vip78 Privacy Policy

1Introduction

1.1  This Privacy Policy applies to all personal data processed by vip78 in connection with the online sportsbook, casino, and associated services available at https://vip78.ws (the "Platform"). vip78 is committed to handling your personal information with care, transparency, and respect for your privacy rights.

1.2  By creating a vip78 account, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

1.3  This Policy should be read alongside the vip78 Terms & Conditions, which govern your use of the Platform as a whole. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy prevails.

2Definitions

2.1  Throughout this Privacy Policy, the following terms have the meanings assigned below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, national identity number, contact details, payment information, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" — vip78, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of vip78 under a written data processing agreement (e.g., a payment gateway or KYC verification provider).
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "Cookie" — a small text file stored on your device by your web browser when you visit the Platform, used to remember your preferences and support Platform functionality.
• "KYC" — Know Your Customer, the identity and age verification process required before processing withdrawals above defined thresholds.

3Data We Collect

3.1  vip78 collects the following categories of Personal Data, depending on your interaction with the Platform:

3.2  vip78 does not collect or store full payment card numbers, CVV codes, or banking login credentials. Payment transactions are processed via PCI-DSS-compliant third-party payment processors, and vip78 receives only a tokenised reference for reconciliation purposes.

4How Data Is Collected

4.1  Directly from you — when you register an account, complete the KYC process, make a deposit or withdrawal request, contact our support team, or respond to a promotional offer.

4.2  Automatically — when you browse or interact with the Platform, our servers and analytics systems automatically record Technical Data and Usage Data as described in Section 3. This includes data collected via cookies and similar tracking technologies (see Section 8).

4.3  From third parties — vip78 may receive Personal Data from the following third-party sources in limited circumstances:

• Identity verification and fraud-screening providers, who return a verification result and risk score against the documents you submit.
• Payment processors (including local Indonesian banks and e-wallet operators), who confirm transaction status and the account name associated with a transfer.
• Responsible gaming databases or self-exclusion registries, where vip78 checks incoming registrations to honour exclusion requests made elsewhere.

5Purposes of Processing

5.1  vip78 processes your Personal Data for the following clearly defined purposes:

• Account management — creating, maintaining, and securing your vip78 account, including authenticating your identity on login.
• Service delivery — processing deposits and withdrawals, settling bets, awarding bonuses, and providing access to all Platform features including sportsbook, slots, live casino, and togel (Indonesia's traditional numbers lottery) markets.
• Identity verification (KYC) — confirming your age (21+), identity, and residential address in accordance with our obligations as an internationally licensed gaming platform.
• Fraud prevention and security — detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and bonus abuse.
• Customer support — responding to enquiries, resolving disputes, and maintaining records of support interactions.
• Responsible gaming — monitoring betting patterns for signs of problem gambling, enforcing self-exclusion and deposit limits, and communicating with at-risk members as described on our Responsible Gaming page.
• Regulatory compliance — meeting obligations under applicable international gaming regulations, anti-money-laundering (AML) requirements, and financial reporting standards.
• Platform improvement — analysing aggregated, anonymised usage data to improve the Platform's performance, user experience, and product offering.
• Marketing communications — sending you promotional offers, bonus notifications, and product updates where you have opted in to receive such communications. You may opt out at any time.

5.2  vip78 will not process your Personal Data for any purpose not listed above without first obtaining your explicit consent or a clear legal mandate to do so.

6Legal Basis for Processing

6.1  vip78 relies on the following legal bases to process your Personal Data, consistent with internationally recognised data protection principles:

• Contractual necessity — processing required to fulfil the vip78 Terms & Conditions you accepted at registration, including account management, payment processing, and bet settlement.
• Legal obligation — processing required to comply with KYC, AML, and regulatory reporting obligations applicable to internationally licensed gaming operators.
• Legitimate interests — processing carried out to protect the Platform and its members from fraud, abuse, and security threats, where such interests are not overridden by your privacy rights.
• Consent — processing for marketing communications, optional analytics, and any other purpose where we have specifically requested and obtained your agreement. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7Data Sharing & Disclosure

7.1  vip78 does not sell your Personal Data. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors and banking partners — Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data required to process your deposits and withdrawals. These partners operate under their own regulated privacy frameworks.
• KYC and identity verification providers — specialist third-party services that verify the authenticity of identity documents and screen against sanctions and politically exposed persons (PEP) lists. These providers act as Data Processors under written agreements with vip78.
• Game content providers — studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe receive pseudonymised player identifiers and game session data necessary to operate their games within the Platform. No directly identifiable data (such as full name or bank details) is shared with game studios.
• IT infrastructure and security providers — cloud hosting, content delivery, DDoS protection, and fraud-monitoring vendors who process Technical Data on vip78's behalf under strict contractual data-processing terms.
• Legal and regulatory authorities — where vip78 is required by law, court order, or regulatory direction to disclose Personal Data. vip78 will notify you of such a disclosure to the extent permitted by applicable law.

7.2  All third-party Data Processors engaged by vip78 are bound by written data processing agreements that restrict their use of your data to the specific service they provide and require them to maintain security standards at least equivalent to those applied by vip78.

7.3  If vip78 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices that will apply going forward.

8Cookies & Tracking Technologies

8.1  vip78 uses cookies and similar technologies (including local storage and session tokens) to operate and improve the Platform. The cookies we use fall into the following categories:

8.2  vip78 does not use third-party advertising cookies or behavioural tracking pixels to serve targeted advertising to members or non-members on external websites.

8.3  You can manage cookie preferences through your browser's built-in controls. Please note that disabling functional cookies may impair certain Platform features. Instructions for managing cookies in major browsers are available on those browsers' respective help pages.

9Data Retention

9.1  vip78 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulations. The following retention periods apply as a general guide:

• Account and identity data — retained for the duration of your active membership plus five (5) years following account closure, to meet AML record-keeping requirements.
• Transaction and financial records — retained for a minimum of five (5) years from the date of the transaction, in accordance with financial regulatory requirements.
• KYC documentation — retained for five (5) years following the conclusion of the business relationship, after which documents are securely deleted and not retained in any archival form.
• Support communications — retained for two (2) years from the date of the last interaction, unless the communication relates to an open dispute or legal matter, in which case it is retained until final resolution.
• Technical and usage logs — retained for twelve (12) months in identifiable form, after which they are anonymised and may be retained indefinitely for aggregated analytics purposes.
• Marketing consent records — retained for the duration of your membership plus three (3) years to demonstrate compliance with consent requirements.

9.2  When data reaches the end of its retention period, vip78 will either securely delete it (using methods that render recovery impossible) or anonymise it such that it can no longer be attributed to any individual.

10Security Measures

10.1  vip78 implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• TLS 1.3 encryption on all data in transit between your device and vip78 servers.
• AES-256 encryption for sensitive data at rest within vip78 databases.
• Bcrypt password hashing with unique per-account salts — vip78 staff cannot see your password in plaintext.
• Role-based access controls — staff access to Personal Data is restricted to those whose job function requires it, with all access logged and audited.
• Multi-factor authentication for all staff accounts that can access member data.
• Regular penetration testing and vulnerability scanning by independent security researchers.
• DDoS mitigation and web application firewall (WAF) protection at the network perimeter.

10.2  In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, vip78 will notify affected members without undue delay — and in any event within 72 hours of becoming aware of the breach — via the email address registered to your account, detailing the nature of the breach, data affected, likely consequences, and steps vip78 is taking to address it.

11Your Privacy Rights

11.1  As a vip78 member, you hold the following rights in relation to your Personal Data. To exercise any of these rights, submit a written request to support@vip78.ws with the subject line "Privacy Request — [Your Username]". vip78 will respond within 30 days of receipt.

11.2  Where vip78 is unable to fulfil a rights request — for example, because complying would conflict with a legal retention obligation — we will explain the reason in our response and identify any alternative steps available to you.

11.3  vip78 will not charge a fee for handling straightforward rights requests. In the case of manifestly unfounded or excessive requests (for example, repetitive requests for the same data within a short period), vip78 reserves the right to charge a reasonable administrative fee or decline to act, with written justification provided.

12Minors

12.1  The vip78 Platform is strictly intended for adults aged 21 years and over. vip78 does not knowingly collect Personal Data from individuals under the age of 21.

12.2  If vip78 becomes aware that an account has been created by or in the name of a person under 21, that account will be immediately suspended, all associated data will be reviewed, and any balance will be returned to the verified deposit source. The matter may be referred to the relevant authorities.

12.3  If you believe that a minor may have registered on the Platform, please contact us immediately at support@vip78.ws. We take these reports seriously and will investigate and act without delay.

13Policy Changes

13.1  vip78 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. The current version of the Policy, together with its version number and effective date, is always available at https://vip78.ws/privacy-policy.

13.2  Where a proposed change is material — meaning it affects the types of data we collect, the purposes for which we process it, or the rights you hold — vip78 will notify you by email at least seven (7) days before the change takes effect. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

13.3  For minor, non-material changes (such as clarifications of existing language, correction of typographical errors, or updates to contact details), vip78 may update the Policy without prior individual notice, though the "Last Updated" date at the top of the page will always reflect the most recent revision.

14Contact Us

14.1  If you have any questions, concerns, or requests relating to this Privacy Policy or vip78's data handling practices, please reach out through the following channels:

• Email: support@vip78.ws — use the subject line "Privacy Request — [Your Username]" for all data-related enquiries.
• Live Chat: Available within your account dashboard after login, staffed by Indonesian-speaking agents during 08:00–22:00 WIB, seven days a week.

14.2  vip78 aims to resolve all privacy-related enquiries within 30 calendar days of receipt. For complex requests that require additional time, we will notify you within the initial 30-day window and provide an estimated resolution date.

14.3  This Privacy Policy was last updated in January 2026 (Version 2.4) and supersedes all previous versions. If you are viewing a cached version of this page, please refresh to ensure you are reading the most current text.