Privacy Policy

1. Definitions

In this Privacy Policy, the following terms have the meanings set out below unless the context requires otherwise:

• "jkt188", "we", "us", "our" — refers to jkt188 and its affiliated operating entities responsible for the platform at https://jkt188.app.
• "Platform" — means the jkt188 website, any associated mobile or progressive web application, and all related services accessible through jkt188.app.
• "User", "you", "your" — any individual who accesses, browses, registers on, or otherwise interacts with the Platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, contact details, financial data, device identifiers, and behavioural data collected through the Platform.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "KYC" — Know Your Customer identity verification, required before withdrawals and during suspicious-activity reviews.
• "Third-Party Service Provider" — any external company engaged by jkt188 to deliver a component of our service, including payment processors, game studios, and identity verification partners.
• "Cookies" — small text files placed on your device by the Platform to enable functionality, remember preferences, and support analytics.

2. Data We Collect

jkt188 collects several categories of Personal Data depending on how you interact with the Platform. The table below summarises the categories, specific data points within each, and the primary reason for collection.

3. How We Collect Your Data

3.1 Directly from You

The majority of Personal Data jkt188 holds is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion. You are not obligated to provide this data, but declining to do so may prevent you from accessing certain features of the Platform.

3.2 Automatically Through Technology

When you visit or use the Platform, our servers and analytics tools automatically record Technical Data and Usage Data. This includes your IP address, the pages you navigate, and the duration of your session. This automatic collection occurs whether or not you are logged in to an Account. See Clause 8 for details on Cookies and tracking technologies.

3.3 From Third Parties

jkt188 may receive Personal Data about you from the following external sources:

• Payment processors and banks — transaction confirmation data from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja to verify deposits and authenticate withdrawals.
• Identity verification providers — results of document authenticity checks and database screenings performed as part of the KYC process.
• Fraud prevention services — device fingerprint scores, IP reputation data, and behavioural risk signals used to detect account takeover, bonus abuse, and multi-accounting.
• Game studios — session data, bet records, and game outcomes generated by third-party providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe.

4. Purpose & Legal Basis for Processing

jkt188 processes your Personal Data only where there is a valid legal basis to do so. The following table sets out the purposes for which we process your data and the corresponding legal basis in each case.

Where processing is based on consent (such as marketing communications), you may withdraw that consent at any time by updating your notification preferences in Account Settings or by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Data Sharing & Disclosure

5.1 Third-Party Service Providers

jkt188 shares Personal Data with Third-Party Service Providers only to the extent necessary for them to perform their contractual role. These providers are bound by data processing agreements that restrict them from using your data for any purpose beyond what jkt188 specifies. Categories of service providers include:

• Payment processors and Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity and KYC verification partners.
• Fraud detection and cybersecurity service providers.
• Game content studios: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, Spribe, and others as listed in our game lobby.
• Cloud hosting and infrastructure providers operating under strict data-processing agreements.
• Customer support tooling and live chat platform providers.

5.2 Legal and Regulatory Disclosure

jkt188 may disclose your Personal Data to law enforcement agencies, regulatory bodies, courts, or other public authorities when legally compelled to do so by a valid court order, subpoena, or regulatory directive. Where permitted by law, jkt188 will notify you of such a request before complying.

5.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving jkt188, your Personal Data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer that materially affects the processing of your data, and you will retain the same rights described in this Policy.

5.4 No Sale of Data

jkt188 does not sell, rent, licence, or otherwise commercially exploit your Personal Data to any third-party advertiser, data broker, or marketing agency. This prohibition is unconditional and applies regardless of the financial value of the data in question.

6. Data Retention

6.1 Active Accounts

While your Account remains active, jkt188 retains your Personal Data for as long as necessary to provide the services you use, maintain your Account history, and comply with our ongoing legal and regulatory obligations.

6.2 Closed or Inactive Accounts

Following the closure of your Account — whether voluntarily or by jkt188 — we retain your Personal Data for a minimum period of five (5) years from the date of closure. This retention period reflects our obligations under international AML regulations and the need to resolve any disputes or legal claims that may arise after closure.

6.3 KYC Documents

Identity documents and KYC verification records are retained for a minimum of five (5) years from the date of the last transaction on your Account, consistent with international anti-money laundering standards.

6.4 Marketing Consent Records

Records of your marketing consent or opt-out are retained for the duration of your Account and for a further two (2) years following closure, to demonstrate compliance with consent-based processing obligations.

6.5 Deletion After Retention Period

Upon expiry of the applicable retention period, Personal Data that is no longer required will be securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

7. Security Measures

7.1 Technical Safeguards

jkt188 employs a layered security architecture to protect your Personal Data from unauthorised access, alteration, disclosure, or destruction. Key technical measures include:

• TLS/SSL Encryption: All data transmitted between your device and the jkt188 Platform is encrypted in transit using TLS 1.2 or higher. Our SSL certificate is regularly renewed and monitored.
• Password Hashing: Account passwords are never stored in plain text. We use industry-standard one-way hashing algorithms with unique per-account salts.
• Firewalls and Intrusion Detection: The Platform's server infrastructure is protected by enterprise-grade firewalls and continuous intrusion-detection systems that monitor for anomalous traffic patterns.
• Access Controls: Access to Personal Data within jkt188's internal systems is restricted on a strict need-to-know basis. All staff who handle Personal Data are subject to confidentiality obligations.
• Data Backups: Encrypted backups of all Account and transaction data are maintained in geographically separate locations to ensure business continuity.

7.2 Organisational Safeguards

Beyond technical controls, jkt188 maintains internal data protection policies, conducts regular staff training on data handling best practices, and performs periodic security audits and vulnerability assessments to identify and remediate risks before they can be exploited.

7.3 Data Breach Response

In the event of a confirmed Personal Data breach that is likely to result in a risk to your rights and freedoms, jkt188 will notify affected users without undue delay and no later than 72 hours after becoming aware of the breach, in accordance with applicable data protection standards. The notification will describe the nature of the breach, the categories of data affected, and the steps being taken to mitigate harm.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small data files stored on your device by your web browser when you visit the Platform. They allow the Platform to remember information about your visit, such as your preferred language, login state, and session activity. Cookies do not contain executable code and cannot carry viruses.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies that prevent cross-site request forgery. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences (e.g., game lobby layout, notification settings) to enhance your experience across sessions. These persist between visits.
• Analytics Cookies: Collect anonymised data about how users navigate the Platform — which pages are visited most, where sessions originate, and how long users engage with different game categories. This data informs product improvements and is not linked to your identity.
• Security and Fraud Prevention Cookies: Support our fraud detection systems by recording device fingerprint signals and detecting unusual behavioural patterns consistent with automated bot activity or account takeover attempts.

8.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Instructions for managing cookies in the most common browsers are available on the browser developers' official support pages.

8.4 No Third-Party Advertising Cookies

jkt188 does not use third-party advertising networks or behavioural retargeting cookies. We do not allow external advertising platforms to place tracking cookies on the Platform or to profile your browsing behaviour for advertising purposes.

9. Your Privacy Rights

As a user of the jkt188 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 days.

9.1 Right of Access

You have the right to request a copy of the Personal Data jkt188 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared. We will provide this information in a structured, readable format.

9.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request its correction. For identity data that forms part of a KYC record, corrections may require re-submission of updated documentation.

9.3 Right to Erasure

You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where it has been processed unlawfully. Note that erasure requests cannot be fulfilled for data that we are legally required to retain (e.g., KYC records and transaction history subject to AML retention obligations — see Clause 6).

9.4 Right to Restriction of Processing

You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while we are verifying the accuracy of data you have disputed, or while we are assessing a legitimate interest override claim.

9.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider.

9.6 Right to Object

You have the right to object at any time to the processing of your Personal Data where that processing is based on our legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

9.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw consent for marketing communications, update your preferences in Account Settings or contact support.

10. Minors

The jkt188 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has created an Account on the Platform or submitted Personal Data without your consent, please contact us immediately at [email protected].

Upon receiving a credible report of underage usage, jkt188 will immediately suspend the Account in question, investigate the circumstances, and permanently delete all Personal Data associated with the minor, unless retention is required by law. Any Real Money Balance held in the Account will be handled in accordance with our Terms & Conditions and applicable regulations.

11. Third-Party Links & Integrations

The Platform may contain references to or integrations with third-party services — for example, game studios whose content is embedded within the jkt188 lobby, or payment gateways that redirect you to an external interface to complete a transaction. These third-party environments operate under their own privacy policies, which are entirely independent of this Policy.

jkt188 does not control how third-party services collect or use your data when you interact directly with their interfaces. We encourage you to review the privacy policies of any third-party service you engage with through or in connection with the Platform before submitting Personal Data to them. jkt188 accepts no responsibility or liability for the privacy practices of third-party services.

12. International Data Transfers

jkt188 operates globally, and some of your Personal Data may be transferred to, stored in, or processed in countries outside Indonesia. This may occur when data is hosted on international cloud infrastructure, processed by a KYC verification partner headquartered outside Indonesia, or transmitted to a game studio server located in a different jurisdiction.

Where Personal Data is transferred internationally, jkt188 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that provided under internationally recognised data protection frameworks. These safeguards include contractual data processing agreements with all third-party recipients that require them to implement equivalent security and privacy standards.

By using the Platform and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your Personal Data as described in this clause.

13. Amendments to This Policy

jkt188 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The "Last updated" date at the top of this page indicates when the most recent revision was published.

Where changes are material — meaning they significantly affect how we process your Personal Data or alter your rights in a meaningful way — we will notify registered Account holders by email at least 7 days before the revised Policy takes effect. For non-material changes (such as clarifications of existing language or administrative updates), the revised Policy will be posted without advance notice.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you should cease using the Platform and contact our support team to close your Account.

14. Contact & Data Requests

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a suspected data breach or privacy concern, please contact our support team using the details below. All privacy-related inquiries are handled by staff with dedicated data protection training.

• Email: [email protected]
• Subject Line for Data Rights Requests: "Data Rights Request — [Your Username]"
• Subject Line for Data Breach Reports: "Security Concern — [Brief Description]"
• Support Hours: 24 hours a day, 7 days a week — WIB (UTC+7), including public holidays in Jakarta and across Indonesia.
• Live Chat: Available 24/7 via the jkt188 Platform for registered users after login.

We aim to acknowledge all privacy-related correspondence within 24 hours and to resolve or provide a substantive response within 30 days. For complex data access or erasure requests, we may extend this period by a further 30 days where necessary, in which case we will inform you of the extension and the reason for the delay.