iqz9x Privacy Policy — How We Protect Your Personal Data

1 About This Policy

This Privacy Policy ("Policy") describes how iqz9x ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and protects personal data provided by or collected from individuals ("you", "Player", "User") who access or use the iqz9x online casino and sports betting platform, accessible at https://iqz9x.onl and any associated subdomains or mobile interfaces.

This Policy applies to all personal data processed in connection with the operation of the iqz9x platform, including data collected during account registration, identity verification, deposits and withdrawals, game play, customer support interactions, and marketing communications. It should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are available on the platform.

iqz9x is committed to handling personal data with transparency, integrity, and in accordance with recognised principles of data protection. We implement appropriate technical and organisational measures to safeguard your information at all times.

2 Data We Collect

2.1 Registration Data

When you create an iqz9x account, we collect the personal data you provide during the registration process, including:

• Full legal name
• Date of birth
• Email address
• Mobile phone number
• Residential address (city and district within Bangladesh)
• Username and hashed password

2.2 Identity Verification Data

To comply with our Know Your Customer (KYC) obligations and to prevent fraud, money laundering, and underage gambling, we may collect the following verification documents:

• Government-issued National Identity Card (NID)
• Passport or driving licence
• Utility bill or bank statement as proof of address
• Selfie photograph for liveness verification purposes

2.3 Financial Data

To process deposits and withdrawals, we collect payment-related data including mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details where applicable, transaction reference numbers, and deposit and withdrawal history. We do not store full card numbers — card payments are processed via PCI-DSS compliant third-party payment processors, and only tokenised references are retained by iqz9x.

2.4 Transaction & Activity Data

We automatically record data about your activity on the iqz9x platform, including:

• Betting history, game play sessions, and wagering amounts
• Deposit and withdrawal transaction records
• Bonus claims and wagering progress
• Account balance changes and adjustments
• Responsible gaming tool activations (deposit limits, self-exclusion requests)

2.5 Technical & Device Data

When you access the iqz9x platform, our servers and analytics tools automatically collect certain technical information, including IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and time stamps. This data is used for security monitoring, fraud prevention, platform optimisation, and aggregate analytics.

2.6 Customer Support Data

When you contact our support team via Live Chat, WhatsApp, or email, we retain records of that communication, including the content of messages, timestamps, and any supporting documents you provide. These records are used to resolve your query, improve our support quality, and maintain an audit trail of platform interactions.

Data Category	Examples	Primary Purpose
Registration Data	Name, email, phone, date of birth	Account creation and authentication
Verification Data	NID, passport, selfie	KYC compliance and age verification
Financial Data	bKash number, bank details, transaction history	Payment processing and fraud prevention
Activity Data	Betting history, game sessions, bonus usage	Account management and responsible gaming
Technical Data	IP address, device type, browser	Security, fraud detection, analytics
Support Data	Chat logs, email correspondence	Query resolution and quality assurance

3 How We Use Your Data

iqz9x uses your personal data for the following specific purposes:

• Account Management: To register your account, authenticate your identity on login, maintain your account balance, and provide you with access to all platform features.
• Identity Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with anti-money laundering (AML) obligations.
• Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, and supported bank accounts, and to process withdrawal requests to your registered payment methods.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, unauthorised account access, money laundering, collusion, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor player behaviour for indicators of problem gambling, to process responsible gaming tool activations such as deposit limits and self-exclusion requests, and to comply with our duty of care obligations towards players.
• Customer Support: To respond to your queries, complaints, and requests submitted through Live Chat, WhatsApp, or email, and to maintain records of those interactions.
• Platform Improvement: To analyse aggregated and anonymised usage data for the purpose of improving the platform's performance, game selection, user interface, and overall service quality.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications (see Section 11).
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records required by applicable law.

4 Legal Basis for Processing

iqz9x processes your personal data on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our contract with you — i.e., to operate your account, process your payments, and provide you with access to the platform's games and services.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including identity verification, transaction monitoring, and record-keeping obligations.
• Legitimate Interests: Processing carried out for the legitimate interests of iqz9x, including fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring, provided those interests are not overridden by your fundamental rights.
• Consent: Processing based on your specific, informed consent — primarily in the context of marketing communications and optional analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Cookies & Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device by the iqz9x platform when you visit. They enable core platform functionality and help us understand how the platform is used. The iqz9x platform uses both first-party cookies (set by iqz9x directly) and third-party cookies (set by our service partners).

5.2 Types of Cookies We Use

• Essential Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and cookies that maintain your login state. These cannot be disabled without affecting your ability to use the platform.
• Analytics Cookies: Used to collect aggregated data about how players interact with the platform, which pages are visited most frequently, and where technical errors occur. This data is used to improve the platform.
• Preferences Cookies: Used to remember your platform preferences such as language, display settings, and recently visited sections.
• Marketing Cookies: Used to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. These are only activated with your consent.

5.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please be aware that disabling certain cookies may affect the functionality of the iqz9x platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

6 Third-Party Data Sharing

iqz9x does not sell your personal data to third parties. We may share your data with the following categories of trusted third-party service providers, strictly for the purposes described in this Policy:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other supported payment partners receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial services regulations.
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist with document verification and fraud screening. All such providers are contractually obligated to maintain the confidentiality and security of verification data.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data necessary to deliver their games via the iqz9x platform. These providers do not receive your full registration or financial data.
• Customer Support Platforms: Where iqz9x uses third-party tools to deliver Live Chat or ticketing support, those providers operate under data processing agreements that restrict them from using your data for any purpose other than delivering that service.
• Analytics Providers: Aggregated and anonymised usage data may be processed by analytics platforms to help iqz9x understand platform performance. Personal data is not shared in identifiable form for analytics purposes.
• Legal & Regulatory Authorities: iqz9x may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law or in response to a valid legal process.

7 Data Security

iqz9x implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the iqz9x platform is encrypted in transit using industry-standard TLS protocols.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and monitored.
• Password Security: Account passwords are stored as cryptographic hashes using industry-standard hashing algorithms. Plain-text passwords are never stored or transmitted.
• Intrusion Detection: Our infrastructure is monitored continuously for unusual access patterns, potential intrusion attempts, and anomalous data access events.
• Security Assessments: iqz9x conducts periodic security reviews of its platform infrastructure and data handling practices to identify and remediate potential vulnerabilities.

While iqz9x takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. We encourage you to use a strong, unique password for your iqz9x account and to enable two-factor authentication where available.

8 Data Retention

iqz9x retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of your account's active status on the platform.
• Transaction Records: Financial transaction records are retained for a minimum of five years following the date of the transaction in accordance with standard financial record-keeping practices.
• Identity Verification Documents: KYC documents are retained for a minimum of five years following account closure or the end of the business relationship.
• Customer Support Records: Support interaction records are retained for a minimum of two years following resolution of the relevant query.
• Closed Account Data: Following voluntary or involuntary account closure, personal data required for legal, regulatory, or fraud prevention purposes will be retained for the applicable statutory period before being securely deleted or anonymised.

When personal data is no longer required, iqz9x disposes of it securely using methods appropriate to the sensitivity of the data, including secure deletion, degaussing, or cryptographic erasure.

9 Your Rights Over Your Data

As a player on the iqz9x platform, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data that iqz9x holds about you at any time. We will provide this information within a reasonable timeframe following verification of your identity.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain account details directly via your account settings page.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligations to retain certain records. Note that erasure requests cannot be fulfilled where retention is required by law.
• Right to Restrict Processing: You may request that iqz9x restricts the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format for the purpose of transferring it to another service.
• Right to Object: You may object to processing of your personal data where that processing is based on our legitimate interests, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the above rights, please contact our support team using the details provided in Section 14 of this Policy. We may need to verify your identity before processing a data rights request. We aim to respond to all rights requests within 30 days of receipt.

10 Children & Minors

The iqz9x platform is strictly intended for individuals aged 21 years or older. We do not knowingly collect personal data from persons under the age of 21. If we become aware that a minor has provided us with personal data or has registered an account on the platform, we will immediately close the account, void any associated bets or winnings, and delete the personal data in question.

If you are a parent or guardian and believe that a minor in your care has registered an account on iqz9x, please contact our support team immediately at [email protected] so that we can take prompt action. We take underage gambling extremely seriously and cooperate fully with any investigation into such cases.

11 Marketing Communications

iqz9x may send you promotional communications about bonuses, new games, sports betting markets, seasonal offers, and platform updates where you have given explicit consent to receive such communications during registration or at any subsequent time via your account communication preferences.

You may opt out of marketing communications at any time by updating your communication preferences in your account settings, or by contacting our support team directly. Opting out of marketing communications will not affect the delivery of transactional communications that are essential to the operation of your account, such as deposit confirmations, withdrawal notifications, verification requests, and security alerts.

12 International Data Transfers

The iqz9x platform serves players located in Bangladesh. The operation of the platform may involve the transfer or processing of your personal data by our service providers in locations outside of Bangladesh, including in the jurisdiction of game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment infrastructure partners.

Where personal data is transferred internationally, iqz9x takes steps to ensure that appropriate safeguards are in place to protect your data, including the use of contractual data processing agreements that impose obligations on recipients equivalent to those described in this Policy. By using the iqz9x platform, you acknowledge and consent to such transfers to the extent necessary for the platform to operate.

13 Changes to This Privacy Policy

iqz9x reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will provide notice to registered account holders via email or a prominent in-platform notification prior to the changes taking effect.

The date of the most recent update is displayed at the top of this Policy. Your continued use of the iqz9x platform after the effective date of any amended Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. The current version of this Policy is always available at https://iqz9x.onl/privacy-policy.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way iqz9x handles your personal data, please contact our support team using the details below. All privacy-related enquiries are treated as a priority.

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Live Chat: Available 24/7 via the platform, including all public holidays

Our support team is available around the clock, every day of the year, including during Eid ul-Fitr, Eid ul-Adha, Victory Day (December 16), and Independence Day (March 26). We aim to acknowledge all written privacy enquiries within 24 hours and to provide a full response within 30 days where a data rights request is involved.