Privacy Policy qqee — Malaysian User Data Protection

Qqee collects various categories of information for different purposes. Below is a comprehensive overview of the types of data we collect and their sources:

We do not collect data that is irrelevant or beyond what is required for the stated purposes. Each data category is collected based on clear and legitimate operational needs.

The personal data we collect is used for the following purposes, and these purposes only:

• Account management: Creating, verifying, and managing your user account, including the KYC process required by regulatory authorities.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions on the qqee platform accurately and securely.
• Platform security: Detecting and preventing fraud, money laundering, account abuse, and other security threats that could affect other users.
• Legal compliance: Fulfilling reporting obligations to regulatory bodies, tax authorities, and law enforcement agencies when required.
• Service improvement: Analyzing platform usage patterns in aggregate to improve the user experience, introduce new features, and optimize platform performance.
• Service communications: Sending important notices relating to your account, security updates, terms changes, and operational information you need to know.
• Marketing (with consent): Sending promotional information, bonus offers, and platform updates — only to users who have consented to receive marketing communications.
• Responsible gambling: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to users who need it.

Qqee does not use your personal data to make automated decisions that have a legal or other significant effect on you without human involvement.

Under Malaysia's Personal Data Protection Act 2010, qqee processes your personal data on valid legal grounds. These grounds vary according to the purpose of processing:

• Contract performance: Processing necessary to fulfill the agreement between you and qqee — for example, processing financial transactions and managing your account.
• Legal obligations: Processing required by applicable Malaysian law, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
• Legitimate interests: Processing for platform security, fraud prevention, and service improvement purposes, where qqee's interests do not override your fundamental rights.
• Consent: For marketing activities and promotional communications, qqee only processes your data based on the explicit consent you have provided. You may withdraw this consent at any time.

Qqee does not sell, lease, or trade your personal data to any third party for their own purposes. However, there are certain situations where qqee needs to share your information with trusted parties:

• Payment providers: Required transaction information is shared with FPX, Touch 'n Go eWallet, GrabPay, Boost, and local bank providers to process your deposits and withdrawals.
• Technical service providers: Companies that help us operate the platform — such as cloud computing providers, identity verification systems, and analytics service providers — are all bound by strict confidentiality agreements.
• Regulatory bodies and law enforcement: Information is shared when required by law, court order, or directive from a competent authority.
• Audit providers: Independent audit firms that verify the fairness of qqee's games and financial compliance may access certain data within the scope of their engagement.

Every third party working with qqee is required to sign a data protection agreement ensuring they handle your information in accordance with the standards we set, which are no less stringent than Malaysia's legal requirements.

Qqee continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we implement include:

• 256-bit SSL encryption: All data transmitted between your device and qqee's servers is protected by the industry's strongest standard encryption.
• Encryption of data at rest: Sensitive data such as financial information and KYC documents is stored in encrypted form within our databases.
• Two-factor authentication (2FA): An additional security layer is available for all user accounts to prevent unauthorized access.
• 24/7 security monitoring: qqee's automated threat monitoring system and cybersecurity team monitor platform activity around the clock.
• Internal access controls: Only qqee staff with legitimate business needs are permitted to access users' personal data, and all access is logged and periodically audited.
• Periodic penetration testing: qqee conducts regular security audits and penetration testing by independent third parties to identify and address potential vulnerabilities.

While we take all reasonable steps to protect your data, no digital system can be guaranteed 100% secure against all threats. In the event of any data breach involving your information, qqee will notify you and the relevant authorities within the timeframe prescribed by law.

Qqee retains your personal data only for as long as necessary for the purpose it was collected, or for as long as required by applicable law. The following are general guidelines for our data retention periods:

• Active account data: Retained for the duration your account is active and in use.
• Financial transaction data: Retained for a minimum of 7 years after the transaction date as required by Malaysia's financial and taxation laws.
• KYC records and identity verification: Retained for a minimum of 5 years after account closure as required by anti-money laundering regulations.
• Customer support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Marketing data: Retained until you withdraw consent or request data deletion, whichever comes first.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding your personal data that qqee is obligated to respect and uphold. These rights are as follows:

The qqee platform uses cookies and similar tracking technologies to enhance the user experience and collect analytics data. Cookies are small text files stored on your device when you visit the qqee platform.

• Essential cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Preference cookies: Storing your preferences such as language and display settings to make your platform experience more convenient.
• Analytics cookies: Collecting information about how you use the platform to help us understand usage patterns and improve our services. This data is collected in aggregate and does not identify individuals.
• Security cookies: Used to detect suspicious activity, prevent fraud, and ensure the security of your session.

You can manage cookie settings through your web browser preferences. Disabling certain cookies may affect the functionality of some parts of the qqee platform.

In the course of its operations, qqee may store or process your personal data on servers located outside Malaysia. In all such cases, qqee ensures that protection equivalent to Malaysia's PDPA applies to your data, whether through recognised data transfer mechanisms, standard contractual clauses, or verified adequacy assessments.

Qqee will not transfer your personal data to countries or territories that do not have an adequate level of data protection without appropriate additional safeguards.

The qqee platform is exclusively for individuals who are of age 18 years and above. qqee does not knowingly collect any personal data from individuals under the age of 18. If qqee discovers that personal data of a person under 18 has been collected, such data will be deleted immediately and the associated account will be terminated.

If you believe that qqee may have collected data from someone under the age of 18, please contact us immediately at [email protected] so that immediate action can be taken.

Qqee reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Whenever we make material changes, we will notify you via an in-platform notice or an email to your registered address.

The date of the most recent update is always displayed at the top of this document. Continued use of the qqee platform after changes are published constitutes your acceptance of the updated terms. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by qqee, please do not hesitate to contact us through the following channels:

• Live Chat: Available 24/7 via the chat button at the bottom corner of the qqee platform — the fastest way to get a response.
• Data Protection Email: [email protected] — for official personal data rights requests.
• General Support Email: [email protected] — for general enquiries regarding privacy and account security.

The qqee Data Protection Team is committed to responding to every inquiry within 3 business days and resolve all official data rights requests within 21 business days as required by Malaysia's PDPA. We take every privacy-related feedback and complaint seriously, as it helps us do better in protecting your data.