Privacy Policy

Throughout this Privacy Policy, the following terms shall have the meanings assigned to them below, unless the context clearly requires otherwise:

v07apk acts as the Data Controller for all Personal Data collected and Processed through the Platform. As Data Controller, v07apk is responsible for ensuring that Personal Data is handled lawfully, fairly, and transparently, and that appropriate technical and organizational safeguards are maintained at all times.

All privacy-related inquiries, data access requests, and complaints may be directed to our Data Protection contact point:

• Email: [email protected] (plain text — not a link)
• WhatsApp: +62 811 0800 7007 (plain text — not a link)
• Response commitment: All privacy requests acknowledged within 48 hours; substantive response delivered within 30 calendar days.

v07apk collects Personal Data from you in several ways — directly when you register or transact, automatically as you use the Platform, and from third parties involved in payment processing or identity verification. The specific categories of Personal Data we collect are described in the table below:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than a KYC selfie used solely for identity verification), or health data unless you voluntarily disclose such information in the context of a responsible gaming self-exclusion request.

v07apk uses the Personal Data we collect for the following specific, documented purposes. We will not use your data for any purpose that is incompatible with those listed here without first notifying you and, where required, obtaining your consent:

• Account Management: To create, maintain, and secure your Account; to authenticate your identity at login; to process password resets and Account recovery requests.
• Transaction Processing: To process deposits and withdrawals in IDR via your chosen Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja); to verify that payment accounts belong to the registered Account holder; to maintain accurate financial records.
• KYC & AML Compliance: To verify your age (21+) and identity in compliance with our international licensing obligations and anti-money-laundering requirements; to screen against applicable sanctions lists; to detect and investigate suspicious financial activity.
• Service Delivery: To operate all Platform products including sports betting on BRI Liga 1, EPL, La Liga, and international fixtures featuring Timnas Indonesia; live casino games from Evolution Gaming; slot titles from Pragmatic Play, Microgaming, NetEnt, and Pocket Games Soft; and togel (numbers lottery) markets.
• Customer Support: To respond to inquiries, resolve disputes, process complaints, and deliver the 24/7 Indonesian-speaking support service our Members rely on.
• Responsible Gaming: To enforce deposit limits, cooling-off periods, and self-exclusion requests; to identify patterns of play that may indicate problem gambling and proactively reach out to affected Members.
• Marketing & Promotions: Where you have opted in, to send promotional offers, bonus notifications, and seasonal campaign communications relevant to the Indonesian calendar (Idul Fitri, Ramadhan, Indonesian Independence Day). You may withdraw marketing consent at any time via Account settings.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent unauthorized access, Account takeover, bonus abuse, multi-accounting, match-fixing participation, and other fraudulent activity.
• Platform Improvement: To analyze aggregated, anonymized usage data in order to improve game offerings, optimize the user interface, and enhance the overall Member experience.
• Legal Obligations: To comply with any applicable legal obligation, court order, regulatory direction, or lawful request from a competent authority.

v07apk Processes your Personal Data under the following legal bases, each of which applies to the specific purposes described in Section 4:

• Contractual Necessity: Processing required to perform our contract with you — operating your Account, processing deposits and withdrawals, settling bets, and providing customer support. Without this Processing, we cannot deliver the Platform services.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, age verification (21+), and responding to lawful requests from competent authorities.
• Legitimate Interests: Processing necessary for v07apk's legitimate business interests, including fraud prevention, Platform security, detection of multi-accounting and bonus abuse, and aggregated analytics for service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — principally for direct marketing communications (promotional emails, SMS, WhatsApp messages). You may withdraw consent for marketing at any time without affecting the lawfulness of prior Processing.

v07apk uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The types of cookies we deploy are categorized below:

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not prevent you from accessing core services but may reduce the quality of your experience.

v07apk does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We may share your Personal Data only in the limited circumstances described below:

• Payment Processors & Banking Partners: We share the minimum financial data required to process your transactions with our Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These parties act as Data Processors bound by contractual data protection obligations.
• Identity Verification Providers: We engage licensed KYC service providers to assist with document verification and age confirmation. These providers process only the data necessary for verification and are prohibited from using it for any other purpose.
• Game Software Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive pseudonymized session data necessary to deliver their game products. These providers do not receive your full identity data.
• IT Infrastructure & Cloud Providers: Hosting, database management, and security monitoring services that support Platform operations. All such providers are contracted as Data Processors and are subject to appropriate data protection agreements.
• Legal & Regulatory Authorities: Where required by law, court order, or a lawful direction from a competent regulatory or law enforcement authority, v07apk will disclose Personal Data to the extent strictly required to comply with that obligation.
• Business Transfers: In the event of a merger, acquisition, asset sale, or corporate restructuring, Member Personal Data may be transferred as part of the transaction. We will notify affected Members via email and provide opt-out options where legally required before any such transfer is completed.

In all cases where Personal Data is shared with a third-party Data Processor, v07apk ensures that an appropriate data processing agreement is in place, requiring the processor to maintain confidentiality, implement adequate security measures, and Process data only on v07apk's documented instructions.

As an internationally operated platform primarily serving Indonesian players, v07apk may transfer Personal Data to servers or service providers located outside Indonesia. Wherever such transfers occur, v07apk takes steps to ensure that your data receives a level of protection equivalent to that provided under applicable data protection principles, including:

• Entering into Standard Contractual Clauses or equivalent contractual data protection mechanisms with the receiving party.
• Restricting international transfers to jurisdictions that maintain internationally recognized data protection frameworks.
• Requiring third-party recipients to implement appropriate technical and organizational security measures.

If you have questions about the specific safeguards applied to any international transfer of your Personal Data, please contact us at the details provided in Section 14.

v07apk retains Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law, whichever is longer. Our standard retention periods are as follows:

• Active Account Data: Retained for the duration of the Account relationship and for a period of 5 years following permanent Account closure, to satisfy AML record-keeping obligations.
• KYC Documents: Identity and address verification documents are retained for a minimum of 5 years from the date of verification, in line with internationally recognized AML standards.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction.
• Customer Support Records: Support ticket and live chat records are retained for 3 years from the date the ticket was closed.
• Marketing Consent Records: Records of your marketing opt-in or opt-out decisions are retained for the duration of your Account plus 2 years to allow us to demonstrate compliance with consent requirements.
• Technical & Analytics Data: Server logs and anonymized analytics data are retained for up to 24 months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized data may be retained indefinitely for statistical and business improvement purposes, as it can no longer be used to identify any individual.

As a Member of v07apk, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact us using the details in Section 14. We will respond within 30 calendar days of receiving a valid request:

Please note that certain rights are subject to conditions and exceptions. For example, we may decline an erasure request where retention is required for legal compliance or to defend a legal claim. We will always explain the reason for any limitation on the exercise of your rights.

v07apk implements a layered set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, loss, alteration, or disclosure. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and our servers is encrypted using industry-standard TLS protocols. Our SSL certificate is maintained and renewed continuously.
• Encrypted Data Storage: Sensitive Personal Data — including KYC documents and financial account details — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Member Personal Data within v07apk is governed by strict role-based access controls. Only personnel who require access to Personal Data to perform their specific job function are granted that access. All internal access is logged and audited.
• Multi-Factor Authentication: Administrative access to systems holding Personal Data requires multi-factor authentication. We recommend Members also enable any available two-factor authentication option on their own Accounts.
• Regular Security Audits: v07apk conducts periodic internal security reviews and engages independent third-party specialists to perform penetration testing and vulnerability assessments.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, v07apk will notify affected Members promptly and take all reasonable steps to contain and remediate the breach.

The v07apk Platform is strictly restricted to adults aged 21 years and older. We do not knowingly collect Personal Data from anyone under the age of 21. If you are under 21, you must not use the Platform, create an Account, or submit any Personal Data to v07apk.

As part of our KYC verification process, v07apk requires all Members to provide proof of age before withdrawal privileges are activated. Any Account found to belong to a person under 21 will be immediately suspended, all funds will be returned to the verified payment source where possible, and all associated data will be securely deleted.

If you are a parent or guardian and believe your minor child has submitted Personal Data to v07apk, please contact us immediately at the details in Section 14. We will take prompt action to delete the data and close any associated Account.

v07apk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to the email address registered to your Account at least 14 days before the changes take effect.
• Display a prominent notice on the Platform for the same 14-day period.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may request Account closure as described in Section 14.

We encourage you to review this Privacy Policy periodically to stay informed about how v07apk protects your data.

For any privacy-related inquiry, data subject rights request, or complaint regarding the handling of your Personal Data by v07apk, please contact our Data Protection team using the following details:

• Email: [email protected] (plain text — not a link)
• WhatsApp: +62 811 0800 7007 (plain text — not a link)
• Support Hours: 24/7 — WIB (UTC+7), including all Indonesian public holidays.
• Response Commitment: All privacy requests acknowledged within 48 hours; full response within 30 calendar days of receipt of a complete, valid request.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the competent data protection authority in the jurisdiction applicable to your situation. v07apk will cooperate fully with any such authority in the resolution of a complaint.