qqff Privacy Policy — Your Data, Your Rights

Introduction & Scope

This Privacy Policy ("Policy") describes how qqff ("we", "us", "our") collects, processes, stores, and shares personal data belonging to players ("you", "your") who access or use the qqff online casino and sports betting platform available at qqff.io ("Platform").

This Policy applies to all data processing activities carried out by qqff in connection with your use of the Platform, regardless of the device or method by which you access it. It covers data collected during registration, account management, gaming and betting activity, financial transactions, customer support interactions, and general browsing of the qqff website.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Together, these three documents form the complete contractual and regulatory framework governing your relationship with qqff. Where any inconsistency exists between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail with respect to the contractual relationship, while this Policy shall prevail with respect to matters of data protection.

This Policy was last reviewed and updated in January 2026. We encourage you to check this page periodically for any changes.

Data Controller Information

qqff acts as the data controller in respect of all personal data collected through the Platform. As data controller, qqff determines the purposes and means by which your personal data is processed and bears primary responsibility for ensuring that processing activities are conducted lawfully, fairly, and transparently.

All data protection enquiries, subject access requests, and complaints relating to data processing by qqff should be directed to our support team using the contact details provided in Section 15 of this Policy. qqff is committed to responding to all data-related enquiries promptly and in accordance with applicable data protection principles.

Data We Collect

qqff collects the following categories of personal data about you during your use of the Platform:

• Identity Data: Your full legal name, date of birth, nationality, and government-issued identification details (such as National ID card number or passport number), collected during the account registration and Know Your Customer (KYC) verification process.
• Contact Data: Your registered Bangladesh mobile number, email address (if provided), and residential address. Your mobile number serves as your primary account identifier and login credential.
• Financial Data: References to the payment methods you use to deposit and withdraw funds, including bKash wallet numbers, Nagad wallet numbers, Rocket account references, bank account references (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and the last four digits of any Visa or Mastercard used. Full payment credentials are not stored on qqff's systems.
• Technical Data: Your IP address, device type and model, operating system and version, browser type and version, time zone setting, and connection speed. This data is collected automatically when you access the Platform.
• Usage Data: Records of your gaming and betting activity, including games played, wager amounts in BDT ৳, session durations, bonus claims, and login timestamps. This data is retained for dispute resolution, responsible gaming monitoring, and service improvement purposes.
• Communications Data: Records of any correspondence between you and qqff, including live chat transcripts, email exchanges, and formal complaint records.
• Marketing & Preference Data: Your opt-in or opt-out preferences in relation to promotional communications from qqff, and any language or content preferences you set within your account profile.

qqff does not intentionally collect special category data (such as health data, biometric data, or data revealing racial or ethnic origin) unless specifically required to do so for responsible gaming compliance purposes, such as processing a self-exclusion request made on medical grounds.

How We Collect Your Data

qqff collects personal data through the following means:

• Direct Provision: Data you provide actively when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or updating your account profile settings.
• Automated Collection: Technical and usage data collected automatically by our platform systems as you browse, log in, and interact with games and betting markets. This includes data collected via server logs, session management systems, and first-party cookies.
• Payment Providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners confirming that a deposit or withdrawal instruction has been executed. qqff does not receive full payment credentials via this route.
• Third-Party Verification Services: Identity verification and fraud screening data received from third-party KYC and AML (Anti-Money Laundering) compliance service providers engaged by qqff to assist with regulatory obligations.
• Game Provider Data: Aggregated game result and wagering data received from our licensed game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — in connection with the settlement of game rounds and the resolution of disputes.

How We Use Your Data

qqff uses the personal data it collects for the following purposes:

• Account Creation and Management: To register your account, verify your identity, maintain your account profile, and provide you with access to all Platform services.
• Transaction Processing: To process deposits and withdrawals in Bangladeshi Taka (BDT ৳) via bKash, Nagad, Rocket, Upay, and banking partners, and to maintain accurate records of your account balance and transaction history.
• Age and Identity Verification: To confirm that you meet qqff's 21+ age requirement and to verify your identity in accordance with applicable KYC and AML obligations before approving withdrawal requests or crediting bonus funds.
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other conduct prohibited under our Terms & Conditions. This includes automated screening of transactions and account activity patterns.
• Responsible Gaming: To monitor your gaming patterns against responsible gaming indicators, deliver self-imposed limit tools (deposit limits, loss limits, cooling-off periods, self-exclusion), and intervene proactively where our systems detect signs of potential problem gambling behaviour.
• Customer Support: To respond to your queries, resolve disputes, investigate complaints, and maintain records of all support interactions for quality assurance purposes.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, seasonal promotions (e.g., Eid, Pohela Boishakh, BPL season offers), and platform news via SMS or email to your registered contact details. You may withdraw this consent at any time via your account settings or by contacting support.
• Platform Improvement: To analyse aggregate usage patterns, identify service quality issues, and develop improvements to the platform's features, game catalogue, and user interface — particularly for mobile users across Dhaka, Chittagong, Sylhet, Khulna, and other regions of Bangladesh.
• Legal and Regulatory Compliance: To meet obligations imposed by applicable law, including record-keeping requirements, responses to lawful requests from competent authorities, and cooperation with fraud investigations.

Legal Bases for Processing

qqff processes personal data only where a valid legal basis exists. The legal bases applicable to qqff's processing activities are as follows:

• Contractual Necessity: Processing required to fulfil qqff's obligations to you under the Terms & Conditions — including account creation, transaction processing, game play facilitation, and withdrawal management — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable legal obligations — including KYC identity verification, AML transaction monitoring, age verification, and responding to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for purposes that reflect qqff's legitimate operational interests — including fraud prevention, platform security, customer support quality assurance, and service improvement analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out for direct marketing communications and the use of non-essential cookies is carried out only where you have given explicit, freely-given, informed consent. You have the right to withdraw consent at any time without detriment.

Sharing Your Data

qqff may share your personal data with the following categories of third parties:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process your deposit and withdrawal transactions. These providers process transaction data under their own privacy policies and security certifications.
• Identity Verification and KYC Partners: Third-party providers engaged by qqff to conduct identity document verification, age verification, and sanctions screening as part of the account onboarding and withdrawal approval process.
• Fraud Prevention and AML Services: Specialist third-party services used to screen transactions and account activity for indicators of fraud, money laundering, or other financial crime. These services process data under strict contractual data processing agreements with qqff.
• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios — to the extent necessary to settle game rounds, resolve disputes, and generate certified RTP and fair-play audit data.
• IT and Infrastructure Providers: Cloud hosting, data centre, and cybersecurity service providers engaged by qqff to operate and maintain the Platform infrastructure. All such providers are contractually bound to process data only on qqff's instructions.
• Law Enforcement and Regulatory Authorities: Where required by applicable law, court order, or lawful regulatory direction, qqff will disclose personal data to the relevant authority. qqff will notify you of any such disclosure where legally permitted to do so.
• Professional Advisers: Lawyers, accountants, and auditors engaged by qqff on a professional advisory basis, subject to professional confidentiality obligations.

All third-party data processors engaged by qqff are required to process data strictly in accordance with qqff's written instructions and to implement appropriate technical and organisational security measures. qqff does not permit third-party processors to use your data for their own independent purposes.

International Transfers

Some of qqff's service providers — including cloud infrastructure providers and game content studios — operate servers and process data in locations outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that which applies in Bangladesh, qqff ensures that appropriate safeguards are in place to protect the transferred data. These safeguards include contractual clauses that impose data protection obligations on the recipient, equivalent to those applicable to qqff as data controller.

By using the Platform and providing your personal data, you acknowledge that your data may be transferred, stored, and processed in locations outside Bangladesh for the operational purposes described in this Policy, subject always to the safeguards described above.

Data Retention

qqff retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following indicative retention periods apply:

• Account Data: Retained for the duration of your active account, plus a period of five (5) years following account closure, to meet legal record-keeping obligations and enable the resolution of any post-closure disputes or regulatory enquiries.
• Transaction Records: Financial transaction records, including deposit and withdrawal histories in BDT ৳, are retained for a minimum of five (5) years from the date of the transaction in accordance with applicable AML record-keeping requirements.
• KYC Verification Documents: Identity documents submitted during the KYC verification process are retained for the duration of the account relationship and for a period of five (5) years thereafter.
• Customer Support Records: Support interaction logs, including chat transcripts and email correspondence, are retained for three (3) years from the date of the interaction, unless they relate to an ongoing dispute or legal matter, in which case they are retained until that matter is resolved.
• Marketing Preference Records: Consent records for marketing communications are retained for the duration of the consent period and for three (3) years thereafter as evidence of consent.
• Technical and Usage Data: Anonymised or aggregated technical and usage data used for analytics and platform improvement may be retained indefinitely, as it no longer constitutes personal data once anonymisation is complete.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with qqff's internal data lifecycle management procedures.

Cookies & Tracking Technologies

qqff uses first-party cookies and similar technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly. These include session management cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and cookies that store your in-session preferences. These cookies cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform — which pages are visited most frequently, where users encounter errors, and how long sessions last on average. This information is used solely to improve the Platform experience. Analytics data is not linked to individual player identities.
• Preference Cookies: Used to remember your language setting, device type, and other non-sensitive preferences across sessions, so you do not need to reconfigure the Platform on each visit.

qqff does not use third-party advertising cookies, cross-site tracking pixels, social media tracking scripts, or behavioural advertising technologies. No cookie data collected by qqff is sold to or shared with advertising networks.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use core Platform features, including logging in and processing transactions. For non-essential cookies, you may opt out via your browser without losing access to Platform functionality.

Your Data Subject Rights

As a data subject, you hold the following rights in relation to the personal data qqff holds about you. These rights may be exercised at any time by contacting our support team at [email protected]. Requests are processed within a reasonable time frame and at no cost to you.

• Right of Access: You have the right to request a copy of all personal data qqff holds about you, together with information about how that data is being processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request correction of any personal data qqff holds about you that is inaccurate or incomplete. Where a correction is made to data that has been shared with a third party, qqff will notify that party of the correction where practicable.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where processing is unlawful. This right is subject to overriding legal obligations that require qqff to retain certain data (such as AML transaction records).
• Right to Restriction: You have the right to request that qqff restricts its processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format for the purpose of transferring it to another data controller.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, where you believe your fundamental rights and freedoms override those interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without detriment to your continued use of the Platform for non-consent-based services. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

qqff will respond to all data subject rights requests as promptly as possible. Where a request cannot be fulfilled — for example, because it conflicts with a legal obligation — qqff will explain the reason for this in its response.

Children & Minors

qqff operates a strict 21+ age policy. The Platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21. Age verification is a mandatory step in the account registration process, and qqff may request supporting documentation to confirm that a player meets the minimum age requirement at any time.

If qqff becomes aware that personal data has been collected from an individual who is under the age of 21, that account will be immediately suspended, all data relating to the minor will be deleted from qqff's systems (subject to any overriding legal obligations), and any funds deposited will be returned to the payment source used.

If you have reason to believe that a person under the age of 21 has registered on or is using the qqff platform, please contact our support team at [email protected] immediately so that the matter can be investigated and addressed promptly.

Security Measures

qqff implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and qqff's servers.
• Encryption of sensitive data at rest within qqff's database infrastructure, including identity verification documents and financial data references.
• Role-based access controls ensuring that qqff staff can access personal data only to the extent required by their specific job function.
• Multi-factor authentication requirements for qqff staff accessing internal systems that hold personal data.
• Regular penetration testing and vulnerability scanning of the Platform and its supporting infrastructure.
• Automated monitoring and alerting systems that detect and respond to suspicious access patterns or potential security incidents in real time.
• Periodic staff training on data protection obligations, secure data handling procedures, and phishing awareness.

While qqff takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying qqff immediately if you suspect that your account has been accessed without authorisation. Contact our support team at [email protected] if you have any security concerns.

Changes to This Policy

qqff reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. When material changes are made, we will notify registered players via the contact details held on their account (SMS or email) and update the "Last Updated" date at the top of this page.

Your continued use of the Platform following notification of any changes constitutes your acknowledgement of the updated Policy. If you do not agree with any change to this Policy, you should cease using the Platform and contact our support team to request account closure and data handling in accordance with your rights under Section 11.

We encourage you to review this Policy periodically to stay informed about how qqff protects your personal data. The current version of this Policy is always available at qqff.io/privacy-policy.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a concern about how qqff has handled your personal data, please contact our support team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: qqff aims to respond to all data protection enquiries within 5 business days (Bangladesh Standard Time, UTC+6).
• Subject Line: Please include "Privacy Policy Enquiry" or "Data Subject Request" in the subject line of your email to ensure prompt routing to the appropriate team.

qqff is committed to resolving all data protection concerns fairly and transparently. If you are not satisfied with qqff's response to your complaint, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.

All correspondence relating to data protection matters is handled with strict confidentiality and in accordance with qqff's internal data protection procedures.