Privacy Policy — jkt77 Data Protection Statement

1 Definitions & Scope

The following defined terms are used consistently throughout this Privacy Policy:

• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, including name, national identity number, date of birth, contact details, financial information, and technical identifiers such as IP address.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, and deletion.
• "Controller" — jkt77, being the entity that determines the purposes and means of processing your Personal Data.
• "Data Subject" — you, the individual whose Personal Data is being processed by jkt77.
• "KYC Data" — identity and age verification documents submitted during the Know Your Customer process, including KTP (Indonesian National Identity Card), proof of address, and selfie verification photographs.
• "Transactional Data" — records of deposits, withdrawals, wagers, bonus claims, and balance movements associated with your Account.
• "Cookies" — small data files placed on your device by the Platform to enable session management, preference storage, and analytics functions.

This Policy covers the processing of Personal Data of all Account Holders and visitors to the jkt77 platform, including players located in Indonesia (Jakarta, Surabaya, Bandung, Medan, Bali, and all other provinces) and other permitted jurisdictions.

2 Data We Collect

jkt77 collects Personal Data across several categories. The specific data elements collected depend on how you interact with the Platform:

3 How We Collect Your Data

jkt77 collects Personal Data through the following mechanisms:

• Directly from you: When you register an Account, complete KYC verification, make deposits or withdrawals, place bets, contact our support team, or update your Account settings.
• Automatically through platform use: Technical Data (IP address, device information, session logs) is collected automatically when you access the jkt77 website or mobile interface via standard server logs and cookies.
• From payment processors: When you initiate a deposit or withdrawal via a bank transfer (BCA, BRI, BNI, Mandiri) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), jkt77 receives confirmation data from the relevant payment provider to reconcile your transaction.
• From fraud and security service providers: jkt77 uses specialist third-party services to verify IP addresses, detect VPN/proxy usage, and flag potentially fraudulent account patterns. These services may provide aggregated risk scores associated with your session data.

4 Purposes & Legal Bases for Processing

jkt77 processes Personal Data only where a valid legal basis exists. The following table sets out our primary processing purposes and their corresponding legal bases:

• Account creation and operation — necessary for the performance of your Account Agreement with jkt77.
• Identity and age verification (KYC) — necessary for compliance with our international licensing obligations and to fulfil our legal duty to prevent underage gambling. You must be 21 years of age or older to hold an Account on jkt77.
• Payment processing — necessary for the performance of your Account Agreement; required to process IDR deposits and withdrawals via supported Indonesian banking channels.
• Fraud prevention and platform integrity — necessary for jkt77's legitimate interest in maintaining a secure, fair platform environment and preventing financial crime.
• Customer support — necessary for the performance of your Account Agreement and jkt77's legitimate interest in resolving disputes and improving service quality.
• Regulatory compliance and anti-money laundering — necessary for compliance with jkt77's legal obligations under its international licensing framework.
• Marketing communications — based on your explicit consent, given at registration or subsequently via Account settings. Consent may be withdrawn at any time.
• Platform analytics and improvement — based on jkt77's legitimate interest in understanding how the Platform is used and improving its features, security, and player experience.

5 Data Sharing & Disclosure

jkt77 does not sell your Personal Data. We may share limited Personal Data with the following categories of third parties, strictly for the purposes outlined and subject to equivalent data protection obligations:

• Payment Processing Partners: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to process your transactions. USDT cryptocurrency transactions are processed via blockchain infrastructure and are subject to the inherent transparency of the blockchain network.
• KYC and Identity Verification Providers: Specialist third-party KYC service providers may process your identity documents on jkt77's behalf for verification purposes. These providers are contractually bound to process your data only for the stated purpose and to maintain equivalent security standards.
• IT and Cloud Infrastructure Providers: jkt77's platform infrastructure is hosted on third-party cloud environments. These providers act as data processors under strict contractual data protection agreements and do not have independent access rights to your Personal Data.
• Fraud and Security Services: IP verification, device fingerprinting, and fraud-detection services receive Technical Data to flag suspicious activity.
• Legal and Regulatory Authorities: jkt77 will disclose Personal Data to law enforcement, regulatory bodies, or courts where required by law, court order, or as part of its licensing obligations — without prior notice to you where legally required.

6 KYC Document Handling

KYC documents — including your KTP (Indonesian National Identity Card) photograph, proof of address, and selfie verification image — are treated as a high-sensitivity data category within jkt77's data management framework. The following specific controls apply:

• Documents are encrypted both in transit (TLS 1.2 or higher) and at rest (AES-256 encryption) within jkt77's secure storage environment.
• Access to KYC documents is restricted to a limited number of authorised jkt77 compliance personnel and contracted KYC service providers, subject to role-based access controls and audit logging.
• KYC documents are not used for any purpose other than identity and age verification. They are not shared with marketing partners, analytics providers, or any other non-essential third party.
• KYC documents are retained for the period specified in Section 8 (Data Retention) of this Policy and then permanently destroyed using secure deletion methods.

7 Cookies & Tracking Technologies

The jkt77 platform uses cookies and similar tracking technologies to enable core functionality, maintain session state, and improve the player experience. The following cookie categories are used:

• Essential Cookies: Required for platform operation — authentication tokens, session identifiers, and security tokens. These cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Store your platform preferences such as preferred language and display settings. These persist between sessions for your convenience.
• Analytics Cookies: Aggregate, anonymised data on how players navigate the Platform — page views, session duration, feature usage. Used to improve Platform design and performance. No individual-level profiling is performed.
• Security Cookies: Device fingerprinting and session integrity tokens used to detect suspicious login patterns and prevent account takeover attacks.

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging into your jkt77 Account. Disabling analytics or functional cookies will not affect your ability to use core Platform features.

8 Data Retention

jkt77 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, licensing, and regulatory obligations. The following indicative retention periods apply:

• Account Data and KYC Documents: Retained for the duration of the Account relationship plus a minimum of five (5) years following Account closure, to satisfy anti-money laundering and licensing record-keeping requirements.
• Transactional Data (bets, deposits, withdrawals): Retained for a minimum of seven (7) years from the date of the transaction, as required by financial regulation standards applicable to jkt77's licensing jurisdiction.
• Customer Support Records: Retained for three (3) years from the date of the support interaction, for dispute resolution and quality assurance purposes.
• Technical and Log Data: Server logs and IP address records retained for up to twelve (12) months for security monitoring and fraud investigation purposes.
• Marketing Consent Records: Retained indefinitely as evidence of consent, or until consent is withdrawn and all associated marketing data is deleted.

At the end of each retention period, Personal Data is permanently deleted using secure deletion methods or, where physical destruction of storage media is necessary, by certified data destruction procedures.

9 International Data Transfers

jkt77 operates as an internationally licensed platform. As a result, your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Indonesia. Such transfers may occur in connection with our cloud infrastructure providers, KYC verification partners, or payment technology partners.

Where Personal Data is transferred internationally, jkt77 takes appropriate steps to ensure that the receiving party provides an adequate level of protection for your data, through contractual safeguards including standard contractual clauses, data processing agreements, and equivalent technical and organisational security measures to those described in this Policy.

10 Your Data Rights

As a Data Subject, you hold the following rights in relation to your Personal Data held by jkt77. Requests must be submitted in writing to our support email address (see Section 14). jkt77 will respond within 30 calendar days of receipt.

11 Children & Minors

The jkt77 platform is strictly for adults. Persons under the age of 21 are not permitted to register, hold an Account, or use any service offered by jkt77. jkt77 does not knowingly collect Personal Data from persons under the age of 21.

If jkt77 becomes aware that Personal Data has been collected from a person under 21, that data will be immediately deleted, the Account will be closed, and any deposits will be refunded to the original payment source. Winnings generated by underage accounts are forfeited in their entirety.

If you believe a minor has registered on jkt77 and provided personal data, please notify us immediately at the contact address in Section 14. We will investigate and act promptly.

12 Security Measures

jkt77 implements technical and organisational security measures designed to protect Personal Data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and jkt77 servers.
• AES-256 encryption for Personal Data and KYC documents stored at rest.
• Role-based access controls ensuring only authorised personnel access sensitive data categories.
• Multi-factor authentication required for all jkt77 internal administrative system access.
• Regular independent security audits and penetration testing of platform infrastructure.
• Automated intrusion detection and DDoS mitigation systems on all public-facing platform endpoints.
• Audit logging of all access to sensitive data systems, with anomaly alerts.

Notwithstanding these measures, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own Account login credentials and for ensuring the devices you use to access jkt77 are adequately secured.

13 Amendments to This Privacy Policy

jkt77 reserves the right to update this Privacy Policy periodically to reflect changes in our data processing practices, applicable laws, or platform functionality. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Material changes to this Policy — particularly those that affect how your Personal Data is used or shared — will be communicated to Account Holders via email to the registered address at least 14 calendar days before the changes take effect. Continued use of the jkt77 platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically. The most current version is always available at https://jkt77.cam/privacy-policy.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about jkt77's data processing practices, please contact us through the following channel:

If you are not satisfied with jkt77's response to a privacy complaint, you may have the right to escalate the matter to the data protection supervisory authority in your jurisdiction. For further details on responsible gaming data handling, please also refer to our Responsible Gaming page.