qtt777 Privacy Policy

1 Definitions

The following terms carry the meanings assigned below throughout this Privacy Policy. Where the context permits, defined terms in qtt777's Terms & Conditions carry the same meanings here unless separately defined.

• "qtt777" / "we" / "us" / "the Company" — the operator of the online gaming platform at qtt777.net and all associated interfaces.
• "Platform" — the qtt777 website, mobile-optimised browser interface, and any software or service provided at qtt777.net.
• "Member" / "you" — any individual who has registered an Account on the qtt777 Platform.
• "Personal Data" — any information that identifies or could reasonably be used to identify you as an individual, including but not limited to your name, email address, date of birth, bank account details, e-wallet credentials, device identifiers, and IP address.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, and destruction.
• "Controller" — the entity that determines the purposes and means of Processing Personal Data. qtt777 acts as the Controller for Personal Data collected through the Platform.
• "Third-Party Processor" — any external service provider that Processes Personal Data on qtt777's behalf under a contractual data-processing agreement.
• "KYC" — Know Your Customer verification, the identity and address verification process conducted by qtt777 in accordance with anti-money laundering and responsible gaming standards.

2 Data We Collect

qtt777 collects Personal Data in proportion to the services it provides. The categories of data we collect, and the context in which each category arises, are set out in the table below.

Category	Specific Data Points	When Collected
Identity Data	Full legal name, date of birth, nationality, government-issued ID number	Registration; KYC verification
Contact Data	Email address, phone number, residential address	Registration; KYC verification
Financial Data	Bank account number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records	First deposit; ongoing transactions
Gaming Data	Game session logs, bet history, wagering amounts, win/loss records, bonus usage, responsible gaming tool settings	Platform use
Technical Data	IP address, browser type and version, operating system, device identifiers, time zone (WIB/WITA/WIT), referring URL, session duration	Every Platform visit
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer support interactions
Marketing Preferences	Promotion opt-in/opt-out status, preferred contact channel, bonus history	Registration; Account settings updates

3 How We Collect Data

qtt777 collects Personal Data through the following channels:

• Directly from you — when you complete the qtt777 registration form, submit KYC documents, make deposits or withdrawals, contact customer support, or update your Account settings.
• Automatically via the Platform — through server logs, session tracking, and analytics tools that record Technical Data each time you interact with qtt777.net.
• Cookies and similar technologies — as described in Section 10 of this Policy.
• Third-party payment processors — when you initiate a transaction through a local bank or e-wallet provider, qtt777 receives confirmation data (transaction reference, amount, account holder name) from that provider to verify and process the payment.
• Identity verification providers — during KYC, qtt777 may engage a third-party verification service to cross-reference the documents you submit against official databases. This service acts as a Third-Party Processor under a data-processing agreement with qtt777.

4 Purposes of Processing

qtt777 processes your Personal Data only for the purposes described below. We do not sell Personal Data to third parties, and we do not use Personal Data for purposes incompatible with those for which it was originally collected without seeking your consent or establishing another lawful basis.

• Account Management: Creating and maintaining your qtt777 Account, authenticating your identity at login, and managing your Account settings and preferences.
• Service Delivery: Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and other supported methods; delivering game sessions; settling bets; and crediting bonuses.
• KYC and Compliance: Verifying your identity and age (21+), meeting our anti-money laundering obligations, and complying with any applicable regulatory requirements under qtt777 's international operating licence.
• Fraud Prevention and Security: Detecting and preventing fraudulent transactions, account takeover attempts, bonus abuse, money laundering, and other prohibited conduct as defined in the qtt777 Terms & Conditions.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling, applying responsible gaming tools requested by Members (deposit limits, self-exclusion, cool-off periods), and maintaining records required for self-exclusion enforcement.
• Customer Support: Responding to enquiries, complaints, and disputes submitted via live chat or email, and maintaining records of those interactions for quality assurance and dispute resolution.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to marketing communications. You may withdraw consent at any time via your Account settings or by contacting support.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve qtt777's products, user interface, game selection, and overall platform performance.
• Legal Obligations: Retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and enforcing qtt777's contractual rights.

5 Legal Basis for Processing

qtt777 relies on one or more of the following legal bases when Processing your Personal Data, depending on the specific purpose involved:

• Contractual Necessity: Processing required to perform the contract between qtt777 and you as a Member — including Account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, anti-money laundering obligations, and retention requirements.
• Legitimate Interests: Processing carried out to pursue qtt777's legitimate business interests — such as fraud prevention, platform security, and product improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of Processing carried out prior to withdrawal.

6 Sharing Your Data

qtt777 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We may share your Personal Data with the following categories of recipients only to the extent necessary to fulfil the purposes described in Section 4.

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process deposits and withdrawals. These providers operate their own privacy policies and are independent Controllers for their own processing activities.
• KYC and Identity Verification Providers: Third-party verification services engaged by qtt777 to cross-check identity documents during KYC. These providers act as Third-Party Processors under binding data-processing agreements.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive session tokens and anonymised player identifiers to deliver live game content and RNG game sessions. These providers do not receive your full identity or financial data.
• IT and Infrastructure Providers: Cloud hosting, cybersecurity, and platform monitoring providers who access data solely to maintain and secure qtt777's technical infrastructure under confidentiality obligations.
• Customer Support Tools: Live chat software providers who process conversation data on qtt777's behalf to facilitate customer support interactions.
• Regulatory and Law Enforcement Authorities: qtt777 may disclose Personal Data to competent authorities where required to do so by law, court order, or regulatory direction, or where necessary to protect the rights or safety of qtt777, its Members, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of qtt777's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

7 International Transfers

qtt777 operates internationally and some of its Third-Party Processors are based outside Indonesia. Where Personal Data is transferred to a jurisdiction that does not provide a level of data protection equivalent to that in Indonesia, qtt777 will implement appropriate safeguards — such as contractual clauses that impose data-protection obligations on the recipient — before making such a transfer. By registering a qtt777 Account, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia as described in this Policy.

8 Data Retention

qtt777 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active qtt777 Account, plus a minimum of five (5) years following Account closure, to meet anti-money laundering record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with standard financial record-keeping practice.
• Gaming Session Data: Retained for a minimum of three (3) years from the date of each session, for dispute resolution and regulatory audit purposes.
• Customer Support Communications: Retained for two (2) years from the date of each interaction, unless the interaction forms part of an ongoing dispute or legal proceedings.
• Marketing Preferences: Retained until you withdraw consent or close your Account, whichever is earlier.
• Technical / Log Data: Typically retained for twelve (12) months and then anonymised or deleted, unless a specific security or fraud investigation requires longer retention.

When retention periods expire, qtt777 securely deletes or anonymises Personal Data so that it can no longer be associated with any identifiable individual.

9 Security Measures

qtt777 applies a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and qtt777.net is encrypted using industry-standard TLS protocols — the same standard applied by major Indonesian banks including BCA and Mandiri.
• Password Hashing: Account passwords are stored using a one-way cryptographic hash function. qtt777 never stores passwords in plain text and cannot retrieve your password — only reset it.
• Access Controls: Personal Data is accessible only to qtt777 staff who require it to perform specific, authorised job functions. Access is role-based and audited.
• Two-Factor Authentication (2FA): Available to all Members for additional Account login security. qtt777 strongly recommends enabling 2FA from your Account security settings.
• Network Security: qtt777's platform infrastructure is protected by firewalls, intrusion detection systems, and continuous monitoring for anomalous activity.
• Vendor Security Assessments: Third-Party Processors handling Personal Data are assessed for security compliance before engagement and are subject to contractual security obligations.

10 Cookies & Similar Technologies

qtt777 uses cookies and similar tracking technologies on the Platform to deliver core functionality, improve the user experience, and collect analytics data. The following cookie categories are in use:

• Strictly Necessary Cookies: Essential for the Platform to function — for example, maintaining your authenticated session after login and remembering your Account language and regional preferences. These cookies cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how visitors interact with the Platform — including pages visited, session duration, and technical errors encountered. This data is used to improve qtt777's platform performance and content relevance. No personally identifiable information is included in analytics reports.
• Functionality Cookies: Remember choices you make on the Platform — such as preferred game category, responsible gaming settings, and display preferences — to provide a more personalised experience across sessions.
• Marketing / Targeting Cookies: Used only where you have given explicit consent, to deliver promotional content relevant to your gaming preferences. You may withdraw consent for marketing cookies at any time via your browser settings or Account preferences.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent certain parts of the Platform from functioning correctly. For most browsers, guidance on cookie management is available via the browser's help section.

11 Your Data Rights

As a qtt777 Member whose Personal Data we Process, you hold the following rights. To exercise any of these rights, contact qtt777 at support@qtt777.net with the subject line "Data Rights Request" and include your qtt777 username and a description of the right you wish to exercise. qtt777 will acknowledge your request within 48 hours (WIB) and respond substantively within 30 days.

Please note that certain rights are subject to exceptions. For example, qtt777 may be unable to erase Personal Data that it is legally required to retain for anti-money laundering or regulatory purposes, or data that is necessary to resolve an open dispute.

12 Minors

qtt777 uses date-of-birth verification during registration and may request government-issued identity documents during KYC specifically to enforce this age restriction. Players in Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, and all other regions of Indonesia are subject to the same 21+ requirement.

13 Amendments to This Policy

qtt777 reviews this Privacy Policy regularly and may update it to reflect changes in our data-processing practices, applicable law, or the services we offer. When we make material changes, we will notify registered Members by email and post a prominent notice on the Platform at least seven (7) days before the changes take effect. The "Effective Date" at the top of this Policy will be updated with each new version. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree to the revised terms, you may request Account closure by contacting us at support@qtt777.net.

14 Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the Personal Data qtt777 holds about you, please contact our data team through any of the following channels:

• Email: support@qtt777.net — use the subject line "Privacy Enquiry" or "Data Rights Request" for faster routing.
• Live Chat: Available 24/7 within your qtt777 Account dashboard. Indonesian-speaking agents are available on every shift for Members who prefer to communicate in Bahasa Indonesia.
• Response Commitment: qtt777 acknowledges all privacy-related enquiries within 48 hours (WIB) and provides a substantive response within 30 calendar days, or sooner where practicable.

qtt777 is committed to resolving all privacy concerns directly and transparently. If you are not satisfied with qtt777's response, you may escalate your complaint to the data protection authority in your jurisdiction or to the supervisory body under qtt777's operating licence.