vava Privacy Policy
This page describes what data we collect when you use vava and how we keep that information protected. We at vava take your privacy seriously and are committed to being transparent about our practices. When you create an account, deposit funds, or play on our platform, you share information with us—and we handle that information with care under strict security protocols.
Our privacy practices comply with the legal requirements of the jurisdictions in which we operate. We collect only the information we need to verify your identity, process your payments, and provide customer support. We do not sell your data to third parties, and we limit access to your information to authorized staff members who require it for legitimate business purposes.
This document explains what we collect, why, how long we keep it, your rights regarding your data, and how to contact us if you have concerns.
What information we collect on vava
We collect different types of information depending on how you interact with our platform. When you open a vava account, we collect your legal name, date of birth, email address, phone number, and physical address. These details are required for account verification and compliance with payment regulations. We also collect your identity card number before your first withdrawal—this is mandatory for payment providers and helps prevent fraud.
We collect payment information when you deposit or withdraw. If you use DANA, e-wallet, mobile banking, local payment, or online payment, we receive transaction confirmations showing that a transfer occurred, but we do not store your wallet credentials or PIN. Bank transfers to e-wallet, mobile banking, local payment, or online payment require your account number and bank code, which we store only to process your withdrawals. e-wallet payments do not require us to store banking details beyond what the payment provider manages.
Account activity and gameplay data on vava
We log your login timestamps, devices you use to access vava (Android APK, iOS browser, or desktop), your IP address, and your general location (country and city level, not your home address). We track your gameplay—which games you play, your stakes, and your outcomes—to maintain accurate account records and settle your bets correctly. We also record your support interactions, including messages to our customer service team and any account changes you request.
How we use your information on vava
We use your data for four primary purposes. First, account verification and compliance: we verify your identity to prevent fraud, comply with payment-provider regulations, and meet anti-money-laundering requirements. Second, payment processing: we use your payment details to execute deposits and withdrawals through mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment. Third, customer support: we use your information to respond to your inquiries, resolve disputes, and assist with account access issues. Fourth, platform operation: we analyze gameplay logs to ensure fair game outcomes, maintain game integrity, and detect suspicious activity.
We do not use your data for marketing unless you opt in. We will never email you promotional offers without your explicit consent. We may send transactional emails—payment confirmations, account notifications, security alerts—without consent because these are necessary to service your account. If you wish to stop transactional emails, you may close your account, but vava cannot function without them.
Data storage and international transfers on vava
We store your data on secure servers. Our servers may sit outside your jurisdiction—likely in regional data centres across Southeast Asia or internationally. By creating a vava account, you consent to your data being stored and processed outside Indonesia if necessary for platform operation. We maintain backup copies of your data to prevent loss in case of system failure. We encrypt sensitive information (passwords, identity card numbers, payment details) both in transit and at rest.
We retain your account information for as long as your account is active. After account closure, we retain transaction records for one year to comply with payment-provider regulations and resolve any disputes. We then delete or anonymize your personal information unless legal obligations require us to retain it longer. Law-enforcement requests may override this policy.
Your rights regarding your data on vava
You have the right to access your personal information. Contact our support team with a data-access request, and we will provide you with a copy of the information we hold about you within one standard business day. You also have the right to request correction of inaccurate data—if your name or address is wrong, email us and we will update it immediately.
You may request deletion of your account and associated data. We will close your account and schedule your data for deletion after the one-year retention period unless law requires us to keep it longer. You cannot request deletion of transaction records during an active withdrawal dispute or pending investigation. If you have a legitimate privacy concern, escalate your request to our support team and we will review it within five business days.
Cookies and tracking on vava
We use session cookies to maintain your login and track your browsing within vava. These cookies expire when you close your browser. We do not use third-party analytics trackers or retargeting pixels. Our Android APK does not embed external tracking libraries. Our iOS browser experience uses standard Safari cookies but does not share data with external advertisers. You can disable cookies in your browser settings, but doing so may prevent vava from functioning correctly.
Security practices on vava
We at vava employ industry-standard security measures to protect your data. Your password is hashed and salted—we never store it in plain text. Your identity card number and payment details are encrypted. We restrict staff access to personal information to authorized personnel only, and we log all access for audit purposes. We conduct regular security assessments and penetration testing to identify and fix vulnerabilities before they become exploitable.
Despite our efforts, no system is non-specific info secure. If we discover unauthorized access to your account or a data breach affecting our platform, we will notify you by email within 48 hours. We will inform you of what data was compromised, what steps we are taking to secure it, and what steps you should take to protect your accounts on other platforms. We will cooperate with law-enforcement investigations if required.
Third-party links and services on vava
vava may link to other websites or services, such as our payment providers (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet) or sports data feeds covering Liga 1, Piala AFF, and other tournaments. We are not responsible for the privacy practices of those external services. When you leave vava and visit another site, that site's privacy policy applies. We recommend reviewing the privacy policies of any third-party sites you interact with.
Changes to this privacy policy
We may update this policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or by posting an updated version on this page with a new effective date. Continued use of vava after changes take effect means you accept the updated policy.
Contact us about privacy on vava
If you have a privacy concern, question about our data practices, or wish to exercise your rights under this policy, contact our support team through the Help section on vava. Include your account details and a clear description of your request. We aim to respond within one standard business day. If you are dissatisfied with our response, you may escalate your complaint to the data-protection authority in your jurisdiction where applicable.
We are committed to respecting your privacy and operating vava transparently. Thank you for trusting us with your information.