qr44 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how qr44 ("qr44", "we", "us", "our") collects, uses, stores, and protects the personal data of players and visitors who use the qr44 website at qr44.app and all associated services (collectively, the "Platform").

qr44 is committed to handling your personal data responsibly and in accordance with the data protection principles applicable under our international gaming authority licensing framework. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read together with our Terms & Conditions and Responsible Gaming policy, which form part of our overall regulatory obligations.

2. Data We Collect

2.1 Registration Data

When you create a qr44 account, we collect the information you provide, including your chosen username, email address, Malaysian mobile phone number (for OTP verification), date of birth, and any other information submitted during the registration process.

2.2 Identity Verification (KYC) Data

To comply with our anti-money laundering and know-your-customer obligations, we may collect copies of your national identity card (MyKad or passport), proof of address (such as a recent utility bill or bank statement from a Malaysian address), and other documentation required to verify your identity before processing withdrawals or unlocking higher account limits.

2.3 Financial Data

We record all deposit and withdrawal transactions associated with your qr44 account, including the payment method used (e.g., Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, DuitNow), transaction amounts in MYR, and transaction timestamps. We do not store full card numbers or online banking credentials — these are processed by our licensed payment partners.

2.4 Usage & Activity Data

We automatically collect data about how you use the qr44 Platform, including games played, bet amounts placed, session durations, pages visited, features accessed, and your account's betting history. This data is used to operate the Platform, resolve disputes, and personalise your experience.

2.5 Device & Technical Data

We collect technical information from your device when you access qr44, including your IP address, browser type and version, operating system, device identifiers, referring URLs, and general geolocation data (country/region level). This information is used for security, fraud prevention, and platform optimisation purposes.

2.6 Communications Data

If you contact qr44 via live chat, email, or any other support channel, we retain records of those communications, including the content of messages and the timestamps, to assist with resolving your query and improving our support services.

3. How We Use Your Data

qr44 uses your personal data for the following purposes:

• Account management: Creating, verifying, and administering your qr44 account, including identity verification and KYC compliance.
• Platform operation: Processing your deposits and withdrawals in MYR, settling game results and sportsbook wagers, and managing your rewards and bonus entitlements.
• Security & fraud prevention: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct.
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling patterns and applying responsible gaming tools or interventions where appropriate.
• Customer support: Responding to your queries, complaints, and account issues via live chat, email, or other support channels.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.
• Platform improvement: Analysing usage data, game performance, and player behaviour in aggregate to improve the qr44 Platform, add new features, and optimise the user experience.
• Legal compliance: Meeting our regulatory obligations under our gaming licence, including record-keeping, reporting, and responding to lawful requests from regulatory authorities.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Performance of a contract: Processing your account data, transactions, and gameplay activity is necessary to provide the qr44 service you have subscribed to.
• Legal obligation: KYC verification, AML record-keeping, and regulatory reporting are required by our gaming licence and applicable laws.
• Legitimate interests: Fraud prevention, security monitoring, and Platform analytics serve the legitimate interests of qr44 and our player community without overriding your privacy rights.
• Consent: Marketing communications and non-essential cookies are processed on the basis of your consent, which you may withdraw at any time.

5. Sharing Your Personal Data

5.1 Service Providers

qr44 shares personal data with trusted third-party service providers who assist in operating the Platform, including payment processors (for MYR transactions via Touch n Go eWallet, Boost, DuitNow, and Malaysian banks), game software providers, KYC verification services, and cloud hosting providers. All such providers are contractually required to handle your data securely and in accordance with this Policy.

5.2 Regulatory Authorities

We may disclose personal data to our licensing authority, relevant financial intelligence units, or law enforcement agencies where required by law or where we are under a legal obligation to do so. Such disclosures will be made only to the extent required and in accordance with applicable legal procedures.

5.3 No Sale of Data

qr44 does not sell, rent, or trade your personal information to third parties for their own commercial or marketing purposes. Any sharing of data is limited to what is necessary to operate the Platform and meet our legal obligations.

6. Data Retention

qr44 retains your personal data for as long as your account remains active and for a period thereafter as required by our licensing obligations. Specifically:

• Account and transaction records are retained for a minimum of 5 years following account closure, in compliance with AML regulatory requirements.
• KYC documents are retained for the same minimum 5-year period following the end of the business relationship.
• Support communications are retained for up to 3 years from the date of the last interaction.
• Marketing preference data is retained until you withdraw consent or request deletion.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised in accordance with our data destruction procedures.

7. Cookies & Tracking Technologies

qr44 uses cookies and similar technologies to operate and improve the Platform. The types of cookies we use include:

• Essential cookies: Required to maintain your login session, load your game preferences, and process in-session transactions. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to understand how players use the qr44 Platform in aggregate — which games are most popular, where players encounter errors, and how sessions typically flow. All analytics data is anonymised.
• Preference cookies: Remember your display settings, language preferences, and notification configurations between sessions.

You can manage or delete cookies through your browser settings. Disabling essential cookies may prevent you from logging into your qr44 account or using core Platform features.

8. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by qr44:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: Ask us to pause processing of your personal data in certain circumstances.
• Right to data portability: Receive a machine-readable copy of the personal data you have provided to qr44.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond to all verified requests within 30 calendar days.

9. Data Security

qr44 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and qr44 servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• Multi-factor authentication requirements for all internal qr44 staff accessing production systems.
• Continuous security monitoring and periodic third-party penetration testing of the Platform infrastructure.

Despite these measures, no system is entirely immune to security risks. In the event of a data breach that materially affects your personal data, qr44 will notify affected players and the relevant regulatory authority in accordance with applicable breach notification obligations.

10. Children's Privacy

The qr44 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person under this age threshold, we will immediately close the associated account and delete all related personal data. If you believe a minor has registered on the Platform, please notify us immediately via live chat or at [email protected].

11. International Data Transfers

qr44's infrastructure involves data processing in multiple jurisdictions. Where personal data is transferred outside of Malaysia, we ensure that appropriate safeguards are in place, including contractual data protection obligations on the recipient and transfer only to jurisdictions with equivalent data protection standards. Such transfers are conducted in compliance with our licensing authority's requirements and applicable data protection laws.

12. Changes to This Privacy Policy

qr44 may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal requirements, or business operations. Material changes will be communicated to registered players via email or a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Policy periodically. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

13. Contact & Complaints

For any privacy-related enquiries, data subject requests, or complaints regarding qr44's handling of your personal data, please contact us via:

• Live Chat: Available 24/7 via the chat icon on qr44.app — the fastest way to reach us.
• Email: [email protected]
• Priority hours: 08:00 – 00:00 MYT daily

If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the relevant supervisory authority under our gaming licence's jurisdiction. Details of the applicable authority are available upon request from our support team.