At jp368, your privacy is not a footnote — it is a core part of how we operate. This Privacy Policy explains precisely what personal data we collect from Indonesian players, why we collect it, how we store and protect it, and the rights you hold over your own information.
The complete policy is set out in the clauses below. These cards highlight the six commitments jp368 makes to every player regarding their personal information.
Every connection to jp368 is protected by TLS 1.3 with 256-bit AES encryption. Your login credentials, payment details, and personal data are transmitted and stored in encrypted form at all times — no exceptions.
You have the right to access, correct, export, and request deletion of your personal data held by jp368 at any time. Submit a data rights request via live chat or by emailing our dedicated privacy contact address and we will respond within 30 days.
jp368 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. Your data is used exclusively to operate and improve the jp368 platform.
jp368 does not hold your data indefinitely. Account data is retained for the duration of your active account plus five years for regulatory compliance. Marketing preferences and cookie data are reviewed and purged on a rolling 12-month basis.
jp368 uses strictly necessary, functional, and analytics cookies only. We do not use third-party advertising cookies or cross-site tracking pixels. You can review and manage your cookie preferences at any time through your browser settings.
All jp368 promotional communications — including email, SMS, and in-platform notifications — include a one-click unsubscribe mechanism. You can also manage your communication preferences directly from your Account Settings at any time without needing to contact support.
jp368 ("jp368", "we", "us", "our") is committed to protecting the privacy and personal data of every player who registers and uses our platform at jp368.one. This Privacy Policy describes how jp368 collects, processes, stores, shares, and protects personal information in connection with the use of our online gaming services, including sports betting, live casino, slot gacor (high-payout slot games), togel (Indonesia's traditional numbers lottery), and crash games.
This Privacy Policy applies to all users of the jp368 platform, including registered account holders, visitors who browse the site without registering, and anyone who contacts jp368's customer support team. By accessing or using jp368, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
This Privacy Policy should be read alongside jp368's Terms & Conditions and Responsible Gaming page, both of which form part of the overall framework governing your relationship with jp368. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall prevail.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — an individual who can be identified directly or indirectly, in particular by reference to an identifier such as a name, national identity number, location data, or online identifier. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, restriction, erasure, or destruction. |
| "Data Controller" | jp368, the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | A third party that processes personal data on behalf of jp368 under a binding data processing agreement (e.g., KYC verification providers, payment processors, hosting providers). |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose, which can be withdrawn at any time. |
| "KYC" | Know Your Customer — the identity and age verification process jp368 uses to confirm a player's identity and comply with anti-money-laundering (AML) obligations. |
| "Sensitive Data" | A subset of personal data afforded heightened protection, including government-issued identity document numbers, financial account details, and biometric data. |
| "Cookie" | A small text file placed on your device by the jp368 website for functional, analytical, or security purposes, as further described in Clause 11. |
jp368 collects personal data across several categories depending on how you interact with the platform. The categories of data we collect are set out in the table below:
| Category | Specific Data Points |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, government-issued ID number (KTP, Passport, or SIM), and photographs or scans of identity documents submitted during KYC. |
| Contact Data | Email address, Indonesian mobile phone number (used for OTP verification), and residential address (province, city, postal code). |
| Account Data | Username, hashed password, account registration date, account status, preferred language, and communication preferences. |
| Financial Data | Bank account numbers, bank names (e.g., BCA, BRI, BNI, Mandiri), e-wallet identifiers (OVO, DANA, GoPay), USDT wallet addresses, deposit and withdrawal history, account balance, and transaction timestamps. |
| Gaming Data | Game session logs, bet history, wager amounts, game outcomes, bonus activation and completion records, and responsible gaming tool usage. |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, device fingerprint, session duration, and time zone (WIB/WITA/WIT). |
| Communication Data | Records of live chat transcripts, email correspondence with jp368 support, and the content of any formal complaints submitted. |
| Cookie & Usage Data | Page views, navigation paths, click events, session entry and exit pages, and analytics metrics collected via first-party cookies and server-side analytics. |
jp368 collects personal data through the following channels:
The majority of the personal data jp368 holds is provided directly by you during the following interactions:
jp368's platform automatically collects technical and usage data when you access the site, including:
jp368 may receive personal data about you from the following third-party sources:
jp368 processes your personal data for the following clearly defined purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your jp368 account, including processing login authentication and managing account settings. |
| Identity Verification (KYC) | Verifying your identity and age (21+) to comply with jp368's AML/CFT obligations and its international licensing requirements. |
| Payment Processing | Processing deposits and withdrawals via Indonesian bank transfer, e-wallet, and USDT channels, and maintaining financial transaction records. |
| Service Delivery | Providing access to all jp368 gaming products including live casino, slots, sportsbook, and togel draws. |
| Fraud Prevention & Security | Detecting and preventing duplicate accounts, bonus abuse, money laundering, unauthorised account access, and other fraudulent or prohibited conduct described in the Terms & Conditions. |
| Responsible Gaming | Administering deposit limits, session reminders, cooling-off periods, and self-exclusion requests in accordance with Clause 9 of the Terms & Conditions. |
| Customer Support | Responding to account queries, resolving disputes, processing formal complaints, and maintaining communication records. |
| Platform Improvement | Analysing aggregated usage data to improve platform performance, user experience, game selection, and promotional relevance. |
| Marketing & Promotions | Sending promotional communications about bonuses, new games, and seasonal offers (subject to your communication preferences and opt-out rights). |
| Legal & Regulatory Compliance | Complying with jp368's international licensing obligations, AML record-keeping requirements, and any lawful requests from competent authorities. |
jp368 processes your personal data on the following legal bases:
The majority of jp368's data processing activities — including account creation, KYC verification, payment processing, and service delivery — are necessary for the performance of the contract between you and jp368 (as set out in the Terms & Conditions). Without this processing, jp368 cannot provide its services to you.
Certain processing activities — in particular the retention of identity documents, financial transaction records, and account activity logs — are required to comply with jp368's obligations under applicable anti-money-laundering legislation and its international gaming licence conditions. jp368 is required to retain these records for a minimum of five years regardless of whether you close your account.
jp368 processes technical data, device fingerprints, IP logs, and gaming behaviour data on the basis of its legitimate interests in preventing fraud, ensuring platform security, detecting duplicate accounts, and improving the quality of its services. jp368 has conducted a legitimate interests assessment and is satisfied that these processing activities do not override your fundamental privacy rights.
Where jp368 sends optional marketing communications (email newsletters, SMS promotions, in-platform bonus notifications), it does so on the basis of your consent, given either at registration or by updating your communication preferences in Account Settings. You may withdraw marketing consent at any time without affecting the lawfulness of any previous processing. Withdrawal of marketing consent does not affect your ability to continue using jp368.
jp368 does not sell, rent, or otherwise commercially transfer your personal data to any third party for their own commercial, marketing, or advertising purposes. This is an unconditional commitment that applies regardless of any future changes to jp368's business structure.
jp368 shares personal data with carefully selected third-party service providers who act as Data Processors on jp368's behalf. These providers are contractually bound to process your data only for the specific purposes authorised by jp368 and to maintain security standards no less stringent than those applied by jp368 itself. Categories of Data Processors include:
jp368 may disclose personal data to its licensing authority, financial intelligence units, law enforcement agencies, or other competent governmental bodies where it is required to do so by applicable law, court order, or regulatory requirement. jp368 will, where legally permissible, notify you of any such disclosure request before complying.
In the event of a merger, acquisition, restructuring, or sale of all or part of jp368's business assets, your personal data may be transferred to the successor entity as part of that transaction. jp368 will notify you via platform notification or email before your data is transferred to a new controller, and will ensure that the successor entity is bound by terms no less protective than this Privacy Policy.
jp368 is an internationally operated platform, and your personal data may be processed on servers located outside of Indonesia. Where data is transferred to jurisdictions that do not provide a level of data protection equivalent to internationally recognised standards, jp368 implements appropriate safeguards including:
jp368 retains personal data only for as long as is necessary for the purposes set out in Clause 5, subject to the following minimum retention periods:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of active account plus 5 years after account closure, to meet AML record-keeping obligations. |
| KYC Documents | 5 years from the date of submission, or 5 years from account closure, whichever is later. |
| Financial Transaction Records | 5 years from the date of each transaction, in compliance with AML legislation. |
| Gaming Session Logs | 5 years from the date of each session, for dispute resolution and regulatory audit purposes. |
| Customer Support Records | 3 years from the date of the last interaction, for complaint resolution and quality assurance. |
| Marketing Preferences | Until consent is withdrawn, then immediately upon opt-out confirmation. |
| Cookie & Usage Data | Session cookies expire at session end; persistent analytics cookies are purged on a 12-month rolling cycle. |
Upon expiry of the applicable retention period, jp368 will securely delete or anonymise the relevant personal data in a manner that prevents reconstruction or recovery.
jp368 implements a comprehensive suite of technical security measures to protect your personal data against unauthorised access, loss, alteration, and destruction. These include:
jp368 limits access to personal data to employees and contractors who require it to perform their specific job functions. All staff with access to personal data are subject to confidentiality obligations and mandatory data protection training. Access controls are reviewed on a quarterly basis, and access rights are revoked immediately upon termination of employment or contract.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jp368 will notify affected players without undue delay and in any event within 72 hours of becoming aware of the breach, via the email address registered to the affected account. The notification will describe the nature of the breach, the categories of data affected, and the steps jp368 has taken or proposes to take to address the breach and mitigate its impact.
Cookies are small text files placed on your device when you visit the jp368 website. They allow jp368 to recognise your device across sessions, maintain your login state, store your preferences, and collect aggregated usage statistics to improve the platform. jp368 uses only first-party cookies — it does not embed third-party advertising trackers or cross-site tracking technologies.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for the platform to function — includes session authentication tokens, security cookies (CSRF protection), and load-balancing cookies. | Session / up to 24 hours |
| Functional | Remembers your language preference, display settings, and responsible gaming tool configurations so you do not need to reconfigure on each visit. | Up to 12 months |
| Analytics | Collects anonymised data on page views, session duration, navigation paths, and feature usage to help jp368 improve platform design and performance. | Up to 12 months |
You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, restrict cookies to first-party only, or be notified before a cookie is set. Please be aware that disabling strictly necessary cookies will prevent you from logging into your jp368 account and accessing platform features. Disabling functional cookies will mean your preferences are not saved between sessions.
jp368 does not use advertising cookies, retargeting pixels, social media tracking pixels, or any cross-site behavioural profiling technology. jp368 does not participate in any programmatic advertising network that places tracking cookies on its users' devices.
As a player at jp368, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Privacy team via live chat or at [email protected] with the subject line "Data Rights Request". jp368 will respond to all data rights requests within 30 calendar days of receipt.
You have the right to request a copy of all personal data jp368 holds about you, along with information about the purposes for which it is processed, the categories of data held, and the recipients with whom it has been shared. jp368 will provide this information in a clear, structured format free of charge.
If any personal data jp368 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. Most contact and preference data can be updated directly from your Account Settings. For identity data corrections, please contact the support team.
You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Note that jp368 is required to retain certain data (identity records, financial transaction logs) for a minimum of five years under its AML compliance obligations, and such data cannot be deleted upon request during that retention period.
You may request that jp368 restrict the processing of your personal data — meaning jp368 will continue to store it but will not use it for any active processing purpose — in circumstances where you contest the accuracy of the data, object to processing, or require the data to be preserved for a legal claim.
Where jp368 processes your personal data on the basis of your consent or contractual necessity, you have the right to receive that data in a structured, machine-readable format (e.g., CSV or JSON) so that you can transfer it to another service provider if you choose.
You have the right to object to jp368 processing your personal data on the basis of legitimate interests (Clause 6.3), including profiling for fraud prevention purposes. jp368 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests. You also have an absolute right to object to the use of your data for direct marketing purposes, which jp368 will honour immediately upon receipt of such objection.
Where jp368 processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time using the unsubscribe link in any marketing email, by updating your preferences in Account Settings, or by contacting jp368 support. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
jp368 is strictly an adults-only (21+) platform and does not knowingly collect, process, or store personal data from any person under the age of 21. Age verification is a mandatory step in the jp368 account registration and KYC process.
If jp368 becomes aware that personal data has been collected from a person under the age of 21 — whether through a false declaration at registration or any other means — jp368 will immediately:
The jp368 platform integrates with third-party service providers to deliver certain features and functionalities. While jp368 takes care to select reputable, security-certified partners, jp368 does not control the privacy practices of third-party entities and cannot accept responsibility for how they handle personal data beyond what is governed by the data processing agreements jp368 holds with those entities.
When you launch a game hosted by a licensed studio — such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Pocket Games Soft — your game session data (player identifier, bet amounts, game outcomes) is processed by that studio's servers in addition to jp368's own systems. These studios are licensed gaming operators subject to their own regulatory data protection obligations. jp368 does not share your name, contact details, or financial data with game studios.
Transactions processed via Indonesian bank transfer channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) or e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) are subject to the privacy policies of those respective financial institutions in addition to this Privacy Policy. jp368 shares only the minimum financial data necessary to initiate and confirm each transaction.
jp368.one does not contain links to external third-party websites. If you navigate away from jp368.one through a means other than the platform's own navigation, jp368 has no control over the privacy practices of websites operated by other parties and accepts no responsibility for them.
jp368 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, changes in jp368's data processing practices, or changes in the services jp368 offers. The following process governs how amendments are communicated:
If you have any questions about this Privacy Policy, wish to exercise any of your data rights under Clause 12, or need to report a privacy concern, please contact jp368's Data Privacy team through the following channels:
jp368's support team is staffed by native Indonesian-speaking agents and is available around the clock, every day of the year — including Indonesian public holidays such as Idul Fitri, Idul Adha, and Indonesian Independence Day (17 August).
With jp368's Privacy Policy clearly in view, you can explore the platform with full confidence that your personal data is handled securely and transparently. From live casino tables and slot gacor titles to BRI Liga 1 sportsbook markets and togel draws — jp368 is ready when you are. Adults 21+ only.