Privacy Policy — How qqcuan Handles Your Data

This Privacy Policy ("Policy") is issued by qqcuan ("qqcuan", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://qqcuan.buzz. This Policy applies to all users ("you", "User", "Player") who access the Platform, register an account, or otherwise interact with qqcuan's services.

qqcuan takes data privacy seriously. This Policy describes in clear terms what categories of personal data we collect from you, the purposes for which we process it, the conditions under which we may share it with third parties, the security measures we apply to protect it, and the rights you hold in relation to your own data.

By creating an account on qqcuan or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. If you do not accept this Policy, you should not use the Platform and should contact us to request account closure.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including name, identification number, contact details, payment information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means qqcuan, as the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" means any third party that processes personal data on behalf of qqcuan, under contractual obligations and in accordance with our instructions.
• "Cookies" means small text files stored on your device by a website, used to retain session information and preferences.
• "KYC Data" means identity and address verification documents submitted by a User during the account verification process.
• "Platform" means the qqcuan website, mobile interface, and all associated services accessible at https://qqcuan.buzz.

qqcuan collects the following categories of personal data from users of the Platform. Collection occurs only to the extent necessary for the purposes described in this Policy.

qqcuan collects personal data through the following channels:

qqcuan processes your personal data for the following specific and legitimate purposes:

• Account Registration & Management: To create, maintain, authenticate, and service your qqcuan account, including processing password resets, profile updates, and account closure requests.
• Identity Verification (KYC): To confirm that you are who you say you are, that you meet the minimum age requirement of 21, and that you are not subject to any self-exclusion, sanctions list, or account ban.
• Transaction Processing: To process deposits made via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency, and to process withdrawal requests to verified payment methods.
• Regulatory Compliance & Anti-Money Laundering: To meet our obligations under applicable gaming regulations and to detect, prevent, and report money laundering, terrorist financing, and fraud.
• Responsible Gambling Enforcement: To apply deposit limits, self-exclusion requests, cooling-off periods, and age restriction policies in compliance with our responsible gambling programme.
• Customer Support: To respond to your queries, resolve disputes, handle complaints, and improve our support processes based on interaction history.
• Platform Security & Fraud Prevention: To detect and prevent unauthorised access, multi-accounting, bonus abuse, collusion, and other fraudulent or prohibited activities.
• Service Improvement & Analytics: To analyse aggregated, anonymised usage data to improve Platform design, game offerings, payment flows, and overall user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or in-platform messaging, where you have consented to receive such communications. You may withdraw this consent at any time.

qqcuan processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and qqcuan — including account creation, transaction processing, KYC verification, and withdrawal handling.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out in pursuit of qqcuan's legitimate business interests — such as fraud prevention, Platform security, and service improvement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

qqcuan does not sell, rent, or trade your personal data. We share your data only in the following limited and controlled circumstances:

As an online platform operating under international gaming licensing, qqcuan's data infrastructure may involve storage and processing of personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, we apply appropriate safeguards to protect it, including:

• Contractual data protection clauses with service providers in other jurisdictions, incorporating data protection standards comparable to applicable law.
• Technical and organisational security measures appropriate to the sensitivity of the data being transferred.
• Restriction of international transfers to jurisdictions that have been assessed as providing adequate data protection standards, or to service providers who have committed to equivalent standards via binding agreements.

By using the Platform, you acknowledge and consent to the possibility that your personal data may be processed in jurisdictions outside Malaysia in the circumstances described above.

qqcuan retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Once the applicable retention period expires, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

qqcuan implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the qqcuan Platform is encrypted using TLS 1.2 or higher (visible as HTTPS with a padlock indicator in your browser).
• Encryption at Rest: Sensitive data stored on our systems — including KYC documents and financial data — is encrypted using AES-256 at rest.
• Access Controls: Strict role-based access controls govern which personnel can access personal data, limited to those with a legitimate operational need. All access is logged and audited.
• Two-Factor Authentication: Internal systems containing personal data require multi-factor authentication for staff access.
• Regular Security Audits: We conduct periodic security assessments of our Platform and data infrastructure to identify and remediate vulnerabilities.
• Incident Response: We maintain a data breach incident response procedure. In the event of a breach that materially affects your personal data, we will notify affected users and relevant authorities within the timeframes required by applicable law.

qqcuan uses cookies and similar technologies (such as web beacons and local storage) to deliver and improve the Platform. A "cookie" is a small text file stored on your device by a website. We use the following categories of cookies:

Subject to applicable law and certain operational limitations, you hold the following rights with respect to the personal data qqcuan holds about you:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this within 30 days of a verified request.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data. For minor corrections (e.g., email address), you may update your own account profile directly.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing is unlawful. Note that certain data must be retained for regulatory compliance purposes and cannot be deleted within mandatory retention periods.
• Right to Restrict Processing: You may request that we restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to processing on the basis of legitimate interests.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing of your data based on legitimate interests or for direct marketing purposes. Objections to direct marketing will be actioned immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, please contact our data privacy team via live chat or at [email protected]. All requests will be acknowledged within 5 business days and responded to within 30 days. We may need to verify your identity before processing your request.

The qqcuan Platform is strictly intended for users aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age is verified as part of the registration and KYC process.

If we become aware that personal data has been collected from a person under 21, we will take immediate steps to suspend the relevant account, delete or anonymise the collected data, and return any deposited funds after identity verification of the guardian or parent where applicable.

If you are the parent or guardian of a minor and believe that the minor may have accessed the Platform or provided personal data to qqcuan, please contact our support team at your earliest opportunity.

The qqcuan Platform may include references to, or integration with, third-party payment processors and service providers (such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-affiliated banks including Maybank, CIMB, Public Bank, and Hong Leong Connect) as part of our transactional infrastructure. These third parties operate their own privacy policies and data processing practices, which are independent of qqcuan.

When you are redirected to a third-party payment interface to complete a deposit or withdrawal, you are subject to that provider's terms and privacy policy for the duration of that interaction. qqcuan is not responsible for the data practices of third-party providers and encourages you to review their privacy policies independently.

qqcuan reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational circumstances. The effective date of the current version is displayed at the top of this page.

Where material changes are made to this Policy — particularly where such changes affect your rights or the purposes for which we process your data — we will notify you via the email address associated with your registered account or via a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and contact us to initiate account closure and a data deletion request where applicable.

For all questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by qqcuan, please contact us through the following channels:

• Live Chat: Available 24/7 via the live chat feature on the Platform. Average response time: under 2 minutes. Clearly identify your query as a privacy or data protection matter so it can be routed to the appropriate team.
• Email: [email protected] — email responses within 12 hours. For data subject access requests or deletion requests, please include "DATA REQUEST" in your email subject line and provide your registered account username for verification.

We are committed to addressing all privacy-related concerns promptly and transparently. If after contacting us you believe your data protection rights have not been adequately addressed, you retain the right to escalate your concern to the relevant data protection authority in your jurisdiction.