papaqq is committed to protecting the personal information of every player on our platform. This Policy explains exactly what data we collect, why we collect it, how we use it, and the rights available to you as an Indonesian-resident user.
Last Updated: January 2026Your Privacy Matters: This Privacy Policy ("Policy") describes how papaqq ("Company", "we", "us", "our") collects, processes, stores, and protects the personal data of players ("you", "your") who access or use the Platform at https://papaqq.cam. By creating an account or continuing to use our services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
papaqq operates an online casino and sports betting platform designed specifically for players resident in Indonesia. In the course of providing these services, we necessarily collect and process personal information about our users. We take this responsibility seriously and have designed our data practices to be transparent, proportionate, and aligned with internationally recognized privacy principles.
This Policy applies to all personal data collected through the papaqq website, mobile-optimized interfaces, customer support channels, and any other touchpoint where you interact with us directly. It does not apply to third-party websites, applications, or services that may be linked to or integrated with the Platform — those entities operate under their own independent privacy policies.
We encourage you to read this Policy carefully and in full. If you have questions about any section, our Data Protection team is reachable at [email protected] and will respond within five (5) business days.
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, either alone or in combination with other data. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | papaqq, as the entity that determines the purposes and means of processing Personal Data collected on the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of papaqq, under written instructions and binding data-processing agreements. |
| "KYC Data" | Identity and address verification documents submitted during the Know Your Customer process, including KTP scans, passport copies, and proof-of-address documents. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose. |
| "Platform" | The papaqq website at https://papaqq.cam, its mobile interfaces, APIs, and all associated digital services. |
papaqq collects the minimum data necessary to operate the Platform safely, comply with applicable obligations, and deliver a high-quality gaming experience. The categories of Personal Data we collect include:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, KTP number, passport number | Account registration, KYC verification, age confirmation (21+) |
| Contact Data | Email address, mobile phone number, residential address in Indonesia | Account communication, support, promotional notifications (with consent) |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, etc.), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history | Transaction processing, fraud prevention, AML compliance |
| Gaming Data | Bet history, game sessions, win/loss records, wagering patterns, bonus usage | Service delivery, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, cookies and similar identifiers | Platform security, fraud detection, performance optimization |
| Communications Data | Live chat transcripts, support email correspondence, WhatsApp message content | Customer support, quality assurance, dispute investigation |
| Preference Data | Preferred language, game category preferences, notification settings, self-imposed limits | Platform personalization, responsible gaming tools |
We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data unless legally required or directly relevant to a responsible gaming assessment conducted with your explicit consent.
4.1 Directly from You. The majority of your Personal Data is collected directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion. You choose what information to provide; however, withholding required fields may prevent account creation or certain services from being accessible.
4.2 Automated Technologies. When you access the Platform, our servers automatically record Technical Data including your IP address, browser fingerprint, and session activity. We deploy first-party cookies and similar tracking technologies to maintain session integrity, detect suspicious activity, and measure Platform performance. For full details, see Section 10 (Cookies) below.
4.3 Third-Party Sources. We may supplement your profile with data received from identity verification partners, fraud-prevention databases, and payment processors to fulfill our KYC and Anti-Money Laundering (AML) obligations. Where we receive data from third parties, we ensure those providers are contractually bound to lawful data-sharing standards.
4.4 Inferences. papaqq may derive inferences from the data described above — for example, identifying unusual wagering patterns that may indicate problem gambling — to deliver responsible gaming tools and protect the integrity of the Platform.
papaqq processes your Personal Data only where a valid legal basis exists. The primary bases on which we rely are:
papaqq uses the Personal Data collected for the following specific purposes:
We will not use your Personal Data for any purpose materially different from those listed above without first providing you with clear notice and, where required, obtaining your consent.
7.1 Internal Sharing. Personal Data is accessible only to papaqq personnel who require it to perform their specific job functions. Access is governed by role-based permissions and enforced through technical controls. All staff with access to Personal Data are bound by confidentiality obligations.
7.2 Third-Party Service Providers. papaqq engages third-party Data Processors to support Platform operations. These include:
All third-party processors are engaged under written data-processing agreements that restrict their use of your data strictly to the services they provide to papaqq and prohibit any onward sharing or independent commercial use.
7.3 Legal Disclosures. papaqq may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a binding legal order, or to protect the rights, property, or safety of the Company, its players, or the public. We will notify you of such disclosures where legally permitted to do so.
7.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of papaqq's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify affected users via their registered email address prior to any such transfer and will ensure the receiving entity is bound by privacy obligations no less protective than those in this Policy.
7.5 No Sale of Data. papaqq does not sell, rent, or trade your Personal Data to third parties for their independent marketing or commercial purposes. Period.
8.1 Retention Periods. We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account and Identity Data | Duration of account plus 5 years after closure, to meet AML and regulatory record-keeping requirements |
| Financial and Transaction Data | 7 years from the date of each transaction, in accordance with applicable financial record-keeping obligations |
| KYC Documents | 5 years from account closure or last active date, whichever is later |
| Gaming and Bet History | 3 years from account closure, for dispute resolution and responsible gaming monitoring purposes |
| Support Communications | 3 years from the date of each interaction |
| Marketing Consent Records | Until consent is withdrawn, plus 2 years thereafter as evidence of consent history |
| Technical / Log Data | 13 months from collection, unless retained longer for active fraud investigations |
8.2 Deletion. Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized so that it can no longer be attributed to any individual. Anonymized aggregated data may be retained indefinitely for statistical and analytical purposes.
papaqq implements a layered security architecture designed to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our technical and organizational measures include:
Data Breach Response: In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, papaqq will notify affected players without undue delay and no later than 72 hours after becoming aware of the breach. Notification will be delivered to your registered email address and will describe the nature of the breach, data categories affected, likely consequences, and remedial measures taken.
While we implement industry-standard security measures, no digital system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for ensuring your own device security. If you suspect unauthorized access to your account, contact [email protected] immediately.
10.1 What Are Cookies. Cookies are small text files placed on your device by a website you visit. papaqq uses first-party cookies and similar technologies — including session tokens, local storage objects, and pixel tags — to operate and improve the Platform.
10.2 Types of Cookies We Use.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain session integrity, authenticate logged-in users, prevent CSRF attacks. Cannot be disabled without breaking core functionality. | Session / up to 24 hours |
| Functional | Remember language preferences, display settings, and responsible gaming limit configurations between sessions. | Up to 12 months |
| Analytics | Collect anonymized data on page visits, navigation paths, and feature usage to improve Platform performance. | Up to 13 months |
| Security | Detect and prevent fraudulent logins, bot activity, and multi-account creation attempts. | Up to 30 days |
10.3 Managing Cookies. You may control cookie settings through your browser's privacy preferences. Disabling strictly necessary cookies will impair or prevent your ability to log in and use the Platform. Disabling analytics cookies will not affect your gaming experience. Note that clearing cookies will log you out of any active session.
As a user of papaqq's Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within 30 days and will not charge a fee for reasonable requests.
Where papaqq is unable to fulfill a rights request — for example, where legal retention obligations require us to retain data — we will explain the reason in writing within the 30-day response window.
papaqq's services are strictly intended for adults aged 21 and over. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Account registration requires confirmation that you meet this age threshold, and our KYC process verifies age through government-issued identity documents.
If we become aware that Personal Data has been collected from a person under 21 years of age — whether through misrepresentation during registration or any other means — we will immediately suspend the relevant account, void all associated balances and bonuses, and permanently delete the minor's Personal Data from our systems. Any deposited funds from a minor's account will be returned to the verified payment source after deduction of any bonuses claimed.
If you believe that a minor has registered an account on papaqq, please contact us immediately at [email protected] with the subject line "Minor Account Report" so that we can investigate and act promptly.
papaqq reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When we make material changes, we will:
Your continued use of the Platform after the effective date of any revision constitutes your acknowledgment and acceptance of the updated Policy. If you do not agree with the changes, you should discontinue use of the Platform and request account closure before the effective date. We encourage you to review this page periodically to stay informed about how papaqq protects your Personal Data.
For all privacy-related inquiries, rights requests, or complaints regarding papaqq's data practices, please reach our Data Protection team through the following channels. All communications must be in English or Indonesian; responses will be provided in English.
Data Protection Inquiries:
[email protected] — include the subject line "Privacy Inquiry" for priority routing. (Plain text — not a clickable link.)
Response Time:
Acknowledgment within 24 hours; substantive response within 5 business days for general inquiries and within 30 days for formal data rights requests.
Support Hours:
Live chat available 24/7 via the Platform. Email support operates 08:00–22:00 WIB, seven days a week, including Indonesian public holidays with reduced staffing during Idul Fitri and Nyepi.
Complaints:
If you are dissatisfied with our response to a privacy complaint, you may escalate to the relevant data protection authority in your jurisdiction. papaqq commits to cooperating fully with any lawful regulatory investigation.
Our data protection commitments go beyond legal compliance. Every measure below reflects our genuine commitment to player trust and platform integrity.
Every data transmission between your device and papaqq's servers is protected by 256-bit SSL/TLS encryption — the same standard used by international banks and financial institutions handling Indonesian Rupiah transactions.
papaqq will never sell, rent, or trade your personal information to third parties for commercial purposes. Your data exists solely to power your gaming experience and fulfill our compliance obligations — nothing more.
You retain comprehensive rights over your Personal Data — access, rectification, erasure, portability, and the ability to object to processing. Submit any request to our Data Protection team and receive a response within 30 days.
We apply the principle of data minimization rigorously — collecting only what is genuinely necessary to operate your account, process IDR transactions, and meet our KYC obligations. No unnecessary fields, no speculative harvesting.
Every category of personal data is assigned a defined maximum retention period. When that period expires, data is securely deleted or irreversibly anonymized — it is never kept indefinitely simply because storage is cheap.
In the unlikely event of a data breach affecting your information, papaqq will notify you directly at your registered email address within 72 hours — clearly describing what happened, what data was involved, and what steps we have taken.
Our FAQ covers common questions about account security, data handling, and platform policies in plain language. For anything not covered there, our support team is available around the clock.
Visit Our FAQ Terms & Conditions Responsible Gaming