Privacy Policy — vvip55

vvip55 operates Indonesia's premier online gaming platform, accessible at https://vvip55.net, providing sports betting, live casino, slot games, Andar Bahar, and capsa susun (the Indonesian card-stacking game) to adult players across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and beyond. In the course of providing these Services, vvip55 necessarily collects and processes certain personal data about the individuals who register as Members and interact with the Platform.

This Privacy Policy is designed to give you a clear, honest, and complete account of our data practices. We have written it in plain English — not dense legalese — because we believe every Member deserves to understand exactly what happens to their information. Where technical or legal terms are unavoidable, we define them in Clause 2.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, which together form the complete legal framework governing your relationship with vvip55.

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, national ID number, email address, device identifiers, IP address, and payment account details.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, transmission, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, vvip55.
• "Data Processor" means a third party that processes personal data on behalf of vvip55 under a data processing agreement (e.g., payment gateways, KYC verification providers, cloud infrastructure providers).
• "Member" means any individual who has completed the vvip55 registration process and holds an active account on the Platform.
• "KYC" (Know Your Customer) means the identity and age verification process required before certain account actions — including withdrawals — can be approved.
• "Cookie" means a small text file placed on your device by the Platform to enable session management, preference storage, and analytics.
• "Platform" means the vvip55 website at https://vvip55.net and any associated mobile-optimised interface or application.

vvip55 collects the following categories of personal data in the course of providing the Services:

vvip55 collects personal data through the following channels:

• Direct Submission: Data you actively provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting our support team.
• Automated Technical Collection: Data captured automatically when you access the Platform, including your IP address, device identifiers, and browser fingerprint, via server logs and session management systems.
• Cookies and Similar Technologies: Session cookies used to maintain your authenticated login state, and first-party analytics cookies used to measure aggregated platform performance. See Clause 10 for full cookie details.
• Payment Processors: Confirmation data returned by Indonesian bank transfer gateways and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when a transaction is processed, used solely to reconcile your account balance.
• KYC Verification Providers: Where vvip55 engages a third-party KYC provider to validate identity documents, that provider may return verification results and risk scores to vvip55 as part of the identity confirmation process.
• Fraud Prevention Systems: Automated risk-scoring signals from fraud detection tools, used to identify potentially suspicious account activity and protect the integrity of the Platform for all Members.

vvip55 processes your personal data for the following defined purposes only:

• Account Creation and Management: To register your account, verify your identity and age (21+), maintain your account settings, and provide you with access to the Services.
• Service Delivery: To process your bets across our sportsbook (including BRI Liga 1, EPL, Champions League, and badminton markets), operate live casino sessions, deliver slot game experiences, and settle all wagering outcomes accurately.
• Payment Processing: To process deposit and withdrawal transactions via local Indonesian bank transfers and e-wallets, reconcile your account balance, and maintain financial records as required by our compliance obligations.
• KYC and Fraud Prevention: To verify your identity, confirm that you meet the 21+ age requirement, detect and prevent fraudulent activity, money laundering, and multi-accounting, and comply with applicable financial crime prevention obligations.
• Customer Support: To respond to your enquiries, resolve disputes, process responsible gaming requests, and maintain records of support interactions for quality assurance purposes.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling, enforce self-exclusion and deposit limit settings you have activated, and fulfil our duty of care obligations toward Members.
• Legal and Regulatory Compliance: To meet record-keeping obligations, respond to lawful information requests from authorities, and enforce our Terms & Conditions.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game selection, and user experience — this analysis does not involve decisions made solely about individual Members without human oversight.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal promotions (such as Idul Fitri, Ramadhan, and Indonesian Independence Day special events) where you have opted in to receive such communications. You may withdraw consent at any time by contacting support.

vvip55 processes your personal data on the following legal grounds, depending on the specific purpose:

• Contractual Necessity: Processing required to perform the contract between vvip55 and the Member — including account registration, service delivery, and payment processing — is carried out on the basis that it is necessary to fulfil that contract.
• Legal Obligation: Processing required to comply with applicable law — including KYC verification, anti-money laundering record-keeping, and responding to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and aggregated analytics is carried out on the basis of vvip55's legitimate interests, balanced against the privacy rights of Members. We have assessed that these interests are not overridden by Members' fundamental privacy rights.
• Consent: Processing for direct marketing communications and optional personalisation features is carried out on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

vvip55 does not sell, rent, or trade your personal data. We share your information only in the following limited and controlled circumstances:

• Payment Service Providers: We share the minimum financial and identity data necessary with Indonesian bank payment gateways and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals. These providers process your data as independent controllers under their own privacy policies.
• KYC and Identity Verification Partners: Where necessary, we transmit identity documents and verification requests to certified KYC service providers. These providers are bound by strict data processing agreements and may only use your data for the specific verification task.
• Game Content Studios: Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive a session token and anonymised player identifier to authenticate your game session. They do not receive your full identity data or payment details.
• Fraud Prevention and Security Services: Anonymised risk signals may be shared with fraud-detection platforms to identify unusual patterns across the industry. No directly identifying personal data is transmitted beyond what is necessary for the specific risk assessment.
• Cloud Infrastructure Providers: vvip55's Platform is hosted on enterprise-grade cloud infrastructure. The infrastructure provider processes data solely as a data processor under our instructions and has no independent right to use Member data.
• Legal and Regulatory Authorities: vvip55 will disclose personal data to law enforcement, financial regulators, or courts where required to do so by a valid legal order, warrant, or binding regulatory direction. Where legally permissible, we will notify the affected Member before such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of vvip55's business, Member data may be transferred to the acquiring entity. Affected Members will be notified by email at least 30 days in advance and given the opportunity to close their account before the transfer takes effect.

vvip55 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law. The following retention schedule applies:

At the end of the applicable retention period, personal data is securely and permanently deleted or irreversibly anonymised so that it can no longer be linked to any individual.

vvip55 implements a comprehensive, layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data in transit between your device and vvip55 servers is encrypted using industry-standard Transport Layer Security. This applies to login sessions, game play, and all financial transactions.
• Encryption at Rest: Sensitive data fields — including identity document scans, payment account numbers, and authentication credentials — are stored in encrypted form within our database infrastructure.
• Access Controls: Access to personal data within vvip55's internal systems is strictly limited on a need-to-know basis. All staff with access to Member data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication (2FA): vvip55 strongly recommends that Members activate 2FA on their accounts. 2FA adds a second layer of authentication beyond your password, significantly reducing the risk of unauthorised account access.
• Intrusion Detection and Monitoring: Our infrastructure is monitored around the clock (24/7) for anomalous activity, including suspicious login patterns, unusual withdrawal requests, and potential data exfiltration attempts.
• Penetration Testing: vvip55 commissions periodic independent security assessments, including penetration testing of our web application and infrastructure, to identify and remediate vulnerabilities before they can be exploited.

vvip55 uses a minimal set of cookies and similar technologies on the Platform. We do not use third-party advertising networks or cross-site tracking cookies. The following cookie types are in use:

You can manage or delete cookies at any time through your browser's settings menu. Please note that disabling essential session or security cookies will prevent you from logging in to the Platform and using the Services.

As a vvip55 Member, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at the email address in Clause 15:

• Right of Access: You may request a copy of all personal data vvip55 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 calendar days of your verified request.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data held about you. Where the data in question affects your KYC verification status, we may require supporting documentation before making the correction.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) you object to processing and there are no overriding legitimate grounds. This right does not apply where vvip55 is required to retain data to comply with a legal obligation.
• Right to Restriction of Processing: You may request that vvip55 restricts the processing of your personal data — meaning we continue to store it but temporarily suspend active use — in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a structured copy of your personal data in a portable format for transfer to another service provider.
• Right to Object: You may object at any time to processing based on legitimate interests, including profiling for responsible gaming monitoring. If you object, vvip55 will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The vvip55 Platform is strictly restricted to adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes a mandatory age declaration, and all withdrawal requests are subject to KYC age verification before processing.

If vvip55 becomes aware — through any means, including a report from a third party or the results of a KYC review — that a Member is under the age of 21, the following steps will be taken immediately:

• The account will be suspended pending investigation.
• All pending and historical bets placed while underage will be voided.
• Any deposited funds (excluding bonus funds) that can be returned to the original payment source will be refunded.
• The account will be permanently closed and all associated personal data retained only for the minimum period required by law, then securely deleted.

If you are a parent or guardian and believe that a minor may have accessed vvip55 using your details or a falsified identity, please contact us immediately at the email address in Clause 15 so we can take prompt action.

The vvip55 Platform may contain references to third-party services such as Indonesian bank transfer portals (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja), and game studio interfaces provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft.

When you interact with these third-party services — for example, when completing a bank transfer via your online banking portal — you are subject to that provider's own privacy policy and terms of service. vvip55 has no control over, and accepts no responsibility for, the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party service you use in connection with your vvip55 account.

vvip55 does not embed third-party social media widgets, advertising networks, or cross-site tracking pixels on the Platform. Any reference to social media platforms in our marketing communications is informational only and does not involve data sharing with those platforms.

vvip55 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The effective date shown at the top of this page will be updated each time a revision is published.

Where a change is material — meaning it significantly affects how your personal data is used or the rights available to you — vvip55 will provide at least 14 calendar days' advance notice by email to your registered address before the change takes effect. For minor, clarificatory changes that do not affect Members' substantive rights, the updated policy will be published without advance notice.

Your continued use of the Platform after a revised Privacy Policy has come into effect constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must stop using the Platform and contact us to close your account and request deletion of your personal data where legally permissible.

The current version of this Privacy Policy is always accessible at https://vvip55.net/privacy-policy. We recommend reviewing this page periodically.

For any privacy-related enquiries, including requests to exercise your data rights under Clause 11, please contact the vvip55 Data Protection team through the following channel:

For responsible gaming concerns — including activating self-exclusion, setting deposit limits, or requesting a temporary time-out — please visit our Responsible Gaming page or contact support directly and ask for a responsible gaming review.

For general account or service enquiries, please visit our FAQ page, which covers the most common questions about deposits, withdrawals, KYC verification, and bonuses.