Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how jp138 ("we", "us", "our", or "the Company") collects, uses, processes, stores, and protects the personal information of users ("you", "your", or "the User") who access and use our online gambling platform at https://jp138.cam and any associated services, mobile applications, or software (collectively, "the Platform").

jp138 recognizes the importance of data privacy and is committed to compliance with international data protection standards and best practices. We handle your personal information with the utmost care and transparency, ensuring that your data is processed lawfully, fairly, and only for legitimate purposes related to providing our sports betting, casino gaming, and related services.

By creating an account on jp138, accessing our Platform, or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal information as described herein. If you do not agree with any aspect of this Policy, you must immediately discontinue use of our services and refrain from creating an account.

2. Information We Collect

To provide you with a comprehensive betting and gaming experience, verify your identity, process transactions, and comply with legal obligations, jp138 collects various categories of personal information through multiple channels. The data we collect includes:

Personal Identification Information

During account registration and identity verification (KYC), we collect:

• Full legal name as it appears on government-issued identification
• Date of birth to verify you are 21 years of age or older
• Residential address including street, city, postal code, and province
• Email address for account communications and notifications
• Mobile phone number for account security and two-factor authentication
• Indonesian National Identity Card (KTP) number or passport number
• Copies of government-issued photo identification documents
• Proof of address documents (utility bills, bank statements, government correspondence)
• Selfie photograph holding your identification document

Financial and Transaction Information

To process deposits and withdrawals securely, we collect:

• Bank account details including account holder name, bank name, account number, and branch information for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI)
• E-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Transaction history including deposit amounts, withdrawal requests, bet stakes, winnings, and bonus activity
• Payment method verification documents (bank statements showing account ownership)
• Currency preferences and transaction timestamps

Gaming and Betting Activity Data

To provide personalized service and ensure platform integrity, we track:

• Betting history across sports betting, live betting, mix parlay accumulators, and Asian handicap markets
• Casino gaming activity including slot spins, live dealer game participation, togel lottery selections, and sabung ayam match betting
• Game preferences, favorite sports, favorite teams (e.g., Persija Jakarta, Persib Bandung, Bali United, Timnas Indonesia)
• Bonus claims, wagering progress, and promotional participation
• VIP tier progression and loyalty program activity
• Session duration, play patterns, and gambling behavior metrics used for responsible gaming monitoring

Technical and Device Information

When you access jp138, we automatically collect:

• IP address and geolocation data to verify you are accessing from a permitted jurisdiction
• Device type, operating system, and browser information
• Screen resolution and device identifiers
• Cookies and similar tracking technologies (see Section 8 for details)
• Access timestamps, pages viewed, and click patterns for security and user experience optimization
• Referral sources and marketing campaign attribution data

Communication Records

To maintain service quality and resolve disputes, we retain:

• Live chat transcripts with customer support agents
• Email correspondence sent to and from [email protected]
• Call recordings if phone support is utilized (with your consent where required by law)
• Feedback, survey responses, and user-generated content

3. How We Use Your Personal Information

jp138 processes your personal data for the following legitimate business purposes and legal obligations:

Account Management and Service Delivery

• Creating and maintaining your user account with unique login credentials
• Authenticating your identity each time you log in to prevent unauthorized access
• Processing deposits, withdrawals, and internal fund transfers
• Recording bets, settling wagers, and crediting winnings to your balance
• Applying bonuses, promotions, and VIP rewards according to program terms
• Providing customer support and responding to inquiries in Indonesian language
• Sending transactional notifications including deposit confirmations, withdrawal status updates, bet settlement, and account security alerts

Legal and Regulatory Compliance

• Verifying your age to ensure you are 21 years or older as required by gambling regulations
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks to prevent financial crime
• Monitoring transactions for suspicious activity, fraud, and potential money laundering patterns
• Complying with licensing requirements and gambling authority regulations
• Responding to legal requests, court orders, and law enforcement inquiries
• Maintaining audit trails and records as required by gaming regulations

Fraud Prevention and Platform Security

• Detecting and preventing fraudulent account creation, bonus abuse, and multi-accounting
• Identifying collusion, match-fixing participation, and betting syndicates
• Monitoring for bot usage, script automation, and other prohibited activities
• Protecting against cybersecurity threats including hacking, phishing, and DDoS attacks
• Enforcing our Terms and Conditions and investigating violations

Responsible Gaming and Player Protection

• Monitoring gambling behavior patterns to identify potential problem gambling indicators
• Implementing deposit limits, loss limits, and session time restrictions you set
• Processing self-exclusion requests and cooling-off period activations
• Providing reality check reminders during extended play sessions
• Intervening when we detect signs of at-risk gambling behavior and offering support resources

Marketing and Communication (With Your Consent)

• Sending promotional offers, bonus announcements, and VIP program updates via email or SMS
• Personalizing promotional content based on your gaming preferences (e.g., BRI Liga 1 betting bonuses for football fans)
• Notifying you of new game releases, slot tournaments, and seasonal promotions
• Conducting customer satisfaction surveys and requesting feedback

Note: You may opt out of marketing communications at any time by clicking the unsubscribe link in emails or contacting customer support. Transactional and account-related communications cannot be opted out as they are essential for service delivery.

Platform Improvement and Analytics

• Analyzing user behavior to optimize website design, navigation, and mobile responsiveness
• Testing new features, game offerings, and payment methods
• Measuring marketing campaign effectiveness and ROI
• Generating aggregated, anonymized statistical reports for business intelligence
• Improving customer support processes based on common inquiries and resolution times

4. When and How We Share Your Data

jp138 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data in the following limited circumstances:

Payment Processing Partners

We share necessary financial information with authorized payment service providers, banks, and e-wallet operators (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals. These partners are contractually obligated to use your data solely for transaction processing and to maintain strict data security standards.

Identity Verification and KYC Service Providers

We may use third-party identity verification services to validate your government-issued documents, verify your age, and perform anti-fraud checks. These providers operate under strict confidentiality agreements and data processing contracts that comply with international data protection standards.

Game Providers and Software Platforms

Your gameplay data may be shared with licensed game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, etc.) to deliver their games, calculate results, and detect irregular play patterns. These providers are bound by confidentiality agreements and are prohibited from using your data for any purpose other than providing their gaming services to jp138.

Legal and Regulatory Authorities

We are legally obligated to disclose personal information when required by:

• Court orders, subpoenas, or legal processes from competent authorities
• Gambling regulatory bodies and licensing authorities during audits or investigations
• Law enforcement agencies investigating suspected criminal activity, money laundering, or terrorism financing
• Tax authorities for income reporting and tax compliance purposes

Business Transfers

In the event jp138 undergoes a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified via email and prominent website notice of any such transfer, and the new entity will be required to honor this Privacy Policy and protect your data with equivalent safeguards.

Service Providers and Contractors

We engage trusted third-party service providers for:

• Customer support operations (live chat and email support systems)
• Data hosting and cloud storage infrastructure
• Email and SMS communication platforms
• Marketing analytics and campaign management tools
• Cybersecurity monitoring and threat detection services

All third-party service providers are carefully vetted, bound by data processing agreements, and permitted to access only the minimum data necessary to perform their specific functions. They are prohibited from using your data for their own purposes or retaining it longer than necessary.

5. Data Security Measures

jp138 employs comprehensive technical, organizational, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

Encryption Technologies

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using 256-bit SSL (Secure Socket Layer) encryption, the same technology used by major banks and financial institutions worldwide.
• Data-at-Rest Encryption: Personal information stored in our databases is encrypted using advanced cryptographic algorithms to prevent unauthorized access even in the unlikely event of a data breach.
• Payment Data Tokenization: Sensitive payment information is tokenized and stored in PCI-DSS compliant secure vaults managed by certified payment processors.

Access Controls and Authentication

• Role-based access control (RBAC) ensuring employees can access only the data necessary for their job functions
• Multi-factor authentication (MFA) required for all administrative and employee accounts
• Mandatory two-factor authentication (2FA) option available for player accounts
• Regular access audits and immediate revocation of credentials for departed employees
• Strong password policies enforced for all user and staff accounts

Network and Infrastructure Security

• Firewalls and intrusion detection/prevention systems (IDS/IPS) protecting our network perimeter
• Regular vulnerability scanning and penetration testing by independent security firms
• DDoS (Distributed Denial of Service) protection to ensure platform availability
• Secure data centers with 24/7 physical security, biometric access controls, and video surveillance
• Redundant backup systems and disaster recovery protocols

Operational Security Practices

• Mandatory data protection and security awareness training for all employees
• Strict confidentiality agreements signed by all staff and contractors
• Regular security audits and compliance assessments
• Incident response plan with designated security team available 24/7
• Continuous monitoring and logging of system access and suspicious activities

6. Data Retention and Deletion

jp138 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

Data Category	Retention Period	Reason
Account Information & KYC Documents	5 years after account closure	Legal compliance, AML regulations, dispute resolution
Transaction History	7 years after transaction date	Financial regulations, tax compliance, audit requirements
Betting & Gaming Activity	3 years after account closure	Regulatory compliance, dispute resolution, fraud prevention
Customer Support Records	3 years after last contact	Service quality, dispute resolution, training purposes
Marketing Consent & Preferences	Until consent withdrawn or 2 years of inactivity	Compliance with marketing regulations
Technical Logs & Analytics	12 months	Security monitoring, platform optimization

Automated Deletion Process

Upon expiration of the applicable retention period, personal data is automatically and permanently deleted from our active systems. Backup copies stored for disaster recovery purposes are overwritten according to our backup rotation schedule, ensuring no residual data remains accessible beyond the legally required retention periods.

7. Your Privacy Rights and Choices

Under applicable data protection regulations, you have the following rights regarding your personal information held by jp138:

Right to Access

You have the right to request a copy of all personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most account information directly through your account settings, or contact customer support for assistance.

Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information when it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory obligations to retain certain data for specified periods (see Section 6).

Right to Restriction of Processing

You can request that we temporarily restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of your data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a portable format and, where technically feasible, request that we transmit it directly to another service provider.

Right to Object

You may object to processing of your personal data for marketing purposes at any time by clicking the unsubscribe link in promotional emails or contacting customer support. You can also object to processing based on legitimate interests, subject to our legal obligations.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Team at [email protected] with your full name, registered email address, and specific request. We may require additional verification of your identity before processing requests that involve access to or deletion of personal information. We aim to respond to all requests within 30 days.

8. Cookies and Tracking Technologies

jp138 uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

Types of Cookies We Use

• Essential Cookies: Necessary for platform functionality including login authentication, session management, and security features. These cannot be disabled as they are essential for service delivery.
• Performance Cookies: Collect anonymous information about how you use our platform, including pages visited, time spent, and navigation patterns. This helps us optimize site performance and user experience.
• Functional Cookies: Remember your preferences such as language selection, favorite sports, and display settings to provide a personalized experience.
• Marketing Cookies: Track your visits across websites to deliver relevant advertisements and measure campaign effectiveness. You can opt out of marketing cookies through your browser settings.

Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling essential cookies will impair platform functionality and may prevent you from accessing certain features. Instructions for managing cookies in popular browsers can be found in their respective help sections.

9. Third-Party Links and Services

The jp138 platform may contain links to third-party websites, including game provider sites, payment gateways, and social media platforms. This Privacy Policy applies only to information collected by jp138. We are not responsible for the privacy practices or content of third-party sites. We encourage you to read the privacy policies of any external websites you visit.

Social Media Integration

If you interact with jp138 through social media platforms or share content from our site, those platforms may collect information about your activities. Your interactions with social media plugins are governed by the privacy policies of the respective social media companies, not by this Privacy Policy.

10. International Data Transfers

jp138 operates globally and may transfer your personal information to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure that appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Data processing agreements requiring equivalent protection standards
• Encryption during transmission and storage
• Regular compliance audits of international data processors

By using jp138 services, you acknowledge and consent to the international transfer of your personal information subject to these protective measures.

11. Protection of Minors

jp138 strictly prohibits individuals under 21 years of age from creating accounts or accessing our gambling services. We do not knowingly collect personal information from minors. Our age verification processes include:

• Mandatory date of birth entry during registration with automated age checks
• KYC document verification confirming legal age
• Ongoing monitoring for accounts suspected of underage access

If we discover that a minor has created an account or provided personal information, we will immediately suspend the account, prevent further access, delete all associated data, and refund any deposited funds to the source. Parents and guardians are encouraged to monitor their children's online activities and use parental control software to block access to gambling websites.

If you believe a minor has accessed jp138 services or provided personal information, please report it immediately to [email protected] so we can take appropriate action.

12. Changes to This Privacy Policy

jp138 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this document
• Post a prominent notice on our website homepage for 30 days
• Send email notification to registered users with active accounts
• Request renewed consent where required by applicable law

Your continued use of jp138 services after the effective date of any changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

13. Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy, our data handling practices, or wish to exercise your privacy rights, please contact us:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Response Time: We aim to respond to all privacy-related inquiries within 72 hours

For formal data protection complaints or concerns that cannot be resolved through our customer support team, you have the right to lodge a complaint with your local data protection authority or supervisory body.