Privacy Policy

1. Introduction

Welcome to the qr88 Privacy Policy. This document outlines our commitment to protecting your personal information and explains our data handling practices in clear, transparent terms. qr88 operates as an international online gaming platform serving players in Indonesia and other jurisdictions where our services are legally accessible.

We understand that trust is fundamental to our relationship with you. When you use qr88 services, you entrust us with sensitive personal and financial information. We take this responsibility seriously and have implemented comprehensive policies, procedures, and technical safeguards to protect your data from unauthorized access, misuse, or disclosure.

This Privacy Policy applies to all qr88 services including our website, mobile applications, customer support channels, and any other platforms through which we deliver gaming services. By creating an account or using qr88, you consent to the data practices described in this policy. If you do not agree with our privacy practices, please do not use our services.

2. Information We Collect

To provide a secure, personalized, and compliant gaming experience, qr88 collects several categories of information about our users. The types and volume of data collected depend on how you interact with our platform.

2.1 Information You Provide Directly

When you register for a qr88 account, you voluntarily provide the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (KTP number for Indonesian residents)
• Contact Information: Email address, phone number, residential address including street, city, postal code, and province
• Account Credentials: Username, password, security questions and answers
• Financial Information: Bank account details (account number, bank name, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay account identifiers), payment card details if applicable
• Verification Documents: Copies of government-issued ID (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs for identity verification
• Communication Records: Content of messages, emails, and live chat conversations with qr88 customer support

2.2 Information Collected Automatically

When you access qr88 services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, device ID)
• Network Information: IP address, internet service provider, approximate geolocation based on IP address
• Usage Data: Pages visited, features used, time spent on platform, click patterns, navigation paths, game preferences, betting patterns
• Transaction History: Deposits, withdrawals, wagers placed, game outcomes, bonus claims, account balance changes
• Technical Logs: Error logs, performance data, system diagnostics

2.3 Information from Third Parties

In limited circumstances, qr88 may receive information about you from external sources:

• Payment Processors: Transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from third-party verification partners
• Affiliate Partners: Referral source information if you joined qr88 through a marketing partner

3. How We Use Your Information

qr88 processes your personal information for specific, legitimate purposes related to providing and improving our gaming services. We use your data in the following ways:

3.1 Service Delivery and Account Management

• Create, maintain, and authenticate your qr88 account
• Process deposits, withdrawals, and other financial transactions
• Enable gameplay across casino games, sports betting, and lottery products
• Track account balance, betting history, and loyalty program status
• Provide customer support and respond to your inquiries
• Send transactional communications (deposit confirmations, withdrawal notifications, account updates)

3.2 Compliance and Security

• Verify your identity and age to ensure you meet eligibility requirements (21+ for Indonesian players)
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Detect, prevent, and investigate fraud, cheating, collusion, and other prohibited activities
• Monitor for responsible gaming concerns and enforce self-exclusion requests
• Maintain platform security and protect against unauthorized access, cyberattacks, and data breaches
• Respond to legal requests, court orders, and regulatory inquiries

3.3 Platform Improvement and Personalization

• Analyze usage patterns to improve platform performance, stability, and user experience
• Personalize game recommendations based on your preferences and play history
• Test new features, games, and promotional offers through A/B testing
• Generate anonymized analytics and aggregate statistics (never identifying individual players)

3.4 Marketing Communications (With Consent)

• Send promotional emails about bonuses, special offers, and new game launches (you can opt out at any time)
• Provide tailored bonus offers based on your gaming activity and VIP tier
• Notify you about tournaments, competitions, and special events

4. Data Sharing and Disclosure

qr88 does not sell or rent your personal information to third parties. We share your data only in specific circumstances necessary to operate our business and comply with legal obligations:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to support qr88 operations. These providers access personal information only as necessary to perform their functions and are contractually obligated to maintain confidentiality:

• Payment Processors: Indonesian banks and e-wallet providers to process deposits and withdrawals
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other suppliers who deliver games through our platform
• Identity Verification Services: Third-party KYC providers who validate your age and identity
• Cloud Hosting Providers: Infrastructure partners who host our servers and databases
• Customer Support Tools: Platforms used to deliver live chat, email, and ticketing services
• Analytics Providers: Services that help us understand platform usage (data is anonymized wherever possible)

4.2 Legal Obligations

qr88 may disclose your information when required by law or in good faith belief that such disclosure is necessary to:

• Comply with legal process, court orders, or government requests
• Enforce our Terms and Conditions and investigate violations
• Protect the rights, property, or safety of qr88, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Respond to claims that content violates third-party rights

4.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our website of any such change in ownership or control of your personal data.

5. Data Security Measures

qr88 employs industry-leading security technologies and best practices to protect your personal and financial information from unauthorized access, alteration, disclosure, or destruction. Our comprehensive security framework includes:

• Encryption: All data transmitted between your device and qr88 servers is protected with 256-bit SSL/TLS encryption. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Strict role-based access controls ensure that only authorized qr88 personnel can access personal data, and only to the extent necessary for their job functions. All access is logged and audited.
• Secure Infrastructure: Our servers are hosted in secure, certified data centers with physical security measures including biometric access controls, 24/7 surveillance, and environmental monitoring.
• Firewall Protection: Multi-layered firewall systems protect against unauthorized network access and distributed denial-of-service (DDoS) attacks.
• Regular Security Audits: Independent third-party security firms conduct regular penetration testing and vulnerability assessments of our systems.
• Employee Training: All qr88 staff undergo mandatory data protection training and sign confidentiality agreements.
• Incident Response: We maintain a formal incident response plan to quickly detect, contain, and remediate any security breaches.

Despite these measures, no method of internet transmission or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You also play a role in protecting your data by maintaining strong, unique passwords and not sharing your account credentials with others.

6. Cookies and Tracking Technologies

qr88 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Understanding these technologies helps you make informed choices about your privacy.

6.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. They allow websites to remember your preferences, recognize returning visitors, and collect usage data. qr88 uses several types of cookies:

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic platform functionality including login, session management, and security. These cannot be disabled.	Session / 1 year
Functional Cookies	Remember your preferences such as language, currency, and display settings to personalize your experience.	1 year
Analytics Cookies	Collect anonymized usage data to help us understand how visitors interact with qr88 and identify areas for improvement.	2 years
Marketing Cookies	Track your activity across our platform to deliver relevant promotional content and measure campaign effectiveness.	90 days

6.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, though disabling essential cookies may impair platform functionality. Consult your browser's help section for specific instructions on managing cookies.

7. Your Privacy Rights

qr88 respects your rights regarding your personal data. Depending on your jurisdiction, you may have the following rights:

• Right to Access: Request a copy of the personal information qr88 holds about you, including details about how we use and share your data.
• Right to Correction: Request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings.
• Right to Deletion: Request deletion of your personal data, subject to legal retention requirements and ongoing investigations. Account closure results in data deletion per our retention schedule.
• Right to Restriction: Request that we limit how we process your data in certain circumstances, such as while disputing accuracy.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format to transfer to another service provider.
• Right to Object: Object to processing of your data for direct marketing purposes. You can opt out of marketing emails through unsubscribe links or account settings.
• Right to Withdraw Consent: Withdraw consent for data processing activities that require consent, though this may affect service availability.

To exercise any of these rights, contact our Data Protection Officer through the channels listed in Section 12. We will respond to verified requests within 30 days. Note that certain rights may be limited by legal obligations or legitimate business interests.

8. Data Retention and Deletion

qr88 retains personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our retention periods vary by data type:

• Account Information: Retained for the duration of your active account plus 7 years after closure for regulatory compliance and dispute resolution.
• Transaction Records: Financial transaction history is retained for 10 years to comply with anti-money laundering regulations.
• Identity Verification Documents: Retained for 7 years after account closure as required by KYC regulations.
• Customer Support Communications: Retained for 3 years for quality assurance and training purposes.
• Marketing Communications: Retained until you opt out or 2 years after last engagement, whichever comes first.
• Technical Logs: Server logs and diagnostic data are typically retained for 90 days unless needed for security investigations.

After the applicable retention period expires, personal data is securely deleted or anonymized beyond recognition. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

9. International Data Transfers

qr88 operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. These transfers are necessary to deliver our services and are governed by appropriate safeguards:

• We ensure that all international data transfers comply with applicable data protection laws
• Data recipients are contractually obligated to maintain equivalent levels of data protection
• We implement technical and organizational measures to protect data during transfer and storage
• Where required, we use standard contractual clauses or other legally approved transfer mechanisms

By using qr88, you consent to the transfer of your information to countries that may have different data protection laws than Indonesia. We take all reasonable steps to ensure your data receives adequate protection regardless of location.

10. Children's Privacy

qr88 services are intended exclusively for adults aged 21 and over. We do not knowingly collect personal information from individuals under the age of 21. Our registration process includes age verification checks, and we may request proof of age at any time.

If we discover that we have inadvertently collected personal information from a minor, we will immediately delete that information and close the associated account. Parents or guardians who believe their child has provided information to qr88 should contact us immediately so we can take corrective action.

We encourage parents to monitor their children's internet usage and to help enforce our age restrictions by preventing minors from accessing gambling websites.

11. Changes to This Policy

qr88 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through:

• Email notification to your registered email address
• Prominent notice on the qr88 website and mobile applications
• In-platform notifications when you next log in

The "Last Updated" date at the top of this policy indicates when changes were last made. We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information. Continued use of qr88 services after changes become effective constitutes acceptance of the updated policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or qr88's data practices, please contact us through the following channels:

• Email: [email protected] (plain text only, not a clickable link)
• Data Protection Officer: Available through customer support for privacy-specific inquiries
• Live Chat: 24/7 support available through your account dashboard
• Customer Support: Indonesian-speaking team available around the clock

We aim to respond to all privacy inquiries within 48 hours and resolve all requests within 30 days. For urgent security concerns, please mark your communication as "URGENT - SECURITY ISSUE" for priority handling.