aq666 Privacy Policy —
Your Data, Our Responsibility

Introduction & Scope of This Policy

This Privacy Policy describes how aq666 (referred to throughout as "aq666", "we", "us", or "our") collects, processes, stores, and protects the personal data of individuals who access or use the aq666 Platform at aq666.io, including all associated mobile-optimised interfaces, subdomains, and related services.

aq666 is an online casino and sports betting platform built specifically for players in Bangladesh. We understand that our players entrust us with sensitive personal and financial information when they register, deposit funds, and engage with our games. We take that trust seriously and are committed to handling all personal data with the highest standards of care, transparency, and security.

This Policy applies to all personal data that aq666 processes, regardless of whether it was collected directly from you via the registration form, sourced automatically through your use of the Platform (such as IP addresses and device identifiers), or provided by third-party partners (such as payment processors including bKash, Nagad, Rocket, and Upay) in connection with your account activity.

Personal Data We Collect

aq666 collects personal data in three primary ways: information you provide directly, information collected automatically as you use the Platform, and information received from third-party partners. The categories of data we collect are set out in the table below.

We do not collect special category data (such as health information, political opinions, or biometric data) except where strictly required by applicable KYC or responsible gaming regulations — for example, where a player voluntarily discloses a gambling-related health concern as part of a self-exclusion request.

We do not collect full payment card numbers. Card payments processed through Visa and Mastercard are handled by PCI-DSS compliant payment gateway partners, and aq666 never stores or transmits full card numbers on its own servers.

How We Use Your Personal Data

aq666 uses your personal data only for the specific, legitimate purposes described in this Policy. We do not use your data for any purpose that is incompatible with the purposes disclosed here. The primary purposes for which we process your data are as follows:

• Account Management: To create, maintain, and administer your aq666 player account, including verifying your identity and age as part of the mandatory 21+ age policy.
• Payment Processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and any other supported payment method, and to maintain an accurate record of all financial transactions associated with your account.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money-laundering (AML) and Know Your Customer (KYC) requirements, including verifying the source of funds for large transactions and reporting suspicious activity where legally required.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, match-fixing, collusion, and any other prohibited conduct as defined in the aq666 Terms & Conditions.
• Customer Support: To respond to your inquiries, process your complaints, resolve disputes, and provide technical assistance through our 24/7 English-language support team.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and make informed decisions about Platform development, game library expansion, and user experience optimisation.
• Responsible Gaming: To monitor your gaming activity for behavioural indicators of problem gambling and, where appropriate, to trigger responsible gaming interventions such as account reviews, cooling-off suggestions, or support referrals.
• Marketing & Promotions: To send you relevant promotional communications — including information about bonuses, BPL season offers, Eid promotions, and Pohela Boishakh specials — where you have opted in to receive such communications. You may opt out at any time.
• Legal Obligations: To comply with any legal, regulatory, or court order requiring the retention, disclosure, or processing of your personal data.

Legal Basis for Processing Your Data

Every instance of personal data processing carried out by aq666 is grounded in one or more of the following legal bases:

• Contractual Necessity: Processing that is necessary to perform our contract with you — that is, to provide the aq666 Platform services you have signed up for, including account management, payment processing, and game delivery. Without this processing, we cannot provide the services.
• Legal Obligation: Processing that is required for aq666 to comply with applicable laws and regulatory obligations, including AML/KYC compliance, age verification mandates, and cooperation with law enforcement authorities.
• Legitimate Interests: Processing that is necessary for aq666's legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud prevention, security monitoring, Platform analytics, and responsible gaming oversight.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent — most notably, the sending of direct marketing communications. You may withdraw consent at any time by updating your marketing preferences in your account settings or by contacting [email protected].

Where aq666 relies on legitimate interests as the legal basis for processing, we conduct a balancing test to ensure that our interests do not disproportionately override your privacy rights. You have the right to object to processing conducted on the basis of legitimate interests — see Section 09 (Your Rights) for details.

Data Sharing & Third-Party Disclosure

aq666 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: We share transaction-relevant data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment service providers as strictly necessary to process your deposits and withdrawals. These partners process your data under their own privacy policies and are bound by contractual data processing agreements with aq666.
• Identity Verification Services: We may share identity documents and personal information with third-party KYC and AML verification providers to fulfil our regulatory compliance obligations. These providers act as data processors on our behalf and are bound by strict confidentiality obligations.
• Game Content Providers: When you play games delivered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, those providers may collect certain technical data (such as session data and game logs) in connection with the delivery of their software. This data is used for game performance and fairness auditing purposes.
• Analytics Providers: We use privacy-compliant analytics tools to understand how players interact with the Platform. These tools may process anonymised or pseudonymised usage data. No personally identifiable information is shared with analytics providers for their own purposes.
• Law Enforcement and Regulatory Bodies: We will disclose personal data to competent authorities, courts, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to protect the legal rights of aq666 or to prevent, detect, or investigate a crime.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of aq666's assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you of any such transfer and the privacy implications via the email address on file.

Cookies & Tracking Technologies

aq666 uses cookies and similar tracking technologies to operate and improve the Platform, to remember your preferences and session state, and to analyse how players interact with our pages and games. By using the aq666 Platform, you consent to our use of cookies as described in this section.

The types of cookies we use are as follows:

• Strictly Necessary Cookies: These are essential for the Platform to function correctly. They manage your login session, maintain your account security, and enable core features like the cashier and game launcher. These cookies cannot be disabled without breaking the Platform's functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players use the Platform — which pages are most visited, which games are most popular, and where errors occur. This data helps us identify and fix issues and improve the overall experience.
• Functional Cookies: These cookies remember your preferences, such as your preferred language (English), display settings, and notification preferences, so you do not have to reconfigure them on every visit.
• Targeting & Personalisation Cookies: Where you have opted in to marketing communications, these cookies help us deliver promotions and content that are relevant to your interests and gaming activity — such as cricket betting offers during BPL season or slot promotions tied to your preferred game categories.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain categories of cookies may affect the functionality of the Platform. Instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

In addition to cookies, aq666 may use web beacons, pixel tags, and similar technologies in our marketing emails to track whether those emails have been opened and whether the links within them have been clicked. This information is used solely to measure the effectiveness of our communications and to improve their relevance to you.

Data Retention

aq666 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The specific retention periods that apply to different categories of data are as follows:

• Active Account Data: Personal data associated with an active aq666 account is retained for the lifetime of that account and for a period of 5 years following account closure. This retention period covers our AML and regulatory reporting obligations.
• Financial Transaction Records: Records of all deposits, withdrawals, bets, and bonus transactions are retained for a minimum of 5 years from the date of the transaction. This retention is required by applicable financial regulations and AML compliance obligations.
• KYC Verification Documents: Identity documents (National ID, passport, utility bills, selfie photographs) are retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Customer Support Communications: Support chat transcripts and email correspondence are retained for 3 years from the date of the communication, to enable us to reference previous interactions in the event of a dispute or follow-up inquiry.
• Marketing Preferences and Consent Records: Records of your marketing opt-in/opt-out status and the date on which consent was given or withdrawn are retained for 3 years from the relevant consent event.
• Technical and Usage Data: Anonymised or pseudonymised analytics data may be retained for longer periods for Platform improvement purposes, as this data cannot be used to identify you individually.

When personal data is no longer required for any of the purposes stated above, aq666 will securely delete or anonymise it in accordance with our internal data destruction procedures. Secure deletion means that the data is rendered irrecoverable using industry-standard methods appropriate to the storage medium on which it is held.

Data Security Measures

aq666 implements a comprehensive, multi-layered security framework designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our core security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the aq666 Platform is encrypted using 256-bit SSL/TLS encryption. This ensures that your personal and financial information cannot be intercepted during transmission.
• Password Hashing: All account passwords are stored using bcrypt hashing with a strong salt factor. We never store passwords in plain text, and we cannot retrieve your original password — only reset it.
• Two-Factor Authentication (2FA): aq666 offers two-factor authentication to all registered players at no cost. We strongly recommend enabling 2FA in your account security settings for an additional layer of protection.
• Access Controls: Access to personal data within aq666's internal systems is restricted on a strict need-to-know basis. Employees and contractors are granted only the minimum level of data access required for their specific role, and all access is logged and audited.
• Intrusion Detection and Monitoring: Our infrastructure is monitored continuously for signs of unauthorised access, anomalous behaviour, and potential security threats. Any suspected breach triggers an immediate incident response protocol.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, aq666 will notify affected players via the email address on file as promptly as circumstances allow, and no later than 72 hours after we become aware of the breach, to the extent that notification is feasible within that timeframe.

Your Privacy Rights

As an aq666 player, you hold a range of rights in relation to your personal data. These rights may be subject to certain limitations where they conflict with aq666's legal obligations (for example, our AML data retention requirements), but aq666 is committed to honouring these rights to the fullest extent permissible. Your rights are as follows:

• Right of Access: You have the right to request a copy of all personal data that aq666 holds about you. We will provide this information within 30 days of receiving a valid request.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected. You can update most account information directly from your account profile; for other corrections, contact our support team.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that this right is subject to overriding legal retention obligations.
• Right to Restriction of Processing: You have the right to request that we temporarily restrict the processing of your personal data while a dispute about its accuracy or our basis for processing it is resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to aq666 in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. aq666 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (most notably, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact the aq666 Data Privacy team at [email protected] with the subject line "PRIVACY REQUEST — [Your Right]". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended to 60 days; we will inform you of any extension and the reason for it.

Children & Minors

The aq666 Platform is strictly intended for adults aged 21 years and above. aq666 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. The Platform is designed and operated as an adults-only gambling service, and age verification is a mandatory step in the registration process for every new player.

If aq666 discovers that personal data has been collected from an individual under the age of 21, we will take immediate action to:

• Close the associated account without delay.
• Permanently delete all personal data associated with the underage account from our live systems.
• Return any funds deposited to the originating payment method, subject to verification of the correct return destination.

If you are a parent or guardian and you believe that a minor in your care has created an aq666 account or provided personal information to the Platform, please contact us immediately at [email protected]. We will investigate and act on all such reports with the highest priority.

Marketing Communications

aq666 may send you promotional and marketing communications about Platform offers, new game launches, seasonal promotions (such as those tied to BPL season, Eid al-Fitr, Eid al-Adha, Pohela Boishakh, and the ICC T20 World Cup), and other relevant updates — but only where you have explicitly opted in to receive such communications during registration or via your account settings.

You may opt out of marketing communications at any time using any of the following methods:

• Clicking the unsubscribe link at the bottom of any marketing email sent by aq666.
• Updating your communication preferences in the Notifications section of your account settings.
• Contacting the aq666 support team at [email protected] with the subject line "MARKETING OPT-OUT".

Please allow up to 5 business days for your opt-out preference to take effect across all communication channels. Please note that opting out of marketing communications does not affect transactional or service communications — for example, deposit confirmations, withdrawal notifications, and security alerts will continue to be sent regardless of your marketing preference, as these are necessary for the operation of your account.

Third-Party Links & External Services

The aq666 Platform may contain references to third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) whose software is integrated directly into the Platform. When you launch and play a game from one of these providers, you interact with their software, and certain technical data relating to your game session may be processed by the provider's own systems.

aq666 is not responsible for the privacy practices of third-party game content providers. While we select providers who maintain high standards of data protection and hold relevant certifications, their processing of your data is governed by their own privacy policies. We recommend reviewing the privacy documentation of any third-party provider whose games you play regularly.

aq666 does not embed social media plugins, third-party advertising networks, or external tracking pixels on the Platform beyond those strictly necessary for its operation. We do not permit third-party advertisers to collect data about your Platform activity for their own independent targeting purposes.

Amendments to This Privacy Policy

aq666 reserves the right to update, revise, or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform features, or our internal data processing practices. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notification on the aq666 Platform informing players that the Privacy Policy has been updated.
• Where the changes are significant, send a direct notification to the email address registered to your account, summarising the key changes and providing a link to the full updated Policy.

Your continued use of the aq666 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the Platform and contact [email protected] to request account closure and data deletion in accordance with your rights under Section 09.

Minor, non-material changes (such as typographical corrections, formatting updates, or clarifications that do not alter the substance of our data practices) may be made without direct notification, though the "Last Updated" date will always reflect the most recent revision.

Contact Us — Data Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way aq666 handles your personal data, please contact our Data Privacy team using the details below. All privacy-related correspondence is handled by trained staff and is treated with strict confidentiality.

For urgent security concerns — such as suspected unauthorised access to your account or a potential data breach involving your personal information — please mark your email subject line as "URGENT — SECURITY" to ensure it is escalated to the highest-priority queue and addressed within 2 hours during normal operating hours.

aq666 is committed to resolving all privacy-related concerns fairly and promptly. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant data protection authority applicable in your jurisdiction.