qq999 Privacy Policy

qq999 ("qq999", "we", "us", "our") operates the online betting and casino platform available at qq999.im. We provide a full suite of wagering services — including a sportsbook covering BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, and international competitions such as the AFF Cup and FIFA World Cup, a live casino powered by Evolution Gaming, and an extensive slot library from Pragmatic Play, PG Soft, NetEnt, and Microgaming — to members based primarily in Indonesia.

In operating this platform, qq999 inevitably collects and processes personal data about the individuals who use our services. We take that responsibility seriously. This Privacy Policy sets out in clear terms what data we collect, why we collect it, how we protect it, how long we keep it, and what rights you have in relation to it.

qq999 is committed to handling personal data responsibly, in accordance with internationally recognised data protection principles including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality. We review and update our privacy practices regularly to ensure they remain aligned with evolving best practice and the expectations of our members across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and throughout Indonesia.

The following terms have the meanings set out below throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable individual — including name, email address, phone number, payment account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, and deletion.
• "Member" means any individual who has registered a qq999 account and agreed to our Terms & Conditions.
• "Platform" means the qq999.im website, any mobile-optimised version thereof, and any associated applications.
• "Controller" means the entity that determines the purposes and means of Processing — in this case, qq999.
• "Processor" means a third party that Processes Personal Data on behalf of qq999 under a written data-processing agreement.
• "KYC" means Know Your Customer — the identity and address verification process conducted before a Member may withdraw funds or access certain platform features.

qq999 collects the following categories of Personal Data from Members and platform visitors:

qq999 collects Personal Data through the following means:

• Direct submission: When you register an account, complete our KYC process, make a deposit or withdrawal request, contact our support team, or respond to a promotion, you provide Personal Data directly to us.
• Automated technologies: When you visit qq999.im, our servers automatically record Technical Data such as your IP address, browser fingerprint, and session duration. We use cookies and similar technologies as described in Section 7.
• Payment providers: When you complete a transaction via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja, the relevant payment provider may share transaction confirmation data with us to facilitate crediting your account.
• Identity verification partners: During KYC, qq999 may use a third-party identity verification service to cross-check the documents you submit. That partner provides a verification outcome to qq999; we do not receive raw biometric data.
• Publicly available sources: In connection with fraud prevention and AML compliance, qq999 may consult publicly available sources such as sanctions lists and adverse-media databases to screen Member information.

qq999 uses your Personal Data only for legitimate, clearly defined purposes. The table below summarises our primary processing activities:

qq999 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human review. Our fraud detection systems flag accounts for human investigation; they do not autonomously close accounts or withhold funds without a manual review step.

qq999 relies on the following legal bases to process your Personal Data, consistent with internationally recognised data protection principles:

• Contract performance: Processing necessary to enter into and perform our Terms & Conditions with you — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with AML, CTF, and KYC obligations under applicable international standards adopted by our licensing jurisdiction.
• Legitimate interests: Processing necessary for qq999's legitimate business interests, such as fraud prevention, security monitoring, platform improvement, and responsible gaming oversight — provided those interests are not overridden by your rights and interests.
• Consent: Processing for which we have obtained your explicit, freely given consent — in particular, the sending of marketing and promotional communications. You may withdraw this consent at any time by contacting our support team or updating your account preferences, without affecting the lawfulness of processing carried out before withdrawal.

qq999.im uses cookies and similar technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in, anti-fraud tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Performance cookies: Collect anonymised data about how visitors use qq999.im — for example, which pages load most slowly or generate the most errors. This data helps us improve the platform. No personally identifiable information is captured.
• Functional cookies: Remember your preferences such as your preferred language, currency display, and notification settings, so you do not have to re-enter them on every visit.
• Analytics cookies: Used by trusted analytics providers to measure aggregate traffic patterns and user flows across the platform. All data is processed in anonymised or pseudonymised form.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may impair platform functionality. We do not use third-party advertising or retargeting cookies that track your activity across other websites.

qq999 does not sell your Personal Data. We share it only in the following limited circumstances:

• Payment processors: We share necessary Financial and Identity Data with banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your transactions. These providers act as independent Controllers for their own AML obligations.
• Identity verification partners: During KYC, a third-party document verification provider processes the identity documents you submit. That provider is contractually bound to process data solely for verification purposes and to delete document images within 30 days of verification completion.
• Game content providers: Game studios including Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, and Microgaming may receive anonymised session identifiers to facilitate game delivery and fairness auditing. No directly identifiable personal data is shared with game studios.
• Fraud prevention and security services: We use specialised third-party services to detect and prevent fraudulent account activity. These Processors access Technical and Transaction Data under strict data-processing agreements.
• Legal and regulatory authorities: qq999 will disclose Personal Data to law enforcement agencies, financial intelligence units, or other regulatory bodies when required to do so by a lawful order, court direction, or applicable regulation. We will, where legally permitted, notify the affected Member of such a disclosure.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of qq999's assets, Member data may be transferred to the successor entity, subject to equivalent privacy protections. Members will be notified in advance of any such transfer.

All third-party Processors engaged by qq999 are subject to written data-processing agreements that require them to implement appropriate technical and organisational security measures and to process Personal Data only on qq999's documented instructions.

qq999's primary data infrastructure is hosted on servers located in secure data centres in Asia. Certain third-party service providers — including game studios and fraud-prevention tools — may process data in jurisdictions outside Indonesia. Where such transfers occur, qq999 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses (SCCs) or equivalent contractual protections requiring the recipient to uphold data protection standards comparable to those applied by qq999.
• Transfers only to countries or organisations that the relevant licensing authority has recognised as providing an adequate level of data protection.
• Binding corporate rules where data is transferred within a group of companies of which a qq999 Processor is a member.

You may request details of the specific safeguards in place for any international transfer by contacting us at the address provided in Section 16.

qq999 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention schedule applies:

On expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data (e.g., platform-wide betting statistics with no individual identifiers) may be retained indefinitely for business analytics purposes.

qq999 implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational measures include:

• Encryption in transit: All data transmitted between your browser or app and qq999.im is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Encryption at rest: Sensitive data fields — including payment account numbers, identity document references, and authentication credentials — are encrypted at rest using AES-256.
• Access controls: Personal Data is accessible only to qq999 personnel who have a documented business need. Access is granted on a least-privilege basis and is subject to role-based access controls and multi-factor authentication for administrative systems.
• Penetration testing: qq999's platform undergoes regular third-party penetration testing and vulnerability assessments. Critical findings are remediated within defined SLA timeframes.
• Incident response: qq999 maintains a documented data breach response plan. In the event of a confirmed breach, the response team is activated within one hour, affected systems are isolated, and Member notification procedures are initiated within 72 hours where required.
• Employee training: All qq999 employees with access to Personal Data receive mandatory data-protection training on joining the company and annually thereafter.

As a Member of qq999, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact us as described in Section 16. We will respond to all verifiable requests within 30 days.

• Right of access: You may request a copy of all Personal Data qq999 holds about you, together with information about how it is processed. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure ("right to be forgotten"): You may request that we delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to our legal retention obligations — for example, we cannot delete KYC records that we are required by AML law to retain for five years post-closure.
• Right to restrict processing: You may request that we restrict our processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that we provide your Personal Data in a portable format so that you can transfer it to another service provider.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. If you object to marketing processing, we will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

qq999 will not charge a fee for exercising any of the above rights unless a request is manifestly unfounded or excessive. We may ask you to verify your identity before processing a rights request to protect against fraudulent or unauthorised submissions.

The qq999 platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered an account using your or their personal details, please contact us immediately at [email protected]. We will investigate and respond within 24 hours.

qq999 supports the use of parental controls and filtering software to prevent minors from accessing gambling websites. We recommend that parents and guardians install appropriate filtering tools on devices that may be accessed by children.

The qq999 platform may contain links to third-party websites — for example, game studios' responsible gaming information pages or payment provider portals. These third-party sites are operated independently of qq999 and are governed by their own privacy policies. qq999 has no control over and accepts no responsibility for the content, privacy practices, or data handling of any third-party site.

We encourage you to review the privacy policy of any third-party site you visit before submitting any personal information. The inclusion of a link on qq999.im does not imply endorsement of the linked site or its privacy practices.

qq999 reviews this Privacy Policy at least annually and whenever a material change in our data processing practices or applicable legal requirements makes an update necessary. When we update this Policy, we will revise the "Last Updated" date at the top of this page.

For changes that materially affect your rights — such as introducing a new category of data collection or a new purpose for processing — qq999 will provide at least 14 days' advance notice via a prominent notice on the platform homepage or by direct email to your registered address. Your continued use of the platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.

If you do not accept a material change to this Privacy Policy, you may request voluntary account closure under Clause 15.3 of our Terms & Conditions, and we will return your real-money balance in accordance with those terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data-subject rights, or have a concern about how qq999 handles your Personal Data, please contact our Data Protection team through the following channels:

• Email: [email protected] — mark your subject line "Privacy Request" or "Data Complaint" for priority routing.
• Live Chat: Available 24/7 via the qq999 platform in both English and Indonesian. Our Indonesian-speaking support agents can assist with any privacy enquiry.
• Response Time: We acknowledge all privacy requests within 24 hours and provide a substantive response within 30 days. Complex requests may require up to 60 days; we will notify you if an extension is needed.

If you are dissatisfied with qq999's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. qq999 will cooperate fully with any such authority investigation.

This Privacy Policy was last reviewed and updated in January 2026. The current version supersedes all previous versions. qq999 reserves the right to update this Policy at any time in accordance with Section 15 above.