Privacy Policy

1 Introduction

qrpay888 ("we", "us", "the Operator", "the Platform") is committed to protecting the privacy and personal data of all Users who access and use our online casino and sports betting services at https://qrpay888.cam.

This Privacy Policy ("Policy") describes how qrpay888 collects, processes, stores, shares, and protects your personal information. It applies to all Users who register an account, make a deposit, place a bet, or otherwise interact with the Platform, including Malaysian players transacting via DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, and other supported payment channels.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, which together form the full agreement between you and qrpay888.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Data Controller" means qrpay888 as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of qrpay888 under our instruction.
• "Processing" means any operation performed on personal data — including collection, storage, use, disclosure, transmission, or deletion.
• "User" / "You" means any individual who accesses or uses the qrpay888 Platform.
• "Account" means the registered user account held on the qrpay888 Platform.
• "Cookies" means small text files placed on your device by the Platform to store session and preference information.
• "KYC" means Know Your Customer — the identity and age verification process conducted by qrpay888.
• "PDPA" means Malaysia's Personal Data Protection Act 2010 (Act 709), which governs the processing of personal data in commercial transactions in Malaysia.

3 Data We Collect

qrpay888 collects personal data through various interactions with the Platform. The categories of data we collect are set out below.

3.1 Registration Data

When you create an Account, we collect the following information: full legal name, date of birth, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Shah Alam, Petaling Jaya), email address, and Malaysian mobile phone number.

3.2 Identity Verification Data

To comply with our KYC obligations, we may collect copies of government-issued identity documents (e.g., Malaysian MyKad, passport), proof of address documents, and selfie photographs for liveness verification purposes.

3.3 Financial Data

We collect information relating to your transactions on the Platform, including deposit and withdrawal amounts, payment method details (e.g., Maybank2u account identifier, FPX transaction reference, DuitNow transfer record, e-wallet account associated with Touch 'n Go eWallet, Boost, or GrabPay), and betting history. We do not store full bank account passwords or complete card numbers.

3.4 Behavioural and Technical Data

We automatically collect certain technical information when you use the Platform, including: IP address, device type and operating system, browser type and version, pages visited and time spent, session duration, game history, and betting patterns. This data is used for security monitoring, fraud prevention, and platform improvement.

3.5 Communications Data

We retain records of communications between you and our support team, including live chat transcripts, email correspondence, and feedback submissions.

4 How We Use Your Data

qrpay888 processes your personal data for the following purposes:

• Account Management: To create and maintain your registered Account, verify your identity, and manage your login credentials.
• Service Delivery: To provide access to our casino games, sportsbook, live dealer tables, and betting markets — including EPL, Liga Super Malaysia, and UFC odds.
• Payment Processing: To process deposits via Maybank2u, CIMB Clicks, Public Bank Online, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay, and to facilitate withdrawal of winnings to your registered Malaysian bank account.
• KYC and Age Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with our regulatory obligations.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, bonus abuse, and multi-accounting.
• Legal and Regulatory Compliance: To comply with applicable laws, anti-money laundering (AML) regulations, and reporting obligations to relevant authorities.
• Responsible Gambling: To monitor betting behaviour for signs of problem gambling and to implement player protection tools such as deposit limits, loss caps, and self-exclusion where applicable.
• Communications and Support: To respond to your enquiries, provide customer support, and send service-related notifications.
• Platform Improvement: To analyse usage patterns, fix technical issues, and improve the overall user experience on qrpay888.
• Marketing: To send you promotional offers and bonus notifications, where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time.

5 Legal Basis for Processing

qrpay888 processes your personal data on one or more of the following lawful bases:

1. Contractual Necessity: Processing required to fulfil the contract between you and qrpay888 — including Account registration, payment processing, and service delivery.
2. Legal Obligation: Processing necessary to comply with applicable laws, including KYC requirements, AML regulations, and responsible gambling obligations.
3. Legitimate Interests: Processing carried out in the legitimate interests of qrpay888, such as fraud prevention, security monitoring, and platform analytics, provided those interests are not overridden by your rights.
4. Consent: Processing carried out on the basis of your explicit consent — for example, direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6 Data Sharing & Disclosure

qrpay888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your data in the following circumstances:

6.1 Service Providers and Data Processors

We engage trusted third-party service providers to assist in delivering the Platform — including payment processors (e.g., FPX gateway operators, DuitNow network providers), KYC and identity verification platforms, cloud hosting providers, and customer support software vendors. All such processors are bound by contractual data protection obligations and are prohibited from using your data for any purpose beyond the services they provide to qrpay888.

6.2 Regulatory and Legal Disclosure

We may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. This includes cooperation with anti-money laundering investigations and the reporting of suspicious financial activity.

6.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of qrpay888's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections remaining in place.

7 Cookies & Tracking Technologies

qrpay888 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies may be set when you visit our site:

• Essential Cookies: Strictly necessary for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings, chosen odds format, and last-visited game category.
• Analytics Cookies: Used to collect aggregated data on Platform usage — including which pages are visited most frequently and how long Users spend on each section — to help us improve performance.
• Security Cookies: Used to detect and mitigate fraudulent activity, including bot detection and unusual login patterns.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect your experience on the Platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

8 Data Retention

qrpay888 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Registration Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with AML and KYC record-keeping requirements.
• Transaction Records: Retained for a minimum of seven (7) years to comply with financial reporting and anti-money laundering regulations.
• KYC and Identity Documents: Retained for the period mandated by our licensing authority and applicable law — typically five (5) years post-closure.
• Communications Data: Support correspondence is retained for up to three (3) years from the date of the interaction.
• Behavioural and Technical Data: Typically retained for up to twenty-four (24) months for analytics and fraud prevention purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our internal data disposal procedures.

9 Data Security

qrpay888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the qrpay888 Platform is encrypted using the same standard employed by Malaysian banking institutions such as Maybank2u and CIMB Clicks.
• Encrypted Data Storage: Sensitive personal data is stored in encrypted form on secure, access-controlled servers.
• Access Controls: Access to personal data within the organisation is restricted on a strict need-to-know basis, with role-based access permissions.
• Multi-Factor Authentication: Administrative access to systems holding personal data requires multi-factor authentication.
• Continuous Monitoring: Our infrastructure is continuously monitored for intrusions, anomalies, and security incidents.
• Regular Security Audits: Independent security assessments are conducted periodically to identify and remediate vulnerabilities.

Despite these measures, no system can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, qrpay888 will notify you and the relevant supervisory authorities in accordance with applicable legal requirements.

10 Your Rights

As a User of the qrpay888 Platform, you hold the following rights in relation to your personal data, subject to applicable law and any overriding legal obligations:

• Right of Access: You have the right to request a copy of the personal data we hold about you and information about how it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected or updated.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Note that we may be unable to fulfil this request where retention is required by law (e.g., KYC and transaction records).
• Right to Restriction: You may request that we temporarily restrict the processing of your data while a dispute or correction request is being resolved.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, and to opt out of direct marketing at any time.
• Right to Data Portability: Where technically feasible, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Protection team via live chat or email at [email protected]. We will respond to all verified requests within a reasonable timeframe, typically within thirty (30) calendar days of receipt.

11 International Data Transfers

The qrpay888 Platform is operated by an internationally licensed entity. As a result, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, qrpay888 ensures that appropriate safeguards are in place to protect your data in accordance with applicable privacy laws, including the use of standard contractual clauses or equivalent mechanisms.

By using the Platform, you acknowledge and consent to the transfer of your personal data to our servers and processing systems located outside Malaysia, subject to the protections described in this Policy.

12 Protection of Minors

qrpay888 is strictly an adult platform. Our services are available only to individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.

If we discover that personal data has been collected from an underage individual, we will immediately close the associated Account, void all associated transactions, and securely delete the data in question. Parents and guardians who become aware that their child has accessed or attempted to access the qrpay888 Platform should contact us immediately at [email protected] so that we can take prompt action.

We recommend the use of parental control and internet filtering software for households with minors to prevent inadvertent access to gambling websites.

13 PDPA Compliance

qrpay888 acknowledges the applicability of Malaysia's Personal Data Protection Act 2010 (Act 709) to the extent relevant to our processing activities involving Malaysian Users. We are committed to upholding the seven Data Protection Principles enshrined in the PDPA, specifically:

1. General Principle: Personal data is processed only with the consent of the data subject or as otherwise permitted by law.
2. Notice & Choice Principle: Users are informed about the purposes for which their data is collected and are given the opportunity to choose how it is used for non-essential purposes, including direct marketing.
3. Disclosure Principle: Personal data is not disclosed to third parties without consent, except as provided for in this Policy or as required by law.
4. Security Principle: We implement practical steps to protect personal data from loss, misuse, modification, and unauthorised access.
5. Retention Principle: Personal data is not retained longer than necessary for the fulfilment of its stated purpose.
6. Data Integrity Principle: We take reasonable steps to ensure that personal data is accurate, complete, and up to date.
7. Access Principle: Users are entitled to access and correct their personal data held by qrpay888.

14 Policy Amendments

qrpay888 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our practices, applicable law, or the services we provide. When material changes are made, we will notify registered Users by email or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Effective Date" displayed at the top of this Policy indicates the date of the most recent revision. Continued use of the Platform following notification of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by qrpay888, please contact our Data Protection team directly. We are available 24 hours a day, 7 days a week via live chat on the Platform.

For written enquiries, please use the contact details below:

When contacting us regarding a data rights request, please include your registered Account username and a clear description of your request to help us process it as efficiently as possible.