qq212 Privacy
Policy

1 Introduction

This Privacy Policy (the "Policy") describes how qq212 ("qq212", "we", "us", or "our"), the operator of the online betting and gaming platform at https://qq212.cam (the "Platform"), collects, processes, stores, and protects the personal data of its users.

qq212 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy applies to all users of the Platform, including registered account holders, visitors who browse without registering, and individuals who contact qq212 through any support channel.

By accessing the Platform or creating an Account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

This Policy is supplemented by qq212's Terms & Conditions, which govern the contractual relationship between you and qq212. In the event of a conflict between this Policy and the Terms & Conditions on a privacy-specific matter, this Policy shall prevail.

2 Definitions

For the purposes of this Policy, the following terms have the meanings assigned below:

• "Account" — a registered user account on the qq212 Platform.
• "Controller" — the entity that determines the purposes and means of processing personal data; in this context, qq212.
• "Cookie" — a small text file placed on a user's device by a website to store session or preference information.
• "Data Subject" — the identified or identifiable natural person to whom personal data relates; in this context, you.
• "KYC" — Know Your Customer: the identity and age verification process mandatory for all qq212 users prior to their first withdrawal.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, national ID number, date of birth, email address, phone number, payment account details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Processor" — a third party that processes personal data on behalf of qq212 under written instruction (e.g., KYC verification partners, payment gateways).
• "Sensitive Data" — a subset of personal data that warrants heightened protection, including government-issued identification numbers, biometric data, and financial account details.

3 Data We Collect

qq212 collects personal data through three primary channels: information you provide directly, information generated through your use of the Platform, and information received from third-party partners. The categories of data collected are set out in the table below.

qq212 does not intentionally collect data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion request.

4 How We Use Your Data

qq212 uses the personal data described in Clause 3 for the following purposes:

• Account creation and management: to register your Account, authenticate your identity on login, and maintain accurate Account records.
• Payment processing: to execute deposits and withdrawals via Indonesian local banks and e-wallets, verify that payment accounts are registered in your name, and maintain a transaction audit trail.
• KYC and fraud prevention: to verify that you meet the minimum age requirement of 21 years, to confirm your identity before processing withdrawals, and to detect and investigate suspected fraud, money laundering, or bonus abuse.
• Platform operation and improvement: to deliver, maintain, and improve the Platform's features, performance, and stability; to diagnose and fix technical issues; and to personalize your experience based on game preferences and platform usage patterns.
• Responsible gaming compliance: to enforce deposit limits, session time-outs, self-exclusion orders, and other responsible gaming tools you have activated, and to identify patterns of behavior that may indicate problem gambling.
• Customer support: to respond to your support requests, resolve disputes, investigate complaints, and maintain records of interactions for training and quality-assurance purposes.
• Promotions and marketing communications: to notify you of bonuses, promotions, and platform updates — only where you have provided explicit consent to receive such communications and only through channels you have authorized. You may withdraw this consent at any time by contacting support.
• Legal and regulatory compliance: to meet applicable anti-money laundering (AML) obligations, to respond to lawful requests from competent authorities, and to defend qq212 in legal proceedings.
• Security monitoring: to monitor Platform traffic for unauthorized access, DDoS attacks, credential stuffing, and other security threats.

5 Legal Basis for Processing

qq212 processes your personal data only where a valid legal basis exists. The applicable bases for each processing activity are described below:

• Contract performance: Processing of registration data, financial data, KYC data, and transaction history is necessary to fulfill qq212's obligations under the Terms & Conditions — for example, to operate your Account, execute payments, and settle bets.
• Legal obligation: Processing for AML compliance, fraud reporting, age verification, and retention of financial records is required by applicable international regulations governing online gambling and financial services.
• Legitimate interests: Processing of technical and device data for security monitoring, fraud detection, platform stability, and service analytics is based on qq212's legitimate interest in operating a secure and reliable platform, provided such processing does not override your fundamental rights and freedoms.
• Consent: Processing of your data for direct marketing communications (bonus offers, promotions, newsletters) is based solely on your explicit opt-in consent. This consent is fully revocable at any time.
• Vital interests: In exceptional circumstances involving a risk to your health or safety — such as a disclosed gambling addiction — qq212 may process relevant data to protect your vital interests, including to enforce a self-exclusion order.

6 Data Sharing & Disclosure

qq212 does not sell, rent, or trade personal data. Disclosure of personal data to third parties occurs only in the circumstances described below, and always subject to contractual data-protection obligations or legal requirements:

• KYC verification partners: Identity documents and selfie photographs are shared with certified third-party KYC providers solely for the purpose of identity and age verification. These partners are contractually prohibited from using KYC data for any other purpose.
• Payment processors and financial institutions: Bank account details and transaction data are shared with Indonesian payment gateways, local banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) strictly to process your deposits and withdrawals.
• Game software providers: Session identifiers and game-play data may be shared with licensed game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) to deliver their games and maintain game integrity. These providers are subject to their own certified data-protection standards.
• Fraud prevention and security vendors: Technical and device data may be shared with third-party fraud detection services to identify and prevent unauthorized access and financial crime.
• Legal and regulatory authorities: qq212 will disclose personal data to competent authorities where required by a valid legal order, court judgment, or regulatory requirement. Where legally permissible, qq212 will notify you of such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of qq212's assets, your personal data may be transferred to the successor entity, subject to equivalent data-protection commitments.

7 Cookies & Tracking Technologies

qq212 uses cookies and similar tracking technologies to maintain session state, remember your preferences, measure Platform performance, and support fraud detection. The types of cookies used are described below:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without breaking core Platform functionality.
• Functional cookies: Store user preferences such as language settings, display preferences, and last-visited game categories. These enhance your experience but are not essential to Platform operation.
• Analytics cookies: Collect aggregated, anonymized data about how users interact with the Platform — including page views, session duration, navigation paths, and error events. This data is used solely to improve Platform performance and user experience.
• Security and fraud-detection cookies: Track device fingerprints and session anomalies to identify suspicious login attempts, credential reuse, and automated bot activity. These cookies are necessary for Platform security and cannot be disabled.

qq212 does not use third-party advertising cookies or cross-site tracking pixels. No cookie data is shared with advertising networks or social media platforms.

Most browsers allow you to manage cookie preferences through their settings. Disabling strictly necessary or security cookies may prevent access to some or all Platform features. Functional and analytics cookies can be disabled without affecting core Platform access.

8 Data Retention

qq212 retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable legal obligations. The retention periods for each data category are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be linked to an identifiable individual.

9 Your Rights

As a data subject, you hold the following rights with respect to your personal data held by qq212. To exercise any of these rights, contact our support team using the details in Clause 14. Requests will be acknowledged within 5 business days and fulfilled within 30 calendar days, subject to identity verification.

• Right of access: You may request a copy of all personal data qq212 holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Minor corrections (e.g., email address, phone number) can be made directly through your Account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. Note that certain data categories cannot be deleted during legally mandated retention periods (see Clause 8). Where full deletion is not immediately possible, qq212 will restrict processing of the data pending expiry of the retention period.
• Right to restriction of processing: You may request that qq212 temporarily restrict processing of your personal data — for example, while the accuracy of data is being contested or a legitimate-interest objection is being assessed.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to qq212, for the purpose of transferring it to another service provider.
• Right to object: You may object to processing based on qq212's legitimate interests (including profiling for fraud detection) where you believe your fundamental rights override those interests. You also hold an unconditional right to object to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right not to be subject to automated decisions: You have the right to request human review of any significant decision made about your Account by an automated system.

10 Security Measures

qq212 implements a comprehensive set of technical and organizational security controls to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• 256-bit TLS/SSL encryption on all data transmitted between users and qq212's servers;
• AES-256 encryption at rest for all sensitive data stored in qq212's databases, including KYC documents and financial records;
• Password hashing using a modern salted hashing algorithm — qq212 never stores plaintext passwords;
• Role-based access controls (RBAC) limiting access to personal data to authorized staff members on a strict need-to-know basis;
• Multi-factor authentication (MFA) for all internal administrative systems;
• Continuous security monitoring with automated alerts for anomalous access patterns, failed login attempts, and data exfiltration indicators;
• Regular penetration testing and third-party security audits conducted at least annually;
• Vendor security assessments for all third-party processors with access to personal data.

In the event of a personal data breach that poses a risk to user rights and freedoms, qq212 will notify affected users without undue delay and, where required, report the breach to the relevant supervisory authority within 72 hours of becoming aware of it.

11 International Data Transfers

qq212 operates infrastructure and engages service providers located in multiple countries. As a result, your personal data may be transferred to, stored in, and processed in jurisdictions outside Indonesia. These jurisdictions may have data protection laws that differ from those applicable in your home location.

Where personal data is transferred internationally, qq212 implements appropriate safeguards to ensure that the data receives a level of protection equivalent to that described in this Policy. Such safeguards include:

• Standard contractual clauses (SCCs) or equivalent data transfer agreements with all processors located outside the originating jurisdiction;
• Transfers to processors in jurisdictions recognized as providing an adequate level of data protection;
• Binding corporate rules where transfers occur within a corporate group.

KYC data processed by third-party verification partners is subject to the same contractual restrictions described in Clause 6 regardless of the geographic location of those partners.

12 Children's Privacy

qq212 is an adults-only platform. The Platform is strictly prohibited for use by persons under the age of 21. qq212 does not knowingly collect, process, or store personal data relating to individuals under the age of 21.

If qq212 becomes aware that personal data has been collected from a person under the age of 21, that data will be immediately deleted and the associated Account will be suspended pending investigation. Any funds held in such an Account will be handled in accordance with applicable regulations.

Parents and guardians who believe that a minor has registered an Account on qq212 should contact our support team immediately at [email protected]. Such reports are treated as urgent and actioned within 24 hours.

13 Changes to This Policy

qq212 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. The "Last Updated" date at the top of this page indicates when the most recent revision took effect.

Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — qq212 will provide at least 14 days' advance notice by posting a prominent notice on the Platform and, where practicable, notifying registered users via their registered email address or in-Platform notification.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you disagree with a material change, you may request Account closure and withdrawal of your remaining balance before the revised Policy takes effect.

We encourage you to review this Policy periodically. Prior versions of this Policy are available on request by contacting our support team.

14 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data qq212 holds about you, please reach out through any of the following channels. Our team includes Indonesian-speaking agents available around the clock.

• Live Chat: Available 24/7 directly on the Platform — average response time under 2 minutes
• WhatsApp: +62 812 0000 2121 — average response time under 10 minutes
• Email: [email protected] — average response time under 6 hours

When submitting a data rights request (Clause 9), please include your registered email address, a brief description of your request, and the specific right you wish to exercise. For requests involving sensitive Account data, you may be asked to confirm your identity before the request is processed.