Privacy Policy

Introduction

This Privacy Policy is issued by q222 ("q222", "we", "us", "our") and applies to all personal data collected through the q222 Platform at q222.io, including all associated sub-pages, mobile-optimised interfaces, and any related services. This Policy should be read alongside q222's Terms & Conditions and Responsible Gaming Policy, both of which are published on the Platform.

q222 is committed to handling your personal data with transparency, integrity, and care. We recognise that players entrust us with sensitive financial and personal information, and we take that responsibility seriously. This Policy explains what data we collect, why we collect it, how we use it, and how we protect it.

By registering an account, accessing the Platform, or using any q222 service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact q222 support to close your account.

Data We Collect

q222 collects personal data that falls into the following categories. In each case, collection is limited to what is genuinely necessary for the stated purpose.

q222 does not intentionally collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers. If you voluntarily disclose any such data (for example, mentioning a medical condition in a support conversation), q222 will handle it with additional care and will not use it for any purpose beyond the immediate support context.

How We Use Your Data

q222 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the original reason it was collected without first obtaining your consent or notifying you of the new purpose.

• Account creation and management: Processing your registration, maintaining your account, and enabling you to access all q222 Platform features.
• Identity and age verification: Conducting KYC checks to confirm that you are at least 21 years of age and that your identity matches the details you have provided.
• Payment processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and Visa/Mastercard, and processing withdrawal requests to your registered payment methods.
• Fraud and security monitoring: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited activities on the Platform.
• Responsible gaming: Monitoring your playing patterns to identify potential indicators of problem gambling and, where appropriate, proactively reaching out to offer support tools including deposit limits and self-exclusion options.
• Legal compliance: Meeting q222's obligations under applicable anti-money laundering regulations, record-keeping requirements, and any lawful requests from regulatory or law enforcement authorities.
• Customer support: Responding to your enquiries, resolving disputes, and improving the quality of q222's support services through analysis of past interactions.
• Platform improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve game performance, and enhance the overall player experience.
• Promotional communications: Sending you information about q222 bonuses, new game launches, and seasonal promotions, but only where you have explicitly opted in to receive such communications.

q222 does not use automated decision-making or profiling processes that produce legal or similarly significant effects on you without human review. Where automated tools flag an account for investigation (for example, due to suspected fraud), a q222 team member reviews the case before any material action is taken.

Legal Basis for Processing

q222 processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing your identity, contact, financial, and transaction data is necessary for q222 to perform the contract it has with you — that is, to operate your account, accept bets, and process payments. Without this processing, q222 cannot deliver its services.
• Legal obligation: q222 is required by applicable anti-money laundering regulations, financial record-keeping laws, and other statutory obligations to collect, retain, and in certain circumstances disclose personal data. This processing is non-optional and cannot be restricted by you.
• Legitimate interests: q222 processes technical and usage data for fraud prevention, platform security, and responsible gaming monitoring on the basis of q222's legitimate interest in operating a safe and fair gaming environment. q222 has assessed that this processing does not override players' privacy interests.
• Consent: q222 processes your data for marketing communications only where you have given explicit, freely given, informed consent. You may withdraw marketing consent at any time without affecting your account status or any other processing that relies on a different legal basis.

Data Sharing

q222 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and Visa/Mastercard payment networks receive transaction data necessary to execute your deposit and withdrawal requests. These providers operate under their own data protection policies.
• KYC and identity verification providers: Third-party identity verification services receive the identity and document data you submit during KYC in order to confirm your age and identity on q222's behalf.
• Game studios and content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game providers receive a session identifier and minimum necessary technical data to deliver their games through the Platform. These studios do not receive your full profile or financial data.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers that support the technical operation of the Platform may have access to personal data as part of the services they provide to q222. Such providers are contractually bound to process data only on q222's instructions.
• Regulatory and law enforcement authorities: q222 may disclose personal data to relevant authorities where required to do so by law, court order, or regulatory direction, including in connection with anti-money laundering investigations.
• Professional advisors: Legal counsel, auditors, and compliance consultants may access personal data to the extent necessary to provide professional services to q222, subject to confidentiality obligations.

In all cases where q222 shares data with third-party processors, q222 ensures that appropriate contractual safeguards are in place requiring those parties to handle your data securely and in accordance with applicable data protection principles.

Cookies & Tracking Technologies

q222 uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to maintain your login session, and to collect usage data that helps us improve the Platform experience. The following categories of cookies are used:

• Strictly necessary cookies: These are essential for the Platform to function. They maintain your login session, remember your preferences within a session, and ensure secure navigation. These cookies cannot be disabled without preventing you from using the Platform.
• Functional cookies: These remember choices you make — such as your preferred language or display settings — to personalise your experience on return visits. Disabling these cookies may affect Platform functionality.
• Analytics cookies: These collect anonymised data about how players interact with the Platform — which pages are visited most, where players spend the most time, and where technical errors occur. This data is used exclusively to improve the Platform and is not linked to individual player identities.
• Security cookies: These help q222 detect and prevent fraudulent activity, unauthorised account access, and bot-driven interactions. They form part of q222's platform security infrastructure.

q222 does not use third-party advertising or retargeting cookies. Your Platform behaviour is not shared with advertising networks, and you will not see q222 adverts following you across other websites based on your Platform activity.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from using the Platform. For all other categories, you may adjust your browser's cookie controls at any time.

Data Security

q222 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures are reviewed and updated regularly as part of q222's ongoing security programme.

• All data transmitted between your device and q222's servers is encrypted using TLS 1.2 or higher (SSL encryption).
• Sensitive data at rest, including financial and identity records, is encrypted using AES-256 or equivalent standards.
• Access to personal data within q222's systems is restricted to personnel who require it to perform their job functions, on a strictly need-to-know basis.
• q222's infrastructure is hosted on servers with industry-standard physical and network security controls, including firewalls, intrusion detection systems, and regular vulnerability assessments.
• q222 conducts regular internal security reviews and works with third-party security specialists to identify and remediate vulnerabilities.
• All q222 staff with access to personal data receive data protection training as part of their onboarding and on an ongoing basis.

While q222 takes all reasonable precautions, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your q222 account credentials and for notifying q222 promptly if you suspect your account has been compromised.

Data Retention

q222 retains personal data for the period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following general retention principles apply:

• Account data: Retained for the duration of your account's active lifetime and for a period following account closure as required by anti-money laundering regulations and financial record-keeping obligations.
• Transaction and betting records: Retained for the minimum period mandated by applicable financial and AML regulations, after which records are securely deleted or anonymised.
• KYC documents: Retained for the period required by applicable identity verification and AML obligations. Copies of identity documents are stored only in encrypted form and access is strictly controlled.
• Customer support records: Retained for a period sufficient to resolve any outstanding disputes and to improve service quality, after which they are securely deleted.
• Marketing consent records: Retained for the duration of the consent period and for a reasonable period thereafter as evidence of consent, in accordance with best practice.
• Technical and usage data: Typically retained in anonymised or aggregated form for platform improvement purposes. Identifiable technical data (such as IP address logs) is deleted on a rolling basis.

When personal data is no longer required and no legal retention obligation applies, q222 securely deletes or irreversibly anonymises it so that it can no longer be associated with an identifiable individual.

Your Rights

Subject to applicable law, you have the following rights in relation to the personal data that q222 holds about you. To exercise any of these rights, please contact q222 support at [email protected] with the subject line "Data Rights Request" and include your account username and a description of your request.

• Right of access: You may request a copy of the personal data q222 holds about you, along with information about how that data is used and with whom it has been shared.
• Right to rectification: If any personal data q222 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data (such as your name or date of birth), q222 may require supporting documentation before making changes.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations where q222 has a legal obligation to retain the data (for example, transaction records required by AML regulations).
• Right to restrict processing: You may request that q222 restrict the processing of your data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests. q222 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

q222 aims to respond to all valid data rights requests within 30 calendar days. Where a request is complex or q222 receives a high volume of requests, the response period may be extended by a further 60 days, in which case q222 will notify you of the extension and the reason for it within the initial 30-day period.

Children's Privacy

The q222 Platform is strictly intended for adults aged 21 years and above. q222 does not knowingly collect personal data from individuals under the age of 21. The Platform employs KYC verification procedures specifically designed to prevent minors from creating accounts or accessing any gambling services.

If q222 discovers or is notified that it has collected personal data from an individual who is under 21 years of age, q222 will immediately suspend the relevant account, delete all associated personal data to the extent permitted by law, and refund any real money funds deposited, less any applicable processing fees.

If you are a parent or guardian and believe that a minor in your care has accessed or registered on the q222 Platform, please contact [email protected] immediately. q222 takes underage gambling extremely seriously and will investigate and act on all such reports as a matter of priority.

International Data Transfers

q222 may transfer your personal data to third-party service providers whose operations are located outside of Bangladesh. This may occur, for example, when q222 uses cloud hosting infrastructure, KYC verification services, or game studio platforms that are operated from other countries.

Where such transfers occur, q222 ensures that appropriate safeguards are in place to protect your data. These safeguards may include contractual clauses between q222 and the receiving party that require the recipient to handle your data to a standard equivalent to the protections described in this Policy.

q222 does not transfer personal data to jurisdictions that lack adequate data protection standards without first ensuring that appropriate contractual or other protections are in place. If you have questions about the specific countries to which your data may be transferred, please contact [email protected].

Third-Party Links

The q222 Platform does not contain links to third-party websites for the purposes of this Privacy Policy. All navigation within the Platform leads to q222-operated pages. q222 is not responsible for the privacy practices of any third-party service providers whose platforms you may access independently in connection with payment methods (such as the bKash or Nagad apps) or identity verification services.

q222 encourages you to review the privacy policies of any third-party services you use in connection with your q222 account, particularly your mobile wallet provider (bKash, Nagad, Rocket, or Upay) and your bank. q222 has no control over and accepts no responsibility for the data practices of these independent providers.

Policy Changes

q222 may update this Privacy Policy from time to time to reflect changes in its data practices, applicable law, or the services offered on the Platform. The effective date at the top of this Policy will be updated whenever a material change is made.

For material changes — those that significantly affect how your data is collected, used, or shared — q222 will provide advance notice via a prominent notice on the Platform or by email to your registered address before the changes take effect. For minor changes, such as corrections to typographical errors or clarifications that do not alter the substance of the Policy, the updated version will be published on the Platform without individual notification.

Your continued use of the Platform following the effective date of any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should cease using the Platform and contact q222 support to close your account before the effective date of the change.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or q222's handling of your personal data, please contact the q222 Data Support team. q222 is committed to addressing all privacy enquiries promptly and thoroughly.

When contacting q222 about a data matter, please include your account username, the nature of your enquiry or request, and any relevant transaction reference numbers or dates. This will help q222's team locate your records and respond to your request as efficiently as possible.

q222 takes all privacy complaints seriously. If you are not satisfied with q222's response to your enquiry, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction. q222 will cooperate fully with any such regulatory enquiry.