Privacy Policy — 7svip

7svip operates the online sports betting, live casino, and slot gaming platform accessible at 7svip.ws (the "Platform"). For the purposes of this Privacy Policy, 7svip acts as the data controller with respect to the personal data of its members.

7svip is an internationally operated platform with a primary focus on serving players in Indonesia. While the Platform's interface and all legal documentation are presented in English, our support team includes native Indonesian-speaking agents, and our payment infrastructure is fully integrated with Indonesian local banking channels including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI (Bank Syariah Indonesia), and digital wallets such as OVO, DANA, GoPay, ShopeePay, and LinkAja.

All queries regarding this Privacy Policy, including requests to exercise your data rights, should be directed to our Data Protection contact as detailed in Section 15 of this document.

7svip collects personal data in the following categories. The specific data points collected may vary depending on the services you use and the stage of your membership lifecycle.

7svip collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated Collection: Technical data collected automatically when you visit or interact with the Platform, including via cookies, server logs, and analytics tools. See Section 7 for full cookie details.
• Third-Party Sources: Identity verification and AML screening data obtained from licensed third-party KYC and fraud prevention providers. Payment confirmation data received from Indonesian banks and e-wallet operators.
• Public Sources: Publicly available records used to verify identity or detect fraud, including government ID registries where legally accessible.

In all cases, 7svip collects only the minimum data necessary for the stated purpose. Where collection is not legally mandatory, you may decline to provide certain data, but doing so may limit your access to specific Platform features (for example, you cannot process a withdrawal without providing bank account details).

7svip processes your personal data for the following purposes. Each purpose is linked to a defined legal basis, described in full in Section 5.

• Account Management: Creating, maintaining, and securing your 7svip account, including processing your login credentials and enforcing session security.
• Transaction Processing: Facilitating deposits and withdrawals through Indonesian banking channels (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and others) and maintaining accurate transaction records in IDR.
• Identity & Age Verification: Confirming that all members are at least 21 years of age and providing accurate identity information in compliance with our KYC obligations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML) regulations, our licensing terms, and any lawful requests from competent authorities.
• Service Personalisation: Tailoring your Platform experience based on your game preferences, betting history, and regional context (for example, prioritising BRI Liga 1 markets for members in Jakarta and Surabaya).
• Responsible Gaming: Monitoring behavioural data to identify patterns consistent with problem gambling and proactively offering support tools such as deposit limits, cool-off periods, and self-exclusion.
• Marketing Communications: Sending you promotional emails, bonus notifications, and seasonal campaign alerts (for example, Idul Fitri reload bonus offers) where you have opted in. You may opt out at any time via your account settings or by emailing [email protected].
• Platform Improvement: Analysing aggregated behavioural data to improve game selection, interface usability, and payment processing speed.
• Legal Claims: Establishing, exercising, or defending legal claims in the event of a dispute.

7svip processes personal data on the following legal bases, applied contextually according to the nature of each processing activity:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a member — including account management, payment processing, and game delivery. Without this processing, the service cannot function.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC and AML obligations, record-keeping requirements, and lawful requests from competent authorities.
• Legitimate Interests: Processing carried out for 7svip's legitimate business interests, including fraud prevention, platform security, service quality improvement, and responsible gaming monitoring — provided these interests are not overridden by your privacy rights.
• Consent: Where processing is based on consent (for example, marketing emails, optional analytics cookies), you have the right to withdraw your consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent does not affect the operation of your account.

7svip does not sell or rent your personal data to any third party. We share data only in the limited circumstances described below, and in each case we apply appropriate contractual and technical safeguards to protect your information.

• Payment Processors & Banking Partners: Your financial data is shared with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals. These entities process your data under their own privacy policies and applicable financial regulations.
• KYC & AML Providers: Identity verification data is shared with licensed third-party KYC and anti-money laundering screening providers to fulfil our compliance obligations. These providers are bound by strict confidentiality agreements and may not use your data for any purpose beyond the verification service.
• Game Content Providers: Certain game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe) may receive technical session data necessary to deliver their games within the Platform environment. No personally identifiable information beyond an anonymised session token is shared with game studios.
• Technology Infrastructure: Cloud hosting, content delivery, and cybersecurity service providers who operate the technical infrastructure on which 7svip runs. All infrastructure partners are bound by data processing agreements and may not use your data independently.
• Legal & Regulatory Authorities: 7svip will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by law or where we reasonably believe disclosure is necessary to protect the rights, safety, or property of 7svip, its members, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of 7svip's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected members will be notified in advance.

7svip uses cookies and similar tracking technologies to operate the Platform, maintain your session state, detect fraud, and analyse usage patterns. The following cookie categories are in use:

You may manage non-essential cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent access to the Platform. For a full list of cookies deployed by 7svip, including third-party cookie names and their specific purposes, contact our support team at [email protected].

7svip retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:

• Active Account Data: Retained for the full duration of your membership and for a period of five (5) years following account closure, in compliance with standard financial record-keeping obligations.
• KYC & Identity Documents: Retained for five (5) years after account closure, or longer if required by AML regulations applicable in the jurisdiction in which 7svip is licensed.
• Transaction Records (Deposits & Withdrawals): Retained for seven (7) years from the date of each transaction, consistent with international financial audit standards.
• Support Communications: Retained for three (3) years from the date of each interaction, to support dispute resolution and quality assurance.
• Marketing Preferences & Opt-In Records: Retained for three (3) years from the date of opt-in, or until you withdraw consent, whichever is earlier.
• Analytics Data: Aggregated and anonymised within 24 months of collection; individual-level analytics data is deleted upon account closure.
• Dormant Account Data: If your account has been inactive for 24 consecutive months, 7svip will notify you and may archive or close the account. Archived data is retained as per the schedule above.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the individual's identity.

7svip implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes:

• Transport Layer Security (TLS 1.3): All data in transit between your device and our servers is encrypted using TLS 1.3, the current industry standard for secure internet communications.
• AES-256 Encryption at Rest: Sensitive data stored in our databases — including identity documents, financial records, and hashed credentials — is encrypted using AES-256 symmetric encryption.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts. 7svip staff accounts require 2FA as a mandatory security control.
• Access Controls: Personal data is accessible only to 7svip personnel who require it for a specific, defined business purpose. Role-based access controls (RBAC) are enforced across all internal systems.
• Regular Penetration Testing: 7svip engages independent cybersecurity professionals to conduct regular penetration tests and vulnerability assessments of the Platform infrastructure.
• Intrusion Detection Systems (IDS): Automated systems monitor network traffic and system activity for anomalous patterns indicative of an attempted breach or unauthorised access.
• Incident Response Plan: 7svip maintains a documented data breach incident response plan. In the event of a confirmed breach affecting member data, affected individuals will be notified within 72 hours of the breach being identified, along with guidance on protective steps to take.

As a 7svip member, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verifiable request.

Please note that certain rights may be limited or overridden by our legal obligations — for example, we cannot delete transaction records required for AML compliance within the mandatory retention period. Where a request cannot be fulfilled in full, 7svip will explain the specific legal basis for the limitation in our response.

The 7svip Platform is strictly intended for adults aged 21 years and older. 7svip does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the registration process, and additional KYC checks are carried out to confirm the age of members prior to the processing of their first withdrawal.

As an internationally operated platform, certain personal data processed by 7svip may be transferred to, stored in, or processed by infrastructure or service providers located in jurisdictions outside Indonesia. These may include cloud hosting regions in Singapore, Japan, or Europe, depending on the infrastructure provider's data centre geography.

Wherever personal data is transferred internationally, 7svip ensures that appropriate safeguards are in place to maintain the level of protection afforded by this Privacy Policy. These safeguards include:

• Standard contractual clauses (SCCs) incorporated into data processing agreements with all international service providers.
• Binding corporate rules where applicable for intra-group transfers.
• Adequacy assessments conducted prior to engaging any new international data processor.
• Contractual obligations requiring international processors to implement security standards equivalent to those described in Section 9 of this Policy.

By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia. In all cases, 7svip remains the data controller responsible for ensuring your data is handled in accordance with this Privacy Policy, regardless of where processing physically occurs.

The 7svip Platform may contain references to third-party services, game studios, or payment providers. While 7svip takes care to work only with reputable partners, we have no control over and accept no responsibility for the privacy practices of third-party websites, services, or applications that are not operated by 7svip.

Game content delivered within the Platform by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe is rendered within an embedded session environment. These providers receive only the minimum technical data necessary to deliver the game session and are bound by confidentiality obligations in their contracts with 7svip. They do not receive your full identity or financial data.

Payment processing interactions with BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja are governed by the respective privacy policies of those financial institutions. 7svip recommends that you review the privacy documentation of any payment provider you use to process deposits or withdrawals through the Platform.

7svip reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, the following notification procedure applies:

• In-Platform Notification: A notice will be displayed on the Platform for at least 14 days prior to the amended Policy taking effect, summarising the key changes in plain language.
• Email Notification: Where the changes are significant — for example, a change in the categories of data collected, a new class of third-party disclosure, or a change in the retention schedule — registered members will receive an email notification to their address on file at least 14 days before the changes take effect.
• Effective Date: The effective date at the top of this document will be updated to reflect the date on which the amended Policy comes into force.
• Continued Use: Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the amended terms, you must close your account and cease using the Platform before the effective date.

All previous versions of this Privacy Policy are archived and available upon request by contacting [email protected]. 7svip recommends that you review this Policy periodically to stay informed of how your data is managed.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 7svip handles your personal data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly within the Platform — the fastest channel for general privacy questions and straightforward data requests.
• Email: [email protected] — use the subject line "Privacy / Data Rights Request" for all formal data rights submissions. We will acknowledge receipt within 48 hours and provide a substantive response within 30 calendar days.
• Formal Complaints: If your concern relates to a potential breach of your data rights, address your email to "Data Protection Officer" at [email protected]. Formal complaints will be escalated to our DPO and handled in accordance with our documented incident response procedure.
• Support Hours: Live chat and email support are available 24 hours a day, 7 days a week, including Indonesian public holidays such as Idul Fitri, Idul Adha, Nyepi, and Indonesian Independence Day (17 August).
• Language: Our support team includes native Indonesian-speaking agents available at all times. While this Privacy Policy is written in English, you may submit your data rights request in Bahasa Indonesia and our team will respond accordingly.

7svip is committed to resolving all privacy-related enquiries fairly and transparently. If you remain dissatisfied with our response to a formal data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.