Privacy Policy — via288

Throughout this Privacy Policy, the following terms carry the meanings defined below:

• "via288" / "we" / "us" / "our" — the via288 online betting and gaming platform, accessible at https://via288.cam, including all subdomains and mobile interfaces.
• "Member" / "you" / "your" — any individual who has registered an account on via288 or who accesses the Platform as a visitor.
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including name, national identity number (NIK), date of birth, contact details, financial account information, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, organization, retrieval, use, disclosure, and deletion.
• "KYC" — Know Your Customer identity verification, involving submission of government-issued identification (e.g., Indonesian KTP) and supporting documents.
• "Cookies" — small text files placed on your device by the Platform to enable session management, preference storage, and analytics functions.
• "Third-Party Processor" — any external service provider that processes Personal Data on behalf of via288 under a formal data processing agreement, including payment processors, KYC verification services, and game content providers.

via288 collects Personal Data across several categories, depending on your level of engagement with the Platform:

via288 does not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) except where voluntarily disclosed in support communications — in which case such data is treated with additional protective measures and is not retained beyond the resolution of the relevant support case.

via288 collects Personal Data through the following channels:

• Direct submission: Data you provide actively during account registration, KYC verification, deposit and withdrawal setup, support requests, and promotional form entries.
• Automated collection: Technical and Usage Data collected automatically as you interact with the Platform, via server logs, session tracking, and analytics tools.
• Cookies and similar technologies: Persistent and session cookies, pixel tags, and local storage objects that record your preferences, session state, and browsing behavior on the Platform. See Section 9 for full details.
• Third-party verification services: Identity and address data returned by our KYC verification partners upon submission of your identity documents for cross-reference purposes.
• Payment processors: Transaction confirmation data, payment status, and fraud-screening signals received from our payment partners including Indonesian bank transfer networks and e-wallet providers.

via288 processes your Personal Data for the following specific and legitimate purposes:

1. Account Management: Creating, maintaining, and administering your via288 member account, including authentication, password management, and profile updates.
2. KYC & Identity Verification: Verifying your identity, age (21+ requirement), and Indonesian residency in compliance with our responsible gaming and anti-money laundering obligations.
3. Payment Processing: Facilitating deposits and withdrawals via supported Indonesian payment channels — bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) — and maintaining transaction records.
4. Service Delivery: Providing access to sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery), and all other Platform products, including personalized game recommendations based on usage history.
5. Customer Support: Responding to inquiries, resolving disputes, processing complaints, and communicating service updates through our 24/7 Indonesian-speaking support team.
6. Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorized access, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
7. Legal & Regulatory Compliance: Fulfilling obligations imposed by applicable law, including record-keeping, transaction reporting, and responding to lawful requests from competent authorities.
8. Platform Improvement: Analyzing usage patterns, game performance data, and member feedback to improve the Platform's features, interface, and product offering.
9. Marketing Communications: Sending promotional offers, bonus announcements, and seasonal campaign notifications (e.g., Ramadhan specials, Idul Fitri promotions) where you have given explicit consent. You may withdraw consent at any time by contacting support.

via288 processes Personal Data on the following legal bases, each mapped to the processing purposes identified in Section 4:

• Contractual necessity: Processing required to perform our obligations under the membership contract — including account management, payment processing, and game service delivery (Purposes 1, 2, 3, 4) .
• Legal obligation: Processing necessary to comply with applicable laws and regulatory requirements, including KYC, anti-money laundering record-keeping, and responding to lawful authority requests (Purposes 2, 7).
• Legitimate interests: Processing carried out in via288's legitimate business interests where those interests are not overridden by your data protection rights — including fraud prevention, security monitoring, and platform improvement (Purposes 6, 8).
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookie deployment (Purpose 9). You may withdraw consent at any time without affecting the lawfulness of prior processing.

via288 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We may share your data in the following limited and controlled circumstances:

• KYC and identity verification partners: Accredited third-party identity verification services that process your KTP and supporting documents solely for the purpose of confirming your eligibility to hold a via288 account.
• Payment processors and banking partners: Indonesian bank transfer networks, e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja), and international payment infrastructure providers, solely to the extent necessary to process your financial transactions.
• Game content providers: Licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — receive the minimum technical session data required to deliver their games within the via288 platform environment. These providers operate under contractual data protection obligations consistent with this Policy.
• Fraud detection and cybersecurity services: Specialist third-party security providers that analyze technical and behavioral data patterns to identify and prevent fraudulent activity on the Platform.
• Legal and regulatory authorities: Competent courts, regulators, law enforcement agencies, or other governmental bodies, where disclosure is required by applicable law or by a valid legal order. via288 will, where legally permissible, notify you of such a request prior to disclosure.
• Business successors: In the event of a merger, acquisition, or sale of all or part of via288's business assets, your Personal Data may be transferred to the acquiring entity, which will be bound by the obligations of this Privacy Policy with respect to your data.

via288 retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be attributed to any individual. Anonymized, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

via288 implements a comprehensive, layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and via288 servers is encrypted in transit using industry-standard TLS protocols, preventing interception by third parties.
• Encryption at rest: Sensitive Personal Data — including identity documents, financial account details, and KYC records — is encrypted at rest using AES-256 encryption on secured server infrastructure.
• Access control: Access to Personal Data is restricted on a strict need-to-know basis. via288 staff are granted access permissions commensurate with their role, with all access events logged and subject to audit.
• Two-factor authentication (2FA): Administrative and operational system access requires multi-factor authentication. Members are also encouraged to enable 2FA on their accounts for enhanced personal security.
• Continuous monitoring: via288 operates real-time intrusion detection systems and security information and event management (SIEM) tools that monitor for anomalous access patterns and potential threats around the clock.
• Penetration testing: The Platform undergoes periodic third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses proactively.
• Incident response: via288 maintains a documented data breach response plan. In the event of a security incident affecting your Personal Data, we will notify affected Members and, where required, relevant authorities within the timeframes prescribed by applicable law.

via288 uses cookies and similar tracking technologies to operate the Platform effectively and to improve the member experience. The following categories of cookies are deployed:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Used to remember your preferences — such as language settings, display preferences, and last-viewed game categories — so that you do not need to reconfigure your session on each visit.
• Analytics cookies: Used to collect anonymized data on how members navigate the Platform, which pages are most visited, and where users encounter friction. This data informs platform improvement decisions. Analytics cookies are deployed only with your consent.
• Marketing cookies: Used to deliver targeted promotional content relevant to your interests and prior activity on the Platform. Marketing cookies are deployed only with your explicit consent and may be withdrawn at any time.

Cookie data is retained for periods consistent with Section 7. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform; disabling other cookie categories will not affect core platform access.

As a via288 member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all valid requests within 30 calendar days.

• Right of access: You may request a copy of the Personal Data via288 holds about you, along with information on how it is processed and with whom it is shared.
• Right to rectification: You may request correction of any inaccurate or incomplete Personal Data. For identity-related corrections, updated KYC documentation may be required.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations (see Section 7).
• Right to restriction of processing: You may request that via288 restrict the processing of your Personal Data while a rectification request is pending or where you have objected to processing.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request your Personal Data in a structured, machine-readable format for transfer to another service provider.
• Right to object: You may object at any time to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease processing for that purpose immediately upon receipt of your request.
• Right to withdraw consent: Where processing relies on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

via288 is strictly an adults-only platform. We do not knowingly collect Personal Data from any individual under 21 years of age. Age verification is a mandatory component of our KYC process, and all accounts are subject to age confirmation before full platform access is granted.

If via288 determines — through KYC review, behavioral signals, or a third-party report — that a registered Member is under 21 years of age, the following actions will be taken immediately:

• The account will be suspended and access revoked without prior notice.
• All Personal Data associated with the account will be flagged for expedited deletion in accordance with our retention schedule, subject to any mandatory legal retention requirements.
• Any funds deposited will be returned to the originating payment method after identity verification of the depositor, net of any applicable processing fees.

If you believe that a minor has registered an account on via288, please report this immediately to [email protected]. We take all such reports seriously and will act promptly upon receipt.

The via288 platform integrates third-party game content and payment services that operate under their own terms and privacy policies. While via288 selects service partners carefully and requires contractual data protection commitments, the following points apply:

• Game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) may collect limited technical session data within their game environments to enable game functionality, enforce fair play, and fulfill their own licensing obligations.
• Payment processors handling Indonesian bank transfers and e-wallet transactions (including OVO, DANA, GoPay, ShopeePay, and LinkAja) operate under their own privacy and data security frameworks, which members are encouraged to review independently.
• via288 is not responsible for the data practices of any third-party service once data leaves via288's direct processing environment. Our liability for third-party data practices is limited to the contractual commitments we have obtained from those parties.

via288 operates as an internationally licensed gaming platform. As a result, some Personal Data may be processed on servers or by service partners located outside of Indonesia. Where such transfers occur, via288 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to this Privacy Policy, including:

• Contractual clauses in agreements with Third-Party Processors that impose data protection obligations equivalent to those under this Policy.
• Transfer of data only to jurisdictions with internationally recognized data protection frameworks, or to processors that maintain their own certified security and privacy standards.
• Ongoing monitoring of international transfer partners to ensure continued compliance with agreed data protection standards.

By registering on via288 and accepting this Privacy Policy, you acknowledge and consent to the transfer of your Personal Data to processing locations outside Indonesia for the purposes described in Section 4, subject always to the safeguards described above.

via288 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The following process governs amendments:

• Material changes — particularly those that expand the categories of data collected or introduce new processing purposes — will be communicated to registered Members via email notification and a prominent notice on the Platform at least seven (7) days before the amended Policy takes effect.
• The "Last Revised" date at the top of this page will be updated to reflect the most recent version in force.
• Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you must discontinue use of the Platform and request account closure before the effective date.
• Minor clarifications and formatting changes that do not materially affect Members' rights may be made without advance notice, though the "Last Revised" date will still be updated.

If you have any questions, concerns, or complaints regarding this Privacy Policy or via288's data processing practices, please contact us through the following channel:

via288 is committed to resolving all privacy-related inquiries and complaints promptly and fairly. We will acknowledge receipt of your request within two (2) business days and provide a substantive response within 30 calendar days. Where a request is complex or where you have submitted multiple requests, we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reason for it.

For matters related to responsible gaming data — such as self-exclusion records, deposit limit history, or session time data — please visit our dedicated Responsible Gaming page for specific guidance. For general platform questions, our FAQ page covers the most common member inquiries.