At spiv2, the privacy and security of your personal data are foundational commitments, not afterthoughts. This Privacy Policy explains exactly what information we collect from you as an Indonesian player, why we collect it, how we use and protect it, who we share it with, and what rights you hold over your own data. We encourage you to read this document in full before registering your spiv2 account.
spiv2 ("we", "us", "our") operates the online casino and sportsbook platform accessible at https://spiv2.net. For the purposes of this Privacy Policy, spiv2 acts as the data controller in respect of the personal data collected from Members who register and use our services.
Our platform is designed primarily for adult players in Indonesia who are 21 years of age or older. All personal data collected through spiv2 is processed in accordance with our obligations under applicable data protection principles, including the right to access, the right to correction, and the right to erasure, as described in Section 10 of this Policy.
If you have any questions about how spiv2 handles your personal data, or wish to exercise any of your rights, please contact our Data Protection team at [email protected].
spiv2 collects personal data that is necessary to provide our services, comply with our legal obligations, and protect the integrity of our platform. The categories of data we collect are detailed in the table below:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP or passport) | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, phone number, residential address in Indonesia | Account communications, support, transaction notifications |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts, deposit and withdrawal history | Payment processing, fraud prevention, AML compliance |
| Gaming Activity Data | Game history, wager amounts, win/loss records, session durations, betting preferences, bonus usage | Service delivery, responsible gaming monitoring, fraud detection |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone | Platform security, geolocation compliance, fraud prevention |
| Usage Data | Pages visited, links clicked, features used, session timestamps, referral source | Platform improvement, analytics, personalisation |
| Communications Data | Live chat transcripts, support email correspondence, feedback submissions | Customer support, dispute resolution, quality assurance |
| Marketing Preferences | Email opt-in/opt-out status, preferred communication channels, promotional response history | Marketing communications (with consent), preference management |
Sensitive Data: spiv2 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information, except where strictly required by law (for example, where a self-exclusion request relates to a gambling disorder). Where such data is collected, it is handled with enhanced protection and is not used for any commercial purpose.
spiv2 collects personal data through the following channels:
spiv2 uses your personal data for the following purposes:
spiv2 processes your personal data on one or more of the following legal bases:
Your Consent Rights: Where spiv2 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time by contacting us at [email protected] or by updating your account communication preferences. Withdrawal of consent does not affect any processing already carried out on the basis of that consent prior to withdrawal.
spiv2 does not sell your personal data to third parties for commercial gain. We share your personal data only in the following circumstances and only to the extent strictly necessary:
All third parties with whom spiv2 shares personal data are required to process that data lawfully, securely, and solely for the purposes for which it was shared. spiv2 remains responsible for ensuring appropriate contractual safeguards are in place.
spiv2 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, or contractual obligations. Our standard retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years after closure | AML regulatory obligation |
| Financial Transaction Records | 5 years from transaction date | AML / financial record-keeping obligation |
| KYC Documents | 5 years after account closure | AML regulatory obligation |
| Gaming Activity Logs | 3 years from activity date | Legitimate interests (dispute resolution, responsible gaming) |
| Support Communications | 3 years from last contact | Legitimate interests (dispute resolution, quality assurance) |
| Marketing Preference Records | 3 years from last interaction or opt-out, whichever is later | Legal obligation (proof of consent / opt-out) |
| Self-Exclusion Records | Indefinitely (to prevent re-registration) | Responsible gaming obligation / legitimate interests |
When a retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
spiv2 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security practices include:
Security Incident Notification: In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, spiv2 will notify affected Members without undue delay and will take all reasonable steps to contain, investigate, and remediate the breach. Please notify us immediately at [email protected] if you suspect any unauthorised access to your spiv2 account.
spiv2 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit our site. The categories of cookies we use are as follows:
You can control cookie settings through your browser. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling certain categories of cookies may affect the functionality of the spiv2 platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.
spiv2 respects your rights over your personal data. Subject to applicable law and certain exceptions (for example, where retention is required for legal compliance), you hold the following rights:
Request a copy of all personal data spiv2 holds about you, along with details of how it is processed.
Request correction of any inaccurate or incomplete personal data held in your spiv2 account.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that spiv2 restrict processing of your data in certain circumstances, such as while a dispute regarding data accuracy is resolved.
Request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Object to spiv2 processing your data on the basis of legitimate interests, including for direct marketing purposes.
To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Member ID]". spiv2 will respond within 30 days of receiving a valid request. We may require you to verify your identity before processing your request to ensure that personal data is not disclosed to an unauthorised party.
spiv2 will only send you direct marketing communications — including promotional offers, bonus notifications, seasonal campaign emails, and platform news — if you have given your express consent to receive them at the time of registration, or subsequently through your account settings.
You may opt out of marketing communications at any time by:
Opting out of marketing communications does not affect transactional and account-management communications, which spiv2 may continue to send as they are necessary to administer your account and deliver our services.
spiv2 may send targeted promotional messages related to events relevant to Indonesian players — such as Idul Fitri, Chinese New Year (Imlek), the BRI Liga 1 season, and the AFF Cup (Piala AFF) — where you have consented to receive such communications. You retain the right to opt out at any time regardless of the type of marketing message.
spiv2 is strictly an adults-only platform. You must be at least 21 years of age to register a Member account and use our services. spiv2 does not knowingly collect personal data from anyone under the age of 21.
All registration applications are subject to age verification as part of the KYC process. Where spiv2 discovers — through its own verification procedures or through a report — that a Member account has been registered by or on behalf of a person under 21 years of age, spiv2 will:
If you are a parent or guardian and have reason to believe that a minor under your care has registered a spiv2 account without authorisation, please contact us immediately at [email protected].
21+ Only: spiv2 takes its age-restriction obligations seriously. Access to real-money games, sports betting, and all other wagering features on the spiv2 platform is restricted to adults aged 21 and over. Gambling can be addictive — please ensure our platform is kept out of reach of minors at all times.
The spiv2 platform may, from time to time, contain references to third-party services — such as game provider platforms, payment processor portals, or sports data feeds. Any interaction you have with those third-party services is governed by their own privacy policies, not by this Policy.
spiv2 does not control the data practices of third-party services and accepts no responsibility or liability for how those parties collect, use, or protect your personal data. We encourage you to review the privacy policies of any third-party service you interact with in connection with your spiv2 account.
spiv2 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, new legal obligations, or improvements to our platform. When a material change is made, spiv2 will notify active Members by email to their registered address, or by displaying a prominent notice on the platform, at least 7 days before the revised Policy takes effect.
The effective date at the top of this page will be updated whenever the Policy is revised. Your continued use of the spiv2 platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the platform and close your account by contacting our support team.
We encourage you to review this Privacy Policy periodically to stay informed about how spiv2 protects your personal data. The current version is always accessible at https://spiv2.net/privacy-policy.
If you have any questions, concerns, or complaints about this Privacy Policy, or wish to exercise any of your data rights, please contact the spiv2 Data Protection team through any of the following channels:
Our support team includes bilingual agents fluent in both English and Bahasa Indonesia, available around the clock, every day of the year, including all Indonesian public holidays.
For formal data rights requests — including subject access requests, erasure requests, and portability requests — please email [email protected] with the subject line "Data Rights Request — [Your Member ID]". spiv2 will acknowledge your request within 5 business days and provide a full response within 30 calendar days.
Beyond the formal policy language above, these are the six core principles that guide every data decision spiv2 makes.
spiv2 collects only the personal data that is genuinely necessary to provide our services, comply with legal obligations, and protect the platform. We do not collect data speculatively or for purposes we cannot clearly justify. If we do not need it, we do not collect it.
Every byte of data transmitted between your device and spiv2 is protected by 256-bit SSL/TLS encryption — the same standard used by global banks and financial institutions. Your account credentials, financial details, and personal information are never transmitted in plain text.
spiv2 has never sold Member personal data to a third party, and we never will. Your data is shared only with the specific service partners — payment processors, game providers, KYC services — who need it to deliver the services you have requested, under strict contractual controls.
This Privacy Policy is written in clear, plain English — not obscured in dense legalese. We want every Indonesian player to understand exactly how their data is handled before they register. The current version of this Policy is always publicly accessible at spiv2.net/privacy-policy.
Your data rights are real and actionable. Access your data, correct inaccuracies, request deletion, object to marketing — all through a simple written request to our support team. We respond within 30 days and we verify your identity first to protect you from unauthorised access to your own records.
spiv2 does not hold your personal data indefinitely. We apply clear, documented retention periods to every category of data we collect. When a retention period expires, data is securely deleted or irreversibly anonymised. You can find the full retention schedule in Section 7 of this Policy.
Now that you understand how spiv2 safeguards your personal data, you can play with complete confidence. Explore our full casino library, place a bet on the sportsbook, or discover our latest promotions — all on a platform built with your security and privacy at its core. Adults only, 21+.