Your privacy is fundamental to how svip27 operates. This policy explains exactly what data we collect, why we collect it, how we use it, and the rights you hold over your personal information.
Last Updated: January 1, 2026Six foundational commitments that define our approach to data privacy across every touchpoint of the svip27 platform.
Every data exchange between your device and the svip27 platform — login credentials, financial transactions, personal details — is protected by industry-standard TLS/SSL encryption. Your data is never transmitted in plain text.
svip27 does not sell, rent, or lease your personal information to any third party for their independent marketing purposes. Your data exists solely to facilitate your account, process transactions, and improve your experience on the platform.
We collect only the data that is genuinely necessary to operate the platform, verify your identity, process payments, and comply with our legal obligations. We do not collect data speculatively or beyond what our stated purposes require.
You have the right to access, correct, delete, or restrict processing of your personal data. You can also request a portable copy of your data at any time. We respond to all valid data rights requests within 30 calendar days.
In the unlikely event of a data security incident that affects your personal information, svip27 is committed to notifying affected users promptly — within 72 hours of becoming aware of the breach — with clear information on what occurred and what steps we are taking.
We do not retain your personal data indefinitely. Specific retention periods are defined for each category of data, after which it is securely deleted or anonymized. Active account data is retained for as long as your account remains open plus a legally required post-closure period.
svip27 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who interacts with our platform. We recognize that the decision to share personal data with an online betting operator requires trust, and we take that trust seriously. This Privacy Policy has been written to be clear, accessible, and specific — not a boilerplate document — because we believe you deserve to understand precisely how your information is handled.
This policy is governed by internationally recognized data protection principles and is designed to reflect best practices in data privacy for online gaming operators serving the Indonesian market. svip27 operates primarily for players based in Indonesia, and our data handling practices are calibrated accordingly, with particular attention to the sensitivity of financial and identity data collected from players in Jakarta, Surabaya, Bali, Bandung, Medan, and other major Indonesian cities.
This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall relationship between svip27 and its registered members. In the event of any conflict between this policy and the Terms & Conditions on a data privacy matter, this Privacy Policy shall take precedence.
The following definitions apply throughout this Privacy Policy:
svip27 collects the following categories of personal data:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number (KTP or passport), selfie photograph for identity matching | Mandatory (KYC) |
| Contact Data | Email address, mobile phone number, residential address in Indonesia | Mandatory |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, or other supported banks), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Mandatory (for deposits/withdrawals) |
| Transaction Data | Deposit and withdrawal records, Bet history, game session records, bonus usage logs, win/loss records | Automatically generated |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session duration, click-path data, cookie identifiers | Automatically collected |
| Communication Data | Records of support chat conversations, email correspondence, and any other communications submitted to svip27's support team | When you contact us |
| Preference Data | Responsible gaming limit settings, notification preferences, display preferences configured within the platform | When you configure settings |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond problem gambling indicators relevant to responsible gaming), biometric data (beyond identity verification selfies), or criminal conviction data except where explicitly required as part of an anti-fraud investigation.
4.1 Directly from You. The majority of personal data we hold is provided directly by you during account registration, KYC verification, deposit and withdrawal requests, completion of preference settings, and correspondence with our support team. You are responsible for the accuracy of the data you provide.
4.2 Automatically via the Platform. Technical Data is collected automatically when you access and use the platform. This includes data collected via cookies, web beacons, pixel tags, and se rver-side logging. This data is collected regardless of whether you are logged in to your account.
4.3 From Third-Party Verification Providers. During the KYC process, we may receive identity verification results and fraud-risk signals from third-party identity verification service providers. These providers process your submitted documents and return a verification outcome to svip27. The underlying documents are stored by svip27, not by the third-party provider, beyond the verification session.
4.4 From Payment Processors. When you initiate a deposit or withdrawal via local Indonesian bank transfer or e-wallet, our payment processing partners may share transaction confirmation data — including masked account references and transfer timestamps — with svip27 to facilitate account crediting and withdrawal reconciliation.
4.5 From Fraud Prevention and Analytics Services. We may receive risk-scoring signals and aggregated behavioral analytics from third-party fraud prevention tools to help identify potentially fraudulent activity, multi-accounting, and bonus abuse patterns on the platform.
svip27 processes your personal data for the following specific purposes:
svip27 processes personal data only where a valid legal basis exists. The legal bases we rely on are:
7.1 We Do Not Sell Your Data. svip27 does not sell, rent, barter, or otherwise transfer your personal data to third parties for their own independent commercial purposes under any circumstances.
7.2 Service Providers (Data Processors). We engage carefully selected third-party service providers to perform specific functions on our behalf. These providers act as Data Processors under written contracts that require them to process your data only on our instructions and to maintain appropriate security standards. Categories of service provider include:
7.3 Legal Disclosures. svip27 may disclose personal data to competent government authorities, law enforcement agencies, or courts where required to do so by applicable law, regulation, or valid legal process. We will, where legally permitted, notify affected players of such disclosures.
7.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of svip27's business assets, your personal data may be transferred to the acquiring entity. We will provide advance notice via the platform and email before your data is transferred and becomes subject to a different privacy policy.
8.1 As an internationally operating online gaming platform serving Indonesian players, some of the third-party service providers we engage may store or process data on servers located outside of Indonesia. Where such transfers occur, svip27 takes steps to ensure that adequate protections are in place for the transferred data.
8.2 These protections may include contractual clauses that impose data protection obligations on the receiving party equivalent to those that apply within Indonesia, or the use of providers that operate under internationally recognized security certifications (such as ISO/IEC 27001).
8.3 By using the svip27 platform, you acknowledge that your personal data may be transferred to and processed in countries other than Indonesia. We will always take appropriate measures to ensure your data remains protected regardless of where it is processed.
svip27 retains personal data for only as long as is necessary for the purposes for which it was collected, plus any additional period required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years post-closure | Legal / AML obligation |
| KYC Documents | Duration of account + 5 years post-closure | Legal / AML obligation |
| Transaction and Bet Records | Duration of account + 5 years post-closure | Legal / AML obligation |
| Support Communication Records | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Technical / Session Data | 13 months from collection | Legitimate interests (security/analytics) |
| Marketing Preference Records | Until consent is withdrawn + 1 year | Consent |
| Self-Exclusion Records | Duration of exclusion + 7 years | Legal obligation / player protection |
Upon expiry of the applicable retention period, data is either securely deleted from our systems or irreversibly anonymized so that it can no longer be linked to an identifiable individual. Anonymized data may be retained indefinitely for statistical and platform improvement purposes.
10.1 svip27 implements a layered set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include but are not limited to:
10.2 While we implement rigorous security standards, no digital system can be guaranteed absolutely secure. You also play an important role in protecting your account — by using a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with any third party. If you suspect your account security has been compromised, contact us immediately at [email protected].
11.1 What Are Cookies? Cookies are small text files placed on your device by a website you visit. They serve a variety of functions, from keeping you logged in to tracking how you navigate the platform. svip27 uses cookies and similar technologies including web beacons and local storage.
11.2 Types of Cookies We Use:
11.3 Managing Your Cookie Preferences. You can control cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent the platform from functioning correctly. Disabling analytics cookies will not affect your ability to use the platform.
11.4 No Third-Party Advertising Cookies. svip27 does not permit third-party advertising networks to set cookies on the platform. We do not use retargeting or behavioral advertising cookie technologies.
As a user of the svip27 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.
Request a copy of all personal data we hold about you, along with information on how it is being processed and on what legal basis.
Request correction of any inaccurate or incomplete personal data we hold about you. Some corrections may require supporting documentation.
Request deletion of your personal data where we no longer have a lawful basis to retain it. Note that legal retention obligations may limit the scope of erasure.
Request that we limit how we use your data — for example, while a correction request is being assessed — without requiring full deletion of your data.
Request a structured, machine-readable copy of the personal data you have provided to us, suitable for transfer to another service provider.
Object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention. We will cease processing unless we can demonstrate compelling legitimate grounds.
The svip27 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect or process personal data from individuals under the age of 21. During account registration and KYC verification, we take active steps to confirm that all players meet the minimum age requirement.
If you believe that a person under 21 has registered an account on our platform or that we have inadvertently collected personal data from a minor, please contact us immediately at [email protected]. Upon confirmation, we will promptly close the account, delete the associated personal data, and return any deposited funds to the payment source.
Parents and guardians are encouraged to use parental control software to prevent minors from accessing online betting platforms. svip27 is not responsible for minors accessing the platform through misrepresentation of their age, but we take all reasonable steps to detect and prevent such access.
14.1 svip27 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. The "Last Updated" date at the top of this page will be revised whenever a substantive change is made.
14.2 Where changes are material — meaning they affect your rights or how we use your data in a significant way — we will notify registered players via the email address associated with their account at least 14 calendar days before the changes take effect. For minor clarifications or non-material updates, posting the revised policy on the platform constitutes sufficient notice.
14.3 Your continued use of the platform following the effective date of any amended Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated terms, you should discontinue use of the platform and may request account closure in accordance with our Terms & Conditions.
For all privacy-related inquiries — including data rights requests, questions about this policy, or concerns about how your personal data is being handled — please contact the svip27 data privacy team using the details below:
Now that you have reviewed our Privacy Policy, explore the related pages below or return to the homepage.