Privacy Policy — vw018

1 Scope & Application

This Privacy Policy ("Policy") governs the collection, storage, processing, and disclosure of personal data by vw018 ("the Company," "we," "us," or "our") in connection with the operation of the online betting and gaming platform available at https://vw018.app ("the Platform"). It applies to all registered members, prospective members who visit the Platform without completing registration, and any individual who contacts vw018 through our support channels.

This Policy covers data collected through the Platform's web interface, mobile-browser interface, live chat widget, email support correspondence, and any other digital channel operated by or on behalf of vw018. It does not apply to third-party websites, payment processors, or game studios whose services are accessible through links or embedded interfaces on the Platform — those entities maintain their own privacy policies, which you are encouraged to review independently.

vw018 primarily serves members residing in Indonesia, including members in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, Palembang, and other Indonesian cities. References in this Policy to "applicable law" include internationally recognized data-protection principles as well as the requirements of vw018's international operating license.

2 Data We Collect

2.1 Registration Data

When you create a vw018 account, we collect the information you submit through the registration form. This includes your full legal name, date of birth, Indonesian National ID number (KTP) or passport number, residential address, email address, and mobile phone number. This information is mandatory — without it, we cannot create or maintain an account for you.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request copies of government-issued photo identification (KTP, passport, or driver's license), a recent proof of residential address (utility bill or bank statement issued within the last three months), and, where required by our compliance team, a selfie photograph holding your identification document. This data is collected to verify your identity, confirm your age (21+), and comply with anti-money-laundering obligations.

2.3 Financial and Transaction Data

We record all deposit and withdrawal transactions processed through your vw018 Account, including the transaction amount (in Indonesian Rupiah, IDR), the payment channel used (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, or other supported methods), transaction timestamps (WIB), and any associated reference numbers provided by your bank or e-wallet. We do not store your full bank account credentials or e-wallet login passwords; payment channel authentication is handled directly by the respective institution.

2.4 Betting and Gaming Activity Data

We maintain a complete record of all wagering activity on your Account, including sports bets placed on markets such as BRI Liga 1, EPL, Champions League, and AFF Cup fixtures; togel (Indonesia's traditional numbers lottery) draw entries; casino game sessions with Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft; and all other game types available on the Platform. This data is used for account management, responsible gaming monitoring, dispute resolution, and fraud detection.

2.5 Device and Technical Data

When you access the Platform, our servers automatically receive and log certain technical data from your device and browser, including your IP address, browser type and version, operating system, device model, screen resolution, referring URL, pages visited, time spent on each page, and session duration. This data is collected automatically and does not require any action on your part. It is used for security monitoring, fraud prevention, platform performance optimization, and aggregate analytics.

2.6 Communications Data

When you contact vw018 through live chat, email ([email protected]), or any other support channel, we record the content of your communications, the date and time of contact, and the resolution outcome. These records are retained to ensure quality of service, to train support staff, and to maintain a historical record of your interactions with the Platform in the event of future disputes.

2.7 Voluntary Data

You may choose to provide additional information voluntarily, such as your preferred sports teams, favorite game categories, or feedback submitted through satisfaction surveys. Provision of this data is entirely optional and its absence will not affect your ability to use any core Platform feature.

3 Legal Basis for Processing

vw018 processes personal data only where a recognized legal basis exists for doing so. The legal bases we rely upon are as follows:

4 How We Use Your Data

vw018 uses the personal data we collect for the following specific purposes:

• Account Operation: Creating, maintaining, and securing your vw018 Account; processing logins; resetting passwords; managing account settings and responsible gaming preferences.
• Transaction Processing: Receiving and recording deposits via Indonesian payment channels; processing withdrawal requests to your registered BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or other linked payment method; reconciling transaction records.
• Identity & Age Verification: Confirming that you are at least 21 years of age and that the identity presented matches your vw018 Account details, as required by our KYC policy and responsible gaming obligations.
• Fraud and Integrity Monitoring: Detecting and preventing unauthorized account access, bonus abuse, match-fixing-related betting patterns, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: Responding to account inquiries, deposit/withdrawal issues, bet dispute resolutions, technical support requests, and responsible gaming assistance in a timely and informed manner.
• Responsible Gaming: Monitoring wagering behavior to identify patterns associated with problem gambling; enforcing self-exclusion periods, deposit limits, and cooling-off periods as elected by members or mandated by compliance requirements.
• Promotional Communications: Sending you bonus offers, seasonal promotions tied to events like Idul Fitri, Ramadhan, BRI Liga 1, and AFF Cup, and other marketing messages — but only where you have given explicit consent. You may withdraw consent at any time through your account settings.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve Platform navigation, game lobby design, loading performance, and the overall member experience.
• Legal Compliance: Meeting our obligations under anti-money-laundering regulations, cooperating with law enforcement requests where legally compelled to do so, and maintaining records as required by our international operating license.

5 Data Sharing & Disclosure

vw018 does not sell, rent, or trade your personal data. We share data only in the following limited and controlled circumstances:

5.1 Payment Processors

To process deposits and withdrawals, we share your name and registered account details with the Indonesian banks and e-wallet providers you use (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja). This sharing is limited strictly to the information required to complete the specific transaction and is governed by the payment provider's own privacy terms.

5.2 KYC Verification Partners

Identity documents submitted for KYC verification are processed by certified third-party identity verification service providers. These partners operate under data-processing agreements that bind them to the same data-protection standards we apply internally. Verification results are communicated back to vw018, and raw document images are handled solely by the verification partner under their secure infrastructure.

5.3 Game Studios and Content Providers

When you play games provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, limited session data (a pseudonymous session token, bet amounts, and game-round identifiers) is shared with the relevant studio's game servers to operate the game. Studios do not receive your full name, contact details, or financial account information.

5.4 Regulatory and Law Enforcement Authorities

vw018 will disclose personal data to competent regulatory, law enforcement, or judicial authorities where we are legally required to do so by a valid legal instrument — such as a court order, regulatory investigation notice, or law enforcement request. We will notify the affected member of any such disclosure where we are legally permitted to do so.

5.5 Fraud Prevention Networks

To protect the platform from fraud, money laundering, and multi-accounting, vw018 participates in industry-wide fraud prevention networks. This may involve sharing a hashed or pseudonymized version of certain account identifiers (such as a hashed email address or device fingerprint) with consortium members. No directly identifiable data (full name, national ID number, bank account details) is shared through these channels.

6 Data Retention

We retain personal data for no longer than is necessary to fulfill the purposes for which it was collected, subject to any overriding legal retention obligations. The following table summarizes our standard retention periods:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with any identifiable individual.

7 Cookies & Tracking Technologies

vw018 uses cookies and similar tracking technologies (such as browser local storage and session storage) to operate, secure, and improve the Platform. A cookie is a small text file placed on your device by the Platform when you visit. Cookies do not run programs or install software on your device.

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can control optional cookies through your vw018 account settings. You may also configure your browser to block or delete cookies, though doing so for essential cookies will prevent you from using the Platform effectively. Instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

8 Security Measures

vw018 implements a comprehensive set of technical and organizational security controls to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• Encryption in Transit: All data exchanged between your device and our servers is encrypted using TLS 1.2 or TLS 1.3 with 256-bit AES encryption. Our SSL certificate is maintained and renewed without interruption.
• Encryption at Rest: Sensitive data fields — including national ID numbers, bank account references, and KYC document metadata — are encrypted at rest using AES-256 within our database infrastructure.
• Access Controls: Access to member personal data within vw018's internal systems is governed by strict role-based access controls. Only authorized personnel with a legitimate operational need may access identifiable member data, and all internal access events are logged and auditable.
• Penetration Testing: vw018 engages independent security professionals to conduct regular penetration tests and vulnerability assessments of the Platform infrastructure. Critical vulnerabilities are remediated on an emergency basis; lower-severity findings are addressed within defined SLA windows.
• Intrusion Detection: Our infrastructure is monitored 24 hours a day, 7 days a week by automated intrusion detection and anomaly-alerting systems. Security incidents trigger immediate escalation to our on-call security team.
• Data Minimization: We apply the principle of data minimization — collecting only the personal data that is genuinely necessary for the stated purpose, and not retaining it beyond the defined retention period.

9 Your Rights

As a vw018 member, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team with a clear description of your request and proof of identity. We will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data vw018 holds about you, including the categories of data, the purposes for which it is processed, and the recipients to whom it has been disclosed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields (such as your registered name), correction may require re-submission of supporting KYC documents.
• Right to Erasure: You may request that vw018 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Please note that this right is subject to overriding legal retention obligations — transaction records and KYC documents cannot be deleted before the end of their mandatory retention period.
• Right to Restriction: You may request that we restrict the processing of your data while a rectification request is under review, or where you contest the legal basis for processing.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to vw018 in a structured, commonly used, machine-readable format (such as CSV or JSON), and to have that data transmitted to another service provider where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including the profiling of your betting behavior for fraud detection purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10 Minors & Age Policy

The vw018 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover or have reasonable grounds to believe that personal data has been submitted by a person under 21, we will immediately suspend the associated account, delete the submitted personal data to the extent permitted by law, and void any associated transactions.

If you are a parent or guardian and believe that a minor in your household has registered an account on vw018, please contact our support team immediately. We will investigate and take appropriate action within 48 hours of a verified report.

11 International Data Transfers

vw018 operates globally and some of the personal data we collect may be transferred to, stored in, or processed in countries other than Indonesia. This may include the jurisdictions where our licensed game studio partners (such as Pragmatic Play, Evolution Gaming, and Spribe) and KYC verification partners maintain their server infrastructure.

When transferring personal data internationally, vw018 ensures that appropriate safeguards are in place to maintain the equivalent level of protection that you would expect under internationally recognized data-protection standards. These safeguards include contractual data-processing agreements containing standard data-protection clauses, and — where relevant — transfers only to jurisdictions that maintain an adequate level of data protection as assessed by recognized international bodies.

If you would like further information about the specific safeguards in place for any particular international transfer of your personal data, please contact our support team.

12 Third-Party Services

The vw018 Platform integrates services provided by third parties including game studios, payment processors, and technical infrastructure providers. While vw018 exercises due diligence in selecting and contracting these partners, each third party operates under its own privacy policy and data-processing terms. vw018 is not responsible for the privacy practices of third-party services beyond the scope of the data-processing agreements in place.

Specifically:

• Game Studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft): These studios receive pseudonymous session data necessary to operate game rounds. They do not receive your full name, national ID, or bank account details.
• Payment Processors (BCA , BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja): These providers receive only the transaction details necessary to execute a specific deposit or withdrawal. vw018 does not store your full bank account numbers or e-wallet passwords.
• KYC Verification Partners: Identity documents are processed by certified verification providers under binding data-processing agreements. These partners are prohibited from using your documents for any purpose other than the specific verification service they provide to vw018.
• Analytics Providers: Where optional analytics cookies are enabled, aggregated and anonymized session data may be processed by analytics infrastructure providers. No personally identifiable information is included in analytics data sets.

We recommend reviewing the privacy policies of any third-party service you interact with directly, including your bank or e-wallet provider, as those interactions are governed by their terms rather than ours.

13 Policy Amendments

vw018 reserves the right to update or amend this Privacy Policy at any time. When we make material changes — that is, changes that meaningfully affect your rights or the way we handle your personal data — we will notify you by posting a prominent notice on the Platform and, where we hold a valid email address for you, by sending a direct notification to your registered email address at least 14 days before the amended Policy takes effect.

Non-material changes (such as corrections of typographical errors, clarifications that do not alter the substance of a clause, or updates to contact details) may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision, regardless of whether the change was material or non-material.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should cease using the Platform and may request account closure and data deletion by contacting our support team.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way vw018 handles your personal data, please contact our support and data-privacy team using the details below. We are committed to resolving all data-related inquiries promptly and transparently.

When contacting us regarding a privacy matter, please include your vw018 Member ID, a clear description of your request or concern, and — for data subject rights requests — a copy of a valid government-issued photo ID to allow us to verify your identity before processing the request. This verification step is required to protect your data from unauthorized third-party access requests.

vw018 has designated an internal Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and for handling escalated data-related complaints. If you are not satisfied with the initial response from our support team, you may request escalation to the DPO by clearly stating this in your follow-up communication. The DPO will acknowledge escalated complaints within 5 business days and provide a substantive response within 30 calendar days.