QQ338 Privacy Policy – Our Commitment to Protecting the Personal Data of Every Malaysian Member

This Privacy Policy is issued by QQ338 Entertainment Ltd ("QQ338", "we", "our") and applies to all users of the QQ338 platform — including the qq338.best website, mobile applications and all related services we provide to Malaysian members. By registering an account, using our services or accessing the QQ338 platform, you agree to be fully bound by the terms of this Privacy Policy.

QQ338 takes your privacy seriously. We understand that when you entrust us with your personal information — including your name, phone number, financial details and transaction data — you are placing invaluable trust in us. We honour that trust wholeheartedly through a clear privacy policy, robust security systems and responsible data handling practices.

QQ338 collects various categories of personal data depending on how you interact with our platform. The following are the types of data we may collect:

• Personal Identification Data: Full name, identity card number (MyKad), date of birth, gender and nationality.
• Contact Data: Malaysian mobile number, email address, and residential address.
• Account Data: Username, password (stored in encrypted hash form), account preferences and login history.
• Financial Data: Payment method details (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX), deposit and withdrawal history, and transaction records.
• Platform Activity Data: Slots game history, live casino betting records, Sports Betting and e-sports records, and bonus activity.
• Technical Data: IP address, device type, operating system, browser version and approximate geolocation data.
• Communication Data: Customer support conversation records, feedback you have provided and email correspondence.

QQ338 collects your personal data through several distinct channels, all with your knowledge and consent:

• Account Registration: When you register a new account with QQ338, you provide us directly with basic personal information such as your name, phone number, and email address.
• Identity Verification (KYC): During the identity verification process, you will be required to submit identification documents such as a copy of your MyKad or Malaysian passport for legal compliance purposes.
• Financial Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay or FPX, our system records the necessary transaction details.
• Platform Usage: Gaming activity data is collected automatically when you use QQ338's services, including slots, live casino, poker, Sports Betting on the Malaysia Super League, BWF badminton, and e-sports.
• Cookies & Tracking Technologies: The QQ338 website uses cookies and similar tracking technologies to enhance the user experience — as further explained in Clause 7.
• Customer Support: When you contact QQ338's support team via live chat, email or WhatsApp, we record those conversations for quality assurance and documentation purposes.

QQ338 uses the personal data collected solely for the following purposes:

• Account Management: To create, maintain and manage your QQ338 account, including login, account security and personal settings.
• Transaction Processing: To process deposits via Touch 'n Go, GrabPay, DuitNow and FPX, and to handle winnings withdrawals to your Malaysian bank account or e-wallet.
• Service Provision: To give you access to all QQ338 games and services, including slots, Live Casino, poker, football, table games, e-sports and Sports Betting.
• Legal Compliance: To fulfil legal obligations under the PDPA 2010, anti-money laundering (AML) requirements, Know Your Customer (KYC) requirements and directions from relevant authorities.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, collusion, bot usage, and other security breaches.
• Customer Support: To respond to your enquiries, resolve complaints and provide technical assistance through QQ338's support channels.
• Marketing (with Consent): To send information about QQ338 bonuses, promotions, and platform updates — exclusively to members who have given their consent to receive marketing communications.
• Platform Improvements: To analyse usage patterns (in aggregated, anonymised form) for the purpose of improving user experience and QQ338 platform features.

QQ338 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, in certain limited circumstances, we may share your personal data with the following third parties:

• Payment Service Providers: E-wallet providers such as Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as FPX service providers and QQ338's partner banks in Malaysia, receive the transaction information necessary to process your deposits and withdrawals.
• Game Providers: Authorised game software providers may receive session data required for game operations — all subject to strict confidentiality agreements.
• KYC Service Providers: Third parties conducting identity verification on behalf of QQ338 are bound by data protection agreements.
• Malaysian Authority: Malaysian law enforcement authorities such as the PDRM and Bank Negara Malaysia, when required by law or a valid court order.
• Auditors & Professional Advisors: Audit firms, legal counsel, and business advisors bound by professional confidentiality obligations.

In all cases above, data sharing is limited strictly to the information required for the stated purpose. QQ338 ensures that all third parties receiving your data are bound by data protection agreements that comply with Malaysia's PDPA 2010.

QQ338 continually invests in advanced data security infrastructure to ensure your personal information is protected at all times. Our key security measures include:

• Data Encryption in Transit: All communications between your device and QQ338's servers are protected by Transport Layer Security (TLS) 1.3 encryption with a 256-bit SSL certificate — ensuring no third party can intercept or read the data transmitted.
• Data Encryption at Rest: Sensitive data such as passwords is stored in encrypted hash form using the bcrypt algorithm. Financial information is stored in a database encrypted with AES-256.
• Two-Factor Authentication (2FA): QQ338 offers two-factor authentication for all accounts — an added layer of security that combines your password with an OTP code sent to your registered Malaysian mobile number.
• 24/7 Security Monitoring: QQ338's automated security monitoring system operates around the clock to detect suspicious activity, intrusion attempts, and anomalies that could compromise the security of your account.
• Regular Security Audits: QQ338 undergoes periodic independent security audits by qualified third parties to assess and strengthen the overall security posture of our platform.
• Internal Access Controls: Access to member personal data within the QQ338 system is restricted to staff who genuinely require it to perform their duties, in accordance with the principle of least privilege.

The QQ338 website uses cookies and similar tracking technologies to enhance your experience and keep the platform running smoothly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform operations such as login session authentication, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects anonymised information about how you use the QQ338 platform — helping us understand which pages are visited most frequently and optimise the overall user experience.
• Functional Cookies: Storing your preferences such as display language, preferred betting limits and interface settings, enabling us to deliver a more personalised experience.
• Analytics Cookies: We use first-party analytics tools to understand platform usage patterns in aggregate for the purpose of continuous improvement.

You can manage cookie settings through your internet browser. Please note, however, that disabling certain cookies may affect the functionality and user experience of the QQ338 platform. For more details on managing cookies, refer to the help documentation of your browser.

QQ338 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Malaysian law. Our data retention policy is as follows:

• Active Account Data: For as long as your account remains active on the QQ338 platform and for 2 years following your last activity.
• Financial Transaction Records: Minimum 7 years, in line with Malaysia's anti-money laundering legislation and financial reporting requirements.
• KYC Documents: For the duration of the active account and a minimum of 5 years after account closure, as required by applicable compliance obligations.
• Support Communication Logs: 3 years from the date of conversation for service quality and dispute resolution purposes.
• Gaming Activity Data: 2 years from the date of activity, for dispute resolution and security analysis purposes.
• Marketing Data: Until you withdraw consent to receive marketing communications from QQ338.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by QQ338:

• Right of Access: You have the right to request a copy of the personal data we hold about you. QQ338 will provide the requested information within 21 business days.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or outdated. Corrections will be processed within 14 business days.
• Right to Withdraw Consent: You may withdraw consent for certain data processing — particularly for marketing communications — at any time, without affecting the validity of any processing that took place prior to your withdrawal.
• Right to Restrict Processing: In certain circumstances, you may request that QQ338 restrict the processing of your personal data while your request is being investigated.
• Right to Complain: If you believe your privacy rights have been violated, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact QQ338's privacy team by email at support@qq338.best stating the specific right you wish to exercise and your account details. We will respond to your request within a reasonable timeframe in accordance with PDPA requirements.

The QQ338 platform is intended for individuals aged 18 and above only. QQ338 does not knowingly collect, process or store personal data from individuals under the age of 18.

Should we discover that personal data of a minor has been collected without our knowledge — for example, through account registration using false age information — we will immediately take the following steps:

• Closing the account in question immediately.
• Securely deleting all such personal data belonging to the minor.
• Reporting the incident to the relevant Malaysian authorities where necessary.

Parents and guardians who become aware that their minor child has registered or used the QQ338 platform are urged to contact our support team immediately at support@qq338.best for prompt action.

QQ338 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data handling practices, applicable laws, or platform developments.

For any material changes to this Privacy Policy, QQ338 will:

• Notifying you via in-platform QQ338 notifications at least 14 days before changes take effect.
• Sending a notification email to your registered email address for changes that significantly affect your privacy rights.
• Displaying the latest "Updated" date at the top of this Privacy Policy.

Your continued use of the QQ338 platform after any amendments take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your QQ338 account and discontinue use of our services.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how QQ338 handles your personal data, please contact our Privacy Officer through the following channels:

• Email: support@qq338.best (please state "Privacy Enquiry" in the email subject line)
• Live Chat: Via the QQ338 platform — available 24 hours a day, 7 days a week in Bahasa Melayu

QQ338 is committed to responding to all privacy enquiries within 3 business days. For more complex complaints requiring thorough investigation, we will provide a progress update within 14 business days.

If you are dissatisfied with QQ338's response to your privacy complaint after going through our internal process, you have the right to escalate the matter to the Personal Data Protection Commissioner of Malaysia for further resolution.