At vm789, protecting the personal data of our Members is a core operational commitment, not a checkbox exercise. This Privacy Policy explains precisely what information vm789 collects, why we collect it, how it is used and stored, who it may be shared with, and what rights you hold over your own data as a Member of the vm789 platform.
The following terms carry specific meanings throughout this Privacy Policy:
This Privacy Policy applies to all Personal Data collected by vm789 in connection with the operation of the vm789 online casino and sportsbook platform, including data collected through the following channels:
This Policy does not apply to third-party websites or services linked from the vm789 platform. vm789 is not responsible for the privacy practices of any third-party website, and Members are encouraged to review the privacy policies of any external service they access.
vm789 collects Personal Data across several categories, depending on the nature of a Member's interaction with the platform. The following table summarises the categories of data collected and their primary sources:
| Data Category | Examples | Primary Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, KTP or passport number | Registration form; KYC document upload |
| Contact Data | Email address, Indonesian mobile telephone number, residential address | Registration form; account settings updates |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, etc.), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts in IDR | Deposit/withdrawal requests; KYC verification |
| Gaming Activity Data | Game session logs, wager amounts, win/loss records, bonus usage, game preferences (slots, live casino, sportsbook, etc.) | Platform activity logs (automated) |
| Technical Data | IP address, device type and operating system, browser type and version, screen resolution, session timestamps, login history | Automated collection via cookies and server logs |
| Communications Data | Content of live chat transcripts, support email correspondence, in-platform message history | Member-initiated communications with vm789 support |
| Responsible Gaming Data | Deposit limit settings, self-exclusion requests, session time limit configurations, problem gambling support interactions | Account settings; responsible gaming support team |
| Marketing Preference Data | Email marketing opt-in/opt-out status, promotion claim history, communication language preference | Registration form; account settings; marketing interactions |
vm789 collects Personal Data through the following mechanisms:
vm789 processes Member Personal Data exclusively for the following defined purposes. We do not process Personal Data for any purpose incompatible with those listed below without first obtaining separate consent:
vm789 processes Member Personal Data under one or more of the following legal bases, depending on the specific processing activity:
vm789 does not sell, rent, or trade Member Personal Data to any third party for commercial purposes. Personal Data is shared with external parties only in the following strictly controlled circumstances:
The vm789 platform serves Members primarily based in Indonesia, and the majority of data processing occurs within secure server infrastructure. Some Third-Party Processors — particularly licensed game studios and cloud infrastructure providers — may process data in jurisdictions outside Indonesia. Where such international transfers occur, vm789 ensures that adequate safeguards are in place, including:
Members who wish to obtain further information about the specific safeguards applied to any particular international transfer of their Personal Data may contact vm789 at [email protected].
vm789 retains Member Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to applicable legal retention obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC Data | 5 years from account closure | AML legal obligation |
| Financial Transaction Records | 5 years from transaction date | Financial record-keeping requirement |
| Gaming Activity Logs | 3 years from last activity | Dispute resolution; regulatory audit |
| Communications Data | 2 years from last communication | Customer support quality; dispute records |
| Technical & Device Data | 13 months from collection | Security monitoring; fraud detection |
| Marketing Preference Data | Until consent is withdrawn, then 6 months | Consent; suppression list maintenance |
| Responsible Gaming Records | 5 years from account closure | Legal obligation; duty of care |
Following the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and platform improvement purposes.
The vm789 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The following categories of cookies are used:
vm789 does not use advertising or retargeting cookies that track Members across third-party websites. Cookie preferences for non-essential cookies can be managed through the cookie settings panel accessible in the vm789 platform footer area, or via the cookie management settings of your browser.
As a Member of the vm789 platform, you hold the following rights in respect of your Personal Data. vm789 is committed to responding to all valid data rights requests within 30 calendar days of receipt:
Request a copy of all Personal Data vm789 holds about you, including the categories of data, the purposes of processing, and any third parties with whom it has been shared.
Request correction of any inaccurate or incomplete Personal Data held in your vm789 account profile. Minor corrections (name spelling, contact details) can be made directly in account settings.
Request deletion of your Personal Data where it is no longer necessary for its original purpose, subject to any overriding legal retention obligations (e.g., AML record-keeping requirements).
Request that vm789 restrict the processing of your Personal Data — for example, while a rectification request is being assessed, or pending the outcome of a data erasure dispute.
Request a structured, machine-readable export of Personal Data you have provided to vm789 (such as account profile data and transaction history), suitable for transfer to another service provider.
Withdraw consent to marketing communications at any time via account settings or by emailing [email protected]. Withdrawal does not affect the lawfulness of processing conducted before the withdrawal date.
vm789 applies a layered technical and organisational security framework to protect Member Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:
While vm789 takes all reasonable steps to protect Member data, no online system can be guaranteed to be completely impenetrable. Members are encouraged to choose strong, unique passwords, enable 2FA, and contact [email protected] immediately if they suspect any unauthorised access to their account.
The vm789 platform is intended exclusively for adults aged 21 years and over. vm789 does not knowingly collect Personal Data from any individual under the age of 21. If vm789 becomes aware that Personal Data has been collected from a person under 21 — whether through registration, KYC review, or any other means — the associated account will be immediately closed, all collected data will be securely deleted (subject to any mandatory legal retention obligations), and any deposited funds will be returned to the originating payment method.
vm789's KYC verification process — which requires submission of a government-issued identity document confirming date of birth — serves as the primary mechanism for enforcing the 21+ age requirement. No withdrawal will be processed for any account that has not completed age verification. If you are a parent or guardian and believe that a minor has registered a vm789 account, please contact [email protected] immediately so that the account can be closed and the matter investigated promptly.
vm789 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform features, data processing practices, or organisational structure. When material changes are made to this Policy, vm789 will:
Your continued use of the vm789 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept a material amendment to this Policy, you should cease using the platform and submit a data erasure request as described in Section 11 before the revised Policy takes effect.
The current version of this Privacy Policy is always accessible at /privacy-policy. Previous versions are available on request by contacting [email protected].
If you have any questions, concerns, or requests regarding this Privacy Policy or vm789's handling of your Personal Data, please contact the vm789 Data Protection team through the following channel:
vm789 takes all privacy enquiries seriously. Our Data Protection team is staffed 24 hours a day, 7 days a week, including all Indonesian public holidays such as Idul Fitri, Idul Adha, and Independence Day (17 August). For urgent account security concerns — such as suspected unauthorised access — please also use the live chat function on the vm789 platform, which delivers a first response in under 90 seconds around the clock.
Privacy protection at vm789 is not a compliance afterthought — it is built into every layer of the platform, from account registration through to withdrawal processing and beyond.
Every byte of data exchanged between your device and the vm789 platform travels over 256-bit TLS 1.3 encrypted connections. Your login credentials, KTP details, IDR transaction amounts, and game session data are all protected in transit without exception.
vm789 requests only the identity documents genuinely required for age verification and AML compliance — your KTP or passport, a proof of address, and payment method confirmation. No additional sensitive data is collected beyond what regulation and security require.
Member passwords are never stored in readable form. vm789 applies modern one-way cryptographic hashing with unique per-account salts, meaning your password cannot be retrieved — even by vm789 engineers — from stored data under any circumstances.
vm789 has never sold and will never sell your Personal Data to advertising networks, data brokers, or social media platforms. Your gaming preferences, transaction history, and contact details exist solely to deliver your vm789 experience — not to fund third-party ad campaigns.
vm789 does not hold your data indefinitely. Each category of Personal Data has a defined maximum retention period — from 13 months for technical device data to 5 years for AML-required KYC records — after which data is securely deleted or anonymised.
vm789's infrastructure runs continuous intrusion detection and anomaly monitoring around the clock — including during Ramadhan, Idul Fitri, Nyepi, and all Indonesian public holidays. Any suspicious access pattern triggers an immediate automated alert and investigation response.
Now that you've reviewed how vm789 handles your personal data, you can browse the full platform with confidence. From live casino tables to sportsbook markets and 3,500+ certified slots — your privacy is protected every step of the way. 21+ only. Play responsibly.