Privacy Policy — vip8

1 Introduction

vip8 ("we", "us", "our", "the Platform") operates the online gaming and sports betting platform accessible at https://vip8.beer. This Privacy Policy applies to all Players, visitors, and users who interact with the Platform in any capacity, whether by browsing the site, registering an account, making a deposit, placing a wager, or contacting our customer support team.

This Policy is intended to provide you with a clear and transparent account of our data practices. If you have questions about any aspect of this document, you are encouraged to contact our Data Protection contact at [email protected] before using the Platform.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between vip8 and its Players.

2 Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, national ID number, email address, phone number, bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means vip8, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of vip8 under a written agreement, such as payment processors or KYC verification providers.
• "Player" / "User" means any registered account holder or visitor to the vip8 Platform.
• "KYC" means Know Your Customer — the identity and age verification procedures conducted by vip8 as required under its anti-money laundering obligations.
• "Cookies" means small text files stored on your device by your browser when you visit the Platform, used to maintain session state and collect analytics data.

3 Data We Collect

vip8 collects the following categories of Personal Data from Players and site visitors:

4 How We Collect Your Data

4.1 Information You Provide Directly

The majority of Personal Data vip8 holds is information you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, claim a bonus, contact customer support, or update your profile settings. We only request information that is necessary for the specific purpose at hand.

4.2 Automatically Collected Data

When you visit the vip8 Platform, certain technical data is collected automatically through cookies, web beacons, server logs, and similar technologies. This includes your IP address, device identifiers, and behavioral data such as pages visited and time spent on the Platform. This data helps us maintain Platform security, analyze performance, and improve the user experience.

4.3 Data from Third Parties

In limited circumstances, vip8 may receive Personal Data about you from third parties, including: KYC verification service providers who confirm your identity against government databases; payment processors who confirm the status of a transaction; and fraud detection services that flag high-risk account activity. All third-party data sources are vetted for compliance with applicable data protection standards.

5 Purpose of Processing

vip8 processes your Personal Data for the following purposes:

• Account Management: To create, maintain, and administer your Player account, including authentication and security controls.
• Identity Verification (KYC): To verify your identity and age (21+ requirement) in compliance with anti-money laundering and counter-terrorism financing obligations.
• Transaction Processing: To process deposits and withdrawals through local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Platform Operations: To provide access to gaming products, process wagers, and deliver your winnings correctly and promptly.
• Responsible Gaming: To monitor gaming patterns, apply responsible gaming controls (deposit limits, self-exclusion), and intervene when signs of problem gambling are detected.
• Customer Support: To respond to your inquiries, resolve complaints, and provide assistance in Indonesian and English.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorized account access.
• Legal Compliance: To fulfill obligations under applicable laws and the terms of vip8's international gaming license.
• Service Improvement: To analyze Platform usage patterns and improve the overall gaming experience through aggregated, anonymized analytics.
• Marketing Communications: To send you promotional offers and bonus notifications where you have given explicit consent to receive such communications. You may withdraw consent at any time by contacting support.

6 Legal Basis for Processing

vip8 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our contractual obligations to you under the Terms & Conditions — including account creation, transaction processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable anti-money laundering laws, KYC requirements, licensing conditions, and tax reporting obligations.
• Legitimate Interests: Processing conducted for fraud prevention, Platform security, and business analytics, where those interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where your prior consent has been obtained. You retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing and Disclosure

vip8 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the following circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process Personal Data on our behalf under strict contractual data processing agreements. These include KYC/identity verification providers, payment processors, fraud detection systems, cloud hosting providers, and customer support platforms. All processors are required to maintain the same level of data protection as vip8.

7.2 Legal and Regulatory Authorities

We may disclose Personal Data to government bodies, regulators, law enforcement agencies, or courts when required to do so by applicable law, court order, or our licensing authority. In such cases, we disclose only the minimum data necessary to comply with the legal requirement.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of vip8's assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the successor entity via prominent notice on the Platform and by email.

8 Third-Party Services and Game Providers

The vip8 Platform integrates games and live dealer content from licensed third-party studios, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers may collect limited technical data (such as game session identifiers and RNG seed data) to ensure fair play and game integrity. Such data is governed by each provider's own privacy policies and is not used to identify you personally beyond what is necessary for game delivery.

vip8 is not responsible for the privacy practices of any third-party game studio. We encourage you to review the privacy documentation of any third-party content provider if you have concerns about their data practices.

9 Data Retention

vip8 retains your Personal Data for as long as your account remains active and for a defined period thereafter, in accordance with our legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the full duration of your account and for a minimum of five (5) years following account closure, as required under anti-money laundering regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements.
• KYC Verification Documents: Retained for five (5) years following account closure or the completion of the relevant KYC process, whichever is later.
• Gaming Activity Logs: Retained for three (3) years from the date of each gaming session, used for dispute resolution, responsible gaming monitoring, and regulatory reporting.
• Customer Support Communications: Retained for two (2) years from the date of each interaction, unless the matter is subject to ongoing dispute or legal proceedings.
• Technical and Analytics Data: Retained in anonymized or aggregated form indefinitely for Platform improvement purposes; identifiable technical data is deleted within twelve (12) months of collection.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be linked to an identifiable individual.

10 Data Security

vip8 employs a layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or app and the vip8 Platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon and "https" in your browser address bar.
• Encryption at Rest: Sensitive Personal Data stored on our servers — including financial data and KYC documents — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within vip8 is restricted on a strict need-to-know basis. Staff members with access to Player data undergo background checks and regular data protection training.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of protection against unauthorized access.
• Penetration Testing: The vip8 Platform undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: vip8 maintains a formal data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, affected Players will be notified promptly.

11 Your Rights as a Data Subject

As a Player on the vip8 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the Personal Data vip8 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete Personal Data be corrected. You may update basic profile information directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our overriding legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or a contractual necessity, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. Note that certain objections may affect our ability to provide full Platform services to you.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

12 Cookies & Tracking Technologies

vip8 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and gather analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These cookies enable login session management, security tokens, and transaction processing. They cannot be disabled without significantly impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymized data about how Players interact with the Platform — such as pages visited, time on page, and error logs — to help us improve performance and user experience.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations, so you do not need to re-enter them on each visit.
• Targeting and Marketing Cookies: Used only with your explicit consent to deliver relevant promotional content. You may opt out of these cookies at any time by adjusting your browser settings or contacting support.

Most browsers allow you to refuse or delete cookies through their settings. Note that disabling certain cookies may affect the functionality of the vip8 Platform. For detailed guidance on managing cookies in your specific browser, consult your browser's help documentation.

13 Minors and Age Restriction

The vip8 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If you believe that a minor has registered an account with vip8 or that a minor's data has been submitted to us, please contact us immediately at [email protected]. We will take immediate steps to close the account and securely delete all associated Personal Data.

vip8 employs both automated age-gate mechanisms at registration and manual KYC document review to verify that all account holders meet the 21+ requirement. Any account found to belong to a minor will be suspended immediately and all relevant information may be disclosed to appropriate child protection authorities.

14 Cross-Border Data Transfers

vip8 operates internationally, and your Personal Data may be processed in countries outside Indonesia, including the jurisdiction in which vip8 holds its international gaming license and the locations of our third-party service providers' servers. Where such transfers occur, vip8 ensures that adequate safeguards are in place to protect your Personal Data to at least the same standard as required under the data protection laws applicable to your jurisdiction.

Safeguards for cross-border transfers may include: standard contractual clauses incorporated into agreements with Data Processors; adequacy determinations by relevant data protection authorities; and certification schemes recognized by applicable regulatory bodies. For further information about the specific safeguards applicable to any cross-border transfer of your data, please contact us at [email protected].

15 Changes to This Privacy Policy

vip8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will notify registered Players by email at least seven (7) days before the changes take effect, and we will post a prominent notice on the Platform indicating that the Policy has been updated.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the vip8 Platform following any amendment constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should cease using the Platform and contact support to arrange account closure.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vip8 handles your Personal Data, please reach out through the following channel:

Our support team is available around the clock across all Indonesian time zones — WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) — and includes native Indonesian-speaking agents to assist you in your preferred language.