Privacy Policy

1. Who we are

Qintez is a point-of-sale and club-management platform built for snooker and billiards venues. Qintez is operated by VEONT HYC TECHNOLOGIES PLT, a company incorporated in Malaysia ("Qintez", "we", "us", or "our"). We are the data controller responsible for the personal data described in this policy. You can reach us at [email protected].

2. Scope of this policy

This policy applies to your use of the Qintez web application at qintez.com and to the Qintez mobile applications, including the Android app (package com.qintez.pos), which loads the same Qintez web experience inside a secure app shell. It covers the customer wallet and profile experience, as well as the operator-facing administration tools used by outlet owners, managers, and staff.

3. Information we collect

We collect the following categories of personal data:

• Phone number — used as your primary identifier for one-time-password (OTP) login.
• Name — to personalise your account and receipts.
• Email address — optional, used for account communications and receipts where provided.
• Wallet balance and transaction history — prepaid wallet balances, top-ups, bonuses, and spending records.
• Orders and purchases — food, drink, and other items you buy at a venue.
• Table session history — records of your table-time sessions, including timing and pricing.
• Device and usage data — device type, app version, and basic interaction data used to keep the service reliable and secure.
• Cookies and authentication tokens — essential session cookies and tokens that keep you securely signed in.

Payments are processed at the venue (cash, card, or e-wallet at the outlet). Qintez stores the transaction record only — we do not store full payment card numbers.

4. How we use your information

• Provide, operate, and maintain the Qintez service.
• Process wallet transactions, top-ups, bonuses, and offers.
• Send one-time passwords for login via WhatsApp or SMS.
• Generate receipts and transaction confirmations.
• Provide customer support and respond to your requests.
• Detect, prevent, and investigate fraud and abuse.
• Comply with legal, regulatory, and accounting obligations.

5. Legal bases for processing

Where the GDPR applies, we rely on the following legal bases to process your personal data:

• Performance of a contract — to provide the account, wallet, and POS services you use.
• Legitimate interests — to keep the service secure, prevent fraud, and improve reliability, balanced against your rights.
• Consent — where we ask for it, such as optional communications; you may withdraw consent at any time.
• Legal obligation — to retain transaction records and meet regulatory requirements.

6. How we share information

We share personal data only as described below:

• Outlet operators — venues where you transact can see your profile, wallet activity, and orders at their venue, so they can serve you and manage their business.
• Service providers — Supabase, which provides our hosting, database, and authentication infrastructure; and messaging providers that deliver OTP codes via WhatsApp or SMS. These providers act on our behalf under appropriate data-protection terms.
• Legal and safety — where required by law, regulation, or valid legal process, or to protect rights, safety, and the integrity of the service.

We do not sell your personal data. The Qintez customer mobile app displays advertising through Google AdMob, which involves sharing limited device and usage data with Google for ad delivery — see the Advertising section below for full details.

7. International data transfers

We operate globally, and your personal data may be processed in countries other than your own, including by our service providers. Where data is transferred internationally, we take steps to ensure it remains protected by appropriate safeguards consistent with GDPR-grade and PDPA standards.

8. Data retention

We keep your personal data for as long as your account is active and for as long as needed to provide the service. We retain transaction and financial records for the periods required by applicable statutory, tax, and accounting obligations, after which the data is deleted or anonymised.

9. Your rights

Subject to applicable law, you have the right to access your data, request correction (rectification), request erasure, receive a copy of your data in a portable format, object to certain processing, and withdraw consent where processing is based on consent. These rights reflect both the GDPR and Malaysia's PDPA framework.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law. You may also have the right to lodge a complaint with your local data protection authority.

10. Children

Qintez is not directed at children. The wallet and payment features are intended for users aged 18 and over, and the service as a whole is not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Security

We protect your data using encryption in transit, role-based access controls that limit who can see what, and audit trails for sensitive actions. While no system can be guaranteed perfectly secure, we work continuously to safeguard your personal data against unauthorised access, loss, or misuse.

12. Cookies

On the web, we use essential cookies and tokens only — specifically the Supabase session cookie that keeps you securely signed in. We do not use advertising or cross-site tracking cookies on the web. The Qintez mobile app shows ads through Google AdMob, which relies on mobile advertising identifiers rather than browser cookies; see the Advertising section for details.

13. Advertising

The Qintez customer mobile app displays advertising through Google AdMob. Advertising in the app is operated by LawyerDesk Advocacy Pvt Ltd, which also publishes the Qintez app on Google Play. VEONT HYC TECHNOLOGIES PLT remains the operator of the Qintez service and the data controller for your account and transaction data described in this policy.

To serve and measure ads, Google and its partners may collect and process device identifiers (including your device's advertising ID), IP address, general location inferred from IP, ad interactions (such as impressions and clicks), and diagnostic information about the app. Google acts as an independent controller of the data it collects for advertising and processes it under its own policies. You can review how Google handles this data in the Google Privacy Policy and How Google uses information from sites or apps that use its services.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we present a Google-provided consent flow the first time you use the app, so you can choose whether to allow personalised ads before any such ads are shown. You can also reset your advertising ID or opt out of ad personalisation at any time through your device settings. Advertising is shown only in the customer app; it does not appear in the outlet management or administrative areas of Qintez.

14. Account deletion and data erasure

You can delete your Qintez customer account at any time. In the app, open your Profile and tap “Delete account”. You can also visit qintez.com/account/delete for step-by-step instructions and a contact option if you can no longer sign in. For your protection, deletion is blocked while any prepaid wallet balance remains, so you never lose funds — spend or withdraw the balance first.

When you delete your account, your personal identifiers — including your name, phone number, and email — are erased or anonymised, and your ability to sign in is permanently disabled. As an exception, we retain your transaction and payment records in anonymised form, because we are required to keep these financial records to meet accounting, tax, and other legal obligations. The retained records are no longer linked to your personal identity.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the effective date above and, where appropriate, notify you through the service.

16. Contact us

If you have questions about this policy or how we handle your personal data, contact:

VEONT HYC TECHNOLOGIES PLT
Email: [email protected]