Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by jp386 through our website at https://jp386.cam, mobile applications, customer support channels, and any other services we provide (collectively, "Services"). This policy should be read in conjunction with our Terms & Conditions available at jp386.cam/terms-conditions.

jp386 operates as an international online gaming platform serving primarily Indonesian players. We are committed to compliance with applicable data protection regulations including the General Data Protection Regulation (GDPR), Indonesia's Electronic Information and Transactions Law (UU ITE), and other relevant privacy frameworks. As a data controller, we determine the purposes and means of processing your personal information.

2. Data Controller Information

The data controller responsible for your personal information is jp386, operated under international gaming licenses. For privacy-related inquiries, you may contact us at:

• Email: [email protected] (displayed as plain text)
• Privacy Officer: Available via live chat 24/7 for data protection questions
• Postal Address: Available upon request for formal data subject requests

3. What Personal Data We Collect

jp386 collects various categories of personal information necessary to provide our Services, comply with legal obligations, and improve user experience. The data we collect includes:

3.1 Account Registration Data

• Identity Information: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address
• Account Credentials: Username, password (stored in encrypted form)
• Security Information: Security questions and answers for account recovery

3.2 Verification and KYC Data

To comply with anti-money laundering (AML) and know-your-customer (KYC) regulations, we collect:

• Government-Issued Identification: Copy of your KTP (Kartu Tanda Penduduk - Indonesian National Identity Card), passport, or other valid ID showing your photograph, full name, date of birth, and identification number
• Proof of Address: Utility bills, bank statements, or government correspondence dated within the last three months
• Biometric Data: Selfie photograph holding your identification document for facial verification
• Source of Funds Documentation: Bank statements, payslips, or other financial documents if requested for enhanced due diligence

3.3 Financial and Transaction Data

• Payment Method Details: Bank account numbers for Indonesian banks (BCA, BRI, BNI, Mandiri, etc.), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay)
• Transaction History: Deposit amounts, dates and times, withdrawal requests, payment method used, transaction status
• Gaming Activity: Bets placed, games played, wins and losses, bonus claims, wagering progress
• Account Balance: Current balance, pending withdrawals, bonus balances

3.4 Technical and Usage Data

When you access jp386 Services, we automatically collect technical information including:

• Device Information: Device type, operating system, browser type and version, screen resolution
• Connection Data: IP address, internet service provider, geographic location (city/region level based on IP)
• Usage Analytics: Pages visited, time spent on pages, click patterns, navigation paths, referral sources
• Cookies and Tracking: Session identifiers, preference settings, authentication tokens (see Section 10 for detailed cookie policy)

3.5 Communications Data

• Customer Support Records: Live chat transcripts, email correspondence, WhatsApp messages, support tickets
• Marketing Preferences: Your consent status for promotional communications, communication channel preferences
• Feedback and Surveys: Responses to customer satisfaction surveys, product feedback, testimonials

4. How We Collect Your Data

jp386 collects personal information through multiple channels:

• Direct Provision: Information you provide when registering an account, completing your profile, uploading verification documents, contacting customer support, or participating in promotions
• Automated Collection: Technical data collected automatically through cookies, web beacons, and similar technologies when you access our website or mobile applications
• Third-Party Sources: Identity verification services, payment processors, fraud prevention databases, public registries for AML compliance checks
• Derived Data: Information we generate based on your activity patterns, such as risk assessments, player segmentation for responsible gaming monitoring, and personalized game recommendations

5. Legal Basis and Purposes for Data Processing

jp386 processes your personal data based on the following legal grounds and for the following purposes:

5.1 Contractual Necessity

We process your data to fulfill our contractual obligations under the Terms & Conditions, including:

• Creating and managing your player account
• Processing deposits and withdrawals
• Providing access to gaming content and sports betting markets
• Managing bonuses and promotions you have claimed
• Providing customer support services
• Communicating important account information and service updates

5.2 Legal Compliance

We are legally required to process certain data to comply with:

• Age verification requirements (confirming you are 21 years or older)
• Anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Know-your-customer (KYC) obligations under gaming licensing requirements
• Tax reporting and financial record-keeping obligations
• Fraud prevention and detection requirements
• Responsible gaming compliance and self-exclusion registers
• Legal process including court orders, subpoenas, and regulatory investigations

5.3 Legitimate Interests

We process data based on our legitimate business interests, balanced against your privacy rights:

• Preventing fraud, cheating, and bonus abuse
• Maintaining platform security and preventing unauthorized access
• Analyzing usage patterns to improve service quality and user experience
• Conducting internal audits and business analysis
• Protecting against legal liability and enforcing our terms
• Monitoring for responsible gaming indicators and protecting vulnerable players

5.4 Consent

For certain activities, we rely on your explicit consent:

• Sending promotional marketing communications (you may withdraw consent at any time)
• Using non-essential cookies for analytics and personalization
• Publishing testimonials or reviews you have submitted
• Participating in optional surveys or research studies

6. How We Use Your Personal Data

jp386 uses your personal information for the following specific purposes:

Purpose	Data Categories Used	Legal Basis
Account Management	Identity, Contact, Account Credentials	Contractual Necessity
Age & Identity Verification	KYC Documents, Biometric Data	Legal Compliance
Payment Processing	Financial Data, Transaction History	Contractual Necessity
Fraud Prevention	Technical Data, Device Fingerprinting, Gaming Activity	Legitimate Interest
Responsible Gaming Monitoring	Gaming Activity, Deposit Patterns, Session Duration	Legal Compliance & Legitimate Interest
Customer Support	Communications Data, Account Data	Contractual Necessity
Marketing Communications	Contact Information, Marketing Preferences	Consent
Platform Improvement	Usage Analytics, Technical Data	Legitimate Interest

7. Data Sharing and Third-Party Recipients

jp386 does not sell your personal data to third parties. However, we may share your information with trusted service providers and partners in the following circumstances:

7.1 Essential Service Providers

• Payment Processors: To process deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay, ShopeePay). These providers receive only the financial data necessary to execute transactions.
• Identity Verification Services: Third-party KYC providers that verify your identity documents against government databases and watchlists.
• Gaming Content Providers: Casino game studios and sports betting data providers that may log your gameplay for technical operation and fairness verification.
• Cloud Hosting Providers: Infrastructure services that host our platform and store encrypted data in secure data centers.
• Customer Support Tools: Live chat platforms and ticketing systems used to manage customer service interactions.

7.2 Legal and Regulatory Recipients

We may disclose your data to law enforcement, regulatory authorities, and legal advisors when required by law or necessary to protect our legal rights:

• Gaming regulators and licensing authorities conducting audits or investigations
• Law enforcement agencies pursuant to valid legal process (subpoenas, court orders, warrants)
• Tax authorities for financial reporting obligations
• Fraud prevention agencies and industry watchdog organizations
• Legal counsel in connection with disputes, litigation, or regulatory proceedings

7.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity as part of the business assets. We will notify you via email and prominent website notice before your data is transferred and becomes subject to a different privacy policy.

8. International Data Transfers

As an international gaming platform, jp386 may transfer and store your personal data in countries outside Indonesia, including jurisdictions that may not provide the same level of data protection as Indonesian law. When we transfer data internationally, we implement appropriate safeguards including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with third-party service providers requiring GDPR-equivalent protections
• Technical security measures including encryption in transit and at rest
• Regular security audits and compliance assessments of international partners

9. Data Security Measures

jp386 employs industry-standard technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration:

9.1 Technical Security

• Encryption: All data transmissions use TLS 1.3 encryption (minimum 256-bit). Sensitive data at rest (passwords, payment details, identification documents) is encrypted using AES-256.
• Access Controls: Role-based access restrictions ensure only authorized personnel can access personal data on a need-to-know basis.
• Network Security: Firewalls, intrusion detection systems, and regular vulnerability scanning protect our infrastructure.
• Secure Authentication: Multi-factor authentication required for employee access to sensitive systems.
• Regular Security Audits: Third-party penetration testing and security assessments conducted quarterly.

9.2 Organizational Security

• Employee confidentiality agreements and data protection training
• Documented data handling procedures and incident response plans
• Background checks for personnel with data access
• Regular review and updating of security policies
• Segregation of development, testing, and production environments

Despite these measures, no internet-based system is completely secure. We cannot guarantee absolute security but commit to notifying affected users and relevant authorities within 72 hours of discovering any data breach as required by applicable law.

10. Data Retention

jp386 retains your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations:

• Active Accounts: Account data, transaction history, and gaming records retained while your account remains active.
• Closed Accounts: After account closure, we retain identity verification documents, financial transaction records, and communications for seven (7) years to comply with AML, tax, and gaming licensing requirements.
• Marketing Data: If you unsubscribe from marketing communications, your contact data is suppressed (retained only to honor your opt-out preference).
• Technical Logs: Server logs, IP addresses, and usage analytics typically retained for 12-24 months for security and fraud prevention.
• Self-Exclusion Records: Records of self-excluded players retained permanently or as required by gaming regulations to prevent re-registration.

11. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

11.1 Right of Access

You may request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, machine-readable format within 30 days of your request.

11.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data. You can update most account information directly through your account settings.

11.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, such as when data is no longer necessary for the purposes collected or if you withdraw consent. However, we may retain data required for legal compliance, outstanding disputes, or fraud prevention.

11.4 Right to Restriction of Processing

You may request that we limit processing of your data in specific situations, such as while we verify data accuracy or assess a deletion request.

11.5 Right to Data Portability

You may request transfer of your data to another service provider in a machine-readable format where technically feasible.

11.6 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

11.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.

11.8 Exercising Your Rights

To exercise any of these rights, contact our privacy team at [email protected] (plain text, not a link) with subject line "Data Subject Request." We may require identity verification before processing requests. You also have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

12. Cookies and Tracking Technologies

jp386 uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device. We use the following types:

• Essential Cookies: Required for core functionality including login authentication, session management, and security. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, username, and display options.
• Analytics Cookies: Collect aggregated usage statistics to understand how players interact with our platform (Google Analytics, Mixpanel).
• Marketing Cookies: Track your activity to deliver relevant promotions and measure marketing campaign effectiveness.

You can control non-essential cookies through your browser settings or our cookie preference center accessible in your account dashboard. Disabling certain cookies may limit platform functionality.

13. Children's Privacy

jp386 strictly prohibits use by individuals under 21 years of age. We do not knowingly collect personal data from minors. If we discover that a user is underage, we will immediately suspend their account, forfeit any balances, and delete their personal data. Parents or guardians who believe a minor has provided information to jp386 should contact us immediately at [email protected].

14. Changes to This Privacy Policy

jp386 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email to your registered address and prominent notice on our website at least 14 days before taking effect. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Continued use of jp386 Services after changes take effect constitutes acceptance of the updated policy.

15. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

• Email: [email protected] (displayed as plain text)
• Live Chat: Available 24/7 through your account dashboard
• WhatsApp: +62 812 3456 7890 (displayed as plain text)
• Data Protection Officer: Available upon request for formal privacy inquiries