aq990 Privacy Policy

📝Information You Provide Directly

When you register an account, complete your KYC verification, make a deposit or withdrawal, contact support, or otherwise interact with the Platform, you provide us with personal information. The categories of information collected directly from you include:

• Identity information: your full legal name, date of birth, and a copy of a government-issued photo identification document (National ID card or passport) provided during KYC.
• Contact information: your mobile phone number and email address, used for account verification, security notifications and, where you have opted in, promotional communications.
• Financial information: your bKash, Nagad, Rocket or Upay mobile wallet number, or the last four digits and expiry date of any Visa or Mastercard used for deposits and withdrawals. We do not store full card numbers on our servers.
• Account credentials: your chosen username and your hashed (encrypted) password. Passwords are never stored in plain text.
• Support correspondence: records of any communications you send to aq990 support, including the content of your messages and any attachments you provide, retained for audit and quality assurance purposes.

🔄Information Collected Automatically

When you access and use the Platform, our servers and analytics systems automatically collect certain technical and behavioural data. This includes:

• Device and connection data: your IP address, device type (mobile model or desktop OS), browser type and version, screen resolution, and mobile carrier where determinable.
• Session data: login timestamps, session duration, pages visited, game titles launched, betting amounts placed, game outcomes, and navigation paths through the Platform.
• Transaction logs: a complete record of all deposits, withdrawals, bonus credits, wagers and cashback transactions associated with your account, including timestamps and amounts in Bangladeshi Taka (৳).
• Approximate location data: derived from your IP address to verify jurisdictional eligibility and to detect potentially fraudulent logins from unexpected locations. We do not collect GPS-precise location data.

🍪Cookies and Tracking Technologies

aq990 uses cookies and similar local storage technologies on the Platform. Cookies are small text files stored on your device that allow the Platform to recognise your session, maintain your login state, remember your language and display preferences, and distinguish you from other users. All cookies used by aq990 are first-party cookies set by the aq990.bio domain itself — we do not use third-party advertising cookies or tracking pixels from social media networks or ad exchanges.

The types of cookies used by aq990 are: (1) Strictly necessary cookies, which are required for the Platform to function correctly and cannot be disabled — these include your session authentication token and security cookies; (2) Functional cookies, which remember your preferences such as language selection; and (3) Analytical cookies, which help aq990 understand aggregate usage patterns to improve Platform performance. No advertising or cross-site tracking cookies are used.

⚙️Purposes of Processing

aq990 processes your personal data for the following specific purposes. We process data only where we have a lawful basis to do so — either because it is necessary to perform our contract with you, because we have a legal obligation, or because we have a legitimate interest that does not override your rights:

• Account creation and management: to register your account, verify your identity, maintain your account in good standing, and provide you with access to all Platform features.
• Payment processing: to process your deposits and withdrawals via bKash, Nag ad, Rocket, Upay, Visa and Mastercard, and to maintain transaction records for your account history.
• KYC and age verification: to verify that you are at least 21 years of age and to comply with our anti-money laundering (AML) and know-your-customer (KYC) obligations, which require us to collect and retain identity documents.
• Customer support: to respond to your enquiries, resolve complaints, investigate disputed transactions, and provide technical assistance. Support communications are logged for audit purposes.
• Platform security and fraud prevention: to monitor account activity for signs of unauthorised access, collusion, bonus abuse, money laundering or other prohibited conduct, and to take appropriate action where such activity is detected.
• Responsible gaming monitoring: to identify patterns of play that may be consistent with problem gambling behaviour, and to proactively offer responsible gaming tools or intervention where appropriate. This monitoring is conducted in your interest and in accordance with our responsible gaming commitment.

🛡️Legal and Regulatory Compliance

aq990 is subject to legal obligations that require us to collect and retain certain categories of personal data regardless of your individual preferences. These obligations include: retaining identity verification documents and transaction records for AML compliance purposes; responding to lawful requests from regulatory authorities, law enforcement bodies or courts; and maintaining records necessary to resolve disputes or legal claims arising from your use of the Platform.

Where aq990 is required by law to disclose your personal data to a government authority or law enforcement body, we will comply with that legal obligation. Where legally permitted to do so, we will notify you of such a disclosure. aq990 will never voluntarily disclose your personal data to any government authority or third party beyond what is required by applicable law.

🤝Permitted Disclosure Categories

aq990 does not sell your personal data. We share your information only in the following limited circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment processors and mobile wallet operators: we share the minimum necessary transaction data with bKash, Nagad, Rocket, Upay and card networks (Visa, Mastercard) solely to process your deposit and withdrawal requests. These providers are bound by their own data protection obligations.
• Game content providers: game studios such as Evolution Gaming, Pragmatic Play, Spribe and Ezugi receive a session token that identifies your account for the purpose of delivering game content and calculating results. These providers do not receive your full identity data, contact information or financial details.
• Identity verification services: where aq990 uses a third-party KYC verification provider to assist in document checking, that provider receives the identity documents you submit. They are bound by strict confidentiality obligations and are not permitted to use your data for any purpose other than KYC verification.
• Legal and regulatory authorities: where required by applicable law, we disclose personal data to government bodies, regulators, law enforcement agencies or courts. Such disclosures are made only to the extent required by the specific legal obligation and are logged internally for accountability.

🚫What We Never Do

aq990 will never: sell your personal data to any third party for commercial gain; share your data with advertising networks, data brokers, social media platforms or marketing companies; transfer your data to any entity outside the scope of the purposes described in this Policy without your explicit consent; or use your data to build profiles for sale to insurers, employers, financial institutions or any other organisation.

If aq990 is ever involved in a merger, acquisition or sale of business assets, player data would be one of the transferred assets. In such an event, aq990 will notify affected players via a prominent notice on the Platform prior to any such transfer taking effect and will ensure that the acquiring entity agrees to honour this Policy or provides players with an equivalent level of privacy protection.

📅How Long We Keep Your Data

aq990 retains your personal data for as long as your account is active and for a period thereafter as required by our legal and regulatory obligations. The following retention periods apply: account registration data and KYC identity documents are retained for a minimum of five years from the date of account closure, in compliance with AML record-keeping requirements; financial transaction records (deposits, withdrawals, wagers) are retained for a minimum of five years from the date of each transaction; support correspondence is retained for three years from the date of the last communication in each support ticket; and session and behavioural data (logs) are retained for up to twelve months from the date of collection, after which they are aggregated and anonymised.

Where retention is no longer required by law or by our legitimate interests, aq990 will securely delete or anonymise your personal data. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

🗑️Account Closure and Data Deletion Requests

When you close your aq990 account, your profile will be deactivated and you will no longer be able to log in. However, aq990 is required by its legal and AML obligations to retain your identity documents and financial transaction records for the periods described above, even after account closure. This means that a deletion request cannot result in the complete erasure of all data associated with your account if retention is required by law.

Where data is not subject to a legal retention requirement — for example, your marketing preferences, language settings or support chat history beyond the three-year window — aq990 will delete this data promptly upon your account closure or upon receipt of a written deletion request. To submit a data deletion request, contact us at [email protected] with the subject line 'Data Deletion Request' and include your registered mobile number.

🔒Technical and Organisational Security

aq990 applies a layered security architecture to protect your personal data from unauthorised access, accidental loss, destruction or disclosure. The security measures implemented include: SSL/TLS encryption for all data transmitted between your device and aq990 servers; AES-256 encryption for sensitive data fields stored in our databases; bcrypt hashing for all stored passwords; two-factor authentication (2FA) available for player accounts and mandatory for all internal staff access; strict role-based access controls that limit which staff members can access which categories of player data; regular security audits and vulnerability assessments of the Platform infrastructure; and intrusion detection systems that monitor for anomalous access patterns in real time.

No data security system is impenetrable. While aq990 takes every reasonable precaution to protect your data, we cannot guarantee that our systems will never be breached. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, aq990 will notify affected players as soon as practicably possible via their registered email address or mobile number, and will take all reasonable steps to contain and remediate the breach.

💳Payment Data Security

aq990 does not store full payment card numbers on its servers. When you use a Visa or Mastercard for a deposit, the full card number is transmitted directly to the card network's payment gateway using tokenisation — only a masked reference (last four digits and expiry date) is retained by aq990 for transaction records. For mobile wallet transactions via bKash, Nagad, Rocket and Upay, aq990 stores only your wallet number for transaction matching purposes. Full wallet transaction details are maintained by the respective wallet operator under their own security and data protection frameworks.

🍪Types of Cookies We Use

aq990 uses the following categories of cookies on the Platform. All cookies are first-party cookies set by the aq990.bio domain:

• Strictly necessary cookies: required for the Platform to function. These include your session authentication token (which keeps you logged in), a CSRF security token (which protects against cross-site request forgery attacks), and a cookie consent record. These cannot be disabled.
• Functional cookies: store your preferences such as language selection (English or Bengali) and display settings. Disabling these cookies means the Platform will not remember your preferences between sessions and will revert to default settings each time you visit.
• Analytical cookies: collect aggregated, anonymised information about how players use the Platform — for example, which pages are visited most often, which games are launched most frequently, and how long players typically spend per session. This data is used to improve Platform performance and user experience. Individual players are not identified in analytical data.
• Security cookies: used by the Platform's fraud detection and responsible gaming systems to flag unusual session patterns. These are necessary for player protection and cannot be disabled without compromising account security.

⚙️Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to view, delete and block cookies from specific websites. Instructions for managing cookies in the most commonly used mobile browsers are available in each browser's help documentation. Please note that blocking strictly necessary cookies will prevent the Platform from functioning correctly and you will be unable to log in to your account. Blocking functional cookies will cause the Platform to reset your preferences on each visit.

🔞21+ Age Policy

The aq990 Platform is strictly for adults aged 21 and above. aq990 does not knowingly collect personal data from any individual who is under the age of 21. Our registration process includes an age declaration step and our KYC verification process requires government-issued photo identification that confirms date of birth. Where aq990 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will immediately suspend the relevant account, void all associated balances and transactions, and securely delete the personal data collected from that individual as quickly as technically possible.

If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered an account on the aq990 Platform, please contact us immediately at [email protected] with the subject line 'Underage Account Report'. We will investigate and close the account promptly, and will not retain any personal data relating to that individual beyond the minimum required by our legal obligations.

🔗Third-Party Game Providers and Payment Partners

The aq990 Platform integrates with third-party game studios (including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt and Microgaming) and payment operators (including bKash, Nagad, Rocket, Upay, Visa and Mastercard) to deliver gaming content and process financial transactions. These providers operate under their own privacy policies and data protection frameworks. aq990 is not responsible for the privacy practices of these third-party providers, and we encourage you to review their privacy policies if you have concerns about how they handle your data.

The aq990 Platform does not contain links to external third-party websites for advertising or affiliate purposes. Any service accessible through the Platform that is operated by a third party is subject to that third party's own privacy policy. aq990 assumes no responsibility for the data practices of third-party services accessed through the Platform and recommends that players exercise caution when providing personal information to any third-party service.

📢How We Notify You of Updates

aq990 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or Platform features. When we make material changes to this Policy — for example, changes to the categories of data we collect, changes to how we share your data, or changes to your rights — we will notify registered players by displaying a prominent notice on the Platform and, where possible, by sending a notification to your registered email address or mobile number before the updated Policy takes effect.

The effective date of the current version of this Policy is shown at the top of the page. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should stop using the Platform and contact support to request account closure. The most current version of this Policy is always available on this page at aq990.bio/privacy-policy.

📧Privacy Enquiries and Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, have a concern about how aq990 has handled your personal data, or wish to report a suspected data breach affecting your account, please contact aq990's support team at [email protected]. Please include 'Privacy Enquiry' or 'Data Request' in the subject line of your email, along with your registered mobile number, so that we can identify your account and respond efficiently.

aq990 aims to respond to all privacy-related enquiries within 2 business days and to fulfil all data subject rights requests within 10 business days. Where a request is complex or where we receive a high volume of requests simultaneously, we may extend the response period by a further 10 business days, in which case we will notify you of the extension and the reason for it. There is no fee for submitting a privacy enquiry or data request.