Privacy Policy — svip55

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "svip55" / "we" / "us" / "our" — the online betting and gaming platform operated at https://svip55.cam, including all associated services, mobile interfaces, and support systems.
• "Player" / "you" / "your" — any individual who visits, registers on, or otherwise interacts with the svip55 platform.
• "Personal Data" — any information that identifies or can reasonably identify a natural person, directly or indirectly, including name, identification number, location data, email address, IP address, or online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For Players of svip55, the Data Controller is svip55.
• "Data Processor" — a third party that processes Personal Data on behalf of and under the instructions of svip55 (e.g., payment processors, KYC verification agencies).
• "KYC" — Know Your Customer; the identity verification process required for regulatory compliance and anti-money-laundering (AML) obligations.
• "Cookies" — small text files placed on your device by the svip55 platform for session management, security, and analytics purposes.
• "Services" — the full suite of sports betting, live casino, slots, togel (Indonesia's traditional numbers lottery), and other gaming products and account management features available on svip55.

svip55 acts as the Data Controller in respect of all Personal Data collected from Players through the platform. As Data Controller, svip55 is responsible for determining why and how your Personal Data is used, and for ensuring that it is processed lawfully, fairly, and transparently.

Where svip55 engages third-party service providers to process data on its behalf — such as payment processors handling transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, or GoPay, or KYC agencies conducting identity verification — those parties act as Data Processors, bound by contractual obligations that require them to process your data only as instructed by svip55 and to maintain equivalent security standards.

svip55 collects the following categories of Personal Data, depending on your level of engagement with the platform:

svip55 collects Personal Data through the following methods:

1. Direct Provision: You provide information directly when registering for an account, completing KYC verification, making deposits, requesting withdrawals, contacting customer support, or participating in promotions.
2. Automated Technologies: Our platform automatically collects Technical Data through cookies, server logs, and similar tracking technologies every time you access svip55. This includes your IP address (used to confirm you are accessing from Indonesia), device identifiers, and browsing behavior on the platform.
3. Third-Party Sources: We may receive data from licensed payment processors (confirming transaction success), KYC verification agencies (validating identity documents), and anti-fraud databases (screening for known fraudulent activity patterns).
4. Inferred Data: svip55 may derive additional insights from the data you provide, such as classifying your gaming preferences (slots versus sports betting) or estimating risk indicators for responsible gaming interventions.

svip55 processes your Personal Data for the following specific purposes:

• Account Management: Creating and maintaining your player account, authenticating login sessions, managing your balance and transaction history.
• Service Delivery: Enabling you to place bets on sports (including BRI Liga 1, EPL, Champions League, Timnas Indonesia matches, badminton events), play live casino games, spin slots from Pragmatic Play, Evolution Gaming, and Pocket Games Soft, and participate in togel draws.
• Payment Processing: Facilitating deposits and withdrawals through BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported Indonesian payment methods.
• KYC and AML Compliance: Verifying your identity, age, and legal eligibility to gamble; screening for politically exposed persons (PEPs) and sanctions lists; monitoring transactions for money laundering indicators as required by our international gaming license.
• Fraud Prevention: Detecting duplicate accounts, automated bot activity, payment fraud, bonus abuse, and other prohibited conduct outlined in our Terms and Conditions.
• Responsible Gaming: Monitoring betting patterns for signs of problem gambling; applying deposit limits, session time-outs, and reality checks; enforcing self-exclusion requests; complying with the 21+ age restriction.
• Marketing and Personalization: Sending promotional emails about new bonuses, tournaments, and game launches (you may opt out at any time); tailoring game recommendations based on your preferences.
• Customer Support: Responding to your inquiries, resolving technical issues, handling complaints, and providing 24/7 assistance in English and Bahasa Indonesia.
• Platform Improvement: Analyzing usage patterns to improve site performance, optimize mobile experience, enhance game selection, and develop new features.
• Legal Obligations: Complying with licensing requirements, tax reporting, law enforcement requests, and dispute resolution proceedings.

svip55 processes your Personal Data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms and Conditions), including account management, payment processing, and service delivery. Without this data, we cannot provide the svip55 Services.
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including KYC verification, AML monitoring, tax reporting, age verification, and responding to law enforcement requests.
• Legitimate Interests: Processing is necessary for svip55's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and operational analytics, provided these interests do not override your fundamental rights and freedoms.
• Consent: Where required by law, we obtain your explicit consent for specific processing activities, such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

svip55 does not sell or rent your Personal Data to third parties for marketing purposes. We share data only with trusted service providers who are contractually bound to process your data solely on our behalf and in accordance with this Privacy Policy. Categories of third-party recipients include:

• Payment Processors: Licensed financial institutions and e-wallet providers that process deposits and withdrawals, including Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja).
• KYC Verification Partners: Third-party identity verification agencies that validate Indonesian KTP documents, perform biometric checks, and screen against sanctions databases.
• Game Providers: Licensed software studios that deliver casino games, slots, and live dealer experiences (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft). These providers may receive minimal session data (username, bet amount, game outcome) necessary to operate the games, but do not receive identity or financial data.
• Cloud Infrastructure Providers: Secure data centers and cloud hosting services that store encrypted backups of svip55 data.
• Fraud Detection Services: Specialized anti-fraud platforms that analyze behavioral patterns and flag suspicious activity.
• Customer Support Tools: Live chat and ticketing systems used to deliver 24/7 support, including platforms that store communication transcripts.
• Analytics Providers: Services that help us understand platform performance and user behavior through aggregated, anonymized analytics (not third-party advertising networks).
• Legal and Regulatory Authorities: Government agencies, licensing bodies, law enforcement, tax authorities, and courts, where disclosure is required by law or necessary to protect svip55's legal rights.

svip55 operates internationally and may transfer your Personal Data to countries outside Indonesia for processing and storage. These transfers are subject to the following safeguards:

• Adequacy Decisions: Where possible, data is transferred to jurisdictions recognized by international authorities as providing adequate data protection standards.
• Standard Contractual Clauses: Where transfers occur to jurisdictions without adequacy recognition, svip55 implements Standard Contractual Clauses (SCCs) approved by data protection authorities to ensure equivalent protection.
• Encryption in Transit: All international data transfers are encrypted using TLS 1.3 or equivalent protocols to prevent interception or unauthorized access during transmission.
• Access Controls: Only authorized personnel with a legitimate need to access your data for the purposes outlined in this Policy may do so, regardless of where the data is stored.

By using svip55, you acknowledge and consent to the international transfer of your Personal Data as described above.

svip55 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods are as follows:

• Active Account Data: Retained for the duration of your account's active status, plus an additional 5 years following account closure to comply with AML record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years following account closure as required by our international gaming license and AML regulations.
• Transaction Records: Retained for 7 years following the transaction date to meet tax reporting and financial audit requirements.
• Marketing Consent Records: Retained until you withdraw consent, or for 2 years following your last interaction with svip55, whichever is earlier.
• Support Communications: Chat transcripts and email correspondence retained for 3 years to facilitate dispute resolution and service quality assurance.
• Self-Exclusion Records: Permanently retained to honor self-exclusion commitments and prevent inadvertent account reopening.
• Technical Logs: Server logs and analytics data retained for 12 months for security monitoring and platform optimization.

At the conclusion of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized such that you can no longer be identified.

svip55 employs industry-leading technical and organizational measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data in transit is encrypted using TLS 1.3. Sensitive data at rest (passwords, payment details, KYC documents) is encrypted using AES-256 or equivalent algorithms.
• Access Controls: Role-based access restrictions ensure that only authorized personnel can access Personal Data, and only to the extent necessary for their job function. All access is logged and audited.
• Multi-Factor Authentication: svip55 staff accessing sensitive systems must authenticate using multi-factor authentication (MFA).
• Penetration Testing: Regular third-party security audits and penetration tests identify and remediate vulnerabilities before they can be exploited.
• DDoS Protection: Advanced distributed denial-of-service (DDoS) mitigation systems protect the platform from malicious traffic and ensure continuous availability.
• Secure Development Practices: Code reviews, static analysis, and secure coding standards minimize the risk of software vulnerabilities such as SQL injection and cross-site scripting (XSS).
• Data Minimization: svip55 collects only the minimum Personal Data necessary for each processing purpose and deletes data once it is no longer needed.
• Staff Training: All svip55 personnel receive mandatory data protection and information security training annually.
• Incident Response: In the unlikely event of a data breach, svip55 maintains an incident response plan to contain the breach, notify affected individuals, and report to relevant authorities as required by law.

svip55 uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze platform performance. The cookies we use are categorized as follows:

• Strictly Necessary Cookies: Essential for basic platform functionality, including maintaining your logged-in session, remembering language preferences, and enabling secure payment processing. These cookies cannot be disabled without impairing core services.
• Security Cookies: Detect and prevent fraudulent login attempts, automated bot activity, and other security threats.
• Performance Cookies: Collect anonymized data about page load times, error rates, and navigation paths to identify and resolve technical issues.
• Functional Cookies: Remember your game preferences, favorite sports leagues, and customization settings to personalize your experience on return visits.

Third-Party Cookies: svip55 does not permit third-party advertising networks or behavioral tracking services to place cookies on our platform. Any third-party cookies present are limited to those required by licensed game providers (e.g., Evolution Gaming live casino sessions) and are subject to strict data minimization agreements.

Managing Cookies: You may configure your browser to block or delete cookies, though doing so may limit your ability to use certain features of svip55. Most modern browsers provide cookie management settings under their privacy or security preferences.

Under applicable data protection laws, you hold the following rights in relation to your Personal Data:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, including details of how it is processed and with whom it is shared.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you have the right to request correction. You may update many data fields directly through your account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your Personal Data where it is no longer necessary for the purposes collected, where you withdraw consent, or where processing is unlawful. Note that certain data must be retained to comply with legal obligations (e.g., AML records).
• Right to Restriction: You may request that we temporarily suspend processing of your Personal Data in certain circumstances, such as while we verify the accuracy of contested data.
• Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a relevant data protection supervisory authority if you believe svip55 has violated your data protection rights.

svip55 is an adults-only platform. We do not knowingly collect or process Personal Data from individuals under the age of 21. Our registration process includes mandatory age verification, and KYC procedures require submission of a valid Indonesian KTP confirming date of birth.

If we become aware that we have inadvertently collected Personal Data from a minor, we will take immediate steps to delete that data, close the account, and refund any deposits to a parent or legal guardian upon verification of their identity and relationship to the minor.

If you are a parent or guardian and believe your child has registered on svip55, please contact us immediately at [email protected].

The svip55 platform may contain links to third-party websites, such as responsible gaming support organizations, payment provider portals, or game studio homepages. This Privacy Policy applies solely to Personal Data collected by svip55 and does not extend to third-party sites.

We encourage you to review the privacy policies of any third-party websites you visit. svip55 is not responsible for the data practices or privacy standards of external sites, even where those sites are linked from our platform.

svip55 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or service offerings. Where material changes are made that affect how we process your Personal Data, we will notify you through one or more of the following methods:

• A prominent notice displayed on the svip55 homepage for a minimum of 14 days prior to the changes taking effect.
• An email notification sent to your registered email address.
• An in-platform notification upon your next login.

Your continued use of svip55 following the effective date of an updated Privacy Policy constitutes your acceptance of those changes. The "Last Updated" date at the top of this page reflects the most recent version. We encourage you to review this page periodically to stay informed of our data protection practices.

If you have questions, concerns, or complaints regarding this Privacy Policy, our data processing practices, or wish to exercise your data protection rights, please contact us through the following channel:

• Email: [email protected] (Subject: Privacy / Data Protection)
• Response Time: We aim to acknowledge all privacy-related inquiries within 2 business days and provide a substantive response within 30 calendar days.

Complaint Escalation: If you are not satisfied with our response to a data protection complaint, you have the right to lodge a complaint with your local data protection supervisory authority. We will cooperate fully with any investigation conducted by such authorities.