely for the purpose of confirming your identity and age.
  • Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session data necessary to deliver and maintain their game software within the qa9 platform.
  • Fraud Detection and Security Services: Specialist providers may receive device identifiers, IP addresses, and behavioural signals to support real-time fraud monitoring and account security.
  • Legal and Regulatory Authorities: Where required by applicable law or a valid legal order, qa9 may disclose personal data to law enforcement agencies, regulatory bodies, or courts. We will always seek to limit the scope of such disclosures to what is strictly required.
  • Business Successors: In the event of a merger, acquisition, or sale of qa9's assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected users will be notified in advance.

⚠️ No Third-Party Marketing: qa9 strictly prohibits its data-sharing partners from using your personal data for their own marketing purposes. All data processing agreements with third parties include explicit restrictions on secondary use of player data.

4. Data Retention

  • Active account data — retained for the full duration of your account and for a minimum of 5 years following account closure, in line with standard financial record-keeping obligations.
  • Transaction and betting records — retained for a minimum of 5 years following the date of the transaction, to support audit, dispute resolution, and anti-money-laundering compliance.
  • Identity verification documents — retained for the same 5-year minimum period following account closure, or longer where required by a specific legal obligation.
  • Customer support correspondence — retained for 2 years following the resolution of the support interaction, unless the matter is subject to ongoing legal proceedings.
  • Marketing consent records — retained for as long as you remain an active subscriber or for 1 year following withdrawal of consent, to demonstrate compliance with consent obligations.
  • Cookie and session data — session cookies expire when you close your browser. Persistent cookies expire according to their individual lifespan, which is a maximum of 12 months unless renewed by an active session.

5. Your Privacy Rights

Right of Access
You may request a copy of all personal data qa9 holds about you, including the categories of data, the purposes of processing, and any third parties with whom it has been shared.
Right of Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Account closure requests are processed within 10 business days.
Right to Restrict Processing
You may request that we temporarily restrict the processing of your personal data while a dispute regarding its accuracy or the legitimacy of our processing is being resolved.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Right to Object
You may object to processing carried out on the basis of legitimate interest, including profiling for personalisation purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

6. Cookies and Tracking Technologies

  • Strictly Necessary Cookies: Essential for core platform functions including user authentication, session management, and security. These cannot be disabled without impairing basic site functionality.
  • Performance and Analytics Cookies: Used to measure how users interact with the qa9 platform — which pages are visited most frequently, how long sessions last, and where errors occur. Data is aggregated and anonymised.
  • Functionality Cookies: Remember your language preferences, display settings, and recently played games so that you do not need to reconfigure your experience on each visit.
  • Marketing and Retargeting Cookies: Used only where you have provided explicit consent, to deliver relevant promotional content and measure the effectiveness of our marketing. You may opt out at any time via your account settings.

7. Data Security Measures

  • 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
  • Bcrypt password hashing — your account password is never stored in plain text.
  • Role-based access controls ensuring that only authorised qa9 personnel with a genuine need can access personal player data.
  • Regular internal security audits and penetration testing conducted by qualified security professionals.
  • Two-factor authentication (2FA) available for player accounts to add an extra layer of login security.
  • Automated anomaly detection systems that flag unusual login locations, rapid successive login attempts, and other indicators of potential account compromise.
🔑 Protect Your Own Account

Choose a strong, unique password for your qa9 account. Never share your login credentials with anyone. qa9 support staff will never ask for your password via email, Telegram, or any other channel. If you suspect your account has been compromised, contact us immediately at [email protected].

8. Age Restriction and Minor Protection

⚠️ 21+ Only: If you are a parent or guardian and believe that a person under 21 in your household has registered a qa9 account, please contact us immediately at [email protected] so we can take appropriate action. We take underage access to gambling services extremely seriously.

9. Updates to This Privacy Policy

🎮 Explore qa9 With Confidence

Your Data is Safe — Now Let's Play
Knowing your privacy is protected, dive into everything qa9 has to offer — live casino games, BPL cricket betting, Aviator, slots from Pragmatic Play and more. Bangladeshi players trust qa9 for secure, fair, and entertaining gameplay every day.
Login to qa9 Browse qa9 Casino Responsible Gaming

21+ only · Play responsibly · SSL secured · T&Cs apply