Privacy Policy — jago68

1. Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, identification number, location data, IP address, or online identifier.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" refers to jago68 in its capacity as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" refers to any third party engaged by jago68 to process Personal Data on our behalf under a written data processing agreement.
• "KYC" (Know Your Customer) refers to the regulatory identity verification process applicable to all Members before withdrawal privileges are activated.
• "Cookies" refers to small text files placed on your device by the Platform to store session information and usage preferences.

2. Data We Collect

jago68 collects the following categories of Personal Data in connection with your use of the Platform:

2.1 Identity Data

• Full legal name as it appears on your Indonesian National ID (KTP)
• Date of birth and age verification information
• KTP number and scanned copy of KTP document
• Selfie photograph taken during the liveness KYC check

2.2 Contact Data

• Email address registered to your account
• Mobile phone number (including WhatsApp-capable numbers)
• City and province of residence (e.g., Jakarta, Surabaya, Bandung, Bali, Medan)

2.3 Financial Data

• Bank account numbers and bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction history including deposit amounts, withdrawal amounts, and timestamps
• Account balance information

2.4 Technical Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type
• Session start and end times
• Pages visited, game history, and betting activity logs

2.5 Communications Data

• Records of correspondence with jago68 customer support via email, live chat, or WhatsApp
• Survey responses and feedback submissions

3. How We Collect Data

We collect Personal Data through the following channels:

• Direct registration: Information you provide when creating your jago68 account or completing KYC verification.
• Platform activity: Data generated automatically when you browse, wager, deposit, or withdraw on jago68.
• Payment processors: Transaction confirmation data received from banking partners (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Cookies and tracking technologies: Session cookies, analytics cookies, and similar technologies as described in Section 9.
• Customer support interactions: Information you provide when contacting our support team.
• Identity verification providers: Third-party KYC service providers used to validate the authenticity of identity documents.

4. Purpose of Processing

jago68 processes your Personal Data for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, Contact
Age verification and KYC compliance	Identity, Financial
Processing deposits and withdrawals	Financial, Technical
Fraud detection and anti-money-laundering (AML) checks	Identity, Financial, Technical
Providing customer support services	Identity, Contact, Communications
Responsible Gaming monitoring and interventions	Technical, Financial
Platform security and technical performance	Technical
Sending transactional notifications (deposit confirmations, withdrawal alerts)	Contact, Financial
Regulatory reporting obligations	Identity, Financial

jago68 does not use your Personal Data to build advertising profiles, sell data to third-party marketers, or engage in automated decision-making that produces legal or similarly significant effects without human review.

5. Legal Basis for Processing

jago68 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between you and jago68 (account registration, transaction processing, KYC verification).
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Legal obligation: Processing required to comply with applicable regulatory and anti-money-laundering obligations.
• Consent: Where we rely on consent (e.g., for optional marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing

jago68 shares Personal Data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processing partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process deposits and withdrawals.
• KYC and identity verification providers: Third-party providers engaged to authenticate identity documents and conduct liveness checks during the verification process.
• Game studio and content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymised session identifiers necessary to deliver their game content; they do not receive your full identity or financial data.
• Regulatory and law enforcement authorities: jago68 discloses Personal Data to regulators, law enforcement agencies, or courts when required by applicable law or valid legal process.
• IT and infrastructure providers: Cloud hosting, server management , and cybersecurity service providers who process data solely on jago68's behalf under binding confidentiality agreements.
• Professional advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations.

jago68 does not sell, rent, or trade your Personal Data to any third party for commercial purposes under any circumstances.

7. International Data Transfers

As an internationally licensed platform, jago68 may transfer your Personal Data to servers or service providers located outside Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place, including contractual data protection clauses that meet internationally recognised standards. Your data will at all times be handled with the same level of protection described in this Policy, regardless of where it is physically stored or processed.

If you are located in Jakarta, Surabaya, Bandung, Bali, or any other region of Indonesia, your data may be routed through servers in other jurisdictions solely for the purpose of delivering Platform services efficiently and securely.

8. Data Retention

jago68 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with anti-money-laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by applicable regulatory guidance.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Technical and log data: Retained for twelve (12) months from the date of collection, unless retention is required for an ongoing security investigation.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual Member.

9. Cookies & Tracking Technologies

jago68 uses cookies and similar technologies to operate and improve the Platform. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for you to log in, navigate the Platform, and use core features such as your account wallet and betting slip. They cannot be disabled without severely impairing Platform functionality. No consent is required for strictly necessary cookies.

9.2 Functional Cookies

These cookies remember your preferences — such as your preferred language, display settings, and last-visited game category — to provide a more personalised experience. They are set only with your consent where required.

9.3 Analytics Cookies

jago68 uses first-party analytics tools to understand how Members use the Platform — for example, which pages are visited most frequently, where users encounter errors, and how navigation flows can be improved. Analytics data is aggregated and does not identify individual users. Third-party advertising cookies are not used on jago68.

9.4 Security Cookies

These cookies support fraud detection and session integrity functions, such as detecting unusual login locations or multiple simultaneous sessions from different devices.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use core Platform features. Disabling functional or analytics cookies will not affect your ability to place bets or process transactions.

10. Your Data Rights

As a Member of jago68, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of the Personal Data jago68 holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held in your account profile.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that jago68 temporarily restrict processing of your data while a correction or objection request is being assessed.
• Right to Data Portability: You may request that jago68 provide your Personal Data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. jago68 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

jago68 will respond to all data rights requests within thirty (30) calendar days. Where a request is complex or numerous, we may extend this period by a further thirty (30) days with written notice explaining the reason for the extension.

11. Minors

jago68 is strictly an adults-only platform. No person under the age of 21 years may register an account or use the Platform in any capacity. jago68 does not knowingly collect Personal Data from individuals under 21. If we become aware that a minor has provided Personal Data or created an account, we will immediately suspend the account, delete all associated data, and refund any deposited funds to the payment source.

If you believe a minor has accessed jago68, please notify us immediately at [email protected] so that we can take prompt corrective action.

12. Security Measures

jago68 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and jago68 servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Data Encryption at Rest: Sensitive data fields, including financial account numbers and KYC document references, are encrypted in storage using AES-256 encryption.
• Access Controls: Access to Personal Data within jago68's internal systems is restricted on a strict need-to-know basis. Staff access is logged and audited.
• Two-Factor Authentication (2FA): Internal administrative systems require two-factor authentication. Members are strongly encouraged to enable 2FA on their accounts.
• Regular Security Audits: jago68 conducts periodic penetration testing and vulnerability assessments to identify and remediate potential security weaknesses.
• Incident Response: In the event of a confirmed data breach affecting Members' Personal Data, jago68 will notify affected Members and relevant regulatory authorities within 72 hours of becoming aware of the incident, where applicable law requires.

While jago68 takes all reasonable precautions to protect your data, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials. Never share your jago68 password with any person, including individuals claiming to represent jago68 support.

13. Third-Party Links

The jago68 Platform may contain links or references to third-party websites, services, or content providers — including game studios such as Pragmatic Play, Evolution Gaming, and Spribe. These third parties operate under their own privacy policies, which jago68 does not control. We encourage you to review the privacy policy of any third-party service you access via the Platform. jago68 accepts no responsibility or liability for the privacy practices of third-party providers.

14. Changes to This Policy

jago68 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify Members via the email address registered to their account and/or by displaying a prominent notice on the Platform for a minimum of 14 days prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Platform after the effective date of any change constitutes acceptance of the revised Policy. If you do not agree with any changes, you should close your account and cease using jago68 before the effective date.

15. Contact & Complaints

If you have questions, concerns, or complaints about how jago68 handles your Personal Data, or if you wish to exercise any of your data rights, please contact our Data Protection team using the details below:

• Email: [email protected] (Subject line: "Privacy Inquiry" or "Data Rights Request")
• Live Chat: Available 24/7 directly on the jago68 Platform
• Response Time: All privacy-related inquiries are acknowledged within 24 hours (WIB) and resolved within 30 calendar days

jago68 takes all privacy complaints seriously and will investigate each matter thoroughly. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction governing this Policy.