QQ101 Privacy Policy — Our Commitment Protecting Your Data

This Privacy Policy ("Policy") is issued by QQ101 ("Platform", "We", "QQ101") and applies to all individuals who access or use the QQ101 platform at qq101.my, including all registered members, website visitors, and other users of QQ101 services.

QQ101 is committed to protecting the privacy and security of all users' personal data. This Policy transparently explains how we collect, use, store, and protect your personal information — as well as the rights you hold as a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering as a QQ101 member, accessing the platform, or providing us with your personal information, you agree to the terms set out in this Privacy Policy. Please read this document carefully. If you do not agree with any part of this policy, please discontinue your use of the QQ101 platform.

QQ101 collects several categories of personal data depending on how you interact with our platform. Below is a detailed breakdown of the types of data collected:

a) Personal Identification Data (collected during registration)

• Full name as stated on your MyKad
• Malaysian identity card number (MyKad number)
• Date of birth and gender
• An active Malaysian phone number
• An active email address
• Current residential address

b) Financial Data (collected during transactions)

• Payment method used — Touch 'n Go eWallet account name, DuitNow, GrabPay, Boost, ShopeePay, or FPX account number
• Complete records of all deposit and withdrawal transactions, including amount, time and status
• Account balance records and fund movement history

c) Platform Usage Data (collected automatically)

• Gaming history including games played, bet amounts, outcomes, and time spent
• IP address of the device used
• Device information: device type, operating system, browser version
• Access logs: login times, logout times, and in-platform activity
• General location data (state within Malaysia) based on IP address

d) Communication Data (collected when you contact us)

• Live chat conversation records with the support team
• Emails sent to or received from QQ101
• Official complaints and their resolution records

QQ101 collects and processes your personal data for the following legitimate and stated purposes:

QQ101 will not use your personal data for any purpose beyond those stated above without first obtaining your renewed consent. You may withdraw consent for promotional communications at any time via your account settings or by contacting our support team.

QQ101 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, QQ101 may share your personal data with the following categories of third parties in limited and controlled circumstances:

• Payment Service Providers: Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX-participating banks that process your financial transactions. This sharing is necessary to complete the transactions you request.
• Game Providers: Evolution Gaming, Pragmatic Play, PG Soft, Microgaming, and other providers that supply gaming software to QQ101. Data shared is limited to the game session information required for gameplay functionality.
• Technical Service Providers: Companies that provide IT infrastructure, cloud hosting, cybersecurity, and analytics services that support QQ101's platform operations. All such providers are bound by strict confidentiality agreements.
• Law Enforcement Authorities: Malaysian government agencies, the police, courts, or other regulatory authorities where required by Malaysian law or a valid court order.
• Auditors and Professional Advisors: Accountants, lawyers, or consultants providing professional services to QQ101, subject to their own professional confidentiality obligations.

QQ101 continually invests in data security infrastructure to ensure your personal information is protected at every stage — in transit, in processing, and at rest.

The technical security measures we have in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and QQ101's servers is encrypted using the latest SSL/TLS protocols — no party can read this data in transit.
• Stored Data Encryption: Sensitive data stored in QQ101's databases — including passwords, financial information, and identity documents — is encrypted using industry-standard encryption algorithms.
• Two-Factor Authentication (2FA): A 2FA system is available for all member accounts as an additional security layer to prevent unauthorized access.
• 24/7 Activity Monitoring: Our automated monitoring system runs around the clock to detect and flag any suspicious or unusual access to member accounts or data.
• Internal Access Controls: Member personal data is accessible only to QQ101 staff who have a legitimate need for it in the course of their work. Access is granted on a strict need-to-know basis.
• Regular Security Audits: QQ101 conducts regular internal and external security audits to identify and address any vulnerabilities in our data protection systems.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. In the event of an extraordinary data breach, QQ101 is committed to notifying affected members and the relevant authorities within the timeframe required by applicable law.

You also play an important role in your own data security — keep your password confidential, avoid accessing your QQ101 account on public devices, and enable 2FA if you have not already done so.

Like most online platforms, QQ101 uses cookies and similar tracking technologies to enhance the user experience and platform operations. Cookies are small text files stored on your device when you visit our website.

QQ101 uses several types of cookies:

• Essential Cookies (Required): Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled, as the platform will not function properly without them.
• Functional Cookies: Stores your preferences such as display language, display settings, and game preferences to enhance your experience on future visits.
• Analytics Cookies: Helps us understand how users interact with the platform — the most frequently visited pages, time spent, and navigation paths. This data is used in aggregated and anonymised form for platform improvement purposes.
• Security Cookies: Helps QQ101's security systems identify and prevent fraudulent activity or unauthorised access.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the QQ101 platform and prevent you from accessing certain features.

QQ101 does not retain your personal data indefinitely. We maintain a clear data retention policy based on the purpose of collection and applicable legal obligations:

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. The deletion process uses methods that ensure the data cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and QQ101's privacy policy, you have the following rights with respect to your personal data:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you. Requests will be fulfilled within 14 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Corrections will be made within 7 business days of a confirmed request.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data in certain situations — for example, when the data is no longer needed for its original purpose, or when you withdraw your consent. Such requests are subject to legal retention obligations that may prevent the immediate deletion of certain data.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict how we process your data while a dispute is being resolved.
• Right to Data Portability: You may request your personal data in a machine-readable format for transfer to another platform, to the extent that this is technically practicable.
• Right to Object: You may object to the processing of your data for specific purposes, such as direct marketing, at any time.
• Right to Withdraw Consent: For processing that relies on your consent, you may withdraw that consent at any time without affecting the validity of any processing that took place prior to withdrawal.

To exercise any of the rights above, submit a written request to support@qq101.my with the subject line "Privacy Rights Request", along with your account number and a clear description of your request. We may require additional identity verification before processing your request in order to protect the security of your account.

The QQ101 platform is exclusively for individuals aged 21 and above. QQ101 does not intentionally collect, process, or store the personal data of any individual under the age of 21.

All QQ101 account registrations require age verification through valid MyKad information. Should we discover that we have inadvertently collected data from an individual below the stipulated age, we will take the following steps immediately:

• Close the relevant account immediately
• Delete all associated personal data from our systems
• Cancel all associated financial transactions
• Returning any deposited funds through the appropriate process

If you become aware that someone under the age of 21 has registered for or is using the QQ101 platform, please notify us via support@qq101.my immediately. We take this matter seriously and will respond without delay.

In the course of platform operations, some of your personal data may be processed or stored on servers located outside Malaysia. This occurs in the following contexts:

• Use of international cloud server infrastructure that processes data across multiple locations to ensure platform stability and speed
• Required data sharing with international game providers such as Evolution Gaming, Pragmatic Play, and others, whose servers may be located outside Malaysia

When your personal data is transferred outside of Malaysia, QQ101 ensures that:

• The receiving country or entity maintains a level of data protection equivalent to or greater than that required under Malaysian law
• Appropriate data transfer agreements have been signed with the recipient to ensure adequate data protection
• Data transfers are carried out only for necessary purposes and limited to the minimum amount required

QQ101 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, applicable legislation, or platform operations. Any amendments will be indicated by an updated revision date at the top of this page.

For significant changes that affect how we use your personal data, QQ101 will notify you via:

• Email to your registered email address at least 14 days before the changes take effect
• In-platform notification when you log in
• Announcements on the qq101.my homepage

Continued use of the QQ101 platform after any changes take effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your personal data by submitting a request to our support team.

We encourage you to review this page periodically to stay up to date with QQ101's latest privacy practices.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how QQ101 handles your personal data, please contact us via:

• Privacy Email: support@qq101.my — include the subject line "Privacy Enquiry" in your email to help us respond faster.
• Live Chat: Available 24 hours a day, 7 days a week via the QQ101 platform.
• Post: Send a written letter to QQ101's operational address, which can be obtained from our support team.

We are committed to responding to all privacy-related enquiries within 3 working days for general enquiries and within 14 business days for formal privacy rights requests.

If you believe we have failed to address your privacy concerns adequately, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant enforcement authority in Malaysia.