Privacy Policy

1. Introduction

sevip2 ("we", "us", "our") operates the online gaming platform accessible at https://sevip2.cam. We are committed to protecting the privacy and security of all personal data entrusted to us by players, visitors, and prospective users of the Platform. This Privacy Policy explains in clear, transparent terms what personal data we collect, the purposes for which we process it, how long we retain it, and the rights you hold over your own information.

This Policy applies to all personal data processed in connection with your use of the sevip2 Platform, whether you are a registered account holder, a visitor browsing the site without an account, or a person who contacts our support team. By accessing the Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy. If you do not accept the terms set out here, you should cease using the Platform immediately.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming policy, which together govern your relationship with sevip2. All three documents collectively form the binding agreement between you and sevip2.

2. Data Controller

sevip2 acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in accordance with applicable data protection standards.

Our designated privacy contact point for all data-related enquiries, subject access requests, and complaints is reachable via the contact details set out in Section 16 of this Policy. We aim to respond to all formal privacy requests within 14 calendar days of receipt and to resolve them substantively within 30 calendar days.

3. Data We Collect

The following table summarises the categories of personal data we collect, the specific data points within each category, and the primary purpose for which each category is used.

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond the photograph contained in government-issued identification). If you voluntarily disclose such information through a support channel, we handle it with the highest level of care and do not use it for any purpose beyond resolving your query.

4. How We Collect Data

4.1 Directly from You

The majority of personal data we hold is provided directly by you during the account registration process, when completing KYC verification, when making deposits or requesting withdrawals, when contacting our support team, and when updating your account profile.

4.2 Automatically During Platform Use

When you access the Platform, our servers and analytics systems automatically collect Technical Data and Cookie & Analytics Data as described in Section 3. This collection is necessary for the Platform to function correctly and to protect the security of all users. Automatic data collection occurs regardless of whether you are logged into an Account.

4.3 From Third-Party Verification Services

To fulfil our KYC and anti-money-laundering obligations, we may use specialist third-party identity verification providers who cross-reference the documents you submit against external databases. These providers operate under strict data processing agreements and handle your information solely for verification purposes.

4.4 From Payment Processors

When you initiate a deposit via an Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the payment processor transmits confirmation data back to our systems including the transaction reference, amount, source account name, and timestamp. We do not receive or store full bank account numbers; we receive only the data necessary to match the payment to your Account and verify account ownership.

5. Purposes of Processing

sevip2 processes personal data for the following clearly defined purposes:

• Account Management: Creating, maintaining, and administering your player Account, including processing login requests, updating profile information, and managing Account status.
• KYC & Age Verification: Verifying your identity, age (minimum 21 years), and residency to comply with responsible gaming obligations and prevent underage gambling.
• Payment Processing: Processing depos its, withdrawals, and refunds securely through Indonesian banking channels and approved e-wallet providers.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and unauthorized access to player Accounts.
• Legal & Regulatory Compliance: Meeting our obligations under applicable anti-money-laundering (AML) standards, responsible gaming regulations, and any lawful requests from competent authorities.
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and providing assistance through live chat, WhatsApp, Telegram, and email.
• Responsible Gaming: Monitoring player activity to identify potential problem gambling patterns and administering self-exclusion, deposit limit, time-out, and reality-check tools at your request.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, payment processing speed, and overall user experience.
• Direct Communications: Sending you transactional messages (deposit confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about relevant offers and bonuses.

6. Legal Basis for Processing

sevip2 processes personal data only where a valid legal basis exists. The applicable bases for each processing activity are as follows:

7. Data Sharing & Disclosure

7.1 No Commercial Sale of Data

sevip2 does not sell, rent, auction, or otherwise commercially transfer your personal data to any third party for their own independent use. Your data is not a product. We share it only in the strictly defined circumstances outlined below.

7.2 Service Providers

We engage carefully vetted third-party service providers who process personal data on our behalf under binding data processing agreements. These providers are contractually prohibited from using your data for any purpose beyond the specific service they deliver to us. Relevant categories include:

• KYC and identity verification providers — to verify documents and cross-reference identity databases
• Payment processors and banking partners — Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) — to process transactions
• IT infrastructure and cloud hosting providers — to store and process data securely on encrypted servers
• Customer communication platforms — to operate our live chat, WhatsApp Business, and Telegram support channels
• Analytics providers — to process anonymised and aggregated platform usage data
• Game software studios — Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, and others — receive only the minimum technical data required to serve game content; they do not receive your identity or financial data

7.3 Legal Disclosures

sevip2 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are required to do so by law, where necessary to prevent or detect crime, or where required to protect the rights, property, or safety of sevip2, its players, or the public. We will notify you of any such disclosure where we are legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of sevip2's business, personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy at least 30 days in advance of the transfer taking effect.

8. International Data Transfers

Some of our third-party service providers — particularly cloud hosting and game studio partners — may process data outside of Indonesia. Where personal data is transferred to servers or entities located in other countries, sevip2 ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses that impose obligations on the recipient equivalent to those applicable to sevip2
• Processing only in jurisdictions that maintain data protection standards recognised as adequate by international benchmarks
• Encryption of data in transit and at rest, regardless of where it is processed

By using the Platform, you acknowledge that your personal data may be processed in countries other than Indonesia. sevip2 takes all reasonably practicable steps to ensure that such transfers occur securely and with your data receiving an equivalent level of protection to that described in this Policy.

9. Data Retention

sevip2 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and operational obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical and research purposes.

10. Security Measures

sevip2 implements a comprehensive, multi-layered security framework to protect your personal and financial data against unauthorised access, loss, destruction, alteration, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers
• AES-256 encryption at rest for all stored personal and financial records
• Role-based access controls (RBAC) ensuring that employees can access only the specific data required for their job function
• Two-factor authentication (2FA) on all administrative and operational system access
• Intrusion detection and prevention systems (IDS/IPS) monitoring network traffic 24/7
• Regular third-party penetration testing conducted by independent cybersecurity specialists
• Automated anomaly detection flagging unusual login patterns, IP changes, and suspicious transaction activity
• Secure, geographically redundant data centres with physical access controls and environmental monitoring

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, sevip2 will notify affected individuals without undue delay and take all necessary remedial action.

11. Cookies & Tracking Technologies

11.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They enable the site to remember your preferences, maintain your session, and collect usage statistics. sevip2 uses both session cookies (deleted when you close your browser) and persistent cookies (stored for a defined period).

11.2 Categories of Cookies We Use

11.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary or security cookies will impair the functionality of the Platform and may prevent you from logging into your Account. Detailed guidance on managing cookies is available in the help documentation of all major browsers including Google Chrome, Mozilla Firefox, Apple Safari, and Microsoft Edge.

12. Your Privacy Rights

sevip2 respects your rights over your personal data. The following rights are available to all registered Players and, where applicable, to visitors to the Platform:

To exercise any of the rights above, contact our privacy team using the details in Section 16. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Complex requests may take up to 60 days; we will notify you if an extension is required.

13. Minors & Age Verification

The sevip2 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect, process, or retain personal data from individuals below the age of 21. Age verification is a mandatory step during account registration and is reinforced through our KYC process, which requires submission of government-issued identification confirming date of birth.

If sevip2 becomes aware or has reasonable grounds to suspect that personal data belonging to an individual under 21 years of age has been collected, we will immediately suspend the relevant Account, cease all processing of that individual's data, and securely delete it from our systems as soon as legally permissible. Any Balance associated with an underage Account will be refunded to the originating payment source.

14. Third-Party Services

The sevip2 Platform integrates with third-party game providers, payment processors, and communication tools to deliver a complete gaming experience. While these providers operate under data processing agreements with sevip2, they maintain their own independent privacy policies governing their own data practices. sevip2 is not responsible for the privacy practices of third-party providers beyond the scope of the data processing agreements we hold with them.

Third-party game studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, and Spribe — receive only the technical data necessary to serve game content (such as a session token and game configuration parameters). They do not receive your identity documents, Indonesian bank account details, or full transaction history.

The Platform does not contain links to external third-party websites. If you independently navigate to an external site, please review that site's own privacy policy, as sevip2 has no control over, and accepts no responsibility for, data practices on websites outside of the sevip2 domain.

15. Amendments to This Policy

sevip2 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered Players via email to the address on file and display a prominent notice on the Platform for a minimum of 14 days before the changes take effect.

Your continued use of the Platform following the effective date of an updated Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this page periodically. The "Last Updated" date at the top of this document reflects the date on which the most recent revision was published. Prior versions of this Privacy Policy are available upon request by contacting our support team.

16. Contact & Data Requests

For all privacy-related enquiries, subject access requests, data correction requests, consent withdrawal requests, or complaints regarding sevip2's handling of your personal data, please contact our privacy team through any of the following channels. All communications are handled in English and Bahasa Indonesia.

• Email: [email protected] (plain text — not a clickable link). Include "Privacy Request" in the subject line for priority routing.
• Live Chat: Available directly through the Platform interface — our support team is available 24 hours a day, 7 days a week, and will route your privacy request to the appropriate team.
• WhatsApp & Telegram: Contact details are available within your Account dashboard upon login. Reference "Data Privacy" at the start of your message.

When submitting a subject access request or any request to exercise your privacy rights, please include your full name, registered email address, and a brief description of your request. For identity verification purposes, we may ask you to confirm additional Account details before processing requests that involve disclosure or deletion of personal data.