Privacy Policy — Your Data Rights

Introduction

6svip operates as an internationally licensed online gaming platform serving Indonesia's English-preference players. As part of delivering a secure and compliant gaming experience, we are required to collect and process certain categories of personal data. This Privacy Policy sets out, in clear and transparent terms, exactly what data we collect, the purposes for which it is used, the parties with whom it may be shared, how long we retain it, the security measures we apply to protect it, and the rights you hold as a data subject.

This Policy applies to all data processing activities carried out in connection with the 6svip website at https://6svip.ws, the associated player account system, the mobile-optimised browser interface, and all customer support channels including live chat. It covers data collected from players based in Jakarta, Surabaya, Bandung, Bali, Medan, Semarang, Yogyakarta, and all other cities across Indonesia, as well as from any other location from which a Player accesses the Platform.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which reference data processing activities that are integral to our compliance and player-protection obligations.

Data We Collect

6svip collects personal data across several categories, depending on the stage of your relationship with the Platform and the features you use. The categories below describe all personal data we may hold about you.

2.1 Registration Data

When you create a 6svip account, we collect the information you provide during the registration process, including your full legal name, date of birth, residential address, email address, and preferred contact details. This information forms the foundation of your account record and is used for all subsequent identity verification and account management activities.

2.2 Identity Verification (KYC) Data

To comply with our anti-money laundering (AML) and age verification obligations, we collect documentary evidence of identity and address. This includes copies of government-issued photo identification (such as your Indonesian KTP — Kartu Tanda Penduduk — or valid passport), proof of address documents, selfie photographs, and evidence of payment method ownership. KYC documents are handled with the highest level of data security applied anywhere on the Platform.

2.3 Financial Transaction Data

We collect records of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, transaction timestamps, payment method identifiers, and transaction reference numbers. For Indonesian payment methods — BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — we store the information needed to process and reconcile transactions in IDR. We do not store full bank account numbers; only masked references sufficient for reconciliation are retained.

2.4 Gaming Activity Data

We record all betting and gaming activity conducted through your account, including bet placement records, game session logs, wagering history, promotional interactions, and balance movements. This data is used for account management, dispute resolution, responsible gaming monitoring, and statistical analysis to improve the Platform.

2.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical data including your IP address, device type and operating system, browser type and version, session duration, pages visited, referring URL, and in-session interaction data. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

2.6 Communications Data

If you contact 6svip via live chat or email, we retain records of those communications, including chat transcripts, message content, and the date and time of each interaction. These records are used to provide consistent support, resolve disputes, and monitor service quality.

How We Collect Your Data

6svip collects personal data through the following channels:

• Directly from you: when you register an account, complete the KYC process, make a deposit or withdrawal request, contact our support team, or update your account profile.
• Automatically: through cookies, server logs, and tracking technologies when you browse or interact with the Platform. See Clause 7 for full details of our cookie practices.
• From payment processors: when your bank or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, CIMB Niaga) confirms a transaction, we receive transaction confirmation data including the sending account reference and amount.
• From third-party identity verification providers: in certain cases, 6svip uses third-party KYC technology partners to cross-reference identity data against publicly available records for fraud prevention purposes. Any such partner is bound by a data processing agreement that restricts their use of your data.
• From game software providers: studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may provide session-level game data to 6svip for reconciliation and dispute resolution purposes.

How We Use Your Data

6svip processes your personal data for the following specific purposes. Each processing activity is tied to a defined purpose and a lawful basis — see Clause 5 for the legal basis applicable to each purpose.

1. Account Management: Creating, maintaining, and administering your player account, including processing login authentication, updating account settings, and managing account status.
2. Identity & Age Verification: Verifying that you meet the minimum age requirement of 21 years and that your identity matches the details provided at registration, in accordance with our KYC obligations.
3. Transaction Processing: Processing IDR deposits and withdrawals via Indonesian banking and e-wallet channels, reconciling transaction records, and investigating any disputed transactions.
4. Fraud Prevention & Security: Detecting and preventing fraudulent account activity, money laundering, bonus abuse, unauthorised access, and other prohibited conduct as defined in our Terms & Conditions.
5. Responsible Gaming: Monitoring gaming behaviour for signs of problem gambling, enforcing self-exclusion orders, applying deposit and time limits requested by the Player, and fulfilling our duty of care obligations as a licensed operator.
6. Customer Support: Providing assistance via live chat and email, resolving account queries, handling complaints, and maintaining records of support interactions for quality assurance.
7. Legal & Regulatory Compliance: Meeting our obligations under applicable laws and the requirements of our international gaming licence, including record-keeping, reporting, and responding to lawful requests from authorities.
8. Marketing Communications (opt-in only): Sending promotional offers, bonus announcements, and platform news to Players who have opted in to receive marketing communications. Marketing processing is always based on your explicit consent and can be withdrawn at any time.
9. Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, user interface, and the overall player experience.

Legal Basis for Processing

For each category of data processing described in Clause 4, 6svip relies on one or more of the following lawful bases:

Sharing Your Data

6svip does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data only in the following limited, necessary circumstances:

• Payment Processors: We share the minimum data required to process your IDR deposit or withdrawal with the relevant Indonesian banking or e-wallet partner (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja). These partners process your transaction data as independent data controllers subject to their own privacy policies.
• KYC & Identity Verification Partners: If a third-party KYC verification tool is used to authenticate your identity, your KYC documents and identity data are shared with that partner under a strict data processing agreement. The partner may not use this data for any purpose other than identity verification for 6svip.
• Game Software Providers: Game session data is shared with the studios providing the games you play (e.g., Pragmatic Play, Evolution Gaming) for the purpose of game settlement and dispute resolution. These providers receive only the session data relevant to the games you have played.
• Legal Authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal order or where we are obligated to report suspected money laundering, fraud, or other illegal activity under our licensing obligations.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of the 6svip business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the new controller prior to your data being transferred.

Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They are widely used to make websites work efficiently, remember your preferences, and provide data to the site operators to help them understand how their platform is being used. The 6svip platform uses cookies and similar technologies including local storage, session tokens, and pixel tags.

7.2 Types of Cookies We Use

7.3 Managing Cookies

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. All other cookie categories can be managed through your browser's privacy settings. Note that disabling functional cookies may affect your experience on the Platform, such as resetting your preferences each session. For guidance on managing cookies in your specific browser, refer to the browser's help documentation.

Data Retention

6svip retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or accounting obligations. The following retention periods apply:

Once the applicable retention period has expired and there is no overriding legal reason to retain the data further, 6svip will securely delete or irreversibly anonymise the personal data in question. Deletion is carried out in a manner that prevents recovery of the original data.

Security Measures

6svip applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the 6svip servers.
• Encryption at rest for all stored personal data, KYC documents, and financial records using AES-256 encryption.
• Access controls — employee access to personal data is restricted to those whose job function requires it, and all access is logged and audited.
• Multi-factor authentication (MFA) for all internal administrative system access by 6svip staff.
• Regular security audits and third-party penetration testing to identify and remediate vulnerabilities.
• Intrusion detection systems monitoring for anomalous access patterns and automated threat responses.
• Data breach response protocol — in the event of a data breach affecting your personal data, 6svip will notify affected Players and relevant authorities within the timeframe required under applicable law.

While 6svip employs rigorous security practices, no system can guarantee absolute security. You also have a role to play in protecting your data: use a strong unique password for your 6svip account, enable two-factor authentication if available, and never share your login credentials with any third party.

Your Rights

As a data subject, you hold the following rights with respect to the personal data 6svip holds about you. To exercise any of these rights, contact the 6svip support team via live chat or email at [email protected].

1. Right of Access: You have the right to request a copy of the personal data 6svip holds about you, along with information about how it is being processed. We will respond to access requests within 30 days.
2. Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account profile fields can be updated directly in your account dashboard; other corrections should be requested via support.
3. Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw your consent (for consent-based processing), or where processing was unlawful. This right is subject to our legal retention obligations — we cannot erase data we are required to retain by law.
4. Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of data you have contested is being verified.
5. Right to Data Portability: For data processed on the basis of your consent or on the basis of a contract, you have the right to receive a copy of your data in a structured, machine-readable format and to request its transfer to another controller where technically feasible.
6. Right to Object: You have the right to object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests or the processing is required for legal claims.
7. Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

Minors & Age Restriction

The 6svip Platform is strictly for adults aged 21 years and above. We do not knowingly collect, store, or process personal data from any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and any account found to belong to a person under 21 will be immediately closed and all associated data deleted, with the exception of records required to be retained for legal compliance purposes.

If you believe that a person under the age of 21 has created a 6svip account or has accessed the Platform, please contact our support team immediately via live chat so that we can investigate and take appropriate action without delay. We strongly encourage parents and guardians to install parental control and content filtering software on shared devices to prevent access to age-restricted content by minors.

International Data Transfers

As an internationally licensed gaming platform, 6svip may process or store certain categories of personal data on servers or through service providers located outside Indonesia. Where such transfers occur, 6svip ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Indonesia, including:

• Data processing agreements with all third-party processors that impose binding obligations equivalent to those in this Privacy Policy.
• Transfer only to jurisdictions with adequate data protection frameworks recognised by our licensing authority.
• Technical safeguards including encryption in transit and at rest for all data transferred across borders.

You may request information about the specific safeguards applied to any international transfer of your personal data by contacting the 6svip data team via support.

Changes to This Privacy Policy

6svip reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will notify registered Players via the email address on their account and display a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this document reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how your data is protected. Your continued use of the Platform following notification of any changes constitutes your acceptance of the revised Privacy Policy.

Contact & Data Protection

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 6svip processes your personal data, please reach out through one of the following channels:

Email contact is available at: [email protected]

Please include "Privacy Request" in the subject line of your email and clearly state the nature of your request or concern. For identity verification purposes, data rights requests submitted by email may require you to confirm your identity before we can process the request.

We are committed to resolving all privacy-related concerns promptly and transparently. If you feel that your data rights have not been adequately addressed after contacting us, you may escalate your concern to the data protection authority or relevant regulatory body in your jurisdiction.