Privacy Policy

Privacy Policy qs8a – How We Protect Your Personal Data

Your privacy is more than a legal obligation for qs8a — it is a responsibility we genuinely care about. This document transparently explains what data we collect, why we need it, and how it is protected.

Last Updated: 1 January 2026
SSL 256-bit Data is not sold Strictly controlled access Secure backup
qs8a Privacy Commitment
We do not sell your data
Your information is never sold to third parties for commercial purposes
End-to-end encryption
SSL 256-bit for all data in transit and at rest
Strict internal access controls
Only authorized personnel may access sensitive data
Minimum necessary data
We only collect data strictly necessary for operations

Encrypted Data

Stored with full encryption in a secure database

User Rights

You may request to review, amend, or delete your data

No Commercial Sharing

Your data is not sold or rented to advertisers

Defined Retention Period

Data is retained only as long as required by law

1Introduction

Qs8a ("we", "Platform") is fully committed to protecting your privacy and personal data. This Privacy Policy ("Policy") describes how qs8a collects, uses, stores, and protects your personal information when you use the qs8a platform, including the qs8a.pro website and the qs8a mobile app.

This policy is written in plain language so you truly understand what happens with your data — not just lengthy, tedious legal jargon. We believe transparency is the foundation of trust, and user trust is something qs8a does not take lightly.

By registering a qs8a account or using any of our services, you agree to the collection and use of information as described in this Policy. If you do not agree, please stop using the platform and contact us for assistance in deleting your account.

This Privacy Policy is to be read together with qs8a Terms and Conditions. Together, they form the complete agreement between you as a user and qs8a as the platform.

2Personal Data We Collect

Qs8a only collects data that is genuinely necessary to provide a safe, seamless service that meets legal requirements. The following are the categories of data we collect:

Data Category Example Information Primary Purpose
Identity Information Full name, MyKad number, date of birth, KYC selfie photo Identity verification (KYC), age limit controls
Contact Information Phone number, email address Account communications, 2FA, notifications
Financial Information Bank account number, account holder name, e-wallet Deposits, withdrawals, AML compliance
Technical Data IP address, device type, browser, operating system Security, fraud detection
Activity Data Game records, betting history, transaction logs Compliance, disputes, customer support
Cookie Data Session cookies, language/theme preference cookies Platform functionality, user experience

Qs8a not directly collecting credit/debit card numbers — all card transactions are processed through PCI-DSS certified third-party payment gateways. qs8a never stores your full payment card details.

Data Minimisation Principle: qs8a only collects data that is genuinely necessary. We do not request information that is irrelevant to the services you use.

3How We Use Your Personal Data

Every piece of data qs8a collects is used for a specific and legitimate purpose. We do not use your data for purposes unrelated to the services you use. The primary purposes of data use are:

  • Account management: Registering and managing user accounts, including login, security, and account settings.
  • Identity verification (KYC): Ensuring all users meet the age and identity requirements set by qs8a policy and compliance obligations.
  • Transaction processing: Processing deposits, withdrawing wins, and handling any financial transactions in your account.
  • Fraud prevention and security: Detecting and preventing fraud, money laundering, and unauthorised use of the platform.
  • Customer support: Assisting you with enquiries, technical issues, or account-related disputes.
  • Legal compliance: Meeting reporting and compliance obligations required by the relevant authorities.
  • Platform improvements: Analysing usage patterns in aggregate (not individually) to improve the user experience.
  • Service communications: Sending important notifications relating to your account, security, and transactions.

Qs8a not using your personal data for third-party advertising, user profile sales, or any commercial purpose not directly related to qs8a services.

4Data Sharing & Disclosure

Qs8a does not sell, rent, or share users' personal data with third parties for marketing or commercial purposes. However, in certain limited situations, qs8a may need to share certain information with:

  • Authorised service providers: This includes payment processors (FPX gateway, DuitNow, TNG), KYC verification providers, and cloud infrastructure providers — all bound by strict confidentiality agreements with qs8a.
  • Competent authority: When required by law, court order, or directive from a legitimate regulatory authority. qs8a will only disclose data specifically required by the relevant request.
  • Fraud prevention: In cases involving suspected fraud or money laundering, relevant information may be shared with law enforcement agencies or other financial platforms as a preventive measure.

Every third party that receives access to qs8a user data must sign a data protection agreement and may only use that data for permitted purposes. qs8a conducts regular audits of all third-party providers to ensure ongoing compliance.

Important reminder: qs8a will never ask for your password or full account information via email, SMS, or live chat. If you receive such a request, please report it to qs8a support immediately.

5Data Security at qs8a

Protecting your data is a top technical priority for the qs8a engineering team. Here are the security layers we have implemented:

  • 256-bit SSL/TLS encryption: All data transmitted between your device and qs8a servers is protected with military-grade encryption. This includes login, transactions, and all activity on the platform.
  • Database encryption: Sensitive data stored in the qs8a database — including KYC information and financial details — is encrypted at rest using the latest encryption algorithms.
  • Hashed password: User passwords are never stored in plain text. They are processed through a one-way cryptographic hash function that cannot be reversed.
  • Role-based access control: qs8a staff may only access data relevant to their job responsibilities. No staff member has unlimited full access to all user data.
  • Monitoring and audit logs: All access to sensitive data is recorded in audit logs that are securely stored and regularly monitored.
  • Real-time backup: Data is backed up in real time to a secondary data center to ensure data continuity even in the event of a technical failure.

That said, it must be acknowledged that no security system in the world is 100% impenetrable. qs8a continuously updates and strengthens its security systems as a proactive measure against ever-evolving cyber threats.

If you suspect any suspicious activity on your qs8a account, change your password immediately and enable two-factor authentication (2FA) through your account settings. Then contact qs8a support for further review.

6Cookies & Tracking Technologies

Qs8a uses cookies and similar technologies to ensure the platform functions properly and to deliver a better user experience. The following are the types of cookies we use:

  • Essential cookies: Required for core platform functions such as login session management and security. Without these cookies, the platform cannot function properly. These cookies cannot be disabled.
  • Preference cookies: Saving your preferences such as interface language and colour theme so you do not need to reset them on every visit.
  • Analytics cookies (aggregated only): Collecting usage data in aggregate form that cannot identify individuals, to help qs8a understand how users interact with the platform and improve it.

Qs8a not using third-party cookies for advertising or cross-site tracking. We do not track your activity outside the qs8a platform.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the qs8a platform.

7Your Rights as a User

As a qs8a platform user, you have the following rights regarding your personal data. You may exercise any of these rights by contacting the qs8a privacy team:

Right to Access

Request a copy of the personal data qs8a holds about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your data, subject to legal retention requirements.

Right to Restriction

Request that qs8a restrict how your data is processed under certain circumstances.

Right to Portability

Receive your data in a structured format that can be transferred to another platform.

Right to Object

Object to the processing of your data for specific purposes such as direct marketing.

Qs8a will respond to requests relating to the above rights within 30 working days from the date the request is received. Some requests may require additional identity verification before being processed.

8Data Retention Period

Qs8a does not retain your personal data indefinitely. Retention periods are determined based on operational needs and applicable legal obligations:

  • Active account data: Retained for as long as the account remains active and for the required period after account closure for compliance purposes.
  • Financial transaction records: Retained for a minimum of 7 years after the transaction date in accordance with applicable anti-money laundering legal requirements.
  • KYC documents: Retained for the period mandated by applicable financial compliance laws, typically 5–7 years after account closure.
  • Support communication logs: Retained for 2 years after the relevant support case is closed.
  • Technical log data: Retained for 90 days for security and fraud detection purposes, then automatically deleted.

When data is no longer needed and there is no legal obligation to retain it, qs8a will securely delete or anonymize that data.

9Cross-Border Data Transfers

As a platform that uses global cloud infrastructure, some of your data may be stored or processed on servers located outside Malaysia — particularly in the context of CDN services and international payment processors.

In each such case, qs8a ensures that:

  • Data transfers are only made to countries or entities that provide a level of data protection equivalent to or higher than that required in Malaysia.
  • All third-party infrastructure providers are bound by comprehensive data protection agreements.
  • Sensitive data such as KYC documents is prioritized for storage in data centers located in the Asian region.

10Privacy Policy Amendments

Qs8a reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any significant amendments will be communicated to users via:

  • In-platform notifications on qs8a and/or the mobile app.
  • Email to the registered address, for significant changes.
  • Updates to the "Last Updated Date" section at the top of this page.

Continued use of the qs8a platform after any amendment takes effect constitutes your acceptance of the updated Policy. We therefore encourage you to review this page periodically.

11Contact Us About Privacy

If you have any questions, concerns, or wish to exercise any of your privacy rights, the qs8a privacy team is ready to help. You can reach us via:

  • Live Chat: Within the qs8a platform or mobile app — the fastest way to get help.
  • Email: [email protected] for specific privacy and personal data enquiries.
  • General support email: [email protected] for general enquiries about your account.

The qs8a privacy team will respond within 3 working days for email enquiries, and within under 2 minutes for live chat during operating hours.


This Privacy Policy is governed by the applicable laws of the jurisdiction where qs8a is registered. Any disputes relating to this Policy will be resolved in accordance with the mechanisms set out in the qs8a Terms and Conditions.

How qs8a Protects Your Data

Not just encryption alone — qs8a takes a layered approach to ensure your data stays secure at every level.

Encryption in Transit & at Rest

SSL 256-bit protects data in transit between your device and our servers. Data stored in our databases is also encrypted with separate keys.

Tiered Access Control

A role-based access control system ensures each qs8a staff member can only view data relevant to their specific role.

24/7 Threat Monitoring

The qs8a SIEM (Security Information and Event Management) system monitors all activity in real time and immediately alerts the security team upon detecting anomalies.

Full Audit Log

Every access to sensitive data is recorded in audit logs stored in a separate system that cannot be altered by any staff member.

Secure Data Backup

Data is backed up in real time to a secondary data center at a separate location. Backups are also encrypted and tested for recoverability on a regular basis.

Regular Penetration Testing

Qs8a conducts regular security and penetration testing through independent third parties to identify and address vulnerabilities before they can be exploited.

Your Data is Safe at qs8a — Register with Confidence

Your privacy is protected by world-class encryption. Over 500,000 Malaysian users have trusted qs8a to keep their personal data safe.

For users aged 18 and above only. Please gamble responsibly. Responsible Gambling Guide.

Bahasa Melayu