aqu999 Privacy Policy

This Privacy Policy ("Policy") is issued by aqu999 ("the Platform", "we", "us", "our") and applies to all individuals ("User", "Player", "you", "your") who access or interact with the aqu999 website at https://aqu999.net, including any associated subdomains, mobile web pages, and digital communications sent on behalf of aqu999.

aqu999 is committed to handling personal data responsibly and transparently. This Policy has been prepared to clearly explain how we collect, process, store, share, and protect the personal information of our players, with specific reference to the needs of our primary user base in Bangladesh.

By registering an account with aqu999, making a deposit, or continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read and understood the practices described herein. If you do not agree with any part of this Policy, you should cease using the aqu999 platform and may contact our support team to request account closure.

This Policy should be read alongside the aqu999 Terms & Conditions and Responsible Gaming Policy, all of which collectively govern your use of the platform. In the event of any inconsistency between this Policy and a more specific data-related notice (for example, a notice displayed at the point of collecting specific data), the more specific notice shall take precedence for that collection activity.

2.1 Registration Data

When you create an aqu999 account, we collect the personal information you provide during the registration process. This includes:

• Full legal name
• Date of birth (to verify you are aged 18 or above)
• Residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar)
• Email address
• Mobile phone number
• Username and encrypted password

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect copies of identity documents including national identity cards, passports, or driving licences, as well as proof-of-address documents such as utility bills or bank statements dated within 90 days. We also collect verification screenshots of the payment method (e.g., bKash, Nagad, or Rocket account) used for deposits.

2.3 Financial Transaction Data

We record details of all deposits and withdrawals made through your aqu999 account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or Dutch-Bangla Bank), transaction reference numbers, amounts in Bangladeshi Taka (৳), timestamps, and transaction status. We do not store complete card numbers; any card data is handled by our PCI-compliant payment processor.

2.4 Gameplay and Betting Data

aqu999 maintains records of your gaming activity on the platform, including game sessions, bet amounts, game outcomes, bonus usage, and wagering history. This data is used for account management, responsible gaming monitoring, dispute resolution, and fraud prevention.

2.5 Technical and Device Data

When you access aqu999, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited on the platform. This data is collected via server logs and analytics tools.

2.6 Communications Data

If you contact aqu999 via email, live chat, or any other support channel, we retain records of that correspondence including your contact details, the content of the communication, and the date and time of the interaction.

2.7 Summary of Data Categories

aqu999 processes personal data only where there is a lawful basis for doing so. The primary purposes for which we use your data are set out below:

3.1 Account Management and Service Delivery

We use your registration and verification data to create and maintain your account, verify your identity and age, process deposits and withdrawals, manage your bonus balances, and deliver the full range of casino and sports betting services available on the aqu999 platform.

3.2 Legal and Regulatory Compliance

aqu999 is required to retain certain data to comply with applicable anti-money laundering (AML) obligations, age verification requirements, and financial record-keeping rules. We process your KYC documents and transaction records to fulfil these obligations and to respond to lawful requests from relevant authorities.

3.3 Fraud Prevention and Platform Security

Technical and gameplay data is analysed to detect and prevent fraudulent activity, account takeovers, collusion between players, bonus abuse, and other conduct prohibited under the aqu999 Terms & Conditions. This processing is carried out in the legitimate interests of aqu999 and of our player community.

3.4 Responsible Gaming Monitoring

aqu999 uses gameplay and transaction data to monitor for patterns that may indicate problem gambling behaviour, including rapid deposit sequences, significant increases in bet size, and extended uninterrupted play sessions. Where such patterns are identified, our responsible gaming team may reach out proactively to offer support resources.

3.5 Customer Support

Communications data and account history are used by our support team to resolve queries, investigate disputes, and provide an efficient and personalised service experience.

3.6 Marketing Communications

With your consent, or where we have a legitimate interest in promoting our services to existing customers, we may use your email address or mobile number to send you information about current promotions, seasonal offers (such as Eid bonuses, Pohela Boishakh specials, or BPL betting promotions), and platform updates. You may withdraw consent for marketing communications at any time via your account settings.

3.7 Platform Improvement and Analytics

Aggregated and anonymised technical and gameplay data is used to analyse how users interact with the aqu999 platform, identify areas for improvement, optimise page performance, and develop new features and content offerings.

aqu999 does not sell, rent, or trade personal data with third parties for commercial gain. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

4.1 Payment Service Providers

To process deposits and withdrawals, aqu999 shares relevant transaction details with our payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank. Each of these providers processes data in accordance with their own privacy policies and applicable financial regulations.

4.2 Game Studios and Technology Providers

Games available on the aqu999 platform are supplied by licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. When you play a game, limited session data (such as player ID and bet amounts) may be transmitted to the relevant game studio to facilitate gameplay and resolve disputes. These studios are contractually prohibited from using this data for any purpose other than game delivery and integrity verification.

4.3 Identity Verification Services

aqu999 may engage third-party KYC and identity verification service providers to assist in verifying the identity and age of players. These providers process the documents you submit under strict contractual confidentiality obligations and may not use your data for any purpose beyond the verification service.

4.4 Legal and Regulatory Authorities

aqu999 will disclose personal data to law enforcement agencies, regulatory bodies, or other authorised public authorities if required to do so by applicable law, or where we reasonably believe that disclosure is necessary to protect the rights, safety, or property of aqu999, our players, or the public.

4.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of the aqu999 business, player data may be transferred to the acquiring entity as part of the transaction. In such circumstances, aqu999 will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations consistent with this Policy, and registered users will be notified of any material change in data controller.

The aqu999 website uses cookies and similar tracking technologies (such as web beacons and pixel tags) to enhance your browsing experience, maintain session state, and gather analytics data. By continuing to use the aqu999 platform, you consent to the use of cookies as described in this section.

5.1 What Are Cookies?

Cookies are small text files that a website places on your device when you visit it. They allow the website to remember information about your visit — such as your preferred settings or login status — making subsequent visits more convenient. Cookies cannot execute programs or deliver viruses to your device.

5.2 Types of Cookies Used by aqu999

5.3 Managing Cookies

You can manage or disable cookies through your browser settings. Most modern browsers allow you to block all cookies, accept only certain types, or delete cookies that have already been placed. Please note that disabling essential cookies will impair your ability to log in and use core platform features. Instructions for managing cookies are available in the help documentation of all major browsers.

aqu999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The general retention periods applied by aqu999 are as follows:

6.1 Active Account Data

While your account remains open and active, aqu999 retains all registration data, KYC documents, transaction records, and gameplay history associated with your account. This data is necessary for the ongoing delivery of services, responsible gaming monitoring, and dispute resolution.

6.2 Post-Closure Retention

Following the closure of your aqu999 account — whether voluntarily or by aqu999 — we retain your personal data for a minimum period of five (5) years. This period reflects our obligations under applicable anti-money laundering legislation and financial record-keeping requirements. After this period, data that is no longer required for a legitimate purpose is securely deleted or irreversibly anonymised.

6.3 Marketing Data

Where you have consented to receive marketing communications from aqu999, we retain the contact details and preference records associated with that consent until you withdraw it. Upon withdrawal of marketing consent, your contact details will be suppressed from future marketing campaigns within 10 business days.

6.4 Support Communications

Records of support interactions — including email and live chat transcripts — are retained for a period of three (3) years from the date of the interaction, to support quality assurance, training, and dispute resolution processes.

aqu999 respects your rights in relation to your personal data. The following rights are available to registered players on the platform:

7.1 Right of Access

You may request a copy of the personal data aqu999 holds about you at any time. Upon receiving a verified request, we will provide a summary of your data in a readable format within 30 days. This is commonly referred to as a Subject Access Request (SAR).

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor account details (such as contact number or email address) can be updated directly through your account settings. For corrections to identity documents or date of birth, please contact our support team with supporting documentation.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing has been unlawful. Please note that this right is subject to our legal retention obligations — we cannot delete transaction records or KYC documents that we are required by law to retain for a minimum period.

7.4 Right to Restrict Processing

In certain circumstances — for example, where you have contested the accuracy of data we hold, or where processing is unlawful but you prefer restriction to erasure — you may request that we restrict the processing of your data while the matter is under review.

7.5 Right to Object to Marketing

You have the absolute right to object to your data being used for direct marketing purposes. Exercising this right will result in your removal from all marketing lists. This will not affect service-related communications (for example, deposit confirmations, security alerts, or account notifications).

7.6 Exercising Your Rights

To exercise any of the above rights, please contact the aqu999 data team at [email protected] with the subject line "Privacy Request — [Your Username]". We will acknowledge your request within 5 business days and complete it within 30 calendar days, or notify you if a longer period is required.

aqu999 takes the security of your personal data seriously. We have implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure.

8.1 Technical Safeguards

• 256-bit SSL/TLS encryption is applied to all data transmitted between your browser and the aqu999 platform.
• Password hashing: User passwords are never stored in plain text. They are processed using industry-standard one-way hashing algorithms before storage.
• Firewall and intrusion detection systems protect our server infrastructure from unauthorised external access.
• Two-factor authentication (2FA) is available for player accounts and is mandatory for all administrative access to aqu999 internal systems.
• Regular security audits are conducted by our internal security team and periodically by external specialists.

8.2 Organisational Safeguards

• Access to personal data is restricted to aqu999 personnel and authorised contractors who have a legitimate business need to access it.
• All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• A defined incident response procedure is in place to address data breaches promptly, including notifying affected users where required.

8.3 Your Responsibilities

While aqu999 takes robust measures to protect your data on our end, the security of your account also depends on the measures you take. You should use a strong and unique password for your aqu999 account, enable two-factor authentication where available, keep your login credentials strictly confidential, and notify us immediately at [email protected] if you suspect any unauthorised access to your account.

8.4 Data Breach Notification

In the event of a data security incident that poses a material risk to your personal data, aqu999 will notify affected users as soon as reasonably practicable via the email address registered to the affected account. The notification will describe the nature of the incident, the categories of data affected, and the steps being taken to address it.