Privacy Policy

qq212 collects personal data in several ways: directly from you when you register, transact, or contact support; automatically when you use the Platform; and from trusted third-party verification partners during identity and payment checks. The categories of personal data we collect are described in the table below.

qq212 uses personal data solely for legitimate, defined purposes related to operating a safe, secure, and compliant online betting platform for members across Indonesia. We do not use your data for purposes that are incompatible with the purposes for which it was collected without first providing you with notice and, where required, obtaining your consent.

• Account Management: Creating, maintaining, securing, and closing your qq212 Member account; authenticating your identity at each login; enforcing the one-account-per-person policy.
• Service Delivery: Processing deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, and others) and e-wallets (OVO, DANA, GoPay); accepting and settling wagers; crediting and tracking bonus funds; delivering promotional offers you have opted into.
• KYC and AML Compliance: Verifying your age (21+), identity, and residency as required by international KYC and AML standards; investigating and reporting suspicious financial activity; complying with applicable legal holds and regulatory requests.
• Fraud Prevention and Security: Detecting and preventing duplicate accounts, bonus abuse, money laundering, automated bot activity, and other forms of fraud; monitoring betting patterns for integrity concerns; maintaining the security of the Platform and its infrastructure.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, user interface design, and customer support quality; conducting A/B testing of new features.
• Customer Support: Responding to support tickets, live chat queries, and email correspondence; resolving disputes; processing self-exclusion and responsible gaming requests submitted by Members.
• Responsible Gaming: Monitoring wagering behaviour for indicators of problematic gambling; enforcing deposit limits, cool-off periods, and self-exclusion orders set by Members or required by compliance protocols.
• Marketing Communications: Sending promotional emails, SMS messages, or in-platform notifications about qq212 bonuses, seasonal offers (including Idul Fitri and Ramadhan promotions), and new product launches — but only to Members who have opted in to receive such communications.
• Legal and Regulatory Obligations: Retaining records as required by AML regulations; responding to lawful requests from regulatory authorities or law enforcement bodies.

Every processing activity carried out by qq212 is grounded in a recognised legal basis. The primary legal bases on which qq212 relies are as follows:

• Contractual Necessity: The majority of qq212's data processing is necessary to perform the contract between qq212 and its Members — specifically, to register accounts, accept wagers, process payments in IDR, and deliver the services described in the Terms & Conditions. Without this processing, qq212 cannot provide its services.
• Legal Obligation: Processing required to comply with AML regulations, KYC identity verification mandates, data retention laws, and responses to lawful regulatory or law enforcement requests is carried out on the basis of legal obligation.
• Legitimate Interests: qq212 processes certain technical and transactional data to detect fraud, prevent bonus abuse, maintain Platform security, and improve service quality. These activities are carried out on the basis of qq212's legitimate interests, balanced against the rights and expectations of Members.
• Consent: Marketing communications — including promotional emails, SMS offers, and in-platform push notifications — are sent only where a Member has provided explicit, freely given, and informed consent at registration or subsequently through account settings. Consent can be withdrawn at any time without affecting the Member's access to qq212's core services.

qq212 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only where appropriate data-processing agreements or equivalent safeguards are in place.

• Payment Processors and Banking Partners: To facilitate deposits and withdrawals, qq212 shares the minimum necessary financial data with Indonesian banks (including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, and others) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). These institutions operate under their own privacy and security frameworks and are independently regulated.
• Identity Verification Providers: qq212 uses third-party KYC and identity verification platforms to validate Member identity documents and perform liveness checks. These providers process identity data under strict contractual terms and are prohibited from using the data for any purpose other than identity verification.
• Game Content Providers: Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — receive limited session data necessary to deliver their games within the qq212 Platform. Game studios do not receive full Member identity or financial data.
• Fraud Prevention and AML Partners: qq212 works with specialist fraud-detection and AML screening services. These partners receive transactional and behavioural data necessary to perform risk assessments. No marketing use of this data is permitted.
• Legal and Regulatory Authorities: qq212 will disclose personal data to government bodies, law enforcement agencies, or regulators when required to do so by law, court order, or regulatory directive. Where permitted, qq212 will notify the affected Member of such a request prior to disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of qq212's business assets, personal data held by qq212 may be transferred to the acquiring entity, subject to equivalent privacy protections. Members will be notified of any such transfer by email prior to the effective date.

qq212 uses cookies and similar tracking technologies to operate the Platform, maintain your session, detect fraud, and analyse usage patterns. Cookies are small text files stored on your device by your browser. The types of cookies used by qq212 are as follows:

Most browsers allow you to view, manage, and delete cookies through their built-in settings. Please note that disabling non-essential cookies may affect the performance and personalisation features of the qq212 Platform. qq212 does not use third-party advertising cookies or behavioural retargeting technologies.

qq212 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to maintain the Member relationship, and to comply with applicable legal and regulatory obligations. The following retention schedule applies:

• Active Account Data: Retained for the full duration of your qq212 membership, plus five (5) years post-account closure. This retention period is mandated by international AML frameworks applicable to online gaming platforms.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Financial Transaction Records: All deposit, withdrawal, and wagering records denominated in IDR/Rp are retained for a minimum of five (5) years to satisfy AML record-keeping requirements.
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the last communication in a given thread, unless the content relates to an ongoing dispute or legal matter, in which case it is retained until resolution plus two (2) additional years.
• Marketing Opt-In Records: Consent records for marketing communications are retained for the duration of the membership and for three (3) years post-opt-out or post-account closure, to demonstrate compliance with consent obligations.
• Technical Logs: Server and access logs are retained for ninety (90) days for security monitoring purposes, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely destroyed using industry-standard data-destruction methods. Where full deletion is not immediately practicable (for example, where data is held in encrypted backup systems), the data is isolated and scheduled for destruction at the next available secure-wipe cycle.

As a qq212 Member, you have a range of rights regarding the personal data we hold about you. These rights are summarised below. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving your request.

qq212 is strictly an adults-only platform. Access to and use of the Platform is prohibited for any individual under the age of 21. qq212 does not knowingly collect personal data from individuals under the age of 21, and does not direct any of its marketing, content, or services towards minors.

At registration, all Members are required to confirm that they are at least 21 years of age. qq212 operates a robust KYC verification process that includes age verification using government-issued identification documents (such as the Indonesian KTP). Where age verification reveals that a Member is under 21, the account will be immediately and permanently closed, all funds will be returned to the originating payment method, and the personal data associated with the account will be securely destroyed, except where retention is required for fraud-prevention or legal purposes.

qq212 is an internationally operated platform. Personal data collected from Members in Indonesia may be transferred to, stored on, and processed by servers and systems located outside of Indonesia, including in jurisdictions where qq212's infrastructure providers, KYC partners, and game studios operate.

Where personal data is transferred outside of Indonesia, qq212 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to that required by applicable international privacy frameworks. These safeguards include:

• Contractual data-processing agreements with all third-party recipients that mandate equivalent data protection standards
• Transfer impact assessments for transfers to jurisdictions that do not have a formal adequacy determination in place
• Technical safeguards including encryption of data in transit and at rest
• Strict limitations on the purposes for which transferred data may be used by the receiving party

By registering a qq212 account and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data as described in this clause. If you have questions about the specific safeguards applied to international transfers of your data, please contact [email protected].

qq212 implements a comprehensive, layered security architecture to protect the personal data and financial information of its Members. Our security programme includes the following measures:

• Transport Layer Security: All communications between Member devices and qq212's servers are encrypted using TLS 1.2 or higher, with certificate pinning implemented for the Platform's mobile interfaces.
• Data Encryption at Rest: Sensitive personal data — including identity documents, bank account details, and password hashes — is encrypted at rest using AES-256 encryption on all storage systems.
• Access Controls: Access to Member personal data within qq212's internal systems is restricted on a strict need-to-know basis. All internal access is role-based, logged, and subject to regular access reviews. Privileged access requires multi-factor authentication.
• Infrastructure Security: qq212's server infrastructure is hosted in ISO-certified data centres with physical security controls, redundant power systems, and 24/7 monitoring. Regular penetration testing and vulnerability assessments are conducted by independent security specialists.
• Fraud Detection Systems: Real-time transaction monitoring systems analyse deposit and withdrawal patterns, login behaviour, and wagering activity to detect and flag anomalous activity indicative of account takeover, fraud, or money laundering.
• Staff Training: All qq212 personnel with access to personal data receive mandatory data protection and security training on an annual basis. Data handling procedures are reviewed and updated regularly.

The qq212 Platform integrates content and functionality from third-party providers, including game studios, payment processors, and identity verification services. When you interact with third-party content within the Platform — for example, launching a game developed by Pragmatic Play, Evolution Gaming, or Spribe — certain technical data (such as session tokens and game-round results) is exchanged with that third party's systems to deliver the game experience.

Each third-party provider operates under its own privacy policy and data-processing terms, which are independent of this Policy. qq212 is not responsible for the data practices of third-party studios or payment processors beyond the contractual obligations imposed in our data-processing agreements with them. We encourage Members to review the privacy policies of the third-party providers whose products they use within the Platform.

qq212 does not integrate third-party advertising networks, behavioural tracking pixels, or social media data-sharing plugins into the Platform. Any third-party code present on the Platform is limited to functional components (payment gateways, game clients, analytics) that are necessary for service delivery.

qq212 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, in applicable law, or in the services we offer. The current version of this Policy, along with its effective date, is always available at https://qq212.pro/privacy-policy.

Where changes to this Policy are material — for example, where we introduce a new category of data processing or change the basis on which we share data with third parties — qq212 will provide notice to all registered Members by email at least seven (7) days before the amended Policy takes effect. For minor, non-material amendments (such as clarifications of existing practices or corrections of typographical errors), qq212 may update the Policy without advance individual notice, and the amended Policy will take effect upon publication.

Your continued use of the Platform after the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. Members who do not agree with a material amendment are encouraged to close their account before the amendment takes effect. Account closure does not affect qq212's obligation to retain data for the minimum periods required by applicable law and AML regulations.

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, want to withdraw marketing consent, or need to report a suspected data security incident, please contact the qq212 data protection team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected] — please use the subject line "Privacy Enquiry" for data protection matters (plain text — not a clickable link)
• Response Time: Privacy Rights Requests are acknowledged within 72 hours and fully responded to within 30 calendar days
• Live Chat: Available on the qq212 Platform — Indonesian-speaking agents available 08:00–24:00 WIB (UTC+7); English-language data protection support available 24/7
• Postal Address: Available on request via email for Members who wish to submit formal written privacy requests

qq212 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with applicable data protection obligations. The DPO may be contacted via the email address above with the subject line "Data Protection Officer". All DPO communications are handled with strict confidentiality.