vip55 Privacy Policy

1 Definitions

The following terms carry the meanings assigned to them throughout this Privacy Policy:

• "vip55" / "we" / "us" / "our" — the vip55 online gaming platform and its operating entity, accessible at vip55.im.
• "Player" / "you" / "your" — any individual who registers an Account on vip55, visits the vip55 website, or otherwise interacts with vip55 services.
• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, including name, email address, mobile phone number, date of birth, payment details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, deletion, and all intermediate steps.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. vip55 is the Data Controller for the Personal Data it holds about its Players.
• "Data Processor" — a third party that processes Personal Data on behalf of vip55 under a written data processing agreement.
• "KYC" — Know Your Customer; the identity and age verification process required before a Player's first withdrawal is processed.
• "Cookies" — small text files placed on a Player's device by the vip55 website to store session data, preferences, and analytics information.

2 Data Controller

vip55 acts as the Data Controller for all Personal Data collected through the vip55 platform. vip55 is an internationally licensed online gaming platform serving players in Indonesia and other permitted markets. For all data-related enquiries, including access requests, correction requests, and complaints, please contact us at the details provided in Section 14.

3 Data We Collect

3.1 Registration Data

When you create a vip55 Account, we collect:

• Full legal name
• Date of birth (to confirm you are 21 years of age or older)
• Residential address in Indonesia
• Email address
• Indonesian mobile phone number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

Before processing your first withdrawal, vip55 requests identity verification documents, which may include:

• A copy of your Indonesian National Identity Card (KTP) or valid Indonesian passport
• Proof of your payment method (bank account screenshot showing your name and account number, or e-wallet confirmation)
• Proof of Indonesian residential address (utility bill, bank statement, or official correspondence dated within 90 days)

3.3 Financial Data

To process deposits and withdrawals, vip55 collects payment method details, including bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay), and transaction records including amounts, timestamps, and reference numbers. vip55 does not store full card numbers or CVV data; card payments are processed directly by our PCI-DSS-compliant payment processor.

3.4 Technical & Usage Data

When you access the vip55 platform, we automatically collect:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session start and end timestamps
• Pages visited, games played, and betting activity (stakes, markets, outcomes)
• Referral URL (the page you visited immediately before arriving at vip55)

3.5 Communications Data

When you contact vip55 via live chat, email, or any other support channel, we retain records of those communications, including the content of messages and any attachments. This data is used to resolve your enquiry, train support staff, and maintain a record of commitments made by either party.

3.6 Responsible Gaming Data

If you use any of vip55's responsible gaming tools — including deposit limits, self-exclusion, session reminders, or reality check alerts — we record those settings and their effective dates. This data is used solely to enforce the tools you have requested and to comply with our responsible gaming obligations.

4 How We Use Your Data

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, username, password	Contract performance
Age and identity verification (KYC)	KYC documents, date of birth	Legal obligation; contract performance
Processing deposits and withdrawals	Financial data, payment method details	Contract performance
Fraud detection and anti-money-laundering	Financial data, IP address, usage patterns	Legal obligation; legitimate interest
Customer support	Communications data, account data	Contract performance; legitimate interest
Responsible gaming enforcement	Responsible gaming settings, usage data	Legal obligation; contract performance
Platform security and abuse prevention	Technical data, IP address, device data	Legitimate interest
Personalised promotional communications	Registration data, usage data, preferences	Consent (opt-in)
Platform analytics and improvement	Anonymised usage data, session data	Legitimate interest

5 Legal Basis for Processing

vip55 processes your Personal Data on one or more of the following legal bases:

• Contract Performance: Processing necessary to create and manage your Account, process transactions, and provide the gaming services you have requested.
• Legal Obligation: Processing required to comply with applicable laws, including KYC obligations, anti-money-laundering regulations, and responsible gaming requirements.
• Legitimate Interest: Processing in pursuit of vip55's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing for which we have obtained your explicit, freely given consent, including sending you promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing & Disclosure

6.1 Service Providers

vip55 shares Personal Data with carefully selected service providers who assist in operating the platform. These include:

• Payment processors: Indonesian bank transfer aggregators, e-wallet platforms (OVO, DANA, GoPay, ShopeePay), and card networks — receive transaction data necessary to execute deposits and withdrawals.
• KYC verification partners: Third-party identity verification services that assist with document authentication and age verification checks.
• Game providers: Licensed studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft) receive anonymised session tokens necessary to deliver game content; they do not receive your full identity details.
• Fraud detection services: Automated risk-scoring systems that analyse transaction and behavioural patterns to identify suspicious activity.
• Cloud infrastructure providers: Secure, enterprise-grade hosting and data storage partners.

All service providers are bound by written data processing agreements that restrict their use of your data to the specific purposes for which it was shared.

6.2 Legal & Regulatory Disclosure

vip55 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, by a valid legal order, or where disclosure is necessary to protect the rights, property, or safety of vip55, its players, or the public.

6.3 No Sale of Data

vip55 does not sell, rent, lease, or otherwise transfer your Personal Data to third parties for their own marketing or commercial purposes. Any data sharing is limited to the specific operational purposes described in this policy.

7 Cookies & Tracking Technologies

7.1 Types of Cookies Used

The vip55 platform uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection cookies, and load balancing identifiers. These cookies cannot be disabled without preventing you from logging in or using the platform.
• Functional Cookies: Remember your preferences, such as language settings and game lobby filters. Disabling these cookies will not prevent access but may affect your experience.
• Analytics Cookies: Used to understand how players interact with the platform — which pages are visited most, where users drop off, and which features are used. Analytics data is aggregated and anonymised where possible.
• Marketing Cookies: Used only if you have opted in to receive personalised promotional communications. These cookies help vip55 measure the effectiveness of promotions and avoid showing you offers you have already seen.

7.2 Managing Cookies

You can manage or block cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site or global basis. Please note that disabling strictly necessary cookies will prevent you from accessing your vip55 Account. Disabling analytics or marketing cookies will not affect your ability to play or transact.

8 Data Retention

vip55 retains Personal Data only for as long as necessary for the purpose for which it was collected, or for as long as required by applicable law. The following retention schedule applies:

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years after closure	AML / legal obligation
KYC documents	Duration of account + 5 years after closure	AML / legal obligation
Transaction records	Duration of account + 5 years after closure	AML / legal obligation
Responsible gaming settings	Duration of account + 2 years after closure	Responsible gaming obligation
Support communications	3 years from last interaction	Legitimate interest / dispute resolution
Analytics and usage data	26 months (rolling)	Legitimate interest
Marketing preferences	Until consent is withdrawn	Consent

Following the expiry of the relevant retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to any individual.

9 Data Security

vip55 employs a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• TLS/SSL Encryption: All data in transit between your device and vip55 servers is encrypted using current TLS standards.
• Encryption at Rest: Sensitive data stored in vip55 databases — including identity documents and payment details — is encrypted at rest using AES-256 or equivalent.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff with data access privileges undergo regular security training.
• Intrusion Detection: vip55's infrastructure is monitored continuously for anomalous access patterns, potential breaches, and DDoS attacks.
• Penetration Testing: vip55 engages independent security specialists to conduct periodic penetration tests and vulnerability assessments of its platform.

10 Your Rights

As a Player, you have the following rights in relation to your Personal Data held by vip55:

• Right of Access: You may request a copy of the Personal Data that vip55 holds about you. We will respond within 30 days of a verified request.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that it be corrected. You can update most information directly from your Account settings; for KYC-related corrections, please contact support.
• Right to Erasure: You may request deletion of your Personal Data. Please note that we are required by law to retain certain data (such as transaction records) for a defined period after Account closure, even following an erasure request. We will erase all data that is not subject to a legal retention obligation.
• Right to Restrict Processing: You may request that vip55 restrict the processing of your data in certain circumstances — for example, while an accuracy dispute is being resolved.
• Right to Data Portability: You may request a machine-readable copy of the Personal Data you provided to vip55, in circumstances where processing is based on your consent or on contract performance.
• Right to Withdraw Consent: Where vip55 processes your data based on consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to Object: You may object to processing of your Personal Data where that processing is based on vip55's legitimate interests, including profiling. vip55 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, contact vip55 support at the details in Section 14. We may need to verify your identity before processing a request to protect against fraudulent access to another person's data.

11 Minors

vip55 is strictly an adults-only platform. No person under the age of 21 is permitted to register or use the vip55 platform in any capacity. vip55 does not knowingly collect Personal Data from individuals under 21. If vip55 becomes aware that Personal Data has been collected from a minor, the relevant Account will be closed immediately, all associated funds returned after review, and the Personal Data deleted as soon as legally permissible.

If you are a parent or guardian and believe that a minor in your care has created a vip55 Account, please contact our support team immediately. vip55 takes age restriction seriously and will act on any such report without delay.

12 International Data Transfers

vip55 operates globally and your Personal Data may be processed on servers located outside of Indonesia. Where Personal Data is transferred to jurisdictions that do not have data protection laws equivalent to those in your home country, vip55 takes appropriate safeguards to ensure your data remains protected. These safeguards include contractual clauses that impose data protection obligations on the receiving party and, where applicable, reliance on adequacy decisions or other approved transfer mechanisms.

vip55 prioritises the use of data centres and service providers in jurisdictions with robust data protection frameworks, and conducts due diligence on all international data processing partners before engagement.

13 Policy Amendments

vip55 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, service offerings, or applicable legal requirements. When a material change is made, vip55 will notify registered Players via the email address on file no less than 7 days before the updated policy takes effect. For non-material changes (such as clarifications or minor editorial corrections), the updated policy will be published on this page with a revised "Last Updated" date.

Your continued use of the vip55 platform after an updated Privacy Policy takes effect constitutes your acceptance of the revised policy. If you do not accept the changes, you may request closure of your Account before the effective date.

14 Contact & Complaints

For all data protection enquiries, including access requests, erasure requests, consent withdrawal, and formal privacy complaints, please contact the vip55 Data Protection team:

• Email: [email protected] (plain text — not a clickable link; please include "Data Privacy Request" in your subject line)
• Live Chat: Available 24/7 on the vip55 platform — ask to be connected to the Data Protection team.
• Response Time: We aim to acknowledge all data privacy requests within 48 hours and to provide a substantive response within 30 days of identity verification.

If you are not satisfied with vip55's handling of a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in the jurisdiction where vip55 is licensed and regulated.