aq888 Privacy Policy

This Privacy Policy ("Policy") is published by aq888 ("aq888", "we", "us", "our"), the operator of the online sports betting and casino platform accessible at https://aq888.io and all associated subdomains, mobile interfaces, and related services (collectively, the "Platform").

This Policy governs the collection, use, storage, sharing, and protection of personal data relating to individuals who register accounts on, visit, or otherwise interact with the Platform ("Players", "Users", "you"). It applies to all personal data processed by aq888 in connection with the Platform, regardless of the device or means by which you access it.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are published on the aq888 Platform and are incorporated herein by reference. In the event of any conflict between this Policy and the Terms & Conditions with respect to data handling, this Policy shall govern.

aq888 is committed to treating personal data with the highest standards of care and in compliance with applicable data protection principles. We operate with full transparency about what data we collect, why we collect it, and how long we keep it.

aq888 collects personal data through several channels including account registration, Platform usage, payment transactions, customer support interactions, and automated technical means. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address in Bangladesh, including district, city, and postcode.
• Mobile phone number registered in Bangladesh.
• Email address used for account communications.
• Username and hashed (never plain-text) account password.

2.2 KYC & Verification Documents

• National Identity Card (NID) number and a scanned or photographed copy.
• Passport or driving licence, where provided as an alternative identity document.
• Proof of address documents dated within 90 days of submission (e.g., utility bill, bank statement).
• Selfie photograph for liveness verification, where required by the KYC process.

2.3 Financial & Transaction Data

• Mobile wallet account numbers associated with bKash, Nagad, Rocket, or Upay transactions.
• Transaction reference numbers, deposit amounts, withdrawal amounts, and timestamps.
• Account balance history and betting/gaming transaction logs.
• Source of funds declarations and supporting documentation where requested.

2.4 Usage & Technical Data

• IP address, device type, operating system, and browser type at the time of each session.
• Pages visited, features used, games played, bets placed, and session duration logs.
• Geolocation data at country/region level, derived from IP address.
• Referring URL and search terms that directed you to the aq888 Platform.
• Cookie identifiers and session tokens (see Section 6 for full cookie details).

2.5 Customer Support Data

• Content of messages, live chat transcripts, and email correspondence between you and the aq888 support team.
• Complaint details, dispute records, and the outcomes of any internal review processes.
• Survey responses and feedback submitted voluntarily through the Platform.

2.6 Data We Do Not Collect

aq888 does not knowingly collect biometric data beyond the liveness check described above, social media profile data, or sensitive special-category data such as racial or ethnic origin, religious beliefs, or health information, except where directly relevant to a responsible gaming assessment requested by the player themselves.

aq888 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your aq888 player account, including verifying your identity and age at registration and during the account lifecycle.
• Service Delivery: To process your deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to settle sports bets and casino game results; to apply bonuses and promotional credits to your account.
• Fraud Prevention & AML Compliance: To monitor transactions and account activity for signs of fraud, money laundering, or other prohibited conduct as described in the Terms & Conditions. aq888 is obligated to maintain records of financial transactions for compliance purposes.
• Responsible Gaming: To identify patterns of play that may indicate problem gambling behaviour and to apply responsible gaming tools (deposit limits, cool-off periods, self-exclusion) that you have requested or that aq888's safeguarding team deems necessary in the player's interest.
• Legal Compliance: To comply with any legal obligation, regulatory requirement, or binding order from a competent authority that requires aq888 to process or disclose your personal data.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, optimise game performance, and improve the overall aq888 player experience. Analytical data used for this purpose is anonymised wherever practicable.
• Communications: To send you transactional communications related to your account (deposit confirmations, withdrawal notifications, security alerts, KYC requests). Where you have opted in, to send you promotional communications about bonuses, tournaments, and platform news.
• Customer Support: To respond to your queries, resolve disputes, and investigate complaints submitted through the aq888 support channels.

aq888 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, except in the context of automated fraud detection, which is subject to human review upon request.

aq888 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is required to fulfil our obligations under the Terms & Conditions, including identity verification, transaction processing, and account administration.
• Legal Obligation: Processing that is required to comply with applicable anti-money laundering regulations, responsible gaming obligations, and any lawful order from a competent authority.
• Legitimate Interests: Processing carried out for the purpose of fraud prevention, platform security, and service improvement, provided that such processing does not override your fundamental privacy rights. aq888 conducts a legitimate interests assessment before relying on this basis.
• Consent: Processing of personal data for optional promotional communications, where you have actively opted in to receive such communications. You may withdraw your consent at any time by updating your communication preferences in the account settings section or by contacting customer support.

aq888 does not sell, rent, or trade personal data to any third party. We may share your data in the following limited circumstances:

• Payment Processors: Transaction data is shared with bKash, Nagad, Rocket, and Upay solely to process your deposits and withdrawals. Each payment partner operates under its own privacy policy and is independently responsible for data handled within their network.
• KYC & Identity Verification Providers: Identity documents and verification data may be shared with certified third-party KYC providers engaged by aq888 to perform identity checks. These providers are bound by data processing agreements and may only use your data for the specified verification purpose.
• Game Content Providers: Certain technical data (session tokens, bet amounts, game outcomes) is exchanged with certified game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — to enable game play and resolve disputes. No personally identifiable information beyond what is technically necessary is transmitted to game providers.
• Fraud & Security Services: aq888 may share flagged account activity data with fraud prevention and cybersecurity service providers to protect the integrity of the Platform and its players.
• Legal Authorities: aq888 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by a binding legal obligation, subpoena, or court order. aq888 will, where legally permitted, notify the affected player of such a disclosure request prior to complying.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of aq888's business, your personal data may be transferred to the successor entity, subject to the same protections described in this Policy. Players will be notified of any material change in data controller at least 30 days in advance.

All third-party service providers engaged by aq888 are subject to written data processing agreements that restrict their use of your data to the specific purpose for which it was shared and require them to apply security standards no less protective than those applied by aq888 itself.

aq888 uses cookies and similar technologies (web beacons, local storage tokens) to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your logged-in session, remember your language preference, and ensure that security tokens are correctly applied. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your account preferences such as odds display format, notification settings, and game history filters. They are set only after account login and persist for the duration of your session or for a defined period as specified in the cookie settings.
• Analytical Cookies: aq888 uses privacy-preserving analytical tools to understand aggregate user behaviour on the Platform, including page load performance, navigation patterns, and feature adoption rates. Analytical data is anonymised and aggregated — it cannot be used to identify individual users. No third-party advertising analytics platforms are used.

aq888 does not use advertising cookies, retargeting cookies, or any cookie that tracks your behaviour across third-party websites. You may manage your cookie preferences at any time through the Privacy Settings section of your account. Strictly necessary cookies are exempt from the opt-out mechanism as they are required for Platform operation.

aq888 retains personal data only for as long as is necessary for the purposes for which it was collected or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with aq888 and for a period of five years following account closure, to meet anti-money laundering record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of five years following the completion of the verification process or account closure, whichever is later, in accordance with financial compliance requirements.
• Transaction Records: Retained for a minimum of five years from the date of each transaction for accounting and AML compliance purposes.
• Customer Support Records: Retained for three years following the resolution of the relevant query or complaint, after which they are securely deleted unless required for ongoing legal proceedings.
• Technical & Usage Data: Retained in identifiable form for 13 months, after which it is anonymised and may be retained indefinitely in aggregate statistical form.
• Marketing Consent Records: Retained for the duration of your consent plus two years following withdrawal of consent, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods.

aq888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS 256-bit encryption for all data in transit between user devices and aq888 servers.
• AES-256 encryption for sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that only authorised aq888 personnel with a genuine operational need can access player data, with all access logged and monitored.
• Regular third-party penetration testing and security audits of the Platform infrastructure.
• Two-factor authentication (2FA) available to all players and mandatory for aq888 staff accessing internal systems.
• Automated intrusion detection systems that monitor for abnormal access patterns and trigger immediate incident response procedures.

In the event of a personal data breach that poses a risk to your rights and freedoms, aq888 will notify affected players without undue delay once the breach has been confirmed and its scope assessed. aq888's incident response team is on call 24/7, consistent with aq888's Bangladesh Standard Time (BST, UTC+6) operations.

As an aq888 player, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting the aq888 privacy team at support@aq888.io. All rights requests will be acknowledged within 5 business days and resolved within 30 calendar days.

The aq888 Platform is strictly intended for individuals aged 21 years and above. aq888 does not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in the account registration process, and aq888 may request supporting identity documents at any stage of the account lifecycle to confirm compliance with the 21+ policy.

If aq888 becomes aware that personal data has been collected from an individual under the age of 21, all such data will be immediately deleted and the associated account will be suspended pending investigation. Any funds held in such an account will be subject to the procedures outlined in the Terms & Conditions.

Parents or guardians who believe that a minor may have registered an aq888 account should contact the support team immediately at support@aq888.io so that the matter can be investigated and resolved without delay.

The aq888 Platform does not include links to third-party websites for commercial or advertising purposes. Where references to third-party payment services (bKash, Nagad, Rocket, Upay) or game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe) appear on the Platform, they relate to integrated service partnerships rather than independent external websites.

aq888 accepts no responsibility for the privacy practices of any third-party service accessed independently by a player outside the aq888 Platform. Players are encouraged to review the privacy policies of any external service they use in conjunction with their aq888 account, particularly those of their chosen mobile wallet provider.

aq888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, aq888 will notify registered players by email and by displaying a prominent notice on the Platform for a period of no less than 14 days before the updated Policy takes effect.

The effective date at the top of this Policy will be updated each time a new version is published. Your continued use of the aq888 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any updated version of this Policy, you should discontinue use of the Platform and contact our support team to discuss your account options.

Where changes are minor, editorial, or non-material in nature (such as typographical corrections or clarifications that do not alter the substance of how your data is handled), aq888 may update the Policy without advance notice, though the effective date will still be updated to reflect the revision.

aq888 recommends that players review this Privacy Policy periodically to stay informed about how their personal data is being handled. All previous versions of this Policy are retained in our internal records and may be provided upon request.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way aq888 handles your personal data, please contact our privacy team through any of the following channels:

• Email: support@aq888.io — please include "Privacy Request" in the subject line along with your registered username or account reference number.
• Live Chat: Available 24/7 through the aq888 account dashboard. Our support agents operate on Bangladesh Standard Time (BST, UTC+6) and are trained to handle privacy inquiries.
• Phone: +880 1700 000 000 — available during extended support hours. Please note that sensitive data requests cannot be processed by phone alone and will require written follow-up for security purposes.

aq888 is committed to resolving all privacy-related queries promptly and transparently. We aim to acknowledge all written privacy requests within 5 business days and to provide a full response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it.

If you are not satisfied with aq888's response to a privacy request or complaint, you may escalate the matter by submitting a formal complaint through our internal complaints procedure, details of which are available from the customer support team upon request.