Privacy Policy — 3svip

3svip ("we", "us", "our") operates the online gaming platform available at https://3svip.org, providing sportsbook betting, live casino games, slots, Sic Bo, and togel (Indonesia's traditional numbers lottery) markets to Members across Indonesia and other permitted jurisdictions. We are committed to protecting the privacy and security of every individual who interacts with our platform.

This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal data submitted to or collected by 3svip in connection with your use of our website, mobile-optimized platform, and customer support channels. This policy applies to all current and prospective Members, as well as visitors who browse the 3svip website without registering an account.

By registering a 3svip account or continuing to use our platform after this policy's effective date, you acknowledge that you have read and understood these privacy practices and consent to the processing of your personal data as described herein. If you do not agree, you should discontinue use of the platform and contact us to request account closure.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which form an integral part of the agreement between you and 3svip.

For the purposes of applicable data protection legislation, 3svip is the data controller responsible for your personal data collected through the platform at https://3svip.org. As data controller, 3svip determines the purposes and means by which personal data is processed.

All data protection inquiries, access requests, correction requests, and deletion requests should be directed to our dedicated privacy team at [email protected]. Please mark the subject line of your message "Privacy Request — [Your Username]" to ensure prompt routing to the appropriate team. We aim to acknowledge all privacy-related correspondence within 48 hours and to provide a substantive response within 30 days of receipt.

3svip collects the following categories of personal data. We collect only what is necessary for the purposes described in Section 5 of this policy.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity-document photographs required for KYC), or health data, except where voluntarily disclosed in connection with a responsible gaming request (e.g., a Member disclosing a gambling disorder when seeking self-exclusion assistance).

3svip collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated technologies: When you visit or use the 3svip platform, we automatically collect Technical & Device Data via cookies, web beacons, server logs, and similar tracking technologies. See Section 9 for full details on our cookie practices.
• Third-party KYC providers: We engage licensed identity verification services to cross-check the documents you submit during KYC. These providers may return verification scores, identity match results, and fraud-risk signals to 3svip.
• Payment processors: When you initiate a deposit or withdrawal through a supported Indonesian bank or e-wallet, the relevant payment processor shares transaction confirmation data (amount in IDR, timestamp, transaction reference) with 3svip to credit or debit your account balance accordingly.
• Game platform providers: Studios such as Evolution Gaming, Pragmatic Play, PG Soft (Pocket Games Soft), Habanero, NetEnt, Microgaming, and Spribe may pass back game-session metadata (round IDs, bet amounts, outcomes) to 3svip for account-history and regulatory-reporting purposes.
• Publicly available sources: In the course of fraud prevention and AML compliance, 3svip may cross-reference information against publicly available sanctions lists, court records, or other legally accessible databases.

3svip processes your personal data for the following purposes, each supported by a corresponding legal basis:

3svip does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the following limited circumstances:

• Payment processors: We share the minimum financial data necessary (account holder name, bank account number or e-wallet identifier, transaction amount in IDR) with Indonesian payment processors including banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to execute deposit and withdrawal transactions on your behalf.
• KYC verification providers: We share identity document images and personal details with licensed third-party KYC service providers solely for the purpose of verifying your identity and age in compliance with our responsible gaming and AML obligations.
• Game content providers: We pass your Member identifier and account-session token to game studios (Evolution Gaming, Pragmatic Play, PG Soft, and others) to authenticate your access to their games. These studios do not receive your full identity data and process only the session data needed to deliver their games.
• IT and infrastructure providers: We engage cloud hosting, content delivery network, and cybersecurity vendors who process data on our behalf under strict data processing agreements. These service providers are contractually prohibited from using your data for any purpose other than delivering their services to 3svip.
• Regulatory and legal authorities: We may disclose personal data to competent authorities, courts, or law enforcement agencies where we are legally required to do so, including in response to a valid court order, subpoena, or regulatory inquiry related to AML compliance.
• Business transfers: In the event that 3svip undergoes a merger, acquisition, or sale of substantially all assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify affected Members via email prior to any such transfer and ensure the successor entity maintains equivalent privacy protections.

3svip retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymized. Anonymized aggregate data (e.g., aggregate platform usage statistics) may be retained indefinitely as it can no longer be attributed to any individual.

Where a legal hold is placed on your account — for example, in connection with an active fraud investigation or a court order — we may retain relevant data beyond the standard retention periods described above until the hold is lifted.

3svip employs a layered security architecture to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. Our key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the 3svip platform is encrypted using TLS 1.2 or higher. This applies to login sessions, game play, and all financial transaction requests.
• Encryption at rest: Sensitive data fields — including identity document images, bank account details, and hashed passwords — are encrypted at rest using AES-256 encryption within our data storage infrastructure.
• Password security: Member passwords are never stored in plain text. We use industry-standard one-way hashing algorithms (bcrypt with per-user salt) to store password credentials. If you suspect your password has been compromised, reset it immediately from the account settings page.
• Two-factor authentication (2FA): All Members are strongly encouraged to enable SMS OTP-based 2FA from their account security settings. This additional layer of verification significantly reduces the risk of unauthorized account access.
• Access controls: Access to Member personal data within 3svip's internal systems is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo regular security training and are bound by confidentiality obligations.
• Penetration testing and audits: 3svip commissions independent third-party security audits and penetration tests on a regular basis to identify and remediate potential vulnerabilities in our platform and infrastructure.
• Incident response: In the event of a confirmed data breach that is likely to result in a risk to Members' rights and freedoms, 3svip will notify affected Members by email within 72 hours of becoming aware of the breach, describing the nature of the incident and the steps we are taking in response.

3svip uses cookies and similar tracking technologies to operate the platform, authenticate your session, remember your preferences, and analyze aggregate usage patterns. The following cookie categories are in use:

3svip does not use third-party advertising cookies or behavioral targeting cookies that build profiles for cross-site advertising purposes. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging into your 3svip account and using the platform.

Subject to applicable data protection law and certain limited exceptions (such as legal retention obligations or active fraud investigations), you have the following rights in relation to your personal data held by 3svip:

• Right of Access: You may request a copy of the personal data 3svip holds about you, along with information about how it is processed. We will provide this in a commonly used electronic format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your contact phone number) can be made directly from your account settings page.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing on legitimate interests grounds. This right is subject to our legal retention obligations — financial transaction records, for example, must be retained for the periods described in Section 7.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being verified or while an objection is under review.
• Right to Data Portability: Where processing is based on consent or contract, you may request that we provide your personal data in a structured, machine-readable format (JSON or CSV) so that you can transfer it to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. We will cease processing for direct marketing purposes immediately upon receipt of an objection. For other legitimate-interest processing, we will assess whether our compelling grounds override your interests.
• Rights Related to Automated Decision-Making: 3svip uses automated systems for fraud detection and responsible gaming monitoring. If an automated decision has a significant effect on you (such as account suspension triggered by our fraud-detection system), you have the right to request human review of that decision by contacting [email protected].

To exercise any of the above rights, please contact us at [email protected] with the subject line "Privacy Request — [Your Username]". We will verify your identity before processing any request. There is no charge for exercising your rights; however, we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

3svip's platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. Our registration process requires a date-of-birth declaration, and all accounts are subject to KYC age verification before withdrawal privileges are activated.

If 3svip becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete the associated personal data (subject to any legal retention obligations for financial records), and return any real-money balance to the payment method used for the original deposit after completing standard verification checks.

3svip's primary data infrastructure is hosted in data centers with strong data-protection frameworks. However, some of our third-party service providers — including cloud hosting providers, KYC verification vendors, and game content delivery infrastructure — may process data in jurisdictions outside Indonesia.

Where personal data is transferred internationally, 3svip ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within the jurisdiction of our gaming license. These safeguards may include contractual data processing agreements incorporating standard contractual clauses, and selection of vendors who operate under recognized adequacy frameworks.

By providing your personal data to 3svip, you acknowledge that it may be transferred to and processed in countries outside Indonesia. We take all reasonable steps to ensure that any such transfers are carried out securely and in accordance with this Privacy Policy.

3svip reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes — those that affect the categories of data collected, the purposes for which it is processed, or your rights as a Member — we will provide at least seven (7) days' advance notice by publishing the updated policy on this page and, where reasonably practicable, notifying registered Members via email to the address on file.

The "Last updated" date at the top of this page will be revised to reflect the date of any amendment. We encourage you to review this page periodically. Your continued use of the 3svip platform after the effective date of any change constitutes your acceptance of the updated Privacy Policy.

For any privacy-related questions, data access requests, or concerns about how 3svip processes your personal data, please contact our privacy team. Our support agents — including Indonesian-speaking staff — are available 24 hours a day, seven days a week.

Email: [email protected]  (plain text — not a clickable link)

Please include your registered username, the nature of your privacy request, and any relevant account reference numbers. We will acknowledge all privacy correspondence within 48 hours and aim to provide a full response within 30 days. For urgent matters — such as suspected unauthorized access to your account — please mark your message with the subject line "URGENT — Security Concern" for immediate escalation.