Privacy Policy — qqnuaa

qqnuaa ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the qqnuaa platform. This Privacy Policy sets out in clear, transparent terms how we collect your personal information, the purposes for which we use it, how long we retain it, and the rights available to you.

This policy applies to all members, prospective members, and visitors to the qqnuaa website. It covers personal data collected through account registration, identity verification (KYC), deposits and withdrawals, gameplay activity, communications with our support team, and your general browsing of the platform.

qqnuaa serves Indonesian players and is designed with the expectations of our Indonesian member base in mind. We process payment data associated with Indonesian banking and e-wallet providers — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — and we handle this financial data with the highest standards of security and discretion.

If you have questions about this policy or wish to exercise any of your data rights, please contact our Data Protection team at [email protected] at any time.

qqnuaa collects personal data across several categories, depending on your level of interaction with the platform. The table below summarizes the types of data we collect and the circumstances under which we collect them:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related disclosures are made voluntarily in the context of a responsible gaming self-exclusion request.

qqnuaa uses your personal data exclusively for the purposes listed below. We do not use your data for any purpose incompatible with the original reason for which it was collected:

• Account Management: Creating, maintaining, and securing your member account, including password resets and login authentication.
• Identity Verification (KYC): Confirming your identity, age (21+), and residency status in Indonesia to comply with our licensing obligations and anti-fraud requirements.
• Transaction Processing: Executing deposits and withdrawals via your nominated Indonesian bank account or e-wallet, and maintaining an accurate transaction history for your records.
• Fraud Prevention and AML Compliance: Monitoring account activity for signs of money laundering, bonus abuse, multi-accounting, and other fraudulent behaviors as required by our international gaming license conditions.
• Customer Support: Responding to your inquiries, resolving disputes, and processing responsible gaming requests such as deposit limit changes and self-exclusion applications.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve game offerings, interface design, payment flows, and the overall user experience.
• Responsible Gaming Enforcement: Monitoring gameplay patterns to identify members who may be exhibiting signs of problem gambling, and proactively offering support resources where appropriate.
• Marketing Communications: Sending bonus offers, promotions, and platform updates to members who have opted in to receive such communications. You may opt out at any time by updating your notification preferences in account settings or by contacting support.
• Legal Compliance: Fulfilling any obligations imposed by applicable laws, regulations, court orders, or regulatory authorities.

Every instance of personal data processing at qqnuaa is grounded in one of the following recognized legal bases:

• Contractual Necessity: Processing required to fulfill the contract between you and qqnuaa — including account creation, payment processing, KYC verification, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, tax reporting requirements, and gaming license conditions.
• Legitimate Interests: Processing necessary to pursue qqnuaa's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — provided those interests are not overridden by your fundamental data rights.
• Consent: Processing carried out with your explicit prior consent — specifically, sending you direct marketing communications. You may withdraw this consent at any time without affecting any other aspect of your account.

Where we rely on legitimate interests as our legal basis, we conduct a balancing test to ensure that our interests do not unfairly prejudice your privacy rights. Records of these assessments are maintained by our Data Protection team.

qqnuaa does not sell, rent, or trade your personal data to any third party for commercial gain. Your data is shared only in the following controlled circumstances:

• Payment Processors: Indonesian banking institutions (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet operators (OVO, DA NA, GoPay, ShopeePay, LinkAja) receive only the minimum financial data required to process your deposit or withdrawal transaction. These providers operate under their own privacy frameworks and are bound by Indonesian financial regulations.
• KYC and Identity Verification Providers: Licensed third-party identity verification services receive your submitted KYC documents solely for the purpose of confirming your identity and age. These providers are contractually prohibited from using your data for any other purpose.
• Game Software Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymized session data for the purpose of game performance monitoring. No personally identifiable information is shared with game studios.
• Fraud Prevention and AML Services: Specialist compliance platforms receive transaction metadata and risk signals to assist in the detection of money laundering, multi-accounting, and bonus abuse. All such providers operate under data processing agreements with qqnuaa.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulators, or courts where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of qqnuaa, our members, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of qqnuaa's business, your personal data may be transferred to the acquiring entity, subject to the same protections described in this policy. You will be notified of any such transfer in advance.

qqnuaa uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyze how the platform is used so we can continually improve the member experience. We use three categories of cookies:

• Essential Cookies: These are strictly necessary for the platform to operate. They manage your login session, maintain your bet slip state, and enable secure payment flows. You cannot disable essential cookies without impairing core platform functionality.
• Functional Cookies: These remember your preferences — such as your preferred language, notification settings, and last-viewed game category — so you do not have to reconfigure them on each visit. These are activated by default but can be disabled in your browser settings.
• Analytical Cookies: These collect anonymized data about how members navigate the platform — including which pages are visited most, where members drop off in registration flows, and which games generate the most engagement. This data is used exclusively for internal product improvement purposes and is never shared with third-party analytics providers in identifiable form.

qqnuaa does not use third-party advertising cookies, retargeting pixels, or cross-site tracking scripts. You will not encounter qqnuaa-related retargeted advertisements on other websites as a result of visiting our platform.

You may manage your cookie preferences at any time through your browser's privacy or settings panel. Most modern browsers allow you to block or delete cookies on a per-site or global basis. Please be aware that disabling essential cookies will prevent you from logging into your account.

qqnuaa implements a comprehensive, layered security architecture to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Our key security measures include:

• Transport Encryption: All data transmitted between your browser or app and our servers is encrypted using TLS 1.3 with 256-bit AES cipher suites. Our SSL certificates are issued by a globally trusted Certificate Authority and are renewed on a strict schedule.
• Data-at-Rest Encryption: All personal data stored on qqnuaa servers — including identity documents, financial records, and gameplay history — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal systems enforce role-based access controls (RBAC), and all staff with data access undergo background screening and receive regular privacy and security training.
• Two-Factor Authentication: Member accounts support two-factor authentication (2FA) for login and high-value withdrawal requests. We strongly recommend that all members enable 2FA in their account security settings.
• Intrusion Detection and Monitoring: Our infrastructure is continuously monitored by automated intrusion detection systems. Suspicious activity triggers immediate alerts to our security operations team, who respond around the clock.
• Penetration Testing: qqnuaa commissions independent third-party penetration testing of our platform infrastructure on a regular basis. Identified vulnerabilities are remediated within defined response-time SLAs.
• Data Breach Response: In the event of a data breach affecting your personal data, qqnuaa will notify affected members without undue delay and take immediate steps to contain and remediate the incident.

qqnuaa retains your personal data only for as long as is necessary to fulfill the purposes described in this policy, or for as long as required by applicable laws and regulations. The following retention schedule applies:

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymized. Anonymized data (which can no longer be linked to any individual) may be retained indefinitely for statistical and business intelligence purposes.

As a member of the qqnuaa platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected]. We will respond to all verified requests within 30 calendar days.

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is being used. This is provided free of charge in a commonly used electronic format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For identity data, correction may require submission of updated KYC documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where we no longer have a lawful basis to retain it. Please note that data subject to mandatory AML or licensing retention requirements cannot be deleted prior to the expiry of those statutory periods.
• Right to Restriction of Processing: In certain circumstances — for example, where you have contested the accuracy of your data or objected to its processing — you may request that we restrict processing while the matter is resolved.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format (CSV or JSON) for transfer to another service provider, where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. Objections will be assessed on a case-by-case basis; we may continue processing if we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The qqnuaa platform is strictly intended for adults aged 21 and over. We do not knowingly collect, process, or store personal data from any individual under the age of 21, and we do not permit persons under 21 to register for or use the platform.

During the account registration process, all members are required to confirm that they are at least 21 years of age. KYC verification further validates date of birth against a government-issued identity document. Where we have reason to believe that an account is held by a person under the age of 21, the account will be immediately suspended, all pending transactions cancelled, and any deposited funds returned to the originating payment method.

If you are a parent or guardian and believe that a minor has registered an account on the qqnuaa platform using false information, please contact us immediately at [email protected]. We will investigate and close any such account promptly.

qqnuaa's primary server infrastructure is hosted in secure data centers. In the course of operating the platform, certain data processing activities — particularly in relation to game software provision and fraud detection — may involve the transfer of personal data to service providers located outside Indonesia.

Where such international transfers occur, qqnuaa ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this policy. These safeguards include:

• Data processing agreements incorporating standard contractual clauses recognized under applicable international data protection frameworks.
• Transfer impact assessments conducted for each cross-border data flow to evaluate the adequacy of data protection in the recipient country.
• Contractual prohibitions on sub-processing or onward transfer of your data without qqnuaa's prior written consent.

qqnuaa does not transfer personal data to countries or entities that have not demonstrated an adequate level of data protection, without implementing the safeguards described above.

qqnuaa reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, platform features, applicable laws, and regulatory guidance. When material changes are made, we will:

• Update the "Last Updated" date displayed at the top of this page.
• Display a prominent notice on the platform homepage for a minimum of 14 days following any material update.
• Send an email notification to all registered members at their verified email address where the change materially affects how we use your personal data.

We encourage you to review this page periodically to stay informed about how we protect your data. Your continued use of the qqnuaa platform following the effective date of any update constitutes your acknowledgment of the revised policy.

If you disagree with any material change to this policy, you are entitled to request account closure and deletion of your data (subject to mandatory retention obligations) by contacting our support team.

For any privacy-related questions, data rights requests, or concerns about how qqnuaa handles your personal data, please reach out to our Data Protection team through the following channel:

• Email: [email protected]
• Subject Line: Please include "Privacy Request" or "Data Rights Request" in your subject line to ensure your message is routed directly to the Data Protection team.
• Response Time: We will acknowledge all privacy-related inquiries within 24 hours (WIB) and provide a full response within 30 calendar days.
• Support Hours: 24/7, with Indonesian-speaking agents available across WIB, WITA, and WIT time zones.

When submitting a data rights request, please include your registered username, the email address on file, and a clear description of your request. This will allow our Data Protection team to locate your records and respond efficiently.