Privacy Policy

qq820 ("qq820", "we", "our", "us") operates the online casino and sports betting platform accessible at qq820.club. This Privacy Policy describes how qq820 collects, uses, discloses, stores, and protects the personal information of users ("you", "your") who register an account or otherwise interact with the platform.

qq820 is designed for and directed at players in Indonesia. We recognise the importance of data privacy to our users and are committed to maintaining appropriate safeguards for all personal information entrusted to us. This Policy is written in plain, professional English and applies to all qq820 account holders regardless of the city from which they access the platform — whether Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Bali, or elsewhere in Indonesia.

This Privacy Policy should be read alongside the qq820 Terms & Conditions, which govern your use of the platform as a whole. Capitalised terms used in this Policy that are not defined here carry the meanings given to them in the Terms & Conditions.

qq820 is the data controller responsible for the personal information collected through qq820.club. As data controller, qq820 determines the purposes for which personal data is collected and the manner in which it is processed. qq820 operates under an international gaming licence and is subject to the data protection requirements applicable under that licensing jurisdiction.

For all privacy-related queries, requests, or complaints, qq820 can be contacted at [email protected] or via in-platform live chat, which is staffed 24 hours a day, 7 days a week, including Indonesian public holidays such as Idul Fitri, Nyepi, and Indonesian Independence Day.

qq820 collects personal data through three primary channels: information you provide directly when registering or using the platform; information generated automatically by your use of the platform; and information received from trusted third parties in connection with identity verification and payment processing.

3.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, Indonesian residential address, email address, and mobile phone number.
• Identity verification (KYC) data: Indonesian National Identity Card (KTP) number and image, selfie photograph (where required for verification), and proof of residential address documentation.
• Payment data: Bank account holder name, bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI), account number, and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja). Full payment credentials are never stored by qq820 after a transaction is completed.
• Communications data: Content of messages sent to qq820 via live chat, email ([email protected]), or any other support channel. This includes queries, complaints, feedback, and self-exclusion requests.

3.2 Information Generated by Platform Use

• Transaction records: Deposit amounts, withdrawal requests, game stake amounts, game outcomes, bonus claims, and wagering history — all denominated in IDR.
• Device and technical data: IP address, device type and model, operating system version, browser type and version, screen resolution, and mobile network information.
• Usage data: Pages visited on qq820.club, game sessions opened, time spent on each game or section, navigation paths, and session start/end timestamps (recorded in WIB, UTC+7).
• Cookie and tracking data: See Section 9 (Cookies & Tracking) for full details.

3.3 Information from Third Parties

• KYC verification providers: Results and flags from automated identity verification checks conducted by qq820's licensed KYC service providers.
• Payment processors: Transaction confirmation data, fraud-screening flags, and chargeback notifications from payment processing partners.
• AML screening providers: Politically exposed person (PEP) status checks and sanctions list screening results.

qq820 uses the personal data described in Section 3 for the following purposes:

qq820 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil qq820's obligations to you under the Terms & Conditions — including account creation, payment processing, and game provision — is conducted on the basis that it is necessary to perform the contract between qq820 and you.
• Legal obligation: Processing required to comply with qq820's obligations under applicable gaming regulations, anti-money laundering legislation, and tax reporting requirements — including KYC identity verification and transaction record retention — is conducted on the basis of legal obligation.
• Legitimate interests: Processing conducted for fraud prevention, platform security monitoring, and aggregated usage analysis is conducted on the basis of qq820's legitimate interest in maintaining a secure and well-functioning platform, balanced against the privacy rights of users.
• Consent: Processing for optional promotional marketing communications is conducted solely on the basis of your express consent. You may withdraw consent to marketing communications at any time without affecting the lawfulness of prior processing or your ability to continue using the platform.

qq820 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment processors and banking partners: qq820 shares the minimum necessary payment data with Indonesian banking partners (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, and BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to execute deposits and withdrawals. These partners are contractually bound to use the data solely for payment processing and are not permitted to use it for any other purpose.
• KYC and AML service providers: qq820 shares KTP data, verification images, and relevant personal details with licensed KYC verification providers and AML screening services. These providers operate under strict data processing agreements and are not permitted to retain or use your data beyond the scope of the verification service.
• Game studio partners: qq820 shares session data with licensed game studio partners (including Evolution Gaming, Pragmatic Play, PG Soft, Microgaming, NetEnt, and Spribe) to the minimum extent necessary for game functionality, fair-play monitoring, and technical support.
• Regulatory and law enforcement authorities: qq820 will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a valid legal process, or a lawful order from a competent authority. qq820 will notify affected users of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of qq820's business, user data may be transferred to the acquiring entity, subject to the acquiring entity assuming the data protection obligations set out in this Policy.

qq820 retains personal data for the minimum period necessary for the purposes for which it was collected, subject to the following specific retention periods:

Upon expiry of the applicable retention period, qq820 will securely delete or irreversibly anonymise personal data. Anonymised, aggregated data (which cannot be used to identify an individual) may be retained indefinitely for platform analytics purposes.

qq820 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or disclosure:

• 256-bit SSL/TLS encryption is applied to all data transmitted between your device and qq820's servers. This is the same encryption standard used by major Indonesian financial institutions.
• Encryption at rest: Sensitive personal data stored on qq820's servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Payment credential handling: Bank account numbers, e-wallet tokens, and other payment credentials are never stored by qq820 after a transaction is finalised. Payment data is passed directly to the relevant payment processor and is not retained in qq820's systems.
• Access controls: Access to personal data within qq820's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose role requires access to specific data categories are permitted to view that data. All internal access is logged and audited.
• Two-factor authentication (2FA): qq820 supports 2FA for account logins and strongly recommends that all users enable it via account security settings.
• Penetration testing and security audits: qq820's platform undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.

qq820.club uses a small number of cookies and similar technologies to maintain core platform functionality. qq820 does not use third-party advertising cookies or behavioural tracking networks. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens (to keep you logged in during a session), CSRF protection tokens (to prevent cross-site request forgery attacks), and load-balancing cookies. These cookies cannot be disabled without preventing core platform functionality.
• Performance cookies: Used to collect anonymised, aggregated data about how users navigate qq820.club — such as which pages load slowly or which game categories are most accessed. This data is used exclusively for platform performance improvement and cannot be used to identify individual users.
• Preference cookies: Used to remember user interface preferences such as language settings and display options. These cookies are set only where a user has actively changed a preference.

qq820 does not use social media tracking pixels (Facebook Pixel, Twitter/X Pixel, TikTok Pixel), Google Ads conversion tracking, or any third-party behavioural advertising technology on qq820.club. Your gaming activity on qq820 is not shared with or accessible by any social media platform.

Most browsers allow you to view, manage, and delete cookies through the browser's settings menu. Deleting strictly necessary cookies will require you to log in again on your next visit.

As a qq820 account holder, you have the following rights in respect of your personal data. To exercise any of these rights, contact qq820 at [email protected] or via in-platform live chat. qq820 will acknowledge all data rights requests within 24 hours and will respond in full within 30 calendar days.

qq820 will not charge a fee for exercising any of the above rights. If a request is manifestly unfounded or excessive, qq820 may charge a reasonable administrative fee or decline the request, but will explain the reason in writing. qq820 will never act against a user for exercising their lawful data rights.

qq820 is strictly an adults-only (21+) platform. qq820 does not knowingly collect or process personal data belonging to individuals under the age of 21. Account registration requires confirmation of age at the point of sign-up, and KYC identity verification (using Indonesian KTP, which is issued from the age of 17) is required before any withdrawal is processed. The KTP date of birth is cross-checked against the age declared at registration.

If qq820 becomes aware that personal data belonging to a person under 21 has been collected — whether through a misrepresentation at registration or any other means — qq820 will immediately suspend the Account, forfeit any Bonus Funds, return the real-money balance to the original deposit source after investigation, delete all personal data associated with the underage account to the extent permitted by applicable law, and report the incident to the relevant regulatory authority where required.

If you believe that a person under the age of 21 has registered a qq820 account, please notify qq820 immediately at [email protected]. All such reports are treated with the highest priority and are investigated within 24 hours.

qq820 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform functionality, or data processing practices. All updates will be published on this page at qq820.club/privacy-policy with an updated effective date.

Where changes are material — such as the introduction of a new category of data processing, a change in data-sharing arrangements, or an extension of retention periods — qq820 will notify registered users by email at least seven (7) days before the changes take effect. For minor clarificatory amendments, qq820 may update the Policy without advance notice.

Continued use of the qq820 platform after the effective date of any revised Privacy Policy constitutes your acceptance of that revision. If you do not accept any revised Policy, please contact support to close your account before the revision takes effect.

For all privacy-related queries, requests to exercise your data rights, or concerns about how qq820 handles your personal information, please contact qq820's support team through the following channels. All privacy communications are handled by trained support personnel and are given priority treatment.

• Email: [email protected] — for formal data subject access requests, erasure requests, and privacy complaints. Responses are issued within 24 hours of receipt, with a full resolution within 30 calendar days.
• Live Chat: Available in-platform at qq820.club after logging in. Staffed 24/7 by native Indonesian-speaking agents. Average first response time under two minutes. Suitable for general privacy questions, marketing opt-out requests, and cookie queries.

When submitting a formal data rights request, please include: your registered email address; the type of request (access, rectification, erasure, portability, restriction, or objection); a brief description of your request; and, where applicable, supporting documentation. This enables qq820's team to locate the relevant records and process your request efficiently.

This Privacy Policy was last reviewed and updated: 1 January 2026. qq820 reserves the right to amend this Policy in accordance with Section 12.