vip228 Privacy Policy

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "vip228" / "we" / "us" / "our" — refers to the vip228 online betting platform and its operating entity, accessible at vip228.cam.
• "Personal Data" — means any information relating to an identified or identifiable natural person, as that concept is understood under applicable data-protection law.
• "Processing" — means any operation performed on personal data, including collection, storage, use, disclosure, transmission, and deletion.
• "Data Controller" — means the entity that determines the purposes and means of processing personal data — in this case, vip228.
• "Data Processor" — means a third party that processes personal data on behalf of vip228, under vip228's written instructions.
• "Member" / "User" / "you" — means any person who registers an account on, or otherwise uses, the vip228 platform.
• "KYC" — means Know Your Customer identity-verification procedures required for regulatory compliance.
• "Cookies" — means small text files placed on your device by the vip228 platform to enable certain functions and analytics.
• "Services" — means all betting, gaming, lottery, account-management, and related functions provided through vip228.cam.

2.1 vip228 is the Data Controller responsible for the personal data of its Members processed in connection with the vip228.cam platform and Services.

2.2 If you have questions about the processing of your personal data, the identity of any third-party Data Processors engaged by vip228, or the exercise of any of your data-subject rights, please contact our Data Protection point of contact at [email protected], using the subject line "Privacy Enquiry".

2.3 vip228 serves players primarily based in Indonesia. While Indonesia's personal data protection landscape continues to develop — including under the Indonesian Personal Data Protection Law (UU Perlindungan Data Pribadi, UU No. 27 Tahun 2022) — vip228 applies rigorous data-handling practices aligned with internationally recognised privacy standards, including principles drawn from the EU General Data Protection Regulation (GDPR), as a benchmark for best practice.

vip228 collects the following categories of personal data, depending on your interaction with the platform:

3.1 Special Category Data. vip228 does not intentionally collect special category personal data (e.g., health data, racial or ethnic origin, political opinions, religious beliefs). If you voluntarily disclose such information in a support communication, it will be used only to resolve the specific query and will not be stored beyond that purpose.

vip228 collects personal data through the following channels:

• Direct provision: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, or contact our Support team.
• Automated technical collection: Our servers automatically log IP addresses, session data, and technical device information each time you access the platform.
• Cookies and similar tracking technologies: As described in Clause 7, vip228 uses cookies and similar technologies to maintain session continuity, analyse platform usage, and, with your consent, deliver relevant marketing communications.
• Payment processors: When you make a deposit or withdrawal, our payment processor partners may provide us with confirmation data including the last four digits of a bank account or e-wallet identifier for reconciliation purposes.
• Third-party KYC services: Where vip228 uses a third-party identity-verification provider to assist with KYC checks, that provider may supply us with a verification result (pass/fail) and any additional data points needed to complete the check.

vip228 processes your personal data only for defined, legitimate purposes. The primary legal bases on which we rely are: (a) Performance of a contract — processing necessary to provide the Services you have registered for; (b) Legal obligation — processing required to comply with anti-money-laundering, KYC, and responsible-gaming regulations; (c) Legitimate interests — processing necessary for fraud prevention, platform security, and service improvement; and (d) Consent — processing based on your explicit opt-in, particularly for marketing communications.

6.1 Principle of Limited Sharing. vip228 does not sell, rent, broker, or otherwise commercially disclose your personal data to any third party. Data is shared only in the circumstances described below, and only to the minimum extent necessary.

6.2 Service Providers (Data Processors). vip228 engages trusted third-party providers to assist in delivering the Services. These include:

• Payment processors — for handling deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other supported channels.
• KYC verification services — to assist with identity document verification and liveness checks.
• Cloud hosting and infrastructure providers — for secure data storage and platform operations.
• Analytics providers — for anonymised or pseudonymised platform-usage analytics (e.g., session behaviour, feature usage).
• Customer communication tools — for live chat and email support functionality.

All Data Processors are subject to written data-processing agreements that prohibit them from using your data for any purpose beyond fulfilling their service to vip228, and that require them to maintain security standards at least equivalent to those applied by vip228.

6.3 Legal Disclosure. vip228 may disclose personal data where required by law, court order, or a competent regulatory or law-enforcement authority. In such cases, vip228 will disclose only the minimum information legally required.

6.4 Business Transfers. In the event that vip228's business or relevant assets are acquired by or merged with another entity, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any material change in data controller via the registered email address.

6.5 Game Studios. Third-party game studios (e.g., Pragmatic Play, Evolution Gaming, Microgaming) integrated into the vip228 platform may receive pseudonymised session tokens for the purpose of game operation. They do not receive your name, KTP details, or bank account information.

7.1 vip228 uses cookies and similar technologies (e.g., local storage, session tokens) to operate and improve the platform. The following categories of cookies may be used:

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, CSRF protection, and load-balancing tokens. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and notification opt-out status, to personalise your experience.
• Analytical Cookies: Collect anonymised data on page views, session duration, and feature interactions to help vip228 improve the platform. These are activated only with your consent.
• Marketing Cookies: Used to track effectiveness of marketing campaigns and, where you have consented, to deliver relevant promotional content. These are activated only with explicit consent.

7.2 You can manage cookie preferences through your browser settings. Disabling analytical or marketing cookies will not affect your ability to use the core betting and gaming functions of vip228, but may affect how certain preference-based features behave.

8.1 vip228 operates data infrastructure across multiple jurisdictions in the Asia-Pacific region. As a result, your personal data may be stored and processed in countries outside Indonesia, including Singapore, Hong Kong, and other territories where vip228's infrastructure partners are located.

8.2 Where personal data is transferred to countries without an adequacy determination equivalent to that applied by Indonesia's UU PDP, vip228 uses appropriate safeguards including standard contractual clauses, data-processing agreements, and security requirements binding on the recipient to ensure your data remains protected to an equivalent standard.

8.3 By registering an account with vip228, you acknowledge and consent to the transfer of your personal data to these jurisdictions for the purposes described in this Privacy Policy.

9.1 vip228 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC data: Retained for the duration of the Member's active Account, plus a minimum of 5 years following account closure, to meet anti-money-laundering record-keeping obligations.
• Transaction data: Retained for 5 years from the date of each transaction, in compliance with financial record-keeping requirements.
• Communication data (support tickets, live chat): Retained for 2 years from the date of the last communication in a thread.
• Technical and usage data: Anonymised or deleted within 13 months of collection.
• Marketing consent records: Retained for 3 years from the date of last consent or opt-out action.

9.2 Where data must be retained to comply with a legal obligation (e.g., a court order or regulatory investigation), the relevant retention period is extended for the duration of that obligation.

9.3 At the end of the applicable retention period, personal data is securely deleted from vip228's systems or irreversibly anonymised so that it can no longer be linked to any identifiable individual.

10.1 vip228 applies a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• Encryption in transit: All data transmitted between your device and vip228's servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive personal data stored in vip228's databases (including KTP numbers and bank account identifiers) is encrypted using AES-256.
• Access controls: Access to production data systems is restricted to authorised employees on a need-to-know basis, enforced through role-based access control and multi-factor authentication.
• Penetration testing: vip228's platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Fraud monitoring: Automated transaction monitoring systems flag unusual account activity for review by vip228's security team around the clock.

10.2 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to Members' rights, vip228 will notify affected Members via their registered email address as soon as reasonably practicable, including details of the nature of the breach, the data likely affected, and the steps vip228 is taking to mitigate the impact.

10.3 Your Responsibility. You are responsible for maintaining the security of your account credentials. vip228 will never ask for your password via email, live chat, or any other channel. If you suspect your account has been compromised, contact [email protected] immediately.

As a vip228 member, you have the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.

12.1 With your explicit consent, vip228 may send you promotional communications by email, SMS, or push notification about new games, bonus offers, deposit promotions, and platform updates. Consent is collected at the time of registration and can be updated through your account settings at any time.

12.2 You can opt out of all marketing communications at any time by: (a) clicking the "unsubscribe" link at the bottom of any marketing email; (b) updating your notification preferences in your account settings; or (c) contacting Support at [email protected] with the request "Unsubscribe from Marketing".

12.3 Opt-out requests are processed within 5 business days. Transactional communications (e.g., deposit confirmations, withdrawal receipts, account security alerts) are not affected by marketing opt-out preferences and will continue to be sent for as long as you hold an active account.

12.4 vip228 does not send marketing communications to Members who have registered a self-exclusion under the Responsible Gaming programme, for the duration of the exclusion period.

13.1 If vip228 becomes aware that personal data has been collected from a person under 21 years of age, it will immediately suspend the relevant account and permanently delete all associated personal data, to the extent permitted by applicable legal obligations.

13.2 Parents and guardians who believe that a minor under their care may have registered an account on vip228 should contact [email protected] immediately. vip228 will investigate and act within 24 hours of receiving a credible report.

14.1 The vip228 platform integrates content and functionality provided by third-party game studios, including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft. While vip228 takes reasonable steps to ensure these integrations meet security standards, vip228 is not responsible for the privacy practices of these third parties in respect of their own platforms or products.

14.2 This Privacy Policy applies exclusively to the vip228.cam platform. It does not extend to any third-party websites, applications, or services that may be referenced elsewhere. vip228 encourages Members to read the privacy policies of any third-party services they use.

15.1 vip228 may update this Privacy Policy from time to time to reflect changes in applicable law, our data-processing practices, or the Services we offer. The current version of the Privacy Policy will always be accessible at vip228.cam/privacy-policy, marked with an updated effective date and version number.

15.2 Where changes are material — for example, where we introduce a new purpose for processing or a new category of data sharing — vip228 will notify registered Members via their registered email address at least 14 days before the change takes effect, and will update the version number and effective date at the top of this document.

15.3 Continued use of the vip228 platform after the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not accept a material change, you may close your account and request withdrawal of your balance prior to the effective date.

For any privacy-related enquiries, data-subject rights requests, or complaints regarding vip228's handling of your personal data, please contact us using the details below:

If you are not satisfied with vip228's response to a privacy complaint, you have the right to escalate your complaint to the relevant data-protection supervisory authority in your jurisdiction. vip228 will co-operate fully with any such authority in the resolution of your complaint.