vilo88 is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our platform, and outlines your rights under applicable data protection laws.
Effective Date: 01 January 2026All data transmissions are encrypted with bank-grade security.
We never sell your personal data to third parties for marketing.
Your data is stored on encrypted servers with restricted access.
Clear disclosure of what data we collect and why we need it.
Access, correct, or request deletion of your data at any time.
Aligned with international data protection best practices.
This Privacy Policy governs the collection, processing, storage, and use of personal data by vilo88 ("we", "us", "our") when you access or use the Platform at https://vilo88.cam (the "Platform"). By creating an account, depositing funds, placing wagers, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
vilo88 operates an online sports betting and live casino platform specifically designed for users in Indonesia. We process personal data in accordance with internationally recognised data protection principles, including transparency, lawfulness, fairness, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.
This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your contractual relationship with vilo88. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail.
vilo88 is the data controller responsible for the personal data processed through the Platform. As data controller, we determine the purposes and means of processing your personal data and are accountable for ensuring that processing complies with applicable data protection laws.
Our registered contact email for all data protection and privacy inquiries is: [email protected] (plain text — not a clickable link). For data subject access requests, rectification requests, or deletion requests, please email us at this address with the subject line "Data Privacy Request — [Your Full Name]".
We collect and process several categories of personal data to enable you to use the Platform, comply with legal obligations, protect against fraud, and deliver a secure and personalised experience. The types of data we collect include:
When you register an account, you provide:
To comply with anti-money laundering regulations and age verification requirements, we collect:
When you deposit, wager, or withdraw funds, we collect:
Our servers automatically collect technical data when you access the Platform:
When you contact our customer support team or receive promotional communications, we collect:
| Data Category | Examples | Purpose |
|---|---|---|
| Account Data | Name, email, phone, DOB, address | User identification, authentication, account management |
| KYC Data | KTP, passport, bank statement, selfie | Age verification, AML compliance, fraud prevention |
| Financial Data | Bank account, e-wallet ID, transaction history | Deposits, withdrawals, financial reconciliation |
| Technical Data | IP address, device type, browser, session logs | Security, fraud detection, platform optimisation |
| Betting Data | Wagers, odds, outcomes, game preferences | Service delivery, responsible gaming monitoring |
| Communications | Support tickets, emails, chat transcripts | Customer support, dispute resolution, quality assurance |
We process your personal data for the following purposes:
You may opt out of marketing communications at any time by clicking the unsubscribe link in any promotional email, or by contacting [email protected]. Opting out of marketing does not affect essential transactional communications (account notifications, withdrawal confirmations, security alerts).
Under international data protection principles, we must have a lawful basis for processing your personal data. The legal bases we rely on are:
Processing your account data, financial data, and betting history is necessary to fulfil our contractual obligations under the Terms & Conditions. Without this data, we cannot provide you with access to the Platform, process your deposits and withdrawals, or settle your bets.
We are legally required to collect and retain KYC data to comply with anti-money laundering regulations, age verification requirements, and regulatory reporting obligations. This includes verifying your identity, confirming your age, and maintaining transaction records.
We process certain data based on our legitimate business interests, including:
We have conducted a balancing test to ensure that our legitimate interests do not override your fundamental rights and freedoms.
For marketing communications and certain non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
vilo88 does not sell your personal data to third parties for marketing purposes. However, we may share your data with trusted third-party service providers and partners under strict confidentiality agreements and only to the extent necessary for the purposes described below:
We share your bank account or e-wallet details with payment gateway providers to process deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. These processors act as data processors under our instruction and are contractually bound to protect your data.
We share your betting data and session information with game studios including Evolution Gaming, Pragmatic Play, NetEnt, and Microgaming to deliver live dealer games and slot games. These providers process data solely for game delivery and outcome verification purposes.
We may use third-party identity verification services to validate your KTP, passport, or other government-issued identification documents. These partners process KYC data solely for verification purposes and do not retain your data beyond the verification period.
Your data is stored on secure cloud servers operated by reputable hosting providers. These providers have been selected for their robust security certifications and compliance with international data protection standards.
We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required by law, legal process, or court order, or where necessary to protect the rights, property, or safety of vilo88, our users, or the public.
Some of the third-party service providers we work with (cloud hosting, game studios, payment processors) may be located outside Indonesia. When we transfer your personal data internationally, we ensure that adequate safeguards are in place, including:
We only transfer data to jurisdictions that provide an adequate level of data protection or where alternative safeguards are implemented.
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory, and contractual obligations. Specific retention periods include:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Data | Duration of account + 7 years after closure | Legal record-keeping, dispute resolution |
| KYC Documents | 7 years after account closure | AML regulatory requirements |
| Financial Transactions | 7 years after transaction date | Tax compliance, audit requirements |
| Betting History | 7 years after bet settlement | Dispute resolution, regulatory compliance |
| Support Tickets | 3 years after case closure | Quality assurance, training purposes |
| Marketing Consent | Until consent is withdrawn | Consent management compliance |
After the retention period expires, personal data is securely deleted or anonymised such that it can no longer be associated with you as an individual.
vilo88 employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. Our security measures include:
Under data protection laws, you have the following rights with respect to your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.
You have the right to request correction of inaccurate or incomplete personal data. You can update most of your account information directly from your account settings, or contact our support team for assistance.
You may request deletion of your personal data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent (where processing was based on consent); or (c) you object to processing based on legitimate interests. However, we may be required to retain certain data to comply with legal obligations (e.g., KYC and transaction records for 7 years under AML regulations).
You may request that we temporarily restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have contested or assess whether our legitimate interests override your objection to processing.
You have the right to receive your personal data in a portable format and to request that we transmit it directly to another service provider where technically feasible.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Full Name]". We will respond within 30 days and may request additional information to verify your identity before processing your request.
The Platform uses cookies and similar tracking technologies to enhance user experience, analyse website traffic, and deliver personalised content. A cookie is a small text file stored on your device when you visit a website.
You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. However, disabling essential cookies may prevent you from using certain features of the Platform. To manage marketing and analytics cookies, you may also adjust your cookie preferences in your account settings.
The Platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a person under 21, we will take immediate steps to delete that data and permanently close the associated account.
If you are a parent or guardian and believe that your child has provided personal data to vilo88, please contact us immediately at [email protected] so that we can take appropriate action.
We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. When we make material changes, we will provide at least 7 days' advance notice via a prominent notice on the Platform homepage and, where practical, via email to the address registered on your account.
The "Effective Date" at the top of this Privacy Policy indicates when the policy was last updated. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, or if you wish to exercise any of your data protection rights, please contact us at:
Email: [email protected]
Subject Line: "Privacy Inquiry — [Your Full Name]"
Our data protection team is available 24/7 to assist you. We aim to respond to all privacy-related inquiries within 30 days.
For urgent security concerns (suspected unauthorised access, data breach notifications), please mark your email "URGENT — Security Issue" for priority handling.
Our dedicated privacy team is here to help. Contact us anytime to discuss your data rights or learn more about how we protect your information.