At vm916, your privacy matters as much as your winnings. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your information as a Member of vm916.vip. Please read this document in full before registering an account.
Last Updated: January 1, 2026Throughout this Privacy Policy, the following terms carry the meanings set out below:
vm916 collects Personal Data through several channels. The categories below describe what we collect, the source of that data, and whether providing it is mandatory or optional.
When you create an Account on the Platform, we collect the following mandatory information:
Before processing withdrawals above the applicable threshold, or when our risk-monitoring systems flag an account for review, vm916 may request:
Every deposit and withdrawal transaction processed through your Account generates a transaction record containing: the date and time of the transaction (in WIB, UTC+7), the amount in Indonesian Rupiah (IDR), the payment method used, a transaction reference number, and the resulting Account balance. vm916 does not store full bank account numbers or card numbers; these are handled exclusively by the relevant payment processor under their own security and data-protection standards.
The Platform automatically records all gaming activity associated with your Account, including: bet amounts and odds, game titles and providers (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), bet outcomes, session durations, and any responsible gaming tool settings you have activated (deposit limits, loss limits, self-exclusion status). This data is used for account management, dispute resolution, regulatory compliance, and to personalize your gaming experience.
When you access the Platform, our servers and analytics tools automatically collect certain technical data, including: your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited, and session duration. This data is collected via server logs, cookies, and similar tracking technologies (see Section 6).
If you contact vm916 customer support via live chat, email ([email protected]), or WhatsApp, we retain records of those communications — including chat transcripts, email threads, and support ticket histories — for quality assurance, training, and dispute resolution purposes.
If you opt in to receive promotional communications from vm916 during registration or at any later time via your Account dashboard, we record that consent along with a timestamp. You may withdraw consent at any time by updating your marketing preferences in your Account settings or by contacting support.
vm916 processes Personal Data for the following purposes:
| Purpose | Data Categories Used | Basis |
|---|---|---|
| Account creation and management | Registration data, device data | Contract performance |
| Identity verification (KYC/AML) | KYC documents, financial data | Legal obligation |
| Processing deposits and withdrawals | Financial transaction data | Contract performance |
| Fraud prevention and security monitoring | Device data, transaction data, gameplay data | Legitimate interests |
| Responsible gaming enforcement | Gameplay data, registration data | Legal obligation / Legitimate interests |
| Customer support and dispute resolution | Communications data, gameplay data | Contract performance |
| Sending promotional communications (opted-in only) | Registration data, marketing preferences | Consent |
| Platform analytics and improvement | Device data, gameplay data (aggregated/anonymized) | Legitimate interests |
| Compliance with applicable laws and regulations | All categories as required | Legal obligation |
vm916 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human oversight. Our fraud-detection and risk-scoring systems flag accounts for human review rather than taking automated final action.
vm916 processes your Personal Data on one or more of the following legal bases:
vm916 shares Personal Data with a limited number of trusted Third-Party Processors who provide services essential to the operation of the Platform. All such processors are bound by written data-processing agreements requiring them to process your data only on vm916's documented instructions, to implement appropriate technical and organizational security measures, and to assist vm916 in fulfilling your data-subject rights. Current categories of Third-Party Processors include:
vm916 may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by law, by a valid legal process (such as a court order or subpoena), or where vm916 has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other unlawful activity. In all cases, vm916 will disclose only the minimum amount of data necessary to satisfy the legal requirement.
vm916 does not sell, rent, or trade your Personal Data to third parties for their own independent marketing or commercial purposes. Any sharing of data is strictly limited to what is necessary for the purposes described in this Privacy Policy.
In the event that vm916's business or the Platform is acquired by, merged with, or transferred to another entity, your Personal Data may form part of the transferred assets. In such circumstances, vm916 will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations that are at least as protective as those set out in this Privacy Policy, and will notify affected Members via the registered email address on their Account prior to any such transfer taking effect.
Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function efficiently, to remember your preferences, and to provide analytic information to site operators. In addition to cookies, vm916 may use similar tracking technologies such as pixel tags, web beacons, local storage objects, and session tokens.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable core Platform functions: Account login sessions, security tokens, shopping-cart equivalents (active bets), and fraud-prevention fingerprinting. These cannot be disabled without breaking Platform functionality. | Session / up to 30 days |
| Functional | Remember your preferences: language settings, display options, time-zone display (WIB/WITA/WIT), and responsible gaming tool configurations. | Up to 12 months |
| Analytics | Aggregate, anonymized data on pages visited, session duration, game popularity, and navigation paths — used to improve Platform design and content. | Up to 24 months |
| Marketing / Retargeting | Used only with your explicit consent to deliver promotional communications relevant to your gaming preferences. These cookies are placed only after you opt in to marketing. | Up to 90 days |
You may control non-essential cookies through your Account preferences panel on the Platform, or by configuring your browser settings to block or delete cookies. Most modern browsers (Chrome, Firefox, Safari, Samsung Internet — commonly used by Indonesian users accessing the Platform from Jakarta, Surabaya, Bandung, Bali, and other cities) provide straightforward cookie management tools. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or marketing cookies will not affect core Platform functionality.
vm916 retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The table below summarizes our standard retention periods by data category:
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration data | Duration of Account + 5 years after closure | AML / regulatory compliance |
| KYC documents | 5 years from verification date | AML / legal obligation |
| Financial transaction data | 7 years from transaction date | Financial record-keeping obligations |
| Gameplay and betting data | 5 years from session date | Dispute resolution, responsible gaming audit |
| Customer support communications | 3 years from last interaction | Quality assurance, dispute resolution |
| Device / technical logs | 13 months from collection | Security monitoring, analytics |
| Marketing consent records | Until consent is withdrawn + 3 years | Proof of lawful processing basis |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and product-improvement purposes.
vm916 takes the security of your Personal Data seriously and implements a multi-layered security architecture to protect it against unauthorized access, disclosure, alteration, and destruction. Our current security measures include:
As a Member whose Personal Data is processed by vm916, you hold the following rights with respect to your information. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your verified request.
You have the right to request a copy of all Personal Data that vm916 holds about you, along with information about the purposes for which it is processed, the categories of data involved, the recipients to whom it has been disclosed, and the retention periods that apply. This is commonly referred to as a Subject Access Request (SAR).
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as a typographical error in your registered phone number) can be made directly via your Account dashboard. Changes to name or date of birth require supporting documentation consistent with KYC standards.
You may request the deletion of your Personal Data where: the data is no longer necessary for the purposes for which it was collected; you withdraw the consent on which processing is based (and no other lawful basis applies); or you object to processing based on legitimate interests and vm916 has no overriding grounds to continue. Note that we are unable to erase data that we are legally required to retain — such as KYC records and financial transaction logs — for the duration of their mandatory retention periods.
You may request that vm916 restrict (rather than delete) the processing of your Personal Data in circumstances where you contest its accuracy, where processing is unlawful but you prefer restriction to erasure, or where you have objected to processing and a determination is pending.
Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive the Personal Data you have provided to vm916 in a structured, commonly used, machine-readable format (e.g., JSON or CSV), and to transmit that data to another controller where technically feasible.
You have the right to object at any time to the processing of your Personal Data where vm916 relies on legitimate interests as the legal basis. vm916 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. You may always object to processing for direct marketing purposes, in which case vm916 will cease processing immediately.
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to the withdrawal. To withdraw marketing consent, update your preferences in your Account dashboard or contact [email protected].
The Platform integrates content and services from third-party providers — principally game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — whose software is embedded within the vm916 Platform interface. When you launch a game powered by one of these studios, your device may establish a connection directly with that studio's servers. In such cases, the studio may collect certain technical data (such as your IP address and session token) as part of delivering the game. Each studio operates under its own privacy policy and data-protection framework. vm916 selects game-studio partners based in part on their commitment to data security and fairness — all partner studios hold independent game-fairness certifications from recognized testing laboratories.
The Platform also integrates payment-processing interfaces for Indonesian banking and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja). When you initiate a deposit or withdrawal, you will interact with these providers' secure payment interfaces. Your full payment account credentials are entered directly into the provider's secure environment and are not stored by vm916.
vm916 is not responsible for the data-processing practices of third-party studios or payment providers. We encourage you to review the privacy policies of any third party with whom you share data in the course of using the Platform.
The vm916 Platform is strictly for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. The registration process includes an age declaration, and KYC verification confirms that all Members meet the minimum age requirement.
vm916 encourages parents and guardians to make use of parental control software to prevent minors from accessing online gambling platforms. Organizations such as those providing internet-filtering tools can assist in restricting access at the device or network level.
vm916 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable laws and regulations, or operational requirements. When a material change is made, we will:
Your continued use of the Platform after the effective date of any amended Privacy Policy constitutes your acknowledgment of, and agreement to, the updated terms. If you do not agree with the amended Privacy Policy, you must cease using the Platform and may request Account closure by contacting [email protected].
We recommend that you review this Privacy Policy periodically — particularly before making deposits or initiating any significant account activity — to stay informed of how vm916 handles your Personal Data.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way vm916 processes your Personal Data, please reach out to our Data Protection team through any of the following channels:
We are committed to handling all privacy-related inquiries promptly, fairly, and transparently. Requests to exercise your data-subject rights (Section 9) will be acknowledged within 5 business days and resolved within 30 calendar days of receiving your verified request. Where a request is complex or voluminous, we may extend this period by up to a further 30 days, in which case we will inform you of the extension and the reasons for it.
Six core principles that guide every data-processing decision we make at vm916 — from the moment you register to the day you close your Account.
Every byte of data transmitted between your device and vm916.vip is protected by TLS 1.3 encryption. Sensitive fields stored on our servers — including passwords and KYC documents — are encrypted at rest using AES-256, the global gold standard for data security.
vm916 has never sold, rented, or traded your Personal Data to third parties for their own commercial purposes, and we never will. Data sharing is strictly limited to service providers who help us operate the Platform under binding data-processing agreements.
You retain comprehensive rights over your personal data at all times — including the right to access, rectify, erase, port, and restrict processing of your information. Submit a request to [email protected] and we will respond within 30 days, guaranteed.
We do not hold your data indefinitely. Every category of Personal Data is assigned a clear retention period — from 13-month rolling logs for device data to 7-year retention for financial transaction records — after which data is securely deleted or anonymized.
We collect only the Personal Data that is strictly necessary for the purpose at hand. Registration asks only for the essentials; KYC is triggered only when legally or operationally required; analytics data is aggregated and anonymized wherever possible.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, vm916 will notify you promptly via your registered email address, explain what happened, describe the steps we are taking to contain the incident, and advise you on protective actions you can take.
Now that you understand exactly how vm916 handles your personal data, you can enjoy our full range of games — from live sportsbook coverage of BRI Liga 1 and the Champions League, to hundreds of premium slots, live casino tables, and togel draws — knowing your privacy is fully protected. Adults only — 21+ required.
Questions about your data? Email [email protected] or chat with us live on vm916.vip. 21+ only. Please gamble responsibly. See our Responsible Gaming page for support tools.