Privacy Policy — qa8821

1 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, date of birth, contact details, financial account data, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transmission, deletion, or any combination thereof.
• "Data Controller" — qa8821, which determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of qa8821 in accordance with qa8821's instructions and a binding data-processing agreement.
• "KYC Data" — identity and address verification documents submitted by a Player as part of the Know Your Customer process, including government-issued ID, proof of address, and payment method verification.
• "Cookies" — small text files placed on your device by the qa8821 Platform to maintain session state, support analytics, and enable fraud prevention functions.

2 Data We Collect

2.1 Registration Data

When you register a qa8821 account, we collect the following information:

• Full legal name;
• Date of birth (to verify that you are at least 21 years of age);
• Residential address (including city — e.g., Jakarta, Surabaya, Bandung, Bali, Medan);
• Email address and mobile phone number;
• Chosen username and encrypted password hash.

2.2 KYC & Verification Data

To comply with anti-money laundering (AML) obligations and to verify your identity prior to processing withdrawals, we may collect:

• Scanned or photographed copies of government-issued photo identification (Indonesian National ID / KTP, passport, or driver's license);
• Proof of residential address (e.g., recent utility bill or bank statement);
• Proof of payment method ownership (e.g., screenshot of your GoPay, OVO, DANA, or bank account registered in your name);
• Selfie photographs for liveness verification where required by our compliance process.

2.3 Financial Transaction Data

We log transaction records associated with deposits and withdrawals, including: payment method type (e.g., BCA transfer, GoPay, ShopeePay), transaction amount in IDR, transaction timestamp (WIB, UTC+7), and transaction reference numbers. We do not store full bank account numbers or e-wallet login credentials beyond the minimum required for transaction reconciliation.

2.4 Betting & Gaming Activity Data

All betting and gaming activity on the Platform is recorded, including: wagers placed (sport, market, odds, stake, outcome), game session data (*togel* (Indonesia's traditional numbers lottery) draws, live casino sessions, slot sessions), bonus usage and wagering history, and account balance changes over time.

2.5 Technical & Device Data

When you access qa8821, our servers automatically collect certain technical data, including: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), session timestamps, pages visited, and referring URL. This data is used for security monitoring, fraud prevention, and platform performance optimization.

2.6 Communications Data

If you contact qa8821 via live chat or email, we retain records of those communications, including the content of your messages, timestamps, and the account to which the inquiry relates.

3 How We Use Your Data

qa8821 uses your personal data for the following purposes:

• Account Management: To create, operate, and maintain your qa8821 account, including processing deposits, withdrawals, and wager settlements;
• Identity Verification: To confirm your identity and age (21+) through KYC procedures before processing your first withdrawal or where otherwise required by our compliance framework;
• Fraud Prevention & Security: To detect, investigate, and prevent unauthorized account access, payment fraud, multi-accounting, bonus abuse, and other prohibited activities;
• Legal & Regulatory Compliance: To fulfill obligations under applicable anti-money laundering regulations, gaming license conditions, and any lawful requests from competent authorities;
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling and to support the application of responsible gaming tools such as deposit limits and self-exclusion;
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance through our 24/7 support channels;
• Platform Improvement: To analyze aggregated usage patterns and improve the design, performance, and content of the qa8821 platform;
• Communications: To send you transactional notifications (e.g., deposit confirmations, withdrawal approvals, KYC status updates) and, where you have opted in, promotional communications about qa8821 offers.

4 Legal Basis for Processing

qa8821 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the account agreement with you (e.g., operating your account, processing transactions, settling wagers);
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML, KYC, and gaming license conditions;
• Legitimate Interests: Processing necessary for qa8821's legitimate interests in security, fraud prevention, platform improvement, and responsible gaming monitoring, provided those interests are not overridden by your fundamental rights and freedoms;
• Consent: Where you have provided explicit consent (e.g., opting in to receive promotional emails or SMS notifications), you may withdraw that consent at any time by contacting our support team or updating your account communication preferences.

5 Data Sharing & Disclosure

5.1 Third-Party Service Providers

qa8821 engages carefully selected third-party Data Processors to support the operation of the Platform. These providers are bound by contractual data-processing agreements and are permitted to use your personal data only for the specific purposes for which they were engaged. Categories of third-party processors include:

• Identity Verification Providers: Licensed KYC and AML service providers who assist in verifying the identity and age of Players;
• Payment Processors: Banks and e-wallet infrastructure providers that facilitate deposits and withdrawals (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, GoPay, OVO, DANA, ShopeePay, LinkAja);
• Game Studio Providers: Certified game studios such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Pocket Games Soft, which may process session-level data to deliver their games;
• IT Infrastructure & Cloud Hosting: Providers of server hosting, content delivery networks, and database infrastructure used to operate the Platform;
• Fraud Prevention & Cybersecurity: Specialist providers offering IP reputation checks, device fingerprinting, and bot-detection services;
• Customer Support Software: Platforms enabling our 24/7 live chat support service.

5.2 Legal Disclosures

qa8821 may disclose your personal data to competent governmental, regulatory, or law enforcement authorities where required by applicable law, a valid court order, or where disclosure is necessary to protect the rights, property, or safety of qa8821, its employees, or its Players. qa8821 will, where legally permissible, notify you of any such disclosure.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of qa8821's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, qa8821 will provide notice and ensure that equivalent data protection obligations are imposed on the recipient.

5.4 No Sale of Personal Data

qa8821 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for that party's own marketing, advertising, or commercial purposes. This prohibition is absolute and not subject to any exception.

6 Data Retention

qa8821 retains your personal data for as long as your account remains active and for such additional periods as are required to fulfill our legal and regulatory obligations. Specific retention guidelines include:

• Account & Registration Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later, as required under applicable financial crime prevention regulations;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Betting & Gaming History: Retained for the duration of your account and for at least three (3) years following closure, for dispute resolution and regulatory purposes;
• Support Communications: Retained for up to three (3) years following resolution of the relevant inquiry;
• Technical & Log Data: Retained for up to twelve (12) months from collection, unless required for an ongoing security investigation.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymized in a manner that renders re-identification impossible. Anonymized, aggregated statistical data may be retained indefinitely for platform analytics purposes.

7 Security Measures

qa8821 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your browser or mobile device and qa8821 servers is encrypted using TLS 1.2 or higher;
• Encryption at Rest: Sensitive personal data stored in qa8821 databases is encrypted at rest using industry-standard algorithms;
• Access Controls: Access to personal data within qa8821's systems is restricted on a strict need-to-know basis, with role-based access controls and audit logging;
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts. qa8821 staff accounts with access to Player data require mandatory 2FA;
• Penetration Testing & Vulnerability Management: qa8821's systems undergo regular security assessments and penetration testing by independent specialists;
• Incident Response: qa8821 maintains a documented data breach response procedure. In the event of a breach that poses a material risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with applicable legal requirements.

8 Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small data files placed on your device when you visit the qa8821 Platform. They allow the Platform to recognize your browser across sessions, maintain your login state, and remember certain preferences. Cookies do not contain executable code and cannot access other data stored on your device.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without impairing Platform functionality;
• Performance & Analytics Cookies: Used to collect aggregated, anonymized information about how Players use the Platform — e.g., which pages are visited most frequently, where errors occur, and how long sessions last. This data is used solely to improve the Platform experience;
• Fraud Prevention Cookies: Used to assign a session identifier that supports our fraud detection systems in identifying and blocking suspicious activity patterns.

8.3 Third-Party Cookies

Certain third-party game studios integrated into the qa8821 Platform may set their own cookies to support game-session continuity and RNG integrity verification. These cookies are governed by the respective studio's privacy practices. qa8821 does not permit third-party advertising networks to place behavioral advertising cookies on the Platform.

8.4 Managing Cookies

You may control or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to the qa8821 Platform. Instructions for managing cookies in major browsers are available in each browser's help documentation. Continued use of the Platform following the display of our cookie notice constitutes acceptance of our cookie practices as described in this section.

9 Your Data Rights

Subject to applicable law and our regulatory retention obligations, you have the following rights in relation to the personal data qa8821 holds about you:

• Right of Access: You may request a copy of the personal data qa8821 holds about you, along with information about how it is processed;
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. You may update certain account details directly through your account settings panel;
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data. Note that this right is subject to overriding legal obligations — for example, KYC and transaction records that must be retained under AML regulations cannot be erased before the mandatory retention period expires;
• Right to Restriction: You may request that qa8821 restrict the processing of your data in certain circumstances, for example while a dispute regarding data accuracy is being resolved;
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that qa8821 provide your personal data in a commonly used, machine-readable format;
• Right to Object: You may object to processing that is based on qa8821's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the qa8821 Data Privacy team via live chat or by email at [email protected]. We will respond to your request within 30 days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it.

10 International Data Transfers

qa8821 operates as an internationally licensed platform, and some of your personal data may be transferred to, stored in, or processed in countries outside Indonesia. Where such transfers occur, qa8821 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under applicable data protection principles, including:

• Binding contractual clauses with third-party processors that impose equivalent data protection obligations;
• Use of processors operating in jurisdictions recognized as providing an adequate level of data protection;
• Technical security measures (encryption in transit and at rest) applied regardless of geographic location.

By accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to qa8821's servers and authorized processors, which may be located outside Indonesia, subject to the safeguards described above.

11 Minors & Age Verification

12 Amendments to This Policy

qa8821 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Where changes are material, we will provide advance notice via a prominent notice on the Platform and/or by email to your registered account address. The revised Policy will state the effective date at the top of the document. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy. We recommend that you review this Policy periodically.

13 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way qa8821 handles your personal data, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly on the Platform. Our agents are fluent in both English and Indonesian and can escalate data privacy inquiries to our compliance team.
• Email: [email protected] (plain text — not a clickable link; please copy and paste into your email client).

qa8821 aims to acknowledge all privacy-related inquiries within 24 hours (WIB, UTC+7) and to provide a substantive response within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.