Privacy Policy

1 Introduction

This Privacy Policy ("Policy") applies to all personal data collected and processed by vit555 in connection with the online gaming platform accessible at https://vit555.cam and any related mobile applications or services ("Platform"). References to "vit555", "we", "us", or "our" in this Policy refer to the operator of the Platform. References to "you", "User", or "Player" refer to any individual who accesses or uses the Platform.

vit555 serves English-preference players across Indonesia, offering sports betting markets — including BRI Liga 1, the English Premier League, La Liga, Serie A, Bundesliga, and UEFA Champions League — alongside togel (Indonesia's traditional numbers lottery) draw markets, live casino games, and slot titles. All services are available in Indonesian Rupiah (IDR), with deposits and withdrawals processed via major Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).

We take our data protection obligations seriously. This Policy is designed to be transparent and easy to navigate. If you have any questions after reading it, please contact our support team at [email protected].

2 Definitions

For the purposes of this Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, either directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means vit555, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of vit555, under our written instruction and in accordance with this Policy.
• "KYC" means Know Your Customer — the identity and age verification process required for all registered accounts.
• "Cookie" means a small data file stored on your device by your browser when you visit the Platform.
• "Sensitive Data" means a sub-category of Personal Data that warrants heightened protection, including identity document numbers, financial account details, and biometric identifiers.

3 Data We Collect

vit555 collects Personal Data through several channels. The categories of data we may hold about you are set out in the table below.

We collect only the minimum data necessary for the stated purpose. You are not required to provide optional profile fields, and their omission will not affect your ability to use core Platform features.

4 How We Use Your Data

vit555 uses your Personal Data for the following purposes:

• Account Management: Creating, maintaining, and securing your account, authenticating your login sessions, and processing account closure requests.
• Payment Processing: Facilitating deposits and withdrawals via your nominated Indonesian bank account or e-wallet, verifying transaction ownership, and detecting fraudulent transactions.
• Identity Verification (KYC): Confirming that you are at least 21 years of age, verifying your identity against our legal obligations, and preventing the use of the Platform by ineligible individuals.
• Anti-Money-Laundering (AML) Compliance: Monitoring transaction patterns to detect and report suspicious financial activity in accordance with applicable AML regulations.
• Responsible Gaming: Identifying patterns that may indicate problem gambling behavior, applying voluntary or mandatory account restrictions, and communicating with you about player protection tools available on the Platform.
• Customer Support: Responding to your inquiries, resolving disputes, and maintaining records of support interactions.
• Platform Improvement: Analyzing aggregate, anonymized usage data to improve the functionality, performance, and user experience of the Platform.
• Security & Fraud Prevention: Detecting, investigating, and preventing unauthorized access, account takeovers, and other security incidents.
• Legal Compliance: Meeting our obligations under applicable laws, responding to lawful regulatory inquiries, and enforcing our Terms & Conditions.

We do not use your Personal Data for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent. Bonus eligibility assessments are based on objective, rule-based criteria rather than automated profiling.

5 Legal Basis for Processing

Each processing activity carried out by vit555 relies on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the agreement formed when you register an account and accept our Terms & Conditions — including account management, payment processing, and KYC verification.
• Legal Obligation: Processing required to comply with applicable AML laws, gaming licensing conditions, tax reporting obligations, and responses to lawful regulatory demands.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your fundamental privacy rights.
• Consent: Where we rely on your consent (for example, for optional marketing communications), you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

vit555 does not sell your Personal Data. We may share it with the following categories of recipients only to the extent necessary for the stated purpose:

6.1 Service Providers (Data Processors)

We engage third-party companies to provide services on our behalf, including KYC identity verification providers, payment processing partners (including the Indonesian banking network and e-wallet operators), cloud hosting and infrastructure providers, fraud detection services, and customer support tooling. All such processors are bound by written data processing agreements that require them to process data only on our instructions and to maintain appropriate security measures.

6.2 Game Content Providers

Live casino and slot game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive your account identifier and session token to authenticate your game session. These studios do not receive your full identity or financial data and are contractually prohibited from using session data for any purpose other than game delivery and fairness auditing.

6.3 Regulatory & Law Enforcement Authorities

We may disclose Personal Data to regulatory bodies, tax authorities, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of vit555, our users, or the public. We will notify you of such disclosure where legally permitted to do so.

6.4 Corporate Transactions

In the event of a merger, acquisition, or sale of all or substantially all of vit555's assets, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer and any material change to this Policy that results from it, with at least 30 days' notice before the transfer takes effect.

7 International Data Transfers

vit555 operates infrastructure across multiple geographic regions, and your Personal Data may be stored or processed outside of Indonesia. Where data is transferred to jurisdictions that do not have data protection laws equivalent to those in your country of residence, vit555 implements appropriate safeguards, which may include:

• Standard contractual clauses approved by the relevant supervisory authority;
• Binding corporate rules where the recipient is an affiliate entity;
• Other lawful transfer mechanisms recognized under applicable data protection frameworks.

Regardless of where your data is processed, vit555 applies the same privacy protections described in this Policy and requires all recipients to maintain security standards consistent with those applied on the Platform.

8 Cookies & Tracking Technologies

vit555 uses cookies and similar technologies to operate the Platform, maintain your session, and analyze aggregate usage patterns. We do not use third-party advertising cookies or cross-site tracking pixels.

You may control cookie behavior through your browser settings. Disabling strictly necessary cookies will prevent you from logging into the Platform. Disabling functional or analytics cookies will not affect your access to any paid features.

9 Data Retention

vit555 retains your Personal Data only for as long as is necessary for the purposes described in this Policy or as required by applicable law. Our general retention periods are as follows:

• Active Account Data: Retained for the full lifetime of your account.
• Post-Closure Account Data: Retained for five (5) years from the date of account closure to meet our AML, tax, and licensing obligations.
• KYC Verification Documents: Retained for five (5) years from the date of last transaction, as required by applicable AML regulations.
• Transaction Records: Retained for five (5) years in accordance with financial record-keeping requirements.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Usage and Analytics Data: Anonymized within 13 months of collection; anonymized aggregate data may be retained indefinitely.

When the applicable retention period expires, we securely delete or irreversibly anonymize your Personal Data. If you submit a data deletion request before a retention period has expired, we will delete all data we are not legally required to retain and anonymize the remainder.

10 Data Security

vit555 implements a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our technical and organizational measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform;
• AES-256 encryption for all Personal Data and Sensitive Data stored at rest in our databases;
• Role-based access controls that limit employee access to Personal Data to a strict need-to-know basis;
• Multi-factor authentication (MFA) enforced for all administrative access to production systems;
• Regular third-party penetration testing and vulnerability assessments of Platform infrastructure;
• A documented incident response plan with defined notification timelines in the event of a data breach.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, vit555 will notify affected users and the relevant supervisory authority within the timeframe required by applicable law, which in most cases is 72 hours of becoming aware of the incident.

11 Your Rights as a Data Subject

Subject to applicable law and our legal retention obligations, you have the following rights with respect to your Personal Data held by vit555:

• Right of Access: You may request a copy of all Personal Data we hold about you. We will provide this within 30 days of receiving your verified request.
• Right to Rectification: You may request that we correct any inaccurate or incomplete Personal Data. For account-level fields, you may update many details directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where we no longer have a legal basis to retain it. We will delete or anonymize all data not subject to a mandatory retention period within 30 days.
• Right to Restriction of Processing: You may ask us to pause processing of your data in specific circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request your Personal Data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and complete it within 30 calendar days. We may ask you to verify your identity before acting on a request.

12 Children & Minors

vit555 is strictly an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 21. Our Terms & Conditions require all Users to confirm they are at least 21 years of age at the point of registration, and our KYC process verifies age through government-issued identity documents.

If we become aware that Personal Data has been collected from an individual under 21, we will immediately suspend the relevant account, delete the associated Personal Data, and return any deposited funds in accordance with our compliance procedures. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].

13 Changes to This Policy

vit555 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. Where changes are material, we will provide at least 14 days' advance notice via a prominent notice on the Platform and, where possible, via the email address registered to your account.

The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

14 Contact & Data Rights Requests

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact the vit555 data protection team through the following channel:

• Live Chat: Available on-site 24 hours a day, 7 days a week (WIB)
• Email: [email protected] — response within 1–6 hours during WIB business hours; data rights requests fulfilled within 30 calendar days

When submitting a data rights request by email, please include "Data Rights Request" in the subject line and provide your registered account email address so we can verify your identity promptly.