qq289 Privacy Policy

1 Definitions

The following definitions apply throughout this Privacy Policy and are consistent with those used in the qq289 Terms & Conditions:

• "Personal Data" — Any information that identifies or can reasonably be used to identify you as a natural person, including your name, contact details, national identification number, device identifiers, and financial account information.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, transmission, disclosure, alteration, and deletion.
• "Controller" — The entity that determines the purpose and means of processing your Personal Data. For qq289 Players, the Controller is the qq289 Platform operator.
• "Processor" — A third party that processes Personal Data on behalf of the Controller under a binding data processing agreement.
• "Consent" — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC" — Know Your Customer; the identity and age verification process mandated for all qq289 account holders.

2 Data Controller

qq289, operating under the domain qq289.bet, is the Data Controller for all Personal Data collected from Players registered on the Platform. All data processing activities carried out by qq289 are subject to this Privacy Policy. Inquiries regarding data processing or the exercise of data subject rights should be directed to the qq289 Data Protection contact as described in Section 15.

3 Data We Collect

qq289 collects the following categories of Personal Data from Players. We collect only what is necessary for the purposes described in Section 5 and do not collect data beyond those requirements.

Category	Specific Data Points	When Collected
Identity Data	Full legal name, date of birth, gender, national ID (KTP) number, passport or driver's license details	Registration & KYC
Contact Data	Email address, mobile phone number, residential address in Indonesia	Registration
Financial Data	Bank account number and name (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.), e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history in IDR	First deposit / Withdrawal request
Verification Documents	Scanned copies of KTP, passport, driver's license; proof of address (utility bill, bank statement); selfie/liveness check where required	KYC process
Account & Activity Data	Username, hashed password, betting history, game session logs, bonus claims, login timestamps, account preference settings	Ongoing Platform use
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, time zone (WIB/WITA/WIT), session duration	Every Platform visit
Communications Data	Live chat transcripts, email correspondence, support ticket content	When you contact support

Identity Contact Financial Verification Activity Technical Communications

4 How We Collect Data

qq289 collects Personal Data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or updating your account profile.
• Automated technical collection: Data gathered automatically when you visit or interact with the Platform, including IP addresses, browser fingerprints, cookie data, and session analytics. See Section 9 for full cookie details.
• Third-party verification partners: Identity and age verification data returned by our KYC service providers when we submit your documents for authentication. These partners operate under binding data processing agreements with qq289.
• Payment processors: Transaction confirmation data returned by local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal.
• Fraud and risk monitoring tools: Behavioural and device signals collected during your Platform sessions to detect fraudulent activity, unauthorised account access, or bonus abuse patterns.

5 Purpose & Legal Basis for Processing

qq289 processes your Personal Data only for specified, legitimate purposes. The table below summarises each processing activity, its purpose, and the legal basis on which we rely:

Processing Activity	Purpose	Legal Basis
Account registration	Create and manage your qq289 Player account	Contract performance
KYC / Age verification	Confirm you are 21+ and a resident of Indonesia; comply with anti-money-laundering obligations	Legal obligation
Payment processing	Execute IDR deposits and withdrawals via local banks and e-wallets	Contract performance
Fraud prevention	Detect and prevent fraudulent accounts, bonus abuse, and money laundering	Legitimate interest
Customer support	Respond to inquiries, process complaints, and resolve account issues	Contract performance
Responsible gaming	Monitor betting behaviour to identify problem gambling indicators and apply protective tools	Legal obligation / Legitimate interest
Platform analytics	Understand how Players use qq289 in order to improve user experience and product quality	Legitimate interest
Promotional communications	Send you bonus offers, promotions, and qq289 news relevant to your activity and preferences	Consent (opt-in)
Legal compliance & record-keeping	Maintain records required by applicable law and respond to lawful regulatory requests	Legal obligation

6 Data Sharing & Third Parties

6.1 Who We Share Data With

qq289 does not sell your Personal Data to third parties for their own commercial or marketing purposes. We share your data only in the following circumstances and only to the extent strictly necessary:

• KYC and identity verification providers: To confirm your age (21+), identity, and Indonesian residency as required for account registration and withdrawal processing.
• Payment processors and banking partners: To execute IDR transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported methods. Only the data necessary to complete the specific transaction is shared.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, NetEnt, and Pocket Games Soft receive session and wagering data necessary to operate their games within the qq289 environment. These providers operate under data processing agreements that restrict them from using your data for any purpose beyond game delivery.
• Fraud and security vendors: Specialist third-party tools used to detect account takeover attempts, collusion, and bonus abuse may receive technical and behavioural data from your sessions.
• Legal and regulatory authorities: qq289 will disclose Personal Data to law enforcement, regulatory bodies, or courts when required to do so by a lawful order or obligation. We will notify you of any such disclosure where permitted by law.

6.2 Data Processing Agreements

All third parties who process Personal Data on behalf of qq289 are contractually bound by data processing agreements that require them to implement appropriate technical and organisational security measures, process data only on qq289's documented instructions, and delete or return data upon termination of the service relationship.

7 Data Retention

qq289 retains Personal Data for the period necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of five years from the date of account closure, consistent with standard anti-money-laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in line with applicable financial compliance requirements.
• KYC documents: Retained for a minimum of five years from account closure or the date of the last transaction, whichever is later.
• Customer support communications: Retained for three years from the date of the interaction, unless a longer period is required to resolve an outstanding dispute.
• Technical and analytics data: Aggregated analytics data is retained indefinitely in anonymised form. Raw session logs containing identifiable information are deleted within 24 months.
• Marketing consent records: Retained for the duration of your account plus three years following account closure, to demonstrate compliance with consent requirements.

When Personal Data is no longer required and the applicable retention period has expired, qq289 will securely delete or anonymise the data using industry-standard data destruction procedures.

8 Security Measures

qq289 takes the security of your Personal Data seriously and implements a multi-layered approach to data protection across all Platform infrastructure:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and qq289's servers is encrypted using industry-standard TLS protocols. The qq289 Platform operates exclusively over HTTPS.
• Data encryption at rest: Sensitive data — including KYC documents, financial records, and hashed passwords — is encrypted in storage using AES-256 or equivalent encryption standards.
• Access controls: Access to Personal Data within qq289's internal systems is restricted on a strict need-to-know basis. All staff with access to Player data are subject to confidentiality obligations and background screening.
• Penetration testing and vulnerability assessments: qq289's infrastructure undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident affecting your Personal Data, qq289 will notify affected Players without undue delay and will take immediate corrective action to contain the breach and prevent recurrence.

9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. qq289 uses cookies and similar tracking technologies (such as pixel tags and local storage) to operate the Platform effectively, maintain your login session, personalise your experience, and gather anonymised analytics data to improve the Platform.

9.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Required for the Platform to function. Maintains your login session, stores your language and currency preferences, and enables secure transactions. Cannot be disabled.	Session / Up to 30 days
Functional	Remembers your game preferences, responsible gaming settings, and notification choices to personalise your qq289 experience.	Up to 12 months
Analytics	Collects anonymised data on how Players navigate the Platform — pages visited, features used, session duration — to help us improve design and performance.	Up to 24 months
Security & Fraud Detection	Identifies suspicious or automated activity, repeated failed login attempts, and unusual betting patterns that may indicate account compromise or fraud.	Session / Up to 90 days

9.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use core qq289 Platform features. For detailed instructions on managing cookies in your specific browser, refer to your browser provider's help documentation.

10 Your Data Rights

As a Player whose Personal Data is processed by qq289, you hold the following rights with respect to your information. To exercise any of these rights, please contact us as described in Section 15:

• Right of Access: You may request a copy of all Personal Data qq289 holds about you, along with information on how it is being used and with whom it has been shared.
• Right to Rectification: If any Personal Data held by qq289 is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our overriding legal obligations (e.g., AML record-keeping requirements may require us to retain certain data regardless).
• Right to Restriction of Processing: You may request that qq289 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You have the right to receive Personal Data you have provided to qq289 in a structured, commonly used, machine-readable format, and to request that this data be transmitted directly to another controller where technically feasible.
• Right to Object: You may object to processing of your Personal Data based on legitimate interest, including profiling for fraud prevention. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

qq289 will respond to all verified data rights requests within 30 days of receipt. In cases of complexity or high volume, we may extend this period by a further 30 days, of which we will notify you in advance.

11 Third-Party Services & External Links

The qq289 Platform integrates third-party game content from studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft. While these games are delivered within the qq289 interface, the underlying software is operated by the respective studios under their own privacy and data practices. qq289 ensures that all game studio integrations are governed by data processing agreements consistent with this Privacy Policy.

The qq289 Platform does not contain links to external third-party websites. All navigation and content remain within the qq289.bet domain. qq289 is not responsible for the privacy practices of any external platform accessed independently by a Player outside of the qq289 environment.

12 Minors & Age Restriction

qq289 operates an absolute 21+ age policy. The Platform is not directed at individuals under the age of 21, and qq289 does not knowingly collect Personal Data from anyone under that age. All new accounts are subject to KYC age verification prior to any withdrawal being processed, and qq289 reserves the right to perform age verification at any stage of an account's lifecycle.

If qq289 discovers that an account has been registered by or on behalf of a person under 21 years of age, the account will be immediately suspended, all activity will be reviewed, and any winnings will be forfeited in accordance with the qq289 Terms & Conditions. Any Personal Data collected from an underage individual will be securely deleted as soon as the account is confirmed to be ineligible.

13 International Data Transfers

To deliver the qq289 Platform to Players across Indonesia — including Jakarta, Surabaya, Medan, Bandung, Bali, and other cities — certain data processing activities may involve servers or service providers located outside Indonesia. Where Personal Data is transferred internationally, qq289 ensures that appropriate safeguards are in place, including:

• Contractual data transfer agreements incorporating standard contractual clauses or equivalent protections.
• Transfers only to jurisdictions or processors that maintain data protection standards consistent with internationally recognised best practices.
• Regular review of all international data transfer arrangements to ensure ongoing adequacy and compliance.

14 Policy Amendments

qq289 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Material changes — those that meaningfully affect how your Personal Data is used or your rights as a data subject — will be communicated to you via the email address registered to your account at least 14 days before the change takes effect.

Minor or clarificatory changes may be made without advance notice, and the updated Policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically. Your continued use of the qq289 Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

15 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your data rights, please contact the qq289 Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the qq289 Platform. Our support agents include native Indonesian speakers and can assist with data rights requests in both English and Bahasa Indonesia.
• Email: [email protected] — please use the subject line "Data Privacy Request — [Your Username]" to ensure your inquiry is routed to the correct team. We aim to acknowledge all privacy-related emails within 24 hours and provide a full response within 30 days.

If you are not satisfied with qq289's response to a data rights request or privacy complaint, you have the right to escalate the matter to an appropriate data protection authority or seek independent legal advice.