Privacy Policy — qr777

qr777 ("we", "us", "our") operates the online sports betting and casino platform at qr777.lat (the "Platform"), serving Members primarily based in Indonesia. We are committed to handling the personal data of our Members and site visitors with the utmost transparency, integrity, and care.

This Privacy Policy describes the categories of personal data we collect, the purposes for which that data is processed, the conditions under which it may be shared with third parties, the security measures we apply to protect it, and the rights you have in relation to your own personal data.

By registering a Member Account on qr777 or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Privacy Policy, you must discontinue use of the Platform and may request Account closure by contacting [email protected].

This Policy applies to all individuals who access or use the qr777 Platform, including registered Members, prospective Members who browse the site without completing registration, and any individual who contacts qr777 through our customer support channels. You must be at least 21 years of age to register an Account on qr777.

qr777 collects personal data through several channels: directly from you during registration and subsequent use of the Platform, automatically through your interaction with the site, and in limited circumstances from third-party verification partners. The categories of data we collect are set out below.

qr777 processes your personal data only for specific, legitimate purposes directly connected to the operation of the Platform and the delivery of our services to you as a Member. We do not process your data in ways that are incompatible with the purposes set out below.

• Account Management: To create, administer, and maintain your qr777 Member Account, verify your identity at registration and through ongoing KYC checks, and process login authentication.
• Service Delivery: To process your bets and wagers on sports markets (including BRI Liga 1, EPL, Champions League, and other leagues), casino games, and live dealer tables; to calculate and credit winnings; and to record your transaction history.
• Payment Processing: To process deposits from and withdrawals to your nominated Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) in IDR.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes; to fulfill our obligations under applicable anti-money laundering (AML) regulations; and to report suspicious activity to relevant authorities where legally required.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling behavior; to enforce deposit limits, cooling-off periods, and self-exclusion requests; and to deliver responsible gaming notifications in accordance with our Responsible Gaming policy.
• Customer Support: To respond to your support enquiries, complaints, and dispute resolution requests submitted via email or live chat.
• Marketing & Promotions: Where you have opted in, to send you information about qr777 promotions, bonuses, seasonal offers (Ramadhan, Idul Fitri, Indonesian Independence Day campaigns), and Platform updates. You may opt out at any time.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve the design, performance, and content of the qr777 Platform.
• Legal Compliance: To comply with any legal obligation, court order, regulatory requirement, or law enforcement request to which qr777 is subject.

qr777 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and qr777 — specifically, the Terms & Conditions you accepted at registration. This covers Account creation, bet processing, and payment handling.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including AML legislation, identity verification requirements, and lawful requests from regulatory and law enforcement authorities.
• Legitimate Interests: Processing is necessary for qr777's legitimate business interests, including fraud detection, Platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent — primarily for marketing communications — you may withdraw that consent at any time by updating your Account preferences or contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

qr777 uses cookies and similar tracking technologies (local storage, session tokens) on the Platform to ensure correct functioning, protect account security, and gather aggregated analytics. The types of cookies we use are described in the table below.

qr777 does not deploy third-party advertising or retargeting cookies. You may configure your browser to block or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in to your Account and using the Platform's core features.

qr777 does not sell your personal data to any third party. We share personal data only where strictly necessary and only with the categories of recipient described below, all of whom are bound by confidentiality obligations and data processing agreements consistent with the protections in this Policy.

• Payment Service Providers: Your financial data is shared with the relevant Indonesian banks and e-wallet operators (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit and withdrawal transactions in IDR.
• Identity Verification Partners: Your KYC documents and identity data may be shared with regulated third-party identity verification providers that assist qr777 in confirming the authenticity of documents and cross-checking identity records.
• Game Software Providers: Certain technical data (session tokens, bet IDs) is shared with our licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) to deliver their game content on the Platform. These providers do not receive your identity or financial data.
• Fraud & AML Screening Services: Transaction data may be processed by third-party AML and fraud-screening systems to identify suspicious activity. These services operate under strict data processing agreements and do not retain your data beyond the screening process.
• Legal & Regulatory Authorities: qr777 will disclose personal data to law enforcement, regulatory bodies, or judicial authorities where required to do so by applicable law, a valid court order, or a lawful regulatory demand. We will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of qr777's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

qr777's primary data processing infrastructure is located in the jurisdiction where it holds its operating licence. Some of our third-party service providers — in particular, cloud hosting providers, analytics platforms, and game software studios — may process data in jurisdictions outside Indonesia. Where personal data is transferred internationally, qr777 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses or equivalent data transfer mechanisms that impose the same level of data protection as applies to your data processed within qr777's primary jurisdiction.
• Binding data processing agreements with all third-party processors that specify the permissible purposes of processing, security requirements, and restrictions on onward transfer.
• Technical safeguards including encryption in transit (TLS 1.2 or higher) and at rest for all personally identifiable data stored on third-party infrastructure.

You may request information about the specific safeguards applicable to any particular international transfer by contacting [email protected].

qr777 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected or as required by applicable law. The retention periods set out below represent the standard retention schedule; longer retention may apply where required by law or where data is needed to defend a legal claim.

Upon expiry of the applicable retention period, qr777 will securely delete or irreversibly anonymize the relevant personal data. Anonymized, aggregated data that can no longer identify any individual may be retained indefinitely for statistical and business-intelligence purposes.

As a Member of qr777 or a visitor to the Platform, you have a number of rights in relation to the personal data we hold about you. You may exercise any of these rights by contacting our Data Protection team at [email protected]. We will respond to all valid requests within 30 days; where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.

qr777 is strictly an adults-only platform. You must be at least 21 years of age to register a Member Account or to use the Platform in any capacity. We do not knowingly collect personal data from any individual under the age of 21.

If qr777 discovers or is notified that personal data has been collected from an individual under 21, we will immediately close the relevant Account, delete all associated personal data, and reverse any transactions associated with that Account. If you are a parent or guardian and believe that a person under 21 in your care has registered an Account on qr777, please contact us immediately at [email protected].

qr777 implements a comprehensive, layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to, the following:

• Transport Encryption: All data transmitted between your device and qr777's servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock indicator in your browser confirms this encryption is active.
• Password Hashing: Member passwords are stored exclusively as salted cryptographic hashes using a modern hashing algorithm. qr777 employees cannot view your password in plaintext under any circumstances.
• Access Controls: Access to systems containing personal data is restricted to authorized personnel only, enforced through role-based access controls, multi-factor authentication for internal systems, and comprehensive access-logging and audit trails.
• KYC Document Encryption: Identity documents submitted for KYC verification are stored in an AES-256 encrypted document management system with restricted access limited to compliance personnel.
• Intrusion Detection: qr777 operates continuous network monitoring and intrusion detection systems that alert our security team to anomalous activity in real time.
• Penetration Testing: The Platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, qr777 will notify affected Members and relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable data protection law.

The qr777 Platform does not contain links to external third-party websites for commercial or promotional purposes. Where game content provided by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, or Spribe) is loaded within the Platform, those games are delivered via a secured integration layer and the game studios do not independently set cookies or collect personal data directly from your device.

qr777 accepts no responsibility for the privacy practices of any third-party platform or service that you access independently outside of the qr777 Platform environment. This Policy applies solely to data collected by qr777 through the Platform.

qr777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the Platform. When we make material changes to this Policy — such as changes to the categories of data we collect, the purposes for which we process it, or the third parties with whom it is shared — we will provide at least 7 days' advance notice by posting the updated Policy on this page and, where practicable, by notifying registered Members via their registered email address.

The "Last updated" date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following the effective date of an updated Privacy Policy constitutes your acceptance of that updated Policy. If you do not agree with any material changes, you must stop using the Platform and may request Account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or qr777's handling of your personal data, our Data Protection team is available 24 hours a day, 7 days a week. Native Indonesian-speaking support agents are available across all contact channels.

For questions about responsible gaming or to request self-exclusion, please visit our Responsible Gaming page. For general Platform questions, our FAQ page addresses the most common topics. Full terms governing your use of the Platform are available on our Terms & Conditions page.