Introduction
vip5 ("we", "us", "our", or "the Company") is committed to protecting the personal data of every individual who registers an account, visits the Platform, or otherwise interacts with our services. This Privacy Policy sets out our practices with respect to the collection, use, storage, disclosure, and protection of your personal information.
This Policy applies to all users of the vip5 Platform at https://vip5.cam, including registered Players and visitors browsing without an account. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.
This Privacy Policy is incorporated by reference into the vip5 Terms & Conditions. Capitalized terms used herein but not defined shall have the meanings given to them in the Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions with respect to data matters, this Privacy Policy shall prevail.
Scope: This Policy covers personal data processed in connection with the vip5 Platform only. It does not cover data practices of third-party game studios (such as Pragmatic Play, Evolution Gaming, or Microgaming), payment processors, or external websites linked from the Platform. Each of those parties operates under its own privacy framework.
Data Controller
For the purposes of applicable data protection legislation, vip5 acts as the data controller in respect of personal data collected through the Platform. As data controller, vip5 determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.
Where vip5 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, or cloud hosting providers), those parties act as data processors and are bound by contractual obligations — including data processing agreements — that require them to protect your data to a standard no less stringent than vip5's own practices.
You may contact the vip5 data team at any time by emailing [email protected] with the subject line "Data Privacy Inquiry". All data-related correspondence is handled by our compliance team with a target response time of 5 business days.
Personal Data We Collect
vip5 collects the following categories of personal data, depending on how you interact with the Platform:
3.1 Registration & Account Data
| Data Type | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Mandatory |
| Contact Data | Email address, mobile phone number, residential city/province in Indonesia | Mandatory |
| Account Credentials | Username (stored in plain text); password (stored as a salted cryptographic hash — never in plain text) | Mandatory |
| KYC Documents | National Identity Card (KTP), passport, driver's license (SIM), utility bill or bank statement for proof of address | Required before first withdrawal |
| Payment Method Data | Bank account number and account name (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata); e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) | Required for deposits/withdrawals |
| Profile Preferences | Preferred sports markets, communication preferences, responsible gaming settings | Optional |
3.2 Transactional Data
We collect a comprehensive record of all financial transactions conducted through your Account, including deposit amounts and timestamps, withdrawal requests and outcomes, bonus credits and wagering activity, bet history (sport, market, odds, stake, outcome), and game session logs for all casino, togel (numbers lottery), and live dealer sessions.
3.3 Technical & Device Data
When you access the Platform, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device type and identifiers, time zone setting, and session duration. This data is used for security purposes, fraud detection, and to optimize the Platform's performance across the diverse range of devices used by Indonesian players — from Android smartphones to desktop browsers.
3.4 Communications Data
We retain records of all communications between you and the vip5 support team, including live chat transcripts, email correspondence, and any formal complaints or dispute submissions. These records are maintained for quality assurance, compliance, and dispute resolution purposes.
3.5 Behavioral & Usage Data
We collect aggregated and individual data about how you use the Platform — pages visited, features accessed, links clicked, search queries entered, and time spent on specific sections. This data helps us understand player preferences and continuously improve the vip5 experience for users across Jakarta, Surabaya, Bandung, Bali, and other major Indonesian cities.
How We Collect Your Data
vip5 collects personal data through the following channels:
- Direct submission: Data you actively provide during registration, KYC submission, deposit or withdrawal requests, support interactions, or promotional opt-ins;
- Automated technical collection: Data gathered automatically as you browse and use the Platform, via server logs, session tracking, and first-party cookies (see Section 11);
- Third-party verification providers: Identity and document verification data returned by KYC processing partners when you submit documents for account verification;
- Payment partners: Transaction confirmation data shared by Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal;
- Fraud prevention services: Risk-scoring signals provided by our fraud detection partners based on device fingerprinting, behavioral analytics, and publicly available sanctions databases.
Important: vip5 will never ask you to submit your personal data via unsolicited email, social media message, or third-party chat application. All legitimate data requests from vip5 originate from [email protected] or are initiated within your authenticated Account session on the Platform.
Purposes of Processing
vip5 processes your personal data for the following specific, documented purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your vip5 Account; authenticating your identity at login; delivering account-related notifications. |
| Transaction Processing | Facilitating deposits and withdrawals via local Indonesian banks and e-wallets; recording transaction histories; reconciling financial records. |
| KYC & AML Compliance | Verifying your identity, age, and address; screening against sanctions and politically exposed persons (PEP) lists; meeting anti-money laundering (AML) obligations under international gaming licensing requirements. |
| Fraud Prevention & Security | Detecting and preventing unauthorized account access, bonus abuse, collusion, money laundering, and other prohibited conduct described in the Terms & Conditions. |
| Customer Support | Responding to inquiries, resolving disputes, and maintaining communication records for quality assurance. |
| Responsible Gaming | Monitoring player activity for indicators of problem gambling; administering self-exclusion requests, deposit limits, and time-out tools; fulfilling obligations under our Responsible Gaming Policy. |
| Platform Improvement | Analyzing aggregated usage data to improve site performance, optimize game offerings, and enhance the overall player experience. |
| Marketing Communications | Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications. Players may opt out at any time. |
| Legal & Regulatory | Complying with applicable laws, responding to lawful government or regulatory requests, and defending or pursuing legal claims. |
Legal Basis for Processing
vip5 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:
- Contractual necessity: Processing required to perform our obligations under the Terms & Conditions — for example, processing deposits, verifying your identity before a withdrawal, or maintaining your Account;
- Legal obligation: Processing required to comply with applicable legal obligations, including AML/CTF regulations, licensing conditions, and lawful requests from competent authorities;
- Legitimate interests: Processing necessary for vip5's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms;
- Consent: Processing based on your freely given, informed, and specific consent — principally for marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.
Consent Withdrawal: To withdraw consent for marketing communications, simply update your communication preferences in your Account settings or contact [email protected]. Withdrawal of marketing consent does not affect your ability to use the Platform or receive essential service communications such as deposit confirmations or security alerts.
Data Sharing & Disclosure
vip5 does not sell your personal data to any third party. We share personal data only in the specific circumstances described below, and only to the minimum extent necessary for each purpose.
7.1 Service Providers (Data Processors)
We engage trusted third-party companies to provide services that are integral to the operation of the Platform. These include:
- KYC & identity verification providers: To process the documents you submit for account verification;
- Payment processors & banking partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data required to process your transactions;
- Cloud infrastructure providers: Hosting and data storage services operating under strict data processing agreements;
- Fraud detection & cybersecurity partners: Risk-scoring and threat-detection services that help safeguard the Platform and your Account;
- Customer support platforms: Live chat and ticketing systems used to manage your support interactions.
All service providers are vetted for data security standards and are contractually prohibited from using your data for any purpose beyond the specific service they provide to vip5.
7.2 Game Content Providers
When you play games powered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — limited technical session data (such as a session token and stake amount) is shared with the relevant studio solely to enable game functionality. These studios do not receive your full identity or contact details.
7.3 Legal & Regulatory Disclosure
vip5 may disclose personal data to governmental authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or our international gaming licensing obligations. We will endeavor to notify you of any such disclosure where legally permitted to do so.
7.4 Business Transfers
In the event that vip5 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide reasonable notice of any such transfer and ensure the receiving entity is bound by privacy obligations no less protective than those set out in this Policy.
International Data Transfers
As an internationally licensed gaming platform serving the Indonesian market, vip5 may process and store personal data on servers located outside of Indonesia. Where personal data is transferred to jurisdictions that do not offer the same level of statutory data protection as Indonesia, vip5 implements appropriate safeguards to ensure your data remains protected, including:
- Binding contractual obligations (standard contractual clauses) with all data recipients in third countries;
- Technical security measures including end-to-end encryption for data in transit and AES-256 encryption for data at rest;
- Regular security audits and penetration testing of international hosting infrastructure;
- Data minimization practices — transferring only the data strictly required for the specific processing purpose in each jurisdiction.
By using the Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data internationally under the safeguards described above.
Data Retention
vip5 retains personal data for the periods set out below, after which data is securely deleted or anonymized so that it can no longer be associated with any individual:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | 5 years after account closure | AML/CTF legal obligation and potential dispute resolution |
| KYC Documents | 5 years after account closure | Regulatory obligation under international gaming licensing |
| Transaction Records | 7 years after the transaction date | Financial record-keeping and AML audit requirements |
| Bet & Game History | 3 years after account closure | Dispute resolution, responsible gaming monitoring, and licensing compliance |
| Support Communications | 3 years after the communication date | Quality assurance and dispute reference |
| Technical & Device Logs | 12 months on a rolling basis | Security monitoring and fraud detection |
| Marketing Preferences | Until consent is withdrawn or account is closed | Consent-based processing — expires automatically on opt-out |
Where data is retained beyond the period of active account use, it is held in a restricted-access archive accessible only to the vip5 compliance team for legally mandated purposes.
Your Data Rights
As a vip5 player, you hold a comprehensive set of rights with respect to your personal data. These rights are detailed below. To exercise any of them, contact us at [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond within 30 calendar days.
Right of Access
Request a copy of all personal data vip5 holds about you, including the purposes for which it is processed and the recipients with whom it has been shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held about you. Minor corrections (e.g., phone number updates) can be made directly in your Account settings.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Note that legally mandated retention periods (see Section 9) may limit the scope of erasure.
Right to Restriction
Request that vip5 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or a legitimate interests objection is being assessed.
Right to Portability
Receive your personal data in a structured, commonly used, machine-readable format (JSON or CSV) so that it can be transferred to another service provider if you choose.
Right to Object
Object to the processing of your personal data for direct marketing purposes (effective immediately) or for legitimate interests processing (subject to a balancing assessment by vip5).
No Fees: vip5 does not charge any fee for handling data rights requests. We will always process your request within 30 calendar days. If your request is particularly complex or you have submitted multiple requests, we may extend this period by a further 30 days and will notify you accordingly.
Cookies & Tracking Technologies
vip5 uses first-party cookies and similar tracking technologies to operate the Platform, maintain your authenticated session, remember your preferences, and analyze usage patterns. We do not use third-party advertising cookies or cross-site behavioral tracking.
11.1 Types of Cookies We Use
- Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without preventing the Platform from working correctly.
- Functional cookies: Used to remember your preferences — such as preferred game categories, display settings, and communication choices — so that you do not need to re-enter them on each visit.
- Analytical cookies: First-party analytics cookies that help us understand how players navigate the Platform — which pages are most visited, where users encounter friction, and how feature adoption changes over time. This data is aggregated and anonymized.
- Security cookies: Short-lived cookies used by our fraud detection systems to distinguish legitimate players from automated bots and malicious actors.
11.2 Managing Cookies
You may configure your browser to refuse all cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will prevent you from logging in to your vip5 Account and using most Platform features. Instructions for managing cookies are available in the help documentation of all major browsers (Chrome, Firefox, Safari, Edge).
vip5 does not respond to browser "Do Not Track" (DNT) signals at this time, as no universally accepted standard for DNT interpretation has been established across the industry.
Minors & Age Policy
The vip5 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has provided personal data to vip5 — or has registered an Account on the Platform — please contact us immediately at [email protected].
Upon receiving a credible report of underage data collection, vip5 will promptly investigate the matter, suspend the relevant Account, delete any personal data associated with the minor to the extent permitted by law, and where applicable, report the incident to the relevant authorities.
vip5 deploys age-verification checks at the point of registration and enforces mandatory KYC verification — including government-issued identity document submission — before any withdrawal is processed. These measures are specifically designed to prevent underage access to real-money gaming services.
Security Measures
vip5 implements a multi-layered approach to data security, combining technical, organizational, and procedural controls to protect your personal data against unauthorized access, disclosure, alteration, and destruction.
13.1 Technical Controls
- TLS 1.3 encryption for all data in transit between your device and the vip5 Platform;
- AES-256 encryption for all personal data stored on vip5 servers;
- Bcrypt password hashing — your password is never stored in recoverable form;
- Two-factor authentication (2FA) available to all registered Players and mandatory for administrative staff;
- Web Application Firewall (WAF) and DDoS protection to defend against network-level attacks;
- Regular penetration testing by independent third-party security firms on at least an annual basis.
13.2 Organizational Controls
- Access to personal data is restricted on a strict need-to-know basis; operational staff have access only to the data required for their specific role;
- All staff who handle personal data undergo mandatory data protection training before gaining system access;
- A formal data breach response plan is in place, with defined notification timelines for Players and relevant authorities in the event of a confirmed breach.
Data Breach Notification: In the unlikely event of a data breach that poses a risk to your rights and freedoms, vip5 will notify affected Players without undue delay — and in any case within 72 hours of becoming aware of the breach — providing details of the nature of the breach, the data affected, and the steps we are taking to address it.
Third-Party Services & Links
The vip5 Platform integrates content and services from third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) and payment infrastructure providers. While vip5 selects these partners carefully and imposes contractual data protection obligations on all of them, we cannot accept responsibility for the independent privacy practices of third-party providers.
Each third-party service provider operates under its own privacy policy and data governance framework. We encourage you to review the privacy documentation of any third-party service with which you interact in connection with your vip5 Account. If you have concerns about a specific third-party provider's handling of your data, please contact us and we will direct your inquiry to the appropriate party.
The vip5 Platform does not contain outbound links to external websites. If you navigate away from the Platform via a URL you have typed or bookmarked independently, your activity on that external site is entirely outside the scope of this Privacy Policy.
Policy Amendments
vip5 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. The date of the most recent revision is displayed at the top of this document.
Where changes are material — meaning they significantly affect your rights or the way we process your personal data — we will provide advance notice of at least 14 days via a prominent on-platform notification and, where we hold an email address for your Account, by email. Non-material corrections (such as typographical fixes or clarifications that do not change the substance of the Policy) may be made without prior notice.
Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with the changes, you must cease using the Platform and may request Account closure as described in the Terms & Conditions.
Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or vip5's data practices, please reach out to our compliance team through the following channels:
- Email (Data Privacy): [email protected] — subject line: "Data Privacy Inquiry"
- Email (Data Rights Requests): [email protected] — subject line: "Data Rights Request — [Your Username]"
- Support Hours: 24 hours a day, 7 days a week — Indonesian-speaking agents available 08:00–24:00 WIB; English-speaking agents available overnight
- Live Chat: Available directly on the Platform with an average first-response time of under 90 seconds
We take all privacy concerns seriously and will investigate every complaint thoroughly. If you are not satisfied with our response to a data-related complaint, you have the right to escalate the matter to the relevant regulatory authority under vip5's international gaming license, whose contact details will be provided upon request.
Response Commitment: All data privacy inquiries will receive an acknowledgment within 2 business days and a substantive response within 30 calendar days. Complex requests involving large data volumes or multiple data categories may require the full 30-day period. We will always keep you informed of progress.