At spiv5, we take your privacy seriously. This Privacy Policy explains what personal data we collect when you use the spiv5 Platform, how we use and store that data, who we may share it with, and how you can exercise your rights as a data subject. We encourage all Members to read this document in full before registering an account.
This Privacy Policy applies to all personal data processed by spiv5 in connection with the operation of the spiv5 Platform, accessible at spiv5.net, and all related digital services and products offered under the spiv5 brand. It applies to all registered Members, prospective Members who interact with the Platform without registering, and any individual whose personal data spiv5 processes in the ordinary course of operating its business.
spiv5 acts as the data controller in respect of the personal data it collects directly from users of the Platform. Where spiv5 engages third-party service providers who process data on its behalf, those providers act as data processors and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable data protection standards.
By accessing or using the spiv5 Platform — including browsing the website, registering an account, making a deposit, placing a bet, or contacting customer support — you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
| Term | Definition |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, contact details, financial information, device identifiers, and behavioral data. |
| Member | Any individual who has registered and holds an active account on the spiv5 Platform. |
| Platform | The spiv5 website (spiv5.net), mobile-optimized interface, and any associated digital services operated under the spiv5 brand. |
| Data Controller | The entity that determines the purposes and means of processing personal data — in this case, spiv5. |
| Data Processor | A third party that processes personal data on behalf of spiv5 under a data processing agreement, subject to spiv5's instructions. |
| Processing | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| KYC | Know Your Customer — the identity and age verification process required of all Members prior to withdrawal processing. |
| Cookies | Small text files placed on your device by the Platform to store session data, preferences, and analytics information. |
spiv5 collects personal data across several categories depending on your level of interaction with the Platform. The categories below describe the full scope of data we may hold about you.
When you create a spiv5 account, we collect the information you provide at the time of registration and during subsequent identity verification processes:
To facilitate deposits and withdrawals in Indonesian Rupiah (IDR), we collect and retain:
All activity on the Platform generates records that we retain for operational and regulatory purposes:
When you access the Platform, our servers and analytics systems automatically record technical information about your device and connection:
When you contact spiv5 through any support channel, we retain records of those interactions:
spiv5 collects personal data through the following channels and mechanisms:
spiv5 processes your personal data under one or more of the following legal bases, depending on the nature and purpose of the processing activity:
| Legal Basis | Examples of Processing Activities |
|---|---|
| Contractual Necessity | Processing registration data, transaction data, and game records to fulfil our obligations under the Member Agreement (Terms & Conditions). |
| Consent | Sending promotional emails, SMS messages, or WhatsApp notifications about bonuses, new games, and seasonal promotions. You may withdraw consent at any time via account settings or by contacting support. |
| Legal Obligation | KYC and AML verification, age checks, record retention required by our operating licence, and disclosure to authorities pursuant to lawful requests. |
| Legitimate Interests | Fraud prevention, platform security monitoring, internal analytics to improve product quality, and responsible gaming monitoring to identify at-risk players. |
spiv5 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your consent or establishing a new lawful basis.
We use your registration and identity data to create and maintain your Member account, authenticate your login sessions, process deposits and withdrawals in IDR, apply bonuses and promotional rewards, and provide personalised account features such as bet history and responsible gaming tools.
We are required to verify the identity and age of all Members before processing withdrawals. KYC data — including copies of identity documents and proof of address — is used exclusively for this verification purpose and is handled under strict access controls. All Members must be at least 21 years of age. spiv5 will immediately suspend any account where the Member is identified as being under 21.
Transaction data, device data, and behavioral analytics are used to detect and prevent money laundering, payment fraud, bonus abuse, multi-accounting, and other prohibited activities. Accounts flagged by our automated risk systems are subject to manual review by our compliance team. Where criminal activity is suspected, we are obligated to report this to the relevant authorities without notifying the subject Member.
Communications data — including live chat transcripts, email correspondence, and WhatsApp messages — is used to resolve your support queries, handle formal complaints, and improve the quality of our support services. Support communications are retained for a minimum of two years for dispute resolution purposes.
spiv5 uses betting activity data and account behavioral patterns to identify Members who may be showing signs of problem gambling. This includes monitoring for indicators such as rapidly escalating bet sizes, extended continuous session durations, frequent deposit activity following losses, and voluntary self-exclusion requests. Where our responsible gaming monitoring flags a concern, our trained support team may proactively reach out to the Member to offer information about our available responsible gaming tools.
With your explicit consent, we use your email address and phone number to send promotional communications about bonuses, new game releases, sports promotions, and seasonal offers relevant to the Indonesian market — such as Idul Fitri, Lebaran, Chinese New Year (Imlek), and Ramadhan promotions. You can opt out of marketing communications at any time by updating your preferences in account settings or by contacting support. Opting out of marketing does not affect transactional or account-related communications.
Aggregated and anonymised technical data — including page-view patterns, feature usage rates, and error logs — is used to improve the performance, security, and user experience of the Platform. Where possible, analytics are performed on anonymised data that cannot be traced back to an individual Member.
spiv5 does not sell your personal data to third parties. We share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.
To process deposits and withdrawals, we share necessary financial data with Indonesian bank payment gateways and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja). These providers receive only the data required to complete a specific transaction and are prohibited from using your data for any other purpose.
We engage licensed third-party identity verification and document authentication services. These providers process KYC documents on our behalf under data processing agreements and are not permitted to retain your documents beyond the verification workflow period.
Game providers such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive session identifiers necessary to initialise and settle individual game sessions. These providers do not receive your full identity data — only the session and wallet tokens required for game operation.
spiv5 will disclose personal data to regulatory bodies, law enforcement agencies, courts, or other competent public authorities where we are legally required to do so. We will endeavour to notify you of any such disclosure where legally permitted, but may be prevented from doing so by confidentiality obligations or court order.
In the event of a merger, acquisition, restructuring, or sale of all or part of spiv5's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and ensure that the receiving entity commits to protecting your data to at least the same standard as this Privacy Policy.
spiv5 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, and for as long as required by our operating licence and applicable legal or regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account registration data | For the duration of the active Member relationship, plus five (5) years after account closure. |
| KYC identity documents | Five (5) years from the date of submission or from the date of account closure, whichever is later. |
| Financial transaction records | Seven (7) years from the date of each transaction, in accordance with standard AML record-keeping requirements. |
| Betting and gaming activity | Five (5) years from the date of each session, for dispute resolution and auditing purposes. |
| Customer support communications | Two (2) years from the date of each interaction. |
| Marketing consent records | Retained for the duration of consent plus three (3) years as evidence of consent management compliance. |
| Technical & device logs | Ninety (90) days on a rolling basis for fraud and security monitoring. |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised. Where data is anonymised rather than deleted, the resulting data set cannot be linked back to any individual and is no longer treated as personal data for the purposes of this Policy.
spiv5 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or unlawful disclosure. These measures include:
The spiv5 Platform uses cookies and similar tracking technologies to provide core site functionality, maintain your login session, remember your preferences, and gather analytics data to improve the Platform. The following categories of cookies are used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for the Platform to function — includes session authentication tokens, CSRF protection, and load-balancing cookies. Cannot be disabled without breaking core functionality. | Session / up to 30 days |
| Functional | Store your language preferences, display settings, and any customisations you have applied to your account interface. | Up to 12 months |
| Analytics | Collect anonymised data about how visitors navigate the Platform — pages viewed, time on site, error occurrences. Used only for internal product improvement. No data is shared with advertising platforms. | Up to 24 months |
| Fraud Prevention | Device fingerprinting and behavioral analytics cookies used by our risk and compliance systems to detect multi-accounting, bot activity, and fraudulent transaction patterns. | Up to 12 months |
You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. spiv5 does not use cookies for third-party behavioural advertising.
As a data subject, you have the following rights in relation to the personal data spiv5 holds about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request — [Right Type]". We will acknowledge your request within two (2) business days and provide a substantive response within thirty (30) calendar days.
You have the right to request a copy of all personal data spiv5 holds about you, together with information about the purposes for which it is processed, the categories of data held, and any third parties with whom it has been shared. We will provide this information in a structured, commonly used format.
You have the right to request that any inaccurate or incomplete personal data spiv5 holds about you be corrected or completed. Many data fields — such as your email address and phone number — can be updated directly through your account settings. For identity document corrections, please contact our support team.
You may request that spiv5 delete your personal data. We will honour such requests where there is no overriding legal obligation to retain the data. Please note that KYC records, financial transaction records, and betting activity records are subject to mandatory retention periods under our operating licence and AML obligations, and cannot be deleted until those periods expire.
You may request that spiv5 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is under dispute, or while an objection to processing is being assessed. During a restriction period, spiv5 may store your data but will not actively process it for new purposes.
Where processing is based on your consent or on a contractual necessity, you have the right to receive the personal data you have provided to spiv5 in a structured, machine-readable format, and to have that data transmitted directly to another data controller where technically feasible.
You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing carried out on the basis of legitimate interests, where you believe that your individual rights and freedoms override those interests. spiv5 will assess such objections and cease the relevant processing unless there are compelling legitimate grounds that override your objection.
Where processing is based on your consent — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal. To withdraw marketing consent, update your notification preferences in your account settings or contact support.
The spiv5 Platform is strictly intended for adults aged 21 years and over. spiv5 does not knowingly collect or process personal data from individuals under the age of 21. If you are under 21, you must not attempt to register an account, access betting or gaming products, or submit any personal data to spiv5.
If spiv5 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated data will be deleted as promptly as practicable, and any deposits will be returned to the originating payment source. If you are a parent or guardian and you believe that a minor under your care has submitted personal data to spiv5, please contact us immediately at [email protected].
The spiv5 Platform may contain references to third-party services — including game studios, payment providers, and sports data feeds — whose own privacy policies govern the data they collect and process. spiv5 is not responsible for the privacy practices of any third-party service provider beyond the scope of its data processing agreements with those providers.
We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the spiv5 Platform. This Privacy Policy applies solely to personal data processed by spiv5 as data controller.
spiv5 operates servers and engages service providers across multiple jurisdictions. As a result, your personal data may be transferred to, stored in, and processed in countries outside of Indonesia. In all cases where personal data is transferred internationally, spiv5 ensures that appropriate safeguards are in place — including contractual data protection clauses — to maintain a standard of data protection equivalent to or greater than that described in this Privacy Policy.
By using the spiv5 Platform, you acknowledge and consent to the transfer of your personal data to other countries for the purposes described in this Policy, subject to those appropriate safeguards being in place.
spiv5 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date at the top of this page will be updated whenever a material change is made. Where changes are significant, spiv5 will provide advance notice to Members via email or an in-account notification at least seven (7) days before the updated Policy takes effect.
Your continued use of the spiv5 Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must cease using the Platform and request account closure before the new effective date.
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to raise a concern about how spiv5 handles your personal data, please contact our Data Protection team through any of the following channels. All formal data subject requests must be submitted in writing via email for verification purposes.
spiv5 aims to acknowledge all data subject requests within two (2) business days and to provide a substantive response within thirty (30) calendar days. If we are unable to comply with a request in full — for example, due to a mandatory retention obligation — we will explain the reason in our response.
Our privacy commitments go beyond legal compliance. Here are the six core principles that guide how we handle every piece of Member data.
Every data transfer between your device and spiv5 servers is protected by 256-bit SSL/TLS encryption — the same standard used by major international banks. Your credentials, transactions, and personal details travel securely at all times.
Access to Member personal data within spiv5 is granted on a role-based, need-to-know basis. Only the minimum number of authorised personnel required to perform a specific function can access your data — no exceptions.
spiv5 has a firm, unconditional policy against selling Member data to advertisers, data brokers, or any third party for commercial gain. Your personal information is used solely to operate the Platform and deliver the services you have requested.
Our Know Your Customer verification is handled by licensed identity verification partners. KYC documents are stored under strict access controls, retained only for the legally required period, and never shared beyond verified compliance workflows.
In the unlikely event of a data security breach that poses a risk to your rights, spiv5 commits to notifying affected Members without undue delay and providing clear guidance on protective steps you should take immediately.
You hold meaningful rights over your personal data — access, rectification, erasure, portability, restriction, and objection. Submit a written request to our Data Protection team and we will respond within 30 calendar days, no questions asked.
Now that you understand how spiv5 protects your privacy, explore our full range of betting and casino products — backed by SSL encryption, provably fair games, and 24/7 Indonesian-speaking support.