Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how jp678 ("we", "us", "our", "Company") collects, uses, processes, stores, shares, and protects personal information obtained from users ("you", "Player", "User") of our online gaming platform accessible at jp678.cam ("Website", "Platform", "Service"). This Policy applies to all personal data collected through our Website, mobile-optimized interface, customer support channels, and any other jp678 services.

By creating an account, accessing the Platform, or using any jp678 services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Policy, you must immediately discontinue use of our services and refrain from creating an account. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your overall use of jp678 services.

jp678 is committed to protecting your privacy and handling your personal data with the highest standards of security and confidentiality. We comply with applicable Indonesian privacy laws and international data protection standards including principles aligned with the General Data Protection Regulation (GDPR) framework, even though GDPR does not directly apply to Indonesian operations. Our commitment extends beyond mere legal compliance—we view data protection as a fundamental aspect of player trust and platform integrity.

2. Data Controller Information

For the purposes of this Privacy Policy, jp678 acts as the data controller responsible for determining how and why your personal information is processed. Our contact details for privacy-related inquiries are:

• Email: [email protected] (displayed as plain text in our footer)
• Data Protection Officer: Inquiries regarding data protection can be directed to our customer support team, who will forward your request to our designated Data Protection Officer
• Registered Address: As provided in our Terms and Conditions and licensing documentation

For all privacy-related questions, concerns, data access requests, or complaints, please contact us using the channels above. We aim to respond to privacy inquiries within 5 business days and resolve substantive data protection requests within 30 days as required by international standards.

3. Information We Collect

3.1 Information You Provide Directly

When you register for a jp678 account or use our services, you voluntarily provide the following categories of personal information:

Account Registration Data:

• Full legal name as it appears on government identification
• Date of birth (to verify you meet the 21+ age requirement)
• Email address
• Mobile phone number (for account verification and security)
• Residential address (street, city, province, postal code)
• Username and encrypted password
• Preferred currency (Indonesian Rupiah - IDR)
• Security questions and answers for account recovery

Identity Verification (KYC) Documents:

• Government-issued photo identification (Indonesian KTP, passport, driver's license)
• Proof of address documents (utility bills, bank statements, government correspondence)
• Photographs or scans showing payment method ownership (bank cards, e-wallet screenshots)
• Selfie photographs for identity matching (when required for enhanced verification)

Financial and Transaction Information:

• Bank account details (bank name, account number, account holder name) for deposits and withdrawals
• E-wallet account identifiers (phone numbers associated with OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit amounts, withdrawal requests, transaction timestamps
• Payment method verification documents

Communications and Support:

• Content of live chat conversations, emails, and WhatsApp messages with customer support
• Feedback, complaints, testimonials, or survey responses
• Marketing preference selections (opt-in/opt-out for promotional communications)

3.2 Information We Collect Automatically

When you access and use the jp678 Platform, we automatically collect certain technical and usage information through cookies, server logs, and similar technologies:

Device and Technical Information:

• IP address and geolocation data (country, region, city-level location)
• Device type, model, operating system, and browser type/version
• Screen resolution and device identifiers
• Language settings and time zone

Usage and Behavioral Data:

• Pages visited, features accessed, and navigation patterns on the Platform
• Login/logout timestamps and session duration
• Referral source (how you found jp678 - search engine, affiliate link, direct URL)
• Game preferences, play history, and betting patterns
• Deposit and withdrawal patterns, balance fluctuations
• Bonus claim history and wagering progress

Security and Fraud Prevention Data:

• Failed login attempts and suspicious activity indicators
• Multi-device access patterns
• VPN or proxy server usage detection
• Behavioral biometric data (typing patterns, mouse movements) for fraud detection

3.3 Information from Third Parties

jp678 may receive limited personal information from third-party sources, including:

• Payment Processors: Confirmation of transaction completion, account verification status from banks and e-wallet providers
• Identity Verification Services: Third-party KYC verification results when we use external verification vendors
• Fraud Prevention Services: Risk scores, device fingerprints, and fraud alerts from specialized security providers
• Affiliate Partners: Referral tracking information (anonymous affiliate ID, not your personal details)

4. How We Use Your Information

jp678 processes your personal information for the following legitimate business purposes and legal obligations:

4.1 Service Provision and Account Management

• Create, maintain, and administer your gaming account
• Process deposits, withdrawals, and internal fund transfers
• Enable you to place bets and play games
• Display your account balance, transaction history, and gaming statistics
• Manage bonus awards and track wagering requirements
• Provide customer support and respond to your inquiries
• Facilitate communication between you and our support team

4.2 Legal Compliance and Verification

• Verify your identity and age (21+ requirement enforcement)
• Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Comply with regulatory reporting obligations
• Detect and prevent money laundering, terrorism financing, and financial crime
• Respond to legal requests from law enforcement or regulatory authorities
• Maintain records as required by gaming regulations and financial laws

4.3 Security and Fraud Prevention

• Detect, prevent, and investigate fraudulent activity, bonus abuse, and Terms violations
• Monitor for unauthorized account access or multi-accounting
• Identify irregular betting patterns, collusion, or cheating
• Protect against cyberattacks, data breaches, and malicious activity
• Enforce our Terms and Conditions and Responsible Gaming policies
• Resolve disputes and investigate player complaints

4.4 Platform Improvement and Analytics

• Analyze usage patterns to improve user experience and interface design
• Optimize game selection and performance based on player preferences
• Test new features and conduct A/B testing
• Generate aggregate statistics and reports (anonymized data only for statistical purposes)
• Troubleshoot technical issues and debug software errors

4.5 Marketing and Communications (With Consent)

• Send promotional offers, bonus announcements, and special events (only if you opted in)
• Provide personalized game recommendations based on your play history
• Notify you about new games, features, or platform updates
• Send newsletters and market research surveys (with opt-out option)
• Deliver essential service communications (account statements, security alerts, policy changes - these cannot be opted out)

5. How We Share Your Information

jp678 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers who process personal data on our behalf under strict contractual obligations:

• Payment Processors: Banks, e-wallet providers, and payment gateways process deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja)
• Game Providers: Software suppliers that power our slot games, live casino, and other gaming content receive pseudonymized player identifiers (not personal details) for game delivery and RTP calculation
• Identity Verification Services: Third-party KYC/AML verification providers may receive copies of your identification documents for authentication purposes
• Cloud Hosting Providers: Secure data centers store encrypted player information on our behalf
• Customer Support Tools: Live chat and ticketing system providers facilitate support communications
• Fraud Prevention Services: Specialized security companies analyze behavioral patterns to detect fraud
• Email Service Providers: Marketing platforms deliver promotional emails (only to players who opted in)

All third-party processors are contractually required to maintain confidentiality, implement adequate security measures, and use your data only for the specified purpose of assisting jp678 services.

5.2 Legal and Regulatory Disclosure

We may disclose personal information when required by law or when we believe disclosure is necessary to:

• Comply with court orders, subpoenas, or legal process
• Respond to lawful requests from law enforcement or government authorities
• Meet regulatory reporting obligations under gaming and financial regulations
• Enforce our Terms and Conditions or investigate violations
• Protect the rights, property, safety, or security of jp678, our players, or the public
• Detect, prevent, or address fraud, security breaches, or technical issues

5.3 Business Transfers

If jp678 is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and/or prominent Platform notice before your information is transferred and becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for industry analysis, demographic research, or marketing purposes. This includes statistics like "average player session duration" or "popular game categories" without any linkage to individual players.

6. Data Security Measures

jp678 implements comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

6.1 Technical Safeguards

• Encryption: 256-bit SSL/TLS encryption protects all data transmission between your device and our servers
• Database Encryption: Stored personal data is encrypted at rest using industry-standard algorithms
• Password Security: Your password is hashed using bcrypt or similar one-way cryptographic functions and never stored in plain text
• Firewall Protection: Network firewalls and intrusion detection systems prevent unauthorized access
• Secure Payment Processing: PCI DSS compliant payment handling ensures financial data protection
• Regular Security Audits: Independent third-party penetration testing and vulnerability assessments

6.2 Administrative Controls

• Access Restrictions: Personal data access limited to authorized personnel on a need-to-know basis
• Staff Training: Employees receive data protection and security awareness training
• Confidentiality Agreements: All staff sign strict confidentiality and non-disclosure agreements
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from security breaches
• Data Minimization: We collect only the personal information necessary for specified purposes

6.3 Your Security Responsibilities

While we implement robust security measures, protecting your account also requires your cooperation:

• Create a strong, unique password combining letters, numbers, and special characters
• Never share your username, password, or account credentials with anyone
• Log out after each session, especially on shared or public devices
• Use secure, private internet connections (avoid public Wi-Fi for financial transactions)
• Keep your email account secure (password recovery requires email access)
• Report suspicious activity or unauthorized account access immediately

7. Data Retention and Deletion

jp678 retains personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by applicable laws and regulations:

7.1 Active Account Data

While your account remains active, we retain all associated personal information to provide continuous service, maintain transaction history, and comply with legal obligations. Your data is accessible to you at all times through your account dashboard.

7.2 Closed Account Data

After account closure (voluntary or involuntary), jp678 retains certain information for legal, regulatory, and business purposes:

• KYC/AML Records: 5 years after account closure (regulatory requirement)
• Transaction History: 7 years (financial record-keeping requirement)
• Dispute Records: 3 years after resolution (legal defense and evidence preservation)
• Marketing Data: Deleted immediately upon opt-out or account closure
• Chat Logs and Support Communications: 2 years (quality assurance and dispute resolution)

7.3 Automated Deletion

After the applicable retention period expires, personal data is automatically and securely deleted from our active systems. Backup copies are purged during the next scheduled backup rotation cycle (maximum 90 days after retention period expiration).

7.4 Right to Deletion Requests

You may request deletion of your personal data by contacting our customer support. However, deletion requests are subject to legal retention obligations. We cannot delete data that we are legally required to retain (e.g., KYC documents, transaction records within the mandatory retention period). We will inform you if we cannot fully comply with a deletion request due to legal obligations.

8. Your Privacy Rights

Under international data protection principles and Indonesian privacy guidelines, you have the following rights regarding your personal information:

Right	Description
Access	Request a copy of the personal data we hold about you. Access your data anytime through your account dashboard or request a comprehensive data export.
Rectification	Correct inaccurate or incomplete personal information. Update your profile details directly in account settings or contact support for assistance.
Deletion	Request deletion of your personal data, subject to legal retention requirements. Close your account and request data removal after mandatory retention periods.
Restriction	Limit how we process your data in certain circumstances, such as while we verify data accuracy or assess the lawfulness of processing.
Portability	Receive your personal data in a structured, commonly used format and transmit it to another service provider where technically feasible.
Objection	Object to processing based on legitimate interests (e.g., marketing analytics). We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Withdraw Consent	Withdraw consent for data processing that requires consent (e.g., marketing communications) at any time without affecting the lawfulness of processing before withdrawal.
Complaint	Lodge a complaint with us or with your local data protection authority if you believe we have violated your privacy rights.

How to Exercise Your Rights

To exercise any of these rights, contact jp678 customer support via:

• Email: [email protected] with subject line "Privacy Rights Request"
• Live Chat: Available 24/7 on the Platform
• In-Platform Messaging: Through your account dashboard

We will verify your identity before processing privacy rights requests (to prevent unauthorized access to your information) and respond within 30 days. If we cannot comply with a request, we will explain the reasons and inform you of your right to appeal or file a complaint.

9. Cookies and Tracking Technologies

jp678 uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized services. Cookies are small text files stored on your device that help us recognize you on subsequent visits.

9.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality (login sessions, shopping cart, security). Cannot be disabled without preventing basic features from working.
• Performance Cookies: Collect anonymous usage data to analyze how visitors interact with the Platform and identify areas for improvement.
• Functionality Cookies: Remember your preferences (language, currency, game favorites) to personalize your experience.
• Marketing Cookies: Track your interests and browsing behavior to deliver targeted promotions and personalized game recommendations (only with your consent).

9.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling essential cookies may affect platform functionality. To manage cookies:

• Use your browser's cookie settings (usually found under Privacy or Security preferences)
• Opt out of third-party advertising cookies through industry opt-out tools
• Clear cookies periodically through your browser's history/data management settings

10. Children's Privacy Protection

jp678 services are intended exclusively for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete that information and terminate the associated account. Parents or guardians who believe their child under 21 has provided information to jp678 should contact us immediately at [email protected].

11. International Data Transfers

jp678 operates internationally and may transfer your personal information to servers located outside Indonesia for processing and storage. When we transfer data internationally, we ensure adequate protection through:

• Transferring data only to countries recognized as providing adequate data protection
• Implementing Standard Contractual Clauses approved by data protection authorities
• Ensuring third-party recipients maintain data protection standards equivalent to those described in this Policy
• Applying technical safeguards (encryption) to protect data in transit

12. Privacy Questions and Contact

If you have questions, concerns, or complaints regarding this Privacy Policy or jp678's data practices, please contact us:

• Email: [email protected] (privacy inquiries receive priority handling)
• Subject Line: "Privacy Policy Inquiry" or "Data Protection Question"
• Response Time: Privacy questions answered within 5 business days; formal data rights requests processed within 30 days

We are committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the Indonesian data protection authority or your local supervisory authority.