Privacy Policy — vit288

vit288 ("the Platform", "we", "us", "our") operates the online casino and sportsbook accessible at https://vit288.app. As part of delivering our services to players across Indonesia and internationally, we collect and process certain personal data about you. This Privacy Policy sets out, in clear and transparent terms, how that data is handled.

This Policy applies to all individuals who visit our website, register an account, use any of our products and services (including live casino, online slots, sportsbook, *togel* (Indonesia's traditional numbers lottery), and all other gaming verticals), or communicate with our support team. By accessing the Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

vit288 is committed to handling your personal data with the highest standards of care, transparency, and security. We do not sell your personal information to third parties for marketing purposes, and we will never use your data in a manner inconsistent with what is described in this Policy.

The following definitions apply throughout this Privacy Policy:

vit288 collects Personal Data across several categories depending on how you interact with the Platform. The categories of data we may collect include:

3.1 Identity and Registration Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify the 21+ age requirement).
• Nationality and country of residence.
• KTP (Indonesian National Identity Card) number or equivalent government-issued ID number for international players.
• Username chosen during account registration.

3.2 Contact Data

• Email address.
• Mobile phone number (Indonesian numbers preferred for SMS verification).
• Residential address (including city — Jakarta, Surabaya, Bandung, Bali, Medan, and others).

3.3 Financial and Transaction Data

• Bank account details for payment processing (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata).
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Deposit and withdrawal history, amounts in Indonesian Rupiah (IDR / Rp), and timestamps.
• Bonus and promotional credit history.

3.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Pages visited, time spent on each page, click-through patterns, and session duration.
• Game history, betting patterns, wagering amounts, and game outcomes.
• Login timestamps and logout events.

3.5 Communications Data

• Live chat transcripts with our support team.
• Email correspondence sent to or received from [email protected].
• Feedback, complaints, and dispute records.

3.6 Responsible Gaming Data

• Self-exclusion requests and their effective dates.
• Deposit limit settings and cooling-off period activations.
• Session time limit configurations.

vit288 collects your Personal Data through the following channels:

• Direct Registration: Data you provide when creating and verifying your vit288 account.
• Platform Interaction: Data generated automatically as you browse, play games, or use the Sportsbook on our Platform.
• Payment Transactions: Data shared by your bank or e-wallet provider when processing deposits and withdrawals.
• KYC Verification: Documents and information submitted as part of our mandatory identity verification process.
• Customer Support: Data provided when you contact our support team via live chat or email.
• Cookies and Tracking Technologies: Automatically collected technical data as described in Section 10 of this Policy.
• Third-Party Sources: In certain circumstances, we may receive data from fraud prevention agencies, identity verification services, or publicly available registers to supplement the information you have provided.

vit288 processes your Personal Data for the following purposes:

vit288 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and vit288 — including account creation, payment processing, and service delivery — is carried out because it is necessary for that contract.
• Legitimate Interests: Certain processing activities — including fraud detection, platform security, responsible gaming monitoring, and platform analytics — are carried out on the basis of vit288's legitimate business interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Where you have provided explicit consent — for example, to receive marketing communications — we process your data on that basis. You may withdraw your consent at any time by contacting our support team or adjusting your account notification preferences.
• Legal Obligation: Where vit288 is required to process data to comply with applicable law, regulatory requirements, or binding legal orders from competent authorities, we do so on the basis of legal obligation.

vit288 does not sell your Personal Data to any third party. We may share your data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: We share transaction-relevant data with our local bank and e-wallet partners (including BCA, BRI, BNI, Mandiri, GoPay, OVO, DANA, ShopeePay, and LinkAja) to process your deposits and withdrawals. These processors are contractually bound to handle your data securely and only for payment processing purposes.
• KYC and Identity Verification Providers: We may share identity document data with certified third-party KYC service providers to verify your identity and age in line with our obligations as a responsible gaming platform.
• Game Technology Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive limited technical session data necessary to deliver their games to you through the Platform.
• Fraud Prevention and Security Services: We may share data with specialist fraud prevention agencies and cybersecurity providers where necessary to protect the Platform and its players from fraudulent activity.
• Legal and Regulatory Authorities: We may disclose your data to law enforcement bodies, regulatory agencies, or courts where we are legally compelled to do so by a valid legal order or binding regulatory requirement.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of vit288's assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

vit288 retains your Personal Data only for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's existence on the Platform plus a minimum of five (5) years following account closure, to support audit, dispute resolution, and legal compliance requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, consistent with standard financial record-keeping obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the customer relationship, in accordance with anti-money laundering best practice.
• Customer Support Records: Communications and complaint records are retained for three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for as long as you remain subscribed plus one (1) year following any opt-out, as evidence of consent management.
• Technical and Usage Logs: Server logs, session data, and platform analytics are retained for up to twelve (12) months, after which they are anonymised or deleted.

At the end of the applicable retention period, your Personal Data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

vit288 takes the security of your Personal Data seriously and implements a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the vit288 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols, ensuring that no data is exchanged in plain text.
• Encrypted Data Storage: Sensitive Personal Data stored on our servers — including financial details and identity documents — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within vit288's internal systems is restricted to authorised personnel who require it to perform their specific job functions. Role-based access control (RBAC) policies are enforced across all internal systems.
• Segregated Player Funds: Player account balances in Indonesian Rupiah (Rp) are held in accounts that are operationally separated from vit288's corporate funds, protecting your deposited money in the event of any operational issue.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their vit288 accounts for an additional layer of login security.
• Regular Security Audits: vit288's infrastructure undergoes periodic security assessments and penetration tests conducted by independent security professionals.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, vit288 will notify affected Players promptly and take all reasonable steps to contain and remediate the incident.

The vit288 Platform uses cookies and similar tracking technologies to enhance your experience, analyse platform performance, and support fraud prevention operations. By continuing to use the Platform, you acknowledge the use of cookies as described below.

Types of cookies we use:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery (CSRF) attacks. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Store your preferences such as language settings, display preferences, and game lobby configurations, so the Platform remembers your choices between sessions.
• Performance and Analytics Cookies: Collect anonymised data on how players use the Platform — including which pages are visited most frequently, how long sessions last, and where players encounter errors. This data is used solely to improve the Platform.
• Security and Fraud Prevention Cookies: Help vit288 identify and block potentially fraudulent sessions, detect multi-accounting behaviour, and monitor for unusual login activity.

Most web browsers are set to accept cookies by default. You may configure your browser to refuse all or some cookies, or to notify you when cookies are being set. However, disabling strictly necessary cookies may prevent you from logging into your account or using certain Platform features.

As a Player whose Personal Data is processed by vit288, you have the following rights with respect to your information. To exercise any of these rights, please contact our support team via live chat or by emailing [email protected]. We will respond to all valid requests within a reasonable period, generally no longer than thirty (30) days.

If you are a parent or guardian and believe that a minor in your care has registered an account on the vit288 Platform or provided us with Personal Data, please contact our support team immediately at [email protected] so that we can take prompt corrective action.

vit288 operates as an internationally accessible platform. In the course of providing services to players primarily in Indonesia, your Personal Data may be transferred to and processed in jurisdictions outside Indonesia, including locations where our cloud infrastructure, KYC service providers, and game technology partners are based.

Wherever Personal Data is transferred internationally, vit288 takes steps to ensure that an adequate level of data protection is maintained. This includes entering into appropriate data transfer agreements with third-party processors, applying equivalent technical security standards at all processing locations, and selecting partners that operate in jurisdictions with recognised data protection frameworks.

By using the vit288 Platform, you acknowledge and consent to the transfer of your Personal Data to processing locations outside Indonesia for the purposes described in this Policy.

vit288 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they meaningfully affect how we collect, use, or protect your data — we will notify registered Players by email or via a prominent notice on the Platform at least seven (7) days before the revised Policy takes effect.

The effective date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how your data is protected. Your continued use of the Platform following any update constitutes your acceptance of the revised Privacy Policy.

If you do not agree with any change to this Policy, please stop using the Platform and contact our support team to discuss closing your account and withdrawing any remaining Real Money Funds balance.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vit288 processes your Personal Data, please reach out to our dedicated support team. We aim to respond to all privacy-related enquiries within five (5) business days.

When submitting a privacy request, please include your registered username or email address and a clear description of your request so that we can verify your identity and process your enquiry efficiently. We will never ask for your account password by email or live chat.