Privacy Policy — vip255

The following terms carry specific meanings throughout this Privacy Policy:

vip255 collects Personal Data across several categories depending on how you interact with the Platform. The categories and specific data points are set out below.

2.1 Account Registration Data

When you create a vip255 account, we collect the information you provide during the registration process, which may include:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify the minimum age requirement of 21 years).
• Email address and mobile phone number registered in Indonesia.
• Preferred username and encrypted password.
• City or province of residence within Indonesia (e.g., Jakarta, Surabaya, Bandung, Bali).

2.2 KYC Verification Data

To comply with our anti-money-laundering and responsible gaming obligations, we may collect the following documentary evidence:

• Scanned or photographed copy of your national identity card (KTP) or passport.
• Proof of address (e.g., a recent utility bill or bank statement issued in Indonesia).
• Proof of payment method ownership (e.g., a screenshot showing your BCA, BRI, or Mandiri account in your registered name).
• Selfie photograph for biometric identity matching, where required.

2.3 Financial Transaction Data

All deposits and withdrawals processed through vip255 generate a transaction record that includes:

• The payment method used (e.g., BCA, BNI, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Transaction amount in Indonesian Rupiah (IDR).
• Transaction timestamp (WIB).
• Partial masked account or e-wallet reference (e.g., last four digits of a bank account number).

2.4 Gameplay and Betting Data

We record all activity within the Platform's gaming and betting products, including:

• Sports bets placed on markets including BRI Liga 1, EPL, La Liga, Champions League, AFF Cup, and all other listed events.
• Casino game sessions, spin history, and outcomes for slot and live table games.
• Fish shooting session data and Bandar Q hand history.
• Bonus claims, wagering progress, and promotion participation records.

2.5 Technical and Device Data

When you access the Platform, our systems automatically collect the following technical information:

• IP address and approximate geographic location derived from it.
• Browser type, version, and operating system.
• Device type (desktop, mobile, tablet) and screen resolution.
• Pages visited, time spent on each page, and navigation path within the Platform.
• Session start and end timestamps.

Personal Data is collected through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.
• Automatically via the Platform: Through session cookies, server logs, and analytics tools that capture technical and behavioural data each time you visit or interact with the Platform.
• From payment providers: When your bank (such as BRI, BNI, or Mandiri) or e-wallet provider (such as OVO, DANA, or GoPay) confirms a transaction, we receive a confirmation record containing limited transactional metadata.
• From identity verification services: Where we engage a third-party KYC or identity verification provider, that provider may return a verification status and supporting data points derived from the documents you submitted.
• From responsible gaming databases: Where you have registered on a self-exclusion list or equivalent responsible gaming programme, we may receive a notification flag from that programme.

vip255 processes your Personal Data for the following clearly defined purposes:

vip255 processes Personal Data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the agreement formed when you register an account and accept our Terms & Conditions — including account management, payment processing, and gameplay record-keeping.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC and AML obligations imposed under our international operating licence.
• Legitimate interests: Processing for fraud prevention, Platform security, and the detection of prohibited conduct, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and certain analytics, where your prior consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

vip255 does not sell, rent, or trade your Personal Data. We share data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

6.1 Payment Service Providers

To process your IDR deposits and withdrawals, we share the minimum necessary transactional data with the relevant Indonesian bank or e-wallet provider you select (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as independent data controllers for the transaction data they process under their own terms and privacy policies.

6.2 Identity Verification Partners

Where we engage a third-party KYC verification service to confirm your identity and age, we share the documentation you submit — such as your KTP or passport — with that provider under a strict data processing agreement that prohibits secondary use.

6.3 Game Software Providers

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a pseudonymised player identifier and session token to deliver their game content and maintain fair-play integrity records. No directly identifiable data (such as your full name or KTP number) is shared with game studios.

6.4 Legal and Regulatory Authorities

We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to prevent, detect, or prosecute fraud, money laundering, or other criminal activity.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of vip255's assets, Personal Data held by us may be transferred to the successor entity. We will notify registered Players of any such transfer by a notice on the Platform prior to the transfer taking effect, and the successor entity will be required to honour this Privacy Policy.

We retain Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention schedule:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual player.

vip255 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
• AES-256 encryption at rest for all sensitive data fields stored in our databases, including passwords (which are stored as salted hashes and never in plain text) and financial account references.
• Multi-factor authentication (MFA) available to all registered Players for enhanced account security.
• Role-based access controls that restrict internal access to Personal Data to only those employees and contractors who have a direct operational need to access it.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• 24/7 intrusion detection and monitoring of our infrastructure to identify and respond to anomalous activity in real time.
• Incident response procedures that include prompt notification to affected Players in the event of a data breach that poses a significant risk to their rights and freedoms.

vip255 uses cookies and similar tracking technologies to operate the Platform, maintain session state, and improve user experience. The categories of cookies we use are described below.

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your authenticated session, remember your language and currency preferences, and ensure that security checks can be performed between page requests. These cookies cannot be disabled without rendering core Platform features inoperable.

9.2 Functional Cookies

Functional cookies remember choices you make — such as your preferred game lobby layout or notification settings — so that you do not need to reconfigure them on each visit. They are set only when you actively change a Platform setting.

9.3 Analytics Cookies

We use anonymised analytics cookies to understand how Players navigate the Platform in aggregate, which pages are most frequently visited, and where users encounter difficulties. This data is used exclusively to improve Platform design and performance. Analytics data is aggregated and cannot be linked back to an individual player.

9.4 Managing Cookies

You can configure your browser to block or delete cookies at any time via the browser's settings menu. Please note that disabling strictly necessary cookies will impair your ability to log in and use authenticated features of the Platform. Blocking analytics cookies will have no impact on your ability to play games or access account features.

As a registered Player on the vip255 Platform, you hold the following rights with respect to your Personal Data. All requests may be submitted free of charge to our support team via live chat or email.

• Right of Access: You may request a copy of all Personal Data that vip255 holds about you. We will provide this within 30 days of receiving a verified request.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that it be corrected. Minor details (such as your contact email address) can be updated directly within your account settings panel.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Requests for erasure will be assessed on a case-by-case basis; data subject to AML or regulatory retention obligations cannot be deleted before the applicable retention period expires.
• Right to Restriction: You may request that we restrict processing of your Personal Data in specific circumstances — for example, while the accuracy of data is being contested or a complaint is under review.
• Right to Portability: For data you have actively provided to us and which is processed on the basis of consent or contract, you may request a machine-readable copy in a structured, commonly used format.
• Right to Object: You may object to processing based on our legitimate interests, including processing for direct marketing purposes. Marketing opt-outs take effect immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before your withdrawal.

The vip255 Platform is strictly for individuals aged 21 and over. We do not knowingly collect, process, or store Personal Data from individuals under the age of 21. Our registration process includes date-of-birth verification and KYC checks designed to enforce this requirement.

If we become aware that Personal Data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete all Personal Data collected in connection with that account (except to the extent required to document the breach and comply with applicable law), and return any deposited funds to the payment method from which they originated.

The vip255 Platform does not contain outbound links to external third-party websites. All navigation within the Platform remains within the vip255 domain. Game content delivered by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) is loaded within the vip255 interface and is subject to those studios' own data handling practices in respect of pseudonymised session data as described in Section 6.3.

vip255 accepts no responsibility for the privacy practices or content of any external website that a user independently navigates to outside of the Platform.

vip255 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or Platform features. When we make a material change — defined as any change that meaningfully affects how we collect, use, or share your Personal Data — we will notify registered Players by displaying a prominent notice on the Platform or by sending an email to your registered address at least 7 days before the change takes effect.

The "Last Reviewed" date at the top of this page will be updated each time the policy is revised. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised policy, you should close your account before the effective date.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vip255 handles your Personal Data, please contact our Customer Support team through the following channels:

When contacting us about a data privacy matter, please include your registered username, the nature of your request, and any relevant details that will help us locate and act on your data promptly. We may ask you to verify your identity before processing your request.