hq777 Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below. Where the context permits, singular forms include the plural and vice versa.

• "hq777" / "we" / "us" / "our" — refers to hq777 and its licensed operating entity, including all sub-domains and interfaces accessible via hq777.bio.
• "Member" / "you" / "your" — any individual who has registered an account on the hq777 platform or who browses the hq777 website without having registered.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, telephone number, device identifiers, and financial transaction records.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" — hq777, as the entity that determines the purposes and means of processing Personal Data collected via the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of hq777 under a written data-processing agreement, such as a KYC verification provider or payment gateway.
• "Cookies" — small text files placed on a Member's device by the hq777 platform to enable core functionality, remember preferences, and support analytics and fraud-prevention operations.
• "KYC" — Know Your Customer: the identity verification process conducted by hq777 prior to approving withdrawal requests.
• "WIB" — Western Indonesia Time (UTC+7), the reference time zone used for all timestamps in hq777's data records and customer communications.

This Privacy Policy applies to all Personal Data collected by hq777 through any of the following channels:

• The hq777 website accessible at hq777.bio and all its sub-domains;
• The hq777 mobile-browser interface and any progressive web application (PWA) distributed by hq777;
• Direct communications between a Member and the hq777 customer-support team via live chat or email;
• Any promotional campaign, survey, or competition run by hq777 through which a Member voluntarily submits personal information.

This Policy applies to all individuals who access or use the hq777 platform, regardless of whether they are registered Members or anonymous visitors. By accessing the hq777 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your Personal Data as described herein.

This Privacy Policy should be read in conjunction with the hq777 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

hq777 collects the following categories of Personal Data, depending on the nature of your interaction with the platform:

3.1 Registration & Account Data

• Full legal name (as it appears on a government-issued Indonesian identity document);
• Email address and Indonesian mobile telephone number;
• Username and hashed password (passwords are never stored in plain text);
• Date of birth (collected for mandatory 21+ age-verification purposes);
• City of residence within Indonesia (e.g., Jakarta, Surabaya, Bandung, Bali, Medan).

3.2 KYC & Identity Verification Data

• Photograph or scan of a valid Indonesian National Identity Card (KTP), Indonesian Passport, or Indonesian Driver's Licence (SIM);
• Selfie photograph taken at the time of KYC submission, used for liveness-check and document-matching purposes;
• Bank account name and account number for the Member's primary deposit/withdrawal method (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, or other supported Indonesian banks);
• E-wallet profile screenshot showing name and registered mobile number (OVO, DANA, GoPay, ShopeePay, or LinkAja).

3.3 Financial Transaction Data

• Deposit and withdrawal amounts (denominated in Indonesian Rupiah, IDR);
• Transaction timestamps (WIB), transaction reference numbers, and payment channel used;
• Account balance history and bonus transaction records.

3.4 Betting & Gaming Activity Data

• Sports betting history — markets wagered on (including BRI Liga 1, EPL, Champions League, and other competitions), stake amounts, odds accepted, and settlement outcomes;
• Live casino game history — tables played, bet amounts, and session durations;
• Slots and RNG game history — titles played (including slot gacor selections), spin amounts, and bonus-feature triggers;
• Togel betting history — draw markets selected, numbers chosen, and settlement results.

3.5 Technical & Device Data

• IP address, device type (mobile/desktop), operating system, and browser type;
• Geolocation data (at city level, derived from IP address — not GPS coordinates);
• Session logs, login timestamps (WIB), and session duration;
• Cookie identifiers and similar tracking technologies (see Clause 8).

3.6 Communications Data

• Contents of live-chat conversations and email correspondence with the hq777 support team;
• Responses to optional satisfaction surveys or promotions where you voluntarily provide feedback.

hq777 collects Personal Data through the following methods:

• Directly from you: When you register an account, complete the KYC verification process, make a deposit or withdrawal, place a bet, contact customer support, or respond to a promotional survey.
• Automatically via technology: When you browse or interact with the hq777 platform, our servers automatically record technical data including your IP address, device identifiers, session logs, and cookie data.
• From third-party service providers: Our KYC verification partners may return enriched identity signals (e.g., identity-document authenticity scores); our payment processors confirm transaction status and payment-method ownership; our fraud-detection providers flag anomalous behavioural patterns for review.
• From game-studio providers: Certified game studios (including Evolution Gaming, Pragmatic Play, Pocket Games Soft, and Spribe) return game-round results and session metadata to hq777's platform for settlement, dispute resolution, and responsible-gaming monitoring purposes.

hq777 uses Personal Data for the following specific purposes. Each purpose is matched to its legal basis in Clause 6.

hq777 processes your Personal Data only where a valid legal basis exists. The four legal bases relied upon by hq777 are:

• Contract performance: Processing is necessary to fulfil hq777's contractual obligations to you under the Terms & Conditions — most notably, operating your account, crediting deposits, settling bets, processing withdrawals, and providing customer support.
• Legal obligation: Processing is required to comply with applicable legal and regulatory requirements — including KYC/anti-money-laundering obligations, responsible-gaming mandates, and record-keeping requirements imposed by hq777's international gaming licence.
• Legitimate interest: Processing is necessary for hq777's legitimate business interests — including fraud detection, platform security, network abuse prevention, and anonymised analytics to improve the platform — provided those interests are not overridden by your fundamental privacy rights.
• Consent: Where hq777 relies on your consent to process data — primarily for sending promotional and marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

hq777 shares Personal Data with third parties only to the extent strictly necessary to operate the platform and fulfil its legal obligations. The categories of recipient are set out below.

7.1 Payment Processors
hq777 shares transaction reference data with the payment processors and banking partners required to credit deposits and process withdrawals. This includes the gateway operators behind BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja integrations. Payment processors act as Data Processors under written data-processing agreements and are prohibited from using transaction data for any purpose other than completing the payment.

7.2 KYC & Identity Verification Partners
hq777 employs certified third-party KYC providers to verify the authenticity of identity documents submitted during the KYC process. These providers process identity-document images and return a verification outcome to hq777. Identity images are retained by the KYC provider only for the period required by its own regulatory obligations; they are not accessible by hq777 staff beyond the initial submission.

7.3 Certified Game-Studio Providers
To deliver live casino and RNG games, hq777 passes a session token and anonymised Member identifier to the relevant game studio (e.g., Evolution Gaming, Pragmatic Play, Pocket Games Soft). Game studios return session results and game-round records to hq777. Game studios do not receive your full name, email address, or payment details.

7.4 Fraud Detection & Security Providers
hq777 uses specialised fraud-detection services to monitor transaction patterns, device fingerprints, and IP-reputation signals. These providers process technical and transaction data under strict data-processing agreements and return risk scores to hq777's compliance team for review.

7.5 Legal & Regulatory Disclosure
hq777 may disclose Personal Data to governmental authorities, law enforcement agencies, or regulators where required to do so by applicable law, by court order, or by a valid request made under the terms of hq777's international gaming licence. In such cases, hq777 will disclose the minimum data necessary to comply with the request.

7.6 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of hq777's assets, Member Personal Data may be transferred to the acquiring entity as part of the transaction. Members will be notified of any such transfer via email and via a notice on the hq777 platform at least 30 days before it takes effect, and will retain all rights set out in Clause 11 of this Policy.

hq777 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session state when you are logged in, and to collect anonymised analytics data that helps us improve the platform experience for members across Indonesia.

The cookies hq777 uses fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These cookies maintain your login session, remember your preferred language display, and enable core security features such as CSRF protection. They cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences — for example, your preferred sports league (BRI Liga 1, EPL, La Liga), your most recently visited game category, or your chosen currency display format (Rp / IDR). Disabling these cookies does not prevent you from using the platform, but you may need to re-set your preferences on each visit.
• Analytics cookies: Collect anonymised data about how Members navigate the platform — pages visited, time spent on each section, and features clicked. This data is aggregated and cannot be used to identify individual Members. hq777 uses this information solely to improve the platform's design and performance.
• Fraud-prevention cookies: Assign a pseudonymous device identifier to your browser session to support hq777's fraud-detection systems. These cookies help identify suspicious patterns — such as a single device attempting to register multiple accounts — without processing your personally identifiable information directly.

You may manage cookie preferences via your browser settings. Blocking all cookies will prevent you from logging in to your hq777 account, as session cookies are strictly necessary for authenticated access. hq777 does not use third-party advertising cookies or cross-site tracking pixels.

hq777 implements a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. The key technical and organisational measures in place include:

• Encryption in transit: All data transmitted between your device and hq777's servers is encrypted using TLS 1.2 or TLS 1.3 protocols. The connection is authenticated via a valid SSL certificate issued by a recognised Certificate Authority.
• Encryption at rest: Sensitive data fields — including KYC document references, payment-method identifiers, and personally identifiable account information — are encrypted at rest using AES-256.
• Password security: Member passwords are hashed using a strong adaptive hashing algorithm (bcrypt with a minimum cost factor of 12). Plain-text passwords are never stored or transmitted by hq777.
• Access controls: Access to Personal Data within hq777's internal systems is restricted on a strict need-to-know basis. Staff with legitimate access are required to authenticate via multi-factor authentication and are subject to role-based access controls that limit the data they can view or export.
• Network security: hq777's infrastructure is protected by enterprise-grade firewalls, intrusion-detection systems, and DDoS mitigation services. Regular vulnerability scans and penetration tests are conducted by independent security specialists.
• Incident response: hq777 maintains a documented data-breach response plan. In the event of a confirmed data breach affecting Member Personal Data, affected Members and relevant authorities will be notified within 72 hours of the breach being identified, in accordance with applicable legal requirements.

hq777 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, subject to applicable legal minimum retention periods. The retention schedule applied by hq777 is as follows:

• Account and registration data: Retained for the lifetime of the active Account, and for a minimum of five years following voluntary or enforced account closure.
• KYC and identity documents: Retained for a minimum of five years following account closure, in compliance with anti-money-laundering record-keeping obligations applicable under hq777's international gaming licence.
• Financial transaction records: Retained for a minimum of five years following the date of the transaction, for the same AML compliance reasons as above.
• Betting and gaming activity logs: Retained for a minimum of three years following the date of the event, for dispute-resolution and responsible-gaming monitoring purposes.
• Customer-support communications: Retained for two years following the close of the relevant support ticket, to facilitate the resolution of any subsequent related enquiry.
• Marketing consent records: Retained for the period of the Member's active consent, plus two years following withdrawal of consent, to demonstrate compliance with consent obligations.
• Technical and device logs (anonymised): Retained for 12 months, after which they are permanently deleted or anonymised beyond the point of re-identification.

Upon expiry of the applicable retention period, Personal Data is either securely deleted (for digital records) or shredded (for any physical documentation), using industry-standard destruction methods that prevent recovery or reconstruction.

As an hq777 member, you hold the following rights in respect of your Personal Data. To exercise any of these rights, submit a written request to [email protected], including your full registered name and Account username in the subject line. hq777 will acknowledge your request within 24 hours and respond in full within 30 calendar days.

• Right of access: You have the right to request a copy of all Personal Data held about you by hq777, including the categories of data, the purposes for which it is processed, and the recipients or categories of recipient to whom it has been disclosed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held about you. Where the inaccurate data relates to your registered name, date of birth, or payment-method details, a KYC re-verification step may be required before the correction is applied.
• Right to erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that hq777 may be required to retain certain data categories beyond your erasure request where a legal obligation — such as the AML record-keeping requirements described in Clause 10 — mandates continued retention.
• Right to restriction of processing: You have the right to request that hq777 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing based on legitimate interest and verification of the overriding grounds is pending.
• Right to data portability: You have the right to receive a copy of the Personal Data you have provided to hq777 in a structured, commonly used, machine-readable format (JSON or CSV), and to request that this data be transmitted directly to another data controller where technically feasible.
• Right to object: You have the right to object at any time to the processing of your Personal Data for direct marketing purposes — including promotional email communications. You may also object to processing based on hq777's legitimate interest, in which case hq777 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where hq777 relies on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

hq777 operates exclusively for adults aged 21 and over. The hq777 platform does not knowingly collect Personal Data from any person under the age of 21, and the registration process includes a mandatory date-of-birth verification step specifically designed to prevent minors from creating accounts.

If hq777 becomes aware — through its KYC process, a responsible-gaming referral, or any other means — that Personal Data has been collected from a person under 21 years of age, the relevant Account will be immediately suspended, all balance activity frozen, and the data associated with that Account deleted as promptly as applicable legal obligations permit.

Parents and guardians who believe that a minor in their care has registered an account on hq777, or who are concerned that a minor may be accessing the platform using a shared device, should contact the hq777 support team immediately at [email protected]. hq777 will investigate and act on any such report as a matter of priority.

hq777's primary membership base is located in Indonesia, and the platform is operated primarily for Indonesian members. However, certain technical operations — including cloud hosting, KYC verification processing, and game-studio data exchanges — involve the transfer of Personal Data to servers or processors located outside Indonesia.

Where Personal Data is transferred outside Indonesia, hq777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Indonesia. These safeguards include:

• Contractual clauses in data-processing agreements with overseas processors that impose data-protection obligations at least equivalent to those described in this Privacy Policy;
• Selection of overseas processors that are certified under internationally recognised data-protection frameworks (such as ISO/IEC 27001 information security management) or that operate in jurisdictions with adequacy decisions recognised by Indonesia's relevant regulatory authority;
• Encryption of all data in transit across international network boundaries, as described in Clause 9.

You may request details of the specific safeguards applied to any particular cross-border data transfer by submitting a written request to [email protected].

The hq777 platform may contain references to third-party game studios, sports data providers, or payment-method brands in the context of describing available services. hq777 does not include outbound hyperlinks to third-party websites within its platform pages.

Where a Member arrives at the hq777 platform via an affiliate referral link or a third-party promotional campaign, hq777 is not responsible for the data-collection practices of the referring third party. This Privacy Policy applies exclusively to data collected by hq777 once you are on the hq777 platform. We encourage you to review the privacy notices of any third-party websites you visit before providing personal information to them.

hq777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, changes in hq777's data-processing practices, or improvements to the clarity and accuracy of the Policy's content.

When a material change is made to this Privacy Policy, hq777 will notify Members via one or more of the following channels: a prominent notice displayed on the hq777 platform upon login; an email sent to the address registered on the Member's Account; or a notification via the hq777 mobile interface. The updated Policy will clearly state the revised "Last Updated" date at the top of the document.

Your continued use of the hq777 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the hq777 platform and submit a voluntary account closure request to [email protected] before the effective date of the change.

Minor amendments — such as typographical corrections, clarifications that do not alter the substance of data-processing practices, or updates to contact details — may be made without prior notice. The "Last Updated" date will always reflect the most recent revision of any kind.

hq777 takes its data-protection responsibilities seriously. For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data, please contact the hq777 Data Protection team using the details below.

• Email: [email protected] — please include "Privacy Request" in the subject line, along with your full registered name and Account username.
• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget accessible when logged in to your hq777 Account. Indonesian-speaking agents are available at all hours to assist with privacy enquiries in both English and Indonesian.
• Response commitment: All formal privacy requests will be acknowledged within 24 hours (WIB) and fully resolved within 30 calendar days of receipt. For complex requests requiring additional verification steps — such as data-portability exports or cross-system erasure requests — hq777 will provide a progress update within 15 calendar days.

This Privacy Policy was last reviewed and updated on 1 January 2026 and supersedes all previous versions published on the hq777 platform. The current version number is 3.1.