Privacy Policy — viv88

viv88 ("we", "us", "our", or "the Company") is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy has been drafted to clearly set out our data-handling practices in a transparent and accessible manner consistent with internationally recognized data protection principles.

The viv88 platform is an online gaming service primarily serving players based in Indonesia, with all natural-language content published in English. We recognize that our players entrust us with sensitive personal and financial information, and we take that responsibility seriously. This document describes what data we collect, the lawful basis on which we process it, the third parties with whom we may share it, the security measures we apply to protect it, and the rights you hold in relation to your own data.

This Privacy Policy should be read alongside the viv88 Terms & Conditions, which govern your overall use of the platform. Where any conflict arises between this policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall prevail.

The following terms are used throughout this Privacy Policy with the meanings assigned below:

viv88 collects Personal Data across several categories depending on the nature of your interaction with the platform. The table below outlines the specific data types we process:

We do not collect sensitive personal data categories (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless expressly required for a specific compliance purpose and with your explicit consent.

viv88 collects Personal Data through the following channels and mechanisms:

• Direct registration: When you create an account on the viv88 platform, you voluntarily provide Identity Data and Contact Data through the registration form.
• Account activity: As you use the platform — placing bets, depositing funds, requesting withdrawals, or redeeming bonuses — we automatically record the corresponding Gaming Data and Financial Data associated with your account.
• KYC submissions: When our compliance team requests identity verification, you submit documentary evidence directly through the platform's secure document upload facility.
• Payment processing: When you initiate a deposit or withdrawal via a local Indonesian bank (such as BCA, BRI, BNI, or Mandiri) or an e-wallet (such as GoPay, OVO, or DANA), our payment processor shares transaction confirmation data with us to credit or debit your account accurately.
• Automated technical collection: Our servers and analytics tools automatically log Technical Data (IP address, device details, session timestamps) whenever you access the platform, whether or not you are logged into an account.
• Cookies and tracking technologies: Our platform uses cookies and similar technologies to recognize your browser session, maintain login state, measure platform performance, and support fraud detection. See Section 7 for full details.
• Customer support interactions: When you contact us via live chat or email, the content of that communication is recorded and associated with your account as Communications Data.
• Third-party sources: In limited circumstances (for example, fraud screening or age verification), we may receive supplementary data about you from reputable third-party identity verification providers or public databases. We will only use such data in compliance with this Privacy Policy.

viv88 processes your Personal Data only where there is a clear, lawful purpose for doing so. The table below maps each primary processing activity to its purpose and legal basis:

Where we rely on legitimate interests as our legal basis, we have assessed that our interests do not override your fundamental rights and freedoms, particularly given the nature of the data processed and the safeguards we apply. You have the right to object to processing based on legitimate interests — see Section 10.

Where we rely on consent (for example, marketing communications), you may withdraw that consent at any time by contacting our support team or updating your communication preferences within your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

viv88 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share your data only in the following limited and controlled circumstances:

• Payment service providers: We share Financial Data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet operators (GoPay, OVO, DANA, ShopeePay, LinkAja) solely for the purpose of processing your deposit and withdrawal transactions. These providers act as independent data controllers for their own services and are subject to their own privacy policies.
• KYC and identity verification providers: Where we use a third-party KYC service to verify your identity and age, we share the necessary Identity Data and KYC Documentation with that provider under a strict data-processing agreement. The provider is prohibited from using your data for any purpose other than verification.
• Game content providers: viv88 integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers may receive Technical Data (such as your session token and device type) for the purpose of rendering game content and maintaining game integrity. They do not receive your full Identity Data or Financial Data.
• Fraud detection and risk management services: We may share Technical Data and Account Data with specialist fraud-screening providers to identify and prevent fraudulent activity, money laundering, and multi-account abuse.
• IT infrastructure and hosting providers: Our platform is hosted on secure infrastructure provided by third-party cloud service providers. These providers process data on our behalf under contractual data-processing agreements and do not have independent access to player data.
• Legal and regulatory authorities: We may disclose Personal Data to law enforcement agencies, gaming regulators, financial intelligence units, or courts where we are legally required to do so, or where disclosure is necessary to establish, exercise, or defend a legal claim.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of our business, your Personal Data may be transferred to the acquiring entity. We will notify you of any such transfer and the privacy practices applicable to your data prior to completion.

The viv88 platform uses cookies and related tracking technologies to deliver a functional, secure, and optimized user experience. When you first access the platform, you will be presented with information about our use of cookies. Continuing to use the platform constitutes acknowledgment of that use.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function and cannot be disabled. They include session management cookies that keep you logged in while navigating between pages, CSRF protection tokens, and load-balancing cookies. No personal data collected by these cookies is used for marketing.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming reminder intervals — so that you do not need to reconfigure them on each visit.
• Analytics Cookies: We use analytics tools to understand aggregate patterns of platform use — which game categories are most popular, how long sessions last, and where players encounter errors. These cookies collect Technical Data in anonymized or pseudonymized form. No individual player is personally identified in our analytics reports.
• Security and Fraud-Detection Cookies: These cookies collect Technical Data (IP address, device fingerprint, browser characteristics) to identify suspicious access patterns, detect multi-account abuse, and prevent unauthorized login attempts.

You may control cookie preferences through your web browser settings. Note that disabling Strictly Necessary Cookies will prevent you from logging in or using core platform features. Disabling Functional Cookies will mean your preferences are not remembered between sessions. Analytics and fraud-detection cookies can be disabled without affecting core functionality, though doing so may reduce the quality of fraud screening applied to your account.

viv88 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. Our standard retention schedule is as follows:

At the end of the applicable retention period, Personal Data is securely deleted or permanently anonymized so that it can no longer be linked to any individual. Anonymized, aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and business planning purposes.

viv88 implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and the viv88 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data fields — including password hashes, identity document data, and financial account identifiers — are stored in encrypted form within our database infrastructure. Plain-text passwords are never stored.
• Access Controls: Access to player Personal Data within viv88's internal systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular audit. Access credentials are subject to multi-factor authentication.
• Intrusion Detection and Monitoring: Our platform infrastructure is protected by continuous intrusion detection systems and 24/7 security monitoring. Anomalous activity patterns trigger automated alerts for immediate investigation.
• Penetration Testing: viv88 engages independent cybersecurity specialists to conduct regular penetration tests of our platform infrastructure, identifying and remediating vulnerabilities before they can be exploited.
• Data Minimization: We collect only the minimum Personal Data necessary for each specific processing purpose, limiting the volume of data exposed in the event of any security incident.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, viv88 will notify affected Players without undue delay and take all reasonable steps to contain and remediate the incident.

While viv88 takes every reasonable precaution to secure your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you believe your account has been compromised, contact our 24/7 support team immediately via live chat.

As a Player whose Personal Data is processed by viv88, you hold a number of rights in relation to that data. viv88 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers:

• Right of Access: You may request a copy of the Personal Data that viv88 holds about you, along with information about how it is processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account data (name, contact details), you can update this directly within your account settings. For KYC documentation, please contact support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data. Note that this right is subject to limitations where retention is required by law (for example, financial records must be retained for regulatory purposes as described in Section 8). Account closure does not automatically trigger immediate deletion — data is retained for the periods set out in the retention schedule and then securely deleted.
• Right to Restriction of Processing: Where you contest the accuracy of data we hold, or where you have objected to processing pending our assessment of your objection, you may request that we restrict processing of your data to storage only until the matter is resolved.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request a copy of your Personal Data in a structured, machine-readable format (such as CSV or JSON).
• Right to Object: You have the right to object to processing based on legitimate interests. Upon receiving an objection, we will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact our Data Protection team via the live chat support channel or by email at [email protected] (plain text — not a clickable link). We will require you to verify your identity before processing any rights request to protect against unauthorized third-party requests.

The viv88 platform is strictly an adults-only (21+) service. We do not knowingly collect, process, or store Personal Data relating to any individual under the age of 21. All account registrations require confirmation that the applicant is 21 or older, and KYC verification is used to enforce this requirement.

If viv88 discovers that Personal Data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete all associated Personal Data, return any deposited funds, and void any gaming activity that occurred during the period of underage access. Any bonuses claimed will be forfeited.

Parents and guardians who believe that their child may have accessed the viv88 platform are encouraged to contact our support team immediately via live chat so that we can take prompt action. We also encourage parents and guardians to make use of parental control software to restrict access to online gaming platforms on devices used by minors.

The viv88 platform may contain references or contextual links to third-party services, including payment providers, game studios, and sports data providers. This Privacy Policy applies solely to Personal Data processed by viv88 in connection with the operation of our own platform.

When you interact with a third-party service — for example, when you initiate a GoPay or OVO e-wallet transaction — you are submitting data directly to that third-party provider, and their own privacy policy governs how they handle that data. viv88 is not responsible for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any third party before submitting your Personal Data to them.

viv88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes to this policy, we will:

• Update the "Last Updated" date displayed at the top of this page.
• Display a prominent notice on the viv88 platform homepage for a minimum of 14 days following the update.
• Where practicable and where the change materially affects your rights, send a notification to your registered contact method.

Your continued use of the viv88 platform following notification of a material change to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the updated policy, you must cease using the platform and may request account closure by contacting support. We recommend reviewing this page periodically to remain informed of any updates.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way viv88 handles your Personal Data, please contact our team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the viv88 platform. Indonesian-speaking agents are available from 08:00 to 22:00 WIB daily.
• Email: [email protected] (plain text — not a clickable link). We aim to respond to all privacy-related email inquiries within 5 business days.

For requests to exercise your data rights (access, rectification, erasure, portability, objection), please clearly state your full account username and the specific right you wish to exercise. We will require identity verification before processing any rights request.

For urgent security concerns — such as suspected unauthorized access to your account — please use the live chat channel for the fastest possible response. You may also review our Responsible Gaming page if you wish to apply account restriction tools, or our FAQ page for answers to common questions about your account and our services.