Qr44 Privacy Policy – Data Protection Commitment for Malaysian Players

1Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") is published by qr44 ("we", "Platform") and applies to all individuals who use the qr44.best website and all services offered therein, including Sports Betting, online casino, table games, virtual sports, and VIP rewards programmes.

We are committed to protecting your privacy and complying with Malaysia's Personal Data Protection Act 2010 (PDPA) as well as globally recognised data protection standards. This document clearly outlines the types of data we collect, the purposes for collection, who may have access to it, how long it is retained, and your rights as a data subject.

This policy should be read together with Terms & Conditions qr44. By using our platform, you give us your consent to process your personal data in accordance with the terms set out in this document.

2Types of Personal Data We Collect

qr44 collects your personal data through several means: directly from you during registration and platform use, automatically via standard tracking technologies, and through the KYC identity verification process. The categories of data we collect are as follows:

We do not collect sensitive data such as your health information, religious beliefs, or political views. Credit card details are not stored on qr44 — all card transactions are processed directly through licensed third-party payment channels that comply with PCI DSS standards.

3How Your Data Is Collected and Used

qr44 only uses your personal data for legitimate, clearly stated purposes. The primary purposes for which your data is used are as follows:

• Service Delivery: Creates and manages your account, processes deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, and FPX, and ensures access to all platform products including Sports Betting, Live Casino, and Virtual Sports.
• Identity Verification (KYC): Verifies that you are an eligible user of the platform — aged 18 or above, using your own name, and not appearing on any self-exclusion list.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, money laundering, and misuse of bonus or promotional systems.
• Legal Compliance: Meeting the reporting and record-keeping requirements mandated by applicable Malaysian law, including financial transaction monitoring obligations.
• Customer Support: Resolving queries, complaints, and support requests submitted via live chat, WhatsApp, or email to our CS team qr44.
• Platform Improvements: Analyses usage patterns in aggregate (not at an individual level) to improve the user experience, introduce new features, and optimise platform performance.
• Marketing Communications: Sending information about promotions, bonuses, and special offers qr44 that you might find interesting — only if you have chosen to receive them and for as long as you have not withdrawn that consent.

4Third-Party Data Sharing

qr44 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, there are limited situations where your data may be shared with specific parties — each of which we openly explain below:

• Payment Service Providers: The transaction information required is shared with e-wallet providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks for FPX processing via Maybank2u or CIMB Clicks. This sharing is limited strictly to the data needed to complete the transaction.
• Game Providers: Game data such as usernames and betting history may be processed by third-party game providers that operate casino games, slots, or virtual sports on our platform. All such providers are bound by strict confidentiality agreements.
• Audit & Compliance Services: In the context of legal compliance, limited information may be shared with auditing bodies conducting RNG checks or financial compliance reviews on our platform.
• Legal Requirements: qr44 will disclose personal data if ordered to do so by a court or an authority with valid jurisdiction in Malaysia, or where such disclosure is necessary to protect user safety or prevent criminal activity.

5Data Protection Security Measures

qr44 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, use, modification, or disclosure:

• Encryption in Transit: All data transmitted between your browser and our servers qr44 is encrypted using TLS 1.3 with a 256-bit SSL certificate. The "https://" prefix and padlock icon in your address bar confirm that your connection is secure.
• Encryption at Rest: Sensitive data stored in our databases is encrypted using the AES-256 algorithm. Passwords are never stored in plain text — they are hashed using a one-way, irreversible function.
• Access Controls: Access to players' personal data within internal systems qr44 is allocated based on the principle of least privilege. Only staff who require access to perform their job functions are permitted to view that data.
• 24-Hour Monitoring: Our security systems are continuously monitored to detect any suspicious activity or unauthorised access attempts. Any anomalies are immediately flagged to the security team for prompt action.
• Two-Factor Authentication (2FA): We encourage all players to enable 2FA in their account security settings as an additional layer of protection against unauthorised access.
• Regular Security Audits: Technical Infrastructure qr44 undergoes regular security assessments conducted by independent cybersecurity experts to identify and address any vulnerabilities.

While we take all reasonable precautions, no digital security system can be guaranteed 100% secure. In the unlikely event of a data breach that compromises the security of your account, qr44 committed to notifying you within 72 hours of becoming aware of the incident, along with the steps we have taken and are taking in response.

6Cookies, Tracking & Similar Technologies

qr44 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting your ability to use the platform.
• Preference Cookies: Saves your preferences such as language, preferred layout, and display settings so you don't have to reconfigure them every time.
• Analytics Cookies: Collects information about how you use the platform — pages visited, time spent, and navigation patterns — to help us understand and improve the overall user experience. This data is collected in aggregate form and does not identify you personally.
• Security Cookies: Help qr44 detecting suspicious activity such as repeated failed login attempts or unusual betting patterns that may indicate account takeover.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the platform qr44 as a whole. We do not use third-party cookies for advertising purposes that track you across other websites.

7Data Retention Period

qr44 does not retain your personal data for longer than is necessary for the purposes set out in this Privacy Policy, or longer than is required under applicable Malaysian law.

• Active Account Data: For as long as your account remains active and you continue to use the platform, we retain all relevant data to ensure a continuous and secure service.
• After Account Closure: Once you close your account, qr44 Transaction records and account history will be retained for a minimum of 7 years to comply with applicable financial and tax regulatory requirements in Malaysia.
• KYC Documents: Copies of your MyKad or passport submitted for identity verification will be retained for the same duration as your account records — a minimum of 7 years after account closure.
• Communication Logs: Live chat and email history with the CS team qr44 retained for 3 years for dispute resolution and service improvement purposes.
• Marketing Data: If you have withdrawn your consent to receive marketing communications, we will delete your marketing-related data within 30 days, although we are still required to retain a record that you have requested not to be contacted.

8Your Rights as a Data Subject

As a user of the qr44 and as a Malaysian resident protected under the Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our data protection team by emailing support@qr44.best with the subject line "Personal Data Rights Request". Include your full name and account number so we can process your request promptly. We will respond within 14 working days.

9Children's Data Protection

Platform qr44 is strictly for individuals aged 18 and above. We do not intentionally collect, store, or process the personal data of individuals under the age of 18.

Should we discover that personal data belonging to someone under the age of 18 has been collected without our knowledge — whether through the provision of false information during registration or by any other means — we will take immediate action to delete that data and close the account in question. Any balance held in such an account will be handled in accordance with the procedures set out in Terms & Conditions ours.

10Contact Us for Privacy Matters

If you have any questions, concerns, or wish to exercise your rights regarding the personal data we process, please do not hesitate to contact the qr44 through the following channels:

• Email: support@qr44.best (for privacy enquiries, please include "Privacy" in your email subject line)
• Live Chat: Available 24 hours a day through the platform qr44 — Malay-speaking CS agents are available to assist you
• Response Time: Privacy-related enquiries will be addressed within 2 hours for urgent matters and within 14 business days for formal data rights requests

We may also update this Privacy Policy from time to time to reflect changes in our practices or applicable legal requirements. Any significant changes will be communicated to you via an in-platform notification or your registered email at least 7 days before the changes take effect. The "Updated" date at the top of this page always reflects the current version of this policy.