Privacy Policy — ve108

1 Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

2 Data Controller

ve108 acts as the data controller for all Personal Data collected through the ve108.net platform. As data controller, ve108 determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing activities comply with applicable data protection principles.

For all privacy-related enquiries, requests, or complaints, you may contact the ve108 Data Protection team directly at: [email protected]. Please include "Privacy Request" in the subject line of your message to ensure it is routed to the appropriate team member without delay.

3 Data We Collect

ve108 collects only the Personal Data that is genuinely necessary for the purposes described in this policy. The categories of data we collect are set out below:

3.1 Registration & Identity Data

• Full legal name as it appears on your Indonesian National Identity Card (KTP) or passport.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Gender (optional, collected for responsible gaming profiling purposes only).
• Residential address in Indonesia, including city (e.g., Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta) and postal code.
• Registered mobile phone number and email address.
• Username chosen by the Member at registration.

3.2 KYC & Verification Documents

• Scanned or photographed copy of your Indonesian KTP or valid passport.
• Selfie or live photo used for biometric facial comparison against the submitted identity document.
• Proof of address document (e.g., utility bill, bank statement issued within 90 days) where required for enhanced due diligence.
• Proof of payment method ownership (e.g., screenshot of BCA, BRI, BNI, Mandiri, OVO, or DANA account screen) where a withdrawal amount triggers enhanced verification thresholds.

3.3 Financial & Transaction Data

• Deposit transaction records, including amount (in IDR), timestamp, and the payment channel used (bank transfer via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, or e-wallet via OVO, DANA, GoPay, ShopeePay, LinkAja).
• Withdrawal records, including destination account or e-wallet, amount, and processing timestamp.
• Account balance history and bonus credit/debit events.
• We do not store full bank account numbers or full e-wallet credentials. Payment references are tokenized by our payment processors; ve108 retains only masked identifiers (e.g., last 4 digits of an account number).

3.4 Gaming & Betting Activity Data

• Game session logs: game title, studio (e.g., Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft), stake amount, outcome, RTP, and session duration.
• Sportsbook bet history: market (e.g., BRI Liga 1, EPL, La Liga, Champions League, AFF Cup, esports), selection, odds, stake, and settlement outcome.
• Responsible gaming tool usage: deposit limit settings, session timer activations, self-exclusion requests.

3.5 Technical & Device Data

• IP address at the time of registration and each login event.
• Device type, operating system, browser type and version.
• Approximate geographic location derived from IP address (country and city level only — ve108 does not use GPS or precise device location).
• Session tokens, authentication cookies, and platform interaction logs used for security and fraud detection.

3.6 Customer Support Data

• Transcripts of live chat conversations, WhatsApp exchanges, and email correspondence between you and the ve108 support team.
• Dispute or complaint records, including the nature of the issue and the resolution reached.

4 How We Collect Your Data

ve108 collects Personal Data through the following channels:

1. Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or interact with any form or survey on the platform.
2. Automatically during platform use: Our servers automatically log technical data (IP address, device identifiers, session tokens, game interaction events) each time you access the ve108 platform. This is standard practice for any secure online service and is necessary for platform integrity, security monitoring, and responsible gaming compliance.
3. From third-party KYC and fraud-prevention providers: When you submit identity documents, our integrated KYC partner conducts automated document verification and facial comparison checks. The results of those checks — a pass/fail status and confidence score — are shared with ve108. ve108 does not receive the raw biometric data beyond what is necessary for the verification result.
4. From payment processors: When you initiate a deposit or withdrawal, our payment partner confirms the transaction status and masked payment reference. Transaction confirmation data is passed to ve108 to update your account balance.
5. From analytics tools: ve108 uses privacy-respecting analytics to understand aggregate platform usage patterns (e.g., which game categories are most popular, peak session times). Analytics data is processed at an aggregated, anonymized level and is not linked back to individual Member identities.

5 Purpose & Legal Basis for Processing

ve108 processes your Personal Data only for legitimate, clearly defined purposes. The table below sets out each processing activity, its purpose, and the legal basis on which it rests:

6 Data Sharing & Disclosure

ve108 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share your data only in the circumstances described below, and only to the extent necessary for each stated purpose:

1. Payment Processors: We share the minimum necessary transaction and identity data with our payment partners — including local bank gateway operators and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — to facilitate deposits and withdrawals in IDR. These partners are contractually bound to process data only for payment settlement purposes.
2. KYC & Identity Verification Providers: Identity documents and facial images submitted during the KYC process are shared with our third-party verification partner solely for the purpose of automated document authentication and age confirmation. Results are returned to ve108 in pass/fail format; raw document images are retained by the verification partner under their own documented retention policy and deleted upon your written request.
3. Fraud Detection & AML Services: Transaction data and behavioral signals may be shared with specialist fraud detection and anti-money-laundering screening services. These services apply risk-scoring models and return a risk indicator to ve108; they do not retain your full profile beyond their contractual processing scope.
4. Game Studio Providers: When you play a game powered by a third-party studio (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft), your session data — including stake amounts, game outcomes, and session duration — is processed by that studio's game servers. Studios are contractually required to process this data only for game delivery and to maintain their own security standards.
5. Cloud Infrastructure & Hosting Providers: ve108 uses reputable cloud infrastructure providers to host the platform. These providers have access to server-level data as necessary to maintain infrastructure availability. All hosting agreements include data processing addenda that restrict the provider to infrastructure maintenance activities only.
6. Legal & Regulatory Authorities: ve108 may disclose Personal Data to competent authorities where required to do so by applicable law, court order, or lawful regulatory request. ve108 will notify affected Members of such disclosures where legally permitted to do so.
7. Business Transfers: In the event of a merger, acquisition, or sale of substantially all of ve108's assets, Member Personal Data may be transferred to the acquiring entity as part of that transaction. Affected Members will be notified in advance via the registered email address on file, and the acquiring entity will be required to honor this Privacy Policy or provide Members with adequate notice before applying any material changes.

7 Cookies & Tracking Technologies

ve108 uses cookies and similar tracking technologies on the ve108.net platform. Cookies are small text files stored on your device that help us deliver a secure, personalized, and high-performance experience.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to the ve108 platform and accessing real-money gaming features. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available through each browser's official help documentation.

8 Data Retention

ve108 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized using industry-standard techniques. Where data must be retained beyond the standard period due to an active legal dispute, regulatory investigation, or court order, it will be held in a restricted-access archive until the matter is resolved.

9 Data Security

ve108 implements a multi-layered security architecture to protect your Personal Data against unauthorized access, loss, alteration, or disclosure:

1. SSL/TLS Encryption: All data transmitted between your device and the ve108.net platform is encrypted using TLS 1.2 or higher. This protects login credentials, payment details, and game session data in transit.
2. Encrypted Data Storage: Sensitive Personal Data — including KYC documents, masked payment references, and account credentials — is stored using AES-256 encryption at rest. Encryption keys are managed through a dedicated key management service with strict access controls.
3. Access Controls: Access to systems that process Member Personal Data is restricted to authorized ve108 personnel on a need-to-know basis. All staff with access to personal data undergo background screening and are bound by confidentiality obligations.
4. Multi-Factor Authentication: Administrative access to back-end systems requires multi-factor authentication (MFA). Members are also strongly encouraged to enable MFA on their own ve108 accounts for an additional layer of login security.
5. Penetration Testing & Audits: ve108 engages independent security firms to conduct regular penetration testing and security audits of the platform infrastructure. Identified vulnerabilities are remediated according to a risk-prioritized patching schedule.
6. Incident Response: ve108 maintains a documented data breach response plan. In the event of a security incident that affects your Personal Data, ve108 will notify affected Members and relevant authorities within the timeframes required by applicable data protection obligations.

10 Your Data Rights

As a Member whose Personal Data is processed by ve108, you hold the following rights with respect to your information. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request":

ve108 will respond to all verified data rights requests within 30 calendar days of receipt. For complex requests, this period may be extended by up to an additional 60 days, in which case ve108 will notify you of the extension and the reason for it within the initial 30-day window. All requests must be submitted from the email address registered to your ve108 account, and identity verification may be required before any data is disclosed or deleted.

11 Minors & Age Policy

The ve108 platform is strictly intended for adults. You must be 21 years of age or older to register an account and access any real-money gaming feature. ve108 does not knowingly collect Personal Data from individuals under 21 years of age.

Age verification is a mandatory step in the ve108 KYC process. If ve108 discovers that a Member is under 21 years of age — whether through KYC review, a third-party report, or any other means — the following actions will be taken immediately:

• The Member's account will be suspended and permanently closed.
• All account balances, including any deposited funds and winnings, will be forfeited.
• All Personal Data associated with the underage account will be securely deleted within 30 days, except where retention is required by law.
• The registration details may be flagged internally to prevent re-registration using the same identity.

12 International Data Transfers

To deliver the ve108 platform to Members across Indonesia — from Jakarta and Surabaya to Medan, Makassar, Bali, and beyond — ve108 uses cloud infrastructure and third-party service providers whose servers may be located outside Indonesia. Where your Personal Data is transferred internationally, ve108 ensures that appropriate safeguards are in place:

1. Standard Contractual Clauses: Where data is transferred to processors in countries without an adequacy determination, ve108 relies on internationally recognized standard contractual clauses that impose data protection obligations on the receiving party equivalent to those applied by ve108.
2. Due Diligence on Recipients: ve108 conducts documented due diligence assessments on all third-party processors before engaging their services, and reviews those assessments periodically. Processors are required to demonstrate adequate technical and organizational security measures.
3. Data Minimization: Only the minimum necessary Personal Data is transferred internationally. Where processing can be carried out with anonymized or aggregated data, ve108 does not transfer identifiable personal data.

If you require further information about the specific safeguards in place for any given international transfer, please contact the ve108 Data Protection team at [email protected].

13 Amendments to This Policy

1. ve108 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. The updated policy will be published at ve108.net/privacy-policy with the revised "Last Updated" date displayed at the top of the page.
2. Where changes are material — meaning they significantly affect how your Personal Data is processed or your rights in relation to it — ve108 will provide at least 14 days' advance notice to all registered Members via the email address on file before the changes take effect.
3. Your continued use of the ve108 platform after the effective date of any amendment constitutes your acknowledgment of the updated policy. If you do not agree with the revised terms, you should close your account before the effective date of the changes and submit a data erasure request where applicable.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to ve108's handling of your Personal Data, please reach out to us through the following channels:

• Email: [email protected] — include "Privacy Request" or "Data Rights Request" in the subject line. Response within 4–8 hours (WIB) for general enquiries; up to 30 days for formal data rights requests.
• Live Chat: Available 24/7 within the ve108 platform. For formal data rights requests, our live chat agents will direct you to the email process to ensure a complete written record.
• WhatsApp Support: Available daily from 08.00–23.00 WIB for general account and privacy enquiries.