Privacy Policy

This Privacy Policy ("Policy") is issued by QQASIA88 ("Company", "we", "us", "our") and governs the collection, processing, storage, and disclosure of personal data relating to all users ("User", "you", "your") of the website located at https://qqasia88.cam and any associated services, applications, or platforms operated by QQASIA88 (collectively, the "Platform").

QQASIA88 provides online casino gaming, sports betting, and related entertainment services primarily targeting players across Malaysia — including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout the country. In the course of providing these services, we necessarily collect, process, and store certain categories of personal data as described in this Policy.

QQASIA88 takes its obligations as a data controller seriously. We are committed to handling all personal data in a manner that respects user privacy, meets applicable data protection standards, and reflects the trust that our players place in us when they choose QQASIA88 as their gaming platform.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following definitions apply:

QQASIA88 collects the following categories of Personal Data from Users of the Platform:

3.1 Registration and Identity Data

• Full legal name as it appears on government-issued identification.
• Date of birth (used for age verification — 21+ requirement strictly enforced).
• Gender (where voluntarily provided).
• Residential address, including city and postcode.
• Email address.
• Mobile phone number.
• Username and encrypted password credentials.

3.2 KYC Verification Documents

• Copy of Malaysian MyKad, passport, or other government-issued photographic identity document.
• Proof of address documents (e.g., utility bill, bank statement).
• Source of funds documentation where required for enhanced due diligence.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts in MYR and payment method used.
• Payment method details (e.g., Touch 'n Go eWallet identifier, Maybank or CIMB account reference, DuitNow QR token — not full account numbers).
• Cryptocurrency wallet addresses where applicable.
• Transaction history, balance records, and bonus activity.

3.4 Gaming Activity Data

• Betting history, game sessions, wagering volumes, and game preferences.
• Sports betting activity including markets wagered on (EPL, Liga Super Malaysia, UFC, and others).
• Responsible gambling tool usage, including deposit limits set and self-exclusion requests.

3.5 Technical and Device Data

• IP address and approximate geolocation derived therefrom.
• Device type, operating system, and browser information.
• Session duration, page views, and navigation patterns within the Platform.
• Cookie identifiers and similar tracking technologies as described in Section 8.

3.6 Communications Data

• Records of live chat, email, and support ticket communications between you and QQASIA88.
• Survey responses or feedback submitted voluntarily.

QQASIA88 collects Personal Data through the following channels and mechanisms:

• Direct Submission: Information you actively provide during account registration, KYC verification, payment processing, support interactions, or when voluntarily updating your account profile.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, session data, and browsing activity within the Platform. This data is collected via server logs, cookies, and similar tracking technologies.
• Payment Service Providers: Transaction confirmation and status data received from payment processors including FPX, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network confirmations.
• Gaming Systems: Betting activity, game round results, and session data generated automatically by the gaming platform as you use our services.
• Third-Party Verification Services: Identity verification outcomes from KYC service providers used to confirm the accuracy of submitted identification documents.
• Anti-Fraud and Security Systems: Risk signals and anomaly detection data generated by our fraud prevention and security monitoring infrastructure.

QQASIA88 processes Personal Data for the following purposes:

QQASIA88 processes Personal Data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions agreed between QQASIA88 and the User — including account management, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including AML/CTF obligations, age verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing conducted for QQASIA88's legitimate business interests — including fraud prevention, Platform security, and aggregated analytics — where those interests are not overridden by the rights and interests of Data Subjects.
• Consent: Where required by law and not covered by another legal basis, QQASIA88 will obtain your explicit consent before processing your Personal Data — particularly in relation to marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

QQASIA88 does not sell your Personal Data to any third party. We may share your data only in the following limited circumstances:

• Payment Processors: Transaction data is shared with relevant payment service providers — including FPX network operators, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processors — solely to facilitate your deposits and withdrawals. These providers process your data under their own privacy frameworks and QQASIA88's data processing requirements.
• KYC and Identity Verification Services: Identity documentation submitted for KYC purposes may be processed by contracted identity verification service providers acting as data processors on QQASIA88's behalf.
• Gaming Technology Providers: Game outcome data and session information may be shared with licensed game providers to resolve disputes, ensure game integrity, or comply with provider audit requirements.
• Legal and Regulatory Authorities: QQASIA88 may disclose Personal Data to government authorities, regulatory bodies, or law enforcement agencies where required by applicable law or by a valid legal order — including in connection with AML/CTF investigations.
• Professional Advisors: Legal counsel, auditors, and accountants may access Personal Data on a need-to-know basis under professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of QQASIA88's business or assets, Personal Data may be transferred to the acquiring entity, subject to that entity assuming obligations equivalent to those in this Policy.

The QQASIA88 Platform uses cookies and similar tracking technologies to ensure the Platform operates correctly, improve user experience, and maintain security. The following types of cookies are deployed:

You may configure your browser to decline non-essential cookies at any time. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly and may result in inability to access your account. Instructions for managing cookie preferences are available within your browser's settings documentation.

QQASIA88 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active Account Data: Personal Data associated with an active QQASIA88 account is retained for the duration of the account's active status and for a period following account closure as required by applicable law and legitimate business purposes.
• KYC and Identity Data: Identity verification documentation is retained for a minimum period in accordance with applicable AML/CTF regulatory requirements, which typically mandate retention for a prescribed number of years following the conclusion of a business relationship.
• Transaction Records: Financial transaction records in MYR and cryptocurrency are retained for the period required under applicable financial record-keeping obligations.
• Communications Records: Support communications are retained for a period sufficient to enable dispute resolution and regulatory audit, after which they are securely deleted or anonymised.
• Marketing Data: Where processing is based on consent, data used for marketing communications is retained until consent is withdrawn, following which it is promptly deleted from active marketing systems.

Following the expiry of the applicable retention period, Personal Data is securely and irreversibly deleted or anonymised such that it can no longer be associated with any individual User.

QQASIA88 implements comprehensive technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and the QQASIA88 Platform is encrypted using 256-bit SSL/TLS protocols. HTTPS is enforced across all pages and services.
• Encryption at Rest: Sensitive data stored in QQASIA88's systems — including identity documents and financial records — is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to Personal Data within QQASIA88's internal systems is restricted on a strict need-to-know basis. Staff with data access privileges are subject to confidentiality obligations and regular security training.
• Multi-Factor Authentication: Account access is protected by multi-factor authentication options, and suspicious login attempts trigger automated security alerts.
• Fraud Monitoring: Automated fraud detection systems monitor Platform activity around the clock to identify and respond to anomalous behaviour indicative of account takeover, payment fraud, or prohibited activity.
• Regular Security Audits: QQASIA88's security posture is subject to periodic internal review and, where appropriate, independent assessment by qualified security professionals.

As a Data Subject, you hold the following rights in respect of your Personal Data processed by QQASIA88. To exercise any of these rights, please contact our support team using the details in Section 15.

The QQASIA88 Platform serves players primarily within Malaysia. However, in the course of operating our services, certain Personal Data may be processed by our contracted service providers — including technology infrastructure providers, KYC services, and gaming platform components — that are located outside Malaysia.

Where Personal Data is transferred to third-party processors or sub-processors located outside Malaysia, QQASIA88 ensures that appropriate safeguards are in place to protect that data, including:

• Data processing agreements that impose obligations on the recipient equivalent to those under this Privacy Policy.
• Transfer only to service providers operating in jurisdictions with adequate data protection frameworks, or under contractual protections that provide equivalent safeguards.
• Regular review of third-party data processor arrangements to confirm ongoing compliance with applicable data protection standards.

By using the QQASIA88 Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this section, where such transfers are necessary to provide the services you have requested.

QQASIA88 strictly prohibits the use of its Platform by individuals under the age of 21 years. Our services are intended exclusively for adult players who meet the minimum age requirement and are legally permitted to engage in real-money gaming activity.

We do not knowingly collect Personal Data from individuals under 21 years of age. If QQASIA88 becomes aware that Personal Data has been collected from a person under this age threshold, that data will be immediately deleted, the associated account suspended, and the matter handled in accordance with our responsible gambling obligations.

If you believe that a minor has accessed or registered on the QQASIA88 Platform, please contact our support team immediately at [email protected]. We take age compliance extremely seriously and will investigate and act on all such reports promptly.

QQASIA88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform services. Where changes are material — affecting how we collect, use, or disclose Personal Data in ways that could impact your privacy rights — we will provide reasonable advance notice by posting the updated Policy on the Platform and, where appropriate, notifying registered users by email.

The "Last Updated" date at the top of this page indicates when the most recent revision was published. Your continued use of the QQASIA88 Platform following the publication of any amended Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to remain informed of how QQASIA88 handles your Personal Data. Previous versions of this Policy are available on request.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by QQASIA88, please contact us through the following channels:

• 24/7 Live Chat: Available directly on the QQASIA88 Platform. Recommended for urgent privacy concerns, account security issues, or immediate data access requests.
• Email: [email protected] — for formal data subject access requests, erasure requests, and written privacy enquiries. Please include your registered username and a description of your request. Allow up to 5 business days for a substantive response to privacy-related correspondence.

When submitting a data rights request, please clearly identify: (1) the specific right you wish to exercise, (2) your registered QQASIA88 username, and (3) a government-issued identity document reference for verification purposes. QQASIA88 will not fulfil data rights requests without first verifying the identity of the requesting party to protect against unauthorised data disclosure.