Privacy Policy

This Privacy Policy ("Policy") is issued by QQ8821 ("Q8821", "We", "Us", "Our") and applies to all personal data collected from users ("You", "User", "Player") of the Q8821 platform accessible at https://qq8821.lat and all associated services, features, and communications.

Q8821 takes data privacy seriously. We collect only the personal information that is genuinely necessary to operate your account, process transactions, maintain platform security, and comply with our obligations under international licensing frameworks and anti-money laundering regulations. We do not sell, rent, or commercially trade your personal data to third-party marketers under any circumstances.

By registering an account on QQ8821, accessing the platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to these practices, you must discontinue use of the platform and contact support to initiate account closure.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including name, email address, date of birth, phone number, payment details, and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "Data Controller" means Q8821, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of QQ8821 under contract and in accordance with our instructions.
• "KYC" means Know Your Customer — the identity and document verification process carried out to confirm the identity of account holders in compliance with international AML/CTF obligations.
• "Cookies" means small text files placed on your device by the platform to support session management, security, and basic analytics functions.
• "Sensitive Personal Data" means a subset of Personal Data afforded additional legal protection, including financial account details, government-issued identification numbers, and biometric information where applicable.

Q8821 collects personal data across several categories, detailed in the table below. We collect only what is necessary for the stated purpose and retain it only for as long as required.

Q8821 collects personal data through the following means:

4.1 Direct Submission

Data you provide directly when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting our support team, or participating in promotional activities. This includes all information entered into account registration forms, identity verification portals, and payment processing interfaces.

4.2 Automated Technical Collection

Technical data collected automatically when you access the platform, including your IP address, device identifiers, browser configuration, session timestamps, and interaction logs. This data is collected passively via server logs and session management systems and is used primarily for security, fraud prevention, and platform stability purposes.

4.3 Payment and Transaction Processors

When you transact via Malaysian payment providers — including Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB Bank, Public Bank, Hong Leong Bank, RHB Bank, or cryptocurrency networks — Q8821 receives transaction confirmation data necessary to credit your account and maintain accurate financial records. Q8821 does not store full payment card numbers or e-wallet PINs.

4.4 Third-Party Verification Services

Identity verification and document authentication may be conducted with the assistance of authorised third-party KYC service providers. These providers process your identity documents on our behalf, under strict contractual data protection obligations, solely for the purpose of verifying your identity and age.

Q8821 processes your personal data exclusively for the following purposes:

• Account Management: Creating, maintaining, and securing your Q8821 account, including login authentication, password management, and session control.
• Transaction Processing: Facilitating deposits and withdrawals via all supported Malaysian payment methods, recording transaction history, and maintaining accurate financial ledgers.
• Identity Verification: Conducting KYC checks to confirm your identity, verify your age (minimum 21 years), and comply with anti-money laundering and counter-terrorism financing obligations.
• Fraud Prevention and Security: Monitoring account activity for suspicious patterns, preventing unauthorised account access, and protecting the integrity of our platform and player funds.
• Responsible Gambling: Monitoring gameplay and transaction patterns to identify potential problem gambling behaviour and trigger appropriate responsible gambling interventions where warranted.
• Customer Support: Responding to support enquiries, resolving account disputes, and maintaining records of support interactions for quality assurance purposes.
• Legal and Regulatory Compliance: Fulfilling our obligations under international gaming licensing frameworks, AML/CTF regulations, and any applicable data protection requirements.
• Platform Improvement: Aggregated and anonymised usage analytics used to improve platform performance, game selection, and user experience — this does not involve the use of individually identifiable data for profiling.
• Promotional Communications: Sending promotional offers, bonus notifications, and platform updates to users who have opted in to such communications. You may opt out at any time.

Q8821 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted upon registration — including account creation, transaction processing, and support services.
• Legal Obligation: Processing required to comply with applicable international licensing conditions, anti-money laundering regulations, and age verification requirements.
• Legitimate Interests: Processing conducted in pursuit of our legitimate business interests — including fraud prevention, platform security, and responsible gambling monitoring — where such interests are not overridden by your rights and freedoms.
• Consent: Processing for optional purposes — such as sending marketing communications or using non-essential cookies — where you have given explicit, freely withdrawable consent.

QQ8821 does not sell, rent, or commercially disclose your personal data to third parties. We share your data only in the following limited and controlled circumstances:

7.1 Service Providers and Data Processors

We engage veted third-party service providers to assist with specific operational functions — including payment processing, identity verification, fraud detection, customer support infrastructure, and platform hosting. All such providers are engaged under strict contractual data processing agreements and are authorised to use your data only for the specific purpose for which they were engaged.

7.2 Regulatory and Legal Authorities

Q8821 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required by applicable law,ful order, or in connection with the investigation or prevention of financial crime. Such disclosures will be made only to the extent required and will be documented for internal compliance records.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of Q8821's business, personal data held by QQ8821 may form part of the transferred assets. In such circumstances, affected users will be notified in advance and the acquiring entity will be bound by obligations equivalent to those set out in this Policy.

Q8821 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required to comply with our legal and regulatory obligations. Specific retention periods apply as follows:

• Account Data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in accordance with international AML record-keeping requirements.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years from the date of each transaction, in compliance with anti-money laundering regulatory standards.
• KYC and Verification Documents: Identity verification documents are retained for a minimum of five (5) years following the conclusion of the account relationship.
• Support Communications: Customer support interaction records are retained for a minimum of two (2) years from the date of each interaction.
• Technical and Usage Data: Server logs and session data are retained for up to twelve (12) months for security and fraud prevention purposes.
• Marketing Preferences: Records of marketing consent and opt-out instructions are retained indefinitely to ensure compliance with your stated preferences.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents reconstruction of individual identity. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

QQ8821 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. Our security measures include:

• 256-bit TLS/SSL Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security protocols, protecting it from interception in transit.
• Encrypted Data Storage: Sensitive personal data and financial information stored on our servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within Q8821's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Password Security: User passwords are stored exclusively in hashed, salted form. Q8821 staff cannot access or retrieve your account password in plain text.
• Continuous Security Monitoring: Our platform is subject to continuous automated monitoring for anomalous access patterns, intrusion attempts, and other security threats.
• Incident Response: In the event of a personal data breach that poses a risk to individual rights, Q8821 will notify affected users and relevant authorities within the timeframe required by applicable legal obligations.

While we apply rigorous security standards, no internet-based platform can guarantee absolute security. Users are responsible for maintaining the confidentiality of their own account credentials and should contact support immediately if they suspect unauthorised account access.

QQ8821 uses cookies and similar session-management technologies to maintain platform functionality, support secure authentication, and collect basic usage analytics. We do not use cookies for cross-site behavioural advertising or third-party tracking.

10.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They manage your login session, maintain your account state during a browsing session, and support security mechanisms such as CSRF protection. Essential cookies cannot be disabled without impairing your ability to use the platform.

10.2 Analytics Cookies

With your consent, Q8821 may use first-party analytics cookies to collect aggregated, anonymised data about how users navigate and interact with the platform. This information is used solely to improve platform performance and user experience. No individually identifiable data is used in these analytics processes.

10.3 Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some platform features. Your consent to analytics cookies can be withdrawn at any time without affecting your access to core platform services.

Q8821 respects your rights in relation to your personal data. Subject to applicable legal limitations — including our obligations to retain certain data for regulatory compliance purposes — you hold the following rights:

• Right of Access: You may request a copy of all personal data Q8821 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held your account. Minor corrections (such as contact details) can be made directly in your account settings.
• Right to Erasure: You may request deletion of your personal data in certain circumstances. Please note that data subject to mandatory regulatory retention periods (such as KYC and transaction records) cannot be deleted until those periods expire.
• Right to Restriction: You may request that we restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of data we hold.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to us, where technically feasible.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our demonstrating compelling grounds.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat or by email at the address listed in Section 15. We may require identity verification before processing a data rights request to protect against unauthorised requests made in your name.

QQ8821 is strictly intended for users aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of our KYC process, and any account found to belong to a person under 21 will be immediately suspended and all associated data handled in accordance with our legal obligations.

If you are a parent or guardian and believe that a minor has created an account on QQ8821 using their personal details, please contact our support team immediately. We will investigate promptly and take appropriate action, including account closure and deletion of any data collected in contravention of this age requirement.

QQ821 operates under international online gaming licensing frameworks and works with service providers located in various jurisdictions. As a result, your personal data may be transferred to stored in, and processed in countries other than Malaysia. Where such transfers occur, Q8821 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

Transfers to third-party processors are governed by contractual data protection clauses that obligate processors to maintain data security standards consistent with our own. By using the Q8821 platform, you acknowledge and consent to the international transfer of your personal data for the purposes described in this Policy.

Q8821 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory obligations, or platform operations. Material changes to this Policy will be communicated to registered users via the email address on their account, or through a prominent notice displayed on the platform, prior to the effective date of such changes.

Minor clarifications or non-material amendments may be made without direct notification but will always be reflected in the updated version of this Policy published on the platform, with the "Last Updated" date revised accordingly. We encourage you to review this Policy periodically. Continued use of the platform following any amendment constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data & Privacy support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the platform. Our team responds to privacy enquiries typically within 2 minutes during live chat.
• Email (plain text — not a clickable link): [email protected] — formal data subject requests, privacy complaints, and documentation. We commit to acknowledging requests within 24 hours and responding in full within 30 days.

For data access, rectification, erasure, or portability requests, please include your registered account username and a brief description of your request to help us process it efficiently. We may require identity verification before actioning your request.