Legal Document

Privacy Policy

spv888 is committed to protecting the personal data of every member. This Privacy Policy explains precisely what information we collect, why we collect it, how we use and store it, and what rights you hold over your data as a member of our platform.

Effective Date: 1 January 2026  |  Last Reviewed: 1 January 2026

Our Six Privacy Principles

Every data decision spv888 makes is governed by these six foundational principles, which inform our full policy set out in the clauses below.

Purpose Limitation

spv888 collects personal data only for specific, clearly defined purposes. We do not repurpose your data for activities unrelated to operating your account, verifying your identity, processing payments, or improving our platform services.

Data Minimisation

We collect only the minimum data necessary to fulfil the purpose for which it is required. If a service can be delivered without collecting a particular data field, spv888 will not request it from you.

Security by Design

spv888 applies industry-standard SSL/TLS encryption to all data in transit and AES-256 encryption to sensitive data at rest. Our infrastructure undergoes regular independent security audits to maintain the highest protection standards.

Your Rights, Respected

You have the right to access, correct, export, and request deletion of your personal data held by spv888, subject to our legal and regulatory retention obligations. All data rights requests are processed within 30 days of receipt.

No Data Selling

spv888 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks under any circumstances. Your data belongs to you; we are its custodian, not its owner.

Transparency Always

This Privacy Policy is written in plain, professional English so that every spv888 member — regardless of legal background — can understand exactly how their data is handled. We update this policy whenever our practices materially change and notify affected members promptly.

Important Notice: This Privacy Policy applies to all personal data processed by spv888 in connection with the services offered at https://spv888.cam. By registering an account or using any spv888 service, you acknowledge that you have read and understood this policy. If you disagree with any part of this policy, please do not use spv888's services and contact us to arrange closure of your account and deletion of your data where applicable.


1. Definitions

In this Privacy Policy, the following terms carry the meanings defined below:

  • "spv888" / "Platform" / "we" / "us" / "our" — the internationally licensed entity operating online betting and casino services at https://spv888.cam.
  • "Member" / "you" / "your" — any individual who has registered an account on spv888 or who interacts with the platform in any capacity.
  • "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, date of birth, contact details, financial information, and device identifiers.
  • "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
  • "Data Controller" — spv888, the entity that determines the purposes and means of processing your Personal Data.
  • "Data Processor" — a third party that processes Personal Data on spv888's behalf and under its instructions (e.g., payment processors, KYC verification providers).
  • "Sensitive Data" — a subset of Personal Data warranting enhanced protection, including government-issued identity document numbers, financial account details, and responsible gaming self-assessment responses.
  • "Cookies" — small text files stored on your device by a website, used to remember preferences, maintain session state, and collect analytics data.

2. Personal Data We Collect

spv888 collects Personal Data across the following categories. The specific data points collected depend on how you interact with the platform.

Category Data Points Collected When Collected
Identity Data Full legal name, date of birth, nationality, gender (optional) Account registration & KYC
Contact Data Email address, mobile number, residential address Account registration
Identity Document Data KTP number, passport number or driving licence number, document images KYC verification
Financial Data Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet account name (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history First deposit / withdrawal request
Account Activity Data Login history, betting and gaming history, bonus usage, session durations, responsible gaming tool usage Ongoing platform use
Device & Technical Data IP address, browser type and version, operating system, device type, screen resolution, time zone Every platform visit
Communications Data Live chat transcripts, support email content, complaint records When you contact support
Marketing Preferences Opt-in/opt-out status for promotional communications, preferred contact channel Registration & account settings

spv888 does not intentionally collect sensitive categories of personal data beyond government-issued identity document numbers required for KYC. We do not collect racial or ethnic origin data, political opinions, religious beliefs, health data (beyond self-declared responsible gaming information), or biometric data.


3. How We Collect Personal Data

spv888 collects Personal Data through the following channels:

  • Direct Collection: Data you actively provide when registering an account, submitting KYC documents, making deposits or withdrawals, completing responsible gaming questionnaires, or contacting customer support.
  • Automated Collection: Technical data collected automatically via cookies, server logs, and analytics tools each time you visit or interact with the spv888 platform.
  • Third-Party Sources: Identity and address verification data provided by licensed KYC verification partners when cross-referencing the documents you submit. Financial institution data confirming that a payment method is registered in your name. Fraud-detection signals from our anti-money laundering screening providers.
  • Publicly Available Sources: In limited circumstances, spv888 may consult publicly available databases (such as sanctions lists, politically exposed persons registers, and adverse media records) as part of its anti-money laundering compliance obligations.

4. Purposes of Processing

spv888 processes your Personal Data for the following clearly defined purposes:

  • Account Management: Creating, maintaining, and securing your spv888 account; authenticating your identity at login; responding to account queries.
  • KYC & Regulatory Compliance: Verifying your age (21+) and identity in accordance with our international licensing obligations and anti-money laundering requirements.
  • Transaction Processing: Processing deposits and withdrawals via local Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay), reconciling transactions, and detecting payment fraud.
  • Service Delivery: Providing access to spv888's sports betting, live casino, slot gaming, and togel (Indonesia's traditional numbers lottery) products; personalising your experience based on game history and preferences.
  • Responsible Gaming: Monitoring betting patterns to identify indicators of problem gambling behaviour; administering deposit limits, time-outs, and self-exclusion requests; proactively contacting members where internal monitoring flags concern.
  • Security & Fraud Prevention: Detecting and preventing unauthorised access, duplicate accounts, bonus abuse, match-fixing, and money laundering. Sharing data with law enforcement or regulatory bodies pursuant to valid legal requests.
  • Communications: Sending transactional notifications (deposit confirmations, withdrawal receipts, security alerts) and, where you have opted in, promotional communications about spv888 offers and seasonal promotions (including Indonesian national holidays such as Idul Fitri, Imlek, and Independence Day).
  • Platform Improvement: Analysing aggregated usage data to identify bugs, improve user experience, and develop new features. Analytics are performed on anonymised or pseudonymised data wherever possible.
  • Legal & Regulatory Obligations: Retaining records as required by our international gaming licence, applicable anti-money laundering regulations, and any other legal obligation to which spv888 is subject.

Our Commitment: spv888 will never use your Personal Data for a purpose that is incompatible with those listed above without first notifying you and, where required by applicable law, obtaining your explicit consent.



6. Data Sharing & Disclosure

spv888 shares Personal Data only with trusted third parties under strict contractual controls and solely for the purposes set out in this policy. We do not sell, rent, or trade Personal Data under any circumstances.

Categories of Third-Party Recipients

  • Payment Service Providers: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive your name and account number to process deposits and withdrawals.
  • KYC Verification Providers: Licensed third-party identity verification services receive your identity documents, full name, date of birth, and address to cross-reference against official databases and confirm your age and identity.
  • Game Studio Partners: Providers of live casino and slot content (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming) receive pseudonymised session identifiers and bet data but do not receive your personally identifiable contact or financial data.
  • Fraud Prevention & AML Screening Services: Specialist providers receive transaction data and identity information to screen against sanctions lists, politically exposed persons registers, and adverse media databases as part of our anti-money laundering compliance programme.
  • IT Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers host spv888's platform and databases under strict data processing agreements that prohibit them from using your data for their own purposes.
  • Customer Support Tools: Our live chat and support ticketing systems are hosted by third-party providers who process communications data solely for the purpose of delivering support services to spv888 members.
  • Legal & Regulatory Authorities: spv888 may disclose Personal Data to law enforcement agencies, courts, regulatory bodies, or other government authorities where legally required to do so, where necessary to protect the rights, property, or safety of spv888 or third parties, or to prevent or investigate suspected fraud or illegal activity.

Important: All third-party Data Processors engaged by spv888 are contractually bound to process Personal Data only on spv888's instructions, to implement appropriate security measures, and not to use your data for their own marketing or business purposes. spv888 conducts due diligence on all processors before engagement and monitors compliance on an ongoing basis.


7. International Data Transfers

spv888 operates on an internationally licensed basis. As a result, your Personal Data may be transferred to, stored in, and processed in jurisdictions outside Indonesia, including jurisdictions that may not provide the same level of data protection as Indonesian law.

Where spv888 transfers Personal Data internationally, we implement appropriate safeguards to ensure your data receives adequate protection, including:

  • Transferring data only to jurisdictions recognised as providing adequate data protection standards by international regulatory bodies.
  • Entering into Standard Contractual Clauses (SCCs) with international Data Processors, binding them to uphold equivalent data protection standards.
  • Ensuring that infrastructure providers maintain ISO 27001 certification and undergo regular independent security audits.

By using spv888, you acknowledge and consent to the international transfer of your Personal Data in accordance with these safeguards. If you have concerns about international transfers, please contact our Data Protection Officer (see Clause 15) before registering.


8. Data Retention Periods

spv888 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. Retention periods vary by data category:

Data Category Retention Period Rationale
Identity & KYC Data 7 years from account closure Anti-money laundering regulations & licensing requirements
Transaction Records 7 years from transaction date Financial audit & tax obligations
Betting & Gaming History 7 years from session date Dispute resolution & regulatory compliance
Communications Logs 3 years from communication date Quality assurance & dispute resolution
Device & Technical Data 13 months from collection Fraud detection & platform security
Marketing Consent Records Duration of consent + 1 year Evidence of consent for regulatory purposes
Self-Exclusion Records Permanently (indefinite exclusions) or for exclusion period + 7 years Preventing circumvention of self-exclusion

Upon expiry of the applicable retention period, spv888 securely deletes or anonymises Personal Data such that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical analysis.


9. Cookies & Tracking Technologies

spv888 uses cookies and similar technologies to enable core platform functionality, maintain session security, and analyse platform usage. Cookies are categorised as follows:

  • Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, load balancing cookies, and security cookies. These cannot be disabled without breaking core functionality.
  • Performance Cookies: Collect aggregated data about how Members use the platform (pages visited, session duration, error messages encountered). Used to identify bugs and improve user experience. These cookies do not identify you personally.
  • Functionality Cookies: Remember your preferences such as language selection (though spv888 is English-only for Indonesian users), currency display format, and odds format. Enhance convenience but are not essential.

spv888 does not use third-party advertising cookies or cross-site tracking technologies. We do not participate in advertising networks or retargeting programmes.

You may disable or delete cookies through your browser settings. Note that disabling Strictly Necessary Cookies will prevent you from logging in or using core platform features. Instructions for managing cookies in common browsers are available at:

  • Google Chrome: Settings > Privacy and Security > Cookies and other site data
  • Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Manage Website Data

10. Your Data Protection Rights

As a spv888 member, you hold the following rights over your Personal Data. spv888 processes all rights requests within 30 calendar days of receipt.

Right of Access

You may request a copy of all Personal Data spv888 holds about you. This will be provided in a structured, machine-readable format (JSON or CSV) at no charge. One request per 12-month period is provided free; subsequent requests within the same period may incur a reasonable administrative fee.

Right to Rectification

You may request correction of inaccurate or incomplete Personal Data. Where the inaccuracy affects data already shared with third-party processors (e.g., KYC providers), spv888 will notify those processors of the correction.

Right to Erasure (Right to Be Forgotten)

You may request deletion of your Personal Data where one of the following applies:

  • The data is no longer necessary for the purposes for which it was collected.
  • You withdraw consent (where consent was the legal basis) and no other legal basis applies.
  • You object to processing based on legitimate interests and there are no overriding legitimate grounds for spv888 to continue processing.
  • The data was processed unlawfully.

The right to erasure does not apply where spv888 is legally required to retain data (e.g., for anti-money laundering compliance, tax obligations, or ongoing legal proceedings).

Right to Restriction of Processing

You may request that spv888 cease processing your Personal Data (while continuing to store it) where you contest the accuracy of the data, object to processing, or where processing is unlawful but you prefer restriction over erasure.

Right to Data Portability

You may request a machine-readable copy of Personal Data you have provided to spv888 and may request that this data be transmitted directly to another service provider where technically feasible.

Right to Object

You may object at any time to processing of your Personal Data for direct marketing purposes. spv888 will cease all marketing communications immediately upon receiving your objection. You may also object to processing based on legitimate interests; spv888 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

Exercising Your Rights

To exercise any of these rights, contact spv888's Data Protection Officer using the details in Clause 15. We may request identity verification to prevent fraudulent requests. All requests are acknowledged within 48 hours and completed within 30 calendar days.


11. Children's Privacy (21+ Only)

spv888 is an adults-only service. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. All members must confirm they are aged 21 or older at registration, and spv888 conducts mandatory age verification via government-issued identity documents during the KYC process.

If spv888 becomes aware that a member is under 21 years of age, we will:

  • Suspend the account immediately.
  • Return any remaining verified balance to a bank account held in the name of the minor's parent or legal guardian (following identity verification of the guardian).
  • Permanently delete the minor's Personal Data within 14 days of discovery, except where retention is legally mandated for incident reporting to regulatory authorities.
  • Report the incident to our licensing authority in accordance with child protection obligations.

If you believe a minor has accessed spv888 or provided Personal Data to us, contact our Data Protection Officer immediately at the address in Clause 15.


12. Security Measures

spv888 implements technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, or damage. Key measures include:

  • Encryption: All data transmitted between your device and spv888's servers is encrypted using TLS 1.3 protocol. Sensitive data at rest (including identity documents and financial account numbers) is encrypted using AES-256 encryption.
  • Access Controls: spv888 personnel access Personal Data on a strict need-to-know basis. Role-based access controls and audit logging are enforced across all internal systems.
  • Infrastructure Security: spv888's hosting infrastructure is ISO 27001 certified and undergoes annual penetration testing and vulnerability assessments by independent third-party security firms.
  • Incident Response: spv888 maintains a documented data breach response plan. In the event of a breach affecting Personal Data, we will notify affected members and relevant regulatory authorities within 72 hours where required by applicable law.
  • Staff Training: All spv888 personnel with access to Personal Data undergo mandatory annual data protection and information security training.

Your Responsibility: While spv888 implements robust security measures, you are responsible for maintaining the confidentiality of your account login credentials. Do not share your password with third parties. Enable two-factor authentication where available. If you suspect unauthorised access to your account, change your password immediately and contact support.


13. Third-Party Services & Links

spv888 integrates third-party services including payment processors, game studios, and KYC verification providers. Each third party operates under its own privacy policy, which governs how your data is handled when you interact directly with that service (e.g., when authorising a payment via your bank's app).

spv888 is not responsible for the privacy practices of third parties. We recommend reviewing the privacy policies of BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and any other service you use in connection with spv888.

spv888 does not include links to external websites or social media platforms within our platform. Any link claiming to be affiliated with spv888 that directs you away from the https://spv888.cam domain should be treated as suspicious and reported to our support team immediately.


14. Amendments to This Privacy Policy

spv888 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform services. Where amendments are material — that is, where they introduce new processing purposes, expand data sharing arrangements, or reduce member rights — spv888 will provide at least 30 days' prior written notice via email to the address registered on your account.

Continued use of spv888 after the effective date of any amendment constitutes acceptance of the revised policy. If you do not accept the amended policy, you may close your account and request deletion of your Personal Data in accordance with the retention obligations set out in Clause 8.

The current version of this Privacy Policy is always available at https://spv888.cam/privacy-policy. The "Effective Date" and "Last Reviewed" dates at the top of this document indicate when the policy was last updated. Historical versions are available upon written request to our Data Protection Officer.


15. Contact & Data Protection Officer

For questions, concerns, or complaints about spv888's handling of your Personal Data, or to exercise any of the data protection rights set out in Clause 10, please contact our Data Protection Officer (DPO):

Data Protection Officer – spv888

Email:

Subject Line: For data protection enquiries, please use the subject line "Data Protection Enquiry – [Your Account Email]" to ensure prompt routing to the DPO.

Response Time: The DPO acknowledges all data protection enquiries within 48 hours and provides a substantive response within 30 calendar days of receipt. Complex requests may require an extension of up to 60 days; we will inform you of any extension and the reasons for it.

If you are not satisfied with spv888's response to your data protection concern, you have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction of residence.

Questions About Your Data?

Our FAQ covers common data protection questions, or you can review our Terms & Conditions for the full legal framework governing your spv888 membership. For responsible gaming guidance, visit our dedicated page.

Visit the FAQ Terms & Conditions Responsible Gaming Back to Home