svip2 Privacy Policy

svip2 operates the online gambling platform accessible at svip2.lat and acts as the data controller in respect of all personal data collected from registered players and visitors to the Platform. As data controller, svip2 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out in accordance with applicable data protection principles.

The svip2 Platform is designed primarily for adult players (21+) based in Indonesia, and our data handling practices are calibrated to that audience. All customer-facing communications, including this Privacy Policy, are written in English. Indonesian-speaking support agents are available 24/7 if you need assistance understanding any part of this document.

This Privacy Policy should be read together with the svip2 Terms & Conditions, which govern the overall relationship between you and svip2. Capitalised terms used here but not defined carry the meanings given in the Terms & Conditions.

svip2 collects the following categories of personal data in the course of operating the Platform and delivering services to registered players:

svip2 collects personal data through the following channels:

• Direct Registration: When you create an account on svip2, you voluntarily provide your name, date of birth, email address, and mobile phone number via the registration form.
• KYC Verification Process: When you submit identity documents in response to a verification request, svip2 collects and stores the document images and extracted data for compliance purposes.
• Payment Transactions: When you make a deposit or request a withdrawal via a local Indonesian bank (BCA, BRI, BNI, Mandiri, etc.) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), svip2 records the transaction details including the account name, reference number, and IDR amount.
• Gameplay Activity: The Platform automatically logs all bets, game launches, win and loss outcomes, and session durations as part of normal platform operations and for fraud-detection purposes.
• Device and Browser Data: Automated tracking technologies (see Section 9 on Cookies) collect technical data about the device and browser you use to access the Platform.
• Customer Support Interactions: When you contact svip2 via live chat or email, your message content and associated account data are recorded and stored as a support record.
• Third-Party Verification Services: svip2 may use third-party identity verification providers to cross-check the accuracy of KYC documents submitted by players. These providers supply a verification result to svip2; they do not receive your full gambling account history.

svip2 processes your personal data only for specific, legitimate purposes. The table below maps each category of data to the purpose for which it is processed:

svip2 does not use your personal data for automated decision-making that produces significant legal effects without human review. Responsible gaming alerts and bonus eligibility checks involve automated processes, but final decisions affecting your account are reviewed by a member of the svip2 team.

svip2 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing your identity, contact, financial, and gameplay data is necessary to perform the contract between you and svip2 — that is, to operate your account, execute bets, and process deposits and withdrawals in IDR.
• Legal Obligation: svip2 is required to collect and retain identity verification data and transaction records to comply with international anti-money laundering (AML) standards and responsible gaming obligations.
• Legitimate Interests: svip2 processes technical data and gameplay data on the basis of its legitimate interest in detecting fraud, preventing bonus abuse, maintaining platform security, and improving its services — provided these interests are not overridden by your privacy rights.
• Consent: Where svip2 sends you promotional communications about bonuses, seasonal promotions (e.g., tied to Idul Fitri or Indonesian Independence Day events), or new game launches, this is done only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting support or updating your communication preferences in your account settings.

svip2 does not sell, rent, or trade your personal data to third-party marketers or data brokers. Your data may be disclosed to third parties only in the following limited and necessary circumstances:

• Payment Processors: To execute deposits and withdrawals, svip2 shares the minimum necessary financial and identity data with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). Each of these providers operates under their own privacy policy and applicable Indonesian financial regulations.
• Game Content Providers: Gameplay data (such as session start/end, bet placement, and RNG seed requests) is shared with licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — solely for the purpose of delivering and recording game outcomes. These studios do not receive your full account profile or financial records.
• Identity Verification Services: svip2 uses third-party KYC verification providers to authenticate government-issued documents. These providers are contractually bound to use submitted data solely for verification purposes.
• Fraud Prevention & Security Vendors: Technical data (IP addresses, device fingerprints, behavioral patterns) may be shared with fraud-detection service providers operating under strict data processing agreements.
• Legal Authorities: svip2 will disclose personal data to law enforcement agencies, regulators, or courts where required to do so by applicable law, valid legal process, or to protect the rights and safety of svip2 or its users.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of the svip2 business, your personal data may be transferred to the successor entity, which will be bound to honor the commitments set out in this Privacy Policy.

svip2 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

When the applicable retention period expires, svip2 will securely delete or anonymize your personal data so that it can no longer be associated with your identity. Anonymized and aggregated data (e.g., platform-wide game popularity statistics) may be retained indefinitely as it no longer constitutes personal data.

svip2 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and svip2 servers is encrypted using industry-standard 256-bit SSL/TLS protocols. Your account credentials, payment details, and personal information are never transmitted in plain text.
• Password Security: Passwords are never stored in plain text. svip2 uses strong one-way cryptographic hashing algorithms with per-user salting to protect stored password credentials.
• Access Controls: Access to personal data within svip2's internal systems is restricted on a strict need-to-know basis. Staff with access to sensitive player data undergo background checks and receive regular data protection training.
• Infrastructure Security: svip2's servers are hosted in data centers with physical access controls, 24/7 monitoring, redundant power supplies, and regular third-party security audits.
• Fraud Monitoring: Automated systems continuously monitor account activity for anomalous behavior patterns that may indicate unauthorized access, fraud, or money laundering, triggering alerts for human review where thresholds are exceeded.
• Incident Response: svip2 maintains a formal data breach response plan. In the event of a breach that is likely to result in risk to affected individuals, svip2 will notify relevant parties in accordance with applicable legal obligations.

svip2 uses cookies and similar tracking technologies on the Platform to provide core functionality, improve user experience, and support fraud detection. A cookie is a small text file placed on your device by a website you visit. svip2 uses the following categories of cookies:

You may configure your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable strictly necessary cookies, certain parts of the Platform — including the login flow and game lobby — will not function correctly. Disabling functional or analytics cookies will not affect your ability to access core Platform services.

You hold the following rights in respect of personal data that svip2 processes about you. To exercise any of these rights, please contact the svip2 support team via live chat or the support email address listed in Section 13. svip2 will respond to all valid requests within 30 days.

The svip2 Platform is strictly restricted to individuals aged 21 years or older. svip2 does not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in the KYC process for all registered players, and accounts found to belong to individuals under 21 will be immediately suspended and permanently closed.

If you believe that svip2 has inadvertently collected personal data from a minor, please contact us immediately via the support channels listed in Section 13. Upon confirmation, svip2 will delete all associated personal data without undue delay, close the account, and return any deposited funds to the originating payment method after identity confirmation.

Parents and guardians are encouraged to use parental control or content-filtering software on shared devices to prevent minors from accessing online gambling platforms. svip2 supports the responsible use of such tools and recommends services specifically designed for that purpose.

svip2 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, the purposes of processing, or the third parties with whom data is shared — svip2 will notify registered players via email and through a prominent notice on the Platform, at least 14 days prior to the change taking effect.

The "Last Updated" date displayed at the top of this page indicates when the current version was published. Your continued use of the svip2 Platform following the effective date of any revision constitutes your acknowledgment of the updated Privacy Policy. If you do not accept the revised policy, you must cease using the Platform and request account closure before the effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how svip2 protects your personal data. The most current version of this policy is always available at svip2.lat/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the svip2 Data Support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the svip2 Platform. Indonesian-speaking agents are available at all hours. Average first-response time is under 90 seconds.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line along with your registered username. Written responses are provided within 24 hours on business days.

When submitting a data access, rectification, or erasure request, please provide your registered username, the email address associated with your account, and a clear description of your request. For identity verification purposes, svip2 may ask you to confirm your identity before processing any data rights request. This is a security measure to ensure that personal data is not disclosed to unauthorized individuals.