Qqalfa Privacy Policy – Malaysia Personal Data Protection

Qqalfa operates as an online gaming platform serving users in Malaysia. As a platform operator that collects and processes member personal data, qqalfa recognises its significant responsibility in safeguarding that information. This Privacy Policy has been drawn up in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia and international data security standards.

This policy applies to all information you provide to qqalfa directly — such as during account registration or the verification process — as well as information collected automatically when you use the qqalfa platform. This includes access via a browser on a smartphone, tablet or personal computer.

Qqalfa takes a responsible approach to data privacy. We collect only the data genuinely necessary to deliver the best possible service to our members, and we never use that data for any purpose beyond what is stated in this policy. Your trust is something qqalfa takes seriously and will never treat lightly.

Qqalfa collects various types of personal data from members based on the operational requirements of the platform. This information is organised into the following categories:

Data You Provide Directly:

• Identity Information: Full name, date of birth, identity card number (MyKad) during the KYC verification process.
• Contact Information: Active email address, Malaysian mobile phone number, residential address.
• Account Information: Chosen username, encrypted password, security questions and corresponding answers.
• Financial Information: Details of the payment method used, including the account name for digital wallets (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or FPX bank accounts (Maybank2u, CIMB Clicks). qqalfa does not store your digital wallet PIN or password.
• Verification Documents: A copy of your identity card or passport, requested for identity verification and first-time withdrawal processing.

Automatically Collected Data:

• Device Data: Device type, operating system, phone model, screen resolution and device identifier.
• Connection Data: IP address, internet service provider (ISP) name, access time and date, pages visited within the platform.
• Game Activity Data: Betting records, game results, deposit and withdrawal history, play sessions and game preferences.
• Cookie Data: Session cookies, preference cookies and analytics cookies that help qqalfa understand how the platform is used for improvement purposes.

Qqalfa uses collected personal data solely for legitimate purposes directly related to the provision of platform services. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying and managing your qqalfa account, including the login process, password recovery and profile information updates.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, and managing withdrawals to your registered payment method.
• Identity Verification (KYC): Verifying member age and identity in accordance with legal requirements and to prevent access by individuals under the age of 18.
• Fraud Prevention: Detecting and investigating suspicious activity, attempted money laundering, multi-account usage or any breach of qqalfa's Terms & Conditions.
• Customer Support: Handling enquiries, complaints and disputes submitted by members via live chat or email.
• Service Communications: Sending important account-related notifications, transaction updates, policy changes and security information via email or SMS.
• Platform Improvements: Analysing aggregated usage patterns to develop new features, improve the interface and enhance the overall performance of the qqalfa platform.
• Marketing Communications: Sending information about qqalfa promotions, bonuses and special offers — only to members who have given their consent to receive such communications. You may withdraw this consent at any time.
• Legal Compliance: Fulfilling the reporting and record-keeping obligations required under applicable Malaysian law.

Qqalfa will not use your personal data for any purpose outside of the list above without first obtaining your specific consent. Should circumstances require data to be used for a new purpose not stated in this policy, you will be informed and given the option to provide or withhold your consent.

Qqalfa does not sell, rent or trade member personal data to any third party for marketing or other commercial purposes. However, in certain limited situations, qqalfa may need to share your information with the following parties:

• Payment Service Providers: Digital wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banking services (DuitNow, Maybank2u, CIMB Clicks) receive the transaction details necessary to process your deposits and withdrawals. This sharing is limited strictly to the data required.
• Game Providers: qqalfa's game provider partners, such as Evolution Gaming and Pragmatic Play, receive the session identifiers and betting information required to run the games. They do not receive your full personal identity details.
• Technology Service Providers: Companies that provide server infrastructure, cloud services, platform analytics and cybersecurity that support qqalfa's day-to-day platform operations. All such providers are bound by strict data confidentiality agreements.
• Malaysian Authorities: qqalfa may disclose information to Malaysian government authorities, the police or law enforcement agencies if required to do so by a court order, a valid search warrant or other applicable legal requirements.
• Audit and Compliance: Independent auditors or regulatory bodies conducting compliance assessments and security audits may be granted limited access to certain records within the scope of a formal audit.

In all data-sharing scenarios described above, qqalfa ensures that only the minimum data strictly necessary for that specific purpose is shared — a data minimisation principle that sits at the core of qqalfa's privacy policy. All third parties who receive qqalfa member data are contractually bound to protect it to the same or higher standards that qqalfa itself adheres to.

Protecting member personal data from unauthorised access, accidental disclosure or misuse is among qqalfa's highest technical priorities. The following are the security measures qqalfa has put in place:

• 256-bit SSL Encryption: All communications between your browser and qqalfa's servers are encrypted using 256-bit TLS/SSL — the same standard used by leading banking institutions in Malaysia. This means all information you send to qqalfa cannot be read by any third party intercepting network traffic.
• Password Encryption: Your qqalfa account password is never stored in plain text. All passwords are processed using a strong cryptographic hashing algorithm (bcrypt), which ensures that the actual password cannot be recovered — even by qqalfa staff.
• Two-Factor Authentication (2FA): qqalfa offers a two-factor authentication option that members can enable in their account settings for an added layer of security during login.
• Real-Time Threat Monitoring: qqalfa's security monitoring system operates 24 hours a day to detect suspicious login attempts, brute-force attacks and unusual account activity.
• Data Segregation: Member personal data is stored in a server environment that is completely separate from platform operational data, with strict access controls in place. Only specifically authorised personnel are permitted to access sensitive member data.
• Regular Security Audits: qqalfa conducts regular vulnerability assessments and penetration testing to identify and remediate any security weaknesses before they can be exploited.
• Secure Data Centres: qqalfa member data is stored in certified data centres that comply with internationally recognised physical and digital security standards, including biometric access controls and continuous CCTV monitoring.

While qqalfa takes all reasonable steps to protect your data, no online security system can guarantee 100% protection against every threat. We encourage members to take their own precautions as well, such as using strong, unique passwords and never sharing their qqalfa account login credentials with anyone.

The qqalfa platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. Cookies are small text files stored in your browser when you visit the qqalfa platform.

Qqalfa uses the following types of cookies:

• Essential Cookies: Required for core platform functions such as maintaining your login session, saving your language preference and ensuring session security. These cookies cannot be disabled as they are essential for the platform to operate correctly.
• Preference Cookies: Saves your personal preferences such as display settings, frequently played games and your chosen odds format, so every time you log in you get a more personalised experience.
• Analytics Cookies: Helps qqalfa understand how members use the platform — including the most visited pages, time spent on the platform and navigation patterns. This information is used in aggregated form and is not used to identify any specific individual.
• Security Cookies: Used to detect suspicious login activity and protect your account from unauthorised access.

You can manage your cookie settings through your browser settings at any time. However, disabling essential cookies may affect the functionality of the qqalfa platform and your gaming experience. Third-party cookies from analytics providers do not contain your personally identifiable information.

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you as a qqalfa member have the following rights regarding your personal data:

To submit any request relating to the rights above, please contact the qqalfa support team via live chat or email at support@qqalfa.click. qqalfa is committed to responding to data rights requests within 30 calendar days from the date the request is received. For complex requests, this period may be extended by up to 60 days, with prior notice given to you.

Qqalfa retains member personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by Malaysian law. The following are general guidelines for data retention periods:

• Active Account Data: Retained for as long as your account is active on the qqalfa platform and for a reasonable period after account closure to address any disputes or claims that may arise.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of transaction, in compliance with Malaysian financial and anti-money laundering legal requirements.
• Gaming Activity Records: Retained for 3 years for audit purposes, dispute resolution and responsible gambling analysis.
• Security Logs: Retained for 12 months for threat detection and security incident investigation purposes.
• Support Communication Data: Live chat session records and support emails are retained for 2 years for team training and service improvement purposes.
• Cookie Data: Session cookies are deleted when you close your browser. Persistent cookies expire according to a set schedule, typically between 30 days and 1 year.

When data is no longer needed and there is no legal obligation to retain it, qqalfa will permanently delete or irreversibly anonymise that data using secure methods. Deleted data cannot be recovered.

The qqalfa platform is exclusively for individuals aged 18 and above. qqalfa does not knowingly collect or process personal data from individuals under the age of 18. This is an absolute commitment with no exceptions.

During registration, prospective members are required to confirm that they are 18 years of age or older. Further age verification is carried out during the KYC (Know Your Customer) process, which requires official Malaysian identification documents. Any account suspected of being registered by an underage individual will be suspended immediately and investigated.

If qqalfa discovers that personal data belonging to an individual under the age of 18 has been collected without our knowledge, that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian who suspects that your underage child has registered a qqalfa account, please contact us immediately at support@qqalfa.click so that the appropriate action can be taken without delay.

Qqalfa reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, evolving Malaysian legal requirements or technological developments that affect how we manage data. Each updated version of the Privacy Policy will display the relevant revision date at the top of this page.

For amendments that involve material changes to how qqalfa collects or uses your personal data, we will provide adequate notice through:

• An email notification to your registered email address at least 14 days before the amendment takes effect.
• A prominent notice within the qqalfa platform upon your next login.
• Updating the "Last Updated" date displayed at the top of this Privacy Policy page.

Continued use of the qqalfa platform after any amended Privacy Policy comes into effect constitutes your acceptance of the revised privacy terms. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account in an orderly manner.

If you have any questions, concerns or requests regarding this Privacy Policy or how qqalfa handles your personal data, please contact us through the following channels:

• Live Chat: Available on the qqalfa platform 24 hours a day, 7 days a week. This is the fastest way to get an immediate response.
• Email: support@qqalfa.click — we aim to respond to all privacy-related enquiries within 3 working days.

When submitting a request relating to your privacy rights, please include the following information to help us process it promptly: your qqalfa account username, registered email address, type of request (access, correction, deletion, etc.) and specific details of the data concerned. All privacy-related communications are handled in strict confidence by our specially authorised team.

Qqalfa is committed to working with members to resolve any privacy concerns in a fair and transparent manner. Your satisfaction with how we handle your data is something we take seriously, and we value every piece of feedback received to continually improve the privacy practices of the qqalfa platform.