QB88 Privacy Policy – How We Protect the Personal Data of Malaysian Members

QB88 ("we", "the QB88 platform") is committed to protecting the privacy and security of the personal data of all members who use our platform. This Privacy Policy explains in detail how QB88 collects, stores, uses, discloses, and protects your personal data in accordance with responsible data protection principles.

This Policy applies to:

• All individuals who register an account with QB88;
• Visitors to the QB88 website who have not yet registered an account;
• Individuals who interact with the QB88 support team via live chat or email;
• All users of the QB88 mobile app or mobile services.

By using the QB88 platform in any capacity, you confirm that you have read, understood and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the QB88 platform and contact our support team to close your account if applicable.

QB88 reserves the right to update this Privacy Policy from time to time. Members will be notified of any material changes via an in-platform notice or email. The "Last Updated" date at the top of this page reflects when the most recent update was made.

QB88 collects several types of personal data depending on how you interact with our platform. Below is a full explanation of the data we may collect:

Data You Provide Directly:

• Registration Information: Full name, date of birth, Malaysian phone number, email address, and password when registering a QB88 account;
• Identity Verification (KYC) Documents: A copy of your MyKad or other valid Malaysian identity document, a bank statement or utility bill as proof of address, and a selfie for facial verification if required;
• Financial Information: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow account details or FPX bank account details (Maybank2u, CIMB Clicks) used for deposits and withdrawals — stored in encrypted format;
• Communication Information: Live chat transcripts, emails or any written communications between you and the QB88 team.

Automatically Collected Data:

• Device & Technical Data: IP address, web browser type, operating system, device model, screen resolution, and other relevant technical information;
• Usage Data: Pages visited, games played, bets placed, session duration, buttons clicked and navigation patterns within the QB88 platform;
• Cookie Data: Information stored via cookies and similar tracking technologies to enhance the user experience and platform security;
• Location Data: Approximate location based on IP address for security and access verification purposes.

QB88 uses collected personal data solely for legitimate and necessary purposes. Below is a full breakdown of data usage purposes and their corresponding legal bases:

QB88 will not use your personal data for any purpose other than those stated above without first obtaining your consent or establishing a valid legal basis. You may withdraw your consent to receive promotional communications at any time by contacting the QB88 support team.

QB88 does not sell, rent or disclose members' personal data to third parties for their own marketing purposes. However, in certain circumstances, QB88 may need to share personal data with the following parties:

Trusted Service Providers:

QB88 works with trusted third-party service providers to support platform operations. These include payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow and FPX processors for handling financial transactions; cloud service providers for secure data storage; game software providers such as Evolution Gaming and Pragmatic Play for delivering casino games; and cybersecurity service providers for fraud detection and prevention.

All such service providers are bound by strict confidentiality agreements and are only permitted to use shared data for the specific purposes related to the services they provide to QB88.

Legal Requirements & Enforcement:

QB88 may be required to disclose members' personal data if compelled by law, court order, or a lawful request from a law enforcement agency or regulatory body with jurisdiction. In such cases, QB88 will only disclose the minimum data necessary to comply with the relevant requirement.

Protection of Critical Interests:

In an emergency involving the safety or wellbeing of an individual, QB88 may disclose the necessary data to the relevant authorities to ensure that person's safety.

QB88 does not retain your personal data longer than necessary for the purposes stated in this Privacy Policy or to meet applicable legal requirements. The following are general data retention guidelines:

• Active account data: Retained for as long as your account remains active, and for the required period following account closure to meet audit and compliance obligations;
• Financial transaction records: Retained for a minimum of 7 years in accordance with accounting and anti-money laundering legal requirements;
• KYC Documents: Retained for the duration of the active account and 5 years after account closure or fulfillment of applicable regulatory requirements;
• Support communication records: Retained for 2 years from the date of last interaction for reference and dispute resolution purposes;
• Technical log data: Retained for 90 days for security and fraud detection purposes before being automatically deleted;
• Cookie data: Cookie expiry periods vary by type, ranging from the current session only to a maximum of 12 months for preference cookies.

Once the specified retention period has elapsed, your personal data will be securely deleted or anonymised using approved data disposal procedures. In certain cases, data may be exempt from deletion if it is still required for the resolution of an ongoing dispute or a continuing legal obligation.

QB88 continuously invests in its data security infrastructure and procedures to ensure your personal data is protected to the highest standard. Key security measures we have implemented include:

• End-to-End Encryption: All communications between your browser or app and QB88's servers are encrypted using 256-bit SSL/TLS. This means your data cannot be read even if it is intercepted;
• Secure Password Storage: Your account password is never stored in plain text. We use one-way salted hashing, which cannot be decrypted — even by QB88's own technical team;
• Two-Factor Authentication (2FA): QB88 offers and encourages the use of 2FA on all accounts for an added layer of security when logging in from a new device;
• 24/7 Security Monitoring: Automated monitoring systems operate around the clock to detect suspicious activity, unauthorised access attempts, and unusual usage patterns;
• Role-Based Access Control: QB88 staff are only granted access to the data required to carry out their specific duties, in accordance with the principle of least privilege;
• Regular Security Audits: QB88 conducts regular security audits and penetration testing to identify and address vulnerabilities before they can be exploited.

While QB88 takes all reasonable steps to protect your data, no security system in the world can be guaranteed 100% safe from every cyber threat. We therefore encourage you to take the following steps to help protect your account:

• Use a strong, unique password for your QB88 account — do not reuse the same password across other accounts;
• Enable two-factor authentication (2FA) in your account settings;
• Never share your login credentials with anyone, including individuals claiming to be QB88 staff;
• Log out of your QB88 account when you are done using the platform, especially on shared devices;
• Contact QB88 support immediately if you suspect your account has been accessed without your authorisation.

QB88 uses cookies and similar tracking technologies to improve the user experience, ensure platform security and understand how our platform is used. Cookies are small text files stored on your device when you visit the QB88 website.

Types of cookies used by QB88:

• Essential Session Cookies: Required for core platform functions such as maintaining your login status, managing game sessions, and securing transactions. These cookies cannot be disabled without affecting platform functionality;
• Preference Cookies: Storing user preferences such as language, display settings, and other platform preferences for a more personalised experience;
• Analytics Cookies: Helping QB88 understand how users interact with the platform for improvement purposes. Data collected by analytics cookies is aggregated and cannot be used to directly identify any individual;
• Security Cookies: Used to detect suspicious access attempts, protect against CSRF attacks, and monitor unusual login patterns.

You can manage and delete cookies through your web browser's settings. However, disabling essential cookies may affect the functionality of the QB88 platform and your overall experience. For guidance on managing cookies in your specific browser, please refer to that browser's help documentation.

As a QB88 member, you have the following rights regarding your personal data. All requests relating to these rights may be submitted to the QB88 support team via live chat or email at support@qb88.best:

The QB88 platform is exclusively for individuals aged 18 and above. QB88 does not knowingly collect, store, or process any personal data from children or individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will immediately take the following steps:

• Closing the associated account immediately;
• Deleting all related personal data from our systems;
• Conducting an investigation to determine how that data may have been collected;
• Reporting to the relevant authorities where required.

If you are a parent or guardian who believes your underage child has registered an account with QB88, please contact our support team immediately at support@qb88.best or via live chat. We will address the situation promptly and responsibly.

In the course of its operations, QB88 may transfer or access your personal data from different locations, including servers that may be situated outside Malaysia. This may occur in the context of cloud service usage, collaboration with international game providers such as Evolution Gaming or Pragmatic Play, or other technical operational requirements.

When data is transferred outside Malaysia, QB88 ensures that:

• The receiving party maintains a level of data protection equivalent to or higher than the standards set out in this Privacy Policy;
• Appropriate data transfer agreements have been signed between QB88 and the receiving party;
• Only the minimum data necessary for the stated purpose is transferred;
• All data transfers are conducted through secure, encrypted channels.

By registering a QB88 account, you automatically agree to receive service-related communications (such as deposit confirmations, security alerts, and account notifications) that cannot be unsubscribed from, as they are essential to the security of your account.

For marketing and promotional communications — such as emails about the latest bonuses, special offers, tournament updates, and QB88 promotions — you can opt out at any time using the following methods:

• Click the "Unsubscribe" link found at the bottom of any promotional email from QB88;
• Update your communication preferences in your QB88 account settings;
• Contact the QB88 support team via live chat or email at support@qb88.best and state that you wish to opt out of marketing communications.

Unsubscribe requests will be processed within 5 business days. You may still receive promotional communications that are already in transit during this period. Please note that unsubscribing from marketing communications will not affect your receipt of important account and security-related communications.

If you have any questions, concerns, or requests regarding this Privacy Policy or how QB88 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week within the QB88 platform — the fastest way to get a response;
• Email: support@qb88.best – for enquiries requiring a formal written response;
• Response Time: General enquiries are answered within 24 hours; data rights requests are responded to within 30 calendar days.

When submitting a data-related request, please include the following information to help us process it more efficiently: your full name as registered on your QB88 account, your account email address, the type of request (access, rectification, deletion, etc.), and a brief description of what you are requesting.