Vip123 Privacy Policy – Member Data Protection Indonesia

Vip123 understands that privacy is more than just words—it is a fundamental right of every person who entrusts their information to us. This Privacy Policy is designed to provide a clear and honest overview of how the vip123 platform manages each member's personal data.

This document applies to all services available on the vip123 platform, including access via website and mobile app (Android and iOS). By registering an account or using our services, you confirm that you have read and agreed to the full contents of this Privacy Policy.

We process data only for legitimate, proportionate, and transparent purposes. We have nothing to hide—every type of data we collect and the reason for its use is explicitly stated in this document. If you have further questions, our team is always available via 24-hour live chat.

Vip123 collects various types of data necessary to operate the service optimally, ensure platform security, meet legal obligations, and provide a relevant experience for every member. Here are the details:

We do not collect irrelevant or excessive data. Every piece of information requested has a clear reason and is proportionate to its intended purpose. For financial data such as bank account information, we only store what is necessary for payment identification and never store full credit card details on our servers.

The data you provide to vip123 is used responsibly and solely for the purposes explicitly outlined below. We do not process data for any other purpose without prior notice and your consent.

• Account Operations: Creating, managing, and securing your member account, including the login process, account recovery, and identity verification (KYC).
• Transaction Processing: Processing deposits, wins, withdrawals, and all other financial transactions accurately and on time.
• Platform Security: Detecting, preventing, and handling suspicious activity, fraud, multi-accounting, and other cybersecurity threats.
• Legal Compliance: Meeting reporting obligations, anti-money laundering (AML) requirements, and identity verification in accordance with applicable regulations.
• Service Personalization: Presenting game recommendations, promotions, and relevant content based on your preferences and play activity—only where you have given your consent.
• Service Communications: Delivering important information related to your account, transactions, policy updates, and security notifications.
• Platform Improvements: Analyzing usage patterns in aggregate (not individually) to improve features, performance, and the overall user experience.

Every personal data processing activity carried out by vip123 is grounded in a valid legal basis. We do not process data arbitrarily—there is a strong legal justification behind every data processing action we take.

• Contract Performance: Most data processing is carried out because it is necessary to fulfill the service agreement between vip123 and its members—for example, processing transactions and managing accounts.
• Legal Obligation: Some data is processed because vip123 is required to do so under applicable regulations, such as identity verification (KYC) and reporting for anti-money laundering compliance.
• Legitimate Interest: Technical and security data is processed based on vip123's legitimate interest in maintaining platform security and protecting all members from cyber threats.
• Consent: For optional processing such as content personalization and marketing communications, we only process data after obtaining your explicit consent. This consent can be withdrawn at any time.

Vip123 does not sell, rent, or trade members' personal data to any third party for commercial purposes. This principle is non-negotiable and applies without exception.

However, in operating the platform, vip123 works with a number of trusted technical partners who may require limited access to certain data. Each partner is required to sign a non-disclosure agreement (NDA) and is only permitted to use data for purposes that have been explicitly agreed upon.

• Payment Service Providers: E-wallet and banking platforms that process deposit and withdrawal transactions receive only the minimum data necessary for payment verification.
• Game Providers: Game providers receive an anonymous session ID for technical game integration purposes—not your personal identity data.
• Technical Infrastructure: Server and cloud service providers that host the vip123 platform are bound by strict data security agreements.
• Legal Authority: vip123 will only disclose data to authorities if there is an official order from a competent legal authority that is legally unavoidable.

Member data security is vip123's top technical priority. We invest significant resources in security infrastructure to ensure that every bit of data you entrust to us is protected against ever-evolving threats.

• 256-bit SSL Encryption: All communications between your device and vip123 servers are encrypted using TLS 1.3 protocol with 256-bit encryption keys—the same standard used by leading international banks.
• Stored Data Encryption: Sensitive data stored in the vip123 database—including account information and identity data—is individually encrypted using AES-256 standards.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA as a highly effective additional security layer to prevent unauthorized access to their accounts.
• Real-Time Security Monitoring: The vip123 threat detection system operates 24 hours a day, monitoring suspicious activity, repeated login attempts, and transaction anomalies.
• Regular Security Audits: The vip123 platform conducts periodic penetration testing and security audits by independent teams to identify and close security gaps before they can be exploited.
• Internal Access Controls: Access to member data within vip123 is strictly limited based on the principle of least privilege—only staff who genuinely need access to perform their duties are granted permission.

Vip123 does not store your data indefinitely. We have a clear data retention policy—data is only kept for the period necessary for its legitimate processing purpose or as required by applicable regulations.

• Active Account Data: While your account is active and services are in use, identity and account data are retained to ensure uninterrupted service.
• Transaction Data: Transaction history is retained for a minimum of 5 years in accordance with internationally applicable anti-money laundering (AML) legal requirements.
• CS Communication Data: Communication records and logs with the CS team are retained for a maximum of 2 years for service improvement and dispute resolution purposes.
• Technical Data: Technical logs and security data are retained for 12 months, after which they are automatically deleted from our systems.
• After Account Closure: If you close your account, identity data will be anonymized or deleted within 90 days, unless we are legally required to retain it for a longer period.

As a vip123 member, you hold a set of rights over your personal data that we fully respect. The following rights can be exercised at any time by contacting our team:

Vip123 uses cookies and similar technologies to ensure the platform functions properly, enhance session security, and deliver a more relevant experience for every member. The cookies we use can be divided into several categories:

• Essential Cookies: Required for core platform functions—session login, security, and navigation. This type of cookie cannot be disabled as the platform will not function without it.
• Analytics Cookies: Helps us understand how members use the platform in aggregate—which pages are visited most frequently, time spent, and navigation paths. This data is anonymous and not linked to any individual identity.
• Preference Cookies: Saving your preferences—language, time zone, and display settings—so you don't need to reconfigure them each time you visit the platform.
• Security Cookies: Used to detect suspicious activity, prevent CSRF attacks, and protect login sessions from security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may significantly affect the functionality of the vip123 platform.

Vip123 services are strictly intended for individuals aged 18 and above. We do not knowingly collect or process personal data from minors. Our age verification system is designed to prevent registration by individuals who do not meet the minimum age requirement.

If vip123 becomes aware of or has strong reason to believe that stored data belongs to an individual under the age of 18, we will immediately take steps to delete that data and close the associated account without any balance refund. Parents or guardians who discover that a minor has been using vip123 services are urged to contact our CS team immediately.

Vip123 reserves the right to update or revise this Privacy Policy from time to time in response to technological developments, regulatory changes, or service improvements. Any material changes will be communicated to members via registered email or a clearly visible notification on the platform, at least 7 days before the changes take effect.

We encourage you to review the Privacy Policy page periodically to stay informed about how your data is managed. The date of the last update is always displayed at the top of this document for your reference.

If you have any questions, objections, or wish to exercise the privacy rights outlined in this document, please don't hesitate to contact the vip123 team. We are committed to responding to all privacy-related requests within a reasonable timeframe—no more than 30 calendar days from the date the request is received.

Available communication channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the vip123 platform—the fastest way to get a response.
• Official Email: [email protected] — for requests requiring written documentation or of a formal nature.

For requests related to account deletion, data export, or objection to certain processing activities, we may require additional identity verification before processing your request to ensure no unauthorized party submits a request on your behalf.