Privacy Policy

1. Introduction & Scope

qqmega is committed to handling all personal data with integrity, care, and in full compliance with applicable data protection principles. This Policy applies to all personal data collected through the qqmega Platform — including data provided during account registration, identity verification, payment processing, customer support interactions, and ordinary use of the Platform's betting and gaming features.

This Policy applies to all Players who access the Platform, with particular regard to Players based in Indonesia. References to Indonesian legal context — including local bank and e-wallet usage — reflect the reality that the majority of qqmega's player base is located across Indonesia, in cities such as Jakarta, Surabaya, Medan, Bandung, Bali, and Yogyakarta.

This Policy should be read together with qqmega's Terms & Conditions, which govern your overall use of the Platform. Where this Policy conflicts with the Terms & Conditions on a data-protection matter, this Policy takes precedence.

2. Definitions

1. "Personal Data" means any information that identifies, or could reasonably be used to identify, a living individual — including name, email address, date of birth, national identity number, device identifiers, and financial account details.
2. "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, or destruction — whether by automated means or otherwise.
3. "Data Controller" means qqmega, which determines the purposes and means of processing your personal data.
4. "Data Processor" means any third party that processes personal data on behalf of qqmega, such as payment processors, KYC service providers, and hosting infrastructure providers.
5. "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
6. "KYC" means Know Your Customer — the identity and age verification procedures through which qqmega confirms that Players are who they claim to be and meet our eligibility criteria.
7. "Cookies" means small text files stored on your device by a web browser at the instruction of a website, used to remember preferences, sessions, and behavior for functional and analytical purposes.

3. Data We Collect

The following table summarizes the categories of personal data qqmega collects and the primary reason for collecting each category:

Data Category	Examples	Primary Purpose
Identity Data	Full name, date of birth, nationality, KTP or passport number	Account registration; KYC verification; age & eligibility confirmation
Contact Data	Email address, phone number, residential address	Account communications; KYC; support interactions; withdrawal verification
Financial Data	Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP); e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja); transaction history	Payment processing; fraud prevention; AML compliance; withdrawal verification
Technical Data	IP address, device type, browser type and version, operating system, session tokens	Platform security; fraud detection; session management; service improvement
Usage Data	Pages visited, games played, bets placed, time on site, click-through patterns	Platform optimization; responsible gaming monitoring; personalized experience
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer service; dispute resolution; quality assurance
KYC Documents	Scanned or photographed KTP, passport, proof of address, selfie/liveness verification	Regulatory compliance; age verification; anti-fraud; withdrawal processing

4. How We Collect Your Data

1. Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
2. Automatically: when you use the Platform, our servers and analytics systems automatically record technical and usage data including your IP address, device identifiers, browser type, pages visited, and in-session behavior.
3. From third-party service providers: where permitted by applicable law, we may receive data from identity verification partners (KYC providers), payment processors, and fraud detection services to supplement the information you provide directly.
4. From cookies and similar technologies: as described in Clause 8 below, we use cookies and related tracking tools to collect data about how you interact with the Platform.

5. Legal Basis for Processing

qqmega processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are:

1. Contractual necessity: processing required to create and manage your account, process deposits and withdrawals, and deliver the services described in our Terms & Conditions.
2. Legal obligation: processing required to comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) regulations, fraud prevention requirements, and any other legal obligations applicable under our international gaming licence.
3. Legitimate interests: processing carried out for fraud detection, platform security, abuse prevention, and service improvement — where these interests are not overridden by your fundamental rights and freedoms.
4. Consent: for optional processing activities — such as receiving promotional communications from qqmega — we will ask for your explicit consent. You may withdraw your consent at any time by contacting our support team or updating your account communication preferences.

6. How We Use Your Personal Data

qqmega uses the personal data it collects for the following purposes:

1. Account management: creating, maintaining, and securing your qqmega account, including authentication and session management.
2. Identity verification: confirming your age, identity, and residence in accordance with our KYC obligations and our age-restriction policy (21+ only).
3. Payment processing: facilitating deposits via local Indonesian bank transfer and e-wallet services, and processing withdrawal requests to your registered payment method.
4. Customer support: responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality and training purposes.
5. Security and fraud prevention: detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited activities.
6. Responsible gaming: monitoring account activity to identify behavioral patterns consistent with problem gambling, and applying appropriate responsible gaming tools where warranted. See our Responsible Gaming page for details.
7. Platform improvement: analyzing usage data in aggregate to improve the functionality, performance, and user experience of the Platform.
8. Promotional communications: where you have given explicit consent, sending you information about qqmega promotions, seasonal bonuses, and special offers relevant to your activity — including campaigns around Indonesian events such as Idul Fitri, Ramadhan, and Indonesian Independence Day (17 August).
9. Legal and regulatory compliance: retaining records and disclosing data as required by applicable law, court order, or regulatory instruction from competent authorities.

7. Data Sharing & Disclosure

1. qqmega does not sell your personal data. We share your data only in the limited circumstances described below:
   • Payment processors and banking partners: financial data is shared with our payment partners — including local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — exclusively for the purpose of processing your transactions.
   • KYC and identity verification providers: identity documents and related data are shared with our third-party KYC verification partners to confirm your eligibility to use the Platform.
   • Fraud prevention and security services: technical and usage data may be shared with specialist fraud-detection services to protect the integrity of the Platform and its players.
   • Hosting and infrastructure providers: data is stored on servers operated by our infrastructure partners under strict data processing agreements that prohibit any use of your data beyond the services they provide to qqmega.
   • Legal and regulatory authorities: where required by applicable law, court order, or a lawful request from a competent regulatory or law enforcement authority, qqmega may disclose your personal data without prior notice to you.
   • Business transfers: in the event of a merger, acquisition, or sale of all or substantially all of qqmega's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.
2. All third-party data processors engaged by qqmega are required to process your personal data only on our documented instructions, to maintain appropriate security measures, and to delete or return data upon termination of their engagement.
3. qqmega will never share your personal data with third parties for their own independent marketing or commercial purposes without your explicit, separately obtained consent.

8. Cookies & Tracking Technologies

1. qqmega uses cookies and similar technologies (including local storage and session storage) to operate the Platform, remember your preferences, maintain your login session, and collect analytical data about how players use the Platform.
2. The following categories of cookies are used on the Platform:
   • Strictly necessary cookies: essential for the Platform to function. These cannot be disabled without breaking core functionality such as login sessions and payment flows.
   • Functional cookies: remember your preferences (such as language settings and display options) to provide a more personalized experience.
   • Analytical cookies: collect aggregate, anonymized data about how players navigate and use the Platform. This data is used solely to improve Platform performance and user experience.
   • Security cookies: used to detect and prevent fraudulent login attempts, account takeover, and other security threats.
3. qqmega does not use third-party advertising cookies or behavioral retargeting cookies that track your activity across websites outside the Platform.
4. You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent certain features of the Platform from functioning correctly.

9. Data Retention

1. qqmega retains your personal data for only as long as necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations.
2. As a general guideline, the following retention periods apply:
   • Account data: retained for the duration of your account's active lifetime, plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
   • Transaction records: retained for a minimum of five (5) years from the date of each transaction, or longer where required by applicable law.
   • KYC documents: retained for a minimum of five (5) years from the date of submission, or for the duration required by our licensing regulator — whichever is longer.
   • Support communications: retained for up to three (3) years from the date of the interaction, unless the communication relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved.
   • Analytical and usage data: retained in anonymized or aggregated form indefinitely for platform improvement purposes. Personally identifiable usage data is retained for up to twenty-four (24) months.
3. Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

10. Security Measures

1. qqmega implements a layered set of technical and organizational security measures designed to protect your personal data against unauthorized access, loss, destruction, alteration, or disclosure. These measures include:
   • SSL/TLS encryption for all data transmitted between your device and our servers.
   • Encryption of sensitive data fields — including passwords and financial account identifiers — at rest using current industry-standard algorithms.
   • Role-based access controls ensuring that only authorized personnel with a legitimate business need can access personal data.
   • Regular security audits, vulnerability assessments, and penetration testing of the Platform's infrastructure.
   • Multi-factor authentication options for Player accounts to reduce the risk of unauthorized account access.
   • Real-time monitoring and alerting systems to detect and respond to suspicious activity on the Platform.
2. While qqmega takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against every conceivable threat. You are responsible for maintaining the confidentiality of your own account credentials and for notifying us immediately if you suspect any unauthorized use of your account.
3. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, qqmega will take prompt action to contain the breach and will notify affected players in accordance with our obligations under applicable law.

11. Your Data Protection Rights

Depending on your location and the applicable legal framework, you may have some or all of the following rights in relation to your personal data held by qqmega:

1. Right of access: you may request a copy of the personal data qqmega holds about you, along with information about how it is being used.
2. Right to rectification: you may request that inaccurate or incomplete personal data be corrected or updated without undue delay.
3. Right to erasure: in certain circumstances, you may request that qqmega delete your personal data. This right is subject to overriding legal or regulatory obligations that require us to retain data for a prescribed period.
4. Right to restriction of processing: you may request that qqmega limit the processing of your personal data in specific circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
5. Right to data portability: where processing is based on your consent or on contractual necessity, and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
6. Right to object: you may object to processing carried out on the basis of legitimate interests, including processing for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately.
7. Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12. Minors

1. The qqmega Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21.
2. If qqmega becomes aware that personal data has been collected from a person under the age of 21 without verified parental or guardian consent, we will take immediate steps to delete that data and close the associated account.
3. If you believe that a minor has registered an account on the Platform, please contact our support team immediately so that we can investigate and take appropriate action.

13. International Data Transfers

1. qqmega operates on an internationally hosted infrastructure. Your personal data may therefore be transferred to and stored on servers located in countries outside of Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.
2. Safeguards for international transfers may include contractual clauses incorporated into our agreements with data processors, requiring those processors to handle data in accordance with applicable data protection principles.
3. By using the Platform, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia for the purposes described in this Policy, subject to the safeguards outlined above.

14. Amendments to This Policy

1. qqmega reserves the right to update or amend this Privacy Policy at any time. The revised Policy will be posted on the Platform with an updated "Last Updated" date at the top of this page.
2. For material changes — such as new categories of data collection, new uses of existing data, or new sharing arrangements — we will notify registered Players via their registered email address prior to the changes taking effect, where practicable.
3. Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using the Platform and contact our support team to close your account.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way qqmega handles your personal data, please reach out to our dedicated support team:

For questions about responsible gaming, self-exclusion, or deposit limits, please visit our Responsible Gaming page. For a full understanding of your contractual rights and obligations as a qqmega player, please read our Terms & Conditions.