qrtoto Privacy Policy

Last Updated: January 15, 2026 | Effective Date: January 1, 2026

1. Introduction

This Privacy Policy applies to all users of the qrtoto platform, including visitors, registered Players, and anyone accessing our website, mobile applications, or related services. qrtoto is an internationally operated online gaming platform serving Players in Indonesia with sports betting, live casino, togel (Indonesia's traditional numbers lottery), slot games, and other gaming products.

By using qrtoto, you acknowledge that you have read, understood, and agreed to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this policy, you must immediately cease using qrtoto and refrain from creating an account.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your use of qrtoto.

2. Information We Collect

qrtoto collects several categories of personal information to provide our services, verify your identity, process transactions, and comply with legal and regulatory requirements. The information we collect includes:

2.1 Account Registration Information

When you create a qrtoto account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify that you are at least 21 years of age)
• Email address
• Mobile phone number
• Residential address (street address, city, province, postal code)
• Chosen username and encrypted password
• Preferred language and currency (Indonesian Rupiah / Rp / IDR)

2.2 Identity Verification (KYC) Documentation

To comply with Know Your Customer (KYC) and anti-money-laundering (AML) regulations, qrtoto requires all Players to submit identity verification documents before processing withdrawals. This includes:

• Government-issued photo ID (Indonesian National Identity Card / KTP, passport, or driver's license)
• Proof of residential address (utility bill, bank statement, or government correspondence dated within the past three months)
• Proof of payment method (bank account statement or screenshot showing account holder name and account number for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon, or registered e-wallet account for OVO, DANA, GoPay, ShopeePay, LinkAja)
• Selfie photograph holding your ID document (for enhanced verification when required)

2.3 Financial and Transaction Information

qrtoto collects information related to your financial transactions on the platform, including:

• Deposit amounts, dates, times, and payment methods used
• Withdrawal amounts, dates, times, and destination payment accounts
• Betting history (sports bets, live casino wagers, togel tickets, slot spins, and other gaming activity)
• Account balance and transaction ledger
• Bonus claims, wagering progress, and promotional activity

We do not store your full bank account numbers, e-wallet passwords, or credit card details on our servers. Payment processing is handled through secure third-party payment gateways that comply with PCI DSS (Payment Card Industry Data Security Standard) requirements.

2.4 Device and Usage Information

When you access qrtoto, we automatically collect technical information about your device and how you interact with our platform:

• IP address and geolocation data (to verify that you are accessing qrtoto from within Indonesia)
• Device type, operating system, and browser type
• Screen resolution and device identifiers
• Pages visited, features used, and time spent on the platform
• Clickstream data and navigation patterns
• Referral source (how you arrived at qrtoto)

2.5 Communications and Support Interactions

When you contact qrtoto customer support via live chat, email, or phone, we collect and store records of your communications, including:

• Support ticket content and correspondence history
• Live chat transcripts
• Phone call recordings (when applicable, with prior notice)
• Feedback, complaints, and survey responses

3. How We Use Your Data

qrtoto uses your personal information for the following purposes:

3.1 Account Management and Service Delivery

• To create and maintain your qrtoto account
• To verify your identity and age (21+ requirement)
• To process deposits, withdrawals, and financial transactions
• To manage your betting activity and account balance
• To provide customer support and respond to your inquiries

3.2 Legal and Regulatory Compliance

• To comply with Know Your Customer (KYC) and anti-money-laundering (AML) regulations
• To detect and prevent fraud, money laundering, and other illegal activities
• To respond to legal requests, court orders, or regulatory inquiries
• To enforce our Terms and Conditions and investigate violations

3.3 Marketing and Promotions

• To send you promotional offers, bonus announcements, and marketing communications (with your consent)
• To personalize your experience on qrtoto based on your betting preferences and activity
• To conduct market research and analyze Player behavior to improve our services

You can opt out of marketing communications at any time by adjusting your account preferences or contacting customer support. Opting out of marketing does not affect transactional or service-related communications (e.g., deposit confirmations, withdrawal updates, account security alerts).

3.4 Platform Improvement and Analytics

• To monitor and analyze platform performance, identify technical issues, and optimize user experience
• To conduct A/B testing and product development research
• To track gaming trends and adjust our product offerings accordingly

4. Data Sharing and Disclosure

qrtoto does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data in the following circumstances:

4.1 Service Providers and Business Partners

We share your personal information with trusted third-party service providers who assist us in operating qrtoto, including:

• Payment processors (for deposit and withdrawal transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja)
• KYC verification providers (for identity document validation and age verification)
• Game providers (Evolution Gaming, Ezugi, Pragmatic Play, Microgaming, NetEnt, Spribe, and other licensed game studios)
• Hosting and infrastructure providers (for secure data storage and platform operation)
• Customer support platforms (for live chat and ticketing systems)
• Analytics and marketing tools (Google Analytics, Facebook Pixel, and similar services)

All third-party service providers are contractually obligated to maintain the confidentiality and security of your personal information and may only use it for the specific purposes for which it was disclosed.

4.2 Legal and Regulatory Authorities

qrtoto may disclose your personal information to law enforcement agencies, regulators, courts, or other governmental authorities when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, subpoena, or court order
• Protect the rights, property, or safety of qrtoto, our Players, or the public
• Detect, prevent, or investigate fraud, money laundering, or other illegal activities
• Enforce our Terms and Conditions or other agreements

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring, your personal information may be transferred to the acquiring entity or successor organization. You will be notified via email and/or a prominent notice on the qrtoto website of any such change in ownership or control of your personal information.

5. Cookies and Tracking Technologies

qrtoto uses cookies, web beacons, and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you when you return to qrtoto.

5.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly (e.g., session management, login authentication, security features). These cannot be disabled.
• Performance Cookies: Collect anonymous information about how Players use qrtoto (e.g., pages visited, time spent on site, error messages encountered). Used to improve platform performance.
• Functional Cookies: Remember your preferences and settings (e.g., language selection, currency preference, username auto-fill).
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure the effectiveness of promotional campaigns.

5.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies, but doing so may limit your ability to use certain features of qrtoto. For more information on managing cookies, consult your browser's help documentation.

6. Data Security Measures

qrtoto employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• SSL/TLS Encryption: All data transmitted between your device and qrtoto's servers is encrypted using 256-bit SSL (Secure Socket Layer) technology.
• Secure Payment Gateways: All financial transactions are processed through PCI DSS-compliant payment gateways. qrtoto does not store your full bank account numbers or credit card details.
• Two-Factor Authentication (2FA): Optional 2FA is available to all Players for enhanced account security.
• Regular Security Audits: qrtoto undergoes regular security assessments and penetration testing by independent third-party cybersecurity firms.
• Access Controls: Personal information is accessible only to authorized qrtoto personnel who require it to perform their job functions. All employees are bound by confidentiality agreements.
• Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and real-time intrusion detection systems.

Despite these measures, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. If you suspect any unauthorized access to your account, notify qrtoto customer support immediately at [email protected] (plain text, not clickable).

7. Data Retention

qrtoto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained for the duration of your active account plus seven years after account closure (to comply with financial record-keeping requirements).
• KYC Documentation: Retained for seven years after the date of collection (anti-money-laundering compliance).
• Transaction Records: Retained for seven years (financial audit and tax compliance).
• Support Communications: Retained for three years after the last interaction.
• Marketing Data: Retained until you opt out of marketing communications or request deletion.

After the applicable retention period expires, your personal information will be securely deleted or anonymized such that it can no longer be used to identify you.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information qrtoto holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information.
• Right to Deletion: You may request deletion of your personal information, subject to legal and regulatory retention requirements.
• Right to Data Portability: You may request a copy of your personal information in a structured, machine-readable format.
• Right to Object: You may object to certain processing activities, including direct marketing.
• Right to Withdraw Consent: If processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, contact qrtoto customer support at [email protected] (plain text, not clickable). We will respond to your request within 30 days. Certain requests may require identity verification to protect your privacy.

9. Children's Privacy

qrtoto is intended exclusively for adults aged 21 years or older. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that we have collected personal information from a person under 21, we will immediately delete that information and suspend the associated account. If you believe a person under 21 has created an account on qrtoto, please contact us immediately at [email protected] (plain text, not clickable).

10. International Data Transfers

qrtoto operates internationally and may transfer your personal information to servers located outside Indonesia for processing and storage. When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy. By using qrtoto, you consent to the transfer of your personal information to countries that may have different data protection laws than Indonesia.

11. Changes to This Privacy Policy

qrtoto reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. When we make significant changes, we will notify you via email (to the address associated with your account) and/or post a prominent notice on the qrtoto website. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

Continued use of qrtoto after such changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your personal information.

12. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or qrtoto's data practices, please contact our Data Protection team:

• Email (plain text, not clickable): [email protected]
• Subject Line: Privacy Policy Inquiry
• Live Chat: Available 24/7 on the qrtoto website in Bahasa Indonesia and English
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours

For urgent account security matters, including suspected unauthorized access or data breaches, please contact us immediately via live chat.