Privacy Policy

Throughout this Privacy Policy the following terms carry the meanings set out below:

jco69, operating under its international licence, acts as the data controller for all Personal Data collected through the Platform. As data controller, jco69 determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing complies with applicable international data protection standards.

The Platform is operated primarily for players located in Indonesia. While Indonesia's Personal Data Protection Law (UU PDP, effective 2024) forms part of our compliance framework, jco69 also adheres to internationally recognised data protection principles consistent with the General Data Protection Regulation (GDPR) as a global best-practice standard.

jco69 collects only the Personal Data that is necessary to deliver its services, comply with regulatory obligations, and protect the integrity of the Platform. The categories of data we collect are as follows:

3.1 Registration Data

• Full legal name — used for identity verification and KYC.
• Date of birth — used to verify you are at least 21 years of age.
• Indonesian mobile number — used for account security, two-factor authentication (2FA), and WhatsApp support.
• Email address — used for account communications, bonus notifications, and password recovery.
• Username and password — your chosen credentials for accessing the Platform (passwords are stored in hashed, salted form and are never accessible in plain text).
• City / province of residence — used to localise your experience (Jakarta, Surabaya, Bandung, Bali, Yogyakarta, Medan, and other Indonesian cities).

3.2 Financial Data

• Bank account details — BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, or OCBC NISP account numbers provided for deposit and withdrawal processing.
• E-wallet identifiers — OVO, DANA, GoPay, ShopeePay, or LinkAja account references.
• Transaction records — deposit amounts, withdrawal amounts, dates, and payment method used, denominated in Indonesian Rupiah (IDR / Rp).
• Card details — where Visa or Mastercard is used, card details are processed exclusively by our PCI-DSS-compliant payment processor and are never stored on jco69 servers.

3.3 Identity Verification (KYC) Data

• Government-issued photo ID (e.g., Indonesian KTP national identity card or passport).
• Proof of address documents where required.
• Selfie or liveness-check image for biometric comparison where requested.

3.4 Behavioural and Technical Data

• IP address and geolocation — used for fraud detection and to ensure jurisdictional compliance.
• Device identifiers — browser type, operating system, device model, and screen resolution.
• Session data — login timestamps, session duration, pages visited, and in-app navigation patterns.
• Betting and gaming activity — wager history, game selections, bet amounts, outcomes, and bonus usage patterns.
• Communication records — live chat transcripts, WhatsApp message histories, and email correspondence with support agents.

jco69 collects your Personal Data through the following channels:

• Direct submission: Information you actively provide when registering an account, completing the KYC process, making a deposit or withdrawal request, contacting support, or responding to a survey or promotion.
• Automated collection: Technical data collected automatically when you access the Platform — including IP address, device fingerprint, and session cookies — via our servers and analytics infrastructure.
• Payment processors: Transaction confirmation data received from BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and card processing partners following a deposit or withdrawal event.
• Game providers: Aggregated gameplay data from third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) relating to wagers placed through their integrated game clients on the Platform.
• Fraud and risk partners: Risk-scoring signals from third-party fraud prevention services used to detect suspicious account activity, multiple account creation, and AML (anti-money laundering) red flags.
• Publicly available sources: In limited circumstances during enhanced KYC review, jco69 may reference publicly available information to verify identity or investigate fraud.

jco69 processes your Personal Data for the following specific and legitimate purposes:

jco69 processes your Personal Data on the following legal grounds, consistent with internationally recognised data protection frameworks:

• Contractual necessity: Processing required to perform the contract between you and jco69 — including account creation, payment processing, and service delivery. Without this processing, jco69 cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable law — including KYC/AML obligations under our international licence, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing necessary for jco69's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your rights.
• Consent: Where jco69 relies on your consent as the legal basis — specifically for marketing communications and non-essential cookies — you have the right to withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

jco69 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: We share financial and identity data with our payment processing partners (including local bank APIs, e-wallet providers such as OVO, DANA, GoPay, and card processors) solely to facilitate transactions you have initiated. These processors are contractually bound to process data only on our instructions and to maintain appropriate security standards.
• Game Studios: Aggregated wager and session data is shared with licensed game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) to resolve disputes, process jackpot claims, and maintain game integrity. Studios do not receive your identity or payment data.
• KYC / Identity Verification Providers: Identity documents submitted during KYC verification are processed by our third-party identity verification partner under a strict data processing agreement. Documents are used solely for age and identity verification and are not shared further.
• Fraud Prevention and AML Partners: Risk-scoring data (IP address, device fingerprint, transaction patterns) may be shared with specialist fraud-prevention and AML compliance services to detect and prevent financial crime.
• Customer Support Infrastructure: Live chat and helpdesk platform providers process communication data on jco69's behalf under data processing agreements consistent with our privacy obligations.
• Regulatory and Law Enforcement Authorities: jco69 may disclose Personal Data to competent authorities where required by law, court order, or the express requirement of a regulatory body, without prior notice to you where legally prohibited from providing such notice.
• Corporate Transactions: In the event of a merger, acquisition, or business transfer involving jco69, your Personal Data may be transferred to the acquiring entity, subject to the same or equivalent data protection obligations.

jco69 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

After the applicable retention period expires, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and business analysis purposes.

jco69 implements a comprehensive set of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and jco69 servers is encrypted in transit using industry-standard TLS 1.2 or higher protocols.
• Encryption at Rest: Sensitive Personal Data — including identity documents, payment details, and hashed passwords — is encrypted at rest using AES-256 encryption on our server infrastructure.
• Password Security: Member passwords are never stored in plain text. All passwords are processed through a strong cryptographic hashing algorithm with per-account salting.
• Two-Factor Authentication (2FA): jco69 strongly recommends enabling 2FA on your account. 2FA adds a second verification layer — a one-time code delivered to your registered Indonesian mobile number — before any login or withdrawal is processed.
• Access Controls: Internal access to Member Personal Data is restricted on a strict need-to-know basis. jco69 employees and contractors undergo background checks and are bound by confidentiality obligations. Access is audited and logged.
• Penetration Testing: jco69 engages independent security professionals to conduct regular penetration tests and vulnerability assessments of the Platform and its underlying infrastructure.
• Incident Response: In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, jco69 will notify affected Members via their registered email address within 72 hours of becoming aware of the breach.

jco69 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and gather analytics data. The cookies we use fall into the following categories:

You may manage your cookie preferences at any time through your account settings or by clearing cookies in your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features.

As a Member of jco69 and a data subject under applicable international data protection frameworks, you have the following rights in respect of your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy — Data Request" and your account username.

jco69 will respond to all valid data subject requests within 30 calendar days of receipt. In cases of complexity or high volume, this period may be extended by a further 60 days, with notice provided within the initial 30-day window. Responses are provided free of charge unless the request is manifestly unfounded or repetitive.

The jco69 Platform is strictly for adults aged 21 and above. jco69 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted at registration and at the point of first withdrawal, using date-of-birth records and KYC identity documents.

If jco69 becomes aware that it has inadvertently collected Personal Data from a person under 21 years of age, it will:

• Immediately close the account and suspend all pending transactions.
• Return any deposited funds (excluding bonus funds) to the original payment method.
• Permanently and securely delete all Personal Data associated with the underage account from jco69 systems.
• Retain only the minimum data required to ensure the individual cannot re-register while underage.

If you are the parent or guardian of an individual you believe has registered on jco69 while under the age of 21, please contact us immediately at [email protected].

The jco69 Platform integrates with a number of third-party services to deliver its full range of betting and gaming products. Each third-party provider operates under its own privacy policy in addition to any data processing agreement with jco69. The principal third-party categories are:

• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft operate their game clients within the Platform. These studios may collect technical session data (RNG seed states, game round identifiers) for audit and certification purposes.
• Payment Infrastructure: Local bank APIs (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) process payment instructions on jco69's behalf. All financial data shared with these providers is transmitted over encrypted channels.
• Analytics Providers: jco69 uses privacy-respecting analytics tools to understand Platform usage. Where analytics cookies are used, IP addresses are anonymised before storage.
• Live Chat and Support Infrastructure: Our live chat system processes the content of your support conversations. Agents are trained in data handling and are contractually bound by confidentiality obligations.
• CDN and Hosting Providers: Content delivery and hosting infrastructure providers may process server log data (including IP addresses) in the normal course of operating web services. These providers are selected for their robust security certifications.

jco69 conducts due diligence on all third-party processors before engagement and requires contractual data processing agreements that mandate compliance with applicable data protection standards. However, jco69 is not responsible for the independent privacy practices of third-party websites that may be referenced in general content outside the Platform.

jco69 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, jco69 will:

• Update the "Last Updated" date displayed at the top of this page.
• Display a prominent notice on the Platform homepage for a minimum of 14 days following the change.
• Send a notification to your registered email address summarising the key changes, where the amendments materially affect your rights or our processing activities.

Your continued use of the Platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes to this Policy, you should cease using the Platform and contact us to request account closure and data deletion in accordance with Clause 11.

We encourage you to review this Privacy Policy periodically. The version currently published at jco69.bio/privacy-policy is always the most current and supersedes all prior versions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jco69 processes your Personal Data, please reach out through any of the following channels:

• Email (Privacy Inquiries): Send your request to [email protected] with the subject line "Privacy — [Your Request Type]" (e.g., "Privacy — Data Access Request" or "Privacy — Erasure Request"). Include your registered username and a brief description of your request.
• Live Chat: Available 00:00–24:00 WIB, seven days a week. Our support agents can assist with general privacy questions and escalate formal data subject requests to the appropriate team.
• WhatsApp: +62 811-0696-9000, available 08:00–24:00 WIB. Please note that formal data subject requests submitted via WhatsApp will be asked to reconfirm via email for audit trail purposes.

jco69 aims to acknowledge all privacy-related inquiries within 2 business days (WIB) and to resolve them within the statutory timeframes described in Clause 11. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.