Privacy Policy — jp788

Introduction

jp788 ("jp788", "we", "us", "our") operates the online gaming and sports betting platform accessible at https://jp788.vip (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with the jp788 Platform, including registered Players, visitors, and prospective customers.

This Privacy Policy sets out the categories of personal data we collect, the purposes and legal bases for which we process that data, the circumstances under which we may share data with third parties, the measures we take to keep your data secure, and the rights available to you in relation to your personal data.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, all of which collectively form the agreement between jp788 and each registered Player. In the event of any inconsistency between this Policy and the Terms & Conditions regarding data matters, this Privacy Policy shall prevail.

The jp788 Platform is operated primarily for Players based in Indonesia. Where we reference "applicable law" or "legal obligations" in this Policy, this refers to the data protection and privacy obligations applicable in the jurisdiction in which jp788 is licensed and operates, as well as internationally recognised data protection standards including the principles set out in the EU General Data Protection Regulation (GDPR) as a global benchmark of best practice.

Definitions

The following terms used in this Privacy Policy carry the meanings set out below:

Data We Collect

jp788 collects the following categories of Personal Data in connection with the operation of the Platform:

3.1 Registration & Identity Data

• Full legal name — as it appears on a government-issued Indonesian identity document (KTP, passport, or SIM).
• Date of birth — collected to confirm that the Player meets the 21+ age requirement.
• Email address — used as the primary communication and account-recovery channel.
• Indonesian mobile phone number — used for account security, two-factor authentication (2FA) SMS codes, and transactional notifications.
• Residential address — collected as part of KYC verification and anti-fraud screening.
• Username and encrypted password — used to authenticate Player sessions. Passwords are stored in hashed form and are never accessible in plain text by jp788 staff.

3.2 KYC & Verification Documents

• Scanned or photographed copy of a valid Indonesian National Identity Card (KTP), passport, or driver's licence (SIM).
• Proof of address documents — recent utility bills, bank statements from BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI (Bank Syariah Indonesia), Bank Permata, or OCBC NISP, or official government correspondence dated within 90 days.
• Proof of payment method — screenshots or confirmations linking a registered bank account or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja) to the Account holder's name.
• Selfie or liveness-check photographs where required by our KYC partner's verification workflow.

3.3 Financial & Transaction Data

• Deposit amounts, payment method type, and originating bank or e-wallet identifier (e.g., masked BCA or BRI account number).
• Withdrawal requests, amounts, destination account details, and processing timestamps.
• Complete transaction history, including all bets placed, games played, amounts wagered, and winnings received on the Platform.
• Bonus and promotional activity records, including which offers were claimed and wagering progress toward any applicable requirements.

3.4 Technical & Device Data

• IP address at registration and each subsequent login.
• Device type, operating system, browser type and version, and screen resolution.
• Session identifiers, login timestamps, and session duration.
• Geolocation data derived from IP address (country and city level — jp788 does not use GPS-level location tracking).

3.5 Behavioural & Usage Data

• Game preferences, categories browsed, and features used within the Platform.
• Clickstream data indicating how Players navigate through the Platform.
• Responsible Gaming tool usage — deposit limits set, session reminders triggered, cooling-off periods activated, or self-exclusion requests submitted.
• Customer support interaction records, including live chat transcripts and email correspondence.

3.6 Marketing Preferences Data

• Your communication preferences — whether you have opted in or out of receiving promotional emails, SMS notifications, or in-platform push messages.
• Records of marketing communications sent and whether they were opened or acted upon (where technically measurable).

How We Collect Data

jp788 collects Personal Data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your Account profile.
• Automatically via the Platform — through server logs, session tracking, and first-party cookies placed on your browser or device when you access the jp788 website.
• From KYC and identity verification partners — who may return enriched identity signals, document authenticity scores, and AML risk indicators to jp788 as part of the verification workflow.
• From payment processors and banking partners — who confirm the status, source, and ownership of transactions made via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja channels.
• From fraud prevention and AML screening services — which cross-reference registration data against sanctions lists, politically exposed persons (PEP) databases, and known fraud indicators.
• From analytics tools — first-party analytics that measure Platform performance, page load times, and feature usage patterns. jp788 does not share raw analytics data with advertising networks.

How We Use Your Data

jp788 uses the Personal Data we collect for the following specific purposes:

Legal Basis for Processing

jp788 processes Personal Data on one or more of the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: The majority of data processing described in Section 5 is necessary for the performance of the contract between jp788 and the Player — specifically, operating the Account and delivering gaming and payment services. Without this processing, jp788 cannot provide the Platform's Services.
• Legal Obligation: KYC identity verification, AML transaction monitoring, and regulatory reporting are carried out because jp788 is legally required to do so under the laws of its operating jurisdiction and applicable international AML standards.
• Legitimate Interests: Fraud prevention, platform security, responsible gaming monitoring, and first-party analytics are pursued on the basis of jp788's legitimate interest in operating a secure, fair, and legally compliant gaming environment. jp788 has assessed that these interests do not override Players' fundamental privacy rights.
• Consent: Marketing communications are sent only where a Player has given explicit opt-in consent. This consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

jp788 does not sell, rent, or trade Personal Data to third parties for their own commercial purposes. Data is shared only in the following circumstances and only to the extent necessary for the stated purpose:

• KYC & Identity Verification Partners: We share identity documents and registration data with accredited third-party verification providers to conduct document authenticity checks, liveness verification, and sanctions screening. These providers act as Data Processors under written agreements that restrict their use of your data to the verification service only.
• Payment Processors & Banking Partners: Transaction data is shared with the relevant bank or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja) to the extent required to execute deposits and withdrawals.
• Game Studio Providers: Game session data (player identifier, bet amounts, game results) is shared with licensed third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — solely for game operation and audit purposes. These studios do not receive your full name, address, or payment details.
• Fraud Prevention & AML Services: Risk-relevant data points (IP address, device fingerprint, transaction velocity, behavioural indicators) may be shared with specialist fraud and AML screening vendors to generate risk scores. These vendors process data exclusively on jp788's behalf.
• Cloud Infrastructure Providers: jp788 uses internationally recognised cloud service providers to host Platform infrastructure. These providers have access to Personal Data stored on their servers only in their capacity as data centre operators and under strict confidentiality obligations.
• Legal & Regulatory Authorities: jp788 will disclose Personal Data to law enforcement, regulatory bodies, or courts where required by a valid legal order, court ruling, or statutory reporting obligation. jp788 will, where legally permissible, notify the affected Player of such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of jp788's assets, Player data may be transferred to the acquiring entity, subject to equivalent privacy protections. Players will be notified of any such transfer in advance where practicable.

Data Retention

jp788 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or AML obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the resulting anonymised dataset is no longer Personal Data and may be retained indefinitely for aggregate statistical analysis.

Data Security

jp788 implements a layered set of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or device and the jp788 Platform is encrypted using industry-standard TLS 1.2 or TLS 1.3 protocols. Plaintext transmission of Personal Data or financial data is not permitted at any point in the data flow.
• Password Hashing: Player passwords are stored using a strong one-way cryptographic hashing algorithm. jp788 staff cannot read or retrieve your password; only you know it.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their Accounts. When enabled, an SMS code or authenticator app token is required in addition to the password at each login, significantly reducing the risk of unauthorised account access.
• Access Controls: Internal access to Player data is restricted on a need-to-know basis. Staff members who handle Personal Data are subject to background checks, confidentiality obligations, and mandatory data protection training.
• Infrastructure Security: jp788's Platform infrastructure is hosted in secured, access-controlled data centres with 24/7 physical and logical monitoring, regular penetration testing, and automated intrusion detection systems.
• Incident Response: jp788 maintains a documented data breach response procedure. In the event of a security incident that affects Player data, affected Players and relevant authorities will be notified promptly in accordance with applicable notification obligations.

Cookies & Tracking Technologies

jp788 uses first-party cookies and similar tracking technologies to operate the Platform effectively and improve the Player experience. We do not use third-party advertising cookies or share cookie data with ad networks.

10.1 Types of Cookies We Use

10.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use the jp788 Platform. Instructions for managing cookies in common browsers are available in each browser's help documentation. Clearing your cookies will log you out of your current session and may reset your saved preferences.

Your Privacy Rights

jp788 respects your rights in relation to your Personal Data. Consistent with internationally recognised data protection standards, you have the following rights:

• Right of Access: You may request a copy of the Personal Data jp788 holds about you. We will provide this information in a structured, commonly used, machine-readable format within 30 days of a verified request.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update most Account details directly in Account Settings; for changes to identity documents, contact our support team.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing was unlawful. Note that this right is subject to limitations where retention is required by law — for example, AML regulations require us to retain KYC and transaction records for a minimum of 5 years regardless of an erasure request.
• Right to Restriction of Processing: You may request that jp788 suspend processing of your data in certain circumstances — for example, while the accuracy of data is disputed, or while you have objected to processing based on legitimate interests and we are considering your objection.
• Right to Object: You have the right to object to processing of your Personal Data for marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though jp788 may continue such processing where there are compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you have the right to receive your Personal Data in a structured, machine-readable format and to request that we transmit it to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via Account Settings or by contacting support. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request — [Your Username]". We will verify your identity before processing any rights request and will respond within 30 calendar days. Complex or multiple simultaneous requests may take up to 60 days, in which case we will notify you of the extension.

Minors & Age Verification

The jp788 Platform is strictly intended for adults aged 21 and over. jp788 does not knowingly collect or process Personal Data belonging to individuals under the age of 21. Age verification is a mandatory step in the Account registration and KYC process, and jp788 reserves the right to request documentary proof of age at any stage of the Account lifecycle.

If jp788 discovers, at any point, that an Account is held by or has been accessed by an individual under the age of 21, the Account will be immediately closed, all Bonus Funds will be forfeited, and any deposited funds will be returned to the originating payment method following identity verification of the rightful account holder. All Personal Data collected in connection with that underage Account will be securely deleted, except where retention is required for legal or regulatory reporting purposes.

Parents and guardians who are concerned that a minor may be accessing gambling services should consider using parental control software. For guidance on protecting minors from online gambling, please visit our Responsible Gaming page.

International Data Transfers

jp788 operates with a globally distributed infrastructure. As a result, Personal Data may be transferred to, stored in, or processed in countries outside Indonesia where jp788's servers, KYC partners, or cloud infrastructure providers are located. These countries may have different data protection laws from those in Indonesia.

Where such transfers occur, jp788 ensures that appropriate safeguards are in place to protect your Personal Data at a standard at least equivalent to that described in this Privacy Policy. Safeguards employed include:

• Contractual data processing agreements incorporating standard data protection clauses that bind the recipient to protect data to internationally recognised standards.
• Selection of third-party partners who hold internationally recognised security certifications, such as ISO 27001 or SOC 2 Type II, as a baseline requirement.
• Regular security assessments of key data processing partners as part of jp788's vendor due diligence programme.

By registering an Account and using the jp788 Platform, you acknowledge and consent to the transfer of your Personal Data in the circumstances described above, subject to the safeguards outlined in this section.

Third-Party Services

The jp788 Platform integrates third-party game content from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These game clients may operate within the Platform using iFrame or embedded technology and are subject to the respective studio's own privacy practices for data processed directly within the game client environment.

jp788 does not control the data practices of third-party game studios beyond the contractual obligations imposed in our licence agreements with them. We recommend reviewing the privacy policies of individual game studios if you have specific concerns about data processed in-game.

The jp788 Platform does not contain links to external third-party websites. Any links that appear in Platform-generated communications (such as support emails) will be clearly identified and will only direct you to pages within the jp788 domain or to the contact address [email protected].

Policy Amendments

jp788 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. Where changes are material — for example, where we add a new category of data collection, change a retention period, or add a new category of third-party disclosure — we will notify registered Players via a Platform notification or email to the address registered on your Account at least 14 days before the change takes effect.

The "Last updated" date at the top of this Policy reflects the most recent revision. Your continued use of the jp788 Platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not agree to the revised Policy, you should cease using the Platform and close your Account in accordance with the Terms & Conditions.

Contact & Data Protection

If you have any questions, concerns, or requests regarding this Privacy Policy or the way jp788 handles your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the jp788 Platform. For urgent privacy concerns, live chat is the fastest method to reach our support team. Average response time under 90 seconds.
• Email — General Privacy Queries: [email protected] — please include "Privacy Query" in the subject line along with your registered username.
• Email — Formal Privacy Rights Requests: [email protected] — please use the subject line "Privacy Rights Request — [Your Username]". jp788 commits to acknowledging all formal privacy rights requests within 48 hours and providing a substantive response within 30 calendar days.
• Email — Data Breach Notifications: If you believe you have identified a vulnerability or data security issue affecting jp788 Players, please report it responsibly to [email protected] with the subject line "Security Disclosure — [Brief Description]". jp788 takes all responsible disclosure reports seriously and will investigate promptly.

All support hours are 24/7, with times referenced in WIB (Western Indonesia Time, UTC+7). jp788 maintains dedicated data protection personnel who review all privacy-related correspondence with priority handling. We are committed to resolving privacy concerns thoroughly and transparently.