qa77 Privacy Policy
At qa77, protecting your personal data is a core part of how we operate. This Privacy Policy explains exactly what information we collect, why we collect it, how it is stored and protected, and what rights you hold as a qa77 player based in Bangladesh.
How qa77 Handles Your Data
The six pillars of the qa77 privacy commitment, summarised for quick reference. Full legal detail follows in the sections below.
Minimal Data Collection
qa77 collects only the personal data that is strictly necessary to operate your account, process transactions, verify your identity, and comply with applicable anti-money laundering requirements. We do not collect data for its own sake.
SSL Encryption
All data transmitted between your device and the qa77 platform is protected using industry-standard SSL/TLS encryption. Your financial and personal information is never transmitted in plain text over any network connection.
No Third-Party Marketing Sales
qa77 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. Data shared with third-party service providers is limited to what is necessary for the provision of services to qa77.
Your Right to Access
As a qa77 player, you have the right to request a copy of the personal data we hold about you at any time. Submit your request via live chat or email to [email protected] and our team will respond within 5 business days.
Right to Erasure
Subject to legal retention obligations, you may request that qa77 delete your personal data upon closure of your account. Requests are assessed individually, and data required for anti-money laundering compliance may be retained for up to 5 years as required.
Marketing Opt-Out
You may withdraw consent to receive marketing communications from qa77 at any time by updating your notification preferences in your account settings or by contacting support. Withdrawal of marketing consent does not affect the processing of data required for account operations.
Summary: This Privacy Policy describes how qa77 ("we", "us", "our") collects, uses, stores, and protects personal data belonging to players and visitors ("you", "your") of the qa77 platform at qa77.io. Please read this policy carefully. By registering an account or using the qa77 platform, you acknowledge that you have read and understood this Privacy Policy.
1. Introduction
qa77 is Bangladesh's leading online betting and casino platform, providing cricket betting, live casino, slots, crash games, and related services to players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We are committed to maintaining the highest standards of data privacy and security for all our players.
This Privacy Policy applies to all personal data collected through the qa77 website at qa77.io, any mobile-optimised version of the platform, and any communications between you and qa77, including support interactions conducted via live chat or email. This policy should be read alongside the qa77 Terms & Conditions.
qa77 processes personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability. We apply these principles consistently to all personal data we hold, regardless of how it was originally collected.
Language: This Privacy Policy is published in English. In the event of any inconsistency between this English version and any translated version produced for informational purposes, the English version shall prevail.
2. Data Controller
For the purposes of this Privacy Policy, qa77 acts as the data controller in respect of all personal data collected through the qa77 platform. As data controller, qa77 determines the purposes and means by which personal data is processed and bears primary responsibility for ensuring that all processing activities comply with applicable data protection principles.
If you have any questions or concerns regarding the processing of your personal data by qa77, or if you wish to exercise any of the rights described in Section 10 of this policy, please contact the qa77 data privacy team using the contact details set out in Section 13.
3. Data We Collect
qa77 collects personal data through several channels and in several categories. The following table provides a comprehensive overview of the categories of personal data we collect, the source of that data, and the primary purpose for which it is collected.
| Data Category | Examples | Source | Primary Purpose |
|---|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number | Provided by you at registration or KYC | Account creation, age verification, KYC compliance |
| Contact Data | Email address, mobile phone number, residential address | Provided by you at registration | Account communications, security alerts, support |
| Financial Data | bKash/Nagad/Rocket/Upay account reference, transaction history, deposit and withdrawal records | Provided by you and generated through platform use | Payment processing, AML compliance, financial record-keeping |
| Account Activity Data | Login timestamps, bet history, game session data, bonus usage, balance history | Automatically generated through platform use | Platform operation, fraud prevention, dispute resolution |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution | Automatically collected via cookies and server logs | Platform security, fraud detection, performance optimisation |
| Communications Data | Live chat transcripts, email correspondence, support ticket history | Generated through support interactions | Support delivery, quality assurance, dispute resolution |
| Marketing Preferences | Email marketing opt-in/opt-out status, promotional communication preferences | Provided by you via account settings | Targeted promotional communications (where consented) |
3.1 Data You Provide Voluntarily
The majority of personal data held by qa77 is data that you have provided directly and voluntarily. This includes all information submitted during the account registration process, any documentation submitted as part of the KYC verification process, information provided when contacting the qa77 support team, and any preferences or settings you configure within your account dashboard.
3.2 Data Collected Automatically
When you access and use the qa77 platform, certain technical and behavioural data is collected automatically. This includes server-side log data (such as your IP address, the pages you visit, and the time and duration of your visit), device and browser information transmitted as part of standard HTTP requests, and behavioural data generated through your use of betting and gaming features. This data is collected and processed to maintain platform security, detect fraudulent activity, and optimise platform performance for players across Bangladesh.
Sensitive Data: qa77 does not deliberately collect sensitive categories of personal data, such as data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is inadvertently submitted to qa77 (for example, within a support message), it will be deleted promptly upon identification.
4. How We Use Your Data
qa77 uses the personal data described in Section 3 exclusively for legitimate, defined purposes. We do not process personal data in ways that are incompatible with the purpose for which it was originally collected. The following sets out the specific purposes for which qa77 processes personal data:
4.1 Account Management
Identity Data, Contact Data, and Account Activity Data are used to create and maintain your qa77 player account, authenticate your identity on login, manage your account settings and preferences, and communicate important account-related information including security alerts, transaction confirmations, and policy updates.
4.2 Payment Processing
Financial Data is used to process deposit and withdrawal transactions conducted via bKash, Nagad, Rocket, Upay, and other approved payment methods. This includes verifying the ownership of the payment method and ensuring that withdrawals are returned to the same method used for the corresponding deposit, in accordance with our anti-money laundering procedures.
4.3 Identity Verification (KYC)
Identity Data, including copies of government-issued identification and proof of address, is used to verify that you meet the eligibility criteria for using the qa77 platform — in particular, that you are aged 21 or above and are the legitimate owner of the account. This verification is required before the processing of withdrawal requests and may be triggered at other points at qa77's discretion.
4.4 Fraud Prevention and Security
Technical Data and Account Activity Data are used by qa77's security systems to detect and prevent fraudulent activity, including the use of multiple accounts, bonus abuse, automated bot activity, and money laundering. Automated monitoring systems analyse account behaviour patterns to flag anomalies for review by qa77's security team.
4.5 Responsible Gaming
Account Activity Data — including session frequency, session duration, deposit patterns, and betting behaviour — may be analysed to identify players who may be exhibiting signs of problem gambling. Where such patterns are identified, qa77 may proactively reach out to the player to offer responsible gaming tools, in accordance with our commitment to player welfare.
4.6 Marketing Communications
Where you have provided explicit consent, Contact Data and Marketing Preference Data may be used to send you information about qa77 promotions, bonuses, seasonal offers (including BPL and IPL cricket promotions, Eid special offers, and Pohela Boishakh seasonal campaigns), and new platform features. You may withdraw marketing consent at any time without affecting the operation of your account.
4.7 Legal and Regulatory Compliance
qa77 is required to retain certain categories of personal data — in particular, Financial Data and Identity Data — in order to comply with anti-money laundering requirements and to make such data available in the event of a regulatory inquiry or legal proceeding. Data retained for compliance purposes is held securely and accessed only on a need-to-know basis.
Automated Decision-Making: qa77 uses automated systems to detect fraudulent activity and flag accounts for review. Automated systems do not make final decisions on account suspension or closure — all flagged cases are reviewed by a member of the qa77 security team before any action is taken against an account.
5. Legal Basis for Processing
qa77 processes personal data only where a valid legal basis for processing exists. The applicable legal bases for qa77's processing activities are as follows:
- Contractual Necessity: Processing of Identity Data, Contact Data, and Financial Data is necessary for the performance of the contract between you and qa77 (as set out in the Terms & Conditions), including account management, payment processing, and the delivery of betting and gaming services.
- Legal Obligation: Processing of Identity Data and Financial Data for KYC and AML purposes is necessary for qa77 to comply with applicable legal and regulatory obligations.
- Legitimate Interests: Processing of Technical Data and Account Activity Data for fraud detection, platform security, and responsible gaming monitoring is based on qa77's legitimate interest in maintaining a safe and fair platform for all players.
- Consent: Processing of Contact Data and Marketing Preference Data for the purpose of sending promotional communications is conducted on the basis of your explicit consent, which may be withdrawn at any time.
6. Data Sharing & Third Parties
qa77 does not sell, rent, or otherwise transfer personal data to third parties for their own marketing purposes. Personal data is shared with third parties only in the following limited and controlled circumstances:
6.1 Payment Service Providers
Financial Data is shared with the relevant payment service provider (such as bKash, Nagad, Rocket, or Upay) to the extent necessary to process your deposit and withdrawal transactions. Each payment service provider is an independent data controller in respect of their own data processing activities and is subject to their own privacy policies.
6.2 Game Studio Providers
Where required for the technical operation of specific games, limited Technical Data (such as session tokens and anonymised player identifiers) may be shared with third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. This sharing is limited to what is technically necessary and does not include Identity Data or Financial Data.
6.3 KYC and Identity Verification Services
Where qa77 uses third-party identity verification services to assist with KYC processing, Identity Data submitted by you may be shared with such services for the sole purpose of verifying your identity. Any third-party KYC partner engaged by qa77 operates under a data processing agreement that restricts their use of your data to the verification purpose only.
6.4 Legal and Regulatory Authorities
qa77 may be required to disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where required by law, court order, or other legal process. qa77 will disclose only the minimum data required to satisfy the applicable legal obligation and will notify the affected account holder where it is legally permissible to do so.
International Transfers: Some third-party service providers engaged by qa77 may be located outside Bangladesh. Where personal data is transferred internationally, qa77 ensures that appropriate safeguards are in place, including contractual data protection clauses, to ensure that the data receives a level of protection equivalent to that applied by qa77.
7. Cookies & Tracking Technologies
qa77 uses cookies and similar tracking technologies on the qa77 platform. Cookies are small text files stored on your device that enable the platform to recognise your browser and remember certain information about your session and preferences. The following categories of cookies are used by qa77:
7.1 Strictly Necessary Cookies
These cookies are essential for the operation of the qa77 platform. They enable core functions such as maintaining your login session, retaining items in your bet slip, and ensuring the secure transmission of data between your device and the qa77 servers. These cookies cannot be disabled without impacting the functionality of the platform.
7.2 Performance and Analytics Cookies
These cookies collect anonymised information about how visitors use the qa77 platform, including which pages are visited most frequently and where users navigate to and from. This data helps qa77 identify areas of the platform that can be improved for the benefit of all Bangladeshi players. The information collected by these cookies does not identify individual users.
7.3 Functionality Cookies
These cookies remember choices you have made on the qa77 platform, such as your preferred odds format, interface language settings, and display preferences. The information stored by functionality cookies is not shared with any third party and is used solely to improve your personal experience on the platform.
7.4 Managing Cookies
You may control the use of non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive a notification before a cookie is placed on your device. Please note that disabling certain cookies may impact the functionality of the qa77 platform. Instructions for managing cookies in the most commonly used browsers are available from the browser manufacturer's official support pages.
8. Data Retention
qa77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the principal categories of personal data held by qa77:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity and KYC Data | 5 years from account closure | AML and regulatory compliance obligations |
| Financial Transaction Records | 5 years from the date of each transaction | AML and regulatory compliance obligations |
| Account Activity Logs | 2 years from account closure or last activity | Fraud prevention and dispute resolution |
| Support Communications | 3 years from the date of each interaction | Quality assurance and dispute resolution |
| Marketing Preference Records | Duration of account plus 1 year | Evidencing consent and withdrawal of consent |
| Technical / Server Log Data | 90 days from collection | Platform security and performance monitoring |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an individual player. Anonymised data may be retained indefinitely for statistical and analytical purposes without restriction.
9. Data Security
qa77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
- SSL/TLS Encryption: All data transmitted between your device and the qa77 platform is encrypted using current SSL/TLS standards, ensuring that data cannot be intercepted in transit.
- Encrypted Data Storage: Sensitive personal data, including Identity Data and Financial Data, is stored in encrypted format within qa77's secure database infrastructure.
- Access Controls: Access to personal data within qa77's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role. All access is logged and regularly audited.
- Password Security: Account passwords are stored using modern cryptographic hashing techniques. qa77 staff cannot view your password in plain text.
- Intrusion Detection: qa77's infrastructure is monitored continuously by automated intrusion detection systems designed to identify and respond to potential security threats in real time.
- Regular Security Reviews: qa77 conducts regular reviews of its security infrastructure and processes to ensure that protections remain current and effective against evolving threat landscapes.
While qa77 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data security incident that affects your personal data, qa77 will notify affected players promptly and take all appropriate steps to mitigate harm.
Your Role in Security: You also play an important role in keeping your data safe. Always use a strong, unique password for your qa77 account, never share your login credentials with any third party, and contact qa77 support immediately if you suspect that your account has been accessed without your authorisation.
10. Your Privacy Rights
As a qa77 player, you hold a number of rights in relation to your personal data. qa77 is committed to facilitating the exercise of these rights promptly and without undue obstruction. Your rights are as follows:
- Right of Access: You have the right to request a copy of the personal data that qa77 holds about you. Upon receipt of a valid access request, qa77 will provide the requested data within 5 business days, free of charge.
- Right to Rectification: You have the right to request that qa77 correct any inaccurate personal data held about you. You may update certain account details (such as your email address and contact number) directly through your account settings. For corrections to identity or KYC data, please contact qa77 support.
- Right to Erasure: Subject to legal retention obligations (see Section 8), you have the right to request that qa77 delete your personal data. Requests for erasure are assessed individually, and qa77 will confirm the outcome of each request within 10 business days.
- Right to Restrict Processing: In certain circumstances, you have the right to request that qa77 restrict the processing of your personal data — for example, while the accuracy of the data is being contested, or while a complaint about the use of your data is being investigated.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests; in such cases, qa77 will assess whether its legitimate interests override your rights and interests in the specific circumstances.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
To exercise any of the rights described above, please contact qa77 using the details in Section 13. qa77 may request verification of your identity before processing a rights request to ensure that personal data is not disclosed to, or amended at the request of, an unauthorised person.
11. Children's Privacy
The qa77 platform is strictly prohibited for individuals under the age of 21. qa77 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the registration and KYC process, and accounts found to belong to individuals under 21 are closed immediately, with all deposits refunded.
If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered a qa77 account or submitted personal data to qa77, please contact us immediately at [email protected]. qa77 will take immediate action to close the account and delete all associated personal data.
12. Changes to This Privacy Policy
qa77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the structure of our platform. When a material change is made to this policy, qa77 will update the "Last updated" date displayed in the document header and, where the change is significant, notify registered players via the email address associated with their account.
Your continued use of the qa77 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised policy. We encourage you to review this policy periodically to stay informed of how qa77 is protecting your personal data. The most current version of this Privacy Policy is always available at qa77.io/privacy-policy.
13. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by qa77, please contact the qa77 privacy team through one of the following channels:
- Live Chat: Available 24/7 directly within your qa77 account dashboard. This is the fastest way to reach the qa77 support and privacy team.
- Email: [email protected] — please include "Privacy Request" in the subject line so that your message is directed to the correct team. Responses are typically provided within 15 minutes for general inquiries and within 5 business days for formal data rights requests.
All formal data rights requests — including access requests, rectification requests, erasure requests, and objections to processing — should be submitted in writing to [email protected] with the subject line "Data Rights Request — [your account username]". qa77 will acknowledge receipt of all formal requests within 24 hours.
This Privacy Policy was last reviewed and updated in January 2026. © 2026 qa77. All rights reserved.
Ready to Play at qa77?
Now that you know how qa77 protects your data, join Bangladesh's leading online betting platform and enjoy cricket betting, live casino, slots, and crash games — all secured with SSL encryption.