Your privacy matters to us. This policy explains exactly what personal data qris88 collects, why we collect it, how we use it, and the rights you hold over your information as a player based in Indonesia.
qris88 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the qris88 Platform at https://qris88.app (the "Platform"). This Privacy Policy ("Policy") describes the categories of personal information we collect, the purposes for which we process it, the parties with whom we may share it, and the rights available to you as a data subject.
This Policy applies to all users of the Platform, including registered Players, visitors who browse without an account, and any individual who contacts qris88 customer support. By accessing the Platform, registering an account, or otherwise interacting with our Services, you acknowledge that you have read and understood this Policy.
This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference into your agreement with qris88. In the event of any conflict between this Policy and the Terms & Conditions on matters of data processing, this Policy shall prevail.
qris88 serves players primarily located in Indonesia, including major cities such as Jakarta, Surabaya, Medan, Bandung, Bali, and Yogyakarta. Where applicable, this Policy reflects the data protection principles relevant to the Indonesian market context and internationally recognised best practices for online gaming platforms.
For the purposes of this Policy, qris88 acts as the data controller in respect of all personal data collected through the Platform. As data controller, qris88 determines the purposes and means of processing your personal information.
qris88 operates as an internationally licensed and regulated online gaming platform. Our registered operating entity is responsible for all data processing activities described in this Policy. All data-related enquiries, requests, and complaints should be directed to our dedicated privacy team via the contact details set out in Section 16 of this Policy.
Where qris88 engages third-party processors — such as payment service providers, KYC verification bureaus, or fraud detection platforms — those parties act as data processors on our behalf, bound by contractual obligations that are consistent with this Policy and applicable data protection standards.
qris88 collects only the personal data that is necessary to provide the Services safely, fairly, and in compliance with our operational requirements. The categories of data we collect are set out in the table below:
| Category | Examples of Data Collected | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP / Passport), gender | Yes — required for KYC |
| Contact Data | Email address, mobile phone number (Indonesian or international), registered city | Yes — required for registration |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction records in IDR | Yes — required for deposits and withdrawals |
| Account Data | Username, encrypted password, account creation date, balance history, bonus records, responsible gaming settings | Yes — core account data |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps, connection logs | Collected automatically |
| Usage Data | Pages visited, games played, wager amounts, game session durations, feature interactions, search queries within the Platform | Collected automatically |
| Communications Data | Live chat transcripts, support email content, in-account messaging records, feedback submissions | Collected when you contact us |
| Verification Documents | Scanned or photographed copies of your Indonesian KTP or passport; bank statement screenshots; e-wallet ownership confirmations | Yes — required for KYC withdrawal clearance |
We do not intentionally collect any special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs) unless voluntarily disclosed by the player in the context of a responsible gaming support interaction, in which case such data is processed solely for the purpose of providing the requested welfare support.
The majority of personal data we hold is provided directly by you during the account registration process, when completing KYC verification, when making deposits or withdrawal requests, or when contacting our customer support team. You control what information you provide, subject to the mandatory requirements for account creation and identity verification described in Section 3.
When you access the Platform, our servers and analytics infrastructure automatically collect Technical Data and Usage Data. This includes your IP address (which may indicate your approximate geographic location, confirming Indonesia-based access), device fingerprint, browser specifications, and records of your interactions with Platform features. This data is collected via server logs, session cookies, and analytics tools as further described in Section 11.
qris88 may receive data about you from trusted third-party sources in the following circumstances:
qris88 processes your personal data only for specific, documented purposes. The table below maps each processing purpose to the relevant data categories used:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity Data, Contact Data, Account Data |
| Age verification and eligibility confirmation (21+) | Identity Data, Verification Documents |
| KYC compliance and identity verification | Identity Data, Financial Data, Verification Documents |
| Processing deposits and withdrawals in IDR | Financial Data, Identity Data, Account Data |
| Delivering gaming services and maintaining game records | Account Data, Usage Data, Technical Data |
| Fraud prevention, AML screening, and platform security | Technical Data, Financial Data, Identity Data, Usage Data |
| Customer support and dispute resolution | Identity Data, Account Data, Communications Data |
| Responsible gaming monitoring and player welfare | Account Data, Usage Data, Communications Data |
| Personalised promotions and bonus offers | Account Data, Usage Data |
| Platform analytics and product improvement | Technical Data, Usage Data (aggregated and anonymised) |
| Legal compliance and regulatory obligations | All categories where required by applicable law |
qris88 does not sell, rent, or trade your personal data to third-party marketers. We do not use your data for any purpose that is incompatible with the purposes listed in this section without first obtaining your explicit consent.
Each processing activity carried out by qris88 is grounded in one or more recognised legal bases, as summarised below:
qris88 shares personal data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include:
qris88 may disclose your personal data to governmental authorities, law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or in response to a lawful request. qris88 will, where legally permissible, notify you of any such request prior to disclosure.
In the event that qris88 undergoes a merger, acquisition, sale of assets, or other corporate restructuring, your personal data may be transferred to the acquiring or successor entity as part of that transaction. We will notify you via email or a prominent Platform notice prior to any such transfer, and the successor entity will be required to honour the commitments made in this Policy.
qris88 does not sell, rent, lease, or otherwise commercialise your personal data to any third party for their own marketing or commercial purposes. This commitment applies regardless of the jurisdiction or context in which the request is made.
As an internationally operating platform serving players primarily in Indonesia, qris88 may transfer certain personal data to servers or processors located outside of Indonesia. Such transfers may occur when game software providers host infrastructure in Europe, Asia-Pacific, or other regions, or when cloud hosting services operate distributed data centres across multiple territories.
Where personal data is transferred internationally, qris88 takes appropriate measures to ensure that the transfer is subject to adequate safeguards, including contractual clauses that require the receiving party to protect your data to a standard consistent with this Policy and internationally recognised data protection principles.
All data transmitted between your device and qris88 servers — including across any international transfer — is protected at all times by 256-bit SSL/TLS encryption. Your financial data and identity documents are never transmitted in plain text under any circumstances.
qris88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following retention periods apply as a general guide:
Following the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with qris88's internal data disposal procedures.
qris88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:
While qris88 maintains robust security infrastructure, no digital platform can guarantee absolute security. You are responsible for keeping your Account credentials confidential and for notifying us immediately if you suspect unauthorised access to your Account. Enable two-factor authentication in your Account settings for an additional layer of protection.
qris88 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session state, and gather analytics data to improve our Services. The categories of cookies we use are described below:
These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, security tokens, and load-balancing identifiers. Without these cookies, core features including login, game loading, and the cashier cannot operate.
These cookies remember your preferences such as language settings, preferred payment method display, and responsible gaming notification settings, allowing the Platform to provide a more personalised experience on return visits.
qris88 uses anonymised analytics cookies to understand how Players interact with the Platform — including which pages receive the most visits, which features are most frequently used, and where users encounter navigation difficulties. This data is used exclusively for internal product improvement and is not shared with third-party advertisers. The analytics data collected does not identify you as an individual.
You may control non-essential cookies through your browser settings at any time. Most modern browsers allow you to block or delete cookies via their settings menus. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Your cookie preferences can also be updated at any time by contacting qris88 support.
As a data subject, you hold a number of rights in relation to the personal data qris88 holds about you. These rights are described below. To exercise any of these rights, please contact our privacy team using the details in Section 16. We will respond to all verified requests within 30 days.
Some rights are subject to limitations. For example, the right to erasure cannot override our legal obligation to retain financial transaction records and KYC documents for the minimum statutory retention periods. We will always explain any applicable limitation when responding to your request.
qris88 is strictly intended for adults aged 21 years and older. The Platform does not knowingly collect personal data from individuals under the age of 21. Age verification is performed as a mandatory step of the KYC process for all Accounts prior to the processing of any Withdrawal.
If qris88 becomes aware that personal data has been collected from an individual who is under 21 years of age, that Account will be immediately suspended, all related data will be securely deleted to the extent permitted by law, and any balance held in the Account will be handled in accordance with applicable regulatory requirements.
If you are a parent or guardian and believe that a minor in your care has registered an Account on the Platform, please contact us immediately at the details provided in Section 16 and we will take prompt remedial action.
21+ Only. By accessing or using the qris88 Platform, you represent and warrant that you are at least 21 years of age. Attempting to register as a minor is a violation of the qris88 Terms & Conditions and may be referred to appropriate authorities.
The qris88 Platform integrates with third-party game software studios, payment gateways, and infrastructure providers as described throughout this Policy. While qris88 takes reasonable steps to ensure that all third-party integrations meet acceptable data protection standards, we are not responsible for the privacy practices of third-party operators whose services are accessed through or alongside our Platform.
qris88 does not include outbound hyperlinks to external websites within the Platform's main content areas. Any third-party data processing that occurs as part of our integrated services — such as live dealer game delivery through Evolution Gaming or Pragmatic Live — is governed by the data processing agreements in place between qris88 and those providers, which require them to process Player data only as instructed by qris88 and in accordance with this Policy.
qris88 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new purpose of processing — we will provide advance notice to registered Players via email and a prominent in-Platform notification at least 14 days before the changes take effect.
Non-material updates, such as clarifications of existing language or corrections of typographical errors, may be applied without advance notice. The "Last Updated" date displayed at the top of this document will always reflect the date of the most recent revision.
Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any revised provisions, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.
For any questions, concerns, or requests relating to this Privacy Policy or the personal data qris88 holds about you, please contact our privacy team through any of the following channels:
When submitting a privacy request, please provide sufficient information to allow us to verify your identity before we action the request. This is necessary to protect your personal data from unauthorised access by third parties claiming to act on your behalf.
qris88's privacy and customer support teams include Indonesian-speaking specialists available 24/7, 365 days a year — including Indonesian public holidays such as Idul Fitri, Indonesian Independence Day (17 August), Nyepi, and throughout Ramadhan.
Beyond the legal text, here is what our privacy commitments mean in practical terms for every player on the Platform.
Every piece of data transmitted between your device and qris88 — whether you are logging in from Jakarta, processing a GoPay withdrawal, or uploading your KTP for KYC — is protected by 256-bit SSL/TLS encryption identical to that used by Indonesia's leading banks.
qris88 has a firm, unconditional policy against selling or renting your personal data to third-party marketers. Your information is used solely to deliver and improve the qris88 service experience — never to generate revenue by commercialising your profile.
Every Account undergoes mandatory age and identity verification before any withdrawal is processed. Our KYC system accepts Indonesian KTP and passports, ensuring that only eligible adults aged 21 and above can access real-money Services on the Platform.
qris88 documents every category of data we collect and every purpose for which we use it. There are no hidden processing activities. Our data table in Section 3 and the purpose mapping in Section 5 give you a complete picture of exactly what we know about you and why.
You are never a passive subject of data processing at qris88. You hold eight distinct data rights — including access, rectification, erasure, and portability — all of which you can exercise at any time by contacting our dedicated privacy team at [email protected].
Our customer support and privacy teams include native Indonesian-speaking specialists available around the clock, every day of the year — including during Ramadhan, Idul Fitri, and other Indonesian public holidays — ready to assist with any data-related query or request.
qris88 combines top-tier data protection with Indonesia's best online casino and sportsbook experience. Explore our games, review our FAQ, or log in to your account today.