Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal information by vip138 ("we", "us", "our", "the Platform") in connection with your use of our online gaming services available at https://vip138.cam. This policy applies to all users ("you", "User", "Player") accessing our platform from any location, with particular emphasis on Indonesian residents who constitute our primary user base.

vip138 is committed to protecting your privacy and ensuring the security of your personal data in accordance with international data protection regulations and industry best practices. By registering an account, depositing funds, placing bets, or otherwise using vip138 services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your relationship with vip138. If you do not agree with any aspect of this Privacy Policy, you must discontinue use of our services immediately.

2. Data Controller Information

vip138 acts as the data controller for all personal information collected through our platform. We are responsible for determining the purposes and means of processing your personal data and for ensuring compliance with applicable data protection laws. Questions, concerns, or requests regarding your personal data should be directed to our Data Protection Officer via email at [email protected] or through our 24/7 live chat support available from your account dashboard.

3. Information We Collect

3.1 Information You Provide Directly

When you register for a vip138 account, we collect the following personal information that you provide directly:

• Identity Information: Full legal name as it appears on government-issued identification, date of birth, gender, nationality, and a recent photograph for verification purposes.
• Contact Information: Residential address (street address, city, postal code), email address, mobile phone number, and preferred communication methods.
• Account Credentials: Username, password (stored in encrypted format), security questions and answers, and two-factor authentication settings.
• Financial Information: Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, and other approved institutions; e-wallet account information for OVO, DANA, GoPay; payment card details if applicable; transaction history including deposits, withdrawals, and gaming activity.
• Verification Documents: Government-issued identification documents such as Indonesian National ID (KTP), passport, or driver's license; proof of address documents such as utility bills, bank statements, or tax documents; proof of payment method ownership; selfie photographs holding identification documents.
• Communication Records: Customer support correspondence via email, live chat, WhatsApp, or other channels; feedback, complaints, and inquiries submitted through our platform; survey responses and promotional preferences.

3.2 Information Collected Automatically

When you access and use vip138 services, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID), mobile network information.
• Connection Information: IP address, geographic location (country, city, region derived from IP), internet service provider, connection type and speed.
• Usage Data: Pages visited, features accessed, games played, time spent on platform, click patterns, navigation paths, session duration, frequency of visits, referring and exit pages.
• Gaming Activity: Bets placed (amount, type, odds, outcome), games played (slots, table games, live casino, sports betting), win/loss records, bonus utilization, responsible gaming tool usage (deposit limits, self-exclusion periods), account balance fluctuations.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixel tags, local storage data. For detailed information about our cookie usage, please see Section 9 below.

3.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources including payment processors (to verify transaction authenticity and prevent fraud), identity verification services (to confirm your age and identity), credit reference agencies (to assess financial risk), fraud prevention agencies (to detect suspicious activity), and game providers (regarding gameplay statistics and outcomes). All third-party data collection is conducted in accordance with applicable privacy laws and with appropriate contractual safeguards.

4. How We Use Your Information

vip138 uses your personal information for the following legitimate business purposes:

4.1 Account Management and Service Provision

• Creating and maintaining your vip138 account
• Verifying your identity, age (21+ requirement), and residency status
• Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, and e-wallets
• Providing access to casino games, sports betting markets, live dealer tables, and lottery draws
• Managing your account balance, transaction history, and gaming records
• Administering bonuses, promotions, and VIP program benefits
• Implementing responsible gaming tools (deposit limits, self-exclusion, reality checks)

4.2 Communication and Customer Support

• Responding to your inquiries, complaints, and support requests via email, live chat, or phone
• Sending transactional notifications about deposits, withdrawals, bets, and account changes
• Providing updates about platform features, game releases, and service improvements
• Delivering promotional communications about bonuses, tournaments, and special offers (subject to your consent and communication preferences)

4.3 Security and Fraud Prevention

• Detecting and preventing fraud, money laundering, identity theft, and unauthorized account access
• Monitoring for collusion, bonus abuse, arbitrage betting, and other prohibited activities
• Protecting against technical attacks including hacking, DDoS attacks, and malware
• Conducting security audits and risk assessments
• Complying with anti-money laundering (AML) and know-your-customer (KYC) regulations

4.4 Legal Compliance and Regulatory Requirements

• Complying with international gaming license conditions and regulatory obligations
• Meeting tax reporting requirements where applicable
• Responding to legal requests from law enforcement, courts, or regulatory authorities
• Enforcing our Terms and Conditions and other platform policies
• Protecting our legal rights and defending against legal claims

4.5 Analytics and Platform Improvement

• Analyzing user behavior to improve platform usability and functionality
• Conducting A/B testing to optimize user experience
• Generating aggregated, anonymized statistics about platform usage
• Identifying technical issues and monitoring platform performance
• Developing new features, games, and services based on user preferences

5. Legal Basis for Processing

vip138 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (Terms and Conditions), including providing gaming services, processing transactions, and managing your account.
• Legal Obligation: Processing is required to comply with applicable laws including gaming regulations, AML/KYC requirements, tax laws, and data protection regulations.
• Legitimate Interests: Processing serves our legitimate business interests in preventing fraud, improving services, ensuring platform security, and conducting marketing activities, provided these interests do not override your fundamental rights and freedoms.
• Consent: Where required by law, we obtain your explicit consent for specific processing activities such as marketing communications and optional data collection.

6. Data Sharing and Disclosure

vip138 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients for legitimate business purposes:

6.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay), and international payment gateways to process deposits and withdrawals.
• Game Providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and other software suppliers whose games you access through vip138.
• Identity Verification Services: Third-party KYC providers who verify your identity, age, and address using your submitted documents.
• Technology Infrastructure: Cloud hosting providers, content delivery networks, database management services, and IT security firms.
• Customer Support Tools: Live chat platforms, email service providers, CRM systems, and helpdesk software.
• Marketing Services: Email marketing platforms, analytics providers, and advertising networks (subject to your consent).

All third-party service providers are contractually bound to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

6.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement, courts, regulators, or legal advisors when required by law, legal process, litigation, or regulatory investigation, or when we believe disclosure is necessary to protect our rights, property, or safety, or that of our users or the public.

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity as part of the business transfer, subject to the same privacy protections outlined in this policy.

7. Data Security Measures

vip138 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, loss, misuse, alteration, or destruction:

• Encryption: SSL/TLS encryption for all data transmitted between your device and our servers; AES-256 encryption for sensitive data at rest including passwords and financial information.
• Access Controls: Role-based access restrictions ensuring only authorized personnel can access personal data; multi-factor authentication for employee accounts; regular access audits and permission reviews.
• Infrastructure Security: Firewalls, intrusion detection systems, DDoS protection, regular vulnerability assessments, and penetration testing; secure data centers with physical access controls and 24/7 monitoring.
• Data Minimization: Collection and retention of only necessary personal information; regular data cleansing to remove outdated or unnecessary data.
• Employee Training: Mandatory privacy and security training for all staff; confidentiality agreements and background checks for personnel handling personal data.
• Incident Response: Established procedures for detecting, responding to, and notifying users of data breaches in accordance with legal requirements.

Despite these measures, no internet-based system is completely secure. While we strive to protect your information, we cannot guarantee absolute security and advise you to take precautions including using strong passwords, enabling two-factor authentication, and never sharing your account credentials.

8. Data Retention

vip138 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: Personal data associated with active accounts is retained for the duration of your relationship with vip138 plus any additional period required by law.
• Closed Accounts: Following account closure, we retain certain data for legal and regulatory compliance (typically 7-10 years for financial records and transaction history) and to prevent fraud and abuse.
• Marketing Data: If you opt out of marketing communications, we retain minimal information to honor your opt-out preference and prevent future contact.
• Anonymized Data: We may retain anonymized, aggregated data indefinitely for statistical and analytical purposes, as it can no longer identify you personally.

9. Cookies and Tracking Technologies

vip138 uses cookies (small text files stored on your device) and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookie categories include:

• Essential Cookies: Required for platform functionality including user authentication, session management, and security features. These cannot be disabled without affecting platform operation.
• Performance Cookies: Collect anonymous usage statistics to help us understand how users interact with our platform and identify areas for improvement.
• Functionality Cookies: Remember your preferences such as language settings, currency display, and interface customization.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness (requires your consent).

You can manage cookie preferences through your browser settings, but disabling certain cookies may limit platform functionality. Most browsers accept cookies by default; consult your browser's help documentation for instructions on blocking or deleting cookies.

10. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you and information about how we process it.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data in certain circumstances (note: legal and regulatory retention obligations may prevent full deletion).
• Right to Restriction: Request temporary restriction of processing your data under specific conditions.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format and transmit it to another service provider.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw previously given consent for processing activities that rely on consent (does not affect prior processing).

To exercise these rights, contact our Data Protection Officer at [email protected] with your account details and a description of your request. We will respond within 30 days and may require identity verification to prevent unauthorized access to your data.

11. International Data Transfers

vip138 operates internationally and may transfer your personal data to countries outside Indonesia, including jurisdictions that may have different data protection standards. When we transfer data internationally, we implement appropriate safeguards including standard contractual clauses, adequacy decisions, and binding corporate rules to ensure your data receives equivalent protection regardless of location.

12. Children's Privacy

vip138 services are strictly restricted to individuals who are at least 21 years of age or the legal age of majority in their jurisdiction, whichever is greater. We do not knowingly collect personal information from individuals under the minimum age requirement. If we discover that we have inadvertently collected data from an underage individual, we will immediately delete such information and close the associated account. Parents or guardians who believe their child has provided us with personal data should contact us immediately.

13. Third-Party Links

The vip138 platform may contain links to third-party websites, services, or applications for your convenience. This Privacy Policy does not apply to third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit. Accessing third-party links is at your own risk.

14. Changes to This Privacy Policy

vip138 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. Material changes will be communicated via email notification, platform announcement, or prominent notice on our homepage. The "Last Updated" date at the beginning of this policy indicates when changes were most recently made. Your continued use of vip138 services after changes are posted constitutes acceptance of the revised policy. We encourage you to review this Privacy Policy periodically.

15. Contact Us

For questions, concerns, complaints, or requests regarding this Privacy Policy or our data practices, please contact vip138:

• Email: [email protected] (Data Protection Officer)
• Live Chat: Available 24/7 from your account dashboard
• Response Time: We aim to respond to all privacy inquiries within 48 hours

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with your local data protection authority or supervisory body.