Privacy Policy — jp788

jp788 operates the online gaming and sportsbook platform accessible at jp788.cam (the "Platform"). We take the privacy of our players seriously. This Privacy Policy describes how jp788 collects, uses, stores, and shares personal data in connection with your use of the Platform, and sets out the rights available to you under applicable data-protection law.

This Policy applies to all individuals who:

• Visit the jp788 Platform as a guest or registered player;
• Register an account, submit a deposit or withdrawal request, or engage with any feature of the Platform;
• Contact jp788 via Live Chat, email, or any other support channel;
• Receive marketing communications from jp788 where consent has been provided.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how your personal data is processed as described herein, you should not use the Platform and should contact us to request closure of any existing account.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly. Where there is any inconsistency between this Policy and the Terms & Conditions in relation to data-processing matters, this Policy prevails.

In this Privacy Policy, the following terms carry the meanings set out below:

jp788 collects Personal Data through several channels. The categories of data collected and the circumstances in which they are collected are set out below.

3.1 Data You Provide to Us Directly

• Registration Data: Full legal name, date of birth, gender, residential address (including city — e.g., Jakarta, Surabaya, Bandung, Medan, or Bali), email address, and mobile phone number.
• K YC Documents: Government-issued photographic identity document (Indonesian KTP, passport, or driving licence), proof of residential address, proof of payment method ownership, and selfie photographs where requested.
• Financial Data: Bank account details (BCA, BRI, BNI, Mandiri), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal amounts denominated in IDR.
• Support Communications: The content of messages, chat transcripts, and emails you send to jp788's support team, together with any attachments or screenshots you provide.
• Responsible Gaming Declarations: Self-assessment responses, deposit limit preferences, session time settings, and any self-exclusion requests you submit through the Platform's responsible gaming tools.

3.2 Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, time spent on each page, clicks, search queries entered on the Platform, game sessions initiated, wagering history, and navigation paths.
• Transaction Logs: Timestamps, amounts, payment method references, and outcome records for all deposits, withdrawals, and wagers placed on the Platform.
• Cookie Data: Session tokens, preference settings, and analytical identifiers placed on your device in accordance with Section 7 of this Policy.

3.3 Data Received from Third Parties

• Identity Verification Partners: Confirmation of document authenticity and identity-match scores from our KYC service providers.
• Payment Processors: Transaction status updates and fraud-screening results from Indonesian bank networks and e-wallet providers.
• Responsible Gaming Databases: Self-exclusion status notifications from recognised responsible gaming registries where applicable.

jp788 uses your Personal Data only for the purposes set out in this clause. We do not use your data in any manner that is incompatible with those purposes without first obtaining your explicit consent or establishing a separate lawful basis.

• Account Management: To create and maintain your player account, authenticate your identity on login, manage your account settings, and communicate with you about your account status.
• Service Delivery: To process deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja; to settle wagers placed on football markets, live casino games, slot titles, togel (Indonesia's traditional numbers lottery) draws, and other products on the Platform; and to credit winnings to your account balance.
• Identity Verification (KYC): To verify your identity and age in accordance with our responsible gaming obligations and anti-money laundering (AML) compliance requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, multi-accounting, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• Legal and Regulatory Compliance: To meet our obligations under applicable law, including record-keeping requirements, responses to lawful requests from competent authorities, and maintenance of our AML and counter-terrorist financing (CTF) programme.
• Responsible Gaming: To monitor play patterns, enforce deposit limits and session time restrictions you have set, implement self-exclusion orders, and identify indicators of problem gambling so that we can direct relevant resources to players who may need support.
• Platform Improvement: To analyse aggregated and anonymised usage data for the purpose of improving the Platform's user experience, product offering, and technical performance.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal promotions (such as those tied to Idul Fitri, Ramadhan, or Indonesian Independence Day) where you have provided your explicit consent. You may withdraw consent at any time as described in Section 9.
• Customer Support: To respond to your enquiries, resolve complaints, and maintain records of support interactions for quality assurance and training purposes.

jp788 processes your Personal Data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing that is necessary to perform our contract with you — that is, to operate your account, process transactions, and deliver the gaming and sportsbook services you have registered to receive. Without this processing, jp788 cannot provide the Platform to you.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML obligations, record-keeping mandates, and responses to lawful orders from competent authorities.
• Legitimate Interests: Processing carried out for purposes that represent our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. These include fraud prevention, Platform security, network integrity monitoring, and internal analytics aimed at improving our service quality.
• Consent: Processing for which you have given a clear, specific, and freely withdrawable consent — principally the sending of marketing communications and the use of non-essential analytics cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital Interests: In exceptional circumstances, jp788 may process data where it is necessary to protect the vital interests of a player — for example, where a responsible gaming concern presents a risk to that individual's wellbeing and we need to act swiftly to enforce a self-exclusion or refer the player to support services.

jp788 does not sell, rent, or trade your Personal Data to any third party for marketing purposes. We disclose your data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment Service Providers: Indonesian bank networks (BCA, BRI, BNI, Mandiri) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the transaction data necessary to process your deposits and withdrawals. These entities are independent data controllers for their own payment infrastructure.
• KYC and Identity Verification Partners: Third-party identity verification providers receive KYC Data to conduct document authenticity checks and identity matching. All such providers operate under written data-processing agreements that restrict use of the data to the contracted KYC purpose.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session identifiers and game-result data necessary to deliver and settle game outcomes. These providers do not receive your full registration or financial data.
• Fraud Prevention and Security Services: Specialist fraud-screening partners may receive anonymised or pseudonymised behavioural data to assist in detecting suspicious activity patterns.
• Legal Authorities: jp788 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, regulation, or a binding legal order.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of jp788's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.
• Professional Advisers: Legal counsel, auditors, and compliance consultants may access Personal Data on a strictly confidential basis where necessary to provide professional services to jp788.

jp788 uses cookies and similar local storage technologies on the Platform. The following table describes each category of cookie we deploy, its purpose, and its retention duration.

jp788 does not use advertising cookies, cross-site tracking pixels, or third-party social media tracking scripts on the Platform. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform.

jp788 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and Registration Data: Retained for the duration of your active account plus five years following account closure, to meet AML record-keeping obligations and to handle any post-closure disputes or regulatory enquiries.
• KYC Documents: Retained for five years from the date of submission or from the date of account closure, whichever is later, in accordance with anti-money laundering compliance requirements.
• Transaction Records (deposits, withdrawals, wagers): Retained for five years from the date of the transaction.
• Support Communications: Retained for two years from the date of the last interaction, for quality assurance and dispute-resolution purposes.
• Marketing Consent Records: Retained for the duration of your consent plus three years, to demonstrate compliance with consent obligations.
• Analytics Data: Retained in anonymised, aggregated form only; individual-level analytics data is anonymised within 12 months of collection.
• Responsible Gaming Records: Self-exclusion records and problem-gambling assessments are retained for the duration of the exclusion period plus five years, to prevent circumvention and to respond to regulatory enquiries.

Where retention of your data is no longer necessary and no legal obligation requires its preservation, jp788 will securely delete or irreversibly anonymise the data. Physical identity documents are shredded; digital records are overwritten using multi-pass deletion protocols.

Subject to applicable law and certain limited exceptions, you hold the following rights in relation to your Personal Data held by jp788. You may exercise any of these rights by contacting us via Live Chat or at the support email address listed in Section 14.

jp788 will respond to all data rights requests within 30 calendar days of receipt. Where a request is particularly complex, we may extend this period by a further 30 days and will notify you accordingly. There is no charge for making a data rights request, provided requests are not manifestly unfounded or excessive.

We may need to verify your identity before processing a data rights request. This is to ensure that Personal Data is not disclosed to an unauthorised person.

jp788 is operated internationally and uses service providers whose infrastructure may be located outside Indonesia. When your Personal Data is transferred to a country that may not have equivalent data-protection legislation to Indonesia's PDP Law, jp788 takes appropriate safeguards to ensure that your data remains protected to a standard at least equivalent to that afforded under this Policy.

Appropriate safeguards for cross-border transfers include:

• Binding contractual clauses in data-processing agreements with overseas Data Processors that impose data-protection obligations consistent with this Policy;
• Transfers only to countries or organisations that jp788 has assessed as providing an adequate level of data protection;
• Encryption of all data in transit using TLS 1.3, so that data cannot be read or tampered with during transmission.

The primary categories of Personal Data that may be transferred internationally are KYC verification data (processed by our identity verification partner), game-session data (processed by game studio servers), and analytics data (processed by our anonymised analytics infrastructure). In each case, contractual safeguards are in place.

The jp788 Platform is strictly for adults aged 21 and above. jp788 does not knowingly collect Personal Data from individuals under the age of 21, and does not permit anyone under that age to register an account or access any real-money gaming feature.

As part of the registration and KYC process, jp788 collects date-of-birth information and requires documentary proof of age. Accounts that cannot be verified as belonging to a player aged 21 or above will be suspended pending verification and permanently closed if verification fails. Any data collected in connection with an underage account will be securely deleted following closure, except where retention is required to document the closure and prevent re-registration.

If jp788 becomes aware that Personal Data has been collected from a person under the age of 21 without appropriate age verification having been completed, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor may have registered an account on the Platform, please contact us immediately via Live Chat or at the support email address in Section 14.

jp788 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction. Key measures include:

• Encryption in Transit: All data transmitted between your browser or device and the jp788 Platform is encrypted using TLS 1.3, the current industry standard for transport-layer security. Connections using older, insecure protocol versions are rejected.
• Encryption at Rest: Personal Data stored on jp788's servers — including KYC documents, financial records, and player account data — is encrypted using AES-256.
• Access Controls: Access to Personal Data within jp788's systems is restricted on a need-to-know basis. All staff with access to sensitive data are subject to background screening and confidentiality obligations.
• Multi-Factor Authentication: Administrative access to systems containing Personal Data requires multi-factor authentication (MFA). We encourage players to enable any available account-security features for their own accounts.
• Penetration Testing: jp788 engages independent security specialists to conduct periodic penetration tests and vulnerability assessments of the Platform's infrastructure.
• Incident Response: jp788 maintains a documented data-breach response procedure. In the event of a security incident that poses a risk to your rights and freedoms, jp788 will notify affected players without undue delay and take all reasonable steps to contain the incident and prevent recurrence.
• Secure Document Destruction: Physical KYC documents (where applicable) are destroyed by shredding. Digital documents are permanently deleted using multi-pass overwrite protocols at the end of their retention period.

jp788 reserves the right to amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or Platform features. When material changes are made, jp788 will notify registered players via email or through an on-platform notification at least seven calendar days before the amended policy takes effect.

The "Last Updated" date at the top of this page will be revised on each amendment. We encourage you to review this Policy periodically so that you remain informed about how your Personal Data is being handled.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement that you have read the revised Policy. If you do not agree with the amended terms, you should stop using the Platform and contact us to request closure of your account. Any data collected prior to the amendment date will continue to be handled in accordance with the version of the Policy in effect at the time of collection, unless the amendment is required by law.

jp788 is the Data Controller responsible for your Personal Data collected through the Platform. If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your data has been handled, please contact us through any of the following channels:

• Live Chat: Available directly on the Platform, 24 hours a day, 7 days a week. First-response target: under 90 seconds.
• Support Email: [email protected] — plain text only, not a clickable link. Email responses are targeted within 30 calendar days for data-rights matters and within 24 hours for general support enquiries.

When submitting a data-rights request, please include your registered email address and account username so that we can verify your identity and process your request efficiently.

jp788 is committed to resolving all privacy-related concerns fairly and promptly. If, after contacting us, you remain dissatisfied with our handling of a privacy matter, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction.