vm518 Privacy Policy

vm518 ("we", "us", "our") operates the online casino, sportsbook, and gaming platform accessible at https://vm518.bet (the "Platform"). We recognise that the personal data you entrust to us when you register an account and use our Services is a significant responsibility. This Privacy Policy sets out, in clear and plain language, how vm518 collects, uses, stores, shares, and protects that data.

This Policy applies to all personal data processed in connection with your use of the vm518 Platform, including account registration, deposits and withdrawals in Indonesian Rupiah (IDR), gameplay activity, communications with our support team, and participation in promotions and bonus programmes.

By registering a vm518 Account or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. This Policy forms part of the binding agreement between you and vm518, alongside our Terms & Conditions and Responsible Gaming Policy.

The following terms are used throughout this Privacy Policy with the meanings set out below.

vm518 collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your Indonesian government-issued identity document.
• Date of birth (for the purpose of verifying that you meet the 21-year minimum age requirement).
• Indonesian National Identity Card (KTP) number or passport number.
• Residential address in Indonesia.
• Email address.
• Indonesian mobile phone number.

3.2 Financial Data

• Bank account details associated with Indonesian banks used for deposits and withdrawals, including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, and BSI.
• E-wallet account identifiers associated with OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Transaction history: deposits, withdrawals, wagers, wins, and losses processed through your vm518 account in IDR.

3.3 Technical & Usage Data

• IP address and approximate geolocation derived from it.
• Device type, operating system, browser type and version.
• Session timestamps, pages visited, features used, and gameplay activity logs.
• Referring URLs and on-site navigation paths.

3.4 Communications Data

• Records of live chat conversations, email correspondence, and any other written communications exchanged between you and the vm518 support team.
• Responses to surveys, feedback forms, or promotional participation where you voluntarily provide information.

3.5 KYC & Verification Documents

• Copies of identity documents submitted during the KYC process, including KTP scans or passport images.
• Supporting financial documents provided to verify source of funds where required by our compliance team.

vm518 collects personal data through the following channels:

• Directly from you: When you register an account, complete the KYC verification process, make a deposit or withdrawal request, contact the support team, or participate in a promotion.
• Automatically: Through server logs, cookies, and similar tracking technologies when you access and navigate the Platform. See Section 10 (Cookies) for full details.
• From third parties: From identity verification service providers engaged to conduct KYC checks; from payment processors confirming successful transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay; and from fraud prevention and risk management partners where applicable.

vm518 processes your personal data for the following specific purposes:

vm518 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and vm518 — including account registration, payment processing, and access to Services — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC identity verification, age verification, anti-money laundering checks, and record-keeping requirements — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out in the pursuit of vm518's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies is conducted solely on the basis of your explicit, freely given, and withdrawable consent. You may withdraw marketing consent at any time by contacting our support team.

vm518 does not sell your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: To process deposits and withdrawals in IDR, vm518 shares necessary financial identifiers with the relevant payment processing partners supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions.
• Identity Verification Services: To complete KYC checks, identity document data is shared with our contracted verification service providers, who are bound by confidentiality obligations and data protection requirements equivalent to those set out in this Policy.
• Game Technology Providers: Game studios — including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Nolimit City, and Spribe — may receive limited session and gameplay data necessary for game delivery, fairness auditing, and technical support. These providers do not receive identity or financial data.
• Fraud & Risk Management Partners: To detect and prevent fraud, money laundering, and prohibited conduct on the Platform, vm518 may share relevant data with specialist risk management and compliance service providers.
• Legal & Regulatory Authorities: vm518 will disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or regulatory directive. In all such cases, vm518 will disclose only the minimum data necessary to comply with the specific legal requirement.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or part of vm518's business assets, personal data held by vm518 may be transferred to the acquiring entity, subject to equivalent data protection obligations being assumed by that entity.

vm518 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal, regulatory, or contractual obligations.

• Active Account Data: Personal data associated with an active vm518 account is retained for the duration of the account's existence and for a minimum period of five (5) years following account closure, to satisfy financial record-keeping and anti-money laundering compliance requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the closure or suspension of the relevant account, in line with standard regulatory retention requirements.
• Transaction Records: Financial transaction records, including deposit and withdrawal history in IDR, are retained for a minimum of five (5) years following the date of each transaction.
• Support Communications: Records of live chat and email communications with the support team are retained for up to three (3) years, or longer where a dispute or investigation related to those communications remains open.
• Marketing Data: Where you have provided consent to receive marketing communications, the relevant data is retained until you withdraw that consent. Following withdrawal of consent, your details are removed from active marketing lists within thirty (30) days.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.

vm518 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the vm518 Platform is encrypted using 256-bit TLS/SSL protocols, ensuring that data cannot be intercepted by third parties during transmission.
• Encryption at Rest: Sensitive personal data, including identity documents and financial account identifiers, is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within vm518's internal systems is restricted on a need-to-know basis. Staff members are granted access only to the data necessary to perform their specific job functions, and all access is logged and audited.
• Multi-Factor Authentication: Internal systems that process personal data are protected by multi-factor authentication requirements for all personnel.
• Regular Security Audits: vm518 conducts regular internal security reviews and engages independent third-party specialists to perform periodic penetration testing and vulnerability assessments of our systems and infrastructure.
• Incident Response: vm518 maintains a documented data breach response plan. In the event of a security incident that poses a risk to your personal data, you will be notified promptly in accordance with applicable data protection requirements.

vm518 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by a website you visit. vm518 uses the following categories of cookies:

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled through browser settings while the Platform is in active use.

As a player on the vm518 platform, you hold the following rights with respect to your personal data. These rights can be exercised at any time by submitting a request to our support team via live chat or email.

vm518 enforces a strict 21+ policy across all its Services. The Platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21. This restriction applies regardless of the legal gambling age in any particular region of Indonesia or any other jurisdiction.

Where vm518 discovers or is notified that personal data belonging to a person under the age of 21 has been collected — whether through misrepresentation during registration or any other means — the following steps will be taken immediately:

• The associated account will be permanently closed.
• All personal data related to that account will be deleted from vm518's active systems, subject to any mandatory legal retention obligations that may require a minimum period of record-keeping.
• Any Funds deposited into the account will be returned to the original deposit source.
• Relevant authorities may be notified where required by applicable law.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on vm518, please contact our support team immediately via live chat or at [email protected].

The vm518 Platform serves players across Indonesia, including those in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, and Makassar. In the course of delivering the Platform's Services, some personal data may be processed by vm518's technology partners in locations outside Indonesia.

Where such international transfers occur, vm518 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy. These safeguards include contractual data protection clauses binding recipient parties to data protection obligations, and technical security measures consistent with those applied by vm518 to data processed within its own infrastructure.

vm518 does not transfer personal data to third parties in jurisdictions that do not provide adequate data protection standards without first implementing the contractual and technical safeguards described above.

vm518 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the Services offered through the Platform. The most current version of this Policy will always be accessible at https://vm518.bet/privacy-policy, identified by the "Last Updated" date at the top of the page.

Where a material change is made to this Policy — for example, a change to the categories of data collected, the purposes of processing, or the third parties with whom data is shared — vm518 will use reasonable efforts to notify registered Account holders via their registered email address or via a prominent notice on the Platform prior to the change taking effect.

Your continued use of the vm518 Platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the changes and your agreement to the updated terms. If you do not accept a revised Policy, you should stop using the Platform and contact our support team to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vm518 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the vm518 Platform. Indonesian-speaking agents are available at all times to assist with data privacy inquiries.
• Email: [email protected] (plain text — not a clickable link). Please allow up to 30 days for a formal response to data rights requests submitted by email.

When submitting a data rights request, please include your registered account username and a description of your request to allow our team to identify your account and process your request efficiently. vm518 may request additional verification of your identity before processing any data rights request to ensure that personal data is disclosed only to the account holder to whom it belongs.

For questions about responsible gaming tools, self-exclusion, or deposit limits, please visit our Responsible Gaming page. For general platform questions, our FAQ page covers the most common topics in detail.