Privacy Policy — qqpulsa

Introduction

This Privacy Policy ("Policy") describes the information practices of qqpulsa ("we", "us", "the Company", "qqpulsa"), the operator of the online gaming and sports betting platform accessible at qqpulsa.cam ("the Platform"). This Policy applies to all personal data collected from individuals ("you", "the Player", "the User") who access, register on, or interact with the Platform in any capacity.

qqpulsa is committed to processing personal data responsibly, transparently, and in compliance with applicable data protection principles. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which form part of your overall agreement with qqpulsa.

Definitions

The following definitions apply throughout this Privacy Policy:

Data We Collect

qqpulsa collects personal data through several channels, including account registration, ongoing platform use, payment transactions, identity verification processes, and direct communications with our support team. The categories of data collected are as follows:

3.1 Identity & Registration Data

When you create a qqpulsa account, we collect: your full legal name, date of birth, gender (where provided), nationality, and residential address. This information is required to establish and maintain your account and to verify your identity in accordance with our KYC obligations.

3.2 Contact Information

We collect your email address and, where provided, your mobile phone number. These are used for account notifications, security alerts, promotional communications (where you have opted in), and customer support correspondence.

3.3 Financial & Payment Data

To process deposits and withdrawals, we collect payment method details relevant to the channel used — such as bank account identifiers for DuitNow and FPX transactions, e-wallet account references for Touch'n Go eWallet, Boost, and GrabPay, and card details (where applicable) for Visa and Mastercard transactions. Full card numbers are never stored on qqpulsa servers; payment tokenisation is handled by our certified payment processors.

3.4 Identity Verification Documents

For KYC compliance, we may collect copies of government-issued identity documents (Malaysian MyKad, Passport, or Driver's Licence), proof of address documentation (utility bills or bank statements), and photographic verification images. These documents are processed and stored under strict access controls.

3.5 Technical & Usage Data

When you access the Platform, we automatically collect certain technical information including: IP address, device type and operating system, browser type and version, referring URL, session timestamps, pages visited, and in-platform actions. This data is used for security monitoring, fraud detection, and service improvement purposes.

3.6 Transaction & Gaming History

We maintain records of all deposits, withdrawals, bonuses received, bets placed, games played, and account balance movements. This data is retained for regulatory compliance, dispute resolution, and the delivery of personalised platform features.

Data Processing

qqpulsa processes personal data for the following specific and documented purposes:

qqpulsa will not process your personal data for any purpose beyond those described in this Policy without first obtaining your explicit consent, or unless required to do so by applicable law.

Legal Basis for Processing

qqpulsa relies on the following legal bases for processing personal data, in accordance with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted — including account management, payment processing, and gaming service delivery.
• Legal Obligation: Processing required for compliance with applicable laws and regulations, including anti-money laundering legislation, identity verification requirements, and responsible gambling obligations.
• Legitimate Interests: Processing carried out for the purposes of platform security, fraud prevention, abuse detection, and service analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing for promotional communications and optional platform features where you have provided clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

qqpulsa does not sell, rent, or trade personal data to any third party. However, we may share personal data with the following categories of recipients under the conditions described:

6.1 Payment Service Providers

We share relevant financial data with certified payment processors who handle transaction processing for DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa, Mastercard, and cryptocurrency networks. All payment processors are bound by contractual data processing agreements and relevant financial security standards.

6.2 Identity Verification Providers

KYC document review may be facilitated by third-party identity verification services operating under our instruction. These providers process identity documents solely for verification purposes and are prohibited from using the data for any other purpose.

6.3 Technology & Infrastructure Providers

Hosting, cloud infrastructure, security monitoring, and analytics services may involve data processors who have access to personal data as part of service delivery. All such providers are engaged under data processing agreements that restrict their use of data to specified, documented purposes.

6.4 Legal & Regulatory Authorities

qqpulsa may disclose personal data to law enforcement agencies, regulatory bodies, or courts when legally required to do so, or when we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

Data Retention

qqpulsa retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of the account and for a minimum period of five (5) years following account closure, to fulfil anti-money laundering and regulatory record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of the customer relationship, in compliance with applicable financial regulations.
• Transaction Records: Retained for a minimum of seven (7) years following the transaction date for financial audit and regulatory compliance purposes.
• Technical & Log Data: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes, after which it is securely deleted or anonymised.
• Marketing Data: Retained until consent is withdrawn or the account is closed, whichever occurs first.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

Cookies & Tracking Technologies

qqpulsa uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain session security, and to gather anonymised analytics about how the Platform is used. We do not deploy advertising-network trackers or cross-site behavioural profiling technologies.

8.1 Types of Cookies Used

8.2 Managing Cookies

You may manage or disable cookies at any time through your browser settings. Please note that disabling strictly necessary cookies may prevent certain Platform features from functioning correctly. Instructions for managing cookies are available in the help documentation of all major browsers.

Data Security

qqpulsa implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• AES-256 encryption for personal data stored at rest on our servers;
• Role-based access controls ensuring that staff access to personal data is strictly limited to those with a documented operational need;
• Continuous security monitoring and intrusion detection systems;
• Regular security audits and penetration testing by independent cybersecurity professionals;
• Two-factor authentication (2FA) options for player accounts to prevent unauthorised access.

While we maintain industry-standard security controls, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that poses a material risk to your rights and freedoms, qqpulsa will notify affected individuals as required by applicable law.

Your Data Rights

Subject to applicable data protection law, you hold the following rights in relation to personal data thatqqpulsa holds about you. Requests should be submitted to our Data Protection contact at [email protected] and will be processed within thirty (30) calendar days of receipt.

Please note that certain rights may be limited whereqqpulsa is required by law to retain or process data — for example, for regulatory compliance, anti-money laundering obligations, or fraud prevention purposes. We will explain the basis for any such limitation in our response to your request.

Minors & Age Restriction

qqpulsa's services are strictly reserved for individuals aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. Account registration includes an age declaration and is subject to KYC verification.

If qqpulsa becomes aware that personal data has been collected from a person under the age of 21 without parental consent, that data will be deleted immediately, the associated account closed, and the matter reviewed by our compliance team. If you believe a minor has gained access to the Platform, please contact us immediately at [email protected].

International Data Transfers

qqpulsa operates infrastructure that may involve the transfer of personal data to countries outside of Malaysia, including to hosting and cloud service providers located in other jurisdictions. When such transfers occur, qqpulsa ensures that appropriate safeguards are in place to protect personal data to a standard equivalent to that applicable in Malaysia.

Safeguards applied to international transfers include: contractual clauses requiring equivalent data protection standards, engagement of processors operating in jurisdictions with recognised adequate data protection frameworks, and encryption of data both in transit and at rest.

Changes to This Privacy Policy

qqpulsa reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. Where changes are material, we will notify registered Players via email or via an in-platform notification prior to the changes taking effect.

The date at the top of this page reflects when the Policy was last revised. We encourage you to review this page periodically to stay informed of how we protect your personal data. Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the changes.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the qqpulsa Data Protection team using the details below. All privacy-related communications are handled with strict confidentiality.