qq820 Privacy Policy

The following definitions apply throughout this Privacy Policy:

qq820 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, qq820 determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing is conducted in compliance with applicable data protection principles.

For all data protection enquiries, including rights requests and complaints, please contact our Data Protection team using the details provided in Section 15 of this Policy.

qq820 collects the following categories of Personal Data, depending on your interaction with the Platform:

qq820 does not intentionally collect Sensitive Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) and requests that you do not provide such information unsolicited. Where Sensitive Personal Data is inadvertently received, it will be deleted promptly.

qq820 collects Personal Data through the following channels and mechanisms:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated Collection: Technical and Usage Data collected automatically as you interact with the Platform, via server logs, session tracking, and performance monitoring systems.
• Cookies and Similar Technologies: First-party cookies and session storage used to maintain your login session, remember platform preferences, and analyze aggregated usage patterns. See Section 11 for full details.
• Third-Party Sources: Identity and fraud-check data from KYC verification service providers; payment transaction confirmation data from Indonesian bank and e-wallet processors; device risk signals from our fraud detection partners.
• Public Sources: Where legally permissible, qq820 may verify certain information (such as whether an individual appears on financial crime watchlists) using publicly available databases.

qq820 processes your Personal Data only for the following defined purposes. We do not process data beyond what is necessary for these purposes (the principle of data minimisation):

• Account Management: Creating, maintaining, and securing your qq820 account, including authentication, password recovery, and account settings management.
• Identity Verification (KYC): Verifying your identity and age (21+ requirement) as required by our international gaming license and AML compliance obligations.
• Payment Processing: Processing deposits and withdrawals via your registered Indonesian bank account or e-wallet, including reconciliation and dispute resolution.
• Gaming Services: Delivering sports betting markets (including bandar bola — football bookmaking — and togel lottery markets), live casino, slot games, and all associated platform features.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover, bonus abuse, and other prohibited conduct.
• Customer Support: Handling your enquiries, complaints, and support requests through live chat, email, and WhatsApp.
• Legal and Regulatory Compliance: Meeting obligations under our international gaming license, AML regulations, and any lawful requests from competent authorities.
• Platform Improvement: Analyzing aggregated usage patterns (anonymized where possible) to improve platform performance, game selection, and user experience.
• Responsible Gaming: Monitoring account activity to identify potentially problematic gambling patterns and enforcing deposit limits, cooling-off periods, and self-exclusion decisions.
• Marketing Communications (opt-in only): Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications.

qq820 relies on the following legal bases for processing your Personal Data, in accordance with international data protection principles:

• Contractual Necessity: Processing required to perform our contract with you — operating your account, processing payments, and delivering gaming services. Without this processing, qq820 cannot provide its services to you.
• Legal Obligation: Processing required to comply with AML regulations, KYC requirements under our gaming license, and lawful requests from regulators or law enforcement authorities.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — where our legitimate interest in operating a safe and fair platform does not override your fundamental rights.
• Consent: Processing for marketing communications — where we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

qq820 does not sell, license, or rent your Personal Data to any third party. We may share your data only in the following limited circumstances:

• Payment Processors: Your bank account name and number (or e-wallet identifier) are shared with the relevant Indonesian bank or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposits and withdrawals.
• KYC and Identity Verification Providers: Your identity documents and verification data are shared with our contracted KYC service provider under a strict data processing agreement that prohibits secondary use of your data.
• Fraud Detection and Security Partners: Technical Data (IP address, device identifiers, session metadata) may be shared with our fraud detection partners to identify suspicious activity and protect all platform users.
• Gaming License Authority: qq820's international licensing authority may require access to certain Member data — including transaction history and identity records — as part of its regulatory oversight functions.
• Legal and Regulatory Authorities: qq820 will disclose Personal Data to law enforcement, tax authorities, or other competent bodies where legally required to do so, or where there is a good-faith belief that disclosure is necessary to prevent imminent harm.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of qq820's assets, your Personal Data may be transferred to the acquiring entity, subject to this Privacy Policy remaining in force.

qq820's Platform serves Members in Indonesia, and our primary data processing infrastructure is located in jurisdictions with established data protection frameworks. Some of our third-party service providers (including KYC and fraud detection providers) may process data in jurisdictions outside Indonesia.

Where Personal Data is transferred internationally, qq820 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses that impose data protection obligations equivalent to those in this Policy;
• Transfers only to jurisdictions with recognized adequate data protection standards;
• Binding corporate rules or equivalent measures for intra-group transfers.

You may request details of the specific safeguards in place for any international transfer of your Personal Data by contacting our Data Protection team at [email protected].

qq820 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymized in a manner that prevents re-identification.

qq820 implements a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Transport Security: All data transmitted between your device and qq820's servers is encrypted using 256-bit TLS (SSL) encryption, the same standard used by major international banking institutions.
• Data at Rest: Personal Data stored in qq820's databases is encrypted at rest. Database access is restricted to authorized personnel only, governed by role-based access controls.
• Access Controls: All staff access to Personal Data is governed by the principle of least privilege — personnel access only the data required for their specific role. All access is logged and audited.
• Multi-Factor Authentication: Administrative access to systems containing Personal Data requires multi-factor authentication (MFA).
• Regular Security Testing: qq820 conducts regular penetration testing and vulnerability assessments on all systems processing Personal Data. Critical vulnerabilities are remediated within defined service level targets.
• Incident Response: In the event of a Personal Data breach that is likely to result in risk to your rights and freedoms, qq820 will notify affected Members as soon as reasonably practicable and will cooperate with relevant authorities.

qq820 uses cookies and similar browser-based technologies to operate the Platform effectively. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for Platform functionality — maintaining your login session, managing your account preferences, and enabling secure transactions. These cookies cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Aggregate, anonymized data on how visitors use the Platform — pages most frequently visited, average session duration, error rates. This data is used internally to improve Platform performance and is not linked to your individual profile.
• Fraud Detection Cookies: Device fingerprinting and session identifiers used by our fraud detection systems to identify suspicious patterns, multi-accounting, and automated access attempts. These are classified as strictly necessary for platform security.

qq820 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on the Platform. You may manage cookie preferences through your browser settings. Note that disabling cookies may affect the functionality of certain Platform features, including session persistence and security features.

As a Data Subject, you hold the following rights in respect of your Personal Data held by qq820. To exercise any of these rights, contact our Data Protection team at [email protected]. We will respond within 30 calendar days of receiving your verified request.

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To unsubscribe from marketing, use the unsubscribe link in any marketing email or contact support.

qq820 operates a strict 21+ age policy. We do not knowingly collect, process, or store Personal Data belonging to individuals under the age of 21. Registration by minors is prohibited, and qq820 will take immediate action upon discovering that an account has been created by or on behalf of a minor.

If you are a parent or guardian and believe that a minor in your care has accessed or registered with qq820, please contact us immediately at [email protected]. We will promptly investigate and, where a minor's account is confirmed, close the account, delete the associated Personal Data, and return any deposited funds to the payment source.

qq820 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform functionality. The "Last Updated" date at the top of this page reflects the most recent revision.

Where changes are material — for example, a new purpose of processing or a new category of data sharing — qq820 will notify registered Members via the email address on their account before the changes take effect, and will provide a reasonable period to review the updated Policy. Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the revised terms.

For non-material changes (such as editorial corrections, clarifications, or minor restructuring), the Policy will be updated silently with the revised date. We encourage you to review this page periodically.

For all privacy-related enquiries, rights requests, or complaints regarding qq820's handling of your Personal Data, please contact our Data Protection team through any of the following channels:

If you are not satisfied with qq820's response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to qq820's international gaming license, or to seek independent legal advice.