Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how jos889 ("jos889," "we," "us," or "our"), the operator of the online gaming platform available at https://jos889.cam, collects, uses, discloses, stores, and protects the personal information of individuals ("Users," "you," or "your") who access or use the Platform and any related services, features, or content.

We are committed to handling your personal data with the highest standards of integrity, transparency, and security. This Policy has been drafted in accordance with internationally recognized data protection principles, including those reflected in the General Data Protection Regulation (GDPR) and comparable international privacy frameworks, to the extent applicable to our operations.

By accessing the jos889 Platform, creating an Account, or using any of our Services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your information as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with jos889.

This Policy applies to all personal data we collect through the Platform, customer support interactions, marketing communications, payment processing, and any other channel through which you engage with jos889. It applies equally to Users in Indonesia and to Users in other jurisdictions who access the Platform.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, location data, online identifiers, or factors specific to the physical, economic, cultural, or social identity of that person.
• "Processing" means any operation performed on Personal Data, whether automated or not, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means jos889, the entity that determines the purposes and means of Processing of Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of jos889, including payment processors, cloud hosting providers, and analytics services.
• "Sensitive Personal Data" means categories of Personal Data that warrant heightened protection, including financial account information, government-issued identification numbers, and biometric data.
• "Cookie" means a small text file placed on your device by the Platform to store information about your session, preferences, and browsing activity.

3. Information We Collect

jos889 collects different categories of personal information depending on how you interact with our Platform. The table below provides a structured overview of the data we collect, its source, and the primary purpose for collection.

Data Category	Examples	Collection Method	Primary Purpose
Identity Data	Full name, date of birth, gender, nationality, KTP / passport number	Provided by you during registration and KYC verification	Identity verification, regulatory compliance, fraud prevention
Contact Data	Email address, phone number, residential address, city (e.g., Jakarta, Surabaya)	Provided by you during registration or profile updates	Account communication, customer support, promotional messaging (with consent)
Financial Data	Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet IDs (OVO, DANA, GoPay, ShopeePay), transaction history	Provided by you when making deposits or withdrawal requests	Payment processing, anti-money laundering compliance, withdrawal verification
Gaming Activity Data	Bet history, game preferences, session durations, win/loss records, bonus usage	Automatically generated by Platform activity	Account management, responsible gaming monitoring, product improvement
Technical Data	IP address, device type, browser type and version, operating system, screen resolution	Automatically collected via cookies and server logs	Security monitoring, fraud detection, Platform optimization
Usage Data	Pages visited, links clicked, time spent on pages, referral sources	Automatically collected via analytics tools	User experience improvement, marketing effectiveness measurement
Communication Data	Live chat transcripts, email correspondence, WhatsApp message records, support tickets	Generated during customer support interactions	Customer service delivery, quality assurance, dispute resolution

3.1 Information You Provide Directly

The most significant volume of personal data we process is information you voluntarily provide when you register for an Account, complete identity verification, make a deposit, request a withdrawal, contact customer support, or respond to surveys or promotions. We collect only the minimum information necessary for these purposes, though certain data fields are mandatory for regulatory compliance and cannot be waived.

3.2 Information Collected Automatically

When you access the Platform, our servers automatically record certain technical information about your connection and device. This includes your IP address (which may indicate your general geographic location, such as Jakarta or Bandung), the type and version of your browser, your operating system, the pages you visit, and the time and date of your visits. This information is collected through server logs, cookies, and similar technologies as described in Section 8.

3.3 Information from Third Parties

We may receive personal information about you from third parties in limited circumstances, including from payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay) to verify transaction details, from identity verification service providers as part of KYC processes, from fraud detection and prevention partners, and from publicly available sources such as government sanction lists or publicly accessible court records when required for due diligence.

4. How We Use Your Information

jos889 processes your personal information only for legitimate, specified, and explicitly stated purposes. We do not use your data for any purpose incompatible with those disclosed in this Policy without obtaining your prior consent. The primary purposes for which we use your personal data are:

4.1 Service Delivery and Account Management

We use your personal data to create and manage your Account, process your deposits and withdrawal requests, deliver the gaming services you have requested, maintain accurate records of your transactions, and provide customer support when you contact us. This processing is necessary for the performance of our contract with you and cannot be refused without preventing us from delivering the Services.

4.2 Identity Verification and Regulatory Compliance

As an internationally licensed gaming operator, jos889 is subject to anti-money laundering (AML), Know Your Customer (KYC), and counter-terrorism financing (CTF) obligations. We process your identity documents, financial information, and transaction history to verify your identity, screen against sanctions lists, monitor for unusual transaction patterns, and comply with applicable reporting obligations. This processing is a legal necessity and is required for us to operate as a licensed gaming platform.

4.3 Responsible Gaming Monitoring

We analyze your gaming activity data, including session duration, bet frequency, deposit patterns, and game selection, to identify potential indicators of problem gambling behavior. This monitoring enables us to proactively offer responsible gaming tools, apply account restrictions where necessary, and fulfill our duty of care toward vulnerable players. We consider this processing to be in your vital interests and in the public interest.

4.4 Security and Fraud Prevention

We process technical data, gaming activity data, and financial data to detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, money laundering, and other security threats. This includes automated screening of transactions against fraud indicators and manual review by our security team when suspicious patterns are identified.

4.5 Marketing and Promotional Communications

With your prior consent, we may use your contact information and gaming preferences to send you promotional offers, bonus notifications, personalized game recommendations, and information about seasonal promotions relevant to Indonesian cultural events (such as Idul Fitri, Ramadhan, or Indonesian Independence Day on August 17). You may withdraw your consent to marketing communications at any time by clicking the unsubscribe link in any email we send, updating your notification preferences in your Account settings, or contacting our support team.

4.6 Platform Improvement and Analytics

We use aggregated and anonymized usage data to understand how Users interact with the Platform, identify areas for improvement, test new features, measure the effectiveness of our promotions, and optimize the overall user experience. Where possible, analytics processing uses anonymized or pseudonymized data that cannot be directly linked back to individual users.

5. Legal Bases for Processing

jos889 processes your personal data on the following legal bases, consistent with internationally recognized data protection principles:

• Contract Performance: Processing necessary to provide the Services you have requested, including account management, payment processin g, game delivery, and customer support.
• Legal Obligation: Processing required to comply with AML, KYC, CTF, age verification, tax reporting, and other legal or regulatory obligations applicable to licensed gaming operators.
• Legitimate Interests: Processing necessary for fraud prevention, security monitoring, Platform optimization, and business analytics, provided such interests are balanced against your fundamental rights and freedoms.
• Consent: Processing based on your explicit, freely given, informed consent, particularly for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
• Vital Interests: Processing necessary to protect your vital interests or those of another person, particularly in responsible gaming interventions.

6. Information Sharing and Disclosure

jos889 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the limited circumstances described below, and only with recipients who are contractually bound to maintain appropriate security and confidentiality standards.

6.1 Service Providers and Data Processors

We engage carefully selected third-party service providers to perform functions on our behalf, including payment processing (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay), cloud hosting and data storage, identity verification and KYC services, fraud detection and prevention, customer support software, email delivery, and analytics services. These providers process your data strictly according to our instructions and are prohibited from using your data for their own purposes.

6.2 Game Providers

When you play games on the Platform, certain information about your gameplay (username, bet amounts, game outcomes) is shared with the respective game provider (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, etc.) to enable game functionality and maintain accurate records. Game providers are bound by strict confidentiality and data protection obligations.

6.3 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement, regulatory bodies, courts, government agencies, or other authorities when required by applicable law, in response to valid legal process (subpoena, court order, regulatory inquiry), or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of jos889, our Users, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving jos889, your personal information may be transferred to the successor entity as part of the transaction. We will notify you via email and/or a prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

6.5 Consent-Based Sharing

We may share your information with other parties when you have provided explicit consent to such sharing, such as when you participate in joint promotions with partner brands or authorize us to share information with third-party services you choose to connect with your Account.

7. Data Security Measures

Protecting your personal information is a top priority at jos889. We implement comprehensive technical and organizational security measures designed to safeguard your data against unauthorized access, alteration, disclosure, or destruction.

7.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is protected using industry-standard SSL/TLS encryption. Sensitive data at rest, including financial information and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized employees and contractors who require access to perform their job functions. All access is logged and monitored. We enforce strict password policies and multi-factor authentication for internal systems.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services. We conduct regular vulnerability assessments and penetration testing.
• Data Segregation: We maintain logical separation between production, testing, and development environments to prevent unauthorized data exposure during system maintenance.

7.2 Organizational Safeguards

• Employee Training: All jos889 staff undergo mandatory data protection training upon hire and annually thereafter, covering confidentiality obligations, security best practices, and incident response procedures.
• Confidentiality Agreements: Every employee and contractor with access to personal data signs a binding confidentiality agreement prohibiting unauthorized use or disclosure of customer information.
• Incident Response Plan: We maintain a documented data breach response plan that defines roles, responsibilities, and procedures for detecting, containing, investigating, and reporting security incidents.

7.3 Your Role in Security

While we implement robust security measures, the security of your Account also depends on your actions. You must maintain the confidentiality of your username and password, use a strong and unique password not shared with other websites, log out of your Account when using shared or public computers, keep your registered email address and phone number secure, and report any suspected unauthorized account access immediately to our support team.

8. Cookies and Tracking Technologies

jos889 uses cookies and similar tracking technologies to enhance your experience on the Platform, remember your preferences, deliver personalized content, and analyze Platform usage patterns.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly. These cookies enable core features such as security, session management, and load balancing. You cannot opt out of essential cookies without rendering the Platform unusable.
• Functional Cookies: Allow the Platform to remember your preferences (language selection, display settings, recently played games) and provide enhanced, personalized features.
• Analytics Cookies: Help us understand how Users interact with the Platform by collecting anonymous information about pages visited, time spent, and navigation paths. We use this data to improve the user experience and identify technical issues.
• Marketing Cookies: Track your activity across the Platform and other websites to deliver relevant promotional content and measure the effectiveness of our advertising campaigns. These cookies require your consent and can be disabled.

8.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling certain cookies may affect Platform functionality. You can manage cookie preferences through your browser settings or through any cookie consent banner displayed when you first visit the Platform. Your cookie preferences are stored locally and may need to be reset if you clear your browser data.

9. Data Retention

jos889 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on data category and applicable legal requirements.

9.1 Retention Schedule

• Account Data: Retained for the duration of your active Account relationship, plus 7 years following account closure to comply with financial record-keeping and AML regulations.
• Transaction Records: Retained for 7 years following the transaction date to comply with tax, accounting, and anti-money laundering obligations.
• Identity Documents: Retained for 7 years following account closure or the last verification event, as required by KYC and AML regulations.
• Marketing Consent Records: Retained for 3 years following withdrawal of consent to demonstrate compliance with consent requirements.
• Customer Support Communications: Retained for 2 years to enable dispute resolution and service quality improvement.
• Server Logs and Technical Data: Retained for 90 days for security monitoring and troubleshooting, then automatically deleted.

9.2 Secure Deletion

When data reaches the end of its retention period and is no longer required for any legal or legitimate business purpose, it is securely deleted or anonymized such that it can no longer be associated with an identifiable individual. Deletion methods include secure overwriting, cryptographic erasure, and physical destruction of storage media, as appropriate to the data type and storage medium.

10. Your Privacy Rights

jos889 respects your rights regarding your personal data. Subject to applicable legal limitations and exceptions, you have the following rights:

10.1 Right of Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of receiving your request.

10.2 Right to Rectification

You have the right to request correction of inaccurate personal data and to have incomplete data completed. You can update most information directly through your Account settings, or you may contact customer support to request corrections.

10.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, when you withdraw consent on which processing is based, or when you object to processing and there are no overriding legitimate grounds. This right is subject to exceptions where retention is required by law or necessary for legal claims.

10.4 Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data, when processing is unlawful but you prefer restriction over erasure, or when you need the data for legal claims even though we no longer need it for our purposes.

10.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider without hindrance from jos889, where technically feasible.

10.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. Upon receiving your objection to marketing, we will cease such processing immediately. For objections based on legitimate interests, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

10.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] (displayed as plain text). We will respond to your request within 30 days and may request additional information to verify your identity before fulfilling certain requests.

11. International Data Transfers

jos889 operates as an international gaming platform and may transfer your personal data to countries outside Indonesia for processing and storage. These transfers are necessary for service delivery and are conducted in accordance with applicable data protection laws.

When we transfer your data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by data protection authorities, adequacy decisions recognizing equivalent data protection standards in the destination country, or certification under recognized data protection frameworks. You may request information about specific safeguards applied to your data by contacting our Data Protection Officer.

12. Children's Privacy

jos889 does not knowingly collect personal information from individuals under the age of 21. Our Platform and Services are intended exclusively for adults who meet the legal gambling age requirement. If we discover that we have inadvertently collected personal data from a person under 21, we will delete that information immediately and permanently close any associated Account.

Parents and guardians should monitor their children's internet usage and implement device-level parental controls to prevent underage access to gambling websites. If you believe a minor has provided personal information to jos889, please contact our support team immediately at [email protected] (displayed as plain text).

13. Changes to This Privacy Policy

jos889 reserves the right to modify, update, or replace any part of this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this document and notify you via email to the address registered on your Account or through a prominent notice on the Platform.

Your continued use of the Platform following notification of changes constitutes acceptance of the revised Policy. If you do not agree with the changes, you should discontinue use of the Platform and may request account closure. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Historical versions of this Policy are available upon request from customer support.

14. Contact Information and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer through the following channels:

• Email: [email protected] (displayed as plain text, not a clickable link)
• Live Chat: Available 24/7 through the Platform
• Subject Line: Please use "Privacy Inquiry" or "Data Protection Request" in your email subject line for faster routing

We will investigate all privacy complaints and respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We are committed to working with authorities and with you to resolve any privacy concerns in a fair and timely manner.