Privacy Policy — qr854

Introduction

This Privacy Policy (hereinafter referred to as "this Policy" or "the Privacy Policy") describes how qr854 (hereinafter referred to as "we", "us", "our", or "the Operator"), operating the online gambling platform accessible at https://qr854.cam (the "Platform"), collects, uses, stores, discloses, and protects the personal data of individuals who access the Platform or register as players (hereinafter referred to as "you", "the Player", or "the User").

We are committed to processing personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy applies to all personal data collected through your use of the Platform, including registration, account management, payment transactions, customer support interactions, and participation in any promotional activities.

By registering an account with qr854 or by continuing to use the Platform, you acknowledge that you have read, understood, and agreed to the collection and use of your personal data as described in this Privacy Policy. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Personal Data We Collect

qr854 collects personal data that is necessary to provide our services to you. The categories of personal data we collect are as follows:

3.1 Identity & Account Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth (for age verification — players must be 21 or older);
• Nationality and country of residence;
• Email address and chosen username;
• A copy of your Malaysian MyKad, passport, or other accepted identification document submitted during KYC verification.

3.2 Contact & Communication Data

• Email address used for correspondence;
• Phone number (where provided for account recovery or two-factor authentication);
• Correspondence records from live chat, email, or any other support channel interaction.

3.3 Financial & Payment Data

• Malaysian bank account details associated with your registered withdrawal method (e.g., Maybank, CIMB, Public Bank, Hong Leong, RHB);
• E-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay);
• DuitNow and FPX transaction references;
• Cryptocurrency wallet addresses (BTC, USDT, ETH) where applicable;
• Transaction histories including deposit amounts, withdrawal requests, and account balance movements.

3.4 Technical & Device Data

• IP address and approximate geographic location;
• Browser type, version, and operating system;
• Device identifiers and screen resolution data;
• Session logs, access timestamps, and login history.

3.5 Behavioural & Usage Data

• Game play history, bet amounts, and session durations;
• Platform navigation patterns and feature interactions;
• Bonus usage, wagering progress, and promotional participation records.

3.6 Responsible Gambling Data

• Deposit limit preferences set through your account dashboard;
• Loss limit settings and session reminder configurations;
• Self-exclusion requests and the duration of any exclusion period.

How We Collect Your Data

qr854 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings;
• Automatically — through cookies, server logs, and platform analytics tools when you access and navigate the Platform;
• From third-party payment providers — transaction confirmation data received from FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and partner banks when you make deposits or request withdrawals;
• From identity verification services — confirmation data returned by KYC providers used to validate the authenticity of documents you submit;
• From fraud prevention partners — risk scoring and device fingerprint data used to protect the integrity of our platform and all players on it.

Purposes of Data Processing

We process your personal data for the following purposes:

Legal Basis for Processing

qr854 processes personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contract performance: Processing necessary to enter into or perform the contract with you — including account registration, payment processing, and delivery of the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and financial record-keeping.
• Legitimate interests: Processing carried out in furtherance of our legitimate business interests, including fraud prevention, platform security, and service quality improvement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit and freely given consent, particularly in respect of optional marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

Data Sharing & Disclosure

qr854 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial or marketing purposes. We may, however, share your personal data in the following limited circumstances:

7.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf and under our instruction, including: payment processors (for DuitNow, FPX, Touch 'n Go, Boost, GrabPay, and major Malaysian bank transactions), identity verification and KYC providers, fraud detection and risk management services, and IT infrastructure and platform hosting providers. All service providers are contractually obligated to process data only as instructed and to maintain appropriate security measures.

7.2 Legal & Regulatory Disclosure

We may disclose your personal data to competent regulatory authorities, law enforcement agencies, or courts of law where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of qr854, our players, or the public.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of qr854's business assets, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and the resulting changes to this Privacy Policy via the email address registered to your account.

Payment Data & Financial Security

All payment transactions on qr854 are processed through verified, regulated third-party payment partners. These include Malaysian e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), banking network providers (DuitNow, FPX), individual Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong, RHB), and cryptocurrency infrastructure providers.

qr854 does not store full bank account numbers, card details, or e-wallet PINs on its own servers. Payment details you submit are transmitted directly to our payment processing partners via encrypted channels. We retain only the minimum transaction metadata (amount, timestamp, payment method type, transaction reference) required for account record-keeping and audit purposes.

All withdrawal requests are directed exclusively to payment methods registered in your own name, as verified during the KYC process. This ensures that funds cannot be redirected to unverified third-party accounts.

Cookies & Tracking Technologies

qr854 uses cookies and similar tracking technologies to provide a functional and personalised experience on the Platform. Cookies are small text files stored on your device when you access the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Essential for core platform functionality — session management, authentication, and security. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Remember your preferences such as language settings, currency display (MYR), and account settings to provide a more convenient experience across sessions.
• Analytics cookies: Collect anonymous or pseudonymous data about how players navigate and interact with the Platform, enabling us to identify usability improvements and fix technical issues.
• Security cookies: Assist in detecting and preventing fraudulent activity, including unusual login patterns and suspicious device behaviour.

You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies may result in reduced functionality or the inability to access certain areas of the Platform.

Data Retention

qr854 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention principles are as follows:

• Active account data: Retained for the duration of your active player relationship with qr854, and for a reasonable period thereafter to handle any outstanding queries or disputes.
• KYC and identity documents: Retained for a minimum period as required by applicable anti-money laundering regulations following account closure.
• Financial transaction records: Retained for a minimum period following the relevant transaction, consistent with applicable financial and tax record-keeping requirements.
• Support correspondence: Retained for a reasonable period following the resolution of the relevant query for quality assurance and dispute resolution purposes.
• Self-exclusion records: Retained for the duration of the exclusion period and for a defined period thereafter to prevent circumvention through re-registration.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

Security Measures

qr854 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest within our database infrastructure;
• Two-factor authentication (2FA) options for player account access;
• Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis;
• Regular security audits and penetration testing by independent third-party security professionals;
• Continuous monitoring for anomalous activity, brute-force login attempts, and suspicious transaction patterns;
• Segregation of player funds and data from operational systems.

While we employ best-practice security measures, no system is entirely immune to risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and take all necessary steps to mitigate the impact.

Your Data Subject Rights

Depending on applicable data protection law, you may have the following rights in relation to your personal data held by qr854. To exercise any of these rights, please contact us at [email protected].

We will respond to all valid data subject rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further two months, in which case we will notify you of the extension and the reasons for it within the initial thirty-day period.

Minors & Age Restriction

The Platform is strictly for individuals aged 21 and above. qr854 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age is verified as part of the mandatory KYC process prior to processing any withdrawal.

If we become aware that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, void any transactions conducted from that account, and delete the relevant data from our systems as promptly as practicable, subject to any mandatory retention obligations under applicable law.

If you have reason to believe that a minor has registered on the Platform, please contact us immediately at [email protected].

International Data Transfers

qr854 may engage service providers and technical infrastructure located in jurisdictions outside of Malaysia. Where personal data is transferred to countries or territories that may not have data protection laws equivalent to those applicable in Malaysia, we take appropriate safeguards to ensure that the transfer is conducted in a manner that protects your personal data, including through the use of contractual data processing agreements that impose data protection obligations on the receiving party.

Your payment transactions through Malaysian-based providers — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and your bank — are processed within Malaysia's domestic payment infrastructure and are subject to the data protection standards applied by those regulated financial institutions.

Changes to This Privacy Policy

qr854 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The updated version will be published on this page with a revised "Last Updated" date.

Where a material change is made to this Policy — meaning a change that significantly affects how we collect or use your personal data — we will provide advance notice via email to your registered address or through a prominent notice on the Platform prior to the revised Policy taking effect.

Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you may close your account by contacting our support team before the change takes effect.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way qr854 handles your personal data, please do not hesitate to reach out to us through any of the following channels:

When contacting us regarding a data protection matter, please include your registered username, the email address associated with your account, and a clear description of your request. This will allow us to locate your records and respond as efficiently as possible.

For formal data subject rights requests, please submit your request in writing (by email) with sufficient information to verify your identity, as we are obligated to confirm identity before fulfilling access, rectification, or erasure requests.