qqnusa Privacy Policy

1 Introduction

qqnusa ("we", "us", "our" or "the Platform") operates the website accessible at https://qqnusa.click and provides Malaysia-focused online casino entertainment information, sports betting guidance, MYR payment resources and related services to adult users based in Malaysia.

This Privacy Policy ("Policy") describes how qqnusa collects, receives, stores, uses, discloses and otherwise processes personal data relating to individuals ("Users", "you" or "your") who access or interact with the Platform in any capacity, including by visiting the website, registering an account, submitting enquiries or engaging with any Platform feature.

By accessing the Platform or submitting any personal information through it, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should cease all use of the Platform and contact qqnusa to request closure of any active account.

This Policy is to be read alongside the qqnusa Terms and Conditions. In the event of any conflict between this Policy and the Terms and Conditions with respect to data-related matters, this Policy shall prevail.

2 Definitions

In this Policy, the following terms carry the meanings set out below unless the context clearly requires otherwise:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, email address, identification number, device identifier, transaction record and any other data that can reasonably be used to identify an individual.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, transfer or deletion.
• "Data Controller" means qqnusa as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of qqnusa under a written agreement and subject to qqnusa's instructions.
• "Consent" means a freely given, specific, informed and unambiguous indication of the User's agreement to the processing of their Personal Data for a stated purpose.
• "Cookies" means small text files placed on a User's device by the Platform to store session, preference and analytical information.
• "KYC" means Know Your Customer procedures requiring Users to submit identity and address verification documentation before certain platform features are made available.
• "Applicable Law" means all statutes, regulations, guidelines and regulatory requirements relating to data protection and privacy that apply to qqnusa's operations, including relevant Malaysian legislation.

3 Data We Collect

qqnusa collects Personal Data from Users through a number of channels and at various points throughout the user journey. The categories of data we collect are set out in the table below.

3.1 Data You Provide Directly

The majority of Personal Data held by qqnusa is provided directly by Users during registration, account verification, payment processing and communications with our support team. You are under no obligation to provide this data, but failure to provide certain categories may limit your ability to access specific Platform features.

3.2 Data Collected Automatically

When you access the Platform, certain technical data is collected automatically by our servers and analytics tools, including your IP address, browser and device information and session activity. This data is used for security monitoring, fraud prevention and service improvement purposes.

4 How We Use Your Data

qqnusa processes Personal Data for the following purposes:

• Account creation and management: to register, verify, maintain and administer your qqnusa account, including processing KYC documentation and keeping your profile up to date.
• Service delivery: to provide you with access to casino game information, sports betting resources, loyalty programme benefits and other platform features.
• Payment processing: to facilitate deposits and withdrawals in MYR through local payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB and Public Bank, and to maintain accurate transaction records.
• Security and fraud prevention: to monitor account activity for signs of unauthorised access, identity fraud, money laundering or prohibited conduct as defined in the qqnusa Terms and Conditions.
• Legal and regulatory compliance: to meet obligations under Applicable Law, including record-keeping, reporting and responding to lawful requests from competent authorities.
• Customer support: to respond to your enquiries, resolve account issues and maintain a record of communications for quality and training purposes.
• Responsible gambling: to monitor betting and deposit activity for indicators of problem gambling behaviour, to apply self-limit settings you have configured and to communicate with you where appropriate about responsible gaming resources.
• Platform improvement: to analyse aggregated usage data, identify technical issues and improve the performance, security and content of the qqnusa platform.
• Direct communications: to send you transactional messages (such as account confirmations and payment notifications) and, where you have opted in, promotional communications about qqnusa offers and rewards.

qqnusa will not process your Personal Data for any purpose that is incompatible with those set out above without providing prior notice and, where required, obtaining your consent.

5 Legal Basis for Processing

qqnusa processes Personal Data on the basis of one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: processing is necessary to perform the contract between qqnusa and the User, including account registration, payment processing and service delivery.
• Legal obligation: processing is necessary to comply with a legal or regulatory obligation applicable to qqnusa, including KYC requirements, financial record-keeping and responses to lawful requests from authorities.
• Legitimate interests: processing is necessary for purposes that serve the legitimate interests of qqnusa or a third party, such as fraud prevention, platform security and service improvement, provided those interests are not overridden by the User's fundamental rights and freedoms.
• Consent: where qqnusa processes Personal Data for purposes that are not strictly necessary for service delivery — such as optional marketing communications — we will seek your prior consent and respect your right to withdraw that consent at any time.

6 Data Sharing

qqnusa does not sell, rent or trade your Personal Data to third-party marketers under any circumstances. We may disclose your Personal Data to the following categories of recipient, strictly for the purposes described in this Policy:

6.1 Service Providers and Data Processors

qqnusa engages third-party service providers to perform functions on our behalf, including payment gateway processing, identity verification, fraud detection, hosting infrastructure, analytics and customer support technology. These providers are contractually bound to process Personal Data only on qqnusa's instructions and in accordance with applicable data protection requirements.

6.2 Payment Partners

Processing a deposit or withdrawal through channels such as Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank or CIMB necessarily involves sharing transaction-relevant data with those payment providers. Each provider's own privacy terms apply to data processed within their respective platforms.

6.3 Regulatory and Legal Authorities

qqnusa may disclose Personal Data to competent governmental, regulatory or law enforcement authorities where required by Applicable Law, or where disclosure is necessary to protect the rights, property or safety of qqnusa, its users or the public. We will take reasonable steps to notify affected Users of such disclosures unless prohibited by law from doing so.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of qqnusa assets, User Personal Data may be transferred to the relevant successor entity as part of that transaction, provided that the receiving entity agrees to handle Personal Data in accordance with this Policy or a policy offering equivalent protections.

7 Payment Data

All financial transactions on qqnusa are conducted in Malaysian Ringgit (MYR). Payment data processed through the Platform is handled with particular care given its sensitive nature.

7.1 Data Minimisation in Payment Processing

qqnusa does not store full payment card numbers on its own servers. Where card payments are accepted, card data is processed directly by our certified payment gateway partner using industry-standard encryption. qqnusa retains only the transaction reference, amount, date, payment method type and associated account identifier necessary for record-keeping and dispute resolution.

7.2 eWallet and Bank Transfer Data

When you process a payment through an eWallet such as Touch 'n Go, Boost or GrabPay, or via a bank transfer through Maybank, CIMB, Public Bank or FPX, the relevant financial institution or payment provider processes your payment credentials. qqnusa receives confirmation of the transaction outcome and associated reference data but does not access your eWallet or bank account credentials directly.

7.3 Transaction Records

qqnusa maintains a complete record of all deposits and withdrawals associated with your account for regulatory compliance, dispute resolution and responsible gambling monitoring purposes. These records are retained for the period specified in Clause 9 of this Policy.

8 Cookies and Tracking Technologies

The qqnusa Platform uses cookies and similar technologies to deliver a functional and secure experience. The categories of cookies we use are described below.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform and your overall user experience. qqnusa does not use third-party advertising or tracking cookies that share your behaviour data with external marketing networks.

9 Data Retention

qqnusa retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by Applicable Law, whichever is longer. The following general retention principles apply:

• Active account data: retained for the duration of the account relationship and for a minimum period of five (5) years following account closure to meet regulatory and legal retention requirements.
• Financial transaction records: retained for a minimum of seven (7) years from the date of the transaction in compliance with financial record-keeping obligations.
• KYC and identity verification documents: retained for the duration of the account relationship plus a minimum of five (5) years following account closure or the conclusion of any related investigation.
• Support communications: retained for a period of two (2) years from the date of the last communication unless a longer retention period is required by legal obligation or ongoing dispute.
• Technical and usage data: aggregated or anonymised after thirteen (13) months unless required for an active security investigation.

Where Personal Data is no longer required for any of the purposes described in this Policy, qqnusa will take reasonable steps to securely delete or anonymise that data without undue delay.

10 Data Security

qqnusa implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, disclosure, alteration or destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between user devices and qqnusa servers;
• access controls that limit internal access to Personal Data to personnel with a legitimate operational need;
• regular review of technical infrastructure for security vulnerabilities;
• secure storage of account credentials using one-way hashing algorithms;
• monitoring of account activity for indicators of unauthorised access or suspicious behaviour; and
• documented incident response procedures for addressing potential data breaches promptly.

While qqnusa takes its security obligations seriously, no system connected to the internet can be guaranteed to be completely secure. Users are encouraged to contribute to their own account security by using strong, unique passwords, enabling available two-factor authentication options and reporting any suspected unauthorised access promptly to [email protected].

11 User Rights

Subject to Applicable Law and applicable legal exemptions, you have the following rights with respect to your Personal Data held by qqnusa. You may exercise any of these rights by contacting us at [email protected] with a description of your request. We will respond within a reasonable time and will verify your identity before processing any request.

12 Minors and Age Restriction

qqnusa services are intended exclusively for adults aged 21 years and above. We do not knowingly collect, store or process Personal Data relating to individuals under the age of 21. Age verification is carried out during the account registration process, and qqnusa reserves the right to carry out additional age verification checks at any time.

If qqnusa becomes aware that it has inadvertently collected Personal Data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a person under 21 has created a qqnusa account, please contact us at [email protected] so that we may investigate and act accordingly.

13 International Data Transfers

In the course of delivering its services, qqnusa may transfer Personal Data to service providers, infrastructure partners or other processors located outside Malaysia. Where such transfers occur, qqnusa takes reasonable steps to ensure that the receiving entity provides a level of protection for Personal Data that is consistent with the standards described in this Policy and with Applicable Law.

These steps may include entering into appropriate data processing agreements, applying recognised transfer mechanisms and carrying out due diligence assessments of the data protection practices of receiving entities. If you would like further information about the safeguards applied to international data transfers involving your Personal Data, please contact us at [email protected].

14 Policy Amendments

qqnusa reserves the right to update, revise or replace this Privacy Policy at any time. The date of the most recent revision is shown in the metadata bar at the top of this document. Where material changes are made to this Policy, qqnusa will use reasonable efforts to notify registered Users, either through a notice posted prominently on the Platform or by direct communication to the email address associated with your account.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept any revision, you should cease using the Platform and may request account closure by contacting qqnusa at [email protected].

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy, the processing of your Personal Data or the exercise of your data subject rights, please contact the qqnusa team using the details below. All privacy-related enquiries are handled with care and confidentiality.

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Response Target: Within one business day for written privacy requests

For general platform and account questions, please consult the FAQ page before contacting support. To review the full terms governing your use of qqnusa, please see the Terms and Conditions.