Privacy Policy
vip787 Data Commitment

This Privacy Policy applies to all personal data processed by vip787 in connection with your use of the Platform at https://vip787.cam and any related services. It applies to registered players, visitors who browse the Platform without registering, and any individual who communicates with vip787 through our support channels.

By accessing or using the vip787 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of the Platform immediately.

vip787 acts as the data controller in respect of personal data collected directly through the Platform. Where we engage third-party processors — such as payment providers or identity verification services — those parties act as data processors under our instruction and are bound by data processing agreements consistent with this policy.

This policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and vip787.

vip787 collects personal data through several channels: directly from you during registration and KYC, automatically when you browse or use the Platform, and — where applicable — from third-party verification services. The categories of data we collect are set out below.

vip787 uses the personal data we collect for the following purposes, each tied to a specific legal basis described in Clause 4:

• Account creation and management: To open, maintain, and administer your vip787 account, verify your identity, and enforce the one-account-per-player policy.
• Payment processing: To facilitate IDR deposits and withdrawals via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity verification (KYC): To verify that you are who you say you are, that you meet the 21-year-old minimum age requirement, and that your account is not being used for fraudulent purposes.
• Regulatory compliance and anti-money-laundering (AML): To monitor transactions for suspicious patterns, fulfil record-keeping obligations, and respond to lawful requests from competent authorities.
• Platform security and fraud prevention: To detect and prevent unauthorised access, account takeover, multi-accounting, bonus abuse, and other forms of fraudulent or abusive behaviour.
• Responsible gaming: To monitor play patterns that may indicate problem gambling and to administer deposit limits, cooling-off periods, and self-exclusion requests at your request or in accordance with our responsible gaming obligations.
• Customer support: To respond to your queries, resolve disputes, and improve the quality of our support interactions.
• Service improvement and analytics: To understand how players use the Platform, identify bugs, and improve game selection, navigation, and overall user experience. Analytics data is aggregated and anonymised wherever possible.
• Marketing communications (with consent only): To send you promotional offers, bonus notifications, and platform updates via email or SMS — only where you have provided explicit consent and subject to your right to withdraw that consent at any time.

vip787 does not use your personal data to make fully automated decisions that produce significant legal or similarly significant effects on you without human review.

Each processing activity carried out by vip787 rests on one or more of the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and KYC — is carried out on the basis that it is necessary to deliver the services you have signed up for.
• Legal obligation: Certain processing activities — particularly AML monitoring, record-keeping, and responding to lawful authority requests — are required by applicable law and carried out on that basis.
• Legitimate interests: Processing for fraud prevention, platform security, service improvement, and internal analytics is carried out on the basis of vip787's legitimate interest in operating a secure and reliable platform. We balance these interests against your data protection rights and will not override your fundamental interests or freedoms.
• Consent: Marketing communications and the placement of non-essential cookies are carried out only with your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

vip787 does not sell your personal data. We share it only in the following limited and controlled circumstances:

• Payment processors: We share the financial data necessary to process your deposits and withdrawals with the relevant Indonesian bank or e-wallet provider. These providers process data under their own privacy policies and applicable Indonesian banking regulations.
• Identity verification providers: To fulfil our KYC obligations, we may share identity documents and biometric data with third-party verification services. These providers are contractually bound to process your data solely for identity verification purposes.
• Game studios: When you play games provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, limited technical data (session tokens, game outcome data) is exchanged with the relevant studio's infrastructure to deliver the game. No personally identifiable information beyond an anonymised player ID is shared with game studios.
• Fraud and security services: We may share technical data (IP addresses, device fingerprints) with third-party fraud detection services to identify and prevent abusive behaviour across the Platform.
• Legal authorities: Where required by a valid legal order, court order, or applicable law, vip787 will disclose personal data to competent authorities. We will notify you of such a disclosure where we are legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of vip787's business assets, personal data held about you may be transferred to the acquiring entity. You will be notified of any such transfer and of any change to this Privacy Policy that results from it.

All third-party data processors engaged by vip787 are subject to data processing agreements that require them to implement appropriate technical and organisational security measures and to process personal data only on our documented instructions.

vip787 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security, and analyse usage patterns. The categories of cookies we use are described below.

vip787 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account relationship with vip787, plus a minimum of 5 years following account closure to satisfy AML and record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC documents: Retained for 5 years following account closure or the last transaction date, whichever is later.
• Support communications: Retained for 3 years from the date of the last interaction in the relevant support thread.
• Analytics and session data: Anonymised and aggregated within 12 months of collection. Raw session logs are deleted within 90 days.
• Marketing consent records: Retained for the duration of active consent plus 3 years, to demonstrate compliance with consent obligations.

Upon the expiry of the applicable retention period, data is securely deleted or irreversibly anonymised using industry-standard methods. Where deletion is not immediately possible due to technical constraints (for example, data held in encrypted backup archives), the data will be isolated and protected until deletion is feasible.

vip787 implements a layered information security architecture designed to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Transport-layer encryption: All data in transit is encrypted using TLS 1.2 or higher. HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: Sensitive data fields — including identity documents, payment method details, and KYC records — are encrypted at the database level using AES-256.
• Access controls: Internal access to personal data is governed by a strict role-based access control (RBAC) policy. Staff members access only the data necessary for their specific function. All access is logged and audited.
• Two-factor authentication (2FA): All internal staff accounts and player accounts with elevated access privileges are required to use 2FA. Players are strongly encouraged to enable 2FA on their own accounts.
• Penetration testing: vip787 engages independent security auditors to conduct regular penetration tests and vulnerability assessments of the Platform's infrastructure.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, vip787 will notify affected players without undue delay and will report the breach to the relevant supervisory authority within the timeframe required by applicable law.

As a player on vip787, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team with your account details and a description of your request. We will respond within 30 calendar days.

The vip787 Platform is strictly for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our KYC process, and any account found to belong to a person under 21 will be immediately suspended.

If you have reason to believe that a minor has registered on vip787 or has provided personal data through our Platform, please contact us immediately at [email protected]. Upon verification of the concern, we will promptly delete all data associated with the minor's account and report the incident through appropriate channels.

Parents and guardians of Indonesian households are encouraged to use parental control software to restrict access to online gambling platforms for users under 21. vip787 fully supports such measures and cooperates with responsible gaming initiatives targeting underage access prevention.

The vip787 Platform may contain references to third-party services — such as game studio help pages, payment provider support portals, or responsible gaming resources — that operate under their own privacy policies. vip787 is not responsible for the privacy practices or content of any third-party website or service.

We encourage you to review the privacy policy of any third-party service before providing personal data to it. The presence of a reference to a third-party service on the Platform does not imply any endorsement of that service's data handling practices by vip787.

vip787 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. When we make material changes, we will notify registered players via the email address on file at least 7 calendar days before the updated policy takes effect and will update the version number and effective date at the top of this page.

Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the changes, you may close your account and request deletion of your data in accordance with your rights under Clause 9.

We recommend bookmarking this page and reviewing it periodically so that you remain informed about how vip787 protects your information.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how vip787 handles your personal data, please reach out through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly from the Platform. Native Indonesian-speaking agents are on hand at all hours to assist with both gaming and data-related queries.
• Email: [email protected] — responses within 24 hours on business days. For data subject requests, please include your registered account email and a description of the right you wish to exercise.

The email address above is presented as plain text only and is not a clickable link. vip787 will never initiate contact with you via unsolicited calls or messages requesting your login credentials or payment details.