Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below unless context requires otherwise:

• "jp188" / "we" / "us" / "our" — the operator of the jp188 online betting and live casino platform accessible at https://jp188.cam and all associated subdomains and mobile interfaces.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, including name, email address, phone number, government-issued ID number, IP address, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Player" / "you" / "your" — any individual who registers an account on jp188, accesses the Platform as a guest, or contacts jp188 via any support channel.
• "KYC Documents" — identity verification materials submitted by a Player, including government-issued photo ID (such as an Indonesian KTP), proof-of-payment-method records, and supporting age-verification documentation.
• "Cookies" — small text files or similar tracking technologies placed on your device by jp188 or authorised third-party service providers when you access the Platform.
• "Sensitive Data" — a subset of Personal Data warranting heightened protection, including (where applicable) biometric data used for identity verification and financial account information.
• "Third-Party Processor" — any external company engaged by jp188 under a data-processing agreement to perform specific services that involve accessing Player data, such as payment processors, fraud-detection providers, and KYC verification vendors.

jp188 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, jp188 determines the purposes for which Personal Data is processed and the means by which that processing takes place. jp188 accepts full responsibility for ensuring that such processing complies with the data-protection obligations imposed by its international gaming licence.

Where jp188 engages Third-Party Processors to carry out specific processing activities on its behalf, those processors act solely on jp188's documented instructions and are contractually bound to implement appropriate technical and organisational security measures.

For all privacy-related enquiries, data subject access requests, and complaints, the jp188 Data Protection contact is reachable at the email address provided in Section 16 of this Policy.

jp188 collects only the data that is necessary for the specific purpose for which it is obtained. The categories of Personal Data we collect are set out below:

3.1 Registration Data

• Full legal name as it appears on your Indonesian national identity card (KTP) or passport.
• Date of birth (collected to verify the 21+ age requirement).
• Email address and mobile phone number registered in Indonesia.
• Preferred username and encrypted password hash.
• Country and city of residence (e.g., Jakarta, Surabaya, Bandung, Bali).

3.2 KYC Verification Data

• Scanned or photographed copy of government-issued photo ID (KTP, passport, or driving licence).
• Proof of payment method — a screenshot or photo of the bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja) registered in your name.
• Source-of-funds documentation where required by anti-money-laundering screening thresholds.

3.3 Financial Transaction Data

• Deposit and withdrawal amounts, timestamps, transaction reference codes, and associated payment-method identifiers.
• Account balance history and bonus credit/debit records.

3.4 Gameplay & Behavioural Data

• Wager history across all product verticals, including football betting (BRI Liga 1, EPL, Champions League), live dealer games, togel (Indonesia's traditional numbers lottery) draws, and slot sessions.
• Session duration, login timestamps, and in-platform navigation patterns.
• Responsible gaming tool usage, including deposit-limit settings and self-exclusion requests.

3.5 Technical & Device Data

• IP address, browser type and version, operating system, and device type.
• Geolocation data (country and region level only) derived from IP address.
• Referral URL and marketing attribution parameters.
• Cookie identifiers and session tokens as described in Section 10.

3.6 Communications Data

• Content of support tickets, live chat transcripts, and emails exchanged with the jp188 support team.
• Responses to optional player surveys or promotional feedback forms.

jp188 collects Personal Data through the following channels:

• Directly from you — when you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a promotional communication.
• Automatically — when you access the Platform, our servers and analytics tools automatically log technical and behavioural data as described in Section 3.5 and Section 10.
• From Third-Party Processors — our KYC verification partners may provide identity-match scores and fraud-risk flags derived from their own databases to supplement the documents you submit directly.
• From payment providers — when a deposit or withdrawal is processed via a local Indonesian bank or e-wallet, the payment provider confirms transaction status, which jp188 records against your account.

jp188 processes your Personal Data on one or more of the following legal bases:

jp188 uses the Personal Data it holds for the following specific purposes:

• Account administration: Creating and maintaining your account, authenticating your identity on login, and communicating service notifications such as deposit confirmations and withdrawal status updates.
• Age and identity verification: Confirming that you are at least 21 years of age and that the details you have provided are accurate, as required by our responsible gaming obligations and licensing conditions.
• Transaction processing: Crediting deposits to your account balance, processing withdrawal requests to your nominated Indonesian bank or e-wallet, and maintaining an auditable record of all financial movements.
• Regulatory compliance: Meeting our anti-money-laundering (AML), counter-financing-of-terrorism (CFT), and know-your-customer (KYC) obligations under our international gaming licence.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, multi-accounting, payment chargebacks, collusion in games, and the use of automated wagering tools.
• Responsible gaming: Monitoring betting patterns to identify potential problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and providing timely intervention resources where appropriate.
• Customer support: Responding to enquiries, processing complaints, and providing technical assistance in relation to your jp188 account.
• Personalised marketing: Sending you relevant promotions, bonus offers, and seasonal campaigns — such as those tied to Idul Fitri, Ramadhan, or major football tournaments — based on your product preferences and wagering history. You may opt out at any time.
• Platform improvement: Analysing aggregated, de-identified gameplay and navigation data to improve product features, user interface design, and overall platform performance.

jp188 does not sell or rent your Personal Data. We share your data only in the following circumstances, and only to the minimum extent necessary:

7.1 Third-Party Processors

We engage third-party companies to perform specific operational functions on our behalf. These processors are authorised to use your data solely for the stated purpose and are bound by data-processing agreements that impose security and confidentiality obligations equivalent to those applied by jp188 itself. Categories of Third-Party Processor include:

• KYC and identity verification providers
• Payment processing partners and fraud-screening services connected to Indonesian banks and e-wallets (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja)
• Cloud infrastructure and data-storage providers
• Customer support platform providers
• Email and SMS marketing delivery services (where you have consented to marketing communications)
• Analytics and platform-performance monitoring tools

7.2 Legal and Regulatory Disclosure

jp188 may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, a valid court order, or our licensing authority's audit requirements. We will notify affected Players of such disclosures to the extent permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of jp188's assets, Player data may be transferred to the acquiring entity as part of that transaction. jp188 will provide advance notice of any such transfer and the acquiring entity will be bound by the terms of this Privacy Policy or a substantially equivalent successor policy.

jp188 operates globally and may process or store your Personal Data on servers located outside Indonesia. Where your data is transferred to a jurisdiction that does not provide a level of data protection equivalent to that offered under jp188's licensing framework, we implement appropriate safeguards to ensure your data remains protected, including:

• Standard contractual clauses approved by the relevant regulatory authority incorporated into agreements with all Third-Party Processors in those jurisdictions.
• Technical security controls including encryption in transit (TLS 1.3) and encryption at rest (AES-256) applied to all transferred data regardless of destination.
• Data minimisation — only the minimum Personal Data required for the specific processing purpose is transferred internationally.

By registering an account with jp188 and accepting these terms, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia in accordance with the safeguards described above.

jp188 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by our regulatory and licensing obligations. The key retention periods are as follows:

When retention periods expire, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual Player. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

jp188 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session state, detect fraud, and — where you have consented — deliver personalised content and measure marketing campaign performance.

Types of Cookies Used

• Strictly Necessary Cookies: Essential for basic Platform functionality, including maintaining your authenticated session, storing your language and currency preferences, and enabling the cashier flow. These cannot be disabled without breaking core Platform features.
• Analytical / Performance Cookies: Collect aggregated, anonymised data about how Players navigate the Platform — which pages are visited most frequently, where sessions end, and how load times vary. This data is used solely to improve the Platform.
• Fraud Detection Cookies: Help jp188 identify suspicious login patterns, multi-accounting attempts, and automated access by cross-referencing device fingerprints and session identifiers across requests.
• Marketing / Attribution Cookies: Track which referral sources or advertising campaigns led you to jp188, enabling us to measure campaign effectiveness and attribute affiliate commissions correctly. These are active only where you have provided marketing consent.

You may adjust your browser settings to block or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Instructions for managing cookies vary by browser; consult your browser's help documentation for guidance.

As a Player on jp188, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact us at the address in Section 16. jp188 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

• Right of Access: You may request a copy of all Personal Data jp188 holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that it be corrected or updated. Basic account details (name, email, phone number) can also be updated directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to our overriding obligations to retain data for AML, CFT, and licensing compliance purposes.
• Right to Restriction of Processing: You may request that jp188 restrict processing of your data — for example, while a dispute about its accuracy is being resolved — without requiring full deletion.
• Right to Data Portability: You may request a copy of Personal Data you have provided to jp188 in a structured, machine-readable format (JSON or CSV) where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests — including profiling for responsible gaming monitoring and direct marketing. Marketing objections are honoured immediately; other legitimate-interest objections are assessed on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

jp188 implements a layered set of technical and organisational security controls to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure:

• Encryption in Transit: All data exchanged between your browser or app and jp188's servers is encrypted using TLS 1.3 with forward-secrecy cipher suites.
• Encryption at Rest: Databases containing Personal Data — including KYC documents, financial records, and account credentials — are encrypted using AES-256 at the storage layer.
• Password Security: Passwords are stored exclusively as bcrypt hashes with a per-user salt. jp188 never stores plaintext passwords and cannot recover a lost password — only a reset can be initiated.
• Access Controls: Access to production systems containing Personal Data is restricted on a strict need-to-know basis, enforced through role-based access controls and mandatory multi-factor authentication for all staff with privileged access.
• Penetration Testing: jp188's platform undergoes independent security audits and penetration tests at least annually, with critical findings remediated within 30 days of disclosure.
• Breach Response: In the event of a data breach that poses a risk to Players, jp188 will notify affected individuals and the relevant regulatory authority within the timeframe required by applicable obligations, providing details of the breach and the steps taken to contain it.

jp188 is an adults-only platform. The minimum age to register and use jp188 is 21 years. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is performed during KYC review on every account, and any account found to belong to a person under 21 is permanently suspended with all associated data deleted or anonymised in accordance with our responsible gaming obligations.

If you believe that a minor has registered an account on jp188, please contact us immediately at the address provided in Section 16. We take such reports seriously and will investigate and act without delay.

The jp188 Platform may display content or interface elements sourced from third-party game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft. These studios operate their game engines under licence agreements with jp188 and are bound by contractual data-protection obligations. However, their own privacy practices — including any data collected directly within the game interface — are governed by their respective privacy policies.

jp188 is not responsible for the privacy practices of any third-party studio, payment provider, or external website that may be referenced or accessed in connection with Platform use. We encourage Players to review the privacy policies of any third party with which they interact.

jp188 reviews this Privacy Policy on a regular basis and reserves the right to amend it at any time to reflect changes in applicable law, our licensing obligations, or our data-processing practices. When material amendments are made, jp188 will provide at least 7 days' advance notice by publishing a prominent banner on the homepage and sending an email notification to all registered Players.

Your continued use of the Platform after the stated effective date of an amended Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may request closure of your account and withdrawal of any remaining balance.

The current version of this Privacy Policy is always available at https://jp188.cam/privacy-policy. The Effective Date shown at the top of this page reflects when the most recent version came into force.

For all privacy-related matters — including data subject access requests, rectification requests, erasure requests, marketing opt-out assistance, and privacy complaints — please contact the jp188 Data Protection team through the following channel:

• Email: support@jp188.cam — please include "Privacy Request" in the subject line and specify the nature of your request in the message body.
• Response Time: Acknowledgement within 5 business days; full resolution within 30 calendar days for standard requests. Complex requests requiring extended review will be communicated with an updated timeline.
• Languages: Requests may be submitted in English or Indonesian; jp188 will respond in the same language where operationally possible.
• Availability: The support team is available 24 hours a day, 7 days a week, including Indonesian public holidays such as Idul Fitri and Independence Day.