Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings set out below:

vivo88 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, vivo88 is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently, and that appropriate technical and organisational measures are in place to protect it.

vivo88 is licensed and regulated internationally and operates in compliance with the data protection obligations imposed by its licensing jurisdiction, as well as best-practice international data privacy frameworks applicable to online gaming operators serving the Indonesian market.

For all data protection enquiries, requests, or complaints, you may contact our Data Protection team at [email protected] (plain text — not a clickable link). We aim to acknowledge all data protection correspondence within 48 hours and resolve substantive requests within 30 calendar days.

vivo88 collects Personal Data in three primary ways: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third-party verification services in connection with KYC and fraud prevention.

3.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, gender, residential address (Indonesian city and province, e.g., Jakarta, Bandung, Surabaya, Medan, Bali), email address, mobile phone number, and chosen username.
• Identity verification (KYC) documents: Government-issued photo identification (National Identity Card / KTP, Passport, or Driving License), proof of residential address, selfie photographs, and any additional documents requested during enhanced due diligence.
• Payment information: Indonesian bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, or BSI) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, or LinkAja) used for deposits and withdrawals. We do not store full card numbers or banking passwords.
• Communications data: Records of your correspondence with our customer support team, including live chat transcripts, email threads, and any attachments you submit.
• Responsible gaming data: Self-exclusion requests, deposit limits, loss limits, session time limits, and any other responsible gaming tool activations.

3.2 Data Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited on the Platform, games played, betting history, session duration, click paths, search queries, and feature interactions.
• Transaction data: Full history of deposits, withdrawals, bonus claims, wagers placed (including sports markets such as BRI Liga 1, EPL, and La Liga; casino games from providers including Evolution Gaming and Pragmatic Play; and specialty games including togel (Indonesia's traditional numbers lottery) and sabung ayam (cockfighting)), and account balance movements.
• Cookies and similar technologies: Session identifiers, preference cookies, and analytics data. See Section 8 for full details.

3.3 Data from Third Parties

• Identity verification results from KYC service providers used to confirm the authenticity of documents you submit.
• Fraud risk scores and sanctions screening results from AML and fraud prevention service providers.
• Public records and watchlist checks conducted as part of our regulatory compliance obligations.

vivo88 processes your Personal Data only where a valid legal basis exists. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, contact our support team or use the unsubscribe option in any marketing email you receive.

vivo88 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We share your data only in the following limited and necessary circumstances:

• Payment service providers: Indonesian banks (BCA, BRI, BNI, Mandiri, and others) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to process your deposit or withdrawal transactions.
• KYC and identity verification providers: Specialist third-party KYC platforms receive the identity documents you submit solely for the purpose of verification. These providers are bound by strict data processing agreements and may not use your data for any other purpose.
• Fraud prevention and AML screening services: Transaction data and account behaviour signals are shared with fraud detection and anti-money laundering service providers to identify suspicious activity and protect the integrity of the Platform.
• Game software providers: Providers such as Evolution Gaming, Pragmatic Play, Microgaming, Spribe, and Pocket Games Soft receive the minimum session data necessary to deliver their games within the Platform. These providers operate under contractual data protection obligations.
• Regulatory and law enforcement authorities: vivo88 will disclose Personal Data to competent authorities where required by law, court order, or the instructions of our licensing regulator. We will notify you of such disclosures where legally permitted to do so.
• Group companies and successors: In the event of a corporate restructure, merger, acquisition, or sale of all or part of vivo88's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

vivo88 retains your Personal Data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law and regulatory obligations. The following retention periods apply as general guidance:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Where data cannot be immediately deleted due to ongoing legal proceedings or regulatory investigations, it will be restricted from further processing until deletion becomes permissible.

vivo88 employs a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
• At-rest encryption for all sensitive Personal Data stored in our databases, including KYC documents and financial account details.
• Role-based access controls ensuring that only authorised personnel can access specific categories of Personal Data, strictly on a need-to-know basis.
• Multi-factor authentication required for all internal staff accessing production systems containing Personal Data.
• Continuous security monitoring including intrusion detection systems, anomaly detection, and real-time alerting for suspicious access patterns.
• Regular penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures that define clear escalation paths and notification timelines in the event of a data breach affecting player data.

Despite these measures, no system connected to the internet can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, vivo88 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

vivo88 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session security, and understand how players interact with our services. We do not use cookies to track your activity across unrelated third-party websites.

The following categories of cookies are used on the Platform:

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse or delete cookies. Please be aware that disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging in or completing transactions.

As a vivo88 player, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and respond within 30 calendar days.

The vivo88 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. Registration requires confirmation of age eligibility, and all accounts are subject to KYC age verification before withdrawals are permitted.

If vivo88 discovers or has reasonable grounds to believe that Personal Data has been collected from a minor, the associated account will be immediately suspended and all Personal Data relating to that individual will be deleted from our systems as promptly as technically feasible. Any funds deposited by a minor will be returned to the original payment source after deducting any bonus amounts credited to the account.

If you are a parent or guardian and believe that your child has registered on the vivo88 Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

As an internationally operated platform serving Indonesian players, vivo88 may transfer your Personal Data to servers and service providers located outside Indonesia. Such transfers may occur in connection with cloud infrastructure, KYC verification services, game software providers, and fraud prevention systems.

Whenever Personal Data is transferred internationally, vivo88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this policy. These safeguards include:

• Entering into data processing agreements with all third-party processors that impose binding data protection obligations consistent with international standards.
• Transferring data only to jurisdictions or organisations that offer an adequate level of data protection as assessed by vivo88's compliance team.
• Applying contractual clauses that require overseas recipients to protect your data in accordance with the same standards applied within Indonesia.

You may request further information about the specific safeguards applied to any international data transfer by contacting our support team.

vivo88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will update the "Last Updated" date at the top of this page and, where feasible, notify registered players via the email address associated with their account at least 7 days prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to remain informed about how vivo88 protects your data. Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

For all privacy-related enquiries, data subject access requests, or complaints regarding vivo88's data practices, please contact our Data Protection team using the details below. All correspondence must be submitted in writing to ensure a complete and auditable record of your request.

If you are not satisfied with our response to a data protection request or complaint, you have the right to escalate your complaint to the relevant supervisory authority or to seek independent dispute resolution as outlined in our Terms & Conditions.