Privacy Policy

Introduction

qq7997 ("we", "us", "our") is committed to protecting the privacy and personal information of all users ("you", "your") who access or use our online gaming platform at https://qq7997.cam. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal data in compliance with international data protection standards, including the General Data Protection Regulation (GDPR) and applicable Indonesian privacy laws.

This Privacy Policy applies to all personal information collected through our website, mobile applications, customer support channels, and any other digital touchpoints operated by qq7997. It should be read in conjunction with our Terms & Conditions, which govern your use of the platform.

We recognize that privacy is a fundamental right, and we have implemented technical, organizational, and administrative safeguards to ensure that your personal data is handled securely, transparently, and in accordance with your rights under applicable data protection laws.

Data Controller

For the purposes of applicable data protection laws, qq7997 is the data controller responsible for your personal information collected through the platform. This means we determine the purposes and means of processing your personal data and are accountable for ensuring compliance with privacy regulations.

Our Data Protection Officer (DPO) oversees our privacy compliance program and serves as the primary point of contact for all privacy-related inquiries, data subject access requests, and complaints. You may contact our DPO at:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Subject Request"
• Response Time: We aim to respond to all privacy inquiries within 5 business days and to complete data subject requests within 30 days as required by GDPR.

Information We Collect

qq7997 collects several categories of personal information to provide, maintain, secure, and improve our Services. The specific data we collect depends on how you interact with our platform:

3.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, email address, mobile phone number, residential address, username, and password. This information is collected when you create an account and is necessary to establish your identity and comply with legal requirements.
• Identity Verification (KYC) Data: Government-issued identification documents (Indonesian National Identity Card / KTP, passport, or driver's license), proof of address documents (utility bills, bank statements), and selfie photographs for biometric verification. This data is collected to verify your age (21+ requirement), confirm your identity, prevent fraud, and comply with anti-money laundering (AML) regulations.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit amounts, withdrawal amounts, and transaction history. We collect this information to process deposits and withdrawals and to maintain accurate financial records.
• Communication Data: Messages sent through our live chat system, emails sent to customer support, responses to surveys, and feedback submitted through forms. This data helps us provide customer service, resolve disputes, and improve our Services.

3.2 Information Collected Automatically

• Device Information: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and unique device identifiers. This information is collected to optimize platform performance, detect security threats, and prevent account sharing.
• Usage Data: Pages visited, time spent on each page, games played, bets placed, betting patterns, login times, session duration, and clickstream data. We use this information to understand user behavior, improve game offerings, detect problem gambling patterns, and personalize your experience.
• Location Data: Approximate geographic location derived from your IP address. We collect this data to comply with jurisdictional restrictions and to detect suspicious activity such as account access from unusual locations.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies that collect information about your browsing behavior. See Section 9 for detailed information about our cookie practices.

3.3 Information from Third Parties

• Payment Processors: Transaction confirmation data, payment method details, and anti-fraud signals from BCA, BRI, BNI, Mandiri, and e-wallet providers.
• KYC Verification Partners: Identity verification results, document authenticity checks, and watchlist screening results from third-party compliance providers.
• Game Providers: Game session data, RNG results, and gameplay statistics from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe.

How We Use Your Data

qq7997 processes your personal information for the following purposes, each of which is grounded in a lawful basis under applicable data protection laws:

• Account Management: To create and maintain your user account, authenticate your identity at login, manage your profile settings, and process account closure requests.
• Service Delivery: To provide access to sports betting markets (including football, badminton, basketball, esports), live casino tables, slot games, and lottery products (togel); to process bets and wagers; to calculate and credit winnings; and to maintain accurate balance records.
• Payment Processing: To process deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja; to process withdrawal requests; to verify payment method ownership; and to prevent payment fraud.
• Legal and Regulatory Compliance: To verify that you are at least 21 years of age; to comply with Know Your Customer (KYC) and anti-money laundering (AML) obligations; to maintain records required by our gaming license; to respond to legal requests from authorities; and to enforce our Terms & Conditions.
• Fraud Prevention and Security: To detect and prevent account takeovers, bonus abuse, multi-accounting, collusion, arbitrage betting, and other prohibited activities; to monitor for suspicious transaction patterns; to protect against distributed denial-of-service (DDoS) attacks; and to maintain platform integrity.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling; to enforce deposit limits, loss limits, and self-exclusion settings; to provide reality-check reminders; and to facilitate access to responsible gaming support resources.
• Marketing and Promotions: To send you promotional offers, bonus notifications, loyalty rewards, and product updates (only with your consent, which you may withdraw at any time); to personalize promotional content based on your gaming preferences; and to conduct market research and player surveys.
• Customer Support: To respond to your inquiries via live chat, email, WhatsApp, and Telegram; to resolve disputes; to handle complaints; and to provide technical assistance.
• Platform Improvement: To analyze usage patterns and user behavior; to identify bugs and technical issues; to test new features; to optimize game selection and odds pricing; and to improve overall user experience.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR) and similar privacy frameworks, qq7997 must have a lawful basis for processing your personal data. Our processing activities rely on the following legal bases:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (the Terms & Conditions you agreed to when creating your account). This includes account registration, bet processing, payment transactions, and service delivery.
• Legal Obligation: Processing is required to comply with laws and regulations applicable to our gaming license, including KYC/AML requirements, age verification mandates, record-keeping obligations, and cooperation with law enforcement.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, platform improvement, and customer support, provided these interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Vital Interests: In rare circumstances, processing may be necessary to protect your vital interests or those of another person (e.g., responding to an emergency situation involving a self-harm risk communicated through customer support).

Data Sharing & Disclosure

qq7997 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we do share your data with trusted third-party service providers and partners under strict confidentiality obligations, and only to the extent necessary to deliver our Services:

• Payment Service Providers: We share transaction data with banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals. These providers have their own privacy policies and data handling practices.
• KYC and Compliance Partners: We share identity documents and personal information with third-party verification services to conduct age checks, identity authentication, document validation, and watchlist screening required by our licensing obligations.
• Game Providers: We share session identifiers and betting data with game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe) to deliver game content, calculate results, and maintain game integrity.
• Customer Support Tools: We share communication data with live chat platforms, ticketing systems, and CRM software to manage customer inquiries efficiently and maintain support history.
• Analytics and Marketing Platforms: We share anonymized or pseudonymized usage data with analytics providers to understand platform performance and user behavior. We share email addresses and device identifiers with marketing platforms only if you have consented to receive promotional communications.
• Legal and Regulatory Authorities: We may disclose your personal information to law enforcement, regulatory bodies, courts, or government agencies when required by law, legal process, or to protect the rights, property, or safety of qq7997, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

Data Storage & Retention

qq7997 stores your personal data on secure servers located in data centers that comply with international security standards. We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Retention Periods

• Active Account Data: We retain account information, transaction history, and betting records for the duration of your active account plus an additional 7 years after account closure to comply with gaming license requirements, tax regulations, and AML record-keeping obligations.
• KYC Documents: Identity verification documents are retained for 7 years after account closure as required by anti-money laundering regulations in our licensing jurisdiction.
• Marketing Consent Records: We retain records of your marketing preferences and consent history for 3 years after you withdraw consent or close your account to defend against potential disputes.
• Customer Support Records: Live chat transcripts, email correspondence, and support tickets are retained for 3 years to maintain service quality, resolve disputes, and provide continuity of support.
• Technical Logs: Server logs, IP address logs, and security logs are typically retained for 90 days for security monitoring and troubleshooting purposes, unless required to be retained longer for an ongoing investigation.

7.2 Data Deletion

Upon expiration of the applicable retention period, or upon your valid request for data deletion (subject to legal exceptions), we will permanently delete or anonymize your personal information using industry-standard data destruction methods. However, please note that certain data may need to be retained longer if required by law, pending litigation, or ongoing regulatory investigations.

Security Measures

qq7997 implements comprehensive technical, organizational, and administrative security measures to protect your personal information against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security program includes:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 with 256-bit SSL certificates. Sensitive personal data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized employees and contractors on a strict need-to-know basis. All personnel with access to personal data are bound by confidentiality agreements and undergo regular privacy and security training.
• Multi-Factor Authentication: Accounts with administrative access to user data are protected by multi-factor authentication (MFA) to prevent unauthorized access.
• Firewall and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and intrusion detection/prevention systems (IDS/IPS) that monitor for and block malicious traffic in real time.
• Regular Security Audits: We conduct quarterly security assessments, penetration testing, and vulnerability scans to identify and remediate potential security weaknesses proactively.
• Secure Development Practices: Our development team follows secure coding standards, conducts code reviews, and performs security testing before deploying new features to production.
• Incident Response Plan: We maintain a documented incident response plan to quickly detect, contain, and remediate any data breach or security incident, and to notify affected users and authorities as required by law.
• Physical Security: Our data centers employ physical access controls, surveillance systems, and environmental monitoring to prevent unauthorized physical access to server infrastructure.

While we take all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account password and for any activity that occurs under your account. Please notify us immediately at [email protected] if you suspect any unauthorized access to your account.

Cookies & Tracking Technologies

qq7997 uses cookies, web beacons, and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize your browser and remember certain information about your preferences and activity.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function properly. They enable core functionality such as user authentication, session management, security features, and load balancing. You cannot disable these cookies through our settings, as doing so would prevent the platform from working correctly.
• Performance and Analytics Cookies: These cookies collect aggregated information about how users interact with qq7997, such as which pages are visited most frequently, average session duration, and bounce rates. This data helps us identify technical issues and optimize platform performance. These cookies do not collect personally identifiable information.
• Functionality Cookies: These cookies remember your preferences and settings (such as language preference, odds format, and favorite games) to provide a more personalized experience on repeat visits.
• Marketing and Advertising Cookies: With your consent, we use these cookies to deliver targeted promotional offers based on your gaming preferences and to measure the effectiveness of our marketing campaigns. These cookies may track your activity across multiple websites.

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block all cookies, block third-party cookies only, or receive a notification before a cookie is stored. Please note that blocking strictly necessary cookies will prevent you from using qq7997. For more information about managing cookies in popular browsers, visit the help sections of Chrome, Firefox, Safari, or Edge.

Your Privacy Rights

Under applicable data protection laws, including GDPR, you have the following rights regarding your personal information. To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Subject Request":

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how we process it. We will provide this information in a structured, commonly used, and machine-readable format.
• Right to Rectification: If you believe any personal information we hold about you is inaccurate, incomplete, or out-of-date, you have the right to request that we correct or update it.
• Right to Erasure ("Right to be Forgotten"): You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. Please note that we may not be able to delete data that we are legally required to retain.
• Right to Restriction of Processing: You have the right to request that we temporarily suspend processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a portable format and to request that we transmit it directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests, unless we can demonstrate compelling legitimate grounds for continued processing.
• Right to Withdraw Consent: Where our processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
• Right to Lodge a Complaint: If you believe we have violated your privacy rights, you have the right to lodge a complaint with a supervisory data protection authority in your jurisdiction.

We will respond to all valid data subject requests within 30 days. If we require additional time, we will notify you and provide an explanation for the delay. We may request additional information to verify your identity before processing your request.

Children's Privacy

qq7997 is intended exclusively for adults aged 21 years and older. We do not knowingly collect, use, or store personal information from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information from our systems.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal information to qq7997, please contact us immediately at [email protected] with the subject line "Minor Account Alert". We will investigate promptly and delete the account and associated data if we confirm that the user is underage.

We implement age verification measures during account registration and at the point of first withdrawal to enforce our 21+ age requirement. Users who fail age verification or are found to have provided false age information will have their accounts permanently closed and any winnings forfeited.

International Data Transfers

qq7997 operates internationally and may transfer your personal data to servers and service providers located outside of Indonesia and the European Economic Area (EEA). These transfers are necessary to deliver our Services, process payments, and fulfill our contractual obligations to you.

When we transfer personal data to countries that do not provide an adequate level of data protection as recognized by the European Commission, we implement appropriate safeguards to protect your information, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to third-party processors.
• Binding Corporate Rules (BCRs) for transfers within our corporate group.
• Adequacy decisions issued by the European Commission for transfers to countries deemed to provide adequate protection.
• Explicit consent from you for specific transfers where no other safeguard mechanism is available.

You may request a copy of the specific safeguards we have implemented for international data transfers by contacting our Data Protection Officer at [email protected].

Policy Updates

qq7997 reserves the right to update, amend, or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page and notify you through one or more of the following methods:

• Email notification to the email address associated with your account.
• Prominent notice displayed on the qq7997 homepage or in your account dashboard.
• In-platform notification or pop-up message upon your next login.

Your continued use of qq7997 after the updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you must cease using the platform and may request account closure and data deletion (subject to legal retention requirements).

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the following channels:

• Data Protection Officer Email: [email protected]
• General Customer Support: [email protected]
• Live Chat: Available 24/7 through the qq7997 website (select "Privacy Inquiry" as the topic)
• Response Time: We aim to respond to privacy inquiries within 5 business days and to complete data subject requests within 30 days.

For data subject access requests, please include your full name, registered email address, account username (if applicable), and a detailed description of your request. We may require additional identification documents to verify your identity before processing your request.