Your Privacy Matters to qq988

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, email address, payment account details, device identifiers, and IP address.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, and transmission.
• "Data Controller" — qq988, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third-party service provider that processes Personal Data on behalf of qq988 under a binding data-processing agreement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC Data" — identity and age-verification documents submitted by players in compliance with qq988's Know Your Customer programme, including government-issued identity cards (KTP), passports, and proof-of-address documentation.
• "Cookies" — small text files placed on your device by the qq988 platform to facilitate session management, analytics, and personalised user experience features.
• "Platform" — the qq988 website, mobile interface, and all associated products and services accessible at qq988.bio.

qq988 collects Personal Data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and in limited cases from trusted third-party sources. The categories of data we collect are described below.

2.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, email address, mobile number, and country of residence (Indonesia for the majority of our players).
• KYC Documentation: Copies of government-issued identity documents (KTP, passport, or driver's licence), proof of address (recent utility bill or bank statement), and, where required, source-of-funds documentation.
• Payment Data: Bank account details for deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and Bank Permata; e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja. qq988 does not store full card numbers or CVV codes — payment credentials are handled via PCI-DSS-compliant tokenisation.
• Support Communications: Records of live chat sessions, email correspondence, and any attachments you submit when contacting the qq988 support team.
• Responsible Gaming Preferences: Deposit limits, session time reminders, self-exclusion requests, and reality-check settings you configure within your account.

2.2 Data Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device model, screen resolution, and time zone (typically WIB, UTC+7 for Indonesian players).
• Usage Data: Pages visited, game sessions initiated, bet history, wagering amounts in IDR, session duration, login timestamps, and feature interactions.
• Geolocation Data: Approximate geographic location derived from IP address, used for jurisdictional compliance and fraud detection. qq988 does not collect precise GPS coordinates.
• Cookie and Tracking Data: Session identifiers, analytics event data, and preference settings stored via cookies and similar technologies. See Section 6 for full details.

2.3 Data from Third Parties

• Identity Verification Partners: qq988 works with accredited KYC and anti-fraud service providers who may supply additional identity-confirmation signals to supplement documents you submit.
• Payment Processors: Transaction status and risk-scoring data from payment gateway partners to facilitate deposit and withdrawal processing.
• Game Providers: Aggregate gameplay and RTP data from studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, used for platform quality assurance and player-account reconciliation.

qq988 uses your Personal Data for the following purposes, each supported by an appropriate legal basis as described in Section 4:

qq988 processes your Personal Data only where a valid legal basis exists. The primary legal bases we rely upon are:

• Contract Performance: Processing that is necessary to deliver the services you have requested — including operating your account, processing transactions in IDR, and settling bets — is carried out on the basis that it is required to fulfil our contractual obligations to you.
• Legal Obligation: Certain processing activities — including KYC identity verification, anti-money-laundering screening, age verification (21+), and regulatory reporting — are required by applicable international gaming and financial-crime laws. qq988 cannot provide its services without fulfilling these obligations.
• Legitimate Interests: Where qq988 has a genuine business interest that is not overridden by your fundamental rights, we may process data on this basis. Examples include fraud prevention, platform security monitoring, internal analytics, and improving the player experience. We conduct a balancing assessment before relying on this basis.
• Consent: For non-essential activities — primarily marketing communications, personalised promotions, and non-essential analytics cookies — qq988 relies on your freely given consent. You may withdraw consent at any time without detriment to your account or service access.
• Vital Interests: In exceptional circumstances where processing is necessary to protect the health or safety of a player (for example, when administering urgent problem-gambling interventions), qq988 may rely on vital interests as a legal basis.

qq988 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share data only in the following circumstances, and only to the minimum extent necessary:

5.1 Service Providers and Data Processors

qq988 engages carefully vetted third-party processors who provide services on our behalf under binding data-processing agreements that require them to protect your data to the same standard as qq988. These include:

• KYC and identity-verification platform providers
• Payment gateway and fraud-screening partners (supporting BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja transactions)
• Cloud infrastructure and data-hosting providers operating under ISO 27001-certified security controls
• Customer support platform vendors (live chat and email ticketing systems)
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) — limited to session token and game-result data required for gameplay delivery
• Web analytics providers operating in anonymised or pseudonymised data modes

5.2 Legal and Regulatory Disclosure

qq988 may disclose Personal Data to competent authorities, regulatory bodies, or law enforcement agencies where required by applicable law, court order, or binding regulatory direction. qq988 will notify you of any such disclosure request where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of qq988's business, Personal Data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections. Affected players will be notified of any material change in data controller identity prior to the transfer taking effect.

qq988 uses cookies and similar tracking technologies to operate core platform functionality, measure performance, and — with your consent — deliver a personalised experience. The categories of cookies we use are as follows:

You may manage your cookie preferences at any time via your account settings or your browser's cookie controls. Please note that disabling strictly necessary cookies will prevent you from logging in to and using the qq988 platform. Disabling analytics or personalisation cookies will not affect your ability to play, deposit, or withdraw.

qq988 retains your Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, to comply with anti-money-laundering and gaming regulatory record-keeping obligations.
• KYC Documentation: Retained for a minimum of 5 years from the date of submission or the date of account closure, whichever is later, in line with international AML standards.
• Transaction Records (deposits, withdrawals, bet history in IDR): Retained for a minimum of 5 years from the transaction date for financial audit and regulatory reporting purposes.
• Support Communications: Retained for 3 years from the date of the most recent interaction, to support dispute resolution and quality assurance.
• Marketing Consent Records: Retained for 3 years from the date of consent or withdrawal of consent, whichever is later, as evidence of lawful marketing activities.
• Cookie and Analytics Data: Anonymised or aggregated analytics data is retained for up to 26 months; session cookies expire at the end of each browser session.
• Self-Exclusion Records: Retained for the duration of the self-exclusion period plus 7 years thereafter to prevent re-registration during exclusion windows and to fulfil responsible-gaming audit obligations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is not immediately practicable (for example, due to backup rotation cycles), data is quarantined from active processing until it can be permanently removed.

qq988 implements a comprehensive, layered security programme designed to protect your Personal Data against unauthorised access, accidental loss, alteration, and disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the qq988 platform is encrypted using industry-standard TLS 1.2 or higher, protecting your login credentials, payment details, and personal information in transit.
• Data Encryption at Rest: Sensitive Personal Data — including KYC documents and payment account references — is encrypted at rest using AES-256 encryption within qq988's cloud infrastructure.
• Access Controls: Access to player Personal Data is restricted to qq988 personnel and authorised processors on a strict need-to-know basis. All access is logged, audited, and subject to regular review.
• Multi-Factor Authentication (MFA): Internal administrative systems require MFA for all staff accessing player data environments. Players are also encouraged to enable MFA on their qq988 accounts.
• Penetration Testing and Vulnerability Assessments: qq988's platform undergoes regular third-party penetration testing and automated vulnerability scanning to identify and remediate security weaknesses before they can be exploited.
• Incident Response: qq988 maintains a documented data-breach incident response plan. In the event of a breach that poses a risk to your rights and freedoms, qq988 will notify affected players and relevant authorities within the timeframe required by applicable law.
• Payment Security: All IDR transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja are routed through PCI-DSS-compliant payment processors. qq988 does not store raw card numbers or e-wallet PINs.

As a qq988 player, you hold meaningful rights over your Personal Data. qq988 is committed to honouring these rights promptly and without undue bureaucracy. Your rights include:

• Right of Access: You may request a copy of the Personal Data qq988 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any of your Personal Data held by qq988 is inaccurate or incomplete, you have the right to request its correction. You may update basic account information directly in your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your Personal Data in circumstances where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing was unlawful. Note that this right is subject to qq988's legal obligations to retain certain data for regulatory and AML compliance periods (see Section 7).
• Right to Restriction of Processing: You may request that qq988 temporarily restrict the processing of your data — for example, while a rectification request is being resolved or while you contest the legitimate-interests basis for a particular processing activity.
• Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) for transfer to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. qq988 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent — including marketing communications and non-essential cookies — you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to Lodge a Complaint: If you believe qq988 has processed your Personal Data unlawfully, you have the right to lodge a complaint with the relevant data-protection supervisory authority in the jurisdiction applicable to qq988's operations.

To exercise any of the above rights, please contact qq988's Data Protection Officer at [email protected] with the subject line "Data Subject Request". qq988 will respond within 30 calendar days of receiving a verifiable request. Complex or high-volume requests may be extended by a further 60 days with notice provided to you.

qq988 is an adults-only platform. You must be 21 years of age or older to register, deposit, and play on qq988. This age restriction applies to all players regardless of location, including those accessing the platform from Jakarta, Surabaya, Bandung, Bali, Medan, and all other regions across Indonesia.

qq988 does not knowingly collect Personal Data from individuals under the age of 21. As part of the KYC verification process, all players are required to submit proof of age before withdrawal functionality is enabled. If qq988 discovers that a player has misrepresented their age during registration, the account will be immediately suspended, all funds (including any winnings) will be frozen pending review, and any Personal Data belonging to the underage individual will be securely deleted in accordance with this Privacy Policy.

If you are a parent or guardian and believe your child has registered an account on qq988, please contact [email protected] immediately. qq988 will investigate and take appropriate action within 48 hours of notification.

qq988 operates as an internationally licensed platform. Your Personal Data may be processed and stored in jurisdictions outside Indonesia, including in countries where qq988's cloud infrastructure, game providers, and KYC partners are based. qq988 ensures that all international transfers of Personal Data are subject to appropriate safeguards, including:

• Standard contractual clauses (SCCs) incorporated into data-processing agreements with all processors located outside adequacy-decision jurisdictions.
• Binding corporate rules (BCRs) where transfers occur within qq988's affiliated corporate group.
• Transfer only to jurisdictions that provide an adequate level of data protection as recognised by applicable international standards.

Regardless of the jurisdiction in which your data is processed, qq988 applies the privacy protections and security standards described in this Privacy Policy consistently to all Personal Data under its control.

qq988 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business operations, or data-processing practices. When material changes are made, qq988 will provide advance notice via a platform notification, an email to your registered account address, or a prominent banner on the qq988 website. The revised policy will display a new effective date at the top of the document.

Your continued use of the qq988 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should cease using the platform and contact support to arrange the closure of your account and the withdrawal of any remaining balance.

qq988 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data-protection obligations. If you have any questions, concerns, or requests relating to the handling of your Personal Data, please contact us through the following channels:

• Data Protection Officer Email: [email protected] (subject line: "Privacy / Data Protection") — plain text, not a clickable link
• Live Chat: Available 24/7 on the qq988 platform — native Indonesian-speaking agents are available on every shift for players who prefer to communicate in Bahasa Indonesia
• Response Time: Data subject requests are acknowledged within 3 business days and fully resolved within 30 calendar days (WIB, UTC+7)

qq988's customer support team is staffed around the clock with agents fluent in both English and Bahasa Indonesia, ensuring that players across Jakarta, Surabaya, Bali, Medan, Bandung, Yogyakarta, and the wider Indonesian archipelago can communicate comfortably when raising privacy matters, even though the platform's official language of record is English.