aq22 Privacy Policy

aq22 collects personal data from players in Bangladesh and elsewhere only to the extent necessary to operate a safe, compliant, and high-quality online gaming and sports betting platform. The categories of personal data we collect are described below.

1.1 Registration Data

When you create an aq22 account, we collect the information you provide directly, including your full legal name, date of birth, email address, mobile phone number, and the username and password you choose. This data is mandatory — without it, we cannot create or maintain your account.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer ("KYC") obligations, we may collect copies of government-issued identification documents (such as your National ID card, passport, or driving licence), proof of address documents (such as a utility bill or bank statement), and confirmation of payment method ownership (for example, a screenshot of your bKash or Nagad account registered in your name). This data is collected only when required to verify your identity or process a withdrawal request.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal, we collect and record data relating to that transaction, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), the transaction reference number, the amount in Bangladeshi Taka (৳), the date and time of the transaction, and the status of the transaction. We do not store full card numbers or mobile banking PINs — such sensitive credentials are handled entirely by your payment provider.

1.4 Gameplay and Betting Activity Data

We maintain a record of your gaming activity on the aq22 platform, including the games you play, bet amounts, outcomes, session durations, and any responsible gaming tools you have activated. This data is used to fulfil our service obligations to you, to detect unusual patterns that may indicate problem gambling, and to identify potential fraud or abuse.

1.5 Technical and Device Data

When you access the aq22 platform, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and the pages you visit within the aq22 site. This data helps us optimise the platform experience and detect potentially fraudulent or bot-driven access.

1.6 Communications Data

If you contact aq22 customer support — via live chat, email, or any other channel — we retain a record of that communication, including the content of your messages and any attachments you send. This allows our support team to provide consistent assistance and enables us to monitor service quality.

aq22 processes your personal data only where we have a lawful basis for doing so. The table below summarises the primary purposes for which we use your data and the corresponding legal basis.

2.1 Marketing Communications

aq22 will only send you promotional emails, SMS messages, or in-platform notifications if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your marketing consent at any time by contacting our support team or updating your notification preferences. Withdrawal of marketing consent does not affect our ability to send you service-related communications (such as deposit confirmations, withdrawal notices, or security alerts), which are sent on the basis of contract performance and are not subject to opt-out.

2.2 Automated Decision-Making

In limited circumstances, aq22 uses automated processing to detect patterns associated with fraud, bonus abuse, and problem gambling. Where an automated process flags an account for review, a member of the aq22 team will conduct a manual review before any material action (such as account suspension) is taken. You have the right to request human review of any automated decision that materially affects you.

The aq22 website uses cookies and similar tracking technologies to deliver core platform functionality, remember your preferences, and analyse how the site is used. A cookie is a small text file placed on your device by a web server. Cookies themselves do not contain executable code and cannot access other files on your device.

3.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the aq22 platform to function. They manage your login session, maintain your account balance display, and enable core security features. These cookies cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how visitors navigate and interact with the aq22 website. We use this data to identify pages that load slowly, features that are rarely used, and areas of the site that may benefit from redesign. No personally identifiable information is collected via these cookies.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, display settings, and responsible gaming limits, so that you do not need to reconfigure them on every visit.
• Targeting and Personalisation Cookies: Where you have consented to marketing communications, these cookies help us personalise promotional content based on the games and betting categories you engage with most frequently on the aq22 platform.

3.2 Managing Cookies

You may control the use of non-essential cookies through your browser's privacy settings. Most modern browsers allow you to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your aq22 account and using the platform. Disabling performance or functional cookies will not prevent platform access but may reduce the quality of your experience.

aq22 does not sell, rent, or share your personal data with third parties for their own commercial purposes. We may share limited personal data with carefully selected third parties only in the circumstances described below.

4.1 Payment Processors

To process your deposits and withdrawals, aq22 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers receive only the minimum data required to execute the transaction and are contractually prohibited from using your data for any other purpose. Each payment provider operates under their own privacy policy and applicable financial regulation.

4.2 Game Providers

To deliver casino games and live betting products, aq22 transmits limited gameplay-related data (such as your anonymised player ID, session token, and stake amounts) to certified game providers including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, Microgaming, and NetEnt. These providers do not receive your name, contact details, or payment information. Their use of data is restricted to game delivery and RNG certification purposes only.

4.3 Identity Verification Partners

Where required to complete KYC verification, aq22 may share identity documents with a regulated third-party identity verification service. Such partners are bound by strict data processing agreements and applicable data protection regulations. Verification data is not retained by the third party beyond the period required to complete the verification process.

4.4 Law Enforcement and Regulatory Bodies

aq22 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally obligated to do so — for example, in response to a lawful court order, warrant, or official investigation request. We will disclose only the minimum data required by the specific legal obligation and will notify affected players where we are legally permitted to do so.

4.5 Business Transfers

In the event that aq22 undergoes a merger, acquisition, restructuring, or sale of assets, player personal data may be transferred to the successor entity as part of that transaction. In such circumstances, aq22 will ensure that the successor entity provides a substantially equivalent level of privacy protection. Players will be notified of any such transfer via the email address registered on their account.

aq22 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

5.1 Data Storage Location

All aq22 player data is stored on encrypted servers. Data may be stored and processed in jurisdictions outside Bangladesh. Where data is transferred internationally, aq22 ensures that appropriate safeguards are in place, including contractual data protection clauses that require recipient parties to treat your data with a standard of protection equivalent to that described in this policy.

5.2 Data Deletion After Retention Period

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised data (from which you cannot reasonably be identified) may be retained indefinitely for statistical and platform improvement purposes.

As a registered player on the aq22 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the aq22 privacy team at [email protected].

• Right of Access: You may request a copy of all personal data that aq22 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For basic account details (email address, phone number), you may update these directly within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where we no longer have a lawful basis for retaining it. Please note that where retention is required by legal obligation (such as anti-money laundering record-keeping), we may not be able to fulfil an erasure request in full until the mandatory retention period has expired.
• Right to Restrict Processing: You may request that we temporarily suspend our processing of your data — for example, while you contest its accuracy or while an erasure request is pending.
• Right to Data Portability: You may request a structured, machine-readable export of the personal data you have provided to aq22, which you may then transfer to another service provider of your choice.
• Right to Object: You may object to our processing of your personal data where we rely on legitimate interest as the legal basis. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where our processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

aq22 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security framework includes the following controls:

• SSL/TLS Encryption: All data transmitted between your device and the aq22 platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar to confirm your connection is secure.
• Encrypted Data Storage: Personal data and financial records stored on aq22 servers are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within aq22's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their role. All data access is logged and audited.
• Two-Factor Authentication: aq22 supports and recommends two-factor authentication (2FA) for all player accounts. Staff accounts that access player data are required to use 2FA without exception.
• Intrusion Detection and Monitoring: Our platform infrastructure is continuously monitored for suspicious activity, including brute-force login attempts, unusual transaction patterns, and unauthorised data access events.
• Regular Security Assessments: aq22 conducts periodic security assessments of its platform and data infrastructure to identify and remediate vulnerabilities before they can be exploited.

7.1 Data Breach Response

In the event of a confirmed personal data breach that poses a risk to the rights and freedoms of affected players, aq22 will notify affected individuals without undue delay — and in any event within 72 hours of becoming aware of the breach — via the email address registered on their account. The notification will describe the nature of the breach, the categories and approximate volume of data affected, the likely consequences, and the measures taken or proposed to address the breach.

If you have any questions, concerns, or requests relating to this Privacy Policy or aq22's handling of your personal data, please contact us using the details below. All privacy-related enquiries are handled by the aq22 data protection team and will receive a response within 5 business days.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 via the aq22 platform. Our live chat team can escalate privacy requests to the data protection team during your session.
• Phone / WhatsApp: +880 1700-000000 (available during Bangladesh Standard Time business hours, BST UTC+6)

aq22 is committed to resolving all privacy enquiries promptly and transparently. If you are not satisfied with our response, you retain the right to escalate your concern to the relevant data protection authority in the jurisdiction applicable to you.

This Privacy Policy was last reviewed and updated on 1 January 2026. aq22 reserves the right to amend this policy at any time. Where material changes are made, we will notify registered players via email at least 7 days before the changes take effect. Your continued use of the aq22 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.