virtusplay Casino & Sportsbook Data Care

What data we collect on virtusplay

We collect data in three categories when you use virtusplay:

• Personal identification data: We collect your legal name, date of birth, national ID number (KTP), government-issued photo ID image, email address, and phone number. We collect this during account registration and verify it against government databases before your first withdrawal.
• Account and transaction data: We record your username, encrypted password hash, account balance, deposit history, withdrawal history, game activity, session timestamps, and win/loss records. We maintain this data for audit, dispute resolution, and regulatory reporting purposes.
• Device and behavioral data: We log your device type (Android, iOS, desktop browser), IP address, browser version, operating system, login times, session duration, and gameplay patterns (which games you access, bet sizes, session frequency). We use this data to detect fraudulent access, optimize platform performance, and prevent account abuse.

How we use your data on virtusplay

We use the data we collect on virtusplay for the following purposes:

• Account management: We verify your identity, authenticate your login, and maintain your account balance and transaction records.
• Payment processing: We share your data with our payment partners (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet processors, and mobile banking, local payment, online payment, e-wallet banks) to process your deposits and withdrawals.
• Fraud prevention: We analyze your device data, login patterns, and transaction history to detect unauthorized access, duplicate accounts, and suspicious activity.
• Regulatory compliance: We share your data with government and financial regulators as required by Indonesian anti-money-laundering (AML) and know-your-customer (KYC) laws.
• Platform improvement: We analyze aggregate (non-identifying) gameplay data to optimize game performance, fix technical issues, and enhance user experience.

Third-party data processors on virtusplay

We share your data with the following third parties to operate virtusplay:

• E-wallet providers: mobile banking, local payment, online payment, e-wallet, mobile banking receive your name, phone, and payment amount to process your deposits and withdrawals.
• Bank partners: local payment, online payment, e-wallet, mobile banking receive your name, account number, and transaction amount for virtual account deposits and bank withdrawals.
• local payment processors: Our online payment payment processor receives your name and transaction amount for instant transfers.
• Identity verification services: We may contract with third-party services to verify your national ID and photo ID against government records.
• Hosting providers: Our servers are hosted with cloud infrastructure providers located in Southeast Asia. Your data transits through their systems and may be subject to their privacy policies.
• Regulatory bodies: We disclose transaction data and account information to government and financial authorities in response to lawful requests.

How we protect your data on virtusplay

We employ industry-standard security practices to protect your data on virtusplay. We encrypt all personal information and payment details using TLS/SSL protocols during transmission. Your password is hashed using a one-way cryptographic algorithm; we never store your plaintext password. All database tables containing sensitive data are encrypted at rest using AES-256 or equivalent. We restrict database access to authorized staff only and log all access attempts for audit purposes.

We maintain separate database environments for development, testing, and production. We perform regular security audits and penetration testing to identify and fix vulnerabilities. We implement two-factor authentication (2FA) for users who opt-in, requiring a second verification step (SMS or authenticator app) during login. However, we cannot guarantee absolute security; if we detect a data breach, we will notify affected users via email and in-app alert within 72 hours of discovery.

Cookies and tracking on virtusplay

We use cookies and similar tracking technologies on virtusplay to maintain your login session, store your language preference, and measure site performance. When you log in to your virtusplay account, we set a session cookie containing your authentication token; this cookie expires when you log out or after a period of inactivity. We do not use cookies to track you across other websites or to build a profile of your browsing behavior outside virtusplay.

We may use analytics services (such as Google Analytics or similar) to measure traffic patterns, error rates, and user engagement on our platform. These analytics are aggregated and non-identifying. We do not share individual user IDs or account balances with analytics providers. Users can disable cookies in their browser settings; however, some platform features (such as login and session management) may not function correctly if cookies are disabled.

How long we keep your data on virtusplay

We retain your account data (name, email, phone, ID images, transaction history) for as long as your account is active and for seven years after account closure. This retention period complies with Indonesian financial record-keeping requirements. We retain behavioral and device data (IP addresses, session logs, device fingerprints) for 12 months; older logs are automatically deleted.

If you request account deletion on virtusplay, we anonymize your personal data within 30 days but retain your transaction history for regulatory compliance. Your game account and balance cannot be deleted — your data is part of the permanent financial record required by law.

Your data on virtusplay is stored securely and shared only with payment processors and regulatory authorities. We commit to transparency in how we use your information.

Your rights on virtusplay regarding your data

You have the following rights regarding your personal data on virtusplay:

• Right to access: You can request a copy of all data we hold about you. We will provide this within 30 days of your request.
• Right to correction: You can request corrections to inaccurate data (for example, if your email address is misspelled in our system). We will update it within 7 business days.
• Right to deletion: You can request deletion of your personal data, subject to legal retention requirements. We will anonymize identifying information but retain transaction records as required by law.
• Right to restrict processing: You can request that we limit how we use your data (for example, requesting that we stop using your behavioral data for analytics). We will comply unless the restriction conflicts with legal obligations.

To exercise any of these rights, contact our support team via in-app chat, email, or the contact form on virtusplay. We will verify your identity before processing your request.

Data storage and jurisdiction on virtusplay

Our servers hosting virtusplay are primarily located in Southeast Asia, including facilities in Jakarta, Surabaya, and other regional hubs. Your data may be stored outside your home country or jurisdiction. By using virtusplay, you consent to this cross-border data transfer. We maintain data residency in compliance with Indonesian law; however, we cannot guarantee your data will never leave Indonesia under circumstances of legal process or technical disaster recovery.

If you access virtusplay from outside your home jurisdiction, your data may be subject to the laws of the jurisdiction where our servers are located as well as the laws of your home country. We comply with the most restrictive applicable laws across all jurisdictions where our users reside.

Changes to our privacy policy on virtusplay

We may update this privacy policy periodically as our practices evolve or as regulations change. If we make material changes to how we collect or use your data, we will notify you via email and in-app alert at least 30 days before the changes take effect. Your continued use of virtusplay after the notification period constitutes acceptance of the updated policy. If you do not accept the updated policy, you may request account closure and data deletion subject to legal retention requirements.

How to contact us about privacy on virtusplay

If you have questions about our privacy practices on virtusplay, how we use your data, or if you wish to exercise your data rights, contact our support team:

• In-app chat: Available via the Help section in your virtusplay account
• Email: Support requests can be sent to our privacy team for response within 10 business days
• Support form: Available on the FAQ page with escalation to privacy personnel

We are committed to addressing all privacy concerns and data subject requests on virtusplay. If you believe we have mishandled your data or violated this privacy policy, you have the right to lodge a complaint with Indonesian data protection authorities.

Summary: data protection on virtusplay

We collect personal, account, and behavioral data on virtusplay to operate the platform, process payments via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank virtual accounts, detect fraud, and comply with Indonesian regulations. We encrypt this data, share it only with payment processors and regulators, and retain it for required legal periods. You have rights to access, correct, and delete your data subject to legal and operational constraints.

We are committed to protecting your privacy on virtusplay. We do not sell your data, do not track you across other sites, and do not use your information for unauthorized purposes. If you have concerns about how we handle your data, contact our support team via in-app chat or email. We will respond to all privacy inquiries and data subject requests within legal timeframes.