Privacy Policy — qq589 Platform

The following terms are used throughout this Policy with the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, date of birth, national identity number, email address, phone number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means qq589, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party engaged by qq589 to process Personal Data on its behalf and under its instruction (e.g., KYC verification providers, payment processors).
• "Member" means any individual who has registered an account on the Platform and whose registration has been approved.
• "Cookies" means small text files placed on a Member's device by the Platform to enable functionality, remember preferences, and support analytics.
• "KYC" means Know Your Customer — the identity and address verification process required under anti-money-laundering obligations.
• "IDR" means Indonesian Rupiah (Rp), the currency in which all qq589 financial transactions are denominated.

qq589 collects Personal Data across several categories depending on how you interact with the Platform. The table below summarises the main data categories and specific data points we collect:

qq589 collects Personal Data through the following channels and mechanisms:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to promotional surveys.
• Automated technical collection: Data gathered automatically when you access the Platform, including via server logs, session tracking, and browser fingerprinting technologies necessary for fraud prevention and platform security.
• Cookies and similar technologies: First-party cookies and analytics pixels placed on your device when you visit qq589. See Clause 7 for full details of our cookie usage.
• Payment processor data: Transaction confirmation data returned to qq589 by local payment processors — including BCA virtual accounts, BRI e-Pay, and e-wallet APIs (OVO, DANA, GoPay, ShopeePay, LinkAja) — following a deposit or withdrawal instruction.
• Third-party KYC providers: Identity and fraud risk signals returned by licensed KYC/AML verification services engaged by qq589 to confirm Member eligibility.
• Publicly available sources: Sanctions lists, politically exposed persons (PEP) registers, and other public databases consulted as part of our AML compliance obligations.

qq589 processes your Personal Data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual necessity: Processing required to fulfil our obligations to you under the Member Agreement — including account creation, processing deposits and withdrawals, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable law — including anti-money-laundering (AML) regulations, KYC obligations, fraud prevention duties, and responses to lawful requests from regulatory authorities.
• Legitimate interests: Processing carried out in pursuit of qq589's legitimate business interests — such as fraud detection, platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — such as the use of non-essential cookies or the sending of promotional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

qq589 uses your Personal Data for the following specific purposes:

• Account management: Creating, maintaining, and securing your qq589 Member account, including password resets and account recovery.
• Identity verification (KYC): Confirming that you meet the eligibility requirements set out in our Terms and Conditions — including the minimum age requirement of 21 years — and complying with AML obligations.
• Payment processing: Processing deposits and withdrawals through your registered Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja) in IDR.
• Gaming service delivery: Enabling access to sports betting markets (BRI Liga 1, EPL, Champions League, Timnas Indonesia fixtures, badminton, MotoGP Mandalika, E-sports), live casino tables, slot games, and togel (Indonesia's traditional numbers lottery) draw markets.
• Bonus and promotion administration: Tracking wagering requirements, verifying bonus eligibility, and crediting or debiting Bonus Funds in accordance with promotion terms.
• Fraud prevention and security: Detecting and investigating suspicious activity, multi-account violations, bot usage, and money-laundering patterns. Protecting the integrity of the Platform for all Members.
• Responsible gaming: Monitoring gaming behaviour for indicators of problem gambling; applying deposit limits, session alerts, cool-off periods, and self-exclusions as requested or as required by our responsible gaming obligations.
• Customer support: Responding to enquiries, complaints, and disputes received via live chat or email at [email protected].
• Legal and regulatory compliance: Maintaining records required by applicable law, responding to lawful requests from regulatory authorities or law enforcement agencies, and defending legal claims.
• Platform improvement: Analysing aggregated usage data to improve game selection, site navigation, payment flows, and support quality.
• Marketing communications: Sending promotional emails or notifications about bonuses, new games, and seasonal offers — only where you have consented and have not opted out.

qq589 does not sell, rent, or trade your Personal Data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment processors: We share the minimum financial data required to execute deposit and withdrawal instructions with licensed Indonesian payment processors and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja). All payment partners are contractually bound to process your data only for the specific transaction purpose.
• KYC and AML service providers: We share identity documents and personal details with licensed KYC/AML verification providers to fulfil our legal obligation to verify Member identity before permitting withdrawals above threshold amounts.
• Game studio partners: When you play a game hosted by a third-party studio — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — your account identifier and session token may be transmitted to that studio's servers to enable gameplay. These studios operate under data processing agreements with qq589 and may not use Member data for any purpose beyond game delivery.
• Regulatory authorities and law enforcement: We will disclose Personal Data when required to do so by applicable law, court order, or lawful request from an Indonesian or international regulatory body or law enforcement agency.
• Professional advisors: We may share data with legal counsel, auditors, or accountants on a strictly need-to-know basis and under professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of qq589's business, Member data may be transferred to the acquiring entity subject to equivalent privacy protections.

qq589 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and improve your experience. The categories of cookies we deploy are as follows:

You may manage your cookie preferences through your browser settings. Note that disabling functional or analytics cookies will not affect your ability to place bets or make transactions, but may reduce the personalisation of your experience.

qq589 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general framework:

• Active account data: Retained for the full duration of your membership, plus a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, as required by anti-money-laundering regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the most recent communication in a support thread, or longer if the matter relates to an active dispute or legal claim.
• Technical and usage data: Retained in aggregated or anonymised form for up to two (2) years for analytics and platform-improvement purposes. Raw IP logs are deleted after ninety (90) days unless required in connection with a fraud investigation.
• Marketing consent records: Retained until you withdraw consent, plus twelve (12) months thereafter as evidence of your prior consent status.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is not immediately practicable due to technical constraints, the data will be isolated from active processing until deletion can be completed.

qq589 employs a multi-layered security architecture to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. Our key security controls include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the qq589 Platform is encrypted using the same standard employed by BCA and Mandiri for online banking. This applies to login credentials, deposit instructions, and all account data in transit.
• Encrypted data storage: Sensitive data fields — including passwords (hashed with bcrypt), bank account numbers, and identity document scans — are encrypted at rest using AES-256 on access-controlled, dedicated servers.
• Role-based access control: Internal access to Member data is strictly limited to qq589 staff whose job function requires it. Access is logged and audited. No member of support staff has access to plaintext passwords at any time.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA on their qq589 accounts for an additional layer of login security.
• Intrusion detection and monitoring: qq589's infrastructure is monitored 24/7 for anomalous activity, including brute-force login attempts, unusual withdrawal patterns, and multi-account registration signals.
• Penetration testing: The Platform undergoes periodic security assessments by independent third-party specialists to identify and remediate vulnerabilities before they can be exploited.

As a qq589 Member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a request via live chat or to [email protected] with the subject line "Data Rights Request – [Your Username]". qq589 will respond within thirty (30) calendar days.

• Right of access: You may request a copy of the Personal Data qq589 holds about you, along with information about how it is being processed.
• Right to rectification: You may request that inaccurate or incomplete Personal Data be corrected or updated without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that qq589 may be required to retain certain data (e.g., AML records) for legally mandated minimum periods regardless of an erasure request.
• Right to restriction of processing: You may request that qq589 restrict the processing of your data in specific circumstances — for example, while a dispute over accuracy is being resolved.
• Right to data portability: You may request a structured, machine-readable copy of Personal Data you have provided to qq589 for the purpose of transferring it to another service provider.
• Right to object: You may object to processing based on qq589's legitimate interests, or to the use of your Personal Data for direct marketing purposes. Marketing objections will be actioned immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

qq589 is strictly an adults-only platform. You must be at least 21 years of age to register an account or use any service on the Platform. qq589 does not knowingly collect or process Personal Data from any individual under the age of 21.

If qq589 discovers that it has inadvertently collected Personal Data from a person under 21, that data will be permanently deleted and the associated account immediately suspended. If you are a parent or guardian and believe that a minor in your care has registered on qq589, please contact us immediately at [email protected] so that we may take swift corrective action.

qq589 employs age verification controls at the registration stage and may request documentary proof of age (such as a KTP scan) at any point during a Member's account lifetime. Members found to have misrepresented their age will have their accounts permanently closed and any balance forfeited in accordance with our Terms and Conditions.

The qq589 Platform does not contain outbound links to third-party websites as part of its standard navigation. However, game studio interfaces embedded within the Platform — including those operated by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — are hosted on the studios' own server infrastructure. When you launch a game, your session interacts with the relevant studio's servers, and the studio's own privacy policy governs any data processed directly by their systems.

qq589 is not responsible for the privacy practices or content of any third-party server or studio platform. We recommend reviewing the privacy policies of relevant game studios if you wish to understand how they handle gameplay session data.

qq589 operates as an internationally licensed gaming platform. As a result, some of the third-party service providers engaged by qq589 — including KYC verification providers, cloud infrastructure operators, and game studio partners — may be located in jurisdictions outside Indonesia. When your Personal Data is transferred to such providers, qq589 ensures that appropriate safeguards are in place to maintain a standard of data protection equivalent to that described in this Policy.

Safeguards employed for international transfers include contractual clauses in data processing agreements that require recipient organisations to uphold equivalent data security and access control standards, and where applicable, adherence to recognised international data protection frameworks.

By registering an account on qq589 and using the Platform's services, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia, subject to the safeguards described above.

qq589 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes, we will notify active Members via email to the address on file and by posting a prominent notice on the Platform at least seven (7) days before the revised Policy takes effect.

Non-material changes — such as clarifications of existing language, typographic corrections, or formatting updates — may be made without prior notice. The "Last Updated" date at the top of this page will reflect the date of any revision, material or otherwise.

Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you disagree with any change, you must cease using the Platform and submit an account closure request to [email protected]. The most current version of this Policy is always accessible at https://qq589.club/privacy-policy.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a potential data security concern, please contact qq589 through the following channels:

• Live Chat: Available 24/7 on every page of the Platform. Indonesian-speaking agents are available at all times. This is the fastest channel for urgent data or security concerns.
• Email: [email protected] (plain text — not a clickable link). For data rights requests, please use the subject line "Data Rights Request – [Your Username]". Responses are provided within 24 hours for general enquiries and within 30 calendar days for formal data rights requests.