svip15 Privacy Policy

This Privacy Policy ("Policy") is published by the operator of the svip15 platform at svip15.net ("svip15", "we", "us", "our"). It applies to all personal data collected from individuals who visit, register on, or use the svip15 website and any associated services, including our sportsbook, live casino, slot games, togel (Indonesia's traditional numbers lottery), and customer support channels.

svip15 primarily serves English-preference players located across Indonesia, with payment infrastructure and customer support tailored to the Indonesian market — including support for IDR-denominated transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja. As a result, much of the personal data we process relates to Indonesian residents.

By registering a svip15 account or using any svip15 service, you confirm that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the svip15 Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement governing your use of svip15.

svip15 collects personal data in the following categories, depending on how you interact with our Platform:

2.1 Registration Data

When you create a svip15 account, we collect your full legal name, date of birth, email address, mobile phone number, and the username and password you choose. This data is required to create and administer your account.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) programme, we may collect copies of government-issued identity documents (such as your Indonesian national identity card — KTP — or passport), proof of address documents (such as a recent utility bill or bank statement), and proof that the payment method you use is registered in your own name. We also collect your selfie or photograph where required for identity verification.

2.3 Financial & Transaction Data

We record details of all deposits and withdrawals processed through your account, including the payment method used (bank name, masked account number, e-wallet identifier), transaction amounts in IDR, transaction timestamps, and the outcome of each transaction. We do not store full card numbers — card transactions are tokenised by our PCI-DSS-compliant payment processor.

2.4 Gaming & Betting Activity Data

We maintain detailed records of all bets placed, games played, bonuses claimed, and wagering activity conducted through your account. This includes bet amounts, game outcomes, session start and end times, and the game studios whose products you engaged with (such as Pragmatic Play, Evolution Gaming, PG Soft, or Spribe).

2.5 Technical & Device Data

When you access svip15, our systems automatically collect your IP address, browser type and version, operating system, device type, screen resolution, and referring URL. This data is used for security monitoring, fraud detection, and improving Platform performance.

2.6 Communications Data

We retain records of all communications between you and svip15, including live chat transcripts, email correspondence, and WhatsApp messages sent to our support team. These records are kept for quality assurance, dispute resolution, and regulatory compliance purposes.

2.7 Preferences & Marketing Data

Where you have opted in, we record your communication preferences, promotional interests, and marketing consent status. We also collect data on how you interact with marketing emails and on-site promotional content, such as which offers you clicked and which you dismissed.

svip15 uses the personal data we collect for the following purposes:

• Account Administration: Creating, maintaining, and securing your svip15 account, including processing logins, managing your Balance, and applying account settings such as deposit limits and self-exclusion preferences.
• Payment Processing: Facilitating deposits and withdrawals in IDR via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OCBC NISP, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), as well as international card processors (Visa, Mastercard).
• Identity Verification & AML Compliance: Confirming your identity, age (21+), and the legitimacy of your payment methods in accordance with anti-money laundering (AML) best practices and our international licensing obligations.
• Fraud Prevention & Security: Monitoring account activity for signs of fraud, collusion, bonus abuse, multiple account registration, and other prohibited activities. Technical data including IP addresses and device fingerprints are analysed for this purpose.
• Responsible Gaming: Identifying patterns of play that may indicate problem gambling, applying responsible gaming tools you have activated (deposit limits, cooling-off periods, self-exclusion), and reaching out proactively where our systems flag a concern.
• Customer Support: Responding to your queries, resolving disputes, and maintaining communication records for quality assurance and training purposes.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how members interact with svip15, identify areas for improvement, and develop new features and products.
• Personalised Marketing: Where you have opted in, sending you tailored promotional offers, bonus announcements, and seasonal promotions (including during Idul Fitri, Ramadhan, and major sporting events such as the AFF Cup and Champions League).
• Legal Compliance: Retaining records and disclosing data as required by applicable law, court orders, or regulatory requests.

svip15 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your account, process your transactions, and deliver the gaming and betting services you have signed up for.
• Legal Obligation: Processing required to comply with applicable law, including AML obligations, KYC requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing carried out in the pursuit of svip15's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and product improvement — where those interests are not overridden by your own rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.

svip15 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Payment Partners: We share transaction data with licensed payment processors and local Indonesian banks and e-wallet providers strictly as necessary to process your deposits and withdrawals. All payment partners are contractually bound to handle your data securely and to use it only for the purpose of processing your transactions.
• Game Studios & Technology Providers: Game studios (including Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, and Spribe) and platform technology providers may receive limited technical data (such as session tokens and player identifiers) necessary to deliver and certify their games. These providers operate under data processing agreements that restrict their use of your data.
• KYC & Compliance Service Providers: We engage specialist third-party KYC verification and AML screening services to assist with identity verification and sanctions screening. These providers process your KYC documents on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
• Regulatory & Law Enforcement Authorities: We may disclose your personal data to competent authorities where required to do so by applicable law, court order, or regulatory directive, or where we believe disclosure is necessary to protect the rights, property, or safety of svip15, its members, or the public.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of svip15's assets, your personal data may be transferred to the acquiring entity, subject to the same protections described in this Policy. We will notify you of any such transfer in advance where practicable.

In all cases where we share data with third parties, we require those parties to maintain appropriate technical and organisational security measures consistent with this Policy.

svip15 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security, analyse usage patterns, and — where you have consented — deliver personalised content and promotional offers.

We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and cookies that maintain your login state and game session continuity. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming tool configurations, so you do not need to re-enter them on every visit.
• Analytics Cookies: Used in aggregate and anonymised form to understand how members navigate the Platform — which pages are most visited, where members drop off during registration, and how long typical gaming sessions last. This data informs Platform improvements.
• Marketing & Personalisation Cookies: Used, where you have explicitly consented, to tailor on-site promotional content to your interests and past activity. You may withdraw consent for marketing cookies at any time through your account settings.

Most browsers allow you to control cookie behaviour through their settings. Disabling strictly necessary cookies will impair your ability to use the Platform. For analytics and marketing cookies, you can manage your preferences directly in your svip15 account settings.

svip15 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal retention obligations. The following retention periods apply as a general guide:

• Account & Registration Data: Retained for the duration of your active membership and for a minimum of five years following account closure, in accordance with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five years following the completion of the KYC process or account closure, whichever is later, in accordance with international AML best practices.
• Transaction Records: Retained for a minimum of five years following each transaction, as required by financial record-keeping obligations.
• Gaming Activity Logs: Retained for a minimum of three years following account closure or the last relevant activity, for dispute resolution and responsible gaming audit purposes.
• Support Communications: Retained for a minimum of two years following the closure of each support interaction, for quality assurance and dispute resolution purposes.
• Marketing Preference Records: Retained for the duration of your active opt-in consent and for 12 months following withdrawal of consent, to maintain suppression lists and avoid inadvertent re-contact.

Where retention beyond these periods is required by applicable law or ongoing legal proceedings, we will retain the relevant data for as long as necessary and inform you where practicable.

svip15 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in Transit: All data transmitted between your device and svip15 servers is protected by TLS 1.2 or higher. Our site operates exclusively over HTTPS.
• Encryption at Rest: Sensitive stored data — including passwords (stored as salted hashes), KYC documents, and payment method identifiers — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data within svip15 is restricted on a strict need-to-know basis. Staff and contractors with access to personal data are subject to confidentiality obligations and regular security training.
• Fraud Monitoring: Our platform runs continuous automated monitoring for suspicious login attempts, unusual transaction patterns, and other indicators of account compromise or fraud.
• Two-Factor Authentication (2FA): svip15 strongly recommends that all members enable 2FA on their accounts. Where available, 2FA adds a second verification step to the login process, significantly reducing the risk of unauthorised access.
• Incident Response: In the event of a data security incident that is likely to result in a risk to your rights and freedoms, svip15 will notify affected members and relevant regulatory authorities within the timeframes required by applicable law.

svip15 operates internationally and some of the third-party service providers we work with — including game studios, cloud infrastructure providers, and KYC verification services — may process your data in jurisdictions outside Indonesia. Where such international transfers occur, svip15 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that described in this Policy.

Safeguards for international transfers may include:

• Contractual clauses requiring the recipient to apply data protection standards consistent with this Policy.
• Transfers to jurisdictions that maintain internationally recognised data protection frameworks.
• Technical controls such as encryption and pseudonymisation applied before transfer.

By using the svip15 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia. If you have concerns about a specific transfer, please contact us at [email protected].

Subject to applicable law, you have the following rights in relation to your personal data held by svip15:

• Right of Access: You may request a copy of all personal data svip15 holds about you. We will provide this within 30 days of a verified request, at no charge for the first request in any 12-month period.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account information directly through your account settings panel.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to our legal retention obligations, including AML record-keeping requirements.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and a review is pending.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to processing of your personal data carried out on the basis of legitimate interests, including profiling for direct marketing purposes. Where you object to marketing processing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond in full within 30 days. We may require you to verify your identity before processing certain requests.

The svip15 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires users to confirm their date of birth, and our KYC programme is designed to detect and prevent underage registration.

If we discover or are notified that we have inadvertently collected personal data from a person under the age of 21, we will immediately suspend the relevant account, delete the associated personal data to the extent permitted by applicable law, and report the matter to our compliance team for investigation.

If you are a parent or guardian and believe that your child has registered a svip15 account, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act without delay. For further guidance, please visit our Responsible Gaming page.

The svip15 Platform may contain references to third-party services, game studios, payment providers, and sporting organisations. This Policy applies solely to data collected by svip15 through the svip15 Platform. svip15 is not responsible for the privacy practices or data handling of any third party, and we encourage you to review the privacy policies of any external service you interact with independently of svip15.

svip15 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered members by email to the address on file and by displaying a prominent notice on the Platform for a minimum of 14 days prior to the changes taking effect.

The "Last Updated" date at the top of this page will be revised each time a new version is published. Your continued use of the svip15 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should stop using the Platform and may close your account in accordance with the account closure process described in our Terms & Conditions.

The most current version of this Privacy Policy is always available at svip15.net/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way svip15 handles your personal data, please contact us through any of the following channels:

• Email: [email protected] — for data rights requests, privacy concerns, and formal complaints. Please use the subject line "Privacy Query" or "Data Rights Request" as appropriate. We respond to standard queries within 24 hours and to formal complaints within 5 business days.
• Live Chat: Available 24 hours a day, 7 days a week, directly on the svip15 Platform. Live chat is the fastest channel for general privacy questions.
• WhatsApp: Available to logged-in members between 07:00 and 24:00 WIB daily.

All svip15 support agents are fluent in both English and Indonesian and will respond in whichever language you prefer. If you are dissatisfied with our response to a privacy complaint, you may escalate the matter to the relevant data protection authority or dispute resolution body specified in svip15's gaming licence conditions.