Privacy Policy

1. Introduction and Scope

jp368 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data obtained from users ("you", "your") of the jp368 gaming platform accessible at jp368.cam and associated services.

This Privacy Policy applies to all users who access or use jp368 Services, regardless of device or access method. By creating an Account or using jp368 Services, you acknowledge that you have read, understood, and consent to the collection and processing of your personal information as described in this Privacy Policy.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of jp368 Services. If you do not agree with any aspect of this Privacy Policy, you must not use jp368 Services.

2. Information We Collect

jp368 collects several categories of personal information necessary to provide gaming services, ensure platform security, comply with legal obligations, and improve user experience.

2.1 Account Registration Information

When you register for a jp368 Account, we collect personal information including:

• Identity Information: Full legal name, date of birth, place of birth, nationality, and gender
• Contact Information: Residential address, email address, and telephone number
• Account Credentials: Username and encrypted password (we do not store passwords in plain text)
• Security Questions: Answers to security questions for account recovery purposes

2.2 Identity Verification Documents

To comply with Know Your Customer (KYC) requirements and prevent fraud, money laundering, and underage gambling, we collect:

• Government-issued photo identification (Indonesian KTP, passport, or driver's license)
• Proof of address documents (utility bills, bank statements, or government correspondence dated within the last three months)
• Payment method verification documents (bank account statements, card photographs with sensitive data obscured)
• Selfie photographs holding identification documents for facial verification

2.3 Financial and Transaction Data

We collect financial information necessary to process deposits and withdrawals:

• Bank account details (account number, bank name, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions
• Transaction history including deposits, withdrawals, wagers, wins, losses, and bonus activity
• Payment processor reference numbers and transaction timestamps

2.4 Gaming Activity and Behavioral Data

To provide personalized service, detect fraud, and ensure fair play, we collect:

• Betting history including wager amounts, odds accepted, bet types, and outcomes
• Game play patterns and preferences across sports betting, casino games, and slots
• Login timestamps, session duration, and activity frequency
• Bonus claims, wagering progress toward bonus requirements, and promotional engagement
• Responsible gaming tool settings including deposit limits, loss limits, and self-exclusion periods

2.5 Technical and Device Information

When you access jp368 Services, we automatically collect technical data:

• IP address and approximate geographic location
• Device type, operating system, browser type and version
• Screen resolution, language settings, and time zone
• Cookies and similar tracking technologies (see Section 8 for details)
• Pages viewed, click patterns, and referral sources

2.6 Communications and Customer Support

We retain records of communications with jp368:

• Live chat transcripts with customer support agents
• Email correspondence sent to or from jp368
• Telephone call recordings (where legally permitted and with your consent)
• Feedback submissions and survey responses

3. How We Use Your Information

jp368 uses collected personal information for the following purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your jp368 Account
• Authenticating your identity when you log in
• Processing deposits, withdrawals, and wagers
• Maintaining accurate transaction records and account balances
• Providing customer support and responding to inquiries
• Administering bonuses, promotions, and loyalty programs

3.2 Legal and Regulatory Compliance

• Verifying that users meet minimum age requirements (21+ for Indonesian market)
• Conducting KYC and anti-money laundering (AML) checks
• Detecting and preventing fraud, collusion, bonus abuse, and other prohibited activities
• Complying with legal obligations under gaming regulations and data protection laws
• Responding to law enforcement requests and legal proceedings

3.3 Security and Risk Management

• Monitoring for suspicious account activity and unauthorized access attempts
• Protecting against technical vulnerabilities and cyber attacks
• Enforcing Terms and Conditions and detecting violations
• Maintaining platform integrity and ensuring fair gaming outcomes

3.4 Service Improvement and Personalization

• Analyzing user behavior to improve platform functionality and user experience
• Developing new features and gaming products based on user preferences
• Personalizing content, game recommendations, and promotional offers
• Conducting market research and statistical analysis

3.5 Marketing Communications

• Sending promotional emails about bonuses, new games, and special offers (with your consent)
• Providing personalized marketing based on gaming preferences and activity
• Informing you about platform updates, maintenance schedules, and policy changes

You may opt out of marketing communications at any time by adjusting your Account settings or clicking unsubscribe links in emails. Opting out does not affect essential service communications related to your Account.

4. Information Sharing and Disclosure

jp368 does not sell your personal information to third parties for marketing purposes. However, we may share your information with the following categories of recipients:

4.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist in operating our platform:

• Payment Processors: Indonesian banking institutions and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) who process deposits and withdrawals
• Identity Verification Services: KYC verification providers who authenticate user documents and prevent fraud
• Game Providers: Third-party game developers and live casino operators who supply gaming content
• Technology Infrastructure: Cloud hosting providers, data centers, and cybersecurity services
• Customer Support Tools: Live chat platforms and customer relationship management (CRM) systems
• Analytics Providers: Services that help us understand platform usage and user behavior

All service providers are contractually bound to handle your information securely and only for the purposes we specify. They are prohibited from using your data for their own purposes.

4.2 Legal and Regulatory Authorities

We may disclose personal information to law enforcement agencies, regulatory bodies, courts, and government authorities when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or subpoenas
• Protect jp368's rights, property, or safety
• Prevent or investigate suspected fraud, money laundering, or criminal activity
• Enforce our Terms and Conditions or other agreements

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such transfer and ensure that the recipient organization commits to protecting your information in accordance with this Privacy Policy.

5. Data Security Measures

jp368 employs industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All sensitive data transmissions are protected using 256-bit SSL (Secure Socket Layer) encryption, the same standard used by major financial institutions
• Secure Storage: Personal information is stored on secure servers located in data centers with physical security controls, environmental protections, and redundant backup systems
• Access Controls: Access to personal information is restricted to authorized personnel who require it to perform their job functions. All access is logged and monitored
• Authentication Protocols: Multi-factor authentication options are available for Account access. Passwords are stored using cryptographic hashing algorithms
• Regular Security Audits: We conduct regular security assessments, vulnerability testing, and penetration testing to identify and address potential weaknesses
• Staff Training: jp368 employees receive training on data protection principles and security protocols

While we implement robust security measures, no system is completely secure. Users are responsible for maintaining the confidentiality of their login credentials and should immediately report any suspected unauthorized Account access to jp368 customer support.

6. Data Retention

jp368 retains personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Specific retention periods vary by data category:

• Account Information: Retained for the duration of your Account plus six (6) years following Account closure to comply with financial record-keeping requirements
• Transaction Records: Maintained for seven (7) years as required by anti-money laundering regulations
• KYC Documents: Retained for six (6) years after Account closure per regulatory requirements
• Communications Records: Customer support interactions retained for three (3) years for quality assurance and dispute resolution
• Marketing Consent Records: Maintained indefinitely to demonstrate compliance with consent requirements
• Technical Logs: Server logs and analytics data retained for twelve (12) months for security and operational purposes

Once retention periods expire, personal information is securely deleted or anonymized such that it can no longer identify you.

7. Your Privacy Rights

You have the following rights regarding your personal information:

7.1 Right of Access

You may request a copy of the personal information jp368 holds about you. We will provide this information in a commonly used electronic format within thirty (30) days of your request.

7.2 Right to Rectification

If personal information we hold is inaccurate or incomplete, you may request that we correct or update it. You can update certain information directly through your Account settings.

7.3 Right to Erasure

You may request deletion of your personal information. However, we may be required to retain certain data to comply with legal obligations, including financial record-keeping and anti-money laundering requirements. Account closure does not automatically delete your data due to regulatory retention requirements.

7.4 Right to Restrict Processing

You may request that we limit how we use your personal information in certain circumstances, such as while we verify accuracy of disputed data or assess whether we have legitimate grounds for processing.

7.5 Right to Data Portability

You may request a copy of personal information you provided to jp368 in a structured, machine-readable format that can be transmitted to another service provider.

7.6 Right to Object

You may object to processing of your personal information based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

7.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. This does not affect the lawfulness of processing prior to consent withdrawal.

To exercise any of these rights, contact jp368 customer support at [email protected] with your request. We may require verification of your identity before processing requests. There is no fee for reasonable requests, but we may charge for excessive, repetitive, or manifestly unfounded requests.

8. Cookies and Tracking Technologies

jp368 uses cookies and similar technologies to enhance user experience, analyze platform usage, and deliver personalized content.

Cookies are small text files stored on your device that allow jp368 to recognize your browser and remember certain information. Types of cookies we use include:

• Essential Cookies: Necessary for platform functionality, including session management, authentication, and security. These cannot be disabled without impairing core Services.
• Performance Cookies: Collect anonymous information about how users interact with jp368, helping us identify and fix issues and improve performance.
• Functional Cookies: Remember your preferences such as language settings, timezone, and display options for enhanced personalization.
• Targeting Cookies: Track your activity to deliver relevant advertising and promotional offers based on your interests.

You can control cookie settings through your browser preferences. Disabling cookies may affect platform functionality and limit certain features. Note that disabling cookies does not opt you out of all data collection; we will still receive certain technical information necessary to provide Services.

9. International Data Transfers

jp368 operates internationally, and your personal information may be transferred to and processed in countries outside Indonesia. These jurisdictions may have different data protection standards than Indonesian law.

When we transfer personal information internationally, we implement appropriate safeguards including:

• Using data centers and service providers that comply with recognized international security standards
• Entering into contractual agreements with third parties requiring them to protect your data in accordance with applicable data protection laws
• Implementing technical and organizational measures to ensure data security during transmission and storage

By using jp368 Services, you acknowledge and consent to the international transfer of your personal information as necessary to provide gaming services.

10. Children's Privacy

jp368 Services are intended exclusively for individuals aged 21 years and older in compliance with Indonesian market age requirements. We do not knowingly collect personal information from individuals under 21 years of age.

If we discover that we have inadvertently collected information from an individual below the minimum age, we will immediately delete that information and permanently close the associated Account. Parents or guardians who believe their child has provided personal information to jp368 should contact us immediately at [email protected].

11. Changes to This Privacy Policy

jp368 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated through:

• Posting the updated Privacy Policy on the jp368 website with a new "Last Updated" date
• Sending email notification to registered users
• Displaying a prominent notice on the platform upon login

Your continued use of jp368 Services following notification of changes constitutes acceptance of the revised Privacy Policy. If you do not agree with any changes, you must cease using jp368 Services and may request Account closure.

We encourage you to periodically review this Privacy Policy to stay informed about how we protect your personal information.

12. Contact and Data Protection Officer

If you have questions, concerns, or complaints regarding this Privacy Policy or jp368's data handling practices, please contact us:

• Email: [email protected] (subject line: "Privacy Inquiry")
• Live Chat: Available 24/7 through the jp368 platform
• Data Protection Officer: [email protected]

We take privacy concerns seriously and will investigate all complaints. You should receive an initial response within seven (7) business days and a substantive response within thirty (30) days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.