Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all Users of qr99 services, including residents of Indonesia accessing our sports betting, casino gaming, and related entertainment offerings. By creating an Account with qr99, depositing funds, placing bets, or otherwise using our Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

qr99 operates as an online betting platform serving Indonesian players in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and across the Indonesian archipelago. Our Privacy Policy is designed to comply with international data protection standards while respecting the cultural and legal context of the Indonesian market.

2. Data Controller Information

qr99 acts as the data controller responsible for your personal information. We determine the purposes and means of processing your personal data in connection with your use of our services. For questions about our data practices or to exercise your privacy rights, you may contact our Data Protection Officer through the contact details provided at the end of this Privacy Policy.

3. Information We Collect

qr99 collects various categories of personal information to provide, maintain, protect, and improve our services. The types of data we collect include:

3.1 Account Registration Information

When you register for a qr99 Account, we collect the following personal details:

• Full Legal Name: Your complete name as it appears on your Indonesian national identity card (KTP) or passport.
• Date of Birth: Required to verify that you meet the minimum age requirement of 21 years.
• Email Address: Used for account notifications, promotional communications, and support correspondence.
• Mobile Phone Number: Your Indonesian mobile number for account verification, two-factor authentication, and customer support contact.
• Residential Address: Your current address in Indonesia, including street, city, province, and postal code.
• Username and Password: Your chosen login credentials for accessing your Account.

3.2 Identity Verification (KYC) Documents

To comply with anti-money laundering (AML) regulations and prevent fraud, qr99 collects identity verification documents including:

• Scanned copy or photograph of your Indonesian KTP (Kartu Tanda Penduduk) showing your NIK number, photo, and personal details.
• Alternatively, a valid Indonesian passport or other government-issued identification document.
• Proof of address documents such as utility bills, bank statements, or government correspondence dated within the last 3 months.
• Selfie photographs holding your identification document for enhanced verification when requested.

3.3 Financial and Transaction Information

When you deposit or withdraw funds from your qr99 Account, we collect and process the following financial data:

• Bank Account Details: Your Indonesian bank account number, bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata), and account holder name for processing withdrawals.
• E-Wallet Information: Your registered OVO, DANA, GoPay, ShopeePay, or LinkAja account details for deposits and withdrawals.
• Transaction History: Records of all deposits, withdrawals, bets placed, winnings, losses, and account balance changes.
• Payment Metadata: Transaction timestamps, IP addresses associated with financial transactions, and device information used for payments.

3.4 Betting and Gaming Activity Data

qr99 automatically collects information about your betting behavior and gaming preferences, including:

• Sports betting history covering football (BRI Liga 1, EPL, La Liga, Champions League), basketball, badminton, and other sports.
• Casino gaming activity including slot machine play, live dealer game sessions, togel (lottery) number selections, and sabung ayam (cockfighting) betting patterns.
• Bet types, stakes, odds, outcomes, and settlement results for all wagers.
• Bonus claims, rollover progress, and promotional participation records.

3.5 Technical and Device Information

When you access qr99 through our website or mobile app, we automatically collect technical data including:

• IP Address: Your internet protocol address and approximate geographic location within Indonesia.
• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows), browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, features used, session duration, navigation paths, click-through rates, and error logs.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar technologies as detailed in Section 9 below.

3.6 Customer Support Communications

When you contact qr99 customer support via live chat, email, WhatsApp, or phone, we retain records of your communications including:

• Chat transcripts and email correspondence.
• Support ticket history and resolution notes.
• Call recordings (where permitted by law and with prior notice).
• Feedback and satisfaction survey responses.

4. How We Use Your Personal Data

qr99 processes your personal information for the following lawful purposes:

4.1 Account Management and Service Provision

• Creating and maintaining your qr99 Account.
• Processing your deposits, withdrawals, and financial transactions through BCA, BRI, BNI, Mandiri, and other Indonesian payment providers.
• Enabling you to place bets on sports events, play casino games, participate in togel draws, and access all qr99 services.
• Calculating and crediting winnings, settling bets, and managing your account balance.

4.2 Identity Verification and Fraud Prevention

• Verifying that you are at least 21 years of age and legally eligible to use qr99 services.
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance checks.
• Detecting and preventing fraudulent activity, multiple accounts, bonus abuse, and other violations of our Terms & Conditions.
• Protecting the security and integrity of the qr99 Platform against unauthorized access, hacking attempts, and cyber threats.

4.3 Marketing and Promotional Communications

• Sending you personalized bonus offers, reload promotions, and special campaigns tailored to your betting preferences.
• Notifying you about new game launches, sports betting opportunities, and platform features.
• Communicating seasonal promotions for Indonesian holidays such as Independence Day (17 August), Ramadan, Idul Fitri, Chinese New Year, and other cultural occasions.
• You may opt out of marketing communications at any time through your Account settings or by contacting customer support.

4.4 Customer Support and Communication

• Responding to your inquiries, complaints, and support requests via live chat, email, WhatsApp, or phone.
• Providing technical assistance, resolving account issues, and explaining betting rules or payment procedures.
• Sending important service notifications such as deposit confirmations, withdrawal approvals, security alerts, and policy updates.

4.5 Platform Improvement and Analytics

• Analyzing user behavior and betting patterns to improve our product offerings, optimize user experience, and enhance platform performance.
• Conducting research and statistical analysis to understand Indonesian player preferences for sports betting (e.g., BRI Liga 1 vs. EPL), casino games, and payment methods.
• Testing new features, game categories, and payment integrations before public release.

4.6 Legal Compliance and Regulatory Obligations

• Complying with applicable international gaming regulations, licensing requirements, and Indonesian financial transaction laws.
• Responding to lawful requests from government authorities, law enforcement agencies, and regulatory bodies.
• Maintaining records required for tax reporting, audit purposes, and dispute resolution.
• Enforcing our Terms & Conditions, Privacy Policy, and Responsible Gaming policies.

5. Data Sharing and Disclosure to Third Parties

qr99 does not sell your personal data to third parties. However, we may share your information with trusted service providers and partners under the following circumstances:

5.1 Payment Processors

We share necessary financial information with Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals. These payment processors operate under their own privacy policies and data protection standards.

5.2 Identity Verification Services

To conduct KYC verification, we may share your identification documents and personal details with third-party identity verification providers who specialize in document authentication and fraud detection.

5.3 Game Providers and Software Partners

When you play casino games, slots, or live dealer tables, certain anonymized gameplay data may be shared with our game studio partners to ensure fair play, calculate payouts, and maintain game integrity.

5.4 Marketing and Analytics Partners

We may share aggregated, anonymized data with marketing analytics providers to measure campaign effectiveness, understand user demographics, and optimize advertising strategies. This data does not personally identify you.

5.5 Legal and Regulatory Authorities

qr99 may disclose your personal information when required by law, court order, or government regulation, including but not limited to:

• Responding to subpoenas, search warrants, or official legal requests from Indonesian or international authorities.
• Reporting suspicious transactions to financial intelligence units as required by anti-money laundering laws.
• Cooperating with law enforcement investigations into fraud, illegal gambling, or other criminal activities.

5.6 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such change via email and given the opportunity to delete your Account if you do not consent to the transfer.

6. Data Security Measures

qr99 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, loss, misuse, alteration, or destruction:

Despite our robust security measures, no system is completely immune to attacks. You also have a responsibility to protect your Account by using strong passwords, keeping your login credentials confidential, and logging out after each session on shared devices.

7. Data Retention Periods

qr99 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and business requirements:

Data Category	Retention Period	Reason
Account Information	Duration of Account + 7 years	Legal compliance, dispute resolution, tax records
KYC Documents	5 years after Account closure	AML/KYC regulatory requirements
Financial Transactions	7 years	Accounting standards, tax law compliance
Betting History	5 years	Dispute resolution, regulatory audits
Customer Support Records	3 years	Service quality improvement, training
Marketing Data	Until opt-out or Account closure	Consent-based processing

After the retention period expires, we will securely delete or anonymize your personal data in accordance with data protection best practices. You may request early deletion of your data by contacting our Data Protection Officer, subject to our legal retention obligations.

8. Your Privacy Rights

As a qr99 User, you have the following rights regarding your personal data:

8.1 Right of Access

You may request a copy of all personal data we hold about you. This includes your account details, transaction history, betting records, and KYC documents. We will provide this information in a structured, machine-readable format within 30 days of your request.

8.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information directly through your Account settings, or contact customer support for assistance with KYC document updates.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw your consent. However, we may retain certain data if required by law or for legitimate business purposes such as preventing fraud.

8.4 Right to Object to Processing

You have the right to object to the processing of your personal data for marketing purposes. You may opt out of promotional emails, SMS messages, and push notifications at any time through your Account preferences or by clicking "unsubscribe" in marketing communications.

8.5 Right to Data Portability

Upon request, we will provide your personal data in a commonly used electronic format, allowing you to transfer it to another service provider if you choose to do so.

8.6 Right to Withdraw Consent

Where we process your data based on consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at: [email protected]

9. Cookies and Tracking Technologies

qr99 uses cookies, web beacons, and similar tracking technologies to enhance your user experience, analyze Platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us remember your preferences and improve site functionality.

9.1 Types of Cookies We Use

• Essential Cookies: Required for basic Platform functionality such as user authentication, session management, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous data about how you use qr99, including pages visited, time spent, and navigation patterns. This helps us optimize Platform performance.
• Functional Cookies: Remember your preferences such as language settings, preferred odds format, and display options for a more personalized experience.
• Marketing Cookies: Track your browsing activity to deliver targeted advertisements and promotional offers relevant to your interests.

9.2 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies, delete existing cookies, or receive alerts before cookies are stored. However, disabling essential cookies may prevent you from using certain qr99 features.

10. Children's Privacy Protection

Parents and guardians who believe their child may have provided personal information to qr99 should contact us immediately so we can take appropriate action.

11. Changes to This Privacy Policy

qr99 reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. We will notify you of significant changes by posting a notice on our website, sending an email to your registered address, or displaying an in-app notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of qr99 services after any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer:

We are committed to responding to all privacy inquiries within 7 business days. For urgent data protection matters, please mark your communication as "URGENT - PRIVACY REQUEST" for priority handling.