Privacy Policy

1. Introduction

viv288 is committed to protecting the privacy and personal data of every player who uses our platform. We recognise that our Indonesian player base entrusts us with sensitive personal and financial information, and we take that responsibility seriously. This Policy has been written to be transparent, specific, and accessible — free from the deliberately obscure language that characterises lesser privacy notices.

This Policy applies to all data collected through the viv288 website at https://viv288.cam, our mobile-optimised web interface, our customer support channels (including live chat and email), and any other viv288-branded communications. It does not apply to third-party websites that may be linked from our platform.

If you have questions about this Policy or wish to exercise any of your data rights, please contact us at the email address provided in Clause 16. We aim to respond to all privacy-related enquiries within 5 business days.

2. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, location data, email address, IP address, and financial account details.
• "Processing" means any operation performed on personal data — including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Controller" means viv288, which determines the purposes and means of processing personal data collected through the Platform.
• "Processor" means any third-party service provider engaged by viv288 to process personal data on its behalf, subject to binding contractual obligations.
• "Data Subject" means the registered Player whose personal data is being processed.
• "KYC" (Know Your Customer) refers to identity and address verification conducted prior to processing withdrawal requests.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data.
• "WIB" means Western Indonesia Time (UTC+7), the time zone applicable to Jakarta and the primary operating time zone of viv288's customer support team.

3. Data We Collect

3.1 Registration Data

When you create a viv288 account, we collect the following information:

• Full legal name (as it appears on your Indonesian KTP / National Identity Card)
• Date of birth (to confirm you are 21 or older)
• Indonesian mobile phone number
• Email address
• Preferred username
• Residential address (province, city, and postal code)

3.2 KYC Verification Data

Prior to processing your first withdrawal, we require additional identity documents:

• Photograph or scan of your KTP (both sides)
• Selfie holding your KTP alongside a handwritten note with the current date and "viv288"
• Proof of payment method (e.g., screenshot of your BCA, BRI, BNI, Mandiri, or other supported bank's mobile app showing your name and account number)

3.3 Financial Data

We record all deposits and withdrawals processed through your account, including transaction amounts in IDR (Rp), timestamps, and the bank or e-wallet used. viv288 does not store your full bank account credentials; only the account number and bank name are retained for withdrawal processing purposes.

3.4 Usage and Technical Data

We automatically collect technical data when you use the Platform, including:

• IP address and approximate geolocation (city-level)
• Device type, operating system, and browser version
• Session duration, pages visited, and features used
• Betting and game activity logs (games played, wager amounts, outcomes)
• Login timestamps and authentication events

3.5 Communications Data

When you contact viv288 support — whether by email or live chat — we retain records of those communications, including the content of messages and any attachments you provide, for quality assurance, dispute resolution, and regulatory compliance purposes.

4. How We Collect Your Data

viv288 collects personal data through the following means:

• Directly from you — via account registration forms, KYC document uploads, deposit and withdrawal requests, and support communications.
• Automatically — via server logs, cookies, and similar tracking technologies that operate when you browse or use the Platform.
• From third parties — including identity verification service providers enga ged for KYC processing, payment processors facilitating deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, and Bank Permata, and fraud prevention partners who help us identify suspicious activity patterns.

5. Purpose of Processing

viv288 processes your personal data only for specific, legitimate purposes. The table below summarises the primary purposes and the categories of data used for each:

6. Legal Basis for Processing

viv288 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to deliver the services you have contracted with us for — account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable KYC, anti-money laundering (AML), and counter-terrorism financing (CTF) regulations applicable to our operating licence jurisdiction.
• Legitimate interests: Processing conducted to protect the security and integrity of the Platform, prevent fraud, and improve our services — provided these interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes — such as personalised promotional communications — conducted only where you have provided explicit, informed consent. You may withdraw consent at any time by contacting support without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

7.1 Service Providers

viv288 shares personal data with third-party service providers only to the extent necessary for them to perform services on our behalf. All processors are subject to binding data processing agreements that restrict their use of your data to the purposes specified by viv288. Categories of processors include:

• Payment processing partners (facilitating transfers via Indonesian banks and e-wallets)
• Identity verification and KYC service providers
• Fraud detection and prevention platforms
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Analytics service providers (operating on anonymised or aggregated data only)

7.2 Legal and Regulatory Disclosure

viv288 may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where we are required to do so by applicable law, court order, or regulatory directive. We will endeavour to notify you of any such disclosure where we are legally permitted to do so, but cannot guarantee prior notice in all circumstances.

7.3 Business Transfers

In the event that viv288 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players via registered email prior to any such transfer, and the acquiring entity will be bound by the terms of this Policy or a successor policy of equivalent protection.

8. International Data Transfers

As viv288 operates internationally, your personal data may be processed in countries other than Indonesia. Where data is transferred outside Indonesia, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant data protection authorities
• Transfers only to countries with adequate data protection frameworks recognised by international standards
• Binding corporate rules and processor agreements that require equivalent levels of data protection to those described in this Policy

By using the viv288 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Indonesia for the purposes described in this Policy.

9. Data Retention

viv288 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised data may be retained indefinitely for aggregate statistical analysis.

10. Security Measures

viv288 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our security programme includes:

• Encryption in transit: All data exchanged between your browser and our servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive personal and financial data stored in our databases is encrypted at the storage layer.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All internal access is logged and monitored.
• Multi-factor authentication: Administrative access to production systems requires multi-factor authentication (MFA).
• Regular audits: We conduct periodic internal security reviews and engage independent third-party auditors to perform penetration testing.
• Incident response: viv288 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and relevant authorities within the timeframes required by applicable law.

11. Cookies & Tracking Technologies

11.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function correctly, operate more efficiently, and provide reporting information to site owners. viv288 uses first-party cookies only — we do not deploy third-party advertising or cross-site tracking cookies.

11.2 Types of Cookies We Use

11.3 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. However, disabling strictly necessary cookies will impair or prevent your ability to log in and use the Platform. Most modern browsers provide cookie management controls under Settings or Preferences. Please consult your browser's help documentation for specific instructions.

12. Your Data Rights

As a Data Subject, you are entitled to exercise the following rights with respect to your personal data held by viv288. To submit a request, please contact us using the details in Clause 16. We will respond within 30 calendar days and may request identity verification before processing your request.

13. Protection of Minors

viv288 is strictly an adult platform for players aged 21 and above. We do not knowingly collect, store, or process personal data from any person under the age of 21. Our registration process includes an explicit age declaration and is supported by mandatory KYC verification that confirms date of birth against a government-issued identity document.

If you are a parent or guardian and believe that a minor has registered an account on viv288 using false information, please contact us immediately at [email protected]. We will investigate the report, close the account, and securely delete all associated personal data within 48 hours of confirmed identification. We also encourage parents and guardians to make use of internet filtering tools to prevent minors from accessing online gaming platforms.

14. Third-Party Links and Services

The viv288 Platform may contain references to third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) whose software powers certain games available on our platform. While these studios provide the game engines, all player data associated with gameplay on viv288 remains under viv288's control and is not independently accessible by the studios beyond what is necessary for game functionality.

Where the Platform contains any links to external websites — such as responsible gaming resources — viv288 is not responsible for the privacy practices of those external sites. We encourage you to review the privacy policy of any third-party site you visit independently of viv288.

15. Changes to This Policy

viv288 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. When material changes are made, we will notify registered players via email to the address on file at least 7 days before the updated Policy takes effect. The "Last Updated" date at the top of this page will be revised accordingly.

We encourage you to review this Policy periodically. Continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you may request account closure in accordance with the procedure described in our Terms & Conditions.

16. Contact & Complaints

If you wish to exercise any of your data rights, raise a privacy concern, or make a complaint about our data handling practices, please contact the viv288 Privacy team using the details below. All privacy-related enquiries are handled separately from general customer support to ensure appropriate confidentiality and attention.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. viv288 will cooperate fully with any regulatory investigation conducted in accordance with applicable law.

This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions. If any provision of this Policy is found to be unenforceable, the remaining provisions shall continue in full force and effect.