Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by vgowin through our website, mobile-optimized platform, customer support channels, and any other services we provide. It covers information collected directly from you during registration, indirectly through your use of our platform (such as gameplay history and device information), and from third-party sources such as payment processors and identity verification services.

This policy should be read in conjunction with our Terms & Conditions and any other supplementary privacy notices we may provide for specific services or promotions. If you have questions about how vgowin handles your personal data or wish to exercise any of your privacy rights, please contact our Data Protection Officer using the contact details provided at the end of this document.

2. Data Controller Information

vgowin, operating under its international gaming license, is the data controller responsible for your personal information. As the data controller, vgowin determines the purposes and means of processing your personal data and is accountable for ensuring compliance with applicable data protection laws and regulations.

Our registered business address and licensing details are available upon request. For all data protection inquiries, complaints, or requests to exercise your privacy rights, please contact our dedicated Data Protection Officer at [email protected] (please type this into your email client; not a clickable link).

3. Information We Collect

vgowin collects several categories of personal information to provide our services, comply with legal obligations, and ensure platform security. The information we collect includes:

3.1 Registration and Account Information

• Identity Data: Full legal name (as appears on government-issued ID), date of birth, gender, nationality, and government-issued identification numbers (Indonesian National ID / KTP, passport number, or driver's license number)
• Contact Data: Email address, mobile phone number, residential address (street address, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted hash format), and security questions/answers
• KYC Verification Documents: Scanned copies or photographs of government-issued photo ID, proof of address documents (utility bills, bank statements), and selfie photographs for identity verification purposes

3.2 Financial and Transaction Data

• Payment Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers), and payment card information (last four digits only; full card details are processed by our PCI-DSS compliant payment processors and never stored by vgowin)
• Transaction History: Records of all deposits, withdrawals, bets placed, winnings, bonuses claimed, and account balance changes
• Anti-Money Laundering Data: Source of funds information and any additional documentation required to comply with AML regulations

3.3 Usage and Technical Data

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers
• Connection Data: IP address, internet service provider, approximate geographic location (city level), and access times
• Gameplay Data: Games played, bet amounts, game outcomes, session duration, feature usage patterns, and responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)
• Communication Records: Transcripts of live chat conversations with customer support, email correspondence, and any other communications you have with vgowin

3.4 Marketing and Preference Data

• Communication Preferences: Your choices regarding marketing communications, promotional offers, and newsletter subscriptions
• Survey Responses: Feedback provided through customer satisfaction surveys, responsible gaming self-assessments, or other research activities

4. How We Use Your Personal Data

vgowin processes your personal data for the following specific purposes, each grounded in a lawful basis under applicable data protection regulations:

4.1 Service Provision and Account Management

We use your registration and account information to create and maintain your vgowin account, authenticate your identity when you log in, provide customer support, process your deposits and withdrawals, maintain your gameplay history, and enable you to use all features of our platform. This processing is necessary to perform our contract with you.

4.2 Legal and Regulatory Compliance

We process your identity data, financial information, and KYC documents to comply with legal obligations imposed by our licensing authority, including Know Your Customer (KYC) requirements, age verification to enforce the 21+ age restriction, anti-money laundering (AML) checks, source of funds verification, and maintaining records for audit and regulatory reporting purposes. This processing is necessary to comply with legal obligations to which vgowin is subject.

4.3 Security and Fraud Prevention

We analyze your usage patterns, device information, IP addresses, and transaction data to detect and prevent fraudulent activity, identify multiple account abuse, protect against unauthorized access and account takeover attempts, monitor for collusion and advantage play, and ensure the integrity of our games and betting markets. This processing is based on our legitimate interest in protecting vgowin and our players from fraud and maintaining a fair gaming environment.

4.4 Platform Improvement and Analytics

We use aggregated and anonymized usage data to understand how players interact with our platform, identify popular games and features, optimize website performance and user experience, develop new products and services, and conduct market research. This processing is based on our legitimate interest in improving our services.

4.5 Marketing and Promotional Communications

With your consent, we may use your contact information and gameplay preferences to send you personalized promotional offers, bonus notifications, newsletters about new games and features, and information about upcoming tournaments or special events. You can withdraw your consent and unsubscribe from marketing communications at any time by adjusting your account settings or clicking the unsubscribe link in any marketing email.

4.6 Responsible Gaming Protection

We use your gameplay data, deposit history, and responsible gaming tool settings to monitor for signs of problem gambling behavior, enforce deposit limits, loss limits, and session time limits you have set, honor self-exclusion requests, and provide targeted responsible gaming resources when appropriate. This processing is based on our legitimate interest in promoting player welfare and preventing gambling-related harm.

5. When and With Whom We Share Your Data

vgowin does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we do share your data with specific categories of third parties as necessary to provide our services and comply with legal obligations:

5.1 Payment Service Providers

We share your financial information with banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and payment gateway operators to process your deposits and withdrawals. These providers are bound by strict confidentiality obligations and may only use your data to facilitate transactions.

5.2 Identity Verification Services

We share your identity documents and personal details with third-party KYC verification providers who conduct identity checks, verify document authenticity, cross-reference against fraud databases, and perform age verification on our behalf. These providers are contractually obligated to protect your data and use it solely for verification purposes.

5.3 Game Providers and Software Suppliers

We share limited technical data (such as player ID and bet amounts) with our casino game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and others) to enable gameplay, calculate winnings, and maintain game integrity. These providers do not receive your personally identifiable information such as name, address, or financial details.

5.4 Regulatory Authorities and Law Enforcement

We may disclose your personal data to our licensing authority, gambling regulators, law enforcement agencies, or courts when required by law, compelled by subpoena or court order, or when necessary to investigate suspected illegal activity, fraud, or terms of service violations. We will always seek to limit such disclosures to the minimum necessary to satisfy the legal requirement.

5.5 Professional Advisors and Service Providers

We may share your data with legal advisors, accountants, auditors, IT service providers, cloud hosting providers, and other professional service providers who assist us in operating our business, always under strict confidentiality agreements.

6. Security Measures and Data Protection

vgowin employs industry-leading security measures to protect your personal data against unauthorized access, loss, misuse, alteration, or destruction. Our security infrastructure includes:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest is also encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized personnel with legitimate business needs, and all access is logged and monitored. Employees undergo regular data protection training.
• Network Security: Our servers are protected by enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) that monitor and block suspicious activity 24/7.
• Regular Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments on our systems annually, and we remediate any identified issues promptly.
• Secure Development: Our software development process follows secure coding standards, and all code undergoes security review before deployment.
• Incident Response: We maintain a comprehensive data breach response plan. In the unlikely event of a security incident affecting your personal data, we will notify you and relevant authorities in accordance with applicable legal requirements.

While we implement robust security measures, no system is entirely immune to attack. You also play a crucial role in protecting your account by choosing a strong, unique password, enabling two-factor authentication if available, never sharing your login credentials, logging out after each session on shared devices, and keeping your contact information current so we can reach you about security matters.

7. Cookies and Tracking Technologies

vgowin uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyze platform usage. Cookies are small text files stored on your device by your web browser when you visit our website.

7.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality, such as maintaining your login session, processing transactions, and enabling security features. These cookies cannot be disabled.
• Preference Cookies: Remember your settings and choices, such as language preference, time zone, and display options, to provide a personalized experience.
• Analytics Cookies: Help us understand how visitors interact with our platform, which pages are most popular, and where users encounter errors, allowing us to improve our services.
• Marketing Cookies: Track your browsing activity to deliver personalized promotional offers and advertisements. You can disable marketing cookies through your browser settings or our cookie consent tool.

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is set. However, disabling essential cookies will impair your ability to use certain features of the vgowin platform.

8. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal data. To exercise any of these rights, please contact our Data Protection Officer at [email protected]:

8.1 Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide this information in a commonly used electronic format free of charge within 30 days of your request. You may request access once per 12-month period without charge; subsequent requests may incur a reasonable administrative fee.

8.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact customer support for assistance with fields you cannot edit yourself.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or you withdraw consent for processing based on consent. However, we may be legally required to retain certain data for regulatory compliance (typically 5-7 years for financial records and KYC documents), or to resolve disputes and enforce our terms. We will inform you if we cannot fully delete your data and explain the reason.

8.4 Right to Restrict Processing

You may request that we limit how we use your data while you challenge the accuracy of the data, contest the lawfulness of our processing, or await resolution of a legal claim. During a restriction period, we will store your data but not actively process it except with your consent or for legal claims.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible.

8.6 Right to Object

You may object to processing of your data based on legitimate interests or for marketing purposes. If you object to marketing, we will cease such processing immediately. For other objections, we will assess whether our legitimate interests override your rights and freedoms.

8.7 Right to Withdraw Consent

Where we process your data based on consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.

8.8 Right to Lodge a Complaint

If you believe vgowin has violated your privacy rights, you have the right to lodge a complaint with our Data Protection Officer and, if unsatisfied with our response, with the relevant data protection supervisory authority in your jurisdiction.

9. Data Retention Periods

vgowin retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory requirements, and resolve disputes. Our standard retention periods are:

• Account and Identity Data: Retained for the duration of your active account, plus 7 years after account closure to comply with AML regulations and licensing requirements.
• Financial Transaction Records: Retained for 7 years after the transaction date as required by tax and financial reporting laws.
• KYC Verification Documents: Retained for 7 years after account closure or last verification, whichever is later, to meet regulatory obligations.
• Gameplay and Betting History: Retained for 7 years to support dispute resolution, regulatory audits, and compliance reporting.
• Communication Records: Customer support chats and emails retained for 3 years for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or your account is closed, whichever comes first.

After the applicable retention period expires, we securely delete or anonymize your data in accordance with our data disposal procedures. Anonymized data may be retained indefinitely for statistical and research purposes.

10. International Data Transfers

As an internationally licensed platform serving players across Indonesia and potentially other jurisdictions, vgowin may transfer your personal data to countries outside Indonesia where our servers, service providers, or business partners are located. Some of these countries may not have data protection laws equivalent to those in Indonesia.

When we transfer your data internationally, we implement appropriate safeguards to protect your information, including using standard contractual clauses approved by data protection authorities, ensuring our service providers are certified under recognized data protection frameworks, and conducting due diligence on the security practices of all recipients. By using vgowin services, you consent to these international data transfers.

11. Children's Privacy and Age Restrictions

vgowin services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal data from individuals under 21 years of age. Our registration process requires date of birth verification, and our KYC procedures include age verification through government-issued identification documents.

If we become aware that we have inadvertently collected personal data from an individual under 21 years of age, we will immediately delete that account, delete all associated personal data, and forfeit any account balance in accordance with our Terms & Conditions. Parents and guardians concerned about underage gambling should implement parental control software and monitor their children's internet usage.

If you believe we have collected data from an underage individual, please contact us immediately at [email protected] so we can investigate and take appropriate action.

12. Changes to This Privacy Policy

vgowin reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any material changes will be communicated to you via email to your registered email address and by posting a prominent notice on our website at least 30 days before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. The "Last Updated" date at the bottom of this page indicates when the policy was last revised. Continued use of vgowin services after a Privacy Policy update constitutes acceptance of the revised policy.

13. Contact Information and Data Protection Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or vgowin's data handling practices, please contact our dedicated Data Protection Officer:

• Email: [email protected] (please type this into your email client; not a clickable link)
• General Customer Support: Available 24/7 via Live Chat or email at [email protected]

We aim to respond to all privacy-related inquiries within 5 business days. For formal data subject access requests or complaints, we will provide a substantive response within 30 days as required by applicable data protection laws. If your request is particularly complex or we receive multiple requests from you, we may extend this period by an additional 30 days and will inform you of the extension and the reasons for the delay.