c8vip Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings defined below:

• "c8vip", "we", "us", or "our" — refers to the operator of the c8vip platform accessible at https://c8vip.bio, including its operators, administrators, and affiliated entities.
• "Platform" — means the c8vip website, mobile-optimised site, all sub-pages, game interfaces, account dashboard, and any other service accessible under the c8vip domain.
• "Member", "You", or "your" — refers to any individual who accesses the Platform or holds a registered c8vip Account.
• "Personal Data" — means any information that identifies or can reasonably be used to identify a natural person, including but not limited to name, email address, phone number, payment details, device identifiers, and IP address.
• "Processing" — means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "KYC" — means Know Your Customer, the identity and age verification procedure required to comply with anti-money-laundering standards and to confirm that Members meet the minimum age requirement of 21 years.
• "Third-Party Service Provider" — means any external company engaged by c8vip to deliver services in connection with the Platform, such as payment processors, Game Providers, cloud hosting providers, and fraud-detection services.
• "IDR Wallet" — means the virtual balance account denominated in Indonesian Rupiah (IDR / Rp) associated with each Member's c8vip Account.

c8vip acts as the data controller for all Personal Data collected through the Platform. As data controller, c8vip determines the purposes and means by which your Personal Data is processed. All data-related enquiries, requests, and complaints should be directed to c8vip's designated data contact, reachable at the email address listed in Section 15 of this policy.

c8vip operates as an internationally licensed offshore platform. The Platform is designed to serve players in Indonesia, and all payment methods, customer support, and communications are tailored to the Indonesian market. However, the Platform's data-processing infrastructure may be located in jurisdictions outside Indonesia, as further described in Section 8 (International Transfers).

c8vip collects Personal Data across several categories depending on how You interact with the Platform. The following table summarises the categories of data we collect and the context in which each is gathered:

c8vip does not collect sensitive categories of Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) unless strictly required by applicable law or regulatory obligation, and never for marketing purposes.

c8vip collects your Personal Data through the following channels:

• Direct Submission: Data You voluntarily provide when creating your Account, completing the KYC process, adding payment methods, contacting support, or updating your profile settings.
• Automated Technologies: Technical and Usage Data collected automatically via cookies, web beacons, server logs, and session-tracking technologies each time You access the Platform. See Section 11 for full details on cookies.
• Payment Processors: Transaction confirmation data returned to c8vip by local Indonesian payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) following a deposit or withdrawal instruction.
• Identity Verification Services: Confirmation data returned by our third-party KYC and age-verification service providers after they have reviewed documents You submitted.
• Fraud Detection Partners: Risk signals, device fingerprint data, and behavioural indicators provided by third-party fraud-prevention services that c8vip uses to protect the integrity of the Platform.
• Game Providers: Aggregated game-round data, bet histories, and RNG audit logs supplied by third-party Game Providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) in connection with games played on the Platform.

c8vip processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing that is required to perform our contractual obligations to You as a Member — including operating your Account, processing deposits and withdrawals in IDR, providing access to games, and delivering customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) checks, age verification, KYC documentation requirements, and fraud-prevention duties imposed on licensed gaming operators.
• Legitimate Interests: Processing carried out in pursuit of c8vip's legitimate operational interests — including fraud detection, platform security, service improvement, and responsible gaming monitoring — provided that those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit, freely given consent — primarily in respect of marketing communications (promotional emails, push notifications about bonuses and seasonal offers tied to events such as Ramadhan, Idul Fitri, Imlek, and Indonesian Independence Day). You may withdraw consent at any time through your Account preference centre without affecting the lawfulness of prior processing.

c8vip uses the Personal Data it collects for the following purposes:

• Account Management: Creating and maintaining your Member Account, processing login sessions, and enabling Account dashboard features including IDR Wallet management and responsible gaming controls.
• Payment Processing: Facilitating deposits and withdrawals via Indonesian local banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja); reconciling IDR transaction records; and detecting payment anomalies.
• Identity Verification (KYC): Confirming that Members are aged 21 or older and that the identity registered on the Account matches the payment method used for withdrawals, in compliance with our AML obligations.
• Game Delivery: Enabling access to slots, live casino, sportsbook markets, and specialty games; recording bet histories; calculating and crediting winnings; and resolving game disputes.
• Bonus & Promotions Administration: Tracking bonus eligibility, monitoring Wagering Requirement progress, preventing multi-account bonus abuse, and delivering personalised promotional offers where You have consented to receive them.
• Customer Support: Responding to enquiries, resolving complaints, and maintaining records of support interactions to ensure service quality.
• Platform Security & Fraud Prevention: Monitoring for suspicious login activity, detecting bot-assisted wagering, identifying multi-accounting, and protecting all Members from fraudulent conduct on the Platform.
• Responsible Gaming Compliance: Enforcing deposit limits, loss limits, session reminders, cooling-off periods, and self-exclusion orders that You or c8vip have activated on your Account.
• Legal & Regulatory Compliance: Retaining records as required by applicable gaming licence conditions, responding to lawful requests from regulatory authorities, and exercising or defending legal claims.
• Platform Improvement: Analysing aggregate usage patterns to improve the performance, layout, and game offering of the Platform. Such analysis uses anonymised or pseudonymised data wherever possible.

c8vip does not sell, rent, or commercially disclose your Personal Data to unaffiliated third parties. We share your data only in the following limited circumstances:

• Payment Processors & Banking Partners: We share the minimum necessary financial and identity data with Indonesian payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) to execute deposit and withdrawal instructions in IDR.
• KYC & Fraud Detection Providers: Identity documents and risk signals are shared with our contracted KYC verification and fraud-prevention service providers solely for the purpose of identity confirmation and fraud mitigation.
• Game Providers: Limited technical data (e.g., session tokens, bet instructions) is passed to third-party Game Providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) to enable gameplay. These providers are contractually prohibited from using this data for their own marketing or commercial purposes.
• Cloud Hosting & Infrastructure Providers: Personal Data is stored on secure cloud infrastructure operated by contracted hosting providers. These providers act as data processors under binding data-processing agreements and have no independent right to use your data.
• Legal & Regulatory Authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required by applicable law, court order, or where disclosure is necessary to prevent fraud, money laundering, or harm to persons.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of c8vip's business, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer that materially affects your rights under this policy.

c8vip's Platform infrastructure and some of its Third-Party Service Providers are located outside Indonesia. As a result, your Personal Data may be transferred to, stored in, or processed in jurisdictions that have different data-protection frameworks from those applicable in Indonesia.

Whenever c8vip transfers Personal Data internationally, we ensure that appropriate safeguards are in place to protect the data to a standard equivalent to the protections described in this Privacy Policy. These safeguards include:

• Transfers to jurisdictions recognised as providing an adequate level of data protection by the applicable supervisory authority.
• Contractual clauses binding the recipient to process data only for the specified purpose, maintain equivalent security standards, and support the exercise of data-subject rights.
• Technical measures including 256-bit SSL/TLS encryption in transit and AES-256 encryption at rest, ensuring that data cannot be meaningfully accessed even if intercepted during transfer.

c8vip retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply:

Once a retention period expires, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual Member.

c8vip applies a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. Our key technical and organisational security measures include:

• Transport Encryption: All data transmitted between your browser or device and the c8vip Platform is encrypted using 256-bit TLS (Transport Layer Security). The padlock icon visible in your browser confirms an active, valid SSL certificate on every Platform page.
• Data-at-Rest Encryption: Personal Data stored in our databases — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Password Security: Member passwords are never stored in plaintext. All passwords are hashed using a strong, salted cryptographic hashing algorithm (bcrypt) before being written to our databases. c8vip staff cannot retrieve your original password.
• Access Controls: Access to production systems and Member data is restricted to authorised c8vip personnel on a strict need-to-know basis. All administrative access is logged, monitored, and subject to multi-factor authentication (MFA).
• Fraud & Anomaly Detection: Automated systems continuously monitor login activity, transaction patterns, and gameplay behaviour for signs of account takeover, credential stuffing, or fraudulent conduct. Suspicious activity triggers real-time alerts and may result in a temporary Account hold pending review.
• Penetration Testing & Audits: c8vip engages third-party security professionals to conduct regular penetration tests and security audits of the Platform infrastructure.

c8vip uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and analyse usage patterns. A cookie is a small text file placed on your device by the Platform when You visit. Cookies do not contain executable code and cannot access other files on your device.

c8vip uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies manage your login session, maintain your IDR Wallet state, enforce responsible gaming controls, and prevent cross-site request forgery (CSRF). They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences — such as your selected language, display settings, and last-visited game category — to personalise your experience across sessions. Disabling these cookies means preferences will not be saved between visits.
• Analytical Cookies: Collect anonymised or pseudonymised data about how Members navigate the Platform, which pages are visited most frequently, and where users encounter errors. This data helps c8vip improve the Platform. Where third-party analytics tools are used, they are configured to anonymise IP addresses before storage.
• Security & Fraud-Detection Cookies: Used to identify devices associated with suspicious or fraudulent activity, distinguish human users from automated bots, and flag sessions that exhibit patterns consistent with multi-accounting or bonus abuse.

Most web browsers accept cookies by default. You can configure your browser to block or delete cookies at any time. However, blocking strictly necessary cookies will prevent you from logging in and using the Platform. For guidance on managing cookies in your browser, refer to your browser's help documentation.

As a Member of c8vip, You hold the following rights with respect to your Personal Data. To exercise any of these rights, contact c8vip at the email address in Section 15. We will acknowledge your request within 72 hours and aim to provide a substantive response within 30 calendar days.

• Right of Access: You may request a copy of the Personal Data c8vip holds about You, along with information about the purposes for which it is processed and the third parties with whom it has been shared.
• Right to Rectification: You may request correction of any Personal Data that is inaccurate or incomplete. Many data fields — including email address, phone number, and payment method details — can be updated directly in your Account dashboard without contacting support.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where You withdraw consent (and no other legal basis applies), or where processing is unlawful. This right is subject to overriding legal obligations — for example, c8vip is required to retain KYC and transaction records for a minimum of five to seven years under AML regulations and cannot erase these earlier upon request.
• Right to Restriction of Processing: You may request that c8vip restrict processing of your Personal Data in specific circumstances — for example, while the accuracy of data is disputed, or while a processing objection is being assessed.
• Right to Data Portability: You may request that c8vip provide your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that You can transfer it to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling conducted for responsible gaming monitoring purposes. You also have an unconditional right to object to processing for direct marketing at any time, which c8vip will action immediately.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), You may withdraw consent at any time through your Account preference centre. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

c8vip strictly prohibits access to the Platform by any person under the age of 21. The Platform is not directed at minors, and c8vip does not knowingly collect Personal Data from individuals below the age of 21.

As part of the KYC process, every Member is required to provide documentary proof of age (National ID Card / KTP, passport, or driver's licence) before any withdrawal is processed. Where c8vip has reasonable grounds to suspect that a Member may be under 21, the Account will be suspended pending age verification and no withdrawals will be processed during the suspension period.

If c8vip discovers that Personal Data has been collected from a person under 21 as a result of misrepresentation during registration, that Account will be immediately closed, all balances will be forfeited, and the relevant Personal Data will be securely deleted to the extent permitted by our legal obligations.

Parents and guardians who believe that a minor in their care has accessed c8vip without authorisation are encouraged to contact our support team immediately at [email protected] so that the Account can be investigated and closed without delay.

c8vip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. The "Last updated" date at the top of this page will always indicate when the most recent revision was made.

Where an amendment is material — meaning it significantly changes how we collect, use, or share your Personal Data — c8vip will notify Members by placing a prominent notice on the Platform and, where practicable, by sending an email notification to the address registered on your Account. We will provide a reasonable notice period before the amended policy takes effect.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If You do not agree with the revised policy, You should cease using the Platform and contact support to arrange withdrawal of your remaining IDR Wallet balance and closure of your Account.

If You have any questions about this Privacy Policy, wish to exercise any of your data-subject rights, or want to raise a privacy concern, please contact c8vip's data contact using the details below. All privacy enquiries are handled with strict confidentiality.

• Email: [email protected] — please use the subject line "Privacy Request — [Your Username]" for data-subject rights requests.
• Live Chat: Available 24/7 directly on the c8vip Platform. Average first-response time: under 5 minutes. Indonesian-speaking agents are available at all hours.
• Response Time: Privacy enquiries are acknowledged within 72 hours. Substantive responses to data-subject rights requests are provided within 30 calendar days of identity verification.
• Support Hours: 24/7 — WIB (UTC+7), covering Jakarta, Surabaya, Bandung, Medan, Bali, and all of Western Indonesia Time.