Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you register for a vava4 account, make deposits or withdrawals, or interact with our services, you voluntarily provide us with personal information including:

• Account Registration Information: Full legal name, date of birth, gender, email address, phone number, residential address, and username.
• Identity Verification Documents (KYC): Government-issued identification (Indonesian KTP or passport), proof of address documents (utility bills, bank statements), and verification photographs as required to comply with Know Your Customer regulations and prevent fraud.
• Financial Information: Bank account details (BCA, BRI, BNI, Mandiri, or other Indonesian banks), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja), payment card details if applicable, and transaction history including deposits, withdrawals, and wagers.
• Communication Data: Messages exchanged with our customer support team via live chat, email, WhatsApp, or in-app messaging, including any attachments, screenshots, or documents you provide during support interactions.
• Preferences and Settings: Communication preferences, responsible gaming limit settings, language preferences, and other account customization choices.

1.2 Information Collected Automatically

When you access vava4 services, we automatically collect certain technical and usage information:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows), browser type and version, screen resolution, and device identifiers.
• Connection Data: IP address, internet service provider, connection type (WiFi, mobile data), approximate geographic location based on IP address (city and region level, not precise GPS coordinates).
• Usage Data: Pages visited, games played, bet amounts and outcomes, session duration, navigation paths through our platform, referring website, time and date of access, and interaction patterns.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to recognize your device, remember your preferences, and analyze platform usage. See Section 8 for detailed information about cookies.

1.3 Information from Third-Party Sources

We may receive information about you from third-party service providers, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay) may share transaction data and payment verification information with us to process your deposits and withdrawals.
• Identity Verification Services: Third-party KYC and anti-fraud service providers may share identity verification results, fraud risk assessments, and compliance screening data.
• Marketing Partners: If you discover vava4 through an affiliate or marketing partner, we may receive information about the referral source to track campaign effectiveness.

2. How We Use Your Information

vava4 collects and processes your personal information for the following legitimate business purposes:

2.1 Account Management and Service Delivery

• Creating and maintaining your vava4 account and user profile.
• Processing your deposits, withdrawals, and gaming transactions in Indonesian Rupiah (IDR).
• Providing access to casino games, sports betting markets, live dealer tables, and other entertainment offerings.
• Processing bonuses, promotions, and loyalty rewards according to applicable terms and conditions.
• Enabling communication between you and our customer support team to resolve inquiries, complaints, or technical issues.
• Implementing responsible gaming tools including deposit limits, loss limits, session time limits, and self-exclusion features.

2.2 Legal and Regulatory Compliance

• Verifying your identity, age (21+ requirement), and residency to comply with Indonesian and international gaming regulations.
• Preventing fraud, money laundering, terrorist financing, and other illegal activities through transaction monitoring and risk assessment.
• Maintaining records as required by applicable laws, regulations, and licensing requirements.
• Responding to legal requests from law enforcement, regulatory authorities, or courts when legally obligated to do so.
• Enforcing our Terms & Conditions and detecting violations including bonus abuse, multiple accounts, or prohibited activities.

2.3 Platform Improvement and Analytics

• Analyzing user behavior and platform usage to identify trends, popular games, and areas for improvement.
• Testing new features, game offerings, and user interface designs to enhance user experience.
• Monitoring platform performance, troubleshooting technical issues, and optimizing load times for Indonesian internet connection speeds.
• Conducting research and statistical analysis to understand Indonesian player preferences for sports betting (BRI Liga 1, EPL, Champions League), casino games, and payment methods.

2.4 Marketing and Communication

• Sending you promotional offers, bonus announcements, tournament invitations, and special event notifications relevant to Indonesian players.
• Communicating important account updates, security alerts, policy changes, and service announcements.
• Personalizing marketing messages based on your gaming preferences, past activity, and Indonesian market trends.
• Conducting customer satisfaction surveys and requesting feedback to improve our services.

You have the right to opt out of marketing communications at any time by adjusting your account settings, clicking "unsubscribe" links in emails, or contacting customer support. Please note that even if you opt out of marketing, we will still send essential service-related communications.

3. How We Share Your Information

vava4 does not sell your personal information to third parties. We share your data only in the following limited circumstances:

3.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) process your financial transactions. We share necessary payment information to facilitate deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and other game studios receive limited data (username, game session tokens) to enable gameplay. They do not receive your financial or identification documents.
• Identity Verification Services: Third-party KYC and fraud prevention providers receive identification documents and personal information to verify your identity, age, and address as required by law.
• Cloud Infrastructure Providers: Our platform operates on secure cloud infrastructure. These providers store and process data under strict contractual confidentiality and security obligations.
• Customer Support Tools: Live chat and messaging platforms facilitate communication between you and our support team. Conversation data is encrypted and retained according to our retention policy.
• Analytics and Marketing Tools: We use analytics platforms to understand user behavior and marketing effectiveness. These tools process anonymized or pseudonymized data where possible.

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws. We conduct due diligence to ensure partners maintain adequate security standards.

3.2 Legal and Regulatory Obligations

We may disclose your personal information when required by law or when we believe disclosure is necessary to:

• Comply with legal process, court orders, subpoenas, or government requests from Indonesian or international authorities.
• Enforce our Terms & Conditions, investigate potential violations, and protect our legal rights and property.
• Prevent fraud, money laundering, or other illegal activities by cooperating with law enforcement and financial crime prevention agencies.
• Protect the safety and security of vava4 users, employees, or the public when we believe disclosure is necessary to prevent harm.

3.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy involving vava4, your personal information may be transferred to the acquiring entity. You will be notified of any such change in ownership or control of your personal data.

3.4 With Your Consent

We may share your information for purposes not described in this Privacy Policy when we have obtained your explicit consent to do so.

4. Data Security Measures

vava4 employs industry-leading security measures to protect your personal and financial information from unauthorized access, disclosure, alteration, or destruction:

4.1 Technical Security Controls

• 256-bit SSL Encryption: All data transmitted between your device and vava4 servers is encrypted using military-grade TLS/SSL protocols, protecting information from interception during transmission.
• Secure Data Storage: Personal information, financial data, and identification documents are stored in encrypted databases with restricted access controls and regular security audits.
• Firewall Protection: Multi-layered firewall systems protect our infrastructure from unauthorized external access, DDoS attacks, and cyber threats.
• Access Controls: Role-based access ensures that only authorized personnel with legitimate business needs can access personal information. All access is logged and monitored.
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments to identify and remediate potential weaknesses.
• Intrusion Detection Systems: Real-time monitoring systems detect and respond to suspicious activity, unauthorized access attempts, and potential security breaches.

4.2 Organizational Security Measures

• Employee Training: All vava4 staff receive regular training on data protection principles, security best practices, and confidentiality obligations.
• Confidentiality Agreements: Employees and contractors sign legally binding confidentiality agreements prohibiting unauthorized disclosure of user information.
• Data Minimization: We collect only the personal information necessary for specified purposes and delete or anonymize data when no longer needed.
• Incident Response Plan: We maintain a documented incident response plan to quickly identify, contain, and remediate security breaches if they occur.

4.3 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password combining letters, numbers, and special characters. Never reuse passwords from other websites.
• Keep your login credentials confidential. Never share your username, password, or account details with anyone, including individuals claiming to be vava4 staff.
• Log out from your account when using shared or public devices.
• Enable two-factor authentication if offered for an additional layer of account security.
• Notify customer support immediately if you suspect unauthorized access to your account or any security concerns.

5. Data Retention

vava4 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and comply with legal obligations:

5.1 Active Account Data

While your account remains active, we retain your personal information, transaction history, and gaming activity to provide ongoing services, process withdrawals, and maintain accurate records.

5.2 Closed Account Data

After voluntary account closure or termination, we retain certain information for the following periods:

• Financial Records: Transaction history, deposits, withdrawals, and payment method data are retained for 7 years to comply with Indonesian financial record-keeping requirements and tax laws.
• Identity Verification Documents: KYC documents including ID cards, passports, and proof of address are retained for 5 years to meet anti-money laundering (AML) regulatory requirements.
• Communication Records: Customer support conversations and complaint records are retained for 3 years for dispute resolution and quality assurance purposes.
• Gaming Activity: Bet history and game outcomes are retained for 5 years for regulatory compliance, dispute resolution, and audit purposes.

5.3 Aggregated and Anonymized Data

We may retain anonymized, aggregated data indefinitely for statistical analysis, research, and platform improvement. This data cannot be linked back to individual users and does not constitute personal information.

5.4 Deletion Upon Request

You may request deletion of your personal information by contacting customer support. We will honor deletion requests except where retention is required by law, necessary to resolve disputes, enforce agreements, or protect legal rights. Please note that certain data must be retained for regulatory compliance even after you request deletion.

6. Your Privacy Rights

vava4 respects your privacy rights and provides mechanisms to exercise control over your personal information:

6.1 Access and Portability

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, machine-readable format (typically PDF or CSV) within 30 days of your request.

6.2 Correction and Update

If your personal information is inaccurate or incomplete, you may request corrections. You can update most information directly through your account settings, or contact customer support for assistance with changes requiring verification.

6.3 Deletion (Right to Be Forgotten)

You may request deletion of your personal information, subject to legal retention requirements and legitimate business needs. We will delete or anonymize your data within 90 days except where we must retain it for compliance with Indonesian financial record-keeping laws, fraud prevention, or dispute resolution.

6.4 Restriction of Processing

You may request that we limit how we use your personal information in certain circumstances, such as when you contest the accuracy of your data or object to processing for marketing purposes.

6.5 Objection to Processing

You have the right to object to processing of your personal information for direct marketing purposes at any time. You can opt out of marketing emails by clicking "unsubscribe" links or adjusting your communication preferences in account settings.

6.6 Withdraw Consent

Where we process your personal information based on consent (rather than legal obligation or contractual necessity), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

6.7 Exercising Your Rights

To exercise any of these rights, please contact our data protection team at [email protected] (displayed as plain text, not clickable) with "Privacy Rights Request" in the subject line. We will verify your identity before processing requests and respond within 30 days.

7. Children's Privacy

vava4 services are strictly restricted to adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process requires users to confirm they meet the minimum age requirement, and we conduct age verification through KYC document review.

If we discover that we have inadvertently collected personal information from someone under 21, we will immediately delete that information, close the account, and return any deposited funds to the payment source. Parents or guardians who believe their child has provided personal information to vava4 should contact us immediately at [email protected] so we can take prompt corrective action.

8. Cookies and Tracking Technologies

vava4 uses cookies, web beacons, and similar technologies to enhance user experience, analyze platform usage, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They serve various purposes including remembering your preferences, maintaining your login session, and tracking usage patterns for analytics.

8.2 Types of Cookies We Use

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive alerts before cookies are stored. Please note that disabling essential cookies may impair platform functionality and prevent you from accessing certain features. Instructions for managing cookies in popular browsers:

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Cookies and website data
• Microsoft Edge: Settings > Cookies and site permissions > Cookies and site data

9. International Data Transfers

vava4 operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include:

• Transferring data only to countries with adequate data protection laws recognized by international standards.
• Using standard contractual clauses approved by data protection authorities to govern data transfers.
• Ensuring service providers implement technical and organizational security measures equivalent to those required under Indonesian law.

10. Changes to This Privacy Policy

vava4 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Updating the "Last Updated" date at the top of this policy.
• Sending email notification to your registered email address for significant changes affecting your rights or how we process personal information.
• Displaying a prominent notice on the vava4 website for a reasonable period following the update.

Your continued use of vava4 services after we publish changes to this Privacy Policy constitutes acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your personal information.

11. Contact Us About Privacy

If you have questions, concerns, or complaints regarding this Privacy Policy or our data protection practices, please contact our dedicated privacy team:

• Email: [email protected] (displayed as plain text, not clickable) with subject line "Privacy Inquiry"
• Live Chat: Available 24/7 through your vava4 account dashboard. Request to speak with a privacy specialist.
• Mailing Address: vava4 Privacy Team, Indonesia Operations (specific address available upon request for formal complaints)

We take privacy concerns seriously and will investigate and respond to all inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant Indonesian data protection authority.

12. Additional Information for Indonesian Users

As a platform specifically serving the Indonesian market, vava4 recognizes the importance of compliance with Indonesian data protection principles and cultural expectations regarding privacy:

• Indonesian Language Support: While this Privacy Policy is written in English to align with our international platform language, Indonesian-speaking customer support agents are available to explain privacy practices in Bahasa Indonesia during WIB business hours (9am-10pm Western Indonesia Time).
• Local Data Storage: Where possible and practical, we store Indonesian user data on servers located in Southeast Asia to minimize data transfer distances and comply with regional data sovereignty preferences.
• Payment Data Protection: We recognize that Indonesian users rely heavily on local banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay). Payment method information is handled according to Indonesian financial data protection standards and Payment Card Industry Data Security Standard (PCI DSS) requirements.
• KTP Privacy: Your Indonesian identity card (KTP) contains sensitive personal information. We implement enhanced security controls for KTP storage, limit access to authorized compliance personnel only, and never share KTP images with marketing or analytics third parties.
• Cultural Privacy Expectations: We understand that Indonesian users value family privacy and discretion regarding gaming activities. We never publicly disclose user identities, never contact family members without your explicit consent, and provide discreet communication options for all account-related matters.