Privacy Policy

Introduction

viip55 ("we", "us", "our") operates the online gaming and sports betting platform accessible at viip55.cam. We are the data controller responsible for the personal information you provide when you register, verify your identity, make transactions, or otherwise interact with our platform.

This Privacy Policy describes how viip55 collects, processes, stores, shares, and protects personal data in connection with the operation of the platform. It applies to all registered Members and to visitors who browse the platform without registering. By creating a viip55 account or by continuing to use the platform, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

This Privacy Policy should be read alongside the viip55 Terms & Conditions, which govern the contractual relationship between you and viip55. Where a specific processing activity is described in both documents, the more detailed description in this Privacy Policy takes precedence for data protection purposes.

Definitions

The following terms carry the meanings set out below throughout this Privacy Policy.

Data We Collect

viip55 collects personal data through several channels: directly from you during registration and account use, automatically through your interactions with the platform, and in limited cases from third-party sources such as payment processors and KYC verification partners. The categories of personal data we collect are set out below.

How We Use Your Data

viip55 uses the personal data we collect for the following purposes. Each purpose is linked to a legal basis for processing described in Section 5.

• Account management: Creating and maintaining your viip55 account, authenticating your identity at login, processing password resets, and communicating account status notifications.
• Service delivery: Processing deposits and withdrawals via your registered Indonesian bank or e-wallet, settling wagers, crediting bonus funds, and delivering game content through our third-party studio partners (Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, and others).
• Identity & age verification (KYC): Verifying that you are at least 21 years of age and that your identity matches the registration data provided, as required by our licensing obligations.
• Fraud prevention & security: Detecting and investigating unauthorized account access, duplicate account activity, payment fraud, money laundering, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling behavior, enforcing self-exclusion requests and deposit limits, and facilitating access to responsible gaming resources at viip55.cam/responsible-gaming.
• Legal & regulatory compliance: Meeting the data retention, reporting, and audit obligations imposed by viip55's offshore gaming license and applicable anti-money-laundering (AML) frameworks.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve platform performance, identify technical errors, and optimize the user experience for Indonesian players.
• Customer support: Responding to account queries, dispute submissions, KYC questions, and responsible gaming requests submitted to [email protected] or through the platform's live chat.
• Marketing communications: Sending promotional offers, bonus announcements, and seasonal promotions (such as Idul Fitri and Indonesian Independence Day specials) to your registered email address, subject to your communication preferences. You may opt out of marketing emails at any time.

Legal Basis for Processing

viip55 processes personal data under one or more of the following legal bases, depending on the purpose of the processing activity.

Data Sharing & Disclosure

viip55 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: Your payment details are shared with certified payment processing partners that handle bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon) and e-wallet transactions (OVO, DANA, GoPay, ShopeePay, LinkAja) solely for the purpose of executing your deposit and withdrawal requests.
• KYC verification services: Identity documents may be passed to third-party KYC verification providers for automated or manual review. These providers are bound by contractual data processing agreements that restrict their use of your data to the verification purpose only.
• Game content providers: Your account identifier and session token are shared with game studios (e.g., Pragmatic Play, Evolution Gaming, Spribe) to enable authenticated game sessions. These providers receive only the minimum data necessary to run your game session.
• Fraud & AML compliance: Where viip55's licensing obligations or applicable AML frameworks require disclosure of account activity or Member data to a competent regulatory or law enforcement authority, we will comply with such legally mandated requests. viip55 will notify affected Members of such disclosures where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of viip55's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer via your registered email address.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by viip55 may access personal data on a need-to-know basis, subject to professional confidentiality obligations.

Cookies & Tracking Technologies

viip55 uses cookies and similar tracking technologies to operate the platform, maintain session security, and improve your experience. The categories of cookies we use are described below.

You can manage or disable non-essential cookies through your browser settings. Note that disabling essential cookies will impair core platform functionality, including the ability to log in and place wagers. viip55 does not use third-party advertising cookies or serve behavioral advertising based on your platform activity.

Data Retention

viip55 retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable licensing and regulatory obligations. The general retention periods we apply are as follows.

• Active account data: Retained for the full duration of your account and for a period of 5 years following account closure, in compliance with standard AML data retention requirements applicable to offshore gaming operators.
• KYC documents: Retained for a minimum of 5 years following the completion of the verification process or the closure of the associated account, whichever is later. This retention period reflects the regulatory requirement to be able to respond to law enforcement or licensing authority audit requests.
• Transaction records: All deposit and withdrawal records, bet histories, and bonus transaction logs are retained for 5 years from the date of the transaction.
• Support communications: Email and live chat records are retained for 2 years from the date of the most recent communication in a given thread, or for the duration of any open dispute, whichever is longer.
• Technical logs: Server access logs and device fingerprint data are retained for 12 months on a rolling basis, unless extended in connection with an active fraud or security investigation.
• Marketing consent records: Records of your consent to or opt-out from marketing communications are retained for the life of your account plus 2 years, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with viip55's internal data lifecycle management procedures. Anonymized data (from which all identifying information has been irreversibly removed) may be retained indefinitely for aggregate statistical analysis.

Data Security

viip55 employs a range of technical and organizational security measures to protect personal data against unauthorized access, loss, alteration, or disclosure. These measures include, but are not limited to, the following.

• Encryption in transit: All data transmitted between your device and the viip55 platform is protected using TLS 1.2 or higher. HTTPS is enforced across the entire platform with no HTTP fallback permitted.
• Encryption at rest: Sensitive data fields — including identity document images, payment details, and account credentials — are encrypted at rest using industry-standard symmetric encryption algorithms.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Access control lists, role-based permissions, and audit logging are applied to all systems that process Member personal data.
• Password security: Account passwords are stored using a salted one-way cryptographic hash. viip55 employees cannot retrieve your plain-text password. If you forget your password, a secure reset link is issued to your registered email address.
• Intrusion detection: viip55 operates continuous network monitoring and intrusion detection systems to identify and respond to suspicious activity in real time.
• Third-party security audits: Our platform and game content providers undergo periodic independent security assessments to verify compliance with applicable data security standards.

In the event of a personal data breach that is likely to result in a risk to your rights or interests, viip55 will notify affected Members via their registered email address without undue delay, and will report the breach to the competent authority under our licensing framework as required by applicable regulations.

Your Rights & Choices

Subject to applicable law and our regulatory data retention obligations, you have the following rights in relation to your personal data held by viip55. To exercise any of these rights, contact us at the details provided in Section 13.

• Right of access: You may request a copy of the personal data viip55 holds about you, along with information about how it is being processed. We will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request its correction. Corrections to registered name, date of birth, or NIK may require supporting documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. Erasure requests are subject to our regulatory data retention obligations — data we are legally required to retain cannot be deleted until the applicable retention period has expired.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while the accuracy of disputed data is being verified.
• Right to data portability: For data processed on the basis of your consent or contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) for transfer to another service.
• Right to object: You have the right to object to processing based on legitimate interests, and to opt out of direct marketing communications at any time. Opting out of marketing does not affect transactional communications (account alerts, withdrawal confirmations, security notices).
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Minors & Age Restriction

viip55 does not knowingly collect or process personal data from any person under the age of 21. The platform is strictly intended for adults aged 21 and over. This age threshold applies regardless of the applicable age of majority in a user's jurisdiction of residence.

Age verification is a mandatory step in the viip55 KYC process. We require submission of a valid Indonesian government-issued ID (KTP) confirming date of birth before any withdrawal is processed. Where an account is found to belong to a person under 21, the account will be closed immediately, all wagers voided, and any balance returned to the deposit source after deducting administrative costs associated with the review.

Policy Amendments

viip55 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. The "Last updated" date at the top of this page will be revised whenever a material change is made.

Where changes are material — meaning they meaningfully affect your rights or how your data is processed — registered Members will be notified via their registered email address at least 7 days before the revised policy takes effect. Non-material changes (typographical corrections, clarifications that do not alter substantive rights, formatting updates) may take effect immediately upon publication.

Your continued use of the viip55 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the platform and may request account closure and data erasure (subject to retention obligations) by contacting us at [email protected].

Contact & Data Requests

For all privacy-related inquiries — including data access requests, rectification or deletion requests, consent withdrawals, security concerns, or questions about this Privacy Policy — please contact the viip55 privacy support team using the details below.

When submitting a data rights request, please include your registered username, the email address associated with your account, and a clear description of your request. For identity verification purposes, we may ask you to confirm certain account details before fulfilling an access or deletion request. Do not include your password or full payment credentials in any written communication to our support team.