Privacy Policy — c8vip

1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "c8vip," "we," "us," "our" refers to the operator of the c8vip Platform at https://c8vip.cam.
• "Platform" means the c8vip website, mobile-optimised interface, and any other digital channel through which c8vip Services are delivered.
• "Member" or "You" means any individual who has registered a c8vip account or who browses the Platform as a visitor.
• "Personal Data" means any information that directly or indirectly identifies a natural person, including name, date of birth, contact details, payment identifiers, and device identifiers.
• "Processing" means any operation performed on Personal Data — collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" means c8vip in its capacity as the entity that determines the purposes and means of processing your Personal Data.
• "Third-Party Processor" means a service provider engaged by c8vip to process Personal Data on our behalf, such as payment gateways and fraud-detection providers.
• "KYC" (Know Your Customer) means the identity and age verification process conducted before processing withdrawals or as required under our risk policies.

2 Data We Collect

c8vip collects Personal Data in the following categories:

3 How We Collect Your Data

c8vip collects Personal Data through the following channels:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated Collection: Data collected automatically when you use the Platform, including technical and usage data gathered via server logs, session tracking, and analytics tools.
• Cookies and Similar Technologies: Data collected via cookies, web beacons, and local storage mechanisms as described in Section 9 of this policy.
• Third-Party Verification Providers: Identity verification data returned by KYC service providers following document submission. These providers process data on c8vip's behalf and are contractually bound to handle it only for the instructed purpose.
• Payment Processors: Transaction confirmation data returned by local bank payment gateways and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) following deposit or withdrawal instructions.
• Fraud Detection Services: Risk scoring signals provided by fraud-prevention partners based on device fingerprinting and behavioural pattern analysis.

4 How We Use Your Personal Data

c8vip uses Personal Data for the following purposes:

• Account Management: Creating, maintaining, and securing your c8vip account, including processing login requests and enforcing the one-account-per-person policy.
• Service Delivery: Processing deposits and withdrawals in Indonesian Rupiah (IDR) through your chosen bank or e-wallet, settling bets and game outcomes, and crediting bonus funds where applicable.
• Identity & Age Verification: Confirming that all Members are at least 21 years of age and are the legitimate holders of the payment methods registered to their accounts, in compliance with our KYC obligations.
• Fraud & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the Platform.
• Responsible Gaming: Monitoring usage patterns to identify potential signs of problem gambling and applying voluntary or mandatory intervention tools including deposit limits, session time limits, and self-exclusion.
• Customer Support: Responding to enquiries, processing complaints, and resolving disputes submitted by Members via the support channels.
• Legal & Regulatory Compliance: Fulfilling obligations imposed by applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection regulations.
• Platform Improvement: Analysing aggregated and anonymised usage data to identify bugs, optimise performance, and develop new features that better serve Indonesian players.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal status updates, security alerts) and, where you have opted in, promotional messages about offers and new game titles.

5 Legal Basis for Processing

c8vip processes your Personal Data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and c8vip — primarily account management, transaction processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML/CTF obligations, and record-keeping requirements.
• Legitimate Interests: Processing for purposes of fraud prevention, platform security, and product improvement, where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

c8vip does not sell, rent, or trade your Personal Data. We share your data with third parties only in the following limited circumstances:

• Payment Processors: Banks and e-wallet providers (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data required to execute deposit and withdrawal instructions.
• KYC & Identity Verification Providers: Identity document data is shared with contracted verification service providers solely for the purpose of confirming your identity and age. These providers operate under strict data processing agreements.
• Fraud Detection Partners: Technical and behavioural data may be shared with fraud-prevention platforms to generate risk signals. No directly identifying personal data is transmitted beyond what is required for this function.
• IT Infrastructure Providers: Hosting, cloud storage, and content-delivery providers that store and process Platform data on c8vip's behalf, subject to binding contractual data security obligations.
• Legal & Regulatory Authorities: Personal Data may be disclosed to competent authorities, courts, or regulators where required by law, court order, or regulatory mandate — and only to the extent required by that obligation.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of c8vip's assets, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. Members will be notified of any such transfer prior to its completion.

All third-party processors engaged by c8vip are contractually required to process your data only for the specified purpose, to maintain appropriate security standards, and to delete or return data upon termination of the engagement.

7 Data Retention

c8vip retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, subject to the following retention periods:

• Active Account Data: Retained for the duration of the account relationship and until all outstanding balances, disputes, and bonus conditions are resolved.
• Transaction Records: Financial transaction records (deposits, withdrawals, bet settlements) are retained for a minimum of five (5) years following the transaction date, in line with standard financial record-keeping obligations.
• KYC Documentation: Identity verification documents are retained for five (5) years following account closure, or longer where required by applicable law.
• Support Communications: Customer support records are retained for three (3) years following the close of the relevant support interaction.
• Closed Account Data: Upon account closure, personally identifying data not subject to a longer statutory retention period is deleted within ninety (90) days. Anonymised usage data may be retained indefinitely for statistical analysis.
• Self-Excluded Members: Where a Member has applied for self-exclusion, their exclusion status and associated data are retained for the full duration of the exclusion period plus a further three (3) years, to prevent re-registration during the exclusion window.

8 Security Measures

c8vip employs industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and the Platform.
• AES-256 encryption for sensitive data at rest, including payment credentials and identity documents.
• Role-based access controls limiting employee access to Personal Data to those with a demonstrable operational need.
• Multi-factor authentication (MFA) enforced for all internal systems handling Member data.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security auditors.
• Automated intrusion detection and real-time security monitoring with 24/7 incident response capability.
• Segregated data environments ensuring that production Member data is isolated from development and testing systems.

9 Cookies & Tracking Technologies

c8vip uses cookies and similar technologies to ensure the Platform functions correctly, to maintain your session security, and to understand how Members use our Services. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Essential for the Platform to operate. These cookies manage your login session, maintain account security, and enable core transaction functionality. They cannot be disabled without rendering the Platform unusable.
• Performance & Analytics Cookies: Collect anonymised information about how visitors navigate the Platform — which pages are visited most frequently, session duration, and error events. This data is used solely to improve Platform performance.
• Functional Cookies: Remember your preferences — such as preferred language settings, last-used payment method, and notification preferences — to provide a more personalised experience on return visits.
• Fraud Prevention Cookies: Support our fraud detection systems by identifying unusual session patterns that may indicate account compromise or multi-accounting attempts.

You can manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. c8vip does not use third-party advertising or retargeting cookies.

10 Your Privacy Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your Personal Data held by c8vip:

• Right of Access: You may request a copy of all Personal Data c8vip holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held in your account profile.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that c8vip restrict the processing of your Personal Data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: You may request a structured, machine-readable copy of the Personal Data you provided to c8vip, where processing is based on consent or contract.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact c8vip support at the email address in Section 13. We will respond to verified requests within thirty (30) calendar days. We may need to verify your identity before processing a request to protect against unauthorised access to another Member's data.

11 Children's Privacy

The c8vip Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. If you have reason to believe that a person under 21 has provided Personal Data to c8vip, please contact our support team immediately. Upon confirmation, we will delete the relevant data without undue delay and close any account found to have been registered by an underage individual.

c8vip employs age verification controls during the registration process and as part of KYC procedures precisely to enforce this restriction. Providing false date-of-birth information to circumvent these controls constitutes a material breach of our Terms & Conditions.

12 Changes to This Privacy Policy

c8vip reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When we make material changes, we will:

• Update the "Effective Date" at the top of this page.
• Notify registered Members via email or an in-platform notification at least fourteen (14) days before the updated policy takes effect.
• Where changes involve a new basis for processing or a new category of data, request fresh consent where required by applicable law.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with the revised policy, you must discontinue use of the Platform and may close your account by contacting support.

13 Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact the c8vip Data Privacy team at:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days.
• Language: Support is available in English and Indonesian. For privacy rights requests, please submit in English where possible to ensure accurate processing.

When submitting a data rights request, please include your registered email address and a clear description of the right you wish to exercise. We may ask you to verify your identity by providing a copy of an acceptable government-issued ID before processing the request.