svip12 Privacy Policy

svip12 is an internationally operated online gaming and sports betting platform that serves English-preference users in Indonesia and across the Asia-Pacific region. As a responsible operator, svip12 is fully committed to safeguarding the privacy and personal data of every individual who interacts with our platform — whether as a registered Member, a visitor browsing the site, or a person who contacts our support team.

This Privacy Policy sets out the types of personal data that svip12 collects, the purposes for which that data is processed, the conditions under which it may be shared with third parties, the security measures applied to protect it, and the rights available to you as a data subject. This Policy forms part of the overall contractual relationship between you and svip12, alongside our Terms & Conditions and Responsible Gaming policy.

svip12 acts as the data controller for all personal data collected through the svip12.app platform. Our data practices are aligned with internationally recognised privacy principles including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality. We do not sell your personal data to third parties for marketing or advertising purposes.

svip12 collects personal data that is necessary to deliver, maintain, and improve our Services, to verify your identity, to process financial transactions, to prevent fraud, and to comply with applicable legal and regulatory obligations. The categories of personal data we collect are described below.

svip12 collects personal data through multiple channels in the normal course of operating the platform. The primary collection methods are as follows:

• Direct Submission: Data you provide voluntarily during account registration, KYC verification, deposit and withdrawal requests, support interactions, survey participation, and promotional opt-ins.
• Automated Technical Collection: Technical and gaming data collected automatically as you interact with the platform — including server logs, session analytics, device fingerprinting, and cookie-based tracking. This collection begins when you first visit svip12.app, whether or not you are logged in.
• Third-Party Sources: Identity verification and KYC data may be supplemented by information obtained from third-party identity verification providers, fraud prevention services, and commercially available databases, where permitted by applicable law.
• Payment Processors: Transaction confirmation data and payment method metadata are received from our partner payment processors and banking channels when you initiate deposits or withdrawals. svip12 receives only the minimum information needed to match a transaction to your account.
• Affiliate Partners: If you arrived at svip12 via an affiliate partner link, we may receive a referral identifier associated with that partner. No sensitive personal data is shared with affiliates in return.

svip12 processes your personal data only for specific, explicit, and legitimate purposes. We do not process data in a manner incompatible with the purposes stated at the time of collection. The key processing purposes are outlined below:

• Account Management: To create, maintain, and administer your Member account, including authentication, account settings management, and account closure.
• Identity Verification (KYC): To verify your identity, age (21+), and place of residence in compliance with our responsible gaming obligations and anti-money laundering (AML) requirements. KYC verification is mandatory before withdrawals are permitted.
• Service Delivery: To provide, personalise, and improve the betting and gaming services available on the platform, including sportsbook markets, live casino, slots, and togel (Indonesia's traditional numbers lottery) products.
• Payment Processing: To process deposits and withdrawals via Indonesian banking channels (BCA, BRI, BNI, Mandiri, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate transaction records in IDR.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, account takeover attempts, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor gaming behaviour patterns for indicators of problem gambling, to apply Member-initiated responsible gaming limits (deposit limits, loss limits, self-exclusion), and to intervene proactively where the platform identifies at-risk behaviour. The platform enforces a strict 21+ age policy at all times.
• Legal & Regulatory Compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities. Certain data must be retained for defined periods to satisfy record-keeping obligations.
• Customer Support: To handle inquiries, resolve disputes, process complaints, and manage support tickets submitted via live chat or email. Support interactions are logged for quality assurance and training purposes.
• Marketing Communications: To send promotional emails, bonus notifications, and seasonal offers (for example, Ramadhan promotions, Idul Fitri bonuses, and Indonesian Independence Day campaigns) to Members who have opted in. You may opt out at any time.
• Platform Analytics: To analyse usage patterns, measure platform performance, identify technical issues, and inform product development decisions. Analytics data is aggregated and anonymised wherever possible.

svip12 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and svip12 — including account creation, identity verification, payment processing, and delivery of the gaming services you have requested.
• Legal Obligation: Processing required to comply with applicable laws — including AML obligations, age verification requirements, record-keeping duties, and cooperation with competent authorities.
• Legitimate Interests: Processing carried out for svip12's legitimate business interests, where those interests are not overridden by your fundamental rights and freedoms — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics.
• Consent: Processing for which you have given explicit, freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

svip12 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with carefully selected third parties only in the circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Identity Verification Providers: Third-party KYC and AML service providers who assist in verifying the authenticity of identity documents and screening against global sanctions and politically exposed persons (PEP) lists.
• Payment Processors: Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) who process financial transactions on your behalf. These processors operate under strict data protection obligations and are not permitted to use your data for any purpose other than processing the specific transaction.
• Game Software Providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft) may receive your session identifier and anonymised gameplay data for the purpose of delivering and auditing game rounds. These providers do not receive your personal identity data.
• Regulatory & Legal Authorities: Where required by applicable law, court order, or regulatory requirement, svip12 may disclose personal data to competent authorities. svip12 will notify affected Members of such disclosures where legally permitted to do so.
• Fraud Prevention Networks: Anonymised or aggregated fraud signals may be shared with industry fraud prevention networks to protect the platform and the broader gaming ecosystem from bad actors. No identifiable personal data is shared in this context.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of svip12's business, your personal data may be transferred to the relevant successor entity, subject to the same data protection obligations set out in this Policy. You will be notified of any such transfer.

svip12 operates as an internationally licensed gaming platform. As such, certain personal data may be transferred to, stored in, or processed in countries outside of Indonesia. These transfers occur in the context of cloud hosting infrastructure, game server networks, and third-party service provider operations.

Wherever personal data is transferred internationally, svip12 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that applied within Indonesia. Such safeguards include contractual data protection clauses binding our service providers to comply with internationally recognised privacy standards, as well as the use of certified data processors where applicable.

All data transmitted between your device and svip12 servers — regardless of the server's geographic location — is protected by 256-bit TLS encryption in transit. Data at rest is encrypted using industry-standard AES-256 encryption on all production storage systems.

svip12 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations. The retention periods below represent our standard guidelines; actual retention may be extended where required by law or where legitimate business necessity applies.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for statistical and analytical purposes.

svip12 applies a comprehensive, multi-layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction.

• Encryption in Transit: All communications between your device and svip12 servers are encrypted using 256-bit TLS (Transport Layer Security). HTTPS is enforced on every page of the platform — no unencrypted HTTP connections are accepted.
• Encryption at Rest: Personal data stored on svip12 servers — including identity documents, financial records, and account data — is encrypted using AES-256 symmetric encryption on all production storage systems.
• Password Security: Member passwords are never stored in plaintext. Passwords are hashed using a modern adaptive hashing algorithm (bcrypt or equivalent) with per-account salting, ensuring that even internal staff cannot recover your actual password.
• Access Controls: Access to personal data within svip12's internal systems is governed by role-based access control (RBAC). Only personnel with a demonstrable business need may access identifiable personal data, and all access is logged and audited.
• Fraud Monitoring: Real-time automated fraud detection systems monitor account activity for anomalies including unusual login locations, atypical transaction patterns, and device fingerprint mismatches. Suspicious activity triggers immediate review and, where warranted, temporary account suspension pending investigation.
• Vulnerability Management: svip12's platform undergoes regular security assessments, including penetration testing by independent security firms, automated vulnerability scanning, and code security reviews as part of our software development lifecycle.

svip12 uses cookies and similar tracking technologies to operate core platform functionality, to remember your preferences, to maintain your authenticated session, and to gather analytics data that helps us improve the platform experience. The following categories of cookies are used on svip12.app:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication tokens, CSRF protection tokens, and load balancing cookies. Disabling these cookies will prevent you from logging in or using core platform features.
• Functional Cookies: Used to remember your preferences and settings, such as your selected payment method, language preference, and responsible gaming limits. These cookies improve your experience but are not strictly necessary for platform operation.
• Analytics Cookies: Used to collect aggregated, anonymised data about how visitors interact with svip12.app — including pages visited, session duration, entry and exit points, and navigation paths. This data is used exclusively for internal platform improvement purposes and is not shared with advertising networks.
• Affiliate Tracking Cookies: If you arrived at svip12 via an affiliate partner link, a short-lived tracking cookie records the affiliate source for commission attribution purposes. This cookie does not collect personal identity data and expires within 30 days.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of the svip12 platform. Strictly necessary cookies cannot be disabled without preventing platform login and core feature access.

As a Member of svip12, you have a number of rights with respect to your personal data. svip12 is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our support team via live chat or at [email protected]. We will respond within 30 days of receiving a valid request.

svip12 enforces a strict 21+ age policy. The platform is not intended for, and does not knowingly collect personal data from, any person under the age of 21. Age verification is a mandatory component of the KYC process, and accounts found to belong to individuals under 21 will be immediately suspended and all associated balances returned after review.

If you have reason to believe that a person under 21 has registered an account on svip12 — whether by providing false date-of-birth information or by accessing an account belonging to an adult — please report this to our support team immediately via live chat or at [email protected]. svip12 takes underage access reports seriously and will investigate and act on all credible reports without delay.

Parents and guardians are encouraged to make use of parental control software to restrict access to online gaming sites on devices used by minors. svip12 supports the responsible use of such tools and partners with internationally recognised organisations that promote safer online environments for young people.

The svip12 platform may contain references to third-party services — such as licensed game studios, payment processors, and sports data providers — in the context of describing the products and services available. svip12 does not include outbound hyperlinks to third-party websites within its user-facing pages.

svip12 is not responsible for the privacy practices, data handling, or content of any third-party service providers integrated into the platform. Where third-party technology is embedded within the svip12 platform (for example, live casino game streams from Evolution Gaming or slot games from Pragmatic Play), those providers operate under their own privacy frameworks and contractual obligations to svip12, including restrictions on the use of any data received in connection with svip12 Members.

svip12 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable laws, regulatory requirements, or platform functionality. The effective date at the top of this page will be updated whenever a substantive change is made.

Where changes are material — for example, a change to the categories of data collected, a new category of third-party recipient, or a change to your rights — svip12 will notify registered Members by email and/or via an in-platform notification at least 14 days before the changes take effect. For minor or administrative changes, the updated Policy will be published on this page without separate notification.

Your continued use of the svip12 platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not agree with the amended Policy, you must discontinue use of the platform and contact support to close your account before the changes take effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by svip12, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly within the svip12 platform — the fastest way to reach a member of our support or data team, including Indonesian-speaking agents who can assist with local language queries.
• Email: For formal data subject requests, privacy inquiries, and complaints, please write to our dedicated privacy team at [email protected] with the subject line "Privacy Request — [Your Username]". We aim to acknowledge all privacy-related emails within 2 business days and resolve them within 30 calendar days.
• Data Protection Officer (DPO): svip12 has designated a Data Protection Officer responsible for overseeing compliance with this Privacy Policy and applicable data protection law. The DPO may be contacted via the email address above, marked for the attention of the Data Protection Officer.