QB838 Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by QB838 ("QB838", "we", "us", or "our") and applies to all personal data processed in connection with the QB838 online gaming and sports betting platform accessible at https://qb838.cam (the "Platform"), including all associated mobile-optimised services, customer support communications, and promotional activities.

QB838 is committed to processing personal data in a lawful, fair, and transparent manner. This Policy describes what personal data we collect from players and visitors, the purposes for which that data is processed, the parties with whom it may be shared, the security measures we apply to protect it, the period for which it is retained, and the rights you have in relation to your own data.

This Policy applies to all users of the Platform, including registered players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations across Malaysia, as well as any other jurisdictions from which the Platform is lawfully accessed.

By registering an account on QB838, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.

Data Controller

QB838 acts as the Data Controller in respect of the personal data it collects from players and visitors to the Platform. As Data Controller, QB838 determines the purposes for which personal data is processed and the means by which such processing is carried out.

Where QB838 engages third-party service providers to assist in delivering the Platform's services — such as payment processors, identity verification providers, and cloud infrastructure operators — those parties act as Data Processors under QB838's instructions and are contractually bound to handle personal data only as directed by QB838 and in compliance with applicable data protection standards.

Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including names, identification numbers, contact details, location data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, QB838.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller.
• "Data Subject" means the individual to whom personal data relates — in this context, you, the player or visitor.
• "KYC" (Know Your Customer) means the identity and age verification process required for account registration and before processing certain transactions.
• "Cookies" means small text files placed on your device by the Platform to enable certain functionality and track usage patterns.
• "Sensitive Personal Data" means special categories of data requiring heightened protection, including health or financial information provided in the context of responsible gambling tools.

Personal Data We Collect

4.1 Data Provided by You Directly

When you register an account, deposit funds, contact support, or use any feature of the QB838 Platform, you may provide personal data including but not limited to the categories described in the table below.

4.2 Data Collected Automatically

When you access the QB838 Platform, our systems automatically collect certain technical data about your device and browsing behaviour, including:

• IP address and approximate geographic location (country and city level).
• Device type, operating system, browser type and version.
• Pages visited, time spent on each page, links clicked, and referral source.
• Session duration, login timestamps, and logout events.
• Game activity data: games played, bet amounts, outcomes, bonus activations, and wagering history.

4.3 Data from Third Parties

QB838 may receive personal data about you from third parties in limited circumstances, including: identity verification agencies used during KYC processing; payment service providers confirming transaction status; and fraud detection partners flagging suspicious activity patterns. All such data is received and processed in accordance with this Policy.

Purpose & Legal Basis for Processing

QB838 processes your personal data only where we have a lawful basis to do so. The primary purposes for which we process personal data, and the corresponding legal bases, are as follows:

• Account registration and management — necessary for the performance of the contract between you and QB838. We cannot operate your account without collecting and processing identity and contact data.
• Identity verification (KYC) and age verification — necessary for compliance with legal obligations under applicable anti-money laundering and know-your-customer regulations, and to enforce our minimum age requirement of 21 years.
• Payment processing and withdrawal handling — necessary for performance of contract. Financial data is used to process deposits via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency channels, and to process withdrawal requests.
• Fraud prevention and platform security — based on QB838's legitimate interest in protecting the Platform and its users from fraud, money laundering, collusion, and abuse.
• Customer support — necessary for performance of contract and based on legitimate interest in resolving player enquiries efficiently.
• Responsible gambling monitoring and tools — based on QB838's legal obligation and legitimate interest in promoting safe gambling practices and complying with responsible gambling regulatory requirements.
• Platform analytics and improvement — based on QB838's legitimate interest in understanding how the Platform is used and improving its functionality and user experience.
• Marketing communications — based on your prior consent where you have opted in to receive promotional emails or notifications about bonuses and offers. You may withdraw consent at any time via your account settings or by contacting support.

Data Sharing with Third Parties

QB838 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. We share personal data only in the following limited situations:

6.1 Service Providers (Data Processors)

We engage reputable third-party service providers to assist in delivering the Platform, including payment processing partners (such as licensed payment gateways supporting DuitNow, FPX, and e-wallet services in Malaysia), cloud hosting and infrastructure providers, identity verification and KYC service partners, fraud detection and anti-money laundering screening tools, and customer support technology providers. All such processors are contractually bound to process data only on QB838's instructions and to maintain appropriate security measures.

6.2 Regulatory and Legal Obligations

QB838 may disclose personal data to regulatory bodies, law enforcement agencies, courts, or other authorities where required by applicable law, court order, or regulatory direction. In such cases, QB838 will disclose only the minimum data necessary to comply with the obligation.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of QB838's business, personal data held by QB838 may be transferred to the relevant acquirer as part of that transaction. Players will be notified of any such transfer and the resulting privacy implications prior to their data being transferred where practicable.

International Data Transfers

QB838 may transfer personal data to third-party service providers located outside Malaysia. Where such transfers occur, QB838 takes appropriate steps to ensure that your personal data continues to receive an adequate level of protection consistent with the standards set out in this Policy.

Protective measures for international transfers may include: contractual data processing agreements containing appropriate data protection clauses; transfer to jurisdictions recognised as providing an adequate level of data protection; or other legally approved mechanisms as applicable.

Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. QB838 uses cookies and similar technologies (including local storage and session storage) to operate essential platform functionality, remember your preferences, and analyse Platform usage.

8.2 Types of Cookies Used

• Essential / Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens that prevent cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred display options, and responsible gambling tool configurations.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use the Platform — such as which pages are most visited and where users encounter errors. This helps QB838 improve the Platform experience.

8.3 Managing Cookies

You may control cookie settings through your browser's privacy settings. Note that disabling certain cookies may affect Platform functionality. QB838 does not serve third-party advertising cookies or permit third-party ad networks to track your activity across other websites from the QB838 Platform.

Data Retention

QB838 retains personal data for the period necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account and identity data: retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements.
• Transaction and financial records: retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: retained for two (2) years from the date of the final communication in each support case.
• Marketing consent and preferences: retained until you withdraw consent or request deletion, after which records of the withdrawal are kept for compliance purposes.
• Technical / log data: typically retained for up to twelve (12) months unless required for longer by an ongoing investigation or legal proceeding.

At the end of any applicable retention period, personal data is securely deleted, anonymised, or pseudonymised in a manner that prevents re-identification.

Security Measures

QB838 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive data at rest, including financial and identity documentation.
• Role-based access controls limiting internal access to personal data to only those employees and contractors who require it to perform their functions.
• Multi-factor authentication for access to internal administrative systems.
• Regular security testing including penetration testing and vulnerability assessments of the Platform infrastructure.
• Incident response procedures to detect, contain, and notify affected parties in the event of a data breach, in accordance with applicable legal obligations.

Your Data Rights

As a data subject, you hold the following rights in relation to your personal data held by QB838. To exercise any of these rights, please contact our support team at [email protected] (plain text only). We will respond to verified requests within 30 calendar days.

Minors & Age Verification

QB838 is strictly intended for players who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. All registration applications are subject to age verification as part of the KYC process. Where a registered account is found to belong to a person under 21 years of age, that account will be immediately suspended, any remaining balance handled in accordance with our Terms & Conditions, and all personal data associated with the underage user processed in accordance with applicable legal requirements.

If you are a parent or guardian and believe that a minor has registered on QB838 using false information, please contact us immediately at [email protected] (plain text — not a clickable link) so that we can investigate and take appropriate action.

Responsible Gambling & Data Processing

QB838 operates a comprehensive responsible gambling programme. Where you use self-management tools on the Platform — such as setting deposit limits, loss limits, session reminders, or requesting a cool-off period or self-exclusion — QB838 processes this data as a legal obligation and to protect your wellbeing.

Data relating to your use of responsible gambling tools is treated as sensitive personal data and is subject to heightened access controls. This information is used only to enforce the limits and restrictions you have set, to monitor for signs of potentially harmful gambling behaviour, and to comply with regulatory requirements. It is not used for marketing profiling.

QB838 may also process your gaming activity data — including bet frequency, stake amounts, and session patterns — to identify indicators of problem gambling and, where appropriate, proactively contact you with information about responsible gambling resources. This processing is based on QB838's legitimate interest in promoting player welfare and our regulatory obligations. For more information about our responsible gambling tools and support resources, please visit our Responsible Gambling page.

Amendments to This Policy

QB838 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features of the Platform. The updated Policy will be published on this page with a revised "Last Updated" date. Where changes are material and affect your rights as a data subject, QB838 will notify registered players via the email address on file within a reasonable time prior to the changes taking effect.

Continued use of the Platform following publication of any amended Policy constitutes your acknowledgement of the revised terms. If you do not agree with the changes, you should cease use of the Platform and contact our support team to close your account.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by QB838, please contact our Data Protection team. We are available 24 hours a day, 7 days a week via live chat on the Platform.

For written correspondence, you may reach us by email at: [email protected] (displayed as plain text only — this is not a clickable link).

Please include in your communication: your registered name and email address, a clear description of your query or request, and any relevant account reference number. We will respond to all privacy-related enquiries within 30 calendar days of receipt of a verified request.

QB838 serves players across all parts of Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions. Our support team operates in English and is equipped to assist with all data protection enquiries.