vilaPrivacy Policy

This page describes what we collect when you use vila and how we keep that data protected. We at vila take your privacy seriously. When you create an account, deposit funds, play games, or withdraw your winnings, we collect information necessary to verify your identity, process your payments, and comply with local regulations. We never sell your personal data to third parties, and we use encryption and secure storage to protect everything you share with us.

Our privacy approach is built on transparency. We explain what data we collect, why we collect it, who can access it, and how long we keep it. If you use our Android app or access vila through Safari on iOS, or if you deposit via DANA, e-wallet, mobile banking, local payment, online payment, or bank transfer, this policy covers all of your interactions with us. Your data is encrypted in transit and at rest, and we comply with applicable data protection regulations in the jurisdictions where we operate.

If you have questions about your privacy on vila, or if you want to request access to your data, delete your account, or file a complaint, contact our support team through the app or FAQ section. We respond to data requests within two business days.

What data we collect on vila

We collect different types of information depending on how you use vila. When you create an account, we ask for your email address, phone number, full name, date of birth, and residential address. This information is required for account creation and is used to verify your identity during KYC verification before your first withdrawal.

When you deposit or withdraw funds through DANA, e-wallet, mobile banking, local payment, online payment, or bank transfer (e-wallet, mobile banking, local payment, online payment), we receive payment confirmation data from our payment partners. This data includes the payment method, amount, timestamp, and status. We store this information to track transactions and prevent fraud. We never store your full card number or bank account number — our payment partners handle that securely on their own servers.

When you play games on vila, we log which games you've played, how much you wagered, your results, and timestamps. This data helps us track your account activity, prevent fraud, and resolve disputes. We also collect device information when you use our Android app or access us through your iOS browser — your device type, operating system version, app version, and connection type. This helps us optimize our platform for your device and diagnose technical issues.

How we use your data on vila

We use your personal information for five main purposes: account verification, payment processing, fraud prevention, customer support, and legal compliance. Your email and phone number are used to send you account confirmations, withdrawal approvals, and password reset links. Your identity documents (photo ID and proof of address) are used only for KYC verification and are deleted after verification is complete.

Your payment data is used to process deposits and withdrawals and to detect fraudulent transactions. Our fraud detection system checks each withdrawal against your account history and spending patterns. If we flag a withdrawal as suspicious, we may request additional information before approving it. This protects both your account and our platform.

Your game play data is used to maintain your account balance, calculate your winnings, and resolve disputes. If you contact our support team about a game result or transaction, we use this data to investigate and respond. We also use aggregated, anonymised data to improve our platform and games — for example, we may analyse which games are most popular or which payment methods are fastest.

• Data Purposes
• Data Retention
• Data Sharing

Data security and encryption on vila

We protect your data using industry-standard encryption. When you log in to vila through our Android app or iOS browser, your login credentials are encrypted with TLS (Transport Layer Security). Your password is hashed and salted before storage, so even our team cannot see your actual password. If you enable two-factor authentication (2FA), your second code is encrypted as well.

All data in our databases is encrypted at rest using AES-256 encryption. Our servers are located in secure, physically protected data centres. We perform regular security audits and penetration tests to identify and fix vulnerabilities. If we discover a data breach, we will notify you immediately by email and through the app, and we will take steps to prevent future breaches.

Cookies and tracking on vila

We use cookies to remember your login session and preferences. Our Android app does not use cookies — instead, it stores your session token locally on your phone. Our iOS browser access uses standard browser cookies. These cookies expire after 30 days of inactivity for security. You can clear cookies from your browser settings anytime.

We do not use third-party advertising or tracking cookies. We do not use Google Analytics or similar services that track users across multiple websites. We collect only data necessary to operate vila — we do not build profiles of your behaviour outside our platform for marketing purposes.

Your rights on vila

You have the right to access all personal data we hold about you. Contact our support team and request a data export — we will provide your data in a machine-readable format within two business days. You have the right to request corrections if your data is inaccurate. You have the right to request deletion of your data, subject to legal retention requirements — for example, we must keep transaction records for five years to comply with financial regulations.

You have the right to withdraw consent for certain data uses. For example, if you do not want us to send you promotional emails, you can opt out in your account settings. If you believe your privacy has been violated, you can file a complaint with our support team. We will investigate and respond within five business days. If you are not satisfied with our response, you may file a complaint with your local data protection authority.

Data transfer and jurisdiction

We operate vila across multiple jurisdictions, including Indonesia, and our data centres may be located outside your country. When you use vila from Jakarta, Surabaya, Bandung, or Medan, your data may be processed or stored on servers outside Indonesia. By using vila, you consent to this data transfer. We apply the same data protection standards regardless of server location — your data is encrypted in transit and at rest, and access is restricted to authorised personnel.

Our services are available only where local law permits. If you have questions about data privacy, jurisdiction, or our data practices, contact our support team. We are committed to protecting your privacy and complying with all applicable data protection regulations.

Summary of our privacy commitments on vila

We at vila collect only the data necessary to verify your account, process your payments, prevent fraud, and comply with regulations. We never sell your data to third parties. We encrypt all data in transit and at rest, and we delete data according to legal requirements. You have the right to access, correct, and delete your personal data, subject to legal retention obligations. We respond to data requests within two business days and investigate privacy complaints within five business days.

Our privacy policy applies to all ways you use vila — whether through our Android app, iOS browser, desktop, or any future device or platform we launch. We may update this policy from time to time — we will notify you of material changes by email or app notification. Continued use of vila after such notification constitutes acceptance of the updated policy.

If you have any questions about privacy on vila, contact our support team through the app or FAQWe are here to help.