Privacy Policy QB66 — Your Personal Data Protection

1 Information We Collect

Qb66 collects various types of information when you register, use the platform, or interact with our services. We only collect information that is genuinely necessary to provide you with a safe and quality experience.

1.1 Information You Provide Directly

• Full name, date of birth, and identity card number (MyKad) or passport
• Email address and mobile phone number
• Current residential address
• Bank account details, card numbers, or digital wallet information for deposit and withdrawal purposes
• KYC supporting documents such as identity card photos and utility bills
• Any communications you send to our support team

1.2 Information Collected Automatically

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Game session data including login times, games played, and total bet amounts
• Cookie data and similar tracking technologies (see Section 6)
• Platform activity logs for security and fraud prevention purposes

2 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. qb66 uses your information for the following purposes:

Qb66 will not use your data for any purposes other than those stated above without first obtaining your consent. If you have given consent to receive marketing communications, you may withdraw that consent at any time through your account settings or by contacting our support team.

3 Sharing Information with Third Parties

Qb66 does not sell or lease your personal data to any third party. However, we may share certain information in the following limited and controlled situations:

3.1 Approved Service Providers

We work with selected third-party service providers to support platform operations, including payment gateway providers, cloud services, and analytics tools. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for purposes specified by qb66.

3.2 Legal & Regulatory Requirements

Qb66 will disclose your information to the relevant authorities when required to do so by Malaysian law, court order, or direction from a lawful regulatory body. This includes disclosure to anti-money laundering agencies when necessary.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of business assets, user data may be transferred as part of that transaction. Members will be notified in advance before any such transfer takes place, and the new privacy policy will apply thereafter.

4 Data Security Measures

Protecting your data is qb66's highest priority. We implement multiple layers of technical and organizational security to ensure your data remains safe at all times:

• 256-bit SSL Encryption: All communications between the platform and your device are protected by industry-grade encryption
• Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using AES-256
• Two-Factor Authentication (2FA): We offer 2FA as an added security layer for your account
• 24/7 Monitoring: Our systems are monitored around the clock to detect any suspicious activity
• Regular Penetration Testing: We conduct regular security testing with independent security experts
• Role-Based Access Control: Internal staff may only access data within the scope of their assigned responsibilities

While we take all reasonable steps to protect your data, no system can guarantee absolute security. You also play an important role by keeping your password and account login credentials confidential.

5 Data Retention Period

Qb66 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. The following are general guidelines for our data retention periods:

• Active Account Data: Retained for the duration your account is active and for five years following account closure, to fulfil audit requirements
• Transaction Records: Retained for a minimum of seven years in accordance with Malaysian financial and anti-money laundering legal requirements
• Security Log Data: Retained for 12 months for investigation and fraud prevention purposes
• Support Communication Records: Retained for three years after the closure of the related support ticket
• Analytics Cookie Data: Typically expires within 12 to 24 months depending on the cookie type

Once the retention period has ended or when data is no longer needed, qb66 will securely delete or anonymise it using industry-approved methods.

6 Cookies & Tracking Technologies

Qb66 uses cookies and similar technologies to enhance the user experience, ensure platform security, and understand how members use our services. Cookies are small text files stored on your device when you browse the qb66 platform.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
• Performance Cookies: Helps us understand how users interact with the platform so we can continually improve the user experience.
• Preference Cookies: Saves your preferences such as language, display settings, and game choices so you don't have to reconfigure them each time.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

6.2 Managing Cookies

You can control and manage cookie settings through your web browser. Disabling certain cookies may affect the functionality of some parts of the platform. Essential cookies cannot be disabled as they are required for the basic operation of the qb66 platform.

7 Your Personal Data Rights

As a qb66 member, you have the following rights regarding your personal data that we hold, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of the above rights, contact our privacy team via live chat within the platform or by email at [email protected]. We will process your request within 30 business days.

8 Children's Data Protection

Qb66 services are strictly for individuals aged 18 and above. qb66 does not intentionally collect or process personal data of anyone under 18. Should we become aware that a child's personal data has been collected without proper age verification, we will promptly delete such data and close the associated account.

If you as a parent or guardian believe your child has registered an account on qb66 without authorization, please contact our support team immediately so we can take the appropriate action.

9 Cross-Border Data Transfers

In the course of operating the platform, your personal data may be transferred to and processed outside Malaysia, particularly by the cloud and technical infrastructure service providers we use. In all such cases, qb66 ensures that protections equivalent to or higher than Malaysia's PDPA standards apply to your data through:

• Binding data processing agreements with all third-party providers
• Selection of providers that comply with international security standards such as ISO 27001
• Standard data protection clauses covering all cross-border data transfers
• Regular audits of all service providers to ensure ongoing compliance

Qb66 does not transfer data to countries that lack adequate data protection without taking additional steps to ensure the security of your data.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how qb66 handles your personal data, please contact our Data Protection Officer through the following channels:

• Privacy Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 within the qb66 platform
• FAQ: Visit page FAQ us for answers to frequently asked questions

We will respond to all privacy-related inquiries within three business days. For data subject rights requests, we aim to resolve them within 30 business days as required by law.

This Privacy Policy is subject to periodic review and updates. Any significant changes will be communicated to members via their registered email or an in-platform notice at least 14 days before taking effect. Continued use of the qb66 platform after the effective date of such changes constitutes acceptance of the updated policy.