Privacy Policy

qq821 uses the Personal Data it collects for the following specific purposes. We do not use your data for any purpose beyond what is described here without first obtaining your explicit consent:

• Account creation and management: Processing your registration, authenticating your identity at login, managing account settings, and communicating important account-related notices to you.
• Identity and age verification (KYC): Confirming that you are at least 21 years of age, that your identity matches the account you have registered, and that your payment methods are registered in your own name — as required by our responsible gaming and compliance obligations.
• Payment processing: Executing deposits from and withdrawals to your registered BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja account. Transaction records are also maintained for financial audit and dispute-resolution purposes.
• Platform delivery and improvement: Ensuring the Platform functions correctly on your device, diagnosing and resolving technical issues, and analyzing anonymized usage patterns to improve the user experience.
• Fraud prevention and security: Detecting and investigating suspicious account activity, preventing duplicate account registrations, identifying bonus abuse, and protecting the integrity of games and markets.
• Responsible gaming compliance: Monitoring betting patterns to identify indicators of problem gambling, applying deposit limits and self-exclusion restrictions at a member's request, and fulfilling our duty-of-care obligations.
• Legal and regulatory compliance: Meeting anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, responding to lawful requests from competent authorities, and maintaining records required by our international gaming license.
• Customer support: Responding to your support inquiries, resolving disputes, and maintaining a record of communications for quality assurance and training purposes.
• Promotional communications: Sending you information about bonuses, promotions, and platform updates by email — but only where you have opted in to receive such communications. You may opt out at any time by contacting our support team.

qq821 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and qq821 — including account creation, payment processing, and game delivery. Without this processing, we cannot provide the service.
• Legal obligation: Processing is required to comply with applicable laws, including KYC/AML obligations under our international gaming license and record-keeping requirements.
• Legitimate interests: Processing is necessary for the legitimate interests pursued by qq821, including fraud prevention, platform security, and responsible gaming monitoring — provided those interests are not overridden by your rights and freedoms.
• Consent: Where processing is not covered by the bases above — for example, sending you promotional emails — we will ask for your explicit, freely given consent. You may withdraw consent at any time without penalty.

qq821 does not sell, rent, or trade your Personal Data to third parties. We share your data only in the following limited and controlled circumstances:

• Payment service providers: To process deposits and withdrawals, we share your account name, account number, and transaction amount with the relevant bank or e-wallet operator (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja). These entities process your data as independent controllers under their own privacy policies.
• KYC and identity verification partners: We engage specialist third-party KYC compliance providers to assist with document verification. These providers are contractually bound to process your documents solely for verification purposes and to apply data security standards equivalent to our own.
• Game studio providers: Live casino and slot titles are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers may receive anonymized session data necessary to deliver their games within the Platform. They do not receive your full identity or payment data.
• Fraud prevention services: We share technical data (IP address, device fingerprint, session metadata) with fraud-detection service providers to identify and prevent suspicious activity. This data is processed under strict data processing agreements.
• Legal authorities: qq821 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts when required to do so by a lawful order, warrant, or legal obligation. We will notify affected members of such disclosures to the extent permitted by law.
• Corporate restructuring: In the event of a merger, acquisition, or sale of qq821's assets, member Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. Members will be notified in advance of any such transfer.

All third-party processors engaged by qq821 are required to sign a Data Processing Agreement (DPA) that mandates appropriate technical and organizational security measures, limits data use to the stated purpose, and requires the prompt deletion of data upon contract termination.

qq821 uses cookies and similar client-side tracking technologies to keep the Platform functional, secure, and measurable. We deploy cookies in the following categories:

• Strictly necessary cookies: These are essential for core Platform functionality — including maintaining your login session, remembering your language preferences, and enabling the secure checkout flow for deposits. These cookies cannot be disabled without breaking the Platform. No consent is required for strictly necessary cookies.
• Security and fraud-prevention cookies: These cookies help us identify and block automated bots, detect unusual login patterns, and flag potentially fraudulent sessions. They are part of our commitment to keeping your account and funds safe.
• Analytics cookies: We use first-party analytics cookies to understand aggregated patterns of Platform usage — such as which pages are most visited and how long typical sessions last. This data is anonymized and used solely to improve the Platform. We do not share analytics data with third-party advertising networks.
• Functional cookies: These remember your optional preferences — such as display settings — so you do not have to re-enter them on each visit. They are not used for tracking or profiling.

Managing cookies: You can control cookie placement through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site or per-category basis. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Disabling analytics or functional cookies will not affect core functionality but may degrade your experience.

qq821 retains your Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is either securely deleted or anonymized so that it can no longer be attributed to any individual. Where deletion is technically complex (e.g., data stored in backup systems), we will isolate the data from active processing and schedule it for deletion at the next scheduled backup cycle.

As a member of qq821, you have the following rights regarding your Personal Data. To exercise any of these rights, contact our support team using the details in Section 13:

• Right to Access: You may request a copy of the Personal Data we hold about you. We will provide this in a structured, machine-readable format within 30 days of receiving your verified request.
• Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you may request that we correct it. For certain data fields (e.g., email address, phone number), you can update them directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where processing was unlawful. Note that we may be required by law to retain certain records despite an erasure request — in which case we will inform you which data we are legally obliged to retain and why.
• Right to Restrict Processing: You may request that we suspend active processing of your Personal Data in specific circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your data in a portable, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to processing based on legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.

qq821 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction:

• Transport encryption: All data in transit between your browser or device and qq821 servers is encrypted using TLS 1.2 or TLS 1.3 with 256-bit AES cipher suites.
• Data-at-rest encryption: Sensitive data stored in qq821 databases — including identity documents and financial records — is encrypted at rest using AES-256.
• Access controls: Internal access to Personal Data is granted on a strict need-to-know basis. All staff with access to Personal Data undergo regular security training and are bound by confidentiality obligations.
• Penetration testing: qq821 conducts regular third-party penetration tests and vulnerability assessments of its platform infrastructure.
• Incident response: In the event of a Personal Data breach that poses a risk to your rights and freedoms, qq821 will notify affected members and the relevant supervisory authority within the timeframe required by applicable law, and no later than 72 hours after becoming aware of the breach.

qq821 is strictly an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes a mandatory age declaration, and our KYC verification process independently confirms each member's date of birth through government-issued identity documentation.

If qq821 discovers — through KYC review, fraud detection, or a report — that a registered account belongs to an individual under 21 years of age, the following actions will be taken immediately:

1. The account will be suspended pending investigation.
2. All Personal Data associated with the account will be flagged for expedited deletion following the conclusion of the investigation.
3. Any balance or winnings in the account will be frozen and, where appropriate, returned to the originating payment method.
4. The incident will be logged and reviewed by our compliance team.

If you are a parent or guardian and you believe your child has registered an account on qq821, please contact our support team immediately using the details in Section 13. We will investigate and take appropriate action within 48 hours of receiving a verified report.

qq821 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to your registered email address summarizing the key changes, at least 14 days before the updated policy takes effect.
• Display a notice on the Platform homepage for a minimum of 14 days following publication of the updated policy.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the changes, you must discontinue use of the Platform and may request account closure in accordance with the procedures described in our Terms & Conditions.

We encourage you to review this Privacy Policy periodically so that you remain informed about how qq821 protects your data. The current version of this policy always supersedes all prior versions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a potential privacy concern, please contact qq821's privacy team using the following details:

Privacy & Data Protection contact: [email protected] (plain text — not a clickable link)

When submitting a data rights request, please include the following in your email to help us process it efficiently:

• Your full registered name and registered email address.
• The specific right you wish to exercise (e.g., access, rectification, erasure).
• A brief description of the data concerned, if applicable.
• A copy of a government-issued ID to verify your identity (required for all erasure and portability requests).

qq821 targets a response to all privacy-related inquiries within 30 calendar days of receipt of a complete and verified request. For complex or high-volume requests, we may extend this period by up to an additional 30 days, in which case we will notify you of the extension within the initial 30-day window.

For responsible gaming concerns — including self-exclusion requests, deposit limit adjustments, or guidance on problem gambling — please visit our dedicated Responsible Gaming page.