Privacy Policy

1 Definitions

The following terms carry the meanings set out below wherever they appear in this Privacy Policy:

• "Personal Data" means any information that directly or indirectly identifies you as a natural person, including your name, date of birth, contact details, financial account numbers, device identifiers, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Platform" means the jp118 website at https://jp118.pro, its mobile-optimized interface, and all associated products including the sportsbook, live casino, slots library, and togel (Indonesia's traditional numbers lottery) markets.
• "KYC" means Know Your Customer — the identity verification process jp118 conducts to confirm a Member's legal name, date of birth, residential address, and payment method ownership before processing withdrawals or issuing bonuses.
• "Third-Party Service Provider" means any company or individual engaged by jp118 to support platform operations, including payment processors, game studios, fraud detection vendors, and cloud infrastructure providers, who process Personal Data on jp118's behalf under a data processing agreement.
• "Cookie" means a small text file placed on your device by the Platform to maintain your session, store your preferences, and collect aggregate usage analytics.
• "IDR" means Indonesian Rupiah (symbol: Rp), the sole transaction currency of the Platform.

2 Data We Collect

jp118 collects the following categories of Personal Data in the course of providing the Platform and its services:

2.1 Registration Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Indonesian residential address
• Email address
• Indonesian mobile phone number
• Preferred username

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (National ID / KTP, passport, or driver's license)
• Proof of residential address (utility bill or bank statement dated within three months)
• Proof of payment method ownership (screenshot or statement from BCA, BRI, BNI, Mandiri, CIMB Niaga, GoPay, OVO, DANA, ShopeePay, or LinkAja account)
• Selfie photograph taken during the verification process, where required

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and timestamps
• Payment method details (bank account name and last four digits; e-wallet account reference)
• Transaction reference numbers issued by payment processors
• Running account balance history

2.4 Gameplay and Betting Data

• Bet history, game sessions, wager amounts, and outcomes
• Bonus claims, rollover progress, and promotional participation records
• Game preferences and platform navigation patterns

2.5 Technical and Device Data

• IP address and approximate geolocation (city/region level)
• Device type, operating system, and browser version
• Session duration, pages visited, and click events collected via first-party analytics
• Login timestamps and logout events

2.6 Communications Data

• Content of support tickets, live chat transcripts, and email correspondence submitted to [email protected]
• Feedback and complaint submissions

3 How We Collect Your Data

jp118 collects Personal Data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or participate in a promotion.
• Automatically via the Platform — through cookies, server logs, and first-party analytics tools that record your device information, IP address, session activity, and navigation behavior each time you access the Platform.
• From payment processors — jp118's integrated payment partners (covering bank transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallets GoPay, OVO, DANA, ShopeePay, LinkAja) transmit transaction confirmation data back to jp118 upon the completion of each deposit or withdrawal.
• From game studio providers — licensed studio partners including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe transmit game session outcomes and RNG certification data to jp118 for gameplay record-keeping and dispute resolution purposes.
• From fraud detection and compliance vendors — third-party services engaged to detect multi-accounting, bonus abuse, money laundering, and underage access may share risk signals and match results with jp118.

4 How We Use Your Data

jp118 processes your Personal Data for the following defined purposes only:

5 Legal Basis for Processing

jp118 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform the agreement between you and jp118 — including account registration, identity verification, payment processing, and the delivery of betting and gaming services.
• Legal Obligation: Processing required to comply with applicable laws and our international gaming license obligations, including KYC, AML/CFT checks, record-keeping mandates, and the enforcement of the 21+ age restriction.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — where these interests are not overridden by your rights and freedoms. jp118 has conducted balancing tests to confirm that such processing is proportionate and does not unduly prejudice Members.
• Consent: Processing for direct marketing communications and non-essential cookies — where your consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

jp118 does not sell or rent your Personal Data to third parties. We share data only in the following limited circumstances:

• Third-Party Service Providers: jp118 engages carefully selected service providers — including payment processors, cloud hosting providers, KYC verification platforms, fraud detection vendors, and game studio partners — who process Personal Data solely on jp118's instructions and under contractual data processing agreements that impose obligations equivalent to those in this Policy.
• Regulatory and Law Enforcement Authorities: jp118 will disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a valid legal process, or our licensing authority. jp118 will notify you of such disclosure to the extent permitted by law.
• AML and Fraud Prevention Networks: jp118 may share data with licensed fraud prevention and anti-money laundering services to verify identity, detect multi-accounting, and prevent financial crime. Such services operate under their own privacy frameworks and are selected on the basis of their compliance standards.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of jp118's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. jp118 will notify you of any such change via your registered email address.
• With Your Consent: jp118 will not share your data for any purpose beyond those described in this Policy without your explicit prior consent.

7 Cookies & Tracking Technologies

jp118 uses cookies and similar technologies (such as local storage and session tokens) to support the operation of the Platform. The following cookie categories are in use:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without affecting platform functionality.
• Functional / Preference Cookies: Store your language preference, display settings, and last-visited product area (e.g., sportsbook or slots) to provide a more personalized experience on your next visit. These are set on your device for up to 90 days.
• Analytics Cookies: First-party analytics cookies collect aggregated, anonymized data about how Members navigate the Platform — including which pages are visited most frequently and where users encounter errors. This data is used solely for platform improvement. jp118 does not use Google Analytics or other third-party analytics services that transmit your data to external servers.

jp118 does not use advertising cookies, retargeting pixels, or social media tracking scripts. You will not be followed by jp118 advertisements after leaving the Platform.

8 Data Retention

jp118 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal retention obligations. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Anonymized aggregate data may be retained indefinitely for statistical and analytical purposes.

9 Data Security

jp118 implements a layered approach to data security, combining technical controls, organizational measures, and vendor management practices:

• Transport Security: All data in transit between your browser/app and jp118 servers is encrypted using TLS 1.2 or higher. The Platform enforces HTTPS on all endpoints; plain HTTP connections are automatically redirected.
• Data at Rest: Databases containing Personal Data and KYC documents are stored on encrypted volumes. Encryption keys are managed through a dedicated key management service with access logging enabled.
• Access Controls: Access to systems containing Personal Data is restricted on a need-to-know basis using role-based access control (RBAC). All staff access is authenticated with multi-factor authentication and is subject to audit logging.
• Penetration Testing: jp118 conducts regular vulnerability assessments and annual third-party penetration tests of the Platform's infrastructure and application layer. Critical findings are remediated within 48 hours of discovery.
• Incident Response: jp118 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your Personal Data, jp118 will notify you and relevant regulatory authorities within the timeframes required by applicable law.
• Vendor Security: All Third-Party Service Providers with access to Personal Data are assessed against jp118's vendor security standards before onboarding and are subject to contractual data security obligations.

10 Your Rights

As a Member of jp118, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact jp118 at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of all Personal Data jp118 holds about you, including the categories of data, the purposes for which it is processed, and the recipients to whom it has been disclosed. jp118 will respond within 30 days.
• Right to Rectification: If any Personal Data jp118 holds about you is inaccurate or incomplete, you may request correction. Account holders may update basic profile information directly within the Account settings panel.
• Right to Erasure: You may request deletion of your Personal Data where: (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been processed unlawfully. Erasure requests are subject to jp118's legal retention obligations — data that must be retained under AML, licensing, or financial record-keeping law cannot be deleted until the applicable retention period expires.
• Right to Restrict Processing: You may request that jp118 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You may request that jp118 provide your Personal Data in a structured, commonly used, machine-readable format (e.g., CSV or JSON), which you may then transfer to another service provider.
• Right to Object: You may object at any time to the processing of your Personal Data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to jp118 demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

jp118 will verify your identity before processing any Data Rights Request to ensure that Personal Data is not disclosed to unauthorized parties. jp118 aims to respond to all requests within 30 days. Complex or high-volume requests may take up to 60 days, in which case jp118 will notify you of the extension and its reason.

11 Children's Privacy

The jp118 Platform is strictly intended for adults aged 21 and over. jp118 does not knowingly collect, store, or process the Personal Data of individuals under the age of 21. The Platform implements the following controls to prevent underage access:

• Age declaration is required at the point of registration. Providing a false date of birth to circumvent the 21+ restriction is a material breach of jp118's Terms & Conditions.
• KYC identity verification — including government-issued photo ID — is required before withdrawal processing and bonus issuance, providing a secondary age confirmation layer.
• Accounts where age verification cannot be confirmed as 21+ are suspended pending review and, if unverified, are permanently closed with deposits returned net of any bonuses claimed.

If jp118 becomes aware that Personal Data has been collected from a person under 21 without appropriate parental or guardian consent, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has created a jp118 account, contact [email protected] immediately.

12 International Data Transfers

jp118 is an internationally licensed platform. In the course of providing services to Members based in Indonesia, your Personal Data may be transferred to and processed in countries other than Indonesia — including the jurisdiction where jp118 holds its gaming license and the locations of its cloud infrastructure and Third-Party Service Providers.

jp118 ensures that all international transfers of Personal Data are protected by appropriate safeguards, including:

• Standard contractual clauses or equivalent data transfer mechanisms incorporated into agreements with Third-Party Service Providers located outside Indonesia.
• Transfers only to vendors that maintain security standards equivalent to those described in Section 9 of this Policy.
• Due diligence assessments of the data protection frameworks in recipient countries before new international transfers are initiated.

By registering an account with jp118 and providing your Personal Data, you acknowledge and consent to the international transfer of your data under the protections described in this section.

13 Third-Party Links

The jp118 Platform does not include links to external websites. All navigation within jp118 remains within the https://jp118.pro domain. jp118 is not responsible for the privacy practices of any third-party websites that you may access independently of the Platform.

Game studio interfaces — such as those provided by Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe — are embedded within the jp118 platform under iframe or API integrations. These studios are bound by data processing agreements with jp118 and are permitted to process game session data only for the purposes of delivering gameplay and certifying game outcomes. They are not permitted to use your data for their own independent marketing purposes.

14 Updates to This Policy

jp118 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, jp118 will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on the Platform for a minimum of 14 days following the change.
• Send a notification to your registered email address summarizing the key changes.

Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree to any material change, you must cease using the Platform and may request account closure and withdrawal of any real-money Balance by contacting [email protected].

jp118 recommends that you review this Policy periodically. The current version is always accessible at https://jp118.pro/privacy-policy.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way jp118 processes your Personal Data, please contact our Data Privacy team through the following channel:

For responsible gaming queries, self-exclusion requests, or account closure, please also contact [email protected] and clearly state the nature of your request in the subject line. All responsible gaming requests are processed within 24 hours of receipt as a priority matter.