Privacy Policy — vw138

vw138 ("we", "us", "the Company") operates the online gambling platform accessible at https://vw138.bet, providing sportsbook betting, live casino, slots, togel (Indonesia's traditional numbers lottery), online poker, and Domino QQ services to players across Indonesia and beyond. We are committed to handling the personal data of our players with the highest standards of transparency, security, and respect.

This Privacy Policy sets out in plain, formal terms how vw138 collects, uses, stores, discloses, and otherwise processes your personal information when you access or use our Platform. It also explains the rights available to you regarding your data and how to exercise them. Reading this document alongside our Terms & Conditions and Responsible Gaming Policy will give you a complete picture of how vw138 operates as a responsible, player-first platform.

By registering an account with vw138 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents and consent to the data practices described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, Indonesian residential address, national identity number, financial account details, IP address, device identifiers, and behavioral data generated through use of the Platform.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means vw138, which determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means any third party engaged by vw138 to Process Personal Data on vw138's behalf, subject to written data processing agreements.
• "Player" / "You" means any natural person who registers an account, accesses the Platform as a guest, or interacts with vw138's services in any capacity.
• "KYC" means the Know Your Customer identity verification process through which vw138 confirms a Player's identity, age, and eligibility in accordance with its compliance obligations.
• "Platform" means the vw138 website at https://vw138.bet, including all pages, subdomains, mobile-optimized views, and associated API services.
• "Sensitive Data" means a subset of Personal Data warranting a higher level of protection, including national identity numbers (KTP), financial account details, and any data revealing health status relevant to responsible gaming assessments.

vw138 collects only the Personal Data that is necessary to provide a secure, compliant, and high-quality gaming experience. The categories of data we collect are described in the table below:

vw138 collects Personal Data through the following channels and mechanisms:

• Direct Submission: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal request, claiming a promotion, or contacting customer support.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, browser fingerprint, session cookies, and page interaction events recorded by our analytics infrastructure.
• Payment Processors: Transaction-level data (amount in IDR, timestamp, status, channel reference) received from third-party payment providers including local Indonesian bank transfer intermediaries and e-wallet gateways.
• Identity Verification Partners: Where vw138 uses a third-party KYC service to verify documents submitted during identity verification, that partner may return a verification result and confidence score to vw138. The underlying document image is stored by vw138 in encrypted form.
• Fraud & Risk Systems: vw138's fraud prevention and anti-money laundering (AML) systems may generate derived data points (risk scores, device fingerprints, velocity flags) based on account activity. These are processed solely for compliance and security purposes.
• Cookies & Similar Technologies: Described in detail in Clause 10 (Cookies & Tracking).

vw138 processes your Personal Data only for defined, specific, and legitimate purposes. We do not process data in ways incompatible with the purpose for which it was originally collected. The primary purposes are:

• Account Creation & Management: To register your account, authenticate your identity at login, maintain your account profile, and manage your preferences and responsible gaming settings.
• Service Delivery: To enable you to place bets on sporting events (BRI Liga 1, EPL, La Liga, Serie A, Champions League, AFF Cup, Timnas Indonesia fixtures), access live casino games, slots, togel draws, online poker, and Domino QQ.
• Payment Processing: To process deposits and withdrawals in IDR via local Indonesian banking channels and e-wallets, and to maintain accurate transaction records.
• KYC & Age Verification: To verify that you meet the minimum age requirement of 21 years and are an eligible player under our Terms & Conditions.
• Regulatory Compliance & AML: To meet our obligations under applicable international gaming regulations, including anti-money laundering (AML) screening, sanctions checking, and Know Your Customer (KYC) requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, and unauthorized access to player accounts.
• Customer Support: To respond to your support enquiries, manage disputes, and improve our service quality based on interaction data.
• Responsible Gaming: To monitor for indicators of problem gambling behavior, enforce deposit and loss limits you have set, administer self-exclusion requests, and deliver reality check notifications.
• Platform Improvement: To analyze usage patterns, improve game performance, test new features, and optimize the user experience across devices and Indonesian time zones.
• Marketing Communications: To send you promotional offers, seasonal bonus notifications (such as Idul Fitri or Ramadhan promotions), and platform updates — provided you have opted in to marketing communications and have not subsequently unsubscribed.

vw138 relies on the following legal bases when processing your Personal Data:

• Contractual Necessity: Processing required to perform the contract between you and vw138 — including account operation, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing necessary to comply with applicable AML, KYC, and gaming regulatory requirements is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and analytics is carried out on the basis of vw138's legitimate interest in operating a secure and fair gaming environment, provided such interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications and non-essential cookies is carried out on the basis of your freely given, informed consent. You may withdraw consent at any time by contacting [email protected] or adjusting your account communication preferences.

vw138 does not sell, rent, or trade your Personal Data to third parties for their own commercial or marketing purposes. We share data only in the limited circumstances described below, and always subject to appropriate contractual protections:

• Payment Service Providers: We share the minimum necessary financial data with our Indonesian banking and e-wallet partners (including intermediaries processing transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja) to execute your deposit and withdrawal requests.
• KYC & Identity Verification Providers: Document images and identity data may be shared with our KYC verification partner solely for the purpose of confirming your identity and age eligibility.
• Game Content Providers: Certain usage data (player session tokens, bet history) is shared with game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft to enable game delivery and RNG certification. These providers are contractually prohibited from using your data for any purpose other than game operation.
• Fraud Prevention & AML Services: Aggregated risk and compliance data may be shared with specialist fraud screening and AML compliance services engaged by vw138.
• Legal & Regulatory Authorities: vw138 will disclose Personal Data to law enforcement agencies, regulatory authorities, or courts if required to do so by a valid legal order, court judgment, or applicable regulation. We will notify you of any such disclosure to the extent permitted by law.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of vw138's business, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections remaining in place. Affected players will be notified in advance.

vw138 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory or legal obligations. The following retention periods apply as a general guideline:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized, aggregated data may be retained indefinitely for statistical and platform improvement purposes without identifying any individual player.

vw138 implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and vw138 servers is encrypted using industry-standard 256-bit SSL/TLS protocols. The padlock icon visible in your browser's address bar confirms your connection is encrypted.
• Encrypted Data Storage: Personal Data and KYC documents stored on vw138 infrastructure are encrypted at rest using AES-256 encryption. Access is restricted to authorized personnel only, on a strict need-to-know basis.
• Password Security: Player passwords are never stored in plain text. We use industry-standard one-way cryptographic hashing algorithms (bcrypt) so that even vw138 personnel cannot retrieve your password.
• Two-Factor Authentication (2FA): vw138 offers optional 2FA for all player accounts. We strongly recommend enabling 2FA to add an additional layer of protection to your account credentials.
• Access Controls: Internal access to production systems containing Personal Data is governed by role-based access control (RBAC). All staff access is logged, monitored, and subject to periodic review.
• Penetration Testing & Vulnerability Scanning: vw138 conducts periodic security assessments including penetration testing and automated vulnerability scanning of its infrastructure and application layer.
• Incident Response: In the event of a confirmed data breach that poses a risk to player rights, vw138 will notify affected players and, where required, relevant authorities within the timeframes mandated by applicable regulation.

vw138 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by the Platform when you visit. The types of cookies used by vw138 are:

You may manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will impair or prevent the Platform from functioning correctly. Withdrawing consent for analytics or marketing cookies will not affect your ability to use core Platform features.

vw138 respects your rights in relation to your Personal Data. Depending on the applicable data protection framework, you may have some or all of the following rights:

• Right of Access: You may request a copy of the Personal Data vw138 holds about you, including the categories of data, the purposes of processing, and any third parties with whom it has been shared.
• Right of Rectification: You may request correction of inaccurate or incomplete Personal Data held about you. For account details, many fields can be updated directly within your account profile.
• Right of Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to vw138's overriding legal retention obligations under KYC, AML, and financial regulations.
• Right to Restrict Processing: You may request that vw138 restricts processing of your Personal Data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your Personal Data for direct marketing at any time. You may also object to processing based on legitimate interests, subject to vw138 demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". vw138 will respond within 30 days of receiving a valid, verifiable request. We may require identity verification before processing rights requests to protect against unauthorized access.

vw138 strictly enforces a minimum age requirement of 21 years for all registered players. The Platform is not directed at, and does not knowingly collect Personal Data from, any person under 21 years of age.

If vw138 becomes aware, at any point, that a registered account belongs to a person under the age of 21, we will immediately suspend the account, reverse all transactions to the extent technically possible, permanently delete the account, and purge all associated Personal Data that is not required to be retained by applicable AML or regulatory obligations.

Parents and guardians who believe their child may have registered an account or provided Personal Data to vw138 are encouraged to contact us immediately at [email protected]. We take underage access extremely seriously and will act on any such report as an urgent compliance matter.

vw138 operates globally and may transfer your Personal Data to servers, processors, or service providers located outside of Indonesia. Where such transfers occur, vw138 ensures that appropriate safeguards are in place to maintain the level of protection required under applicable data protection frameworks. Safeguards may include:

• Standard contractual clauses (SCCs) incorporated into data processing agreements with international processors.
• Transfers to jurisdictions recognized as providing an adequate level of data protection.
• Binding corporate rules or equivalent transfer mechanisms where applicable.

By using the Platform, you acknowledge that your Personal Data may be processed in countries outside Indonesia, including countries in Southeast Asia, Europe, or other regions where our infrastructure providers, game studios, or payment processors operate. vw138 requires all international processors to maintain security and privacy standards equivalent to those described in this Policy.

vw138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable regulations, or Platform functionality. Amendments will be published on this page with an updated "Last Updated" date displayed at the top of the Policy.

Where amendments are material — meaning they significantly affect the way we collect, use, or share your Personal Data — vw138 will provide at least 7 days' advance notice via the email address registered to your account or via a prominent on-Platform announcement prior to the changes taking effect.

Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

For all privacy-related enquiries, data rights requests, or concerns regarding vw138's data practices, please contact our Data Protection team using the details below. Our support team is available 24/7 across Western Indonesia Time (WIB, UTC+7), Central Indonesia Time (WITA, UTC+8), and Eastern Indonesia Time (WIT, UTC+9).

For urgent matters including suspected data breaches affecting your account, please mark your email "URGENT — Security Concern" and our compliance team will treat your message as highest priority. For responsible gaming emergencies, please visit our Responsible Gaming page for immediate self-exclusion options.