Privacy Policy — e3vip

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

e3vip collects the following categories of personal data from Members and prospective Members:

• Identity Data: Full legal name, date of birth, gender, Indonesian National ID number (NIK), and a copy of your KTP or passport submitted during KYC verification.
• Contact Data: Email address, active Indonesian mobile number, and residential address (province and city level — for example, Jakarta, Surabaya, Bandung, Medan, or Bali).
• Financial Data: Bank account numbers and account holder names (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals. We do not store full credit or debit card numbers.
• Transaction Data: A complete record of all deposits, withdrawals, bet placements, bet settlements, bonus activations, and balance adjustments associated with your account.
• Technical Data: IP address, device type and operating system, browser type and version, session timestamps, and referral URL (the page from which you navigated to e3vip).
• Usage Data: Pages visited within the platform, games played, bet types selected, session duration, and feature interactions. This data is used in aggregate to improve the platform experience.
• Communication Data: Records of your interactions with e3vip's customer support team via live chat, email, or WhatsApp, including transcripts retained for quality assurance and dispute resolution purposes.
• Responsible Gaming Data: Any self-exclusion requests, deposit limit configurations, or session limit settings applied to your account.

e3vip collects personal data through the following methods:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or activating a promotion.
• Automated Technical Collection: Technical and usage data collected automatically via server logs, cookies, pixel tags, and session-tracking tools as you browse and use the platform. See Clause 7 for details on cookies.
• Third-Party Identity Verification: During KYC, your submitted identity documents may be cross-referenced against Indonesian government identity databases via our regulated third-party KYC verification partners. These partners provide a verification outcome to e3vip but do not retain your documents independently beyond what their own regulatory obligations require.
• Payment Processors: When you make a deposit or request a withdrawal, our payment processing partners (bank transfer intermediaries and e-wallet platforms) share transaction confirmation data with e3vip to allow us to credit your account or verify the source of withdrawal funds.
• Anti-Fraud Systems: e3vip uses automated risk-scoring systems that analyze behavioral and technical signals to detect potentially fraudulent or prohibited activity. These systems do not make automated decisions that legally affect you — they flag cases for human review by our compliance team.

e3vip processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is required to perform the contract between e3vip and you as a Member — including account registration, identity verification, bet settlement, processing deposits and withdrawals, and providing customer support.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering (AML) laws, counter-terrorism financing (CTF) regulations, international licensing conditions, and any lawful order from a competent regulatory or law enforcement authority.
• Legitimate Interests: Processing carried out for e3vip's legitimate business interests, provided those interests are not overridden by your fundamental rights. This includes fraud prevention, security monitoring, platform improvement, and responsible gaming compliance.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

e3vip uses the personal data it collects for the following purposes:

e3vip does not use your personal data for any purpose not listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing purpose.

e3vip shares your personal data only in the circumstances described below. We do not sell, rent, or trade your data for third-party commercial marketing purposes under any circumstances.

• KYC Verification Partners: Regulated identity verification service providers who process your submitted identity documents solely to confirm your identity and return a verification result to e3vip. These partners are bound by strict data processing agreements and applicable data protection law.
• Payment Processors: Indonesian bank transfer intermediaries and licensed e-wallet operators (including those facilitating transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive the minimum financial data necessary to process your requested transaction.
• Anti-Fraud & Security Providers: Third-party risk intelligence platforms that assist e3vip in detecting and preventing fraudulent activity, account takeover attempts, and money laundering. Data shared with these providers is subject to contractual restrictions prohibiting independent use.
• Regulatory & Law Enforcement Authorities: Where e3vip is subject to a binding legal obligation, court order, or regulatory directive requiring disclosure of Member data, we will comply with that obligation. Where permitted by law, we will notify the affected Member of any such disclosure request prior to complying.
• Business Successors: In the event that e3vip undergoes a merger, acquisition, or asset sale, Member data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments being assumed by the successor entity.
• Internal Group Entities: e3vip may share data with affiliated entities within the same corporate group for the purposes of consolidated compliance monitoring, shared customer support infrastructure, and group-level fraud prevention. Affiliate access is governed by internal data access policies.

All third parties with whom e3vip shares personal data are required to maintain appropriate technical and organizational security measures and are prohibited from using that data for any purpose beyond the specific purpose for which it was shared.

e3vip uses cookies and similar tracking technologies to operate the platform effectively, maintain session security, and improve the Member experience. The following cookie categories are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and display preferences, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymized data about how Members navigate the platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This information is used exclusively to improve platform performance and user experience. No personally identifiable information is included in analytics data sets.
• Functional Cookies: These cookies remember your personalized settings, such as your preferred deposit method, default bet size, and notification preferences, so that you do not need to reconfigure these settings on each visit.
• Fraud Prevention Cookies: Technical identifiers used by our anti-fraud systems to detect suspicious device behavior, bot activity, and account takeover attempts. These cookies are security-critical and cannot be disabled.

e3vip does not deploy third-party advertising or behavioral tracking cookies that share your browsing data with external advertising networks. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary or fraud prevention cookies may impair your ability to use the platform.

e3vip retains personal data for as long as is necessary to fulfill the purpose for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any outstanding disputes or enforce our agreements. The following retention periods apply:

• Account & Identity Data: Retained for the duration of account activity and for a minimum of five (5) years following account closure, in accordance with international AML record-keeping standards.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following account closure and may be retained for longer if required by a specific regulatory obligation or ongoing investigation.
• Support Communication Records: Live chat transcripts, email correspondence, and support tickets are retained for two (2) years following the closure of the relevant support case, for quality assurance and dispute resolution purposes.
• Technical & Usage Data: Anonymized or aggregated technical and usage data may be retained indefinitely for platform improvement and statistical purposes, as it no longer constitutes personal data once anonymized.
• Marketing Consent Records: Records of your marketing consent or withdrawal thereof are retained for the duration of your account and for three (3) years thereafter, to allow us to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized using industry-standard data destruction protocols.

e3vip implements a comprehensive, layered data security framework designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

• Transport Security: All data transmitted between the platform and your device is encrypted using TLS 1.2 or higher (256-bit encryption). HTTPS is enforced site-wide with HTTP Strict Transport Security (HSTS) enabled.
• Storage Encryption: Sensitive personal and financial data stored on e3vip's servers is encrypted at rest using AES-256 encryption. Encryption keys are managed in dedicated hardware security modules (HSMs) with strict access controls.
• Access Controls: Access to Member personal data is restricted on a strict need-to-know basis. All internal access is governed by role-based access control (RBAC) policies, with access logs maintained and reviewed regularly.
• Two-Factor Authentication: Member accounts are protected by two-factor authentication (2FA). We strongly encourage all Members to enable 2FA to provide an additional layer of protection against unauthorized account access.
• Penetration Testing: e3vip engages independent cybersecurity firms to conduct regular penetration tests and vulnerability assessments of the platform. Critical findings are remediated within 24 hours; non-critical findings within 30 days.
• Incident Response: e3vip maintains a documented data breach incident response plan. In the event of a confirmed data breach that materially affects Member data, affected Members will be notified within 72 hours of e3vip becoming aware of the incident, along with guidance on protective steps to take.

Despite these measures, no digital system can guarantee absolute security. You also play an important role in protecting your account by keeping your login credentials confidential and reporting any suspected unauthorized access to our support team immediately.

As an e3vip Member, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond to all verified requests within 30 calendar days.

Please note that certain rights may be limited where e3vip is required to retain or process your data to comply with a legal obligation, to defend against a legal claim, or where your account remains active with an outstanding balance or unresolved dispute. We will explain any applicable limitation clearly when responding to your request.

The e3vip platform is strictly intended for adults aged 21 years and older. e3vip does not knowingly collect, store, or process personal data from any individual under the age of 21. Access by minors is explicitly prohibited under our Terms and Conditions.

If e3vip discovers or is notified that personal data has been collected from an individual who is under 21 years of age, we will immediately close the associated account, delete all personal data collected from that individual, and return any deposited funds to the originating payment method after deducting any bonus credits applied to the account.

If you are a parent or guardian and believe that a minor in your care has created an account on e3vip, please contact our support team immediately at [email protected]. We take such reports extremely seriously and will act on them as a priority.

e3vip's primary server infrastructure is located in jurisdictions that maintain robust data protection frameworks. Where personal data is transferred outside of Indonesia — for example, to our KYC verification partners or cloud hosting providers — e3vip ensures that appropriate safeguards are in place to protect that data to a standard equivalent to or exceeding that required under applicable Indonesian data protection law.

Safeguards for international transfers may include: standard contractual data processing clauses incorporated into our agreements with Data Processors; transfers to countries that have been assessed as providing an adequate level of data protection; and technical measures such as pseudonymization and encryption applied prior to transfer to reduce the risk of exposure in transit.

Members may request further information about the specific safeguards in place for any international transfer of their personal data by contacting our support team.

The e3vip platform may contain links to third-party websites or services — for example, links to game provider information pages or payment method provider websites. This Privacy Policy applies solely to personal data collected and processed by e3vip through the e3vip platform. It does not apply to the data practices of any third-party website or service that you access via a link from our platform.

e3vip is not responsible for the privacy practices, security standards, or content of any third-party website. We encourage you to review the privacy policy of any third-party website before providing personal data to that site. The presence of a link on the e3vip platform does not constitute an endorsement of the linked site's privacy practices.

e3vip reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. When material changes are made, we will notify active Members via the email address registered on their account and/or via an in-platform notification displayed upon next login.

Amendments to this Privacy Policy take effect 7 days after the date of notification, except where immediate effect is required by law or by an urgent security concern. Continued use of the e3vip platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

The most current version of this Privacy Policy is always accessible at https://e3vip.cam/privacy-policy. The "Last Updated" date displayed at the top of this page reflects the date on which the most recent amendment was published. We encourage you to review this page periodically to stay informed of how e3vip protects your data.

For all privacy-related inquiries, data access requests, data deletion requests, or complaints regarding e3vip's handling of your personal data, please contact our dedicated data protection team through any of the following channels:

• Live Chat: Available 24/7 directly through the e3vip platform. Select "Privacy & Data" from the support category menu. Average response time under 2 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered account email address to allow us to verify your identity before processing the request. Responses are provided within 4 hours during business hours (08:00–22:00 WIB).
• WhatsApp: Available through the contact details displayed in the platform's Help Center section. WhatsApp support is available from 08:00 to 22:00 WIB, seven days a week.

To protect the security of Member data, all data rights requests must be submitted by the verified account holder. We will verify your identity before processing any request involving access to, modification of, or deletion of personal data. Identity verification is typically completed within one business day of receiving your request.

If you are not satisfied with e3vip's response to a data rights request or privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.