Table of Contents
Data Controller
For the purposes of this Privacy Policy, the data controller responsible for the personal information of vit55 members is the vit55 operating entity that holds the platform's international gaming licence. The platform is accessible at vit55.vip and is operated on behalf of Indonesian players and other users in the Asia-Pacific region.
All data protection inquiries, access requests, and complaints should be directed to the vit55 Data Protection contact at [email protected]. We aim to acknowledge all formal data requests within five (5) business days and to resolve them within thirty (30) calendar days of receipt.
Data We Collect
vit55 collects the following categories of personal data from its members and platform visitors. The specific data points collected depend on the level of interaction you have with the platform:
2.1 Identity and Registration Data
- Full legal name (as it appears on your Indonesian KTP or passport)
- Date of birth (used to verify the 21+ age requirement)
- Gender (optional, collected during registration)
- Nationality and country of residence
- Government-issued ID number (KTP number or passport number — collected during KYC verification)
2.2 Contact Data
- Email address (primary account communication channel)
- Indonesian mobile phone number
- Residential address (city, province — collected during KYC)
2.3 Financial Data
- Bank account details used for deposits and withdrawals, including account holder name and account number at BCA, BRI, BNI , Mandiri, or CIMB Niaga
- E-wallet identifiers associated with OVO, DANA, GoPay, ShopeePay, or LinkAja accounts
- Transaction history, including deposit amounts, withdrawal amounts, and timestamps
- Betting and wagering history (game type, stake, outcome, balance changes)
2.4 Technical and Device Data
- IP address and approximate geographic location derived from IP
- Device type, operating system, and browser version
- Device identifiers (where permitted by your operating system)
- Session timestamps, login and logout times
- Platform interaction logs (pages visited, features used, errors encountered)
2.5 Verification Documents
- Scanned or photographed copies of government-issued identity documents submitted during KYC
- Proof of payment method (e.g., bank statement or mobile banking screenshot showing account holder name)
- Proof of residential address (utility bill or bank statement issued within 90 days)
2.6 Communications Data
- Records of support chat conversations and email correspondence with the vit55 team
- Feedback, complaints, and dispute submissions
How We Collect Data
vit55 collects personal data through the following channels and mechanisms:
3.1 Directly From You
The majority of data we hold is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal request, contact customer support, or participate in a promotional offer. Providing accurate information during these processes is a condition of using the vit55 platform.
3.2 Automatically During Platform Use
When you access vit55.vip, our servers and analytics tools automatically record technical data including your IP address, device type, browser, session duration, and pages visited. This data is captured through server logs, cookies, and similar tracking technologies. See Section 8 (Cookies & Tracking) for full details.
3.3 From Third-Party Service Providers
vit55 may receive additional data about you from trusted third-party service providers used in the operation of the platform, including:
- Payment processors and local Indonesian banking partners (transaction confirmation data)
- Identity verification and KYC service providers
- Fraud detection and anti-money-laundering (AML) screening tools
- Game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Pocket Games Soft (game session results and RTP data where required for dispute resolution)
Purpose & Legal Basis for Processing
vit55 processes your personal data only where we have a valid legal basis for doing so. The table below sets out the primary purposes for which we process your data and the corresponding legal basis:
| Purpose | Legal Basis | Data Categories Used |
|---|---|---|
| Account registration and management | Contractual necessity | Identity, contact data |
| Age and identity verification (KYC) | Legal obligation / contractual necessity | Identity, verification documents |
| Processing deposits and withdrawals | Contractual necessity | Financial data, identity data |
| Fraud prevention and AML compliance | Legal obligation / legitimate interests | All categories |
| Customer support and dispute resolution | Contractual necessity / legitimate interests | Identity, communications, financial |
| Responsible gaming monitoring | Legal obligation / legitimate interests | Wagering history, session data |
| Sending account notifications and service updates | Contractual necessity | Contact data |
| Sending promotional communications | Consent | Contact data, wagering preferences |
| Platform security and technical monitoring | Legitimate interests | Technical and device data |
| Analytics and platform improvement | Legitimate interests | Technical data (aggregated/anonymised) |
Data Sharing & Disclosure
vit55 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only in the limited circumstances described below, and only with parties who are contractually bound to protect it to the same standard we apply:
5.1 Service Providers and Processors
We share data with carefully selected third-party service providers who assist us in operating the vit55 platform. These include payment processing partners (local Indonesian banks and e-wallet operators), KYC and identity verification providers, fraud detection vendors, cloud hosting infrastructure providers, and customer support technology platforms. Each provider acts under a data processing agreement that prohibits them from using your data for any purpose beyond the specific service they provide to vit55.
5.2 Game Content Providers
Certain game studios — including Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft — may receive limited session data (player ID, stake, outcome) required to operate the game and to resolve disputes about game results. This data sharing is strictly limited to what is technically necessary for game delivery and dispute resolution.
5.3 Legal and Regulatory Disclosure
vit55 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so, or where disclosure is necessary to protect the legal rights, safety, or property of vit55, its users, or the public. We will notify affected users of such disclosures where legally permitted to do so.
5.4 Business Transfers
In the event that vit55 undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified via your registered email address before any such transfer takes effect, and the successor entity will be bound by the terms of this Privacy Policy.
Data Retention
vit55 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and regulatory requirements. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation / dispute resolution |
| KYC documents | 5 years after account closure | AML compliance / regulatory requirement |
| Financial transaction records | 5 years from transaction date | Financial record-keeping obligations |
| Wagering and game history | 3 years from each session date | Dispute resolution / responsible gaming |
| Support correspondence | 3 years from last communication | Dispute resolution / service quality |
| Technical and device logs | 13 months from capture | Security monitoring / fraud detection |
| Marketing consent records | Until consent withdrawn + 1 year | Proof of consent |
When data is no longer required, vit55 will securely delete or anonymise it so that it can no longer be associated with you. Anonymised or aggregated data (for example, platform usage statistics that cannot identify any individual) may be retained indefinitely for analytical purposes.
Security Measures
vit55 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the vit55 platform, ensuring that your login credentials, personal details, and financial information cannot be intercepted in transit.
- Encrypted data storage for sensitive fields including passwords (stored as salted hashes), KYC document files, and financial account details.
- Access controls and role-based permissions that restrict staff access to personal data on a strict need-to-know basis. Support agents can view the minimum data required to assist you; they cannot view your full payment account numbers or document scans without elevated authorisation.
- Intrusion detection and anomaly monitoring to identify and respond to suspicious access patterns, brute-force login attempts, and unusual account activity in real time.
- Regular security audits and penetration testing conducted by independent third-party security firms.
- Two-factor authentication (2FA) recommended for all user accounts; mandatory for accounts with cumulative withdrawals exceeding Rp 50.000.000.
While vit55 applies industry-standard security practices, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying vit55 immediately at [email protected] if you suspect your account has been accessed without your authorisation.
Cookies & Tracking Technologies
vit55 uses cookies and similar tracking technologies to operate the platform, improve your experience, and analyse how the site is used. The following types of cookies are deployed:
8.1 Strictly Necessary Cookies
These cookies are essential for the platform to function. They maintain your login session, remember your language preference, and ensure secure navigation between pages. The platform cannot function properly without these cookies, and they cannot be disabled.
8.2 Functional Cookies
These cookies remember your preferences — such as your preferred deposit method or last-visited game category — to personalise your experience on subsequent visits. They are not used for advertising and do not track you across other websites.
8.3 Analytics Cookies
vit55 uses analytics tools to understand aggregate user behaviour on the platform — for example, which game categories are most popular among users in Jakarta versus Surabaya, and where users tend to drop off during the deposit flow. Analytics data is collected in aggregated, anonymised form and is not used to identify individual users.
8.4 Managing Cookies
You can manage or disable non-essential cookies through your browser settings. Please be aware that disabling functional or analytics cookies may affect certain features of the vit55 platform. Strictly necessary cookies cannot be disabled without also preventing the platform from functioning. For specific guidance on managing cookies in popular Indonesian mobile browsers (Chrome for Android, Samsung Internet, Firefox for Android), refer to the help documentation for your browser of choice.
Your Rights Over Your Data
As a vit55 member, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account email address for identification purposes.
- Right of Access: You may request a copy of all personal data vit55 holds about you, along with information about how it is processed and with whom it is shared. We will respond within 30 calendar days.
- Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
- Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to exceptions where retention is required by law (e.g., AML obligations).
- Right to Restriction of Processing: You may request that we temporarily restrict processing of your data while a dispute about its accuracy or lawfulness is resolved.
- Right to Data Portability: You may request a copy of the personal data you provided to vit55 in a structured, commonly used, machine-readable format.
- Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will stop processing your data for that purpose immediately.
- Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
Minors
The vit55 platform is strictly intended for individuals who are 21 years of age or older. vit55 does not knowingly collect or process personal data from any person under 21 years of age. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately suspend the relevant account, delete the associated personal data, and — where legally required — report the matter to the appropriate authorities.
Parents and guardians who believe that a minor may have registered on the vit55 platform are encouraged to contact us immediately at [email protected] with the subject line "Underage Account Report". We take such reports with the utmost seriousness and will act on them within 24 hours.
International Data Transfers
As an internationally operated platform serving Indonesian players, vit55 may transfer certain personal data to servers or service providers located outside of Indonesia. Such transfers occur in limited, specific circumstances — for example, when game content is delivered by a studio's servers located in Europe, or when cloud infrastructure used for the platform is hosted in regional data centres.
Where personal data is transferred outside Indonesia, vit55 takes appropriate steps to ensure that the recipient provides an adequate level of data protection, including through contractual safeguards (such as standard data protection clauses in service agreements) and by selecting service providers who operate under internationally recognised data protection frameworks. Your data is never transferred to jurisdictions without adequate protections in place.
Changes to This Privacy Policy
vit55 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. When changes are material — for example, if we begin processing a new category of data or sharing data with a new category of third party — we will provide at least 14 days' advance notice via a prominent notice on the platform and by email to your registered address.
Minor updates (such as clarifications of existing language, corrections of typographical errors, or updates to contact details) may be made without advance notice but will always be reflected in the "Last Updated" date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your data. Your continued use of the vit55 platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy.
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a complaint about how vit55 has handled your personal data, please contact us through the following channel:
Subject Line for Data Requests: "Data Rights Request"
Subject Line for Privacy Complaints: "Privacy Complaint"
Response Time: Acknowledgement within 5 business days; resolution within 30 calendar days
Support Hours: 24 hours a day, 7 days a week — Indonesian-speaking agents available
vit55 is committed to resolving all privacy-related concerns fairly and promptly. If you are not satisfied with our response to a complaint, you have the right to escalate the matter to the relevant data protection authority in the jurisdiction in which vit55 holds its operating licence.
Why You Can Trust vit55 With Your Data
Beyond the legal language above, here is a plain-English summary of the six core privacy commitments every vit55 member can count on.
256-Bit SSL Encryption
Every byte of data exchanged between your device and vit55 — login credentials, personal details, payment information — is protected by bank-grade 256-bit SSL encryption in transit. Your data is never transmitted in plain text.
We Never Sell Your Data
vit55 does not sell, rent, or share your personal information with advertisers, data brokers, or any third party for commercial gain. Your data serves one purpose: powering your vit55 account experience.
You Control Your Data
Access, correct, export, or delete your personal data at any time by contacting our support team. Data rights requests are handled within 30 days, and we verify your identity before making any changes to protect your account.
Minimal Data Collection
We collect only the data that is genuinely necessary to operate your account, process your payments, and keep the platform secure. We do not build advertising profiles or harvest data for purposes unrelated to your vit55 membership.
Clear Retention Limits
Your data is not kept indefinitely. vit55 operates defined retention schedules for every data category — from KYC documents (5 years post-closure) to technical logs (13 months). When data is no longer needed, it is securely deleted or anonymised.
Dedicated Privacy Support
Our 24/7 support team includes Indonesian-speaking agents trained to handle data rights requests and privacy concerns. Reach us any time at [email protected] — we acknowledge all formal data requests within five business days.