aq88 Privacy Policy — How We Protect Your Personal Data

aq88 is an online betting and casino platform serving players in Bangladesh, offering cricket sportsbook, live dealer casino games, slots, and a full suite of sports wagering markets. As part of delivering these services, aq88 necessarily collects and processes certain personal data about its registered players and platform visitors.

We are committed to handling personal data responsibly, transparently, and securely. This Policy has been written in plain English so that every player can clearly understand what data we hold, why we hold it, who we may share it with, and what choices and rights you have in relation to your information.

This Policy applies to all personal data collected through the aq88 website, mobile-optimised web experience, and any future native applications operated under the aq88 brand. It applies to all players accessing the platform from Bangladesh. If you are accessing the platform from a jurisdiction other than Bangladesh, additional or different data protection obligations may apply; you use the platform at your own risk in that case.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement between you and aq88.

For the purposes of this Policy, the data controller responsible for your personal data is aq88, the operator of the platform accessible at aq88.bar. As data controller, aq88 determines the purposes for which and the means by which your personal data is processed.

Where aq88 engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification services, and game content providers), those parties act as data processors and are bound by contractual obligations that restrict their use of your data solely to the purposes specified by aq88.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the aq88 support team using the contact details set out in Section 13 of this Policy.

aq88 collects the following categories of personal data in connection with account registration, platform use, and regulatory compliance obligations:

aq88 does not collect special category data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) except where a Verification Document incidentally contains such information. In such cases, the document is processed solely for the purpose of identity verification and is not used for any other purpose.

aq88 collects personal data through the following channels and mechanisms:

• Account Registration: When you complete the aq88 registration form, you provide your name, date of birth, email address, and contact number directly to us.
• KYC Verification Submissions: When we request identity documents as part of our Know Your Customer process, you upload or transmit Verification Documents directly to the aq88 platform or support team.
• Deposit and Withdrawal Transactions: When you process a financial transaction via bKash, Nagad, Rocket, Upay, or a linked bank account, transaction reference data and payment method identifiers are recorded automatically.
• Platform Interaction: Technical and Usage Data is collected automatically as you navigate the aq88 platform, including via cookies and server-side logging systems.
• Support Communications: When you contact the aq88 support team via live chat or email, the content of those communications is recorded and stored for quality assurance and compliance purposes.
• Third-Party Verification Services: Where aq88 uses external identity verification or fraud screening providers, those providers may supply additional data points (such as device risk scores or document validation results) that are associated with your account record.

aq88 processes your personal data only where a valid legal basis exists. The following table sets out the primary purposes for which we process personal data and the corresponding legal basis for each:

Where processing is based on your consent (for example, receiving promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact the aq88 support team or use the unsubscribe mechanism included in any marketing communication.

aq88 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third party solely to the extent necessary for the specified purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to process authorised deposit and withdrawal transactions initiated by you.
• Identity Verification Providers: Third-party KYC and document verification service providers engaged by aq88 to validate identity documents and cross-reference data against fraud and sanctions databases.
• Game Content Providers: Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and wager data necessary to deliver their games and process game outcomes. These providers do not receive your full identity or financial data.
• Technology and Infrastructure Partners: Cloud hosting providers, content delivery networks, and cybersecurity service providers that support the technical operation of the aq88 platform under strict data processing agreements.
• Legal and Regulatory Authorities: Law enforcement agencies, courts, or regulatory bodies where aq88 is required by law to disclose personal data, or where disclosure is necessary to protect the rights, property, or safety of aq88 or its players.

All third-party data processors engaged by aq88 are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose beyond the specific processing task assigned by aq88.

aq88 uses cookies and similar tracking technologies to operate the platform, maintain your session state, detect fraud, and improve the user experience. The following categories of cookies are used on the aq88 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They maintain your login session, remember your preferences within a session, and enable security features. These cookies cannot be disabled without impacting your ability to use the platform.
• Functional Cookies: These cookies remember your language preference, display settings, and other personalisation choices across sessions so that you do not need to reconfigure them on each visit.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how players use the platform — which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used solely to improve the platform and is not linked to individual identities.
• Security and Fraud Prevention Cookies: These cookies help aq88 detect unusual activity, identify duplicate accounts, and protect against automated attacks. They may record device fingerprint data used to cross-reference suspicious behaviour patterns.

Most web browsers allow you to control cookie settings through their built-in preferences panel. You may choose to block or delete cookies at any time; however, doing so may affect the functionality of the aq88 platform and could prevent you from logging in or completing transactions. aq88 is not responsible for any degradation in platform performance resulting from browser-level cookie restrictions applied by the user.

aq88 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account Data and KYC Documents: Retained for a minimum of five (5) years following permanent account closure, in compliance with anti-money laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in accordance with financial regulation requirements.
• Support Communications: Retained for three (3) years from the date of the most recent communication in a support thread, or longer if the communication is relevant to an open dispute or investigation.
• Technical and Usage Logs: Typically retained for twelve (12) months in raw form, then aggregated and anonymised for longer-term platform analytics purposes.
• Marketing Consent Records: Retained for the duration of consent and for twelve (12) months following withdrawal of consent, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an individual player. Where data cannot be immediately deleted due to system architecture constraints, it is isolated from active processing until deletion is completed.

aq88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and aq88 servers is encrypted using Transport Layer Security (TLS 1.2 or higher), preventing interception by third parties.
• Password Hashing: Player passwords are stored using a strong one-way cryptographic hash function. aq88 staff cannot read or retrieve your password in plain text under any circumstances.
• Access Controls: Internal access to personal data is restricted to aq88 staff who require it to perform their specific job functions. All internal access is logged and subject to regular audit review.
• Two-Factor Authentication: aq88 may require or offer two-factor authentication for account login, providing an additional layer of protection for your account credentials.
• Fraud Monitoring Systems: Automated systems monitor account activity in real time for indicators of fraud, account takeover, or suspicious transaction patterns, and may trigger additional verification requirements where anomalies are detected.
• Regular Security Assessments: aq88 conducts periodic reviews of its security infrastructure and data handling practices to identify and address potential vulnerabilities.

As a registered player on the aq88 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the aq88 support team using the details in Section 13:

• Right of Access: You have the right to request a copy of all personal data held by aq88 about you. We will provide this information within a reasonable timeframe, typically within 30 days of your verified request.
• Right to Rectification: If any personal data held by aq88 is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain profile details directly through your account settings; other corrections require a support request.
• Right to Erasure ("Right to be Forgotten"): You may request that aq88 delete your personal data. We will honour this request where no overriding legal obligation requires us to retain the data. Note that data subject to AML or financial regulation retention requirements cannot be deleted before the applicable retention period expires.
• Right to Restrict Processing: In certain circumstances — for example, where you contest the accuracy of data, or where you object to processing based on legitimate interests — you may request that aq88 restrict its processing of your data while the matter is resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention or responsible gaming purposes. aq88 will assess your objection and cease processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as receiving promotional emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

aq88 will not charge a fee for handling reasonable data rights requests. We reserve the right to refuse or charge for requests that are manifestly unfounded, excessive, or repetitive in nature. We may request proof of identity before processing any data rights request to ensure that we do not disclose information to unauthorised parties.

The aq88 platform is strictly for adults aged 21 years and above. aq88 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory component of the account registration and KYC process for all players.

If aq88 discovers at any point that personal data has been collected from an individual who is below the minimum age of 21, the following steps will be taken without delay:

• The player's account will be permanently closed.
• All personal data associated with the account will be deleted from active systems as soon as legally and technically practicable, subject to any mandatory retention obligations.
• Any funds deposited by the underage player will be handled in accordance with aq88's underage gambling policy and applicable laws.

If you have reason to believe that a minor has registered an account on the aq88 platform, please notify the support team immediately via the contact details in Section 13. aq88 takes all underage gambling reports seriously and will investigate and act on all credible reports promptly.

aq88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, the updated Policy will be published on this page with a revised effective date at the top of the document.

Where changes are significant — for example, where we introduce a new category of data processing or a new category of third-party sharing — aq88 will endeavour to notify registered players via the email address on file prior to the changes taking effect. For non-material changes, the updated Policy will be published without direct notification, and your continued use of the platform constitutes acceptance of the revised Policy.

We recommend that all registered players review this Privacy Policy periodically to remain informed about how aq88 handles personal data. If you do not agree with any material change to this Policy, you should cease using the platform and request account closure in accordance with the account termination provisions in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way aq88 handles your personal data, please contact our support team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 in English via the aq88 platform support widget
• Support Hours: 24 hours a day, 7 days a week, including all public holidays in Bangladesh
• Response Time: Email queries are typically responded to within 24 hours. Data rights requests are processed within 30 days of receipt of a verified request.

All data rights requests must be submitted in writing to the email address above. To protect your privacy, aq88 will verify your identity before processing any access, rectification, or deletion request. Please include your registered email address and account username in your request to allow us to locate your records efficiently.