vm916 Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you register for a vm916 account, we collect personal information that you voluntarily provide to us, including:

• Identity Information: Full legal name, date of birth, Indonesian national identity card (KTP) number, passport number (if applicable), and government-issued identification documents for KYC verification purposes.
• Contact Information: Email address, phone number (mobile), residential address, city, province, and postal code.
• Financial Information: Indonesian bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), and payment transaction records.
• Account Credentials: Username, password (encrypted and never stored in plain text), and security questions/answers.
• Verification Documents: Copies or scans of your Indonesian national identity card, selfie photographs for facial recognition verification, proof of address documents (utility bills, bank statements), and source of funds documentation when required.

1.2 Information Collected Automatically

When you access the vm916 platform, we automatically collect certain technical information through cookies, web beacons, and similar tracking technologies:

• Device Information: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, device identifiers, and mobile network information.
• Usage Data: Pages visited, features accessed, time spent on pages, click patterns, navigation paths, referring URLs, and search queries within the platform.
• Gaming Activity: Bets placed, games played, deposit and withdrawal history, bonus claims, wagering activity, win/loss records, and session duration.
• Location Data: Approximate geographic location derived from IP address to verify Indonesian residency and ensure compliance with jurisdictional restrictions.
• Communication Records: Customer support chat logs, email correspondence, WhatsApp messages, and Telegram communications between you and vm916 support staff.

1.3 Information from Third Parties

We may receive limited information about you from third-party sources including payment processors (to verify transactions and prevent fraud), identity verification services (to authenticate your identity documents), and fraud prevention agencies (to detect suspicious activity and protect platform security).

2. How We Use Your Information

2.1 Service Delivery and Account Management

vm916 uses your personal information to provide, operate, and improve our gaming services, including:

• Creating and managing your player account
• Processing deposits, withdrawals, and payment transactions
• Verifying your identity, age, and residency to comply with legal requirements
• Processing bets, calculating payouts, and managing game outcomes
• Administering bonuses, promotions, and loyalty program benefits
• Providing customer support and responding to your inquiries
• Maintaining platform security and detecting unauthorized access
• Investigating and resolving disputes, complaints, or technical issues

2.2 Legal and Regulatory Compliance

We process your personal data to comply with legal obligations imposed by Indonesian law and international gaming regulations, including:

• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Verifying that players meet the minimum age requirement (21 years)
• Detecting and preventing fraud, money laundering, and criminal activity
• Responding to legal requests from law enforcement or regulatory authorities
• Maintaining records of transactions for audit and compliance purposes
• Enforcing our Terms & Conditions and platform policies

2.3 Marketing and Communications

With your consent, we use your contact information to send promotional communications including:

• Promotional offers, bonuses, and exclusive VIP deals
• Platform updates, new game announcements, and feature releases
• Newsletter subscriptions with gaming tips and industry news
• Birthday bonuses and personalized milestone rewards
• Tournament invitations and special event notifications

You may opt out of marketing communications at any time through your account settings or by contacting customer support. However, you cannot opt out of essential service communications related to your account, transactions, security alerts, or legal notices.

2.4 Platform Improvement and Analytics

We analyze usage data and gaming activity to understand player behavior, identify popular features, detect technical issues, optimize platform performance, and develop new services that better serve Indonesian players.

3. How We Share Your Information

3.1 Third-Party Service Providers

vm916 shares your personal information with trusted third-party service providers who assist in delivering our services. These providers are contractually obligated to protect your data and use it only for specified purposes:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet providers (OVO, DANA, GoPay, ShopeePay), and payment gateway operators process your financial transactions securely.
• Identity Verification Services: Third-party KYC providers verify the authenticity of your identity documents and conduct facial recognition checks.
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers host our platform and store encrypted data.
• Customer Support Tools: Live chat platforms, ticketing systems, and communication tools enable our support team to assist you effectively.
• Analytics Services: Web analytics and data analysis tools help us understand platform usage and improve user experience.
• Fraud Prevention Services: Security vendors detect suspicious activity, prevent unauthorized access, and protect against cyber threats.

3.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory authorities, or courts when required by Indonesian law, in response to valid legal requests, or to protect vm916's rights, property, or safety of our users.

3.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity, subject to continued protection under this Privacy Policy or an equivalent policy.

3.4 What We Do Not Share

vm916 never sells, rents, or leases your personal information to third parties for their marketing purposes. We do not share your data with unrelated third parties except as described in this Privacy Policy or with your explicit consent.

4. Data Security and Protection

4.1 Security Measures

vm916 implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• SSL Encryption: All data transmitted between your device and our servers is encrypted using 256-bit Secure Socket Layer (SSL) technology, the same encryption standard used by banks and financial institutions.
• Data Encryption: Sensitive personal information and financial data are encrypted both in transit and at rest using advanced encryption algorithms.
• Secure Data Centers: Your information is stored on secure servers located in certified data centers with physical access controls, environmental monitoring, and disaster recovery procedures.
• Access Controls: Only authorized vm916 personnel with legitimate business need can access your personal data, and all access is logged and monitored.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and address potential security weaknesses.
• Password Protection: User passwords are hashed and salted using bcrypt or similar industry-standard algorithms, ensuring they cannot be retrieved even if database access is compromised.
• Two-Factor Authentication: Optional 2FA adds an extra layer of security to protect your account from unauthorized access.

4.2 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, vm916 will notify affected users via email within 72 hours of discovering the breach, provide details about what information was compromised, explain the steps we are taking to address the breach, and advise you on protective measures you can take.

4.3 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account. You must maintain password confidentiality, never share your login credentials, use strong passwords combining letters, numbers, and symbols, enable two-factor authentication when available, log out after using shared devices, and immediately notify customer support if you suspect unauthorized account access.

5. Data Retention

5.1 Retention Periods

vm916 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and comply with legal obligations:

Data Type	Retention Period	Reason
Account Information	Duration of account + 7 years	Legal compliance, audit requirements
Transaction Records	7 years from transaction date	Financial regulations, tax compliance
Identity Documents	90 days after account closure	KYC verification, fraud prevention
Gaming Activity Logs	5 years	Dispute resolution, regulatory reporting
Communication Records	3 years	Customer service quality, dispute resolution
Marketing Preferences	Until consent withdrawal	Promotional communications

5.2 Account Closure

When you close your vm916 account, we will retain certain information as required by Indonesian law for financial record-keeping, anti-money laundering compliance, and tax reporting purposes. Personal identity documents are securely deleted 90 days after account closure. Marketing preferences are immediately removed from active communication lists.

5.3 Inactive Accounts

Accounts that remain inactive (no login or activity) for 24 consecutive months may have non-essential data archived or deleted while retaining core transaction records to meet legal obligations.

6. Your Privacy Rights

6.1 Right to Access

You have the right to request a copy of the personal information vm916 holds about you. You can download your account data through your account settings or request a complete data export by contacting customer support. We will provide the information in a structured, commonly used, machine-readable format within 30 days of your request.

6.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request correction or update. You can edit most information directly through your account settings. For changes to verified identity information, contact customer support with supporting documentation.

6.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data when it is no longer necessary for the purposes it was collected, you withdraw consent for processing, you object to processing and there are no overriding legitimate grounds, or your data has been unlawfully processed. However, we may retain certain data where required by law (financial records, transaction history) or necessary for legal claims and regulatory compliance.

6.4 Right to Restrict Processing

You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of your data, processing is unlawful but you prefer restriction over deletion, or you need the data for legal claims.

6.5 Right to Data Portability

You can request to receive your personal data in a structured, commonly used format and transmit it to another service provider. This right applies to data you provided to us with consent or for contract performance.

6.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. When you object to marketing communications, we will cease processing your data for those purposes immediately.

6.7 Exercising Your Rights

To exercise any of these privacy rights, contact our Data Protection Team at [email protected] with "PRIVACY REQUEST" in the subject line. Include your account username, full name, and specific details of your request. We will respond within 30 days and may request additional identity verification to prevent unauthorized access to your information.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit the vm916 platform. They help us recognize your device, remember your preferences, maintain login sessions, and analyze platform usage to improve user experience.

7.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality including login authentication, session management, and security features. These cannot be disabled without affecting platform operation.
• Performance Cookies: Collect anonymous information about how visitors use our platform, including pages visited, error messages encountered, and navigation patterns. This helps us optimize performance.
• Functional Cookies: Remember your preferences such as language settings, display options, and favorite games to provide a personalized experience.
• Targeting/Advertising Cookies: Track your activity across the platform to deliver relevant promotional offers and measure campaign effectiveness.

7.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling essential cookies may limit your ability to use certain platform features. You can manage cookie preferences through your account settings or browser controls.

7.4 Third-Party Cookies

Our platform may include content, widgets, or tracking from third-party service providers (analytics tools, customer support chat). These third parties may set their own cookies subject to their respective privacy policies. We recommend reviewing their policies to understand how they use cookies.

8. International Data Transfers

While vm916 primarily serves Indonesian players and stores data within Indonesia or on secure regional servers, certain service providers may process your data in other jurisdictions. When personal information is transferred internationally, we ensure adequate safeguards are in place through standard contractual clauses, data processing agreements requiring equivalent data protection standards, and verification that recipient countries provide adequate data protection levels.

We do not transfer your personal data outside of secure, trusted jurisdictions without implementing appropriate protection mechanisms. All international transfers comply with Indonesian data protection regulations and international standards.

9. Children's Privacy

vm916 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process requires age verification, and accounts belonging to underage users will be immediately closed upon discovery.

If you believe we have inadvertently collected information from someone under 21, please contact us immediately at [email protected] with the subject line "UNDERAGE ACCOUNT." We will promptly investigate and delete any such information from our systems, close the account, and void any transactions.

Parents or guardians who discover that their child has created an account or provided personal information to vm916 should contact us immediately for account closure and data deletion.

10. Changes to This Privacy Policy

vm916 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes affecting how we collect, use, or share your personal information, we will notify you via email to your registered email address or through prominent notice on the platform at least 30 days before changes take effect.

The "Last Updated" date at the top of this document indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of vm916 services after changes are posted constitutes acceptance of the updated Privacy Policy.

For significant changes that require new consent under Indonesian law, we will obtain your explicit agreement before implementing the changes.

11. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints regarding this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact vm916's Data Protection Team:

• Email: [email protected]
• Subject Line: "PRIVACY INQUIRY" or "DATA PROTECTION REQUEST"
• Response Time: We respond to privacy inquiries within 48 hours and resolve requests within 30 days
• Customer Support: 24/7 via live chat, WhatsApp, and Telegram for urgent privacy concerns

When contacting us regarding privacy matters, please include your account username (never your password), full legal name, specific nature of your inquiry or request, and any relevant details or documentation. We may request additional identity verification to protect your information from unauthorized access.