Your Privacy Matters
to 8sivp

This Privacy Policy ("Policy") is issued by the operator of the 8sivp online gaming platform, accessible at https://8sivp.net and all associated mobile-optimised versions thereof ("Platform"). It describes how 8sivp collects, uses, stores, shares, and protects the personal information of individuals who visit the Platform, register as members, or otherwise interact with 8sivp's services.

This Policy applies to all personal data processed in connection with the 8sivp Platform, regardless of the device or network used to access it. It covers all product verticals offered by 8sivp, including the sportsbook (featuring BRI Liga 1, EPL, Champions League, and other international fixtures), live casino games operated by Evolution Gaming and Pragmatic Play Live, slot titles from Pragmatic Play, NetEnt, Microgaming, and Pocket Games Soft, and togel (Indonesia's traditional numbers lottery) draw markets.

By registering an account or continuing to use the Platform after this Policy's Effective Date, you acknowledge that you have read, understood, and agreed to the data practices described herein. If you do not agree with any part of this Policy, you should cease use of the Platform and close your account in accordance with the Terms & Conditions.

8sivp collects personal data through three primary channels: information you provide directly during registration and account use; information generated automatically as you interact with the Platform; and information received from trusted third-party partners in limited circumstances described below.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, Indonesian residential address (including city — Jakarta, Surabaya, Bandung, Medan, Bali, or elsewhere), mobile phone number, and email address.
• KYC verification documents: National Identity Card (KTP — Kartu Tanda Penduduk), passport copies, selfie photographs, and supporting address verification documents such as recent bank statements issued by BCA, BRI, BNI, Mandiri, or CIMB Niaga.
• Payment data: Bank account numbers, e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction records in IDR. 8sivp does not store full card numbers; payment card data is handled exclusively by PCI-DSS-compliant payment processors.
• Customer support communications: The content of live chat transcripts, email correspondence, and any documents you submit when raising a support request or formal complaint.
• Responsible gaming information: Self-exclusion requests, deposit limit preferences, cooling-off period settings, and any disclosures made to the responsible gaming team.

2.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and behavioural data: Pages visited, session duration, games played (including slot titles and sportsbook markets accessed), bet amounts, wagering patterns, login timestamps, and navigation paths within the Platform.
• Geolocation data: Approximate location derived from IP address (city or region level). 8sivp does not collect precise GPS-level location data.
• Cookie and session data: As described in Section 6 of this Policy.

2.3 Information from Third Parties

• Payment processors: Transaction status confirmations, fraud risk scores, and chargeback notifications from bank transfer and e-wallet partners.
• KYC service providers: Identity verification outcomes and watchlist screening results from contracted identity verification partners.
• Fraud prevention partners: Risk signals and device fingerprint data used to detect multi-accounting, bot activity, and payment fraud.

8sivp processes personal data only for specified, explicit, and legitimate purposes. The table below summarises the primary purposes for which we use the data we collect:

• Account creation and management: Creating and maintaining your 8sivp member account, authenticating your identity at login, and enabling access to all Platform features.
• KYC and age verification: Confirming that you are at least 21 years of age and verifying your identity in accordance with our obligations as an internationally licensed gaming operator. This is mandatory for all members and a prerequisite for withdrawals.
• Payment processing: Processing IDR deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja, and executing withdrawal requests to your registered payment method.
• Fraud prevention and platform integrity: Detecting and preventing multi-accounting, bonus abuse, money laundering, match-fixing, and other activities that threaten the integrity of the Platform or the financial security of other members.
• Responsible gaming monitoring: Monitoring betting patterns that may indicate problem gambling behaviour, enforcing self-exclusion and deposit limits, and proactively contacting members who trigger responsible gaming intervention thresholds.
• Customer support: Responding to enquiries, resolving disputes, processing refund requests, and managing formal complaints through all available support channels.
• Platform improvement and analytics: Analysing aggregated usage data to improve game catalogue, site performance, mobile experience, and feature prioritisation. Individual profiles are not sold or shared for this purpose.
• Marketing communications (opt-in only): Sending promotional emails or in-platform notifications about bonuses, seasonal offers (such as Idul Fitri or Ramadhan promotions), and new game launches — but only where you have explicitly opted in to receive such communications. You may withdraw consent at any time.
• Legal and regulatory compliance: Meeting record-keeping obligations, responding to lawful requests from regulatory or law enforcement authorities, and enforcing the 8sivp Terms & Conditions.

8sivp processes personal data on the following legal bases, which are consistent with internationally recognised data protection principles:

1. Contractual necessity: Processing required to create your account, provide Platform services, and execute financial transactions is necessary for the performance of the contract between you and 8sivp (the Terms & Conditions). Without this processing, 8sivp cannot deliver the services you have registered to receive.
2. Legal obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring, and record-keeping — are required by law under the international gaming licence under which 8sivp operates.
3. Legitimate interests: 8sivp processes data for fraud detection, platform security, responsible gaming monitoring, and Platform analytics on the basis of its legitimate interests in operating a safe, fair, and commercially viable gaming platform. We apply a balancing test to ensure our legitimate interests do not override your rights and freedoms.
4. Consent: Marketing communications (promotional emails, SMS offers) are sent only where you have provided freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time via your account settings or by contacting the support team.

8sivp does not sell, rent, or commercially transfer your personal data to third parties for their own marketing or commercial purposes under any circumstances. Data is shared only in the following limited and controlled situations:

• Payment processors and banking partners: We share the minimum necessary transaction data (name, account number, amount in IDR) with BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallet providers OVO, DANA, GoPay, ShopeePay, and LinkAja to process deposits and withdrawals. These entities act as independent data controllers for their own processing activities and are subject to their own privacy policies and applicable Indonesian banking regulations.
• KYC and identity verification providers: We share identity documents and verification requests with contracted KYC service providers who process this data exclusively on behalf of 8sivp and under strict data processing agreements.
• Fraud prevention and security services: Aggregated or pseudonymised risk signals may be shared with fraud consortium partners to prevent cross-platform abuse. No personally identifiable information is shared without necessity.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a pseudonymised member identifier and session data to facilitate game play and resolve technical disputes. These providers do not receive your name, address, or financial data.
• Law enforcement and regulatory authorities: 8sivp will disclose personal data to competent authorities where required by a valid legal obligation, court order, or regulatory direction. We will notify affected members of such disclosures where legally permitted to do so.
• Corporate restructuring: In the event of a merger, acquisition, or asset sale involving 8sivp, member data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.

8sivp uses cookies and similar technologies (including local storage, session storage, and pixel tags) to operate and improve the Platform. The following categories of cookies are used:

8sivp does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts that would enable third parties to build a profile of your browsing behaviour across websites unrelated to 8sivp.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling functional or performance cookies will not prevent you from accessing the Platform but may reduce the quality of your experience.

8sivp employs a layered security architecture to protect personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• Transport security: All data transmitted between your device and the 8sivp Platform is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Storage security: Personal data at rest is stored in encrypted databases. Account passwords are hashed using a strong adaptive hashing algorithm (bcrypt or equivalent) and are never stored in recoverable plain-text form. 8sivp staff cannot retrieve your password; only a password reset is possible.
• Access controls: Access to production systems containing personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and regularly audited. Multi-factor authentication is required for all staff accessing sensitive data environments.
• Network security: The Platform infrastructure is protected by Web Application Firewalls (WAF), DDoS mitigation services, and intrusion detection systems. Regular penetration testing is conducted by independent security professionals.
• Incident response: 8sivp maintains a documented data breach response plan. In the event of a confirmed data breach affecting member personal data, affected members will be notified without undue delay in accordance with applicable notification obligations.

While 8sivp takes all reasonable technical and organisational measures to protect your data, no online platform can guarantee absolute security against all possible threats. Members are encouraged to maintain strong, unique passwords and to contact support immediately if they suspect unauthorised access to their account.

8sivp retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, taking into account applicable legal retention obligations. The following principles govern our retention decisions:

• Active accounts: Personal data is retained for the full duration that your account remains active and for a minimum of five years following permanent account closure. This extended post-closure retention is required to satisfy AML record-keeping obligations applicable to internationally licensed gaming operators.
• Financial transaction records: All deposit and withdrawal records, including amounts, timestamps, payment method identifiers, and counterparty references, are retained for a minimum of five years from the date of the transaction, regardless of account status.
• KYC documents: Identity and address verification documents are retained for the duration of account activity plus five years post-closure.
• Behavioural and usage data: Platform usage logs, session data, and game play records are retained for a maximum of 24 months from collection, after which they are either anonymised for aggregate analytics or deleted.
• Marketing consent records: Records of your marketing consent or withdrawal of consent are retained for as long as is necessary to demonstrate compliance.
• Support communications: Live chat transcripts and email correspondence are retained for three years from the date of the last interaction within the relevant support case.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to system backup cycles, the data will be isolated from active processing and deleted at the earliest practicable opportunity.

As a member of 8sivp, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the 8sivp support team using the details provided in Section 13.

• Right of Access: You have the right to request a copy of all personal data 8sivp holds about you, together with information about how it is processed. We will respond to verified access requests within 30 calendar days.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Identity data updates may require supporting KYC documentation.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing has no lawful basis. This right is subject to our legal retention obligations — transaction records required for AML compliance cannot be deleted before the mandatory retention period expires.
• Right to Restrict Processing: You may request that we restrict active processing of your data (e.g., while a dispute is being resolved) without requiring full deletion.
• Right to Data Portability: You have the right to receive a structured, commonly used, machine-readable copy of personal data you have provided to 8sivp, and to transmit that data to another controller, where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Marketing Consent: Where processing is based on your consent (e.g., promotional emails), you may withdraw that consent at any time via your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

The 8sivp Platform is strictly intended for adults aged 21 and over. 8sivp does not knowingly collect personal data from individuals under the age of 21. The collection of personal data from minors is not only contrary to these Terms & Conditions but is also inconsistent with 8sivp's responsible gaming obligations as an internationally licensed platform serving the Indonesian market.

Age verification is a mandatory step in the KYC process for all members. Any member found to be under 21 years of age — at the time of registration or at any subsequent point — will have their account immediately and permanently closed and all balances forfeited. Any personal data collected from an underage individual will be securely deleted as soon as the breach is identified, subject only to any mandatory legal retention obligations arising from the detection of underage gambling.

If you are a parent or legal guardian and believe that a minor in your care has registered an account on the 8sivp Platform without your knowledge, please contact our support team immediately at [email protected]. We will investigate promptly and take all necessary action to close the account and delete associated data.

8sivp operates as an internationally licensed gaming platform. As a consequence, personal data may be stored and processed in countries outside Indonesia, including the jurisdiction in which 8sivp's licensing authority is located and the countries where contracted service providers — such as game studios (Pragmatic Play, Evolution Gaming, NetEnt) and KYC verification partners — maintain their infrastructure.

Where personal data is transferred internationally, 8sivp ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Safeguards may include:

• Contractual clauses in service agreements that bind the recipient to maintain equivalent data protection standards.
• Transfers to service providers located in jurisdictions that maintain adequate data protection frameworks recognised by international gaming regulatory standards.
• Internal data transfer policies governing how 8sivp group entities access and process member data across jurisdictions.

By using the 8sivp Platform, you acknowledge that your personal data may be transferred internationally in the manner described above. If you have concerns about any specific cross-border data transfer, please contact the support team using the details in Section 13.

8sivp reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, Platform functionality, applicable laws, or the requirements of our licensing authority. The updated Policy will be published at https://8sivp.net/privacy-policy with a revised Effective Date.

Where changes are material — for example, where we introduce a new category of data collection, expand the purposes for which existing data is used, or alter the rights available to members — 8sivp will provide at least 14 calendar days' advance notice via email to the registered address associated with your account.

For minor or non-material changes (such as clarifications of existing language, corrections of typographical errors, or updates to contact information), 8sivp may publish an updated version without advance individual notification. The revised Effective Date at the top of this page will indicate that a change has been made.

Your continued use of the Platform after the revised Policy's Effective Date constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease use of the Platform and close your account.

For all privacy-related enquiries, data rights requests, or concerns about 8sivp's data handling practices, please contact the 8sivp Data Protection team through the following channels:

• Email: [email protected] — mark the subject line "Privacy Request" or "Data Rights Request" for priority routing to the data protection team.
• Live Chat: Available 24/7 via the in-Platform live chat widget after login. Indonesian-speaking agents are available at all hours (WIB, UTC+7) and can assist with privacy-related questions.

8sivp will acknowledge receipt of all privacy requests within 48 hours and will endeavour to provide a substantive response within 30 calendar days. For complex requests involving large volumes of data or requiring legal review, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it before the initial 30-day period expires.

If you are not satisfied with 8sivp's response to a privacy request or complaint, you have the right to escalate the matter to the relevant supervisory authority in your jurisdiction or to the licensing authority overseeing 8sivp's international gaming licence.