Privacy Policy — vnd606

This Privacy Policy ("Policy") describes how vnd606 ("we", "us", "our", or "the Company") collects, uses, stores, shares, and protects the personal data of individuals ("you", "User", "Player") who access or use the vnd606 online betting platform at https://vnd606.cam (the "Platform").

This Policy applies to all personal data processing activities connected with the Platform, including account registration, identity verification, deposit and withdrawal processing, customer support interactions, promotional communications, and responsible gaming programme administration. It applies to players based in Indonesia and to all other jurisdictions from which the Platform is accessible.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

vnd606 is the data controller for all personal data collected through the Platform. As data controller, vnd606 is responsible for determining the purposes and means of processing your personal data, and for ensuring that such processing is conducted lawfully, fairly, and transparently.

If you have any questions about how your data is handled, or wish to exercise any of the rights described in Section 9, please contact our Data Privacy team using the details provided in Section 16. We will acknowledge all privacy-related enquiries within 2 business days and provide a substantive response within 14 business days.

The categories of personal data that vnd606 may collect about you are set out in the table below. We collect only what is necessary for the stated purposes — we do not collect sensitive special-category data (such as racial or ethnic origin, political opinions, or health data) unless specifically required by responsible gaming or AML obligations, and in such cases only with your explicit consent or as required by law.

vnd606 collects personal data through the following channels:

• Direct Provision: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or claiming a promotion.
• Automated Technical Collection: Data collected automatically when you access the Platform, including your IP address, device identifiers, browser fingerprint, session activity, and cookie data. This collection occurs via server logs, analytics scripts, and our fraud-detection systems.
• Payment Processors: When you make a deposit or withdrawal, our payment service providers (including those facilitating BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions) share transaction confirmation data with vnd606 for the purpose of crediting your wallet and maintaining accurate financial records.
• Identity Verification Partners: For KYC processing, vnd606 works with third-party identity verification providers who may cross-reference the documents you submit against official databases. These providers are bound by data processing agreements that restrict their use of your data to the KYC purpose only.
• Responsible Gaming Registries: Where you have self-excluded through a third-party responsible gaming registry, vnd606 may receive data from that registry for the purpose of enforcing your self-exclusion across the Platform.

vnd606 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions — including creating and managing your account, processing deposits and withdrawals, and resolving disputes.
• Legal Obligation: Processing is required to comply with our obligations under anti-money-laundering (AML) regulations, KYC requirements, responsible gaming laws, tax reporting obligations, and the conditions imposed by our international gaming licence.
• Legitimate Interests: Processing is necessary for vnd606's legitimate business interests, including preventing fraud, securing the Platform, improving service quality, and conducting internal analytics. These interests are balanced against your privacy rights, and we do not process data in ways that would be unexpected or harmful.
• Consent: For marketing communications, non-essential cookies, and certain responsible gaming interventions, we rely on your explicit opt-in consent. You may withdraw consent at any time via your account settings or by contacting support.

vnd606 uses the personal data we collect for the following specific purposes:

1. Account Administration: Creating, maintaining, and securing your vnd606 account, including authenticating login attempts, resetting passwords, and managing session timeouts.
2. Transaction Processing: Crediting deposits to your wallet, processing withdrawal requests, reconciling transaction records, and generating receipts and account statements.
3. KYC & Compliance: Verifying your identity and age, screening against sanctions lists and politically exposed persons (PEP) databases, conducting AML reviews, and fulfilling our obligations under our international gaming licence.
4. Game Operation: Enabling you to place bets on sportsbooks (including BRI Liga 1, EPL, La Liga, Champions League, MotoGP), play casino games (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming), participate in togel draws (Singapore, Hongkong, Sydney, Macau), and use all other gaming products offered on the Platform.
5. Responsible Gaming: Monitoring account activity for signs of problem gambling behaviour, enforcing deposit limits and session time-outs, processing time-out and self-exclusion requests, and providing appropriate responsible gaming interventions when risk indicators are detected.
6. Customer Support: Responding to enquiries submitted via live chat, email, or support ticket system, resolving complaints, investigating disputed transactions, and maintaining support interaction history for quality assurance.
7. Fraud Prevention: Detecting duplicate accounts, identifying collusion or match-fixing activity, preventing bonus abuse, screening for automated bot activity, and investigating suspicious transaction patterns.
8. Marketing (With Consent): Sending promotional emails and SMS messages about bonuses, tournaments, and special offers tied to events such as Ramadhan, Idul Fitri, Champions League finals, and Piala AFF. Marketing communications are sent only to users who have opted in via the account settings page.
9. Platform Improvement: Conducting aggregate analytics on user behaviour, identifying performance bottlenecks, optimising game loading times, and improving the user interface. All analytics are performed on aggregated or pseudonymised data where possible.
10. Legal & Regulatory Compliance: Responding to court orders, regulatory audits, law enforcement requests, and tax authority reporting requirements.

vnd606 does not sell, rent, or trade your personal data to third parties. However, we may share your data with the following categories of recipients under the circumstances described below:

• Payment Service Providers: To process deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja, we share transaction data (amount, timestamp, account identifier) with our payment gateway partners. These providers act as data processors and are contractually prohibited from using your data for any purpose other than processing the specific transaction.
• KYC & Identity Verification Partners: The identity documents and personal information you submit during KYC verification are shared with our third-party verification providers for document authentication and database cross-referencing. These providers are based in jurisdictions with strong data-protection laws and are bound by strict data processing agreements.
• Game Providers: To enable you to play casino games and slots from Pragmatic Play, Evolution Gaming, NetEット, Microgaming, Spribe, and Pocket Games Soft, we share your User ID and session token with these providers. No financial data or identity documents are shared with game providers.
• Cloud Hosting Providers: The Platform and associated databases are hosted on secure cloud infrastructure. Our hosting providers have access to encrypted server data but are contractually prohibited from accessing or processing the underlying personal data.
• Regulatory Authorities: We may disclose your data to our licensing authority, financial intelligence units, or other regulatory bodies when required by law or by the conditions of our licence. This includes AML transaction reporting, suspicious activity reports, and responsible gaming compliance audits.
• Law Enforcement: We may disclose your data in response to a valid court order, subpoena, or law enforcement request. Where permitted by law, we will notify you of such disclosure unless legally prohibited from doing so.
• Professional Advisors: We may share your data with our legal, accounting, and compliance advisors when necessary to obtain professional advice on specific cases. These advisors are bound by professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of vnd606's business, your personal data may be transferred to the acquiring entity. You will be notified via email at least 30 days before such transfer takes effect, and you will have the option to close your account before the transfer occurs.

vnd606 retains personal data for as long as necessary to fulfil the purposes for which it was collected, plus any additional period required by applicable legal or regulatory obligations. Our standard retention periods are as follows:

• Active Account Data: Retained for the lifetime of your account plus 7 years after account closure. This includes all identity, contact, financial, and transaction data. The 7-year post-closure retention period is required by AML regulations and our licensing authority.
• KYC Documents: Retained for 7 years after the date of your last transaction. This retention period is mandated by anti-money-laundering regulations applicable to our licence jurisdiction.
• Communications Records: Live chat transcripts, email correspondence, and support tickets are retained for 3 years after the date of the communication. This enables us to refer back to prior support interactions when resolving disputes.
• Marketing Consent Records: Records of your marketing opt-in/opt-out status are retained indefinitely to ensure we do not send unwanted communications. If you opt out, we retain a suppression record to prevent re-enrolment.
• Technical Logs: Server logs, IP addresses, and device identifiers are retained for 12 months for security and fraud-detection purposes. After 12 months, logs are anonymised or deleted.
• Responsible Gaming Data: Self-exclusion requests are retained permanently to ensure exclusions remain enforced even if you attempt to re-register. Deposit limit and time-out settings are retained for the lifetime of the account.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. If you request account closure for responsible gaming reasons, we will retain only the minimum data necessary to enforce the closure and prevent re-registration during the exclusion period.

Under applicable data protection laws, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Privacy team using the details in Section 16.

We will respond to all data rights requests within 14 business days. If your request is complex or we receive multiple requests from you, we may extend this period by a further 14 days and will notify you of the extension. We do not charge a fee for processing data rights requests unless the request is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee or refuse the request.

vnd606 uses cookies and similar tracking technologies to deliver core Platform functionality, enhance user experience, and conduct analytics. Cookies are small text files placed on your device that allow the Platform to recognise you on subsequent visits.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for Platform operation. These include session cookies that maintain your login state, CSRF protection tokens, and load-balancing cookies. You cannot opt out of these cookies — without them, the Platform cannot function.
• Performance & Analytics Cookies: Collect aggregated data on how users interact with the Platform, including page views, session duration, and navigation paths. This data is used to identify performance issues and improve the user interface. We use Google Analytics with IP anonymisation enabled.
• Functionality Cookies: Remember your preferences, such as language selection (though vnd606 is English-only, this may apply to future localisation), favourite games, and display settings.
• Targeting & Advertising Cookies: vnd606 does not currently use third-party advertising cookies. If we introduce such cookies in future, we will seek your explicit consent via a cookie consent banner.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, blocking strictly necessary cookies will prevent you from using the Platform. Blocking performance or functionality cookies may degrade your user experience.

vnd606 is an adults-only platform. We do not knowingly collect personal data from any individual under the age of 21. All users must be at least 21 years of age, as stated in our Terms & Conditions. This age threshold is higher than the international standard of 18 and reflects our commitment to the regulatory context of the Indonesian market.

If we become aware that we have inadvertently collected data from a person under 21, we will immediately suspend the account, delete the account data (except for records required for regulatory reporting), and return any deposited funds to the funding source. Parents and guardians who believe their child has registered an account on vnd606 should contact support immediately at [email protected].

We employ multiple safeguards to prevent underage access, including mandatory date-of-birth input at registration, document-based age verification during KYC, and periodic account reviews flagged by suspicious deposit patterns or behavioural indicators.

vnd606 employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. Our security framework includes:

• Encryption: All data in transit between your browser and vnd606 servers is protected by TLS 1.3 encryption with 256-bit keys. Data at rest (stored on our servers) is encrypted using AES-256 encryption.
• Access Controls: Administrative access to player data is restricted to authorised personnel only, on a strict need-to-know basis. All access is protected by multi-factor authentication (MFA) and logged for audit purposes.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) mitigation services. Regular penetration testing is conducted by independent security auditors.
• Staff Training: All vnd606 employees and contractors with access to personal data undergo mandatory privacy and security training upon onboarding and annually thereafter.
• Incident Response: We maintain a documented data breach response plan. In the event of a security incident that affects your personal data, we will notify you within 72 hours via email and via a notice on the Platform homepage, in accordance with applicable breach notification laws.
• Third-Party Security: All third-party processors (payment gateways, KYC providers, cloud hosting) are subject to security audits and must demonstrate compliance with ISO 27001 or equivalent security standards before being onboarded.

Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for notifying us immediately if you suspect unauthorised access to your account.

As vnd606 operates under an international offshore gaming licence and uses cloud infrastructure and service providers located in multiple jurisdictions, your personal data may be transferred to, stored in, and processed in countries outside Indonesia. These countries may have data protection laws that differ from those of Indonesia.

Where we transfer personal data to a country that does not provide an adequate level of data protection as determined by Indonesian or international standards, we implement appropriate safeguards, including:

• Standard contractual clauses (SCCs) approved by the European Commission or equivalent bodies.
• Certification under recognised international privacy frameworks (such as ISO 27701 or equivalent).
• Binding corporate rules for transfers within vnd606's corporate group (if applicable).

You have the right to request information about the safeguards we have put in place for international transfers of your data. Contact our Data Privacy team using the details in Section 16 for further information.

The vnd606 Platform may contain links to third-party websites, including payment gateway interfaces and game provider platforms. This Privacy Policy applies only to data collected by vnd606 — it does not cover data collection practices of third-party sites.

When you click a link to a third-party site or use a third-party service (such as depositing via your bank's online banking portal), you leave the vnd606 Platform and become subject to that third party's privacy policy. We encourage you to review the privacy policies of any third-party services you use. vnd606 is not responsible for the privacy practices or content of third-party sites.

vnd606 may update this Privacy Policy from time to time to reflect changes in our data practices, new regulatory requirements, or enhancements to Platform functionality. When we make material changes that affect how we process your personal data, we will notify you by:

• Sending an email to the address registered on your account at least 14 days before the changes take effect.
• Displaying a prominent notice on the Platform homepage for at least 14 days.
• Requiring you to acknowledge the updated Policy on your next login if the changes are significant.

The "Last Updated" date at the top of this page reflects the date of the most recent material revision. We recommend that you review this Policy periodically to stay informed about how we protect your data.

Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure before the update takes effect.

If you have any questions about this Privacy Policy, wish to exercise any of the rights described in Section 9, or wish to lodge a complaint about how your data has been handled, please contact the vnd606 Data Privacy team:

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction. For Indonesian residents, this may include the relevant ministry or regulatory body with oversight of electronic information and transactions. We will provide you with details of the appropriate supervisory authority upon request.

vnd606 is committed to resolving all privacy complaints fairly and promptly. We will work with you in good faith to address your concerns before you need to escalate to a supervisory authority.