Privacy Policy

1 Who We Are

qrpay44 ("we", "us", "our") is the operator of the online gaming platform accessible at qrpay44.win (the "Platform"). qrpay44 acts as the data controller in respect of personal data collected from members, visitors, and prospective members of the Platform. As data controller, qrpay44 determines the purposes and means of processing personal data collected via the Platform.

qrpay44 operates under an international gaming authority licence. As a condition of that licence, qrpay44 is subject to ongoing data protection and anti-money laundering compliance obligations, which in part govern how and for how long member data is processed and retained.

For all privacy-related enquiries, the qrpay44 data protection contact is reachable at the email address provided in Section 13 of this Policy.

2 Personal Data We Collect

qrpay44 collects personal data from you in several ways: directly when you register an account or contact support; automatically through your use of the Platform; and, where necessary, from third-party sources for identity and age verification purposes.

qrpay44 does not collect special category personal data (e.g., health data, racial or ethnic origin, political opinions) except where voluntarily disclosed by a Member in the context of a responsible gaming intervention or support request, and then only to the extent strictly necessary to provide appropriate assistance.

3 How We Use Your Personal Data

qrpay44 processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your qrpay44 member account, verify your identity, and process your registration.
• Service Delivery: To enable you to access and use all Platform features including casino games, sportsbook betting, live dealer tables, and the MYR wallet.
• Payment Processing: To process deposits and withdrawals via Touch n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, and USDT TRC20; to verify payment instrument ownership; and to comply with financial crime prevention requirements.
• Legal and Regulatory Compliance: To meet our obligations under our international gaming licence, including anti-money laundering (AML), know-your-customer (KYC), responsible gaming, and age verification requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling and to administer self-exclusion, deposit limit, and reality check settings requested by Members.
• Customer Support: To respond to your enquiries, process complaints, and maintain records of support interactions.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS, subject to your marketing preferences. You may opt out of marketing communications at any time.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving Platform performance, usability, and game content.

4 Legal Basis for Processing

qrpay44 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions) — including account management, game access, and payment processing.
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including AML, KYC, gaming licence conditions, and tax reporting requirements.
• Legitimate Interests: Processing is necessary for qrpay44's legitimate interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and interests.
• Consent: For marketing communications and certain non-essential cookies, qrpay44 relies on your explicit consent. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Sharing Your Personal Data

qrpay44 does not sell your personal data to any third party. qrpay44 may share your personal data with the following categories of recipient only to the extent necessary and for defined purposes:

• Payment Service Providers: Financial institutions and e-wallet operators (including Touch n Go, Boost, GrabPay, Maybank, CIMB, Public Bank) to facilitate the processing of deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification services engaged to validate the identity documents and date of birth of Members in fulfilment of our licensing obligations.
• Game Studios and Technology Providers: Licensed game content providers whose games are offered on the qrpay44 Platform receive session and gameplay data as necessary to deliver game functionality. These providers are contractually bound to use data only for service delivery.
• Regulatory and Law Enforcement Authorities: qrpay44 may disclose personal data to gaming regulators, financial intelligence units, tax authorities, and law enforcement agencies where required by law or in response to a lawful demand.
• Fraud Prevention Services: Third-party fraud detection and risk management providers who assist qrpay44 in identifying and preventing fraudulent activity on the Platform.
• Professional Advisers: Legal, accounting, and audit professionals engaged by qrpay44 who are subject to professional confidentiality obligations.

6 Cookies & Tracking Technologies

qrpay44 uses cookies and similar tracking technologies to operate the Platform, analyse usage patterns, and deliver a personalised member experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without disabling core Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how Members navigate the Platform, including which pages are visited most frequently and where errors occur. This data is used exclusively to improve Platform performance.
• Functionality Cookies: Remember your preferences such as language settings, display preferences, and previously viewed game categories to provide a more consistent experience.
• Marketing Cookies: Used — with your consent — to track your engagement with qrpay44 promotional communications and to avoid showing you offers you have already seen or acted upon. You may withdraw consent for marketing cookies at any time via the cookie preference centre accessible from the Platform footer.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the qrpay44 Platform.

7 Data Retention

qrpay44 retains your personal data for the periods set out below, after which data is securely deleted or anonymised:

8 Security Measures

qrpay44 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit AES encryption for stored personal and financial data at rest.
• TLS 1.3 encryption for all data transmitted between your device and the qrpay44 Platform.
• Role-based access control ensuring that personnel can only access personal data necessary for their specific job function.
• Multi-factor authentication required for all internal administrative access to production systems.
• Regular independent penetration testing and vulnerability assessments conducted by third-party security specialists.
• Continuous security monitoring with automated alerting for anomalous access patterns or data exfiltration indicators.
• Formal data breach response procedures including regulatory notification obligations where applicable.

While qrpay44 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your account credentials as outlined in the Terms & Conditions.

9 Your Data Protection Rights

Subject to applicable law and the limitations imposed by qrpay44's regulatory obligations, you have the following rights in relation to your personal data held by qrpay44:

1. Right of Access: You may request a copy of the personal data qrpay44 holds about you, together with information about how it is processed.
2. Right to Rectification: You may request correction of inaccurate or incomplete personal data. For account details, many fields can be updated directly in your account settings.
3. Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to qrpay44's overriding legal retention obligations (particularly AML and gaming licence record-keeping requirements).
4. Right to Restriction: You may request that qrpay44 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to its processing pending verification of qrpay44's legitimate grounds.
5. Right to Data Portability: Where processing is based on your consent or a contract with you, you may request that qrpay44 provide your personal data in a structured, commonly used, and machine-readable format.
6. Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests grounds, subject to qrpay44 demonstrating compelling legitimate grounds that override your rights.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the qrpay44 data protection team using the contact details in Section 13. qrpay44 will respond to verifiable requests within 30 days. Identity verification may be required before a request can be actioned.

10 International Data Transfers

qrpay44's Platform is accessible globally and certain data processing activities (including cloud hosting, analytics, and third-party game studio integrations) may involve the transfer of personal data to servers or service providers located outside Malaysia. Where such transfers occur, qrpay44 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that impose data protection obligations on the receiving party equivalent to those applicable to qrpay44 under its gaming licence and applicable data protection law.

11 Children's & Minors' Privacy

The qrpay44 Platform is strictly restricted to persons aged 21 years and above. qrpay44 does not knowingly collect personal data from individuals under the age of 21. If qrpay44 becomes aware that personal data has been collected from a person under the minimum age, the account will be immediately suspended, all data associated with that account will be flagged for deletion in accordance with applicable regulatory requirements, and deposits will be returned to the source payment method.

If you believe that a minor has registered an account on the qrpay44 Platform, please contact support immediately at the contact details in Section 13 so that qrpay44 can take prompt action.

12 Changes to This Privacy Policy

qrpay44 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. Material changes will be communicated to Members via the email address registered to their account and/or via a notice on the Platform at least 7 days before the changes take effect. The "Last updated" date at the top of this Policy will be revised accordingly.

Your continued use of the qrpay44 Platform after the effective date of any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any change, you should cease using the Platform and may request account closure by contacting support.

13 Contact Us

For all privacy-related enquiries, data subject access requests, or to exercise any right described in Section 9, please contact the qrpay44 data protection team through the following channel. Note that the email address below is provided as plain text — it is not a clickable link.

When submitting a data request, please include your full name, registered email address, and a clear description of your request to allow qrpay44 to process it efficiently. Identity verification may be required before any data can be disclosed, amended, or deleted.