Privacy Policy

1. Who we are

Qintez is a point-of-sale and club-management platform built for snooker and billiards venues. Qintez is operated by Veont HYC SDN BHD, a company incorporated in Malaysia ("Qintez", "we", "us", or "our"). We are the data controller responsible for the personal data described in this policy. You can reach us at [email protected].

2. Scope of this policy

This policy applies to your use of the Qintez web application at qintez.com and to the Qintez mobile applications, including the Android app (package com.qintez.pos), which loads the same Qintez web experience inside a secure app shell. It covers the customer wallet and profile experience, as well as the operator-facing administration tools used by outlet owners, managers, and staff.

3. Information we collect

We collect the following categories of personal data:

• Phone number — used as your primary identifier for one-time-password (OTP) login.
• Name — to personalise your account and receipts.
• Email address — optional, used for account communications and receipts where provided.
• Wallet balance and transaction history — prepaid wallet balances, top-ups, bonuses, and spending records.
• Orders and purchases — food, drink, and other items you buy at a venue.
• Table session history — records of your table-time sessions, including timing and pricing.
• Device and usage data — device type, app version, and basic interaction data used to keep the service reliable and secure.
• Cookies and authentication tokens — essential session cookies and tokens that keep you securely signed in.

Payments are processed at the venue (cash, card, or e-wallet at the outlet). Qintez stores the transaction record only — we do not store full payment card numbers.

4. How we use your information

• Provide, operate, and maintain the Qintez service.
• Process wallet transactions, top-ups, bonuses, and offers.
• Send one-time passwords for login via WhatsApp or SMS.
• Generate receipts and transaction confirmations.
• Provide customer support and respond to your requests.
• Detect, prevent, and investigate fraud and abuse.
• Comply with legal, regulatory, and accounting obligations.

5. Legal bases for processing

Where the GDPR applies, we rely on the following legal bases to process your personal data:

• Performance of a contract — to provide the account, wallet, and POS services you use.
• Legitimate interests — to keep the service secure, prevent fraud, and improve reliability, balanced against your rights.
• Consent — where we ask for it, such as optional communications; you may withdraw consent at any time.
• Legal obligation — to retain transaction records and meet regulatory requirements.

6. How we share information

We share personal data only as described below:

• Outlet operators — venues where you transact can see your profile, wallet activity, and orders at their venue, so they can serve you and manage their business.
• Service providers — Supabase, which provides our hosting, database, and authentication infrastructure; and messaging providers that deliver OTP codes via WhatsApp or SMS. These providers act on our behalf under appropriate data-protection terms.
• Legal and safety — where required by law, regulation, or valid legal process, or to protect rights, safety, and the integrity of the service.

We do not sell your personal data, and we do not share it with third-party advertising networks.

7. International data transfers

We operate globally, and your personal data may be processed in countries other than your own, including by our service providers. Where data is transferred internationally, we take steps to ensure it remains protected by appropriate safeguards consistent with GDPR-grade and PDPA standards.

8. Data retention

We keep your personal data for as long as your account is active and for as long as needed to provide the service. We retain transaction and financial records for the periods required by applicable statutory, tax, and accounting obligations, after which the data is deleted or anonymised.

9. Your rights

Subject to applicable law, you have the right to access your data, request correction (rectification), request erasure, receive a copy of your data in a portable format, object to certain processing, and withdraw consent where processing is based on consent. These rights reflect both the GDPR and Malaysia's PDPA framework.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law. You may also have the right to lodge a complaint with your local data protection authority.

10. Children

Qintez is not directed at children. The wallet and payment features are intended for users aged 18 and over, and the service as a whole is not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Security

We protect your data using encryption in transit, role-based access controls that limit who can see what, and audit trails for sensitive actions. While no system can be guaranteed perfectly secure, we work continuously to safeguard your personal data against unauthorised access, loss, or misuse.

12. Cookies

We use essential cookies and tokens only — specifically the Supabase session cookie that keeps you securely signed in. We do not use third-party advertising or cross-site tracking cookies.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the effective date above and, where appropriate, notify you through the service.

14. Contact us

If you have questions about this policy or how we handle your personal data, contact:

Veont HYC SDN BHD
Email: [email protected]