aq222 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction and Scope

Clause 1.1 — Who This Policy Covers

This Privacy Policy applies to all individuals who interact with the aq222 platform at aq222.io, including registered account holders, prospective players who visit the website without registering, and any individual who contacts the aq222 customer support team. This Policy governs the collection, use, storage, sharing, and protection of personal data by aq222 in connection with the operation of its online betting and casino services.

Clause 1.2 — Relationship to Terms & Conditions

This Privacy Policy is incorporated by reference into the aq222 Terms & Conditions. By creating an account or using the aq222 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. Where there is any conflict between this Policy and the Terms & Conditions in relation to data processing matters, this Privacy Policy shall prevail.

Clause 1.3 — Scope of Application

This Policy applies to personal data processed in connection with the aq222 web platform, any mobile-optimised interface accessible at aq222.io, all customer support communications conducted via email, live chat, or any other channel, and all payment processing activities associated with player accounts. It does not apply to third-party websites or services that may be linked to or from the aq222 platform — those services are governed by their own privacy policies.

2. Data Controller Information

Clause 2.1 — Identity of the Data Controller

For the purposes of this Privacy Policy, aq222 acts as the data controller in respect of all personal data collected from players accessing the platform at aq222.io. As data controller, aq222 determines the purposes for which personal data is collected and the manner in which it is processed. aq222 operates as an international online betting and casino platform serving players including those based in Bangladesh.

Clause 2.2 — Contact Details

All data-related enquiries, subject access requests, correction requests, deletion requests, and complaints regarding aq222's data processing practices should be directed to the aq222 Data Protection contact at: [email protected]. Our support team is available 24/7 and will route your enquiry to the appropriate compliance contact where required.

3. What Personal Data We Collect

Clause 3.1 — Categories of Personal Data

aq222 collects the following categories of personal data from players and platform visitors:

Clause 3.2 — Special Category Data

aq222 does not intentionally collect special category personal data (as defined under international data protection frameworks) such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is incidentally included in documents you submit for KYC purposes — for example, a photograph on an NID — it is processed only for the purpose of identity verification and is not retained, analysed, or used for any other purpose.

4. How We Collect Your Data

Clause 4.1 — Direct Collection

The majority of personal data aq222 holds about you is provided directly by you in the following circumstances: completing the account registration form on the aq222 platform; submitting KYC verification documents when prompted by the compliance team; making deposit or withdrawal requests via bKash, Nagad, Rocket, Upay, or bank transfer; communicating with the aq222 customer support team via live chat or email; and updating your account profile or preferences.

Clause 4.2 — Automatic Collection

When you access and use the aq222 platform, certain technical and usage data is collected automatically through standard web technologies including server logs, session tracking, and cookies. This automatic collection captures your IP address, device identifiers, browser characteristics, and patterns of interaction with the platform. This data is used primarily for platform security, fraud detection, and aggregate performance analysis.

Clause 4.3 — Third-Party Sources

In limited circumstances, aq222 may receive personal data about you from third-party sources, including identity verification service providers used to cross-check KYC documents, payment processors who confirm the ownership of a mobile wallet or bank account in your name, and fraud prevention databases used to screen for high-risk account activity. Data received from third-party sources is treated with the same level of protection as data you provide directly.

5. Legal Basis for Processing

Clause 5.1 — Grounds for Processing

aq222 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, bet settlement, payment processing, and withdrawal handling.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, KYC obligations, and fraud prevention duties.
• Legitimate interests: Processing necessary for aq222's legitimate business interests, including fraud detection, platform security, responsible gaming compliance, and service improvement analytics — provided these interests are not overridden by your own data protection rights.
• Consent: Where we rely on your consent for specific processing activities — such as sending you promotional communications — you may withdraw that consent at any time by contacting our support team or updating your account communication preferences.

6. How We Use Your Data

Clause 6.1 — Primary Purposes

aq222 uses the personal data it collects for the following primary operational purposes:

• Creating and managing your registered aq222 account, including maintaining accurate account balances and transaction records denominated in BDT.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank, and reconciling payment records.
• Conducting identity verification and age verification to confirm that you are at least 21 years of age and legally entitled to use the platform.
• Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeovers, bonus abuse, and other prohibited conduct.
• Complying with applicable anti-money laundering, counter-terrorism financing, and know-your-customer regulatory obligations.
• Providing customer support and resolving complaints or disputes raised through the aq222 support team.
• Administering responsible gaming tools including deposit limits, session reminders, cooling-off periods, and self-exclusion requests.
• Sending service-related communications including transaction confirmations, security alerts, KYC requests, and account notices.

Clause 6.2 — Secondary Purposes

With your consent where required, aq222 may also use your data for the following secondary purposes: sending promotional communications about bonuses, seasonal offers (such as BPL cricket promotions or Eid special campaigns), and new game launches; personalising your platform experience based on your game preferences and usage history; and conducting aggregate, anonymised analysis of platform usage to improve service quality and user experience. You may opt out of promotional communications at any time by contacting our support team.

7. Data Sharing and Third Parties

Clause 7.1 — Categories of Third-Party Recipients

aq222 does not sell, rent, or trade your personal data. We share your data only with third parties where it is necessary to deliver our services or comply with legal obligations. The following categories of third parties may receive your personal data:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa/Mastercard acquiring networks, Dutch-Bangla Bank, and City Bank — to process your deposits and withdrawals. These providers receive only the minimum data required to execute the transaction.
• Identity verification providers: Third-party KYC and document verification services used to validate the identity documents you submit as part of the account verification process.
• Fraud prevention services: Specialist fraud detection platforms that screen account activity against known patterns of financial crime or problem gambling behaviour.
• Platform infrastructure providers: Cloud hosting, content delivery network (CDN), and database service providers that store and process platform data on aq222's behalf under strict data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or regulatory bodies where aq222 is legally required or compelled by court order to disclose player data.

Clause 7.2 — Third-Party Data Processing Agreements

All third-party service providers who receive personal data from aq222 are required to enter into a data processing agreement that obliges them to process that data solely for the purposes specified by aq222, to implement appropriate technical and organisational security measures, and to not further disclose the data to any other party without aq222's prior written authorisation.

8. Cookies and Tracking Technologies

Clause 8.1 — Types of Cookies Used

aq222 uses the following categories of cookies and similar browser-based storage technologies on the platform:

• Strictly necessary cookies: Essential to the operation of the platform. These enable core functions such as user authentication, session management, and secure payment page loading. These cookies cannot be disabled without preventing core platform functionality from operating.
• Performance and analytics cookies: Used to collect aggregate, anonymised data about how players navigate and use the aq222 platform. This information helps us identify pages with technical issues, understand which game categories are most popular, and improve overall platform performance. No individually identifiable data is stored in these cookies.
• Functionality cookies: Remember your platform preferences, such as your preferred language setting (English), your last-used payment method, and your responsible gaming limit settings, so you do not need to re-enter them on each visit.

Clause 8.2 — No Third-Party Advertising Cookies

aq222 does not deploy third-party advertising cookies, retargeting pixels, or behavioural profiling technologies from advertising networks on its platform. Your browsing behaviour on the aq222 platform is not shared with any external advertising platform or social media network for targeting purposes.

Clause 8.3 — Managing Cookies

You can manage, restrict, or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair or prevent your ability to log in and use core platform features. Disabling performance or functionality cookies will not affect your ability to place bets or access your account, but may result in certain preferences not being saved between sessions.

9. Data Retention Periods

Clause 9.1 — Retention Schedule

aq222 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal obligations, or to resolve disputes. The following retention schedule applies to the primary categories of personal data we hold:

Clause 9.2 — Deletion and Anonymisation

Upon expiry of the applicable retention period, personal data is either permanently deleted from aq222's systems or anonymised in a manner that renders it impossible to re-associate with any individual. Anonymised data may be retained indefinitely for aggregate statistical and business analysis purposes. aq222 conducts periodic data audits to ensure that data retention schedules are being applied correctly across all data categories.

10. Data Security Measures

Clause 10.1 — Technical Safeguards

aq222 implements a comprehensive set of technical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include: 256-bit SSL/TLS encryption for all data in transit between your device and our servers; encryption at rest for sensitive data fields including password hashes, payment method identifiers, and identity document references; multi-factor authentication requirements for all internal staff accounts that have access to player data; automated intrusion detection systems that monitor for unusual access patterns in real time; and regular penetration testing and security audits conducted by independent third-party security specialists.

Clause 10.2 — Organisational Safeguards

Access to personal data within aq222 is restricted on a strict need-to-know basis. Only staff members whose roles require access to specific categories of player data are granted that access, and all such access is logged and subject to periodic review. All staff who handle personal data receive regular data protection training. aq222 maintains a documented data breach response plan that sets out the steps to be taken in the event of a security incident affecting player data.

Clause 10.3 — Data Breach Notification

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, aq222 will notify affected individuals as promptly as practically possible, providing details of the nature of the breach, the categories of data affected, the likely consequences of the breach, and the measures aq222 is taking to address it. Notification will be issued via the email address registered to the affected account.

11. Your Data Rights

Clause 11.1 — Rights Available to You

As a data subject whose personal data is processed by aq222, you hold the following rights in respect of your personal data. You may exercise any of these rights at any time by submitting a written request to [email protected]:

• Right of Access: You have the right to request a copy of all personal data that aq222 holds about you, along with information about how it is being used. aq222 will provide this information within 30 days of receiving a valid request.
• Right to Rectification: If any personal data aq222 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: In certain circumstances — including where data is no longer necessary for the purpose for which it was collected, or where you withdraw consent — you have the right to request deletion of your personal data. This right is subject to any overriding legal obligations that require aq222 to retain the data.
• Right to Restriction of Processing: You may request that aq222 restricts its processing of your personal data in specific circumstances, such as while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to aq222's processing of your personal data where that processing is based on aq222's legitimate interests, including the right to object to direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

Clause 11.2 — Response Timeframes

aq222 will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is particularly complex or where a large volume of requests has been received, this period may be extended by a further 60 days, in which case aq222 will notify you of the extension and the reason for it within the initial 30-day period. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive.

12. Children and Minors

Clause 12.1 — Strict Age Restriction

The aq222 platform is strictly intended for adults aged 21 years and above. aq222 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be permanently closed. If you believe a minor has created an account on the aq222 platform, please notify us immediately at [email protected].

13. International Data Transfers

Clause 13.1 — Cross-Border Processing

As an international betting platform serving players in Bangladesh, aq222 may process and store personal data on servers located outside of Bangladesh. Where personal data is transferred to third countries — including for the purpose of storing data with cloud infrastructure providers — aq222 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual data protection clauses with all infrastructure and service providers who handle data internationally.

Clause 13.2 — Player Awareness

By registering an account with aq222 and providing your personal data, you acknowledge that your data may be transferred to, stored in, or processed in countries outside of Bangladesh. aq222 takes its responsibility to protect cross-border data transfers seriously and maintains contractual and technical safeguards to ensure your data remains protected regardless of where it is processed.

14. Changes to This Policy

Clause 14.1 — Policy Updates

aq222 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, to comply with new or amended legal obligations, or to respond to developments in data protection best practice. Where changes are material — meaning they meaningfully affect how we collect, use, or share your personal data — aq222 will notify registered players via the email address associated with their account at least 14 days before the changes take effect. The effective date at the top of this policy will be updated to reflect the date of the most recent revision.

Clause 14.2 — Continued Use

Your continued use of the aq222 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of, and agreement to be bound by, the updated version. It is your responsibility to review this Privacy Policy periodically and to be aware of any changes that affect the processing of your personal data.

15. Contact and Complaints

Clause 15.1 — Contacting aq222 About Data Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or aq222's data processing practices, please contact us by email at [email protected] or via the 24/7 live chat function on the aq222 platform. Please mark your message with the subject line "Data Privacy Enquiry" so it is directed to the appropriate team member without delay. Our support team is available around the clock, Bangladesh Standard Time (BST, UTC+6).

Clause 15.2 — Complaint Resolution

aq222 takes all data privacy complaints seriously. If you raise a data-related complaint, we will acknowledge receipt within 2 business days and aim to provide a substantive response within 14 calendar days. Where a complaint requires escalation to a specialist compliance review, we will notify you of the expected timeline for resolution. If you remain unsatisfied following aq222's internal complaint process, you may seek independent advice or escalate through appropriate legal channels available in your jurisdiction.