Privacy Policy — vit555 Data Protection Commitment

1.1  vit555 ("vit555", "we", "us", "our") operates the online sports betting and casino platform accessible at vit555.app (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who use or interact with our Platform, including registered players, prospective players who browse the site, and any individual who contacts our customer support team.

1.2  This Privacy Policy ("Policy") sets out in clear and transparent terms:

• What categories of personal data vit555 collects about you.
• The purposes for which we process your personal data and the legal bases that justify that processing.
• With whom we share your personal data and under what conditions.
• How long we retain your personal data.
• The technical and organizational measures we use to keep your data secure.
• The rights you have in relation to your personal data and how to exercise them.

1.3  This Policy applies to all players who access vit555 from Indonesia, including those using desktop browsers, mobile browsers, or any vit555-distributed application. It covers all vit555 products and services: sportsbook (including BRI Liga 1, EPL, Champions League, and other markets), live dealer casino, slot games, togel (Indonesia's traditional numbers lottery), and any other product accessible through vit555.app.

1.4  This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

2.1  For the purposes of this Policy, vit555 acts as the data controller in respect of the personal data it collects and processes about you. As data controller, vit555 determines the purposes for which and the means by which your personal data is processed.

2.2  vit555 is a licensed and regulated internationally operating online gaming platform. While our primary audience is located in Indonesia — across Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Palembang, and Makassar — our data processing operations are conducted in accordance with internationally recognized data protection principles.

2.3  If you have any questions about the identity of the data controller or any aspect of this Policy, please contact us using the details provided in Section 14 below.

3.1  vit555 collects the following categories of personal data:

3.2  vit555 does not intentionally collect Special Category Data (such as health information, religious beliefs, or biometric data) as part of normal platform operations. If such data is incidentally disclosed during a support interaction or KYC submission, it will be processed with the highest level of care and not used for any purpose beyond the immediate support or compliance requirement.

4.1  vit555 collects personal data through the following channels:

• Direct submission by you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotional communication.
• Automated technical collection — through cookies, pixel tags, server logs, and session-recording technologies that operate as you use the Platform. See Section 10 for our full Cookies Policy.
• Third-party sources — from identity verification providers, fraud screening services, and payment processors, where necessary to complete KYC/AML checks or process a transaction. We may also receive limited data from analytics platforms such as Google Analytics (in anonymized, aggregated form only).

4.2  Where we collect personal data from third-party sources, we ensure that those sources have a lawful basis for sharing that data with us and that the data is used only for the specific purpose for which it was obtained.

5.1  vit555 processes your personal data only where a valid legal basis exists. The table below sets out each processing purpose alongside its legal basis:

5.2  Where we rely on legitimate interest as the legal basis for processing, we have assessed that our interests do not override your fundamental privacy rights, taking into account the nature of the data, the reasonable expectations of players on an online betting platform, and the safeguards we have in place.

5.3  Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any email or contact our support team.

6.1  vit555 shares personal data with third parties only in the following limited circumstances:

• Payment Processors — Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the financial and identity data necessary to process your deposit or withdrawal. These entities act as independent data controllers under their own privacy policies.
• Game Content Providers — Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a pseudonymous player identifier and session data for the purpose of operating and auditing game results. They do not receive your full name or financial data.
• Identity Verification Providers — Third-party KYC/AML services receive copies of your identity documents and the data necessary to perform age, identity, and sanctions screening. These providers are contractually bound to use your data for this purpose only.
• Analytics Providers — Aggregated and anonymized usage data may be shared with analytics platforms to help us understand how players use the Platform and to improve the user experience. No personally identifiable information is shared in this context.
• Legal and Regulatory Authorities — vit555 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or where we reasonably believe disclosure is necessary to prevent fraud, financial crime, or harm to any person.
• Business Transfers — In the event of a merger, acquisition, or sale of all or substantially all of vit555's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via email or an on-site notice prior to any such transfer taking effect.

6.2  vit555 does not sell, rent, or exchange personal data with third parties for their own marketing purposes under any circumstances.

7.1  As a platform that serves Indonesian players using internationally hosted infrastructure and third-party technology providers, vit555 may transfer your personal data to countries outside Indonesia. These transfers occur in the following contexts:

• Game server infrastructure operated by content providers in their respective jurisdictions.
• Cloud hosting and content delivery networks used to provide a fast, low-latency experience for players in Jakarta, Surabaya, Bali, and across the Indonesian archipelago.
• KYC and identity verification services that operate global screening databases.

7.2  Where personal data is transferred internationally, vit555 ensures that appropriate safeguards are in place, including contractual clauses that impose data protection obligations equivalent to those applied within vit555's own operations. vit555 only engages third parties that maintain recognized information security standards.

8.1  vit555 retains your personal data for as long as your account is active and for a defined period following account closure, as set out below:

8.2  Once the applicable retention period has expired, vit555 will securely delete or anonymize your personal data so that it can no longer be associated with you as an individual.

9.1  vit555 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption — All data transmitted between your device and vit555.app is encrypted in transit using industry-standard TLS 1.2 or higher protocols.
• Encryption at Rest — Sensitive data stored on vit555 servers, including identity documents and financial references, is encrypted at rest using AES-256 encryption.
• Password Hashing — Account passwords are never stored in plain text. vit555 uses a strong adaptive hashing algorithm (bcrypt) with an appropriate cost factor to protect credentials even in the event of a data breach.
• Layered Access Controls — Access to personal data within vit555's internal systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
• Vulnerability Management — vit555 conducts regular penetration testing, vulnerability scanning, and security audits of the Platform to identify and remediate weaknesses before they can be exploited.
• Real-Time Fraud Monitoring — Automated systems monitor transactions and login activity 24/7 for anomalous behavior indicative of unauthorized access or financial fraud.
• PCI-DSS-Compliant Payment Infrastructure — Payment processing is handled exclusively through gateways that hold current PCI-DSS certification. vit555 does not store full card or bank account numbers on its own servers.

9.2  While vit555 takes all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is 100% secure. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, vit555 will notify affected players without undue delay in accordance with applicable regulatory requirements.

9.3  You are responsible for keeping your account credentials — username, password, and any two-factor authentication codes — confidential. Do not share your login details with any other person. If you suspect that your account has been accessed without authorization, contact vit555 support immediately.

10.1  vit555 uses cookies and similar tracking technologies (collectively "Cookies") to operate essential Platform functions, improve user experience, and gather anonymized analytics data. The following categories of Cookies are used:

10.2  You can manage your Cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking Strictly Necessary Cookies will impair the functionality of the Platform and may prevent you from logging in or placing bets.

10.3  vit555 does not use Cookies to serve third-party advertising inside the Platform. Any usage data collected via analytics Cookies is processed in aggregated, anonymized form only and is not linked back to your individual account profile.

11.1  Subject to applicable law, you have the following rights in relation to the personal data vit555 holds about you. To exercise any of these rights, contact our support team using the details in Section 14. We will respond within 30 calendar days of receiving a verifiable request.

12.1  vit555 is an adults-only platform. You must be at least 21 years of age to register an account and use any vit555 Service. This age restriction applies to all users accessing the Platform from Indonesia and all other jurisdictions.

12.2  vit555 does not knowingly collect or process personal data relating to individuals under the age of 21. If you believe that a minor has registered an account with vit555 or has submitted personal data through the Platform, please contact us immediately at the details provided in Section 14. Upon confirmation, vit555 will take prompt steps to close the account and securely delete all associated personal data.

12.3  Age verification is a mandatory component of our KYC process. All players are required to submit a government-issued identity document (KTP for Indonesian nationals, or passport for non-Indonesian nationals) confirming their date of birth prior to making their first withdrawal. Players who cannot verify that they are aged 21 or above will have their accounts suspended and any deposits returned via the original payment method.

13.1  vit555 reserves the right to update or amend this Privacy Policy at any time. We will notify you of material changes by posting a prominent notice on vit555.app and, where we hold your email address, by sending a notification to your registered email at least seven (7) days before the updated Policy takes effect.

13.2  The version number and effective date displayed at the top of this page will be updated each time the Policy is revised. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

13.3  Your continued use of the vit555 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change to this Policy, you should stop using the Platform and may request account closure in accordance with our Terms & Conditions.

14.1  If you have any questions, concerns, or complaints about this Privacy Policy or the way vit555 handles your personal data, please contact our Data Protection team through any of the following channels:

• Email:  support at vit555.app  (plain text — not a clickable link; response within 2–4 hours)
• Live Chat:  Available 24/7 via the chat widget on vit555.app
• WhatsApp:  +62 811 555 0001  (plain text — not a clickable link; available 08:00–24:00 WIB)

14.2  For formal data subject requests (access, rectification, erasure, portability, objection), please email us with the subject line "Data Subject Request — [Your Account Username]" and include a copy of your identity document so that we can verify your identity before processing the request. We will acknowledge receipt within five (5) business days and respond in full within thirty (30) calendar days.

14.3  Our support team includes Indonesian-speaking agents available to assist players from Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and all regions across Indonesia. Support is available in both English and Bahasa Indonesia.