vip155 Privacy Policy

vip155 ("we", "us", "our", or the "Platform") is committed to protecting the privacy of every individual who accesses, registers with, or otherwise interacts with the services available at vip155.cam. This Privacy Policy ("Policy") describes how vip155 collects, processes, stores, shares, and safeguards personal information in connection with the operation of its online sports-betting, live-casino, and gaming platform (collectively, the "Platform").

This Policy applies to all registered players, prospective players who browse the Platform without registering, and any individual whose personal data vip155 processes in the ordinary course of its business operations. It covers data collected through the Platform website, any mobile-optimised version of the Platform, email and live-chat communications, and interactions with our customer support team.

This Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between vip155 and registered players, and our Responsible Gaming policy, which sets out additional data processing activities related to player protection tools such as deposit limits and self-exclusion.

Definitions. For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a specific individual, whether alone or in combination with other data.
• "Player" / "Account Holder" — a natural person who has completed the registration process on the Platform and holds an active account.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Controller" — the entity that determines the purposes and means of processing Personal Data; for this Policy, the Controller is vip155.
• "Third Party" — any person or organisation other than the Player and vip155, including service providers, payment processors, and regulatory authorities.

vip155 collects Personal Data through several distinct channels. The categories of data we collect and the circumstances in which we collect them are described in full below.

2.1 — Registration Data

When you create an account on the Platform, we collect the information you provide in the registration form. This typically includes:

• Full legal name (as it appears on your government-issued identity document).
• Date of birth (used to verify you meet the 21+ age requirement).
• Email address (used for account communications and password recovery).
• Mobile phone number (used for two-factor authentication and support contact).
• City and province of residence within Indonesia (e.g., Jakarta, Surabaya, Bandung, Bali, Medan, Semarang, Makassar, Yogyakarta).
• Preferred currency (IDR / Rupiah is the default for Indonesian players).
• Username and password (password is stored in hashed form — plain-text passwords are never retained).

2.2 — Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to verify your identity before processing withdrawals above certain thresholds, we may request:

• A copy or photograph of a valid government-issued photo identity document: Indonesian National Identity Card (KTP), passport, or driver's licence (SIM).
• A selfie or live-photo holding the identity document (liveness check).
• Proof of address: a recent utility bill, bank statement (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, or OCBC NISP), or government-issued correspondence dated within the last 90 days.
• Proof of payment-method ownership: a screenshot or photograph confirming that the bank account, OVO wallet, DANA wallet, GoPay, ShopeePay, or LinkAja account used for deposits is held in the same name as the Platform account.

2.3 — Financial Transaction Data

When you make deposits or withdrawals via the Platform, we collect and retain records of the transaction amount (in IDR / Rp), timestamp, payment channel used, and transaction reference number. For bank transfers, we may receive your originating bank account number. For e-wallet transactions, we receive your registered wallet identifier. For USDT transactions, we receive your wallet address and the blockchain transaction hash. We do not store full card numbers, CVV codes, or one-time passwords.

2.4 — Gameplay and Wagering Data

The Platform automatically generates records of all bets placed, games played, stakes wagered, outcomes, and balances during your session. This data is used for account reconciliation, dispute resolution, fraud prevention, and responsible gaming monitoring. It is not sold or shared with third parties for commercial profiling.

2.5 — Technical and Device Data

When you access the Platform, our servers automatically collect technical data including:

• IP address and approximate geolocation derived from IP (country, city-level).
• Browser type and version, operating system, device type (desktop, mobile, tablet).
• Session start and end times, pages viewed, clicks, and navigation paths.
• Referral URL (if you arrived at the Platform via a tracked link).
• Cookies and similar tracking technologies (detailed in Section 7).

2.6 — Communications Data

When you contact vip155 customer support via email or live chat, we retain the content of that communication, including your support ticket history, for quality assurance, training, and dispute resolution purposes. Communications are stored for a minimum of 24 months from the date of the most recent exchange.

vip155 uses the Personal Data it collects for the following specific purposes:

vip155 will not use your Personal Data for any purpose that is incompatible with those described above without first providing you with notice and, where required by applicable law, obtaining your consent.

Marketing Communications. vip155 may send you promotional emails and account-related notifications relating to bonuses, new game releases, seasonal promotions (including Idul Fitri and Ramadhan campaigns), and platform updates. You may opt out of marketing emails at any time by contacting our support team. Opt-out requests for marketing communications are processed within five business days. Transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — cannot be opted out of while your account remains active, as they form part of the essential account service.

vip155 processes Personal Data only where a recognised lawful basis exists for doing so. The primary legal bases on which we rely are:

1. Performance of a Contract. Most core processing activities — account registration, payment processing, gameplay delivery, and customer support — are necessary for the performance of the Terms & Conditions contract between vip155 and the registered player. Without this processing, vip155 cannot provide its services.
2. Legal Obligation. Certain processing activities are required to comply with applicable law or regulatory directives, including KYC identity verification, anti-money laundering record-keeping, and the reporting of suspicious transactions to competent authorities.
3. Legitimate Interests. vip155 processes certain categories of data — particularly technical and device data, fraud-detection signals, and aggregated gameplay analytics — on the basis of its legitimate interests in maintaining platform security, preventing fraud, and improving its services. We apply a balancing test to ensure that our legitimate interests are not overridden by the fundamental privacy rights of the data subject.
4. Consent. Where we send marketing communications or deploy non-essential analytical cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

vip155 does not sell, rent, or trade your Personal Data. We share data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

1. Payment Processors and Banking Partners. To facilitate deposits and withdrawals, we share necessary transaction data with our partner payment institutions, including local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) and cryptocurrency processing services for USDT transactions. These institutions process your data under their own privacy policies and applicable financial regulations.
2. Identity Verification (KYC) Service Providers. We use third-party KYC vendors to automate document authentication and liveness checks. These providers access only the identity documents you submit and operate under strict data-processing agreements with vip155. They are prohibited from using your KYC data for any purpose other than the specific verification task assigned.
3. Game Software Providers. Certain game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — operate as independent controllers for their own game logic and RNG certification processes. vip155 shares a pseudonymised player identifier (not your full name or contact details) with these providers solely to facilitate gameplay and reconcile game results.
4. Regulatory and Law-Enforcement Authorities. vip155 will disclose Personal Data to competent governmental or regulatory authorities when legally required to do so, or when we reasonably believe that disclosure is necessary to prevent imminent harm, investigate fraud, or comply with a valid legal order. vip155 will notify you of such a disclosure where legally permitted to do so.
5. Analytics and Security Services. We use reputable third-party analytics and cybersecurity services to monitor platform traffic, detect intrusion attempts, and improve performance. These providers receive technical and aggregated data only, under strict contractual confidentiality obligations.
6. Corporate Transactions. In the event of a merger, acquisition, or sale of all or substantially all of the assets of vip155, Personal Data may be transferred to the acquiring entity. You will be notified via email and a prominent platform notice before your data becomes subject to a different privacy policy.

vip155 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply as standard:

Upon the expiry of the applicable retention period, vip155 will securely delete or irreversibly anonymise the relevant Personal Data so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and business-intelligence purposes.

vip155 uses cookies, local storage, and similar client-side technologies to deliver a functional and consistent user experience. The following categories of cookies are deployed on the Platform:

1. Strictly Necessary Cookies. These cookies are essential to the operation of the Platform and cannot be disabled without fundamentally breaking the service. They include session authentication tokens, CSRF protection tokens, load- balancing cookies, and currency/language preference storage. No consent is required for these cookies as they are technically indispensable.
2. Functional Cookies. These cookies remember your preferences and personalisation settings — such as your last visited game category, display settings, and notification preferences — so that you do not need to reconfigure them on each visit. They are set only for the duration of your session or, if you choose "Remember Me", for up to 30 days.
3. Analytical Cookies. vip155 uses first-party analytical cookies to collect aggregated, anonymised data about how players navigate the Platform — including page visit frequency, session duration, and feature usage rates. This data is used exclusively to improve the Platform's performance and user experience. Third-party analytics scripts that transmit data to external servers are not used.
4. Fraud and Security Cookies. Certain cookies support our fraud detection and account security systems by recording device fingerprint signals, known-bad-IP flags, and unusual login-pattern indicators. These operate as part of our legitimate interest in maintaining platform integrity.

Managing Cookies. You may delete or block cookies at any time using your browser's built-in settings. Please note that disabling cookies beyond the "Strictly Necessary" category may degrade your Platform experience. Clearing session cookies will log you out of your account immediately.

As a data subject whose information is processed by vip155, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team using the details in Section 13. We will respond to all verified requests within 30 calendar days of receipt.

1. Right of Access. You have the right to request a copy of all Personal Data that vip155 holds about you, together with information about the purposes for which it is processed, the categories of data held, and any third parties to whom it has been disclosed.
2. Right to Rectification. If any Personal Data that vip155 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. Certain data — such as your registered name — may require re-verification via KYC documents before a correction is applied.
3. Right to Erasure ("Right to Be Forgotten"). You may request the deletion of your Personal Data where: (a) it is no longer necessary for the purpose it was collected; (b) you withdraw consent and no other legal basis applies; (c) you object to processing based on legitimate interests and vip155 has no overriding grounds; or (d) the data has been unlawfully processed. This right is subject to overriding legal retention obligations — vip155 cannot delete financial records that must be retained for AML or tax compliance purposes.
4. Right to Restriction of Processing. In certain circumstances — for example, while you contest the accuracy of data or the legitimacy of processing — you may request that vip155 restrict its use of your Personal Data to storage only, pending resolution of the disputed issue.
5. Right to Data Portability. Where processing is based on consent or contract and carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format (such as JSON or CSV), and to request that it be transmitted directly to another controller where technically feasible.
6. Right to Object. You have the right to object at any time to the processing of your Personal Data for direct marketing purposes. You may also object to processing based on legitimate interests, in which case vip155 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
7. Right to Withdraw Consent. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

vip155 implements a multi-layered security architecture designed to protect Personal Data against unauthorised access, accidental loss, alteration, and disclosure. Our technical and organisational security measures include, but are not limited to:

• Transport Encryption: All data in transit between the player's device and vip155 servers is encrypted using TLS 1.2 or TLS 1.3. HTTP connections are automatically redirected to HTTPS.
• Data-at-Rest Encryption: Sensitive data stored in our databases — including KYC document files, financial records, and authentication credentials — is encrypted at rest using AES-256.
• Password Hashing: Account passwords are never stored in plain text. They are processed through a salted cryptographic hash function before storage, meaning that even vip155 staff cannot view your password.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. vip155 supports time-based one-time password (TOTP) authentication as an additional account protection layer.
• Access Controls: Internal access to player Personal Data is governed by a strict role-based access control (RBAC) system. Staff members access only the data necessary for their specific job function, and all access is logged and audited.
• Penetration Testing: vip155 engages independent third-party security firms to conduct regular penetration tests and vulnerability assessments of the Platform infrastructure.
• Incident Response: In the event of a confirmed data breach, vip155's incident-response team follows a structured protocol to contain the breach, assess its scope, remediate the vulnerability, and notify affected players within 72 hours.

Notwithstanding the above, no information system is completely impervious to security threats. vip155 cannot guarantee absolute security of data transmitted over the internet. Players are responsible for maintaining the security of their own devices and account credentials. If you suspect unauthorised access to your account, contact vip155 support immediately.

The Platform is intended exclusively for adults who are 21 years of age or older. vip155 does not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you must not attempt to register an account or otherwise use the Platform.

If vip155 becomes aware that it has inadvertently collected Personal Data from an individual under the age of 21, it will take immediate steps to delete that data, suspend the associated account, and void any transactions made during the period of underage access. Winnings derived from an account opened in contravention of the age restriction will be forfeited in their entirety.

vip155 operates server infrastructure across multiple geographic regions to ensure platform performance and resilience. Personal Data collected from players in Indonesia may be stored on and processed by servers located outside of Indonesia, including in jurisdictions that may apply different data-protection standards than those you are accustomed to in your home country.

Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, vip155 relies on appropriate safeguards to protect that data, including:

• Standard contractual clauses or equivalent data-transfer mechanisms agreed between vip155 and the receiving entity.
• Binding corporate rules where transfers occur within the vip155 corporate group.
• Technical measures — including end-to-end encryption and pseudonymisation — that reduce the risk to data subjects in the event that safeguards are challenged.

By registering an account and using the Platform, you acknowledge that your Personal Data may be transferred, stored, and processed internationally in the manner described above. If you have questions about the specific safeguards applicable to a particular transfer, please contact our Data Protection Officer using the details in Section 13.

vip155 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, regulatory guidance, or the structure of our business. All amendments are effective from the date on which the revised Policy is published on the Platform.

Where a proposed amendment is material — meaning it significantly affects how we process your Personal Data or reduces your privacy rights — vip155 will provide advance notice of at least 14 calendar days before the change takes effect. Notice will be delivered via a prominent banner on the Platform and, where we hold a valid email address for you, by email to your registered address. If you continue to use the Platform after the effective date of a material amendment, you will be deemed to have accepted the revised Policy.

We recommend that you review this Policy periodically to remain informed of how vip155 protects your data. The "Last Reviewed" date displayed at the top of this page indicates when the Policy was most recently updated.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by vip155, please contact our support and data privacy team using the details below. All privacy-related correspondence is handled by our dedicated Data Protection Officer (DPO).

vip155 aims to respond to all privacy-related inquiries within 5 business days and to resolve substantive requests (such as data-access or erasure requests) within 30 calendar days of receipt of a verified request.

If you believe that vip155 has failed to adequately address a privacy concern after you have raised it directly with us, you may have the right to escalate the matter to the relevant data-protection supervisory authority in your jurisdiction. vip155 encourages players to contact us in the first instance so we have the opportunity to resolve the matter directly.