Privacy Policy — vip28

The following terms carry the meanings assigned to them throughout this Privacy Policy:

• "vip28", "we", "us", "our" refers to the vip28 online betting and casino platform, accessible at https://vip28.pro, and its operating entity.
• "Platform" means the vip28 website, mobile interface, game lobbies, sportsbook, live casino, slot hall, and all associated digital services offered under the vip28 brand.
• "Player", "you", "your" means any natural person who accesses, browses, registers on, or otherwise interacts with the Platform.
• "Personal Data" means any information that identifies or could reasonably be used to identify you as a natural person, including but not limited to your name, date of birth, email address, Indonesian mobile phone number, bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" means Know Your Customer — the identity and age verification process mandated by vip28's compliance framework before a Player may withdraw funds.
• "Cookies" means small data files placed on your device by the Platform to support functionality, analytics, and personalisation.
• "Third-Party Processor" means any external organisation that processes Personal Data on behalf of vip28 under a binding data-processing agreement.

vip28 collects only the Personal Data that is necessary for the purposes described in this Privacy Policy. The categories of data we collect are set out in the table below.

vip28 collects your Personal Data through the following channels:

3.1 Direct Collection

You provide data directly to us when you register an Account on the Platform, complete KYC verification, make a deposit or withdrawal, contact our support team via live chat, WhatsApp, or email, participate in a promotion or survey, or configure your responsible gaming settings.

3.2 Automated Collection

When you access the Platform, our servers and analytics systems automatically record Technical Data and Usage Data. This includes your IP address, the pages you visit, the games you launch, the duration of your sessions, and your device characteristics. This automated collection is necessary for Platform security, fraud detection, and service optimisation.

3.3 Third-Party Sources

In limited circumstances, vip28 may receive data about you from third-party sources, including:

• Payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) — to confirm transaction status and account ownership;
• Identity verification service providers — to cross-reference the documents you submit during KYC;
• Fraud prevention and sanctions screening databases — to verify that you are not subject to financial crime restrictions;
• Responsible gaming self-exclusion registers — to honour cross-operator exclusion commitments.

vip28 uses your Personal Data only for specific, legitimate purposes. We do not process your data in a manner incompatible with those purposes. The table below sets out each purpose and the data categories involved.

vip28 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to perform the contract between you and vip28 — specifically, to operate your Account, process transactions, and deliver the gaming services you have signed up for. Without this processing, vip28 cannot provide its services to you.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, KYC identity verification, responsible gaming regulations, and record-keeping obligations imposed by vip28's international gaming licence.
• Legitimate Interests: Processing is carried out in pursuit of vip28's legitimate business interests — including fraud prevention, Platform security, service improvement, and technical analytics — where those interests are not overridden by your privacy rights.
• Consent: Where processing is not covered by the above bases — most notably, the sending of direct marketing communications — vip28 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

vip28 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own marketing or commercial purposes. We share your data only in the limited circumstances set out below, and only to the minimum extent necessary for each purpose.

6.1 Service Providers & Processors

vip28 engages Third-Party Processors to perform functions on our behalf, including payment processing (Indonesian banks and e-wallets), KYC identity verification, cloud hosting and data storage, customer support platform infrastructure, and fraud detection services. Each processor is bound by a contractual data-processing agreement that prohibits them from using your data for any purpose other than the service they provide to vip28.

6.2 Game Providers

To enable gameplay, limited technical session data is transmitted to third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe) solely for the purpose of running the game and resolving disputes. These studios do not receive your full identity or financial data.

6.3 Legal & Regulatory Disclosure

vip28 may disclose your Personal Data to law enforcement agencies, financial intelligence units, gaming regulators, or courts where required to do so by applicable law, a valid court order, or a legitimate regulatory directive. In such cases, vip28 will disclose only what is legally required and will, where permitted by law, inform you of any such disclosure request.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of vip28's business assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it, with a minimum of 30 days' notice before the transfer takes effect.

vip28 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply:

At the end of the applicable retention period, your Personal Data will be securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting aggregate data is no longer Personal Data and may be retained indefinitely for statistical purposes.

vip28 employs a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL / TLS 1.3 Encryption: All data transmitted between your browser or device and the vip28 Platform is encrypted in transit using industry-standard TLS 1.3 protocol. The padlock icon in your browser's address bar confirms this encryption is active.
• At-Rest Encryption: Personal Data stored on vip28's servers — including KYC documents, financial data, and Account records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to systems containing Personal Data is restricted to authorised vip28 personnel and contractors on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Segregated Player Funds: Your real-money Account balance is held in bank accounts that are segregated from vip28's operational funds, protecting your deposits in the event of a business disruption.
• Intrusion Detection: vip28's infrastructure is monitored 24/7 by automated intrusion detection and anomaly alerting systems. Suspected security incidents trigger an immediate response protocol.
• Penetration Testing: The Platform undergoes regular third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All vip28 employees and contractors with access to Personal Data receive mandatory data protection and information security training upon onboarding and annually thereafter.

vip28 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, maintain your login session, and analyse how the Platform is used. The following types of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential to the functioning of the Platform. They enable core features such as maintaining your logged-in session, preserving your language and currency preferences, and ensuring the security of your interactions. These cookies cannot be disabled without materially impairing Platform functionality.

9.2 Performance & Analytics Cookies

These cookies collect anonymised or aggregated data about how Players use the Platform — including which pages are visited most frequently, which games are launched, and how Players navigate between sections. This data is used exclusively to improve Platform performance and user experience. No individually identifying data is collected via these cookies.

9.3 Functionality Cookies

These cookies remember choices you make on the Platform — such as your preferred game lobby view, your deposit method of choice, or your notification settings — so that your experience is consistent across sessions. The data captured is specific to the vip28 Platform and is not shared with third parties.

9.4 Managing Cookies

You may manage cookie preferences through your web browser's settings. Most browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging in and using core Platform features. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

As a Player whose Personal Data is processed by vip28, you hold the following rights. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". vip28 will respond within 30 days of receiving a verifiable request.

• Right of Access: You have the right to request a copy of the Personal Data vip28 holds about you, along with information about how it is processed. We will provide this in a clear, structured format at no charge.
• Right to Rectification: If any Personal Data held by vip28 is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic Contact Data directly within your Account settings at any time.
• Right to Erasure ("Right to Be Forgotten"): You may request that vip28 delete your Personal Data. This right applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to vip28's legal retention obligations — for example, AML regulations require us to retain certain financial records for a minimum of five to seven years after Account closure, and this requirement takes precedence over an erasure request for those specific records.
• Right to Restriction of Processing: In certain circumstances (for example, while a rectification request is being verified), you may request that vip28 restrict the processing of your Personal Data to storage only.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive the Personal Data you have provided to vip28 in a structured, commonly used, machine-readable format (such as JSON or CSV), and to transmit that data to another service provider.
• Right to Object: You have the right to object at any time to the processing of your Personal Data for direct marketing purposes. You also have the right to object to processing carried out on the basis of vip28's legitimate interests, on grounds relating to your particular situation, unless vip28 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

If vip28 becomes aware — through KYC review, a third-party report, or any other means — that Personal Data belonging to a person under the age of 21 has been collected, that Account will be immediately suspended and all associated Personal Data will be securely deleted, except where retention is required by law. Any funds held in the Account will be returned to the deposit source following investigation.

Parents and guardians who are concerned that a minor in their household may have accessed or registered on the vip28 Platform are encouraged to contact our support team immediately at [email protected]. We will investigate and act promptly.

The vip28 Platform may contain references to or integrations with third-party services — most notably the game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe) whose games are hosted within the Platform environment. While vip28 takes reasonable steps to ensure that these integrations are secure and that our Third-Party Processors comply with data protection standards equivalent to our own, vip28 is not responsible for the privacy practices of third-party entities operating outside the Platform environment.

This Privacy Policy applies solely to Personal Data processed by vip28 in connection with the Platform. It does not apply to any third-party websites or services that may be referenced in Platform content. We encourage you to review the privacy policies of any third-party service you interact with independently of the vip28 Platform.

vip28 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, our licensing obligations, or the services offered on the Platform. The "Last Updated" date at the top of this page will be revised whenever a change is made.

Where a change is material — meaning it significantly affects your rights or the way your Personal Data is processed — vip28 will notify you by email to your registered address and via a prominent notice on the Platform at least seven (7) days before the change takes effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically. The current version is always available at https://vip28.pro/privacy-policy. If you do not agree with any amendment, you must cease using the Platform and close your Account before the effective date of the change.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vip28 processes your Personal Data, please contact us through one of the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing. Response time: 12–24 hours.
• Live Chat: Available 24/7 directly within the Platform. Our Indonesian-speaking agents can handle general privacy questions and direct formal requests to the appropriate team.
• WhatsApp Support: Available 24/7 via the contact details shown in your Account dashboard after login.

vip28 aims to resolve all privacy-related concerns promptly and fairly. If you feel that your concern has not been adequately addressed, you retain the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.