Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "vlp288" (also referred to as "we", "us", or "our") means the operator of the vlp288 Platform at https://vlp288.net and its authorized processing entities.
• "Platform" means the vlp288 website, mobile-optimized interface, and all associated digital services accessible at https://vlp288.net.
• "Member" (also "you" or "your") means any individual who has registered a personal Account on the vlp288 Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to: name, date of birth, residential address, email address, phone number, payment account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, vlp288.
• "Data Processor" means any third party that Processes Personal Data on behalf of vlp288 under a written data processing agreement.
• "Cookies" means small text files placed on your device by the Platform for the purposes described in Section 8 of this Policy.
• "KYC" means Know Your Customer — the identity and age verification process conducted by vlp288 before processing withdrawals or at any time we deem necessary for compliance purposes.
• "IDR" means Indonesian Rupiah, the sole currency used for all financial transactions on the Platform.

2 Data Controller

vlp288 acts as the Data Controller in respect of all Personal Data collected through the Platform. We determine the purposes for which your Personal Data is collected and the manner in which it is Processed, stored, and — where applicable — shared with third parties.

All data Processing activities conducted by vlp288 are carried out in accordance with internationally recognized data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

If you have any questions or concerns about how vlp288 handles your Personal Data, or if you wish to exercise any of the rights described in Section 10 of this Policy, please contact our Data Protection team using the details provided in Section 15.

3 Data We Collect

vlp288 collects only the Personal Data that is necessary for the legitimate purposes of operating the Platform, fulfilling our compliance obligations, and delivering a high-quality gaming experience to Members based in Indonesia and internationally. The categories of data we collect are described below:

3.1 Registration Data

When you create a vlp288 Account, we collect:

• Full legal name (as it appears on your government-issued ID).
• Date of birth (to verify you are at least 21 years of age).
• Residential address in Indonesia (city, province, postal code).
• Email address (used for Account communications and marketing, where consented).
• Mobile phone number (used for Account security and two-factor authentication).
• Chosen username and hashed password (we never store your password in plain text).

3.2 KYC Verification Data

As part of our identity verification process, we may collect:

• A copy of your Indonesian National ID Card (KTP), passport, or driver's license (SIM).
• A recent proof-of-address document (utility bill or bank statement dated within the last three months).
• A selfie photograph or liveness check image used to match against your identity document.
• Evidence of ownership of the payment method (bank account or e-wallet) registered on your Account.

3.3 Financial Transaction Data

• Deposit and withdrawal transaction records, including amounts (in IDR), timestamps, and payment channel identifiers (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, CIMB Niaga).
• Bank account numbers or e-wallet registered phone numbers associated with transactions (stored in tokenized form where possible).
• Running balance history within your vlp288 wallet.

3.4 Gaming Activity Data

• Bets placed, game sessions initiated, outcomes, win/loss records, and bonus usage across all product categories (sportsbook, live casino, slots, online poker, scratch cards).
• Responsible gaming tool settings (deposit limits, cooling-off periods, self-exclusion status).
• Session duration and login timestamps.

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP (used for fraud detection and jurisdictional compliance).
• Device type, operating system, browser type and version.
• Referring URL (the page you visited before arriving at vlp288).
• Cookie identifiers and session tokens (see Section 8).

3.6 Customer Support Data

• Records of all live chat transcripts, email correspondence, and support ticket exchanges between you and the vlp288 customer support team.
• Any additional Personal Data you voluntarily provide when contacting us for assistance.

4 How We Collect Data

vlp288 collects Personal Data through the following channels:

• Directly from you — when you complete the Account registration form, submit KYC documents, initiate a deposit or withdrawal, use the live chat feature, or contact our support team by email.
• Automatically — through Cookies, server logs, and analytics technologies when you browse and interact with the Platform. See Section 8 for full details on our Cookie practices.
• From payment service providers — when you initiate a deposit or withdrawal, our payment gateway partners (processing transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja) may pass transaction confirmation data back to us to reconcile your Account balance.
• From KYC and identity verification providers — when you submit documents for identity verification, our authorized third-party KYC partner may return a verification result (pass/fail) along with the underlying document data to our compliance systems.
• From fraud prevention and anti-money-laundering (AML) screening services — our compliance systems may cross-reference your registration details against international sanctions databases and fraud-intelligence networks as part of our legal obligations.
• From affiliate and referral partners — if you arrived at vlp288 through a marketing affiliate, we may receive a referral identifier. We do not receive your Personal Data from affiliates beyond a cookie-based click identifier.

5 How We Use Your Data

vlp288 uses the Personal Data we collect for the following purposes:

vlp288 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human review. Our fraud-detection systems may flag accounts for review, but any consequential action (such as account suspension) is reviewed by a qualified compliance officer before being implemented.

6 Legal Basis for Processing

vlp288 relies on the following legal bases for Processing your Personal Data, consistent with internationally recognized data protection principles:

• Contract Performance: Processing is necessary to fulfill our contractual obligations to you under the vlp288 Terms & Conditions — including operating your Account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing is required to comply with our legal and regulatory obligations — including KYC/AML requirements, responsible gaming obligations, and record-keeping duties under our international operating license.
• Legitimate Interests: Processing is necessary for vlp288's legitimate business interests — including fraud prevention, platform security, product improvement, and analytics — provided those interests do not override your fundamental rights and freedoms.
• Consent: For certain activities — primarily marketing communications — we rely on your freely given, specific, and informed consent. You may withdraw marketing consent at any time by updating your Account notification preferences or by contacting our support team.

7 Data Sharing & Disclosure

vlp288 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share Personal Data only in the circumstances described below, and always subject to appropriate data protection safeguards:

• Payment Service Providers: We share transaction data with our payment gateway partners — including the operators of BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja payment channels — solely to process deposits and withdrawals on your behalf. These providers are bound by their own data protection obligations.
• KYC & Identity Verification Partners: We engage authorized third-party providers to conduct identity document verification and liveness checks as part of our KYC process. These providers act as Data Processors under written agreements that restrict their use of your data to verification purposes only.
• Game Studio Partners: Live casino and slot game sessions are facilitated by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe. These studios may receive your session identifier and bet data to facilitate game play. They do not receive your full registration profile unless required by their licensing obligations.
• Fraud Prevention & AML Services: We may share identifying information with fraud intelligence networks and sanctions screening services to fulfill our compliance obligations. Such disclosures are strictly limited to what is necessary for the specific compliance purpose.
• Legal Authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies, courts, or other government authorities when required to do so by law, court order, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or harm to persons.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of vlp288's assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and your data protection rights will be preserved.
• Professional Advisers: We may share Personal Data with our legal counsel, auditors, and insurers strictly on a need-to-know basis and subject to confidentiality obligations.

Any third party with whom we share your Personal Data is required to handle it in accordance with applicable data protection standards. We do not authorize third-party recipients to use your Personal Data for their own marketing or commercial purposes.

8 Cookies & Tracking Technologies

vlp288 uses Cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytics data that helps us improve our services. By continuing to use the Platform, you consent to our use of Cookies as described below.

Categories of Cookies We Use:

• Strictly Necessary Cookies: These Cookies are essential for the Platform to function correctly. They maintain your login session, remember your Account preferences, and enable core security features such as CSRF protection. You cannot opt out of strictly necessary Cookies without ceasing to use the Platform.
• Analytics Cookies: We use analytics Cookies to understand how Members interact with the Platform — which pages are visited most frequently, where users navigate from, and how long sessions last. This data is aggregated and anonymized before analysis. Opting out of analytics Cookies does not impair Platform functionality.
• Functional Cookies: These Cookies remember your preferences — such as your preferred deposit method, language display settings, and responsible gaming tool configurations — to personalize your experience on return visits.
• Marketing & Affiliate Cookies: If you arrived at vlp288 through a promotional partner, a cookie may be stored to attribute your registration to the referring affiliate. This is used for internal commission tracking only. Marketing Cookies may also be used to deliver relevant promotional offers based on your gaming interests. You may opt out of marketing Cookies via your Account settings.

Most web browsers allow you to control Cookie settings directly — including blocking all Cookies or clearing existing Cookies — through your browser's privacy settings. Note that disabling certain Cookies may limit the functionality of the Platform or prevent you from accessing secure Account areas.

9 Data Retention

vlp288 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and our regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your active membership on the Platform.
• KYC Documents: Retained for a minimum of 5 years from the date of verification, in accordance with standard AML record-keeping requirements applicable to internationally licensed gaming operators.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, consistent with financial record-keeping obligations.
• Gaming Activity Logs: Retained for a minimum of 3 years from the date of each session, to support dispute resolution and responsible gaming monitoring.
• Customer Support Records: Retained for 2 years from the date of the last support interaction, unless longer retention is required for an active dispute.
• Closed Account Data: When your Account is closed (whether by you or by vlp288), your core identification and financial data is retained for the minimum period required by applicable compliance obligations (typically 5 years), after which it is securely deleted or anonymized.
• Marketing Preferences: Retained until you withdraw consent or request deletion, subject to the retention periods above.

At the end of an applicable retention period, Personal Data is either permanently deleted from our systems or anonymized such that it can no longer be attributed to an identifiable individual. Anonymized, aggregated data (e.g., platform-wide betting trends) may be retained indefinitely for statistical and product development purposes without affecting your privacy rights.

10 Your Data Rights

As a Member of vlp288, you have the following rights in respect of your Personal Data. These rights apply subject to applicable legal exceptions and our regulatory obligations:

• Right of Access: You may request a copy of the Personal Data vlp288 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as updating your phone number or email address) can be made directly through your Account dashboard.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) you object to Processing based on legitimate interests and we have no overriding grounds. Note that we may be legally required to retain certain data (e.g., financial records, KYC documents) for the retention periods described in Section 9, and erasure requests cannot override those obligations.
• Right to Restriction: You may request that we restrict Processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where Processing is based on your consent or contract performance, you may request a copy of the Personal Data you have provided to us in a structured, commonly used, machine-readable format (such as CSV or JSON).
• Right to Object: You may object at any time to Processing of your Personal Data for direct marketing purposes. You may also object to Processing based on our legitimate interests, in which case we will cease Processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where Processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior Processing.

To exercise any of these rights, please contact our Data Protection team at [email protected] with a clear description of your request and sufficient information to verify your identity. We will acknowledge your request within 5 business days and aim to resolve it within 30 calendar days. Complex requests may require up to 60 days; we will notify you if an extension is necessary.

11 Data Security

vlp288 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the vlp288 Platform is encrypted using industry-standard 256-bit Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology. You can verify this by confirming the padlock icon and "https://" prefix in your browser's address bar.
• Password Hashing: Member passwords are never stored in plain text. We use a strong cryptographic hashing algorithm (bcrypt with salting) to store password credentials. Even vlp288 staff cannot retrieve your password — only a reset is possible.
• Two-Factor Authentication (2FA): We strongly recommend that all Members enable 2FA on their accounts. 2FA adds an additional layer of security by requiring a time-sensitive code (delivered via your registered mobile number) in addition to your password at login.
• Access Controls: Access to Member Personal Data within our organization is strictly role-based. Only authorized personnel with a demonstrated need for the data (e.g., customer support agents, compliance officers) are granted access, and all internal access is logged and audited.
• Secure Data Centers: Member data is stored on servers located in secure, access-controlled data center facilities with physical security measures including surveillance, biometric access, and 24/7 on-site security personnel.
• Regular Security Testing: vlp288 conducts periodic vulnerability assessments and penetration testing on its Platform infrastructure to identify and remediate security weaknesses before they can be exploited.
• Data Breach Response: In the event of a Personal Data breach that poses a risk to your rights and freedoms, vlp288 will notify affected Members without undue delay and will take immediate steps to contain and remediate the breach.

While vlp288 maintains robust security practices, no digital system can guarantee absolute security. You are also responsible for maintaining the confidentiality of your Account credentials. If you suspect unauthorized access to your Account, contact our support team immediately at [email protected].

12 Third-Party Services

The vlp288 Platform integrates with a number of third-party service providers to deliver a complete gaming experience. Each of these providers operates under their own privacy practices, and vlp288 selects partners who demonstrate strong data protection standards. Key third-party categories include:

• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe provide game content embedded within the vlp288 Platform. Game session data (bet amounts, outcomes, session identifiers) is shared with the relevant studio to run the game. Each studio operates under their own independently audited privacy and security policies.
• Payment Processors: Payment channels including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja process financial transactions. These providers receive only the transaction data necessary to execute your deposit or withdrawal and are regulated by Indonesia's financial services authority (OJK).
• Analytics Providers: We may use analytics tools to analyze Platform performance and user behavior on an aggregated basis. Analytics data is anonymized before it leaves our servers and is not attributable to individual Members.
• Customer Support Tools: Our live chat system is powered by a third-party support platform. Chat transcripts are stored securely and handled under a data processing agreement that restricts the provider's access to support-related purposes only.

vlp288 does not embed social media tracking pixels (Facebook Pixel, Twitter/X Pixel, TikTok Pixel, or similar) on its Platform. We do not share Member Personal Data with social media platforms for targeted advertising purposes.

13 Minors & Age Policy

The vlp288 Platform is strictly for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes a mandatory date-of-birth declaration, and our KYC verification process independently confirms age before withdrawals are processed.

If vlp288 becomes aware that Personal Data has been collected from a person under the age of 21 — whether through fraudulent registration or any other means — we will immediately suspend the associated Account, delete the Personal Data, and void any transactions conducted during the period of underage access. Any funds deposited by an underage user will be returned to the originating payment account, net of any bonuses or promotional credits awarded.

If you are a parent or guardian and believe that a minor in your care has registered an Account on the vlp288 Platform, please contact us immediately at [email protected] so that we can take appropriate action without delay.

14 Changes to This Policy

vlp288 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or Platform functionality. The current version of this Policy, together with its effective date, will always be published at https://vlp288.net/privacy-policy.

When we make material changes to this Policy — meaning changes that significantly affect the way we handle your Personal Data — we will notify active Members by email to their registered address at least 14 days before the changes take effect. For minor or administrative updates (such as correcting typographical errors or updating contact details), we will update the Policy without prior notice.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the Platform and may close your Account by contacting our support team.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vlp288 handles your Personal Data, please reach out to our Data Protection team using the details below. We are committed to responding to all legitimate inquiries promptly and transparently.

• Email: [email protected] (subject line: "Privacy Policy Inquiry")
• Live Chat: Available 24/7 through the vlp288 Platform — Indonesian-speaking agents are available at all hours.
• Response Time: We aim to acknowledge all privacy-related inquiries within 2 business days (WIB, UTC+7) and to resolve them within 30 calendar days.

For data rights requests (access, rectification, erasure, portability, objection), please include your registered Account username and a brief description of your request. To protect your privacy, we will verify your identity before processing any data rights request.