Privacy Policy

This Privacy Policy ("Policy") applies to vc9998, the online gaming and sports betting platform accessible at https://vc9998.cam ("Platform", "We", "Us", "Our"). It governs the collection, processing, storage, and disclosure of personal data relating to all individuals who access or use the Platform, including registered members, prospective registrants, and casual visitors ("You", "User").

vc9998 is committed to handling personal data with transparency, integrity, and care. We recognize that Indonesian players entrust us with sensitive information — including identity documents, financial data, and transaction history — and we take that responsibility seriously. This Policy describes the specific measures we take to safeguard that information and explains the rights you have over your own data.

This Policy should be read alongside our Terms & Conditions, which set out the broader contractual relationship between vc9998 and its members. In the event of any conflict between this Policy and the Terms & Conditions with respect to data privacy matters, this Policy shall prevail.

For the purposes of applicable data protection law, vc9998 acts as the data controller in respect of all personal data collected from users of the Platform. As data controller, vc9998 determines the purposes for which and the means by which personal data is processed.

Where vc9998 engages third-party service providers to process data on its behalf — for example, payment processors, fraud prevention partners, or cloud infrastructure providers — those third parties act as data processors under instructions from vc9998 and are bound by contractual obligations that require them to handle personal data securely and in accordance with this Policy.

For all data-related inquiries, including the exercise of your rights under this Policy, please contact our Data Protection team at [email protected].

vc9998 collects personal data in several categories depending on your relationship with the Platform. The table below provides a comprehensive overview:

We collect personal data through the following channels:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion;
• Automated Technical Collection: Data collected automatically when you visit or interact with the Platform, including IP addresses, device identifiers, browser fingerprints, session cookies, and clickstream data gathered via our web analytics infrastructure;
• Third-Party Sources: Identity and fraud-screening data received from our KYC verification partners, payment processors, and financial crime screening databases — used to validate the information you provide and to meet our anti-money-laundering (AML) obligations;
• Payment Providers: Transaction confirmation data shared by your bank or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, or others) when you initiate a deposit or withdrawal through the Platform.

vc9998 processes your personal data only where a valid legal basis exists. The table below sets out the primary purposes for which we process data and the corresponding legal basis for each:

vc9998 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Processors & Financial Institutions: We share necessary financial data with your bank or e-wallet provider to process deposits and withdrawals. This includes transaction reference numbers, amounts, and account identifiers required to route funds correctly;
• KYC & Identity Verification Partners: We share identity documents and related data with accredited third-party KYC providers for the purpose of verifying your identity and screening against sanctions and politically exposed person (PEP) databases;
• Fraud Prevention & Security Services: We share technical data (including IP addresses, device fingerprints, and session data) with fraud detection partners to identify and prevent unauthorized access, multi-account abuse, and money laundering;
• IT Infrastructure & Cloud Service Providers: Our Platform operates on secure cloud infrastructure. Hosting, database, and storage providers may process data on our behalf under strict data processing agreements that prohibit any independent use of your data;
• Legal & Regulatory Authorities: We will disclose personal data to law enforcement agencies, courts, regulators, or other governmental authorities where required to do so by applicable law, court order, or where disclosure is necessary to protect the rights, property, or safety of vc9998, its members, or the public;
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving vc9998, your personal data may be transferred to the acquiring entity as part of the transaction, subject to that entity assuming equivalent data protection obligations.

vc9998 operates as an international platform, and certain data processing activities may involve the transfer of personal data to service providers or infrastructure located outside Indonesia. Where such transfers occur, vc9998 ensures that appropriate safeguards are in place to maintain an equivalent level of data protection, including:

• Binding contractual clauses with all data processors that receive personal data from vc9998, requiring them to implement data protection standards consistent with this Policy;
• Restricting transfers to jurisdictions that maintain recognized data protection frameworks or which offer adequacy-equivalent protections for personal data;
• Conducting periodic reviews of our third-party processors to verify ongoing compliance with our data protection requirements.

By using vc9998 and providing your personal data, you acknowledge and accept that your data may be processed outside Indonesia in accordance with the safeguards described above.

vc9998 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Active Account Data: Retained for the duration of your membership and for a period of five (5) years following permanent account closure, to satisfy financial record-keeping and AML obligations;
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, in accordance with international anti-money-laundering requirements;
• Transaction Records: Retained for five (5) years from the date of each transaction, consistent with financial audit and regulatory compliance obligations;
• Customer Support Communications: Retained for two (2) years from the date of the last interaction, unless the communication forms part of an ongoing investigation or dispute;
• Technical & Log Data: Retained for a rolling period of twelve (12) months, after which it is automatically purged or anonymized;
• Marketing Consent Records: Retained for three (3) years from the date of consent, or until consent is withdrawn, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with any identifiable individual. Data that has been anonymized may be retained indefinitely for statistical analysis and platform improvement purposes.

vc9998 uses cookies and similar tracking technologies — including local storage and session tokens — to operate the Platform effectively and provide a seamless user experience. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies manage your login session, maintain your account state, and enable core security features. They cannot be disabled without severely disrupting your use of the Platform;
• Performance & Analytics Cookies: Used to collect aggregated, anonymized data about how members interact with the Platform — including page load times, most-visited sections, and error reporting. This data helps us optimize Platform performance;
• Fraud Prevention Cookies: Used to detect and prevent unauthorized access, bot activity, and suspicious login patterns. These cookies create a device fingerprint that assists our security systems in identifying anomalous behavior.

vc9998 does not use advertising cookies, behavioral retargeting cookies, or any third-party cookies that track your activity across websites outside of vc9998. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair Platform functionality.

vc9998 implements a multi-layered security architecture to protect personal data against unauthorized access, disclosure, alteration, and destruction. Our key security measures include:

• Transport Layer Security: All data in transit between your device and our servers is encrypted using TLS 1.2 or higher, enforced by a 256-bit SSL certificate;
• Encryption at Rest: Sensitive data stored on our servers — including KYC documents and financial records — is encrypted using AES-256 encryption;
• Access Controls: Access to personal data within vc9998 is restricted on a strict need-to-know basis. All internal access is authenticated, logged, and audited;
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts. 2FA is mandatory for all internal vc9998 staff accounts with access to member data;
• Penetration Testing: vc9998 commissions regular third-party security assessments and penetration tests to identify and remediate vulnerabilities in our infrastructure;
• Incident Response: We maintain a documented data breach response procedure. In the event of a confirmed breach affecting personal data, affected members will be notified in accordance with applicable legal requirements.

As a user of vc9998, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected]. We aim to respond to all data rights requests within 30 days of receipt.

• Right of Access: You may request a copy of the personal data vc9998 holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that certain data must be retained for legal and regulatory compliance purposes and cannot be erased on request.
• Right to Restriction: You may request that vc9998 restrict its processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, and to opt out of direct marketing communications at any time by contacting our support team or using the unsubscribe link in any marketing email.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

If you are a parent or guardian and you believe that a minor in your care has registered an account on vc9998 or submitted personal data to us without your knowledge, please contact our support team immediately at [email protected]. We will investigate the matter promptly and take all necessary action, including permanent account closure and data deletion.

vc9998 employs age-verification mechanisms as part of the registration and KYC process. Providing false information about your age during registration constitutes a material breach of our Terms & Conditions and may result in legal consequences in addition to account closure and forfeiture of any balance.

The vc9998 Platform does not contain links to third-party websites, social media platforms, or external services for which we are not responsible. In the unlikely event that any such link appears in a communication from vc9998, please be aware that those third-party sites operate under their own privacy policies, and vc9998 accepts no responsibility for the data practices of any external website or service.

You should review the privacy policy of any third-party website before submitting personal data to it. vc9998's Privacy Policy applies exclusively to data collected through vc9998's own Platform at https://vc9998.cam and through our official support channels.

vc9998 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will update the "Last Reviewed" date at the top of this page and, where the changes are significant, notify active members via email or an in-platform notification prior to the changes taking effect.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your data. Archived versions of previous policies are available on request by contacting our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which vc9998 handles your personal data, please contact our Data Protection team. We are committed to resolving all privacy-related inquiries promptly and fairly.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. vc9998 will cooperate fully with any investigation conducted by a competent authority.