vip155 Privacy Policy

This Privacy Policy ("Policy") describes how vip155 ("we", "our", "us", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "the User", "the Member") who access or use the services available at vip155.app and any associated subdomains or applications.

By registering an Account on vip155, making a deposit, or otherwise interacting with any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not access or use the Platform.

vip155 is an internationally operated online betting and gaming platform that primarily serves players who are residents of Indonesia and are at least 21 years of age. The Platform offers a range of products including a football sportsbook, live casino games, slot titles, Dragon Tiger, Mahjong, and togel (Indonesia's traditional numbers lottery).

As the data controller for all personal information processed through the Platform, vip155 is responsible for ensuring that your data is handled lawfully, fairly, and transparently. This Policy applies to all personal data we collect regardless of the channel through which it is provided — whether through our website, our live chat support system, our payment processing flows, or any promotional communications you opt into.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, both of which contain additional provisions that interact with how we use your data.

In this Policy, the following terms have the meanings set out below:

• "Account" — the registered user profile created by you on the vip155 platform, associated with a unique username and password, through which you access all Platform services.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data. Examples include your full name, email address, date of birth, mobile phone number, bank account details, and IP address.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is vip155.
• "Data Processor" — a third party that processes Personal Data on behalf of vip155 under a contractual obligation and in accordance with our documented instructions (e.g., payment gateway providers, KYC verification services).
• "KYC" — Know Your Customer, the identity verification process vip155 uses to confirm the identity, age, and residency of Members, and to comply with applicable anti-money laundering obligations.
• "Cookies" — small text files placed on your device by the Platform or by third-party service providers that operate on the Platform, used to maintain session state, analyse usage patterns, and personalise your experience.
• "Sensitive Data" — a subset of Personal Data that warrants a higher level of protection, including financial account information, identity document numbers, and any data relating to your health (including self-exclusion status for responsible gaming purposes).

vip155 collects Personal Data across several categories depending on how you interact with the Platform. The specific data points within each category are set out in the table below:

vip155 collects Personal Data through the following channels:

• Directly from you: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, engage with our live chat support team, or respond to any promotional communication we send you.
• Automatically through the Platform: Our web servers, analytics systems, and session management technology automatically record Technical Data and Behavioural Data each time you access the Platform. This includes data captured via Cookies and similar tracking technologies, as described in Section 9.
• From third-party payment providers: When you initiate a transaction through BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or other accepted payment channels, the relevant provider transmits transaction confirmation data (amount in IDR, timestamp, sender account reference) to vip155 to facilitate crediting or processing your Account.
• From KYC and identity verification services: vip155 engages certified third-party KYC providers to assist in verifying the authenticity of identity documents. These providers process your submitted documents and return a verification result to vip155.
• From fraud detection and compliance services: vip155 may receive flagging signals from third-party risk intelligence services used to detect account takeover attempts, bonus abuse patterns, or potential money laundering indicators.

vip155 processes your Personal Data only where there is a lawful basis for doing so. The table below sets out each processing purpose alongside the corresponding legal basis and the categories of data involved:

vip155 does not sell your Personal Data to third parties. We do not share your data with advertisers, data brokers, or any commercial third party for their independent use. We share your data only in the limited circumstances described below:

• Payment processors and banking partners: To process your deposits and withdrawals in IDR, we must share the minimum necessary financial and identity data with your selected payment provider (e.g., BCA, BRI, OVO, DANA, GoPay). These providers operate under their own privacy policies and are subject to applicable financial regulations.
• KYC and identity verification providers: Certified third-party KYC services receive the identity documents and personal details you submit during the verification process. These providers are contractually required to process your data only for the specific purpose of identity verification on behalf of vip155.
• Game content providers: Our third-party game studios — including Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, and Spribe — may receive a session token and basic account-level data (such as an anonymised player ID and currency setting) to facilitate gameplay. They do not receive your full identity profile or financial details.
• Fraud prevention and security services: We may share Technical Data and behavioural signals with specialist security and fraud detection providers to protect the integrity of the Platform and its Members.
• Legal and regulatory authorities: vip155 may be required to disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required by applicable law or an enforceable legal process. We will only disclose the minimum data required and will, where legally permissible, notify you of such a request.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or a part of vip155's business, Member data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

vip155 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active Account, plus a minimum of five (5) years following Account closure, to satisfy anti-money laundering record-keeping obligations and to handle any post-closure disputes or regulatory enquiries.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with standard financial services record-keeping requirements.
• KYC Verification Documents: Retained for five (5) years following Account closure or the most recent verification exercise, whichever is later.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction to support dispute resolution and service quality monitoring.
• Technical and Behavioural Data: Aggregated analytics data may be retained indefinitely in anonymised form. Raw Technical Data (including IP address logs) is retained for up to twelve (12) months for security and fraud investigation purposes.
• Responsible Gaming Records: Self-exclusion records and responsible gaming tool activation logs are retained for a minimum of five (5) years to prevent circumvention of self-imposed restrictions and to satisfy regulatory requirements.
• Marketing Consent Records: Records of your marketing preferences (opt-in and opt-out) are retained for the duration of your active Account and for three (3) years thereafter.

When Personal Data is no longer required for any active purpose and its minimum retention period has expired, vip155 will securely delete or anonymise it using methods appropriate to the sensitivity of the data.

vip155 implements a layered, defence-in-depth approach to data security. The following technical and organisational measures are in place to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the vip155 platform is encrypted in transit using industry-standard TLS 1.2 or higher. The padlock icon in your browser confirms an active encrypted session.
• Encryption at rest: Sensitive data fields — including identity document references, financial account details, and password hashes — are encrypted at rest in our database infrastructure using AES-256 or equivalent encryption standards.
• Password hashing: User passwords are never stored in plaintext. vip155 uses a modern adaptive hashing algorithm (bcrypt or equivalent) with a unique per-user salt. vip155 staff cannot retrieve your plaintext password under any circumstances.
• Access controls: Access to production systems containing Personal Data is restricted to a limited number of authorised personnel on a strict need-to-know basis, protected by multi-factor authentication and reviewed quarterly.
• Intrusion detection and monitoring: Our infrastructure is monitored around the clock for anomalous access patterns, unauthorised login attempts, and potential data exfiltration signals. Alerts are triaged by our security team in real time.
• Penetration testing: vip155 conducts periodic security assessments — including penetration tests by qualified external security professionals — to identify and remediate vulnerabilities proactively.
• Data breach response: In the event of a confirmed personal data breach that poses a risk to Members, vip155 will take immediate containment action, notify affected individuals without undue delay, and report the incident to the relevant regulatory authority where required by applicable law.

vip155 uses Cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate core Platform functionality, analyse performance, and improve the overall user experience. The categories of Cookies used on the Platform are as follows:

You can manage or delete Cookies through your browser settings at any time. Note that disabling non-essential Cookies will not affect your ability to place bets or play games, but some personalisation features may not work as intended. Strictly Necessary and Security Cookies cannot be disabled without preventing core Platform functionality from operating correctly.

As a Member of vip155, you have the following rights in relation to your Personal Data. You may exercise any of these rights at any time by contacting our support team via live chat or email at [email protected]:

• Right of Access: You have the right to request a copy of the Personal Data vip155 holds about you, together with information about how it is being processed. We will respond to verified access requests within 30 calendar days.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain details directly from your Account dashboard.
• Right to Erasure ("Right to Be Forgotten"): You may request that vip155 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw your consent (for consent-based processing). Note that this right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain (e.g., AML records).
• Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format (e.g., JSON or CSV).
• Right to Object: You have the right to object to processing based on our legitimate interests — including profiling for responsible gaming monitoring purposes — unless we can demonstrate compelling legitimate grounds that override your interests. You may also object to direct marketing communications at any time, without needing to provide a reason.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

vip155 strictly prohibits the use of the Platform by anyone under the age of 21. The Platform is not directed at, and does not knowingly collect Personal Data from, individuals under 21 years of age.

As part of the Account registration process and at any subsequent KYC verification stage, vip155 actively verifies that all Members meet the 21+ age requirement. Where vip155 has reasonable grounds to suspect that a Member may be under 21, the relevant Account will be suspended immediately pending age verification, and no withdrawals will be processed until the Member's age is confirmed to our satisfaction.

If vip155 discovers that Personal Data has been collected from an individual who is under 21 and has gained access to the Platform by providing false information, that data will be deleted from our systems as promptly as practicable, the Account will be permanently closed, and any deposited funds will be returned to the original payment source following an investigation.

If you are a parent or guardian and believe that a minor in your care has accessed vip155 and provided Personal Data without your consent, please contact our support team immediately via live chat so that we can investigate and take appropriate action without delay.

The vip155 platform integrates with a number of third-party services to deliver its full range of features. Each of these integrations involves some level of data exchange, and you should be aware that each third-party provider operates under its own privacy policy:

• Game studios: Evolution Gaming, Pragmatic Play, PG Soft (Pocket Games Soft), NetEnt, Microgaming, and Spribe power the live casino and slot titles available on vip155. These studios receive anonymised session tokens and currency data (IDR) sufficient to run your game session; they do not receive your full identity profile.
• Payment networks: Transactions routed through BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja are processed under the respective provider's terms and privacy policies. vip155 has no control over how these providers store or process data on their own systems beyond their contractual obligations to us.
• Analytics providers: vip155 may use third-party analytics tools to track aggregated Platform usage. All data shared with analytics providers is anonymised or pseudonymised before transmission and is never linked back to an individual Member profile without your explicit consent.
• Live chat infrastructure: Our 24/7 customer support live chat is delivered through a third-party customer engagement platform. Chat transcripts are stored in accordance with our data retention policy (see Section 7) and are accessible only to authorised vip155 support staff.

vip155 is not responsible for the privacy practices of any third-party provider referenced in this Policy. We encourage you to review the privacy policies of any third-party payment providers or game studios you interact with through the Platform.

vip155 operates internationally, and your Personal Data may be stored on or transferred to servers located outside of Indonesia. Where such transfers occur, vip155 takes appropriate steps to ensure that your data receives a level of protection that is consistent with the standards described in this Policy and with applicable data protection law.

Safeguards applied to international transfers include:

• Contractual data processing agreements with all Data Processors that mandate equivalent data protection standards regardless of where processing occurs.
• Hosting infrastructure located in data centres that maintain ISO 27001 certification or an equivalent internationally recognised security standard.
• Restrictions on onward transfers — no Data Processor engaged by vip155 may sub-contract the processing of your Personal Data to a further party without vip155's prior written consent and the imposition of equivalent contractual safeguards.

By using the vip155 platform, you acknowledge and consent to the transfer of your Personal Data to countries outside Indonesia where this is necessary to provide the Platform services, subject to the safeguards described above.

vip155 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to Platform functionality. When material changes are made, we will notify active Members via a prominent notice on the Platform homepage or by email to your registered email address, with a minimum of 14 days' notice before the changes take effect.

The updated Policy will be published on this page with a revised Effective Date prominently displayed at the top of the document. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to the amended Policy, you must cease using the Platform and may request Account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how vip155 protects your Personal Data. Archived versions of previous Policy editions are available upon request by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way vip155 handles your Personal Data, please reach out to our Data Protection team using one of the following channels:

• Live Chat: Available 24/7 directly through the vip155 platform. This is the fastest way to reach our support team for urgent privacy concerns.
• Email: [email protected] — for formal written requests relating to data access, rectification, erasure, or any other rights described in Section 10. We will acknowledge your request within 2 business days (WIB) and respond fully within 30 calendar days.

When submitting a rights request by email, please include your registered username and the email address associated with your vip155 Account so that we can locate your records and verify your identity efficiently. Do not include your password or full financial account details in any email correspondence.