Privacy Policy — vildey

vildey ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our Platform. We understand that when you choose to share your personal information with us — whether to create an account, complete a deposit, or contact our support team — you are placing trust in vildey. We take that trust seriously.

This Privacy Policy sets out a transparent, plain-language account of our data practices: what personal data we collect, why we collect it, how long we retain it, who we may share it with, and how we keep it safe. It also explains the rights you hold over your own data and how you can exercise them.

This Policy is specifically written for members and prospective members based in Indonesia, though it applies to all users of the Platform regardless of location. Where Indonesian data protection law imposes obligations beyond those described in this Policy, we will comply with those additional requirements.

The following terms have the meanings set out below throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — i.e., any data that can be used, alone or in combination with other data, to identify you.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, deletion, and destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, vildey.
• "Data Processor" means any third party that Processes Personal Data on behalf of vildey under a written data processing agreement.
• "Member" / "You" means any individual who has registered an account on vildey or who otherwise interacts with the Platform.
• "Platform" means the vildey website at https://vildey.cam, including all sub-pages, features, and associated services.
• "KYC" means Know Your Customer — the identity and age verification process required for withdrawal processing and AML compliance.
• "Cookies" means small text files placed on your device by the Platform to remember preferences, maintain sessions, and gather aggregated analytics data.

The Data Controller for all Personal Data collected through the Platform is the operator of vildey — a company incorporated and licensed under an internationally recognized offshore gaming jurisdiction. vildey determines the purposes for which your Personal Data is processed and is responsible for ensuring that processing is lawful, fair, and transparent.

For all privacy-related inquiries, requests, or complaints, you may contact vildey's data protection contact at:

vildey collects Personal Data in the following categories, depending on how you interact with the Platform:

vildey collects Personal Data through the following channels and mechanisms:

• Direct submission: Data you provide actively when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or responding to a promotional offer.
• Automated collection: Technical data collected automatically when you visit the Platform, including IP address, device identifiers, browser fingerprint, session logs, and Cookie-based behavioral data.
• Payment processors: Transaction confirmation data received from Indonesian bank transfer gateways and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal.
• KYC verification providers: Identity match results and risk signals returned by licensed third-party KYC and AML screening services that process document verification on our behalf.
• Customer support interactions: Correspondence submitted via email or live chat that you initiate with our support team.
• Fraud prevention systems: Device and behavioral signals generated by our internal fraud detection infrastructure during account activity.

vildey processes your Personal Data only where we have a lawful basis to do so. The table below summarizes the key purposes for which we process Personal Data and the corresponding legal basis for each:

Where we rely on legitimate interest as the legal basis, we have assessed that our legitimate interest does not override your fundamental privacy rights, given the nature of the data involved and the safeguards we apply. You have the right to object to processing based on legitimate interest — see Section 12 for details.

vildey does not sell, rent, or trade your Personal Data. We share Personal Data only in the limited circumstances set out below, and only to the extent necessary for the stated purpose:

• Licensed KYC & AML providers: Identity documents submitted during KYC verification are passed to certified third-party verification services for document authenticity checks, biometric matching, and sanctions screening. These providers act as Data Processors under a binding data processing agreement with vildey.
• Payment processors and banking partners: Financial data required to execute deposit and withdrawal instructions is shared with the relevant Indonesian bank or e-wallet provider (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja). These institutions process this data under their own privacy frameworks and are not acting on vildey's instructions when doing so.
• Game content providers: Technical session identifiers (not your name or contact details) may be shared with game studio partners such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft to facilitate game play and verify game outcomes. These studios do not receive your identity or financial data.
• Fraud prevention and security services: Anonymized or pseudonymized device signals may be shared with fraud intelligence networks to detect and prevent unauthorized account access.
• Our licensing authority: Our international gaming regulator may request access to Member account data as part of a compliance audit or investigation. We are legally obligated to comply with such requests.
• Law enforcement and regulatory bodies: We will disclose Personal Data to competent law enforcement or regulatory authorities where we receive a valid legal request, court order, or where disclosure is required to prevent imminent harm or a serious criminal offense.
• Professional advisors: Our legal counsel, auditors, and insurers may access Personal Data on a strictly confidential basis where necessary to provide professional services to vildey.

As an internationally licensed online platform, vildey may process and store your Personal Data on servers located outside of Indonesia. When Personal Data is transferred to a country that does not offer an equivalent level of data protection to that provided under Indonesian law, vildey ensures that appropriate safeguards are in place to protect your data, including:

• Entering into data processing agreements with all Data Processors that incorporate standard contractual clauses or equivalent binding data protection obligations.
• Conducting due diligence assessments of all third-party service providers prior to engagement to confirm that appropriate technical and organizational security measures are in place.
• Applying data minimization principles — sharing only the minimum Personal Data necessary for the processor to perform its contracted function.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in a jurisdiction outside Indonesia. vildey will always ensure that such transfers are conducted in compliance with applicable data protection obligations and that your data receives a standard of protection consistent with this Privacy Policy.

vildey retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our licensing authority's regulatory requirements. The following general retention periods apply:

• Account Data (identity, contact, financial records): Retained for the full duration of your active account, plus a minimum of 5 years following account closure, to satisfy AML record-keeping obligations under our gaming license.
• KYC Documents: Retained for a minimum of 5 years from the date of verification, or longer where required by our licensing authority or applicable anti-money laundering regulations.
• Betting and Transaction History: Retained for a minimum of 5 years for regulatory compliance and dispute resolution purposes.
• Customer Support Records: Retained for 3 years from the date of the final interaction in each support case.
• Technical and Device Data (logs, IP records): Retained for a maximum of 13 months from collection for security monitoring and fraud investigation purposes.
• Marketing Preference Data: Retained for the duration of your account and deleted upon receipt of a valid marketing opt-out or account closure request.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with you as an individual. Anonymized, aggregated data may be retained indefinitely for statistical and business analytics purposes.

vildey uses Cookies and similar tracking technologies to operate the Platform effectively, maintain your login session, and understand how Members interact with our services. The following Cookie categories are used on vildey:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display configurations. These improve your experience but are not essential.
• Analytics Cookies: Collect anonymized, aggregated data about how visitors navigate the Platform — including which pages are most visited, how long sessions last, and where users exit. This data helps vildey improve the Platform over time. No personally identifiable information is included in analytics reports.
• Security Cookies: Used by our fraud detection systems to identify abnormal device behavior, flag suspicious login patterns, and protect your account from unauthorized access.

Most web browsers accept Cookies by default. You can configure your browser to reject or delete Cookies at any time; however, disabling strictly necessary cookies will prevent you from logging in and using the Platform. For instructions on managing Cookies in your specific browser, please consult your browser's help documentation.

vildey maintains a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser and vildey's servers is encrypted in transit using TLS 1.3, the current industry-leading encryption protocol.
• At-rest encryption: Personal Data and financial records stored in our databases are encrypted at rest using AES-256 encryption.
• Access controls: Access to systems containing Personal Data is restricted to authorized vildey personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for all administrative access.
• Network security: Our Platform infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services.
• Vulnerability management: Regular penetration testing and security audits are conducted by qualified third-party security professionals to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: vildey maintains a documented data breach response procedure. In the event of a security incident affecting your Personal Data, we will notify affected Members and relevant authorities within the timeframe required by applicable law.

As a data subject, you hold the following rights over your Personal Data held by vildey. To exercise any of these rights, please contact us at [email protected] with "Privacy Request" in the subject line. We will respond within 30 calendar days of receiving a valid request.

• Right of Access: You may request a copy of the Personal Data that vildey holds about you, along with an explanation of the purposes for which it is processed and the categories of third parties with whom it is shared.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to overriding legal obligations — for example, AML record-keeping requirements mean we may be legally obligated to retain certain data for a minimum period even after a deletion request.
• Right to Restrict Processing: You may request that vildey limits processing of your Personal Data in certain circumstances — for example, while the accuracy of your data is being contested.
• Right to Data Portability: You may request that we provide you with a machine-readable copy of Personal Data you have provided to us, suitable for transfer to another service provider.
• Right to Object: You may object to processing of your Personal Data where we rely on legitimate interest as the legal basis. You also have an absolute right to object to processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Marketing communications consent can be withdrawn via your account settings or by contacting support.

vildey's services are strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect Personal Data from individuals under 21. Age verification is a mandatory step in the KYC process, and any account found to belong to an individual under the age of 21 will be immediately suspended.

If you believe that vildey has inadvertently collected Personal Data from a minor, please contact us immediately at [email protected]. Upon verification of such a report, vildey will promptly delete all Personal Data associated with the minor's account, void any bets placed, and return any deposits to the original payment method where feasible.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. If you suspect that a minor in your household has accessed vildey, please contact our support team without delay.

The Platform may reference or display the names of third-party services — such as game studios (Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, NetEnt, Microgaming), payment providers, and sports leagues (BRI Liga 1, EPL, Champions League) — in the context of the betting and gaming products we offer. vildey does not embed third-party tracking scripts or advertising links from these entities on the Platform.

Where you interact directly with a third-party service (for example, initiating a bank transfer through BCA's mobile app or an OVO payment via the OVO application), that interaction is governed entirely by the third party's own privacy policy. vildey has no control over — and assumes no responsibility for — the data practices of third-party platforms or institutions.

We recommend reviewing the privacy policy of any third-party service you use in connection with your vildey account, particularly your chosen Indonesian bank or e-wallet provider.

vildey may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or our licensing obligations. When a material change is made, we will notify registered Members via their registered email address and post a prominent notice on the Platform at least seven (7) days before the updated Policy takes effect.

The "Last Updated" date displayed at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how vildey protects your data.

Your continued use of the Platform following the effective date of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any material change, you may request account closure in accordance with our Terms & Conditions.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data by vildey, please reach out to our team using the contact details below:

For general account support or responsible gaming assistance, please visit our FAQ page or our Responsible Gaming page.