Privacy Policy

1. Introduction

This Privacy Policy governs the collection, use, storage, and disclosure of personal data by js007 (the "Platform," "we," "us," or "our") in connection with the online gaming services we provide to users in Indonesia and other permitted jurisdictions. By accessing, registering on, or using js007 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the js007 platform. If you do not agree with the practices described in this Privacy Policy, please do not use our services.

2. Data Controller

js007 acts as the data controller for the personal information you provide to us. This means we determine the purposes for which and the manner in which your personal data is processed. For questions about how your data is handled, or to exercise your privacy rights, please contact us at the details provided in Section 13 of this policy.

3. Information We Collect

js007 collects several categories of personal data to provide, maintain, and improve our services, ensure security, and comply with legal obligations.

3.1 Information You Provide Directly

When you register an account with js007, you provide the following information:

• Personal Identification Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (KTP number, SIM number, or Passport number).
• Contact Information: Email address, mobile phone number, and residential address including city, province, and postal code.
• Account Credentials: Username, password, and security questions/answers that you create during registration.
• Payment Information: Bank account details (bank name, account number, account holder name) for Indonesian banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, or Bank Permata, and/or e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers).
• Verification Documents: Copies of government-issued ID, proof of address (utility bills, bank statements), payment method verification screenshots, and selfie photographs submitted during KYC (Know Your Customer) verification procedures.
• Communication Data: Information you provide when contacting customer support, including chat transcripts, email correspondence, and WhatsApp messages.

3.2 Information We Collect Automatically

When you access and use js007, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, advertising ID), and mobile network information.
• Connection Information: IP address, internet service provider, connection type, and approximate geographic location derived from IP address.
• Usage Data: Pages visited, features used, time spent on each page, games played, bet history, deposit and withdrawal transactions, bonus claims, login timestamps, and clickstream data.
• Performance Data: Application crashes, loading times, error messages, and other technical diagnostic information.
• Cookies and Similar Technologies: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies (see Section 7 for details).

3.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction confirmation data from banks and e-wallet providers when you deposit or withdraw funds.
• Identity Verification Services: Information obtained through third-party identity verification and fraud prevention services used during KYC procedures.
• Game Providers: Gaming session data, bet outcomes, and RTP information from our casino game and live dealer partners.
• Public Sources: Information from publicly available sources used for fraud prevention and regulatory compliance purposes.

4. How We Use Your Information

js007 processes your personal data for the following purposes, based on various legal grounds including contract performance, legal obligations, and legitimate interests:

4.1 Service Provision and Account Management

• Create and maintain your js007 user account
• Authenticate your identity when you log in
• Process deposits, withdrawals, and other financial transactions
• Provide access to casino games, sports betting markets, live dealer games, and togel lottery draws
• Calculate and credit bonuses, free bets, cashback, and loyalty rewards
• Track your gaming activity, bet history, and transaction records
• Provide customer support and respond to your inquiries

4.2 Security and Fraud Prevention

• Verify your identity through KYC procedures to comply with anti-money laundering regulations
• Detect and prevent fraudulent transactions, bonus abuse, and account takeovers
• Monitor for suspicious betting patterns, collusion, or cheating
• Enforce our Terms and Conditions and other platform policies
• Protect the security and integrity of our platform and services
• Investigate violations and cooperate with law enforcement when required

4.3 Regulatory Compliance

• Comply with international gaming licensing requirements
• Meet anti-money laundering (AML) and counter-terrorist financing (CTF) obligations
• Maintain required records for auditing and regulatory reporting purposes
• Verify that users meet age and jurisdiction eligibility requirements (21+ for Indonesian users)
• Implement responsible gaming measures including self-exclusion and deposit limits

4.4 Communication and Marketing

• Send transactional communications including deposit confirmations, withdrawal notifications, and bet settlement alerts
• Provide important service updates, security alerts, and policy changes
• Send promotional offers, bonus notifications, and marketing communications (with your consent, which you can withdraw at any time)
• Conduct customer satisfaction surveys and gather feedback

4.5 Platform Improvement and Analytics

• Analyze usage patterns to improve platform performance, user experience, and game selection
• Conduct data analytics to understand user preferences and behavior
• Test new features, games, and platform updates
• Generate aggregated, anonymized statistics and reports that do not identify individual users

5. Data Sharing and Disclosure

js007 does not sell your personal data to third parties. However, we may share your information with the following categories of recipients for the purposes described:

5.1 Service Providers and Business Partners

• Payment Processors: Banks and e-wallet providers that facilitate deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, etc.)
• Game Providers: Casino game developers and live dealer operators that supply our gaming content
• Technology Partners: Cloud hosting providers, CDN services, and IT infrastructure vendors
• Identity Verification Services: Third-party KYC and fraud prevention providers
• Customer Support Tools: Live chat, email, and ticketing system providers
• Analytics Providers: Services that help us analyze platform usage and performance

All service providers are bound by contractual obligations to protect your data and use it only for the purposes we specify.

5.2 Legal and Regulatory Disclosures

We may disclose your personal data when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or regulatory requests
• Cooperate with law enforcement investigations
• Respond to requests from gaming licensing authorities and financial regulators
• Enforce our Terms and Conditions and protect our legal rights
• Prevent fraud, money laundering, or other illegal activities
• Protect the safety and security of js007, our users, or the public

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal data may be transferred to the acquiring entity or successor organization. You will be notified via email and/or prominent notice on our platform of any such change in ownership or control of your personal data.

6. Data Security Measures

js007 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

6.1 Technical Security

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) encryption—the same technology used by banks.
• Data Encryption at Rest: Sensitive data stored in our databases is encrypted using industry-standard encryption algorithms.
• Firewall Protection: Multi-layered firewall systems protect our servers from unauthorized external access.
• DDoS Mitigation: Advanced protection against distributed denial-of-service attacks ensures platform availability.
• Intrusion Detection: Real-time monitoring systems detect and respond to suspicious activity.
• Regular Security Audits: Independent third-party security assessments and penetration testing are conducted regularly.

6.2 Organizational Security

• Access Controls: Personal data is accessible only to authorized employees who require it to perform their job functions.
• Staff Training: All employees receive regular training on data protection and privacy best practices.
• Confidentiality Agreements: Employees and contractors are bound by strict confidentiality obligations.
• Incident Response Plan: We maintain documented procedures for responding to data breaches and security incidents.
• Data Minimization: We collect and retain only the data necessary for our stated purposes.

6.3 Your Role in Security

While we implement strong security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication when available
• Log out after each session, especially on shared devices
• Keep your email account secure, as it is used for password resets
• Report suspicious activity to customer support immediately
• Be cautious of phishing attempts claiming to be from js007

7. Cookies and Tracking Technologies

js007 uses cookies, web beacons, pixel tags, and similar technologies to enhance your experience, analyze platform usage, and deliver personalized content.

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to recognize your device and remember information about your visit.

7.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for platform functionality including login authentication, session management, and security features. These cannot be disabled.	Session / Up to 1 year
Performance Cookies	Collect anonymous data about how users interact with our platform to help us improve performance and user experience.	Up to 2 years
Functional Cookies	Remember your preferences such as language settings, game filters, and display preferences to provide a personalized experience.	Up to 1 year
Targeting/Advertising Cookies	Track your activity to deliver relevant promotional offers and measure marketing campaign effectiveness. These require your consent.	Up to 1 year

7.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can:

• View and delete cookies stored on your device
• Block all cookies or only third-party cookies
• Receive notifications when cookies are set
• Delete cookies when you close your browser

Please note that blocking or deleting certain cookies may impact platform functionality and your user experience. Essential cookies cannot be disabled without preventing you from using our services.

8. Data Retention

js007 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

8.1 Retention Periods

• Account Information: Retained for the duration of your account's active status plus 7 years after account closure to comply with financial regulations and anti-money laundering laws.
• Transaction Records: Retained for 7 years after the transaction date to comply with financial record-keeping requirements.
• Gaming Activity: Bet history, game session logs, and RTP records retained for 7 years to comply with gaming license requirements.
• KYC Documents: Identity verification documents retained for 7 years after account closure per regulatory requirements.
• Communication Records: Customer support interactions retained for 3 years for quality assurance and dispute resolution purposes.
• Marketing Data: Deleted within 30 days of consent withdrawal or account closure, unless retention is required for legal compliance.

8.2 Data Deletion

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual. Aggregated, anonymized data may be retained indefinitely for statistical and analytical purposes.

9. Your Privacy Rights

Under international data protection standards, you have the following rights regarding your personal data:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings, or contact customer support for assistance.

9.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or when you withdraw consent. This right is subject to legal retention requirements.

9.4 Right to Restrict Processing

You have the right to request that we limit how we process your personal data in certain situations, such as while we verify the accuracy of disputed data.

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and to transmit it to another service provider where technically feasible.

9.6 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes at any time. You can unsubscribe from marketing emails using the link provided in each message or by contacting customer support.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

9.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection team at the contact details provided in Section 13. We will respond to your request within 30 days and may require identity verification to protect your data from unauthorized access.

10. Children's Privacy

js007 services are intended solely for adults aged 21 years and older. We do not knowingly collect personal data from individuals under 21 years of age. If you are under 21, you must not access, register on, or use js007 services.

If we become aware that we have collected personal data from a person under 21 years of age, we will take immediate steps to delete that information and close the associated account. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected].

11. International Data Transfers

js007 operates as an international platform with servers and service providers located in various jurisdictions outside Indonesia. When you use our services, your personal data may be transferred to, stored, and processed in countries that may have data protection laws different from those in Indonesia.

We ensure that all international data transfers are protected by appropriate safeguards including:

• Standard contractual clauses approved by data protection authorities
• Binding corporate rules for intra-organizational transfers
• Adequacy decisions recognizing equivalent data protection standards
• Your explicit consent for specific data transfers where required

Despite the international nature of our operations, we maintain the same high standards of data protection for all user data regardless of where it is processed.

12. Changes to This Policy

js007 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes:

• The updated policy will be posted on this page with a new "Last Updated" date
• Active users will be notified via email or prominent platform notification
• Your continued use of js007 after the changes take effect constitutes acceptance of the updated policy
• If you do not agree with the changes, you must stop using our services and may request account closure

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

13. Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:

• Email: [email protected] (Subject line: "Privacy Inquiry")
• Live Chat: Available 24/7 on the js007 platform
• WhatsApp: Available via the contact details provided on our website

Our Indonesian-speaking privacy and customer support specialists are available 24 hours a day, 7 days a week to assist you with privacy-related questions and requests. We aim to respond to all privacy inquiries within 48 hours.