qrpay44 Privacy Policy for Malaysian Players

Definitions

For the purposes of this Privacy Policy the following terms carry the meanings set out below. Singular expressions include the plural where context requires.

"Personal Information"

Any data that identifies or could reasonably be used to identify a natural person, including name, identity document details, residential address, email address, phone number, payment account references and device identifiers.

"Processing"

Any operation performed on personal information, including collection, storage, retrieval, use, disclosure, restriction and deletion.

"Account"

The individual profile registered by an eligible player for access to qrpay44 services and content.

"Payment Information"

References to MYR payment methods used for deposits and withdrawals, such as Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX, together with associated transaction references.

"Device Data"

Technical information generated automatically when a device connects to qrpay44, including IP address, browser type, operating system version and session timestamps.

Information We Collect

qrpay44 may collect the following categories of personal information, depending on the nature of your interaction with the website:

• Registration details: full name, date of birth, nationality, residential address, email address and contact number provided when creating an account.
• Identity verification materials: copies of government-issued identification, proof of address documents or other verification evidence requested to confirm eligibility and comply with reasonable security procedures.
• Payment references: transaction identifiers, amounts in MYR, payment method labels and confirmation records associated with deposits and withdrawals processed through eligible Malaysian payment services.
• Account activity records: login history, session durations, game or market participation records, balance adjustments, bonus claims and responsible-play limit preferences.
• Device and connectivity data: IP address, device type, browser configuration, geographic region at point of connection and session timestamps.
• Support communications: written messages, queries and associated account context submitted through qrpay44 communication channels.

qrpay44 does not request or store full bank account passwords, complete e-wallet PINs, one-time authentication codes or credit card numbers in full. Players should never voluntarily share such credentials with any party claiming to represent qrpay44.

Purposes of Data Processing

Personal information collected by qrpay44 is used for the following purposes:

• Account administration: creating, maintaining, verifying and closing player accounts in accordance with the Terms & Conditions.
• Transaction processing: facilitating MYR deposits and withdrawals, maintaining transaction records and resolving payment queries involving Maybank2u, CIMB Clicks, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay.
• Identity and age verification: confirming that players meet the minimum age requirement of 21 years and providing accurate registration details.
• Security and fraud prevention: monitoring for unauthorised access, suspicious activity, payment reversal abuse, duplicate account creation and other conduct prohibited under the Terms & Conditions.
• Responsible gambling controls: administering deposit limits, loss limits, session controls, cooling-off periods and self-exclusion requests.
• Service improvement: analysing aggregated usage patterns to improve navigation, content organisation and the overall qrpay44 experience for Malaysian users.
• Legal and compliance obligations: retaining records as required by applicable laws, regulations or law-enforcement requests made in accordance with lawful authority.
• Communications: responding to support queries, sending account-related notifications and, where permitted, providing relevant information about qrpay44 content.

Legal Bases for Processing

qrpay44 processes personal information only where a lawful basis exists. Depending on the specific activity, the applicable bases include:

• Contractual necessity: processing required to operate a player account, process a transaction or fulfill obligations arising from the qrpay44 Terms & Conditions.
• Legal obligation: processing required to meet applicable statutory, regulatory or enforcement requirements.
• Legitimate interests: processing necessary for fraud prevention, security monitoring, responsible-play enforcement and service continuity, provided those interests are not overridden by the individual's rights in the circumstances.
• Consent: where processing falls outside the above bases and consent is the appropriate mechanism, qrpay44 will seek it clearly and allow it to be withdrawn without detriment to the core service.

Cookies and Tracking Technologies

qrpay44 uses cookies and similar technologies to support website operation, maintain session continuity, remember account preferences, measure page performance and detect potential security anomalies. Cookies do not themselves collect information that permanently identifies a person, but they may be associated with account data already held.

Essential cookies are necessary for qrpay44 to function and cannot be disabled without affecting core features. Analytical cookies, where used, operate on aggregated data. Players may manage non-essential cookie preferences through their browser settings, although doing so may affect page functionality. qrpay44 does not use cookies to build advertising profiles or sell browsing data to third parties.

Sharing and Disclosure

qrpay44 does not sell, rent or trade personal information to third parties for marketing purposes. Disclosure of personal information may occur in the following limited circumstances:

• Payment providers: transaction references shared with Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay or other eligible payment services to process or investigate an MYR transaction.
• Identity verification services: document details shared with verification providers for the purpose of confirming age, identity and residential address.
• Legal and regulatory authorities: information disclosed where required by applicable law, court order, regulator instruction or lawful investigation.
• Security and fraud prevention partners: aggregated or pseudonymised data shared with providers assisting in the detection of prohibited conduct or account compromise.
• Service providers: processors operating under contractual data-protection obligations for hosting, support infrastructure, analytics and communication services.

Any third party receiving personal information from qrpay44 is required to process it only for the stated purpose and subject to appropriate safeguards.

Data Retention

qrpay44 retains personal information for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by law. The following considerations apply:

• Account records, transaction history and verification documents may be retained after closure to meet statutory, regulatory or fraud-prevention obligations.
• Responsible-play records, including self-exclusion requests, are retained to prevent inadvertent re-activation of restricted accounts.
• Support communications are retained for a reasonable period to provide context for subsequent queries and verify the handling of past requests.
• Device and session data used for security monitoring is typically retained for a shorter period consistent with its operational purpose.

When personal information is no longer required and no legal basis for continued retention exists, qrpay44 will take reasonable steps to delete or anonymise it.

User Rights

Players whose personal information is held by qrpay44 may exercise the following rights, subject to applicable legal limitations and the specific circumstances of each request:

• Right of access: you may request confirmation of whether qrpay44 holds personal information about you and, if so, a description of the categories held.
• Right to correction: you may ask qrpay44 to correct inaccurate or incomplete personal information held in your account.
• Right to erasure: you may request deletion of personal information where retention is no longer justified, subject to overriding legal or security obligations.
• Right to restrict processing: you may ask qrpay44 to limit specific processing activities while a dispute or verification is pending.
• Right to object: you may object to processing based on legitimate interests, including certain types of profiling.
• Right to withdraw consent: where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing.

Requests will be handled within a reasonable period. qrpay44 may need to verify your identity before acting on a request. Where a request cannot be fulfilled fully, qrpay44 will explain the reason.

Security of Personal Information

qrpay44 applies technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss or destruction. These measures are reviewed periodically in light of new risks and available technology.

Players contribute to account security by choosing a strong, unique password, enabling available authentication protections, avoiding shared or public devices for account access, and logging out after each session. qrpay44 will never ask you to disclose your full password, banking credentials, e-wallet PIN or one-time authentication code.

If you suspect that your qrpay44 account or associated payment credentials have been compromised, contact the support team immediately using the email address stated in this policy.

Children and Minors

qrpay44 is intended exclusively for adults aged 21 and above. qrpay44 does not knowingly collect or process personal information relating to persons under 21 years of age. If personal information of a person under 21 is discovered to have been collected, it will be deleted from active records promptly.

Account holders who share devices with family members, including persons under 21, are responsible for preventing minors from accessing qrpay44. This includes logging out after each session, using device security features and keeping account credentials private.