Operator: QI BENTO GROUP
Address: 13, Jalan Nagor, 10050 George Town, Pulau Pinang, Malaysia
Privacy enquiries: hello@qibento.com
Effective date: 15 October 2026
We collect member names, email addresses, password hashes, membership numbers, QR lookup credentials, points balances, purchase-related loyalty transactions and security records.
We process this information to operate memberships, verify emails, issue and redeem points, support customers, protect accounts and keep accurate transaction records. Authorized Staff can look up members by QR code; Owner users manage the programme.
We use Cloudflare for application hosting and database services and Resend for transactional membership emails. Processing may occur outside Malaysia, subject to applicable safeguards.
Membership information is kept while the account remains active. Transaction records are kept for seven years. Security logs are kept for ninety days, subject to applicable legal retention requirements. Where records must be retained for legal reasons after account closure, access will be restricted appropriately.
To request access, correction or closure of your membership, contact hello@qibento.com. Transaction records that must be retained by law may not be erased immediately.
Passwords are stored as salted one-way hashes. Access controls and audit records help protect membership accounts. Verification and password-recovery emails are transactional. Marketing requires a separate optional choice.