Privacy Policy

1Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, date of birth, address, email, phone number, payment details, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Data Controller" — vv62 and its operating entities, which determine the purposes and means of processing your personal data.
• "Data Processor" — any third party that processes personal data on behalf of vv62 pursuant to a written data-processing agreement.
• "Member" / "User" / "You" — any individual who has registered an account on the vv62 platform or who browses the platform without a registered account.
• "Platform" — the vv62 website, mobile-optimised site, and any associated applications accessible at https://vv62.cam.
• "KYC" — Know Your Customer identity-verification documentation required before withdrawal processing.
• "Cookies" — small text files placed on your device by the Platform to recognise your session, preferences, and behaviour.

2Data Controller

vv62 acts as the Data Controller for all personal data collected through the Platform. The Company is licensed and regulated under an international gaming jurisdiction and maintains data-protection practices consistent with globally recognised standards, including the General Data Protection Regulation (GDPR) as a benchmark framework, applied to the fullest extent practicable in the Indonesian market context.

For all data-protection enquiries, including Subject Access Requests and requests for data deletion, please contact our Data Protection Officer (DPO) via the contact details provided in Section 15 of this Policy.

3Data We Collect

vv62 collects only the personal data that is necessary and proportionate to the purposes described in this Policy. The categories of data we collect are set out in the table below:

4Legal Basis for Processing

vv62 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing is required to perform our contract with you — i.e., to operate your account, process deposits and withdrawals via BCA, BRI, BNI, Mandiri, and other supported channels, and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and other mandatory regulatory obligations imposed by our international gaming licence authority.
• Legitimate Interests: Processing is necessary for vv62's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent (e.g., for promotional email communications), you may withdraw that consent at any time by contacting our support team or using the unsubscribe link in any marketing communication.

5How We Use Your Data

vv62 uses the personal data it collects for the following specific purposes. We do not use your data in any manner that is incompatible with the purposes stated at the time of collection.

5.1 Account Management

Identity and contact data are used to create, maintain, and authenticate your vv62 account. This includes verifying your identity at registration, resetting passwords, and communicating account-related notifications such as deposit confirmations and withdrawal approvals.

5.2 Payment Processing

Financial data is shared with our licensed payment processors to facilitate deposits and withdrawals through local Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (GoPay, OVO, DANA, ShopeePay, LinkAja). We retain transaction records for the minimum period required by AML regulations.

5.3 Identity Verification (KYC)

KYC documents are processed to confirm that you meet vv62's eligibility requirements — specifically that you are at least 21 years of age and that your declared identity matches the account holder. KYC data is handled exclusively by authorised compliance personnel and our regulated KYC partner.

5.4 Fraud Prevention and Security

Technical and behavioural data are analysed to detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and unauthorised access. Automated risk-scoring systems flag anomalous patterns for manual review by our compliance team.

5.5 Responsible Gaming

Behavioural data — including wagering frequency, session duration, and deposit patterns — is monitored to identify indicators of problem gambling. Where such indicators are detected, our responsible gaming team may reach out proactively to offer support tools. See our Responsible Gaming page for full details.

5.6 Customer Support

Communications data from live chat sessions and email correspondence is retained to maintain continuity of service, train support staff, and resolve ongoing disputes. Support interactions are available for review upon your request.

5.7 Marketing Communications

With your consent, we may send promotional emails and notifications about bonuses, seasonal offers tied to Indonesian occasions (such as Idul Fitri, Ramadhan, or Indonesia's Independence Day on 17 August), and new game releases from our partner studios including Pragmatic Play, Evolution Gaming, and Spribe. You may opt out at any time.

5.8 Platform Improvement

Aggregated and anonymised technical and behavioural data is used to analyse platform performance, improve user experience, and develop new features. This analysis does not identify individual users.

6Data Sharing & Disclosure

vv62 does not sell or rent your personal data. We share data only in the limited circumstances described below, and only with parties who are contractually bound to protect it to the same standard we apply internally.

6.1 Payment Processors

Financial data is shared with licensed payment gateway partners to process your transactions. These partners are PCI-DSS compliant and process data solely for payment execution — they have no right to use your data for any other purpose.

6.2 KYC Verification Partners

KYC documents are transmitted to our regulated identity-verification partner via an encrypted channel. The partner is authorised solely to verify identity and return a pass/fail result; they may not retain copies of your documents beyond the minimum period required by law.

6.3 Game Software Providers

Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe) may receive a pseudonymous player identifier for the purpose of running games and recording results. They do not receive your name, contact details, or financial data.

6.4 Regulatory and Law Enforcement Authorities

vv62 will disclose personal data to competent regulatory or law-enforcement authorities where required by applicable law, court order, or our licensing obligations. We will, where legally permitted, notify you before complying with such a request.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of vv62's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it, with a minimum of 30 days' notice.

7Cookies & Tracking Technologies

The vv62 Platform uses cookies and similar technologies to deliver a functional, personalised, and secure browsing experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without impairing core functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and last-visited game category. Disabling these cookies may reduce personalisation features.
• Analytics Cookies: Collect anonymised data on how members navigate the Platform — which pages are visited most, where users drop off in a registration flow, and how long sessions last. This data is used exclusively for internal improvement purposes.
• Security Cookies: Used by our fraud-detection systems to identify unusual patterns of device or network behaviour that may indicate account compromise or bot activity.

Most web browsers allow you to control cookie settings through the browser's preference menu. Blocking all cookies may prevent certain parts of the Platform from functioning correctly. vv62 does not use third-party advertising cookies or behavioural-tracking pixels for external ad-targeting.

8Data Retention

vv62 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable AML and gaming-licence regulations. The standard retention periods applied by vv62 are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and research purposes.

9Data Security

vv62 implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our key security measures include:

• Transport Layer Security (TLS 1.3) for all data in transit between your browser and our servers.
• AES-256 encryption for all sensitive data stored in our databases, including KYC documents and financial records.
• Role-based access controls (RBAC) ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Multi-factor authentication (MFA) enforced for all internal staff accounts with access to member data systems.
• Regular independent penetration testing conducted by third-party cybersecurity firms at minimum annually, with critical findings remediated within 48 hours.
• Intrusion Detection Systems (IDS) and real-time security monitoring across all production infrastructure, active 24/7.
• Incident Response Plan — a documented, tested protocol for containing and remediating data security incidents, including member notification within 72 hours where required.

10Your Data Rights

As a vv62 member, you have the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection Officer using the details in Section 15. We will respond to all verified requests within 30 calendar days.

11Minors & Age Restriction

vv62's Services are strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect or process personal data from anyone below this age threshold. All registrations require confirmation of eligibility, and KYC verification is used to enforce this restriction before withdrawal access is granted.

If vv62 discovers or is notified that personal data has been collected from an individual under 21, we will immediately suspend the associated account, initiate secure deletion of all associated personal data within 30 days, and, where appropriate, report the matter to our compliance team for further review.

Parents and guardians who believe their child may have accessed the Platform are encouraged to contact us immediately at [email protected] (plain text — not a clickable link). We will treat all such reports with urgency and full confidentiality.

12International Data Transfers

As an internationally licensed platform serving Indonesian members, vv62 may transfer personal data to servers and processors located outside Indonesia. Where such transfers occur, we apply the following safeguards to ensure your data receives an equivalent level of protection:

• Data-processing agreements incorporating standard contractual clauses aligned with internationally recognised data-transfer frameworks.
• Transfer impact assessments conducted for each recipient country to evaluate the adequacy of local legal protections.
• Binding corporate rules applied where data is transferred to vv62 group entities in third countries.
• End-to-end encryption applied to all cross-border data transmissions regardless of the destination jurisdiction.

You may request details of the specific transfer mechanisms applied to your personal data by contacting our Data Protection Officer.

13Third-Party Links

The vv62 Platform does not contain links to external third-party websites for general browsing purposes. Any third-party integrations on the Platform (such as game studio interfaces from Pragmatic Play, Evolution Gaming, or Spribe) are embedded within the vv62 environment and governed by our data-processing agreements with those partners.

vv62 is not responsible for the privacy practices of any external website or service that a member may independently navigate to outside the Platform. We encourage you to review the privacy policy of any external site you visit.

14Changes to This Privacy Policy

vv62 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, we will notify registered members by email at least 14 days before the changes take effect, and update the "Last Updated" date at the top of this page accordingly.

Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you must close your account and cease using the Platform before the revision takes effect. Prior versions of this Policy are available upon request from our Data Protection Officer.

15Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact vv62's Data Protection Officer through the following channels. All enquiries are treated as strictly confidential and will receive a substantive response within 30 calendar days.

• Email (Data Protection Enquiries): [email protected] — please include "Privacy Request" in the subject line (plain text — not a clickable link)
• Live Chat: Available 24/7 through the Platform; ask to be connected to the Data Protection team
• Response Time: Within 30 calendar days for formal Subject Access Requests; within 5 business days for general privacy enquiries
• Operating Hours: Support is available around the clock, including during Indonesian public holidays (Idul Fitri, Idul Adha, 17 August Independence Day, Nyepi, and others)
• Language: Our support team includes native Indonesian speakers serving members across Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and the wider archipelago — in their preferred language