Privacy Policy qq2 –
Member Personal Data Protection

This Privacy Policy document describes how qq2, operating under the domain qq2.st, managing your personal data. This policy applies to all users of the qq2 platform, including the official website and iOS and Android mobile apps. By using qq2 services, you consent to the practices described in this document. If you do not agree, please discontinue use of the platform and contact us for assistance with data deletion.

Qq2 collects various categories of information to enable us to provide a secure, efficient, and personalised service for each member. Data collection is carried out directly through registration forms, automatically through platform tracking technologies, and in some cases through legitimate third-party sources such as identity verification providers.

Data You Provide Directly

• Identity information: Full name, national identity card number (MyKad) or passport, date of birth, gender, and nationality.
• Contact information: Email address, active Malaysian mobile number, and current residential address.
• Financial information: Bank account number, bank name, digital wallet information (Touch 'n Go, Boost, GrabPay), and transaction history on the platform.
• KYC Documents: Copies of MyKad, passport, bank statement, or utility bill for identity and address verification purposes.
• Communications: Messages you send to the qq2 customer support team via live chat, email, or other channels.

Automatically Collected Data

• IP address and geographic location information based on IP.
• Device type, operating system, app version, and screen resolution.
• Name and version of the web browser used.
• Platform usage data including pages visited, session duration, and game activity records.
• Cookie information and unique device identifiers.

Every piece of data qq2 collects is used for a clear and legitimate purpose. We never use your data for purposes beyond the scope stated in this document without first obtaining your additional consent. The following are the primary purposes for which qq2 uses data:

Qq2 also uses aggregated anonymised data for platform analytics and product improvement purposes. Data in this form cannot be re-linked to any individual and therefore falls outside the scope of personal data protection.

Qq2 does not sell or disclose member personal data to third parties for commercial marketing purposes. However, there are limited situations where qq2 needs to share certain information with trusted service partners to enable the platform to operate smoothly and securely.

Categories of Third Parties That May Receive Data

• Payment service providers: Financial institutions, banks, and digital wallet providers that process your deposit and withdrawal transactions. Data shared is limited to the minimum necessary to complete the transaction only.
• Identity verification providers: Third-party KYC services used to verify your identity documents for legal compliance purposes.
• Game providers: Game developer companies that provide game titles on the qq2 platform may receive session identifiers that cannot be directly linked to your full identity.
• Legal authority: qq2 will disclose required information to Malaysian authorities when mandated by a court order, warrant, or other legal obligation.

All third parties that qq2 works with are bound by strict confidentiality agreements and must comply with data protection standards no less rigorous than qq2's own. qq2 has zero tolerance for any use of member data outside of agreed purposes.

Data security is not just an added feature for qq2 – it is the foundation of the trust you place in us. The qq2 platform employs a multi-layered security approach covering technical, operational, and physical aspects to protect your personal data from unauthorized access, breaches, or destruction.

Technical Security Measures

• Data encryption in transit using TLS 1.3 protocol with 256-bit SSL certificates.
• Encryption at rest for all records containing sensitive personal information.
• Intrusion detection (IDS) and prevention (IPS) systems operating in real time.
• Regular security audits conducted by independent penetration testing teams.
• Two-factor authentication (2FA) is mandatory for all qq2 staff accessing internal systems.

Operational Security Measures

• Principle of least privilege – staff can only access the data necessary to perform their specific duties.
• Mandatory cybersecurity awareness training for all qq2 staff every quarter.
• A clearly defined security incident response procedure that is tested on a regular basis.
• Automated access log auditing to detect any unusual activity.

The qq2 platform uses cookies and similar tracking technologies to enhance the user experience, maintain your login session, and understand platform usage patterns for continuous improvement. Cookies are small text files stored in your web browser or device.

Types of Cookies Used by qq2

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saves your personal settings such as language preference, interface theme, and game display preferences to provide a more personalized experience.
• Analytics Cookies: Used to understand how members interact with the qq2 platform, which pages are visited most frequently, and where users encounter difficulties. This data helps us improve the platform.
• Security Cookies: Helps detect suspicious activity such as unauthorized login attempts or unusual usage patterns to protect your account.

You can manage your cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of the qq2 platform. For more information on managing cookies, please refer to your web browser's documentation.

As a qq2 member and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data that qq2 is obligated to respect and facilitate. These rights may be exercised at any time by contacting our privacy team.

• Right of Access: You have the right to obtain a copy of all personal data qq2 holds about you. This request will be processed within 14 working days.
• Right to Rectification: If any information we hold is inaccurate or outdated, you have the right to request an immediate correction. You may also update most personal information directly through your qq2 account settings.
• Right to Erasure: Under certain circumstances, you have the right to request deletion of your personal data. Please note that some data must be retained for a minimum period as required by Malaysian law for compliance and audit purposes.
• Right to Object to Processing: You have the right to object to the processing of your data for specific purposes, such as marketing communications. To withdraw your marketing consent, you may use the unsubscribe function in any qq2 promotional email.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider where applicable.

Qq2 does not retain your personal data longer than necessary for the purposes stated in this policy, or longer than the minimum period required by applicable Malaysian law. Once the retention period expires, data will be securely deleted or anonymised.

Data Retention Guidelines

• KYC and Identity Data: Retained for 7 years after account closure, in line with Malaysia's AML (Anti-Money Laundering) compliance requirements.
• Financial transaction records: Retained for 7 years for audit and tax compliance purposes.
• Gaming activity log: Retained for 3 years for customer support and responsible gaming compliance purposes.
• Customer support communications: Retained for 2 years from the date of last interaction.
• Analytics cookie data: Deleted 13 months after the date of collection .

When your qq2 account is closed at your own request and no disputes or investigations are ongoing, qq2 will initiate the deactivation of your personal data within 30 days. Data that must be retained for legal compliance purposes will be isolated and not used for any operational purpose.

The qq2 platform is an online gaming service exclusively for individuals aged 18 and above. qq2 does not intentionally collect, store, or process any personal data from children under the age of 18.

All account applicants are required to submit proof of age during the KYC process. Should qq2 discover that any account has been registered by a minor, the account will be suspended immediately and all associated data will be permanently deleted in accordance with established security procedures.

Qq2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform practices, legal requirements, or the technologies we use. Each revised version of the Privacy Policy will display the latest update date at the top of this document.

For material changes — that is, changes that significantly alter how we use your personal data — qq2 will notify you via your registered email or through a prominent notice on the platform at least 7 days before the changes take effect. Continued use of the qq2 platform after the effective date of the changes constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed about how qq2 protects your personal information. If you have any questions about the changes made, do not hesitate to contact us.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how qq2 handles your personal data, we warmly welcome your feedback. The qq2 privacy team is ready to assist and committed to responding within 24 business hours.