Privacy Policy

Section 1

Definitions

The following definitions apply throughout this Privacy Policy. Where a term is also defined in the s5vip Terms & Conditions, the meaning given there shall apply here unless the context requires otherwise.

• "s5vip", "we", "us", or "our" means the operator of the online betting platform located at https://s5vip.cam.
• "Platform" means the website https://s5vip.cam, all associated subdomains, and any mobile-optimised interfaces made available by s5vip.
• "Member" or "you" means any individual who has registered an account on the Platform or who visits and interacts with the Platform in any capacity.
• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly — including name, email address, phone number, date of birth, national identification number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data — including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For all processing described in this Policy, s5vip is the Data Controller.
• "Data Processor" means any third party that processes Personal Data on behalf of s5vip and under s5vip's documented instructions — for example, our payment gateway partners and KYC verification providers.
• "Cookie" means a small text file placed on your device by the Platform for the purposes described in Section 7 of this Policy.
• "KYC" means Know Your Customer — the identity and age verification process required of all Members before their first withdrawal is processed.
• "IDR" means Indonesian Rupiah, the sole currency in which all s5vip transactions are denominated.

Section 2

Scope & Controller

This Privacy Policy applies to all Personal Data collected and processed by s5vip in connection with the operation of the Platform. It covers data collected through account registration, deposits and withdrawals, gameplay, customer support interactions, marketing communications, and general Platform browsing — whether by registered Members or unregistered visitors.

s5vip acts as the Data Controller for all Personal Data described in this Policy. Where s5vip engages third-party Data Processors to assist in delivering specific services — such as payment processing via BCA, BRI, BNI, Mandiri, OVO, DANA, or GoPay, or identity verification via a licensed KYC bureau — those third parties process data solely under s5vip's instructions and are prohibited from using your data for their own independent purposes.

This Policy is written primarily for Members and prospective Members based in Indonesia. It reflects internationally recognised data protection principles, including those set out under GDPR-aligned frameworks, and is designed to give Indonesian players full transparency over how their personal information is handled on the s5vip Platform.

Section 3

Data We Collect

s5vip collects Personal Data through several channels. The categories of data we collect, and the circumstances in which we collect them, are set out below.

3.1 Registration Data

When you create an account on s5vip, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify that you are 21 years of age or older)
• Email address (used for account communications and login)
• Mobile phone number (used for two-factor authentication and account security alerts)
• City and province of residence within Indonesia
• Username and hashed password

3.2 KYC and Identity Verification Data

Before processing your first withdrawal, we are required to verify your identity. At this stage, we collect:

• A photograph or scan of a valid government-issued photo ID — such as your Indonesian National Identity Card (KTP), Passport, or Driving Licence (SIM)
• A photograph confirming that the document is currently held by the account holder (liveness check), where required
• Documentary proof of ownership of the bank account or e-wallet used for deposits — for example, a screenshot of your BCA, BRI, BNI, Mandiri, OVO, DANA, or GoPay account screen confirming your name

3.3 Financial Transaction Data

We record data associated with every deposit and withdrawal transaction processed through your account, including:

• Transaction amount in IDR
• Payment method used (bank name, masked account number, or e-wallet name)
• Transaction timestamp (WIB)
• Transaction status and reference number

s5vip does not store full bank account numbers or full e-wallet account credentials on its own servers. This data is handled directly by our licensed payment processor partners under their own security frameworks.

3.4 Gameplay and Betting Data

We record all betting and gaming activity conducted through your account, including game type, market selections, stake amounts, odds at time of bet placement, settlement outcomes, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud detection.

3.5 Technical and Device Data

When you access the Platform, our servers automatically record certain technical information, including:

• IP address and approximate geographic location derived from IP
• Browser type and version
• Operating system and device type
• Referring URL (the page you visited before arriving at s5vip)
• Pages visited on the Platform and time spent on each page
• Session start and end timestamps

This technical data is used for platform security, fraud prevention, and aggregate analytics. It is not used to build individual marketing profiles unless you have separately consented to personalised marketing communications.

3.6 Customer Support Data

When you contact our support team via live chat or email, we retain a record of the conversation, including your account identifier, the nature of your inquiry, any attachments you share, and the outcome of the interaction. These records are kept for quality assurance and dispute resolution purposes.

Data Category	Collection Trigger	Primary Purpose
Registration Data	Account sign-up	Account creation, login, communications
KYC / Identity Data	First withdrawal request	Age and identity verification, fraud prevention
Financial Transaction Data	Every deposit / withdrawal	Payment processing, account history, AML compliance
Gameplay & Betting Data	Every bet placed or game session	Account management, responsible gaming, disputes
Technical & Device Data	Every Platform visit	Security, fraud detection, aggregate analytics
Support Interaction Data	Contact with support team	Quality assurance, dispute resolution

Section 4

How We Use Your Data

s5vip uses the Personal Data described in Section 3 for the following purposes. We do not use your data in any way that is incompatible with the purposes listed below without first seeking your consent.

4.1 Account and Service Delivery

We use your registration data to create and maintain your account, authenticate your login sessions, process deposits and withdrawals in IDR, settle bets and gaming outcomes, and provide customer support. Without this processing, we cannot provide the core services of the Platform.

4.2 Identity Verification and Legal Compliance

We use your KYC data to verify that you are who you say you are and that you meet the 21+ age requirement. We are also required by our licensing conditions to maintain records of Member identity and transaction history for a defined period, and to screen Members against applicable sanctions lists.

4.3 Fraud and Security Monitoring

We analyse account activity, device data, IP addresses, and transaction patterns to detect and prevent fraud, money laundering, bonus abuse, multi-accounting, and other forms of Prohibited Conduct as defined in the s5vip Terms & Conditions. This processing is essential to protecting both Members and the Platform's integrity.

4.4 Responsible Gaming Monitoring

s5vip monitors betting patterns and account activity to identify signs of problem gambling behaviour — such as escalating stake sizes, unusual session lengths, or rapid redepositing after losses. Where such patterns are detected, our responsible gaming team may proactively reach out to offer support resources. This processing is conducted in the genuine interest of Member welfare and Platform integrity.

4.5 Marketing Communications

Where you have opted in to marketing communications, we use your email address and phone number to send you information about promotions, new games, and platform updates relevant to your interests as a player. You may withdraw your consent to marketing communications at any time via your account settings or by contacting support. Withdrawal of marketing consent does not affect the delivery of essential account notifications.

4.6 Platform Improvement and Analytics

We use aggregated and anonymised data — derived from gameplay records, session data, and navigation logs — to understand how Members use the Platform and to improve its performance, design, and game selection. Where analytics tools involve individual-level tracking, this is disclosed in the Cookies section below and subject to separate consent where required.

Section 5

Legal Bases for Processing

s5vip processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the agreement between s5vip and the Member — specifically, to operate your account, process bets, and execute deposits and withdrawals. Without this processing, s5vip cannot deliver its services to you.
• Legal Obligation: Processing required to comply with applicable laws and licensing conditions — including KYC identity verification, transaction record-keeping, and sanctions screening.
• Legitimate Interests: Processing conducted for s5vip's legitimate business interests — specifically, fraud detection, security monitoring, responsible gaming oversight, and aggregate analytics — where these interests are not overridden by your own privacy rights.
• Consent: Processing conducted only where you have given clear, informed, and freely revocable consent — specifically, for direct marketing communications and for any non-essential cookie or tracking technologies as described in Section 7. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Section 6

Data Sharing & Disclosure

s5vip does not sell, rent, or trade your Personal Data to any third party. We share your data only in the circumstances described below, and only to the minimum extent necessary for each purpose.

6.1 Payment Processors

To process deposits and withdrawals in IDR, we share the minimum necessary transactional and identity data with our licensed payment processing partners — including the operators of local bank transfer gateways for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon, and e-wallet providers including OVO, DANA, GoPay, ShopeePay, and LinkAja. These parties act as Data Processors under written agreements and may not use your data for any independent purpose.

6.2 Identity Verification Providers

To conduct KYC verification, we share your identity document data with a licensed identity verification bureau. This provider verifies your documents and returns a verified / unverified outcome to s5vip. They do not retain your documents beyond the period required to complete the verification check.

6.3 Legal and Regulatory Authorities

We may disclose your Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so — for example, in response to a valid court order, a regulatory investigation, or a mandatory reporting obligation under applicable anti-money-laundering laws. We will notify you of such a disclosure where we are legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of s5vip's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you via the registered email address at least 30 days prior to any such transfer, and you will have the right to close your account and request data deletion before the transfer takes effect.

6.5 Affiliates and Group Entities

Where s5vip operates within a group of related companies, limited data sharing within the group may occur for consolidated fraud detection and compliance purposes. Any intra-group sharing is subject to the same data protection standards as apply to s5vip itself.

Section 7

Cookies & Tracking Technologies

The s5vip Platform uses cookies and similar technologies to ensure essential functionality, improve your experience, and — where you have given consent — deliver relevant promotional content. This section explains the types of cookies we use and your choices regarding them.

7.1 Strictly Necessary Cookies

These cookies are required for the Platform to function. They enable core features such as session management (keeping you logged in during a session), security token validation, and shopping-cart-equivalent functionality for bet slips. Strictly necessary cookies cannot be disabled without breaking core Platform features.

7.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred deposit method, display settings, and responsible gaming limits — so that you do not need to re-enter them on each visit. These cookies are set only upon your first login and do not track activity outside the Platform.

7.3 Analytics Cookies

With your consent, we use analytics cookies to collect anonymised data about how Members navigate the Platform — which pages are most visited, where users drop off during the deposit flow, and how long sessions typically last. This data is used solely to improve Platform design and performance. No individual player profile is built from analytics data.

7.4 Marketing Cookies

Where you have consented to personalised marketing, marketing cookies allow s5vip to understand which promotions you have interacted with and to tailor future offers accordingly. You can withdraw your consent to marketing cookies at any time via your account settings or your browser's cookie management tools.

7.5 Managing Your Cookie Preferences

Most modern browsers allow you to view, block, and delete cookies via the browser's settings menu. Blocking strictly necessary cookies will impair your ability to log in and use the Platform. Blocking analytics or marketing cookies will not affect your access to betting and gaming services. Please note that clearing cookies may log you out of active sessions and reset your functional preferences.

Section 8

Data Retention

s5vip retains Personal Data for only as long as is necessary for the purposes described in this Policy, or for as long as is required by applicable law or our licensing obligations — whichever period is longer.

• Account Data: Retained for the duration of your active membership, plus a minimum of 5 years following account closure, to meet our legal record-keeping obligations under applicable anti-money-laundering and gambling-regulatory frameworks.
• KYC Documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later. After this period, KYC documents are securely destroyed.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction.
• Gameplay Records: Retained for 3 years from the date of each session. Aggregate anonymised gameplay statistics may be retained indefinitely for analytics purposes.
• Support Interaction Logs: Retained for 2 years from the date of the interaction, unless the interaction is associated with an open dispute or legal claim, in which case it is retained until the matter is fully resolved plus 1 additional year.
• Marketing Consent Records: Retained for the duration of your membership plus 3 years. Records of consent withdrawal are also retained for 3 years to demonstrate compliance.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a way that prevents re-identification. If you request deletion of your data before the end of a mandatory legal retention period, we will restrict the processing of your data to the minimum required by law while the retention obligation remains in force.

Section 9

Data Security

s5vip maintains a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure.

9.1 Technical Measures

• Transport Encryption: All data transmitted between your device and the Platform is encrypted using TLS 1.3. Connections that do not support TLS 1.2 or above are rejected.
• At-Rest Encryption: Sensitive data — including identity documents and financial information — is encrypted at rest using AES-256 encryption on our database and object-storage infrastructure.
• Password Security: Passwords are never stored in plaintext. They are hashed using a modern adaptive hashing algorithm (bcrypt or equivalent) with a unique per-user salt.
• Two-Factor Authentication: s5vip offers two-factor authentication (2FA) for all Member accounts. We strongly recommend enabling 2FA to add a second layer of protection to your login.
• Penetration Testing: The Platform undergoes regular third-party security penetration testing. Critical findings are addressed on a priority basis with a defined remediation SLA.

9.2 Organisational Measures

• Access to Personal Data within s5vip is limited to staff members who have a legitimate business need to access it. Access is role-based and reviewed quarterly.
• All staff members with access to Personal Data receive data protection training upon joining and at regular intervals thereafter.
• Third-party Data Processors are assessed for their security posture before engagement and are required to maintain equivalent standards under their data processing agreements with s5vip.

9.3 Data Breach Response

In the event of a personal data breach that poses a material risk to your rights and freedoms, s5vip will notify affected Members via their registered email address without undue delay — and in any event within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, and the steps s5vip is taking to address it.

Section 10

Your Data Rights

As a Member of s5vip, you hold the following rights with respect to your Personal Data. s5vip will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.

To exercise any of the above rights, submit a request via the data rights section of your member dashboard, or email our Data Protection team at [email protected] with the subject line "Data Rights Request" and your registered account email address. We may ask you to verify your identity before processing the request.

Section 11

Children's Data

The s5vip Platform is strictly for adults aged 21 and over. s5vip does not knowingly collect Personal Data from any person under the age of 21. Age is verified at the point of registration and again during KYC processing. Any account found to be held by a person under 21 is closed immediately and all associated data is securely deleted, with the exception of any records that must be retained for legal compliance purposes.

If you believe that a person under the age of 21 has registered an account on s5vip, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will investigate and act on all reports promptly.

Section 12

Cross-Border Data Transfers

s5vip's primary data processing infrastructure is hosted on servers located in Singapore and Hong Kong — jurisdictions that maintain recognised data protection frameworks. Where data is transferred outside Indonesia, s5vip ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that described in this Policy.

Safeguards for international transfers may include: standard contractual clauses between s5vip and the receiving entity; the use of processors located in jurisdictions that maintain adequate data protection standards; or other transfer mechanisms recognised as adequate under applicable data protection law.

Payment processing data associated with Indonesian local bank transfers and e-wallet transactions is routed through payment gateways that operate within Indonesia and are subject to Indonesian financial regulatory oversight. Specifically, transaction data for BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja is handled by locally licensed payment intermediaries.

Section 13

Policy Changes

s5vip may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or licensing requirements. Where a material change is made — meaning a change that affects your rights or the ways in which your data is used in a significant way — we will provide at least 14 days' advance notice via the registered email address on your account and a prominent notice on the Platform.

The date of the most recent update is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how s5vip protects your personal information. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not accept the revised Policy, you must close your account before the effective date of the amendment.

Section 14

Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or the way s5vip processes your Personal Data, please contact us through any of the following channels. Our Data Protection team reviews all privacy-related inquiries within one business day.

• Email: [email protected] — please use the subject line "Privacy Inquiry" for fastest routing (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the member dashboard. Select "Privacy & Data" as the inquiry category.
• Response Times: Email — within 3 hours during WIB business hours (08:00–22:00 WIB); Live Chat — average response under 3 minutes.
• Data Rights Requests: Formally submitted data rights requests (access, erasure, portability, etc.) are acknowledged within 24 hours and fulfilled within 30 days of identity verification.

All support agents are native Indonesian speakers and are familiar with both English and Bahasa Indonesia. For privacy and data rights matters, we recommend contacting us in English or Indonesian as preferred — our data protection documentation and formal responses are issued in English.

s5vip is committed to resolving all privacy concerns through direct dialogue. If you remain unsatisfied after contacting us, you may refer the matter to your applicable data protection authority or, where no local DPA has jurisdiction, to the arbitration process described in the Terms & Conditions.