Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below unless the context clearly requires otherwise:

• "qt777", "we", "us", or "our" refers to the operating entity behind the qt777 platform accessible at https://qt777.lat.
• "Platform" means the qt777 website, all subpages, the player account dashboard, sportsbook, live casino, slots, and any other product or service accessible through https://qt777.lat.
• "Player", "you", or "your" means any individual who accesses, browses, registers on, or uses the Platform in any capacity.
• "Personal Data" means any information that directly or indirectly identifies you as an individual, including but not limited to your name, email address, phone number, national identity number, date of birth, bank account details, e-wallet identifiers, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, and deletion.
• "KYC" means Know Your Customer verification procedures required to confirm your identity, age, and residential address.
• "Cookies" means small text files placed on your device by the Platform for the purposes described in Clause 6.
• "Third-Party Partners" means game studio providers, payment processors, fraud detection services, and other service providers engaged by qt777 to operate the Platform.
• "IDR" means Indonesian Rupiah, the sole currency in which transactions on the Platform are conducted.

Qt777 collects the following categories of Personal Data from players, depending on how you interact with the Platform:

Qt777 does not knowingly collect or process sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) as part of normal Platform operations. Where a KYC document submitted by a player incidentally contains such information (for example, a national identity card that includes religion), that data is processed solely for the purpose of identity verification and is not used for any other purpose.

Qt777 collects Personal Data through the following means:

• Direct collection: Information you provide voluntarily when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting the qt777 support team.
• Automated collection: Technical Data and Behavioural Data collected automatically through server logs, session tracking, and first-party analytics tools each time you access the Platform. See Clause 6 for details on cookies and tracking.
• Third-party sources: Where necessary for fraud prevention and AML compliance, qt777 may receive supplementary verification data from regulated identity verification or sanctions-screening service providers.
• Payment processors: Qt777 receives transaction confirmation data (but not full bank account credentials) from Indonesian bank payment gateways and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you process a deposit or withdrawal.

Qt777 processes your Personal Data only for specific, legitimate purposes. The following table sets out the primary purposes for which data is processed and the legal basis on which each processing activity rests:

5.1 No Sale of Personal Data. Qt777 does not sell, rent, lease, or exchange your Personal Data with any third party for commercial, marketing, or advertising purposes. Your data is your data.

5.2 Operational Sharing. Qt777 shares Personal Data with Third-Party Partners strictly to the extent necessary for Platform operations. These partners include:

• Game studio providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, Spribe, and others) — receive a pseudonymous player identifier and session token to facilitate game play. They do not receive your full identity data.
• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja gateway operators) — receive the transaction data necessary to execute deposits and withdrawals in IDR.
• KYC and identity verification providers — receive identity documents and supporting materials submitted by you to conduct age verification and anti-money laundering checks.
• Fraud detection and cybersecurity service providers — receive Technical and Behavioural Data for the purpose of identifying and preventing fraudulent activity on the Platform.
• Customer support platform providers — receive Communications Data to the extent necessary to facilitate live chat and ticket-based support.

5.3 Legal Disclosures. Qt777 may disclose Personal Data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, by court order, or in connection with the investigation or prevention of fraud, money laundering, or other serious criminal activity.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of substantially all of qt777's assets, Personal Data held on the Platform may be transferred to the acquiring entity. Qt777 will notify affected players by email or by a prominent Platform notice in advance of any such transfer, to the extent practicable.

5.5 Aggregated Data. Qt777 may share aggregated, anonymised statistical data (such as total number of active players in a given month, or aggregate bet volumes by sport) with business partners or publish such data publicly. Aggregated data does not identify any individual player.

6.1 What Are Cookies. Cookies are small text files placed on your browser or device when you visit the Platform. Qt777 uses first-party cookies only — we do not deploy third-party advertising or cross-site tracking cookies.

6.2 Types of Cookies Used.

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, CSRF protection tokens, and the IDR wallet session state. These cannot be disabled without rendering the Platform unusable.
• Functional Cookies: Remember your preferences such as language settings, odds display format, and game lobby filter settings across sessions.
• Analytics Cookies: Collect anonymised or pseudonymised data on how players navigate the Platform — pages visited, session duration, feature usage — to help qt777 improve the user experience. This data is processed in aggregate and does not identify individual players.
• Responsible Gaming Cookies: Store your deposit limit, session time limit, and cool-off period settings locally to enforce them even before they are synchronised with the server.

6.3 Managing Cookies. You may configure your browser to refuse or delete cookies at any time. However, disabling strictly necessary cookies will prevent you from logging in to your Account or using any financial features of the Platform. Analytics and functional cookies can be declined without affecting core Platform access.

Qt777 retains Personal Data only for as long as is necessary for the purposes for which it was collected or as required by applicable law. The following retention periods apply as a general guide:

• Account and KYC data: Retained for the lifetime of the Account and for a minimum of 5 years after Account closure, in accordance with anti-money laundering record-keeping obligations.
• Financial transaction data: Retained for a minimum of 5 years from the date of each transaction, consistent with financial record-keeping requirements.
• Communications and support data: Retained for up to 3 years from the date of the last interaction, to support the resolution of any subsequent disputes.
• Technical and behavioural log data: Retained in identifiable form for up to 12 months, after which it is anonymised or deleted.
• Responsible gaming records (self-exclusion, limit settings): Retained for 5 years after the relevant period ends to prevent circumvention of self-exclusion by re-registration.

When Personal Data is no longer required and has passed its applicable retention period, qt777 will delete or permanently anonymise it in a secure and irreversible manner.

The specific security measures deployed by qt777 include:

• Transport Layer Security (TLS): All data transmitted between your device and the Platform is encrypted using TLS 1.2 or higher (256-bit SSL), ensuring that data in transit cannot be intercepted or read by third parties.
• Password hashing: Account passwords are never stored in plain text. Qt777 uses a salted cryptographic hashing algorithm (bcrypt) to store password hashes, meaning that even in the hypothetical event of a database breach, plain-text passwords cannot be recovered.
• Two-factor authentication (2FA): Qt777 offers optional 2FA for all player Accounts and strongly recommends enabling it. 2FA adds a second verification step (via a time-based one-time password) to the login process, materially reducing the risk of unauthorised Account access.
• Access controls: Access to systems holding Personal Data is restricted to qt777 staff and contracted service providers who require that access to perform their duties, on a principle-of-least-privilege basis. Access logs are maintained and reviewed regularly.
• Data at rest encryption: Databases containing Personal Data, including KYC documents and financial transaction records, are encrypted at rest using AES-256.
• Penetration testing and security audits: Qt777 conducts periodic penetration testing and independent security audits to identify and remediate vulnerabilities before they can be exploited.

While qt777 takes all reasonable steps to protect your Personal Data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying qt777 immediately if you suspect any unauthorised access to your Account.

As a player whose Personal Data is processed by qt777, you have the following rights, which you may exercise at any time by contacting qt777 customer support:

• Right of Access: You have the right to request a copy of the Personal Data qt777 holds about you, including a description of the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right of Rectification: You have the right to request that qt777 correct any inaccurate or incomplete Personal Data held about you. For certain data fields (such as email address and phone number), you may also update this information directly through your Account settings.
• Right to Erasure (Right to be Forgotten): You have the right to request that qt777 delete your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been unlawfully processed. This right is subject to qt777's legal retention obligations — data that must be retained under anti-money laundering law, for example, cannot be deleted until the applicable retention period expires.
• Right to Restriction of Processing: You have the right to request that qt777 restrict the processing of your Personal Data in certain circumstances, such as while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: You have the right to receive certain Personal Data that you have provided to qt777 in a structured, commonly used, machine-readable format (such as CSV), and to request that qt777 transmit that data to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your Personal Data where that processing is based on qt777's legitimate interests. You may also withdraw consent for marketing communications at any time by updating your Account communication preferences.

Qt777 will respond to data subject rights requests within 30 days of receipt. Where a request is complex or involves a high volume of data, qt777 may extend this period by a further 30 days, with prior written notice to you. Qt777 does not charge a fee for processing data subject rights requests except in cases of manifestly unfounded or excessive repetition.

Qt777 enforces the 21+ age restriction through mandatory age verification during the KYC process. All players are required to confirm their date of birth at registration, and to provide a government-issued identity document confirming their age as part of KYC verification before withdrawal privileges are activated.

Where qt777 discovers that a player is under 21 years of age, the Account will be immediately closed, all associated Personal Data will be deleted as soon as legal obligations permit, and any deposits made will be returned to the source payment method. Any winnings generated by an underage player will be forfeited.

If you are a parent or guardian and have reason to believe that a minor in your household has registered an Account on qt777, please contact qt777 support immediately via live chat.

Qt777 is an internationally operated platform. The servers, infrastructure, and certain Third-Party Partners engaged by qt777 may be located outside of Indonesia. As a result, your Personal Data may be transferred to, stored in, or processed in countries other than Indonesia.

Where such international transfers occur, qt777 takes appropriate steps to ensure that your Personal Data receives a level of protection consistent with the principles set out in this Privacy Policy. These steps may include entering into data processing agreements with Third-Party Partners that incorporate standard contractual clauses or equivalent safeguards recognised under applicable data protection frameworks.

Game studio partners such as Evolution Gaming, Pragmatic Play, NetEnt, and Microgaming operate their own data protection frameworks in accordance with the regulatory requirements applicable to their respective jurisdictions of incorporation and licensing. Qt777 conducts due diligence on the data protection practices of all significant Third-Party Partners before engagement.

The qt777 Platform does not contain outbound links to third-party websites for advertising or affiliate purposes. The Platform integrates game content from licensed third-party studio partners (such as Pragmatic Play and Evolution Gaming) through embedded iframes or direct API integration. When you interact with game content provided by a studio partner, the studio's own data processing practices apply to data collected within their game environment.

Qt777 is not responsible for the privacy practices of third-party game studio partners. Each studio partner operates under its own privacy policy and data protection framework consistent with its regulatory obligations. Qt777 recommends reviewing the privacy information accessible from within each game's information panel if you have specific questions about how a studio partner processes session data.

Qt777 reserves the right to amend this Privacy Policy at any time. When a material amendment is made — such as a change in how Personal Data is used, a new category of data collected, or a new third-party sharing arrangement — qt777 will notify registered players by email to their registered address or by a prominent Platform notice, with a minimum of 7 days' advance notice before the updated policy takes effect.

For minor clarificatory amendments that do not materially affect players' rights or the nature of data processing, qt777 may update the policy immediately and post the revised version on this page with an updated "Last updated" date.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the amended policy, you should cease using the Platform and may request Account closure in accordance with the qt777 Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by qt777, please contact the qt777 support team through the following channel:

Qt777 aims to acknowledge all privacy-related enquiries within 24 hours (WIB) and to respond substantively within 30 days. Indonesian-speaking support agents are available via live chat around the clock to assist players in Jakarta, Surabaya, Bali, Medan, Bandung, Makassar, and across the Indonesian archipelago.

For formal data subject rights requests (access, rectification, erasure, portability), please include your registered username and the nature of the request in your email or chat message so that qt777 can process it efficiently and securely.