jp303 Privacy Policy

jp303 ("we", "us", "our", or "the Platform") operates the online gambling platform accessible at https://jp303.pro, providing sports betting, live casino games, slots, online poker, and card games to members across Indonesia and other permitted jurisdictions. jp303 is committed to protecting the privacy and personal data of all individuals who interact with the Platform, whether as registered Members, visitors, or prospective registrants.

This Privacy Policy describes in detail how jp303 collects, uses, stores, protects, and — where applicable — shares personal information in connection with the operation of the Platform. It applies to all data processing activities carried out by jp303, including data collected via the website, live chat support interactions, email correspondence, and payment processing workflows.

By registering a jp303 account or by continuing to use the Platform after this Privacy Policy has been updated, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact support to request account closure.

This Privacy Policy should be read in conjunction with the jp303 Terms & Conditions, which together form the complete agreement governing your use of the Platform.

The following defined terms are used throughout this Privacy Policy. Capitalised terms not defined here carry the meanings given to them in the jp303 Terms & Conditions.

• "Personal Data" means any information that identifies or could reasonably be used to identify a living natural person, either directly (e.g., full name, national identity number) or indirectly (e.g., IP address combined with other data points).
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, combination, restriction, erasure, or destruction.
• "Data Controller" means jp303, the entity that determines the purposes and means of processing Personal Data collected via the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of jp303 under a written data processing agreement, including payment gateway providers, identity verification services, and analytics providers.
• "Member" means any individual who has completed registration on the jp303 Platform and holds a verified or unverified account.
• "KYC" means Know Your Customer — the identity verification process jp303 uses to confirm the identity and eligibility of Members in accordance with applicable anti-money laundering obligations.
• "Cookies" means small data files stored on your browser or device by the jp303 Platform or authorised third-party analytics providers for session management and performance optimisation purposes.

jp303 collects Personal Data through several channels: directly from you during registration and KYC, automatically through your use of the Platform, and from authorised third-party sources such as identity verification agencies and payment processors. The categories of data we collect are described below.

3.1 Registration Data

When you create a jp303 account, we collect: your full legal name as it appears on your Indonesian National Identity Card (KTP) or passport; your date of birth; your email address; your Indonesian mobile phone number; your preferred username; and your chosen password (stored in hashed form — we do not store plaintext passwords).

3.2 Identity Verification (KYC) Data

To fulfil our legal and regulatory obligations under anti-money laundering and responsible gaming requirements, we collect copies of identity documents including your KTP or passport, proof-of-address documents (such as recent bank statements from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or Bank Danamon), and proof of ownership of the payment method used to fund your account (which may include bank account details or e-wallet account screenshots from OVO, DANA, GoPay, ShopeePay, or LinkAja).

3.3 Financial Transaction Data

We record all deposit and withdrawal transactions associated with your account, including transaction amounts in Indonesian Rupiah (IDR), transaction timestamps (in WIB, UTC+7), transaction reference numbers, and the payment method used. We do not store full bank account numbers or full e-wallet account credentials; we store only the information necessary to reconcile transactions and process withdrawals.

3.4 Gameplay & Betting Data

jp303 records all betting and gaming activity conducted through your account, including game titles played, bet amounts placed, outcomes, session durations, and bonus usage. This data is used for account security monitoring, responsible gaming assessments, dispute resolution, and platform improvement.

3.5 Technical & Device Data

We automatically collect certain technical information when you access the Platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, session duration, and pages visited. This data is used for security monitoring, fraud prevention, and aggregate analytics.

3.6 Communications Data

When you contact jp303 support via live chat or email, we retain records of those communications — including the content of messages, timestamps, and the support agent who handled your inquiry — for quality assurance, dispute resolution, and regulatory record-keeping purposes.

jp303 uses Personal Data only for specific, legitimate purposes directly related to the operation of the Platform and our obligations to Members. The primary purposes for which your data is used are as follows:

• Account Management: To create, operate, and maintain your jp303 account, including authenticating your identity each time you log in and managing your account settings and preferences.
• Payment Processing: To process deposits and withdrawals in Indonesian Rupiah via local bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja), and to reconcile transaction records.
• Identity Verification & KYC: To verify your identity, age (21+), and eligibility to use the Platform in accordance with our anti-money laundering and responsible gaming obligations.
• Fraud & Security Monitoring: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, collusion, money laundering, and other prohibited conduct described in the Terms & Conditions.
• Responsible Gaming: To monitor betting and gaming patterns that may indicate problem gambling behaviour, and to apply responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) at your request or as required by our responsible gaming policy.
• Customer Support: To respond to your inquiries, resolve disputes, investigate complaints, and provide technical assistance via live chat and email.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable laws, including anti-money laundering regulations, record-keeping requirements, and any lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregate, anonymised usage data to identify areas for platform improvement, optimise game performance, and enhance the overall Member experience.
• Promotional Communications: Where you have given explicit consent, to send you information about jp303 promotions, seasonal offers (such as Ramadhan specials, Idul Fitri bonuses, and Indonesian Independence Day promotions), and new game releases. You may withdraw consent at any time.

jp303 processes your Personal Data on the basis of one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and jp303 — specifically, to operate your account, process transactions, and deliver the gambling and gaming services you have registered to use.
• Legal Obligation: Processing that is required to comply with applicable laws and regulations, including anti-money laundering legislation, age verification requirements, and record-keeping obligations imposed by jp303's international licensing jurisdiction.
• Legitimate Interests: Processing that is necessary for jp303's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

jp303 uses cookies and similar client-side tracking technologies to ensure the Platform functions correctly and to improve your experience. The following categories of cookies are used:

6.1 Essential Cookies

These cookies are strictly necessary for the Platform to operate. They manage your login session, maintain your authenticated state as you navigate between pages, and protect the Platform against cross-site request forgery (CSRF) attacks. Essential cookies cannot be disabled without breaking core Platform functionality.

6.2 Performance & Analytics Cookies

jp303 uses first-party analytics to collect anonymised, aggregated data about how Members use the Platform — including which pages are visited most frequently, average session lengths, and navigation paths. This data is used exclusively to improve Platform design and performance. jp303 does not use Google Analytics or other third-party advertising analytics services.

6.3 Functionality Cookies

These cookies remember your preferences, such as your preferred language display setting, game lobby filters, and notification settings, so that you do not need to reconfigure them each time you visit.

6.4 Managing Cookies

You can control or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging into your jp303 account and using the Platform's core features. Disabling functionality or analytics cookies will not affect your ability to use the Platform but may reduce the personalisation of your experience.

jp303 does not sell, rent, or trade your Personal Data to any third party. Data is shared only in the limited circumstances described below, and always subject to contractual data protection obligations or legal requirements.

• Payment Processors: To process deposits and withdrawals, jp303 shares transaction-relevant data — such as your name, account reference number, and transaction amount — with the relevant bank or e-wallet operator (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja). Each payment processor handles this data subject to their own privacy policy and applicable financial regulation.
• Identity Verification Providers: To fulfil KYC obligations, jp303 may share your identity document images and personal details with a third-party identity verification service. Such providers are engaged under strict data processing agreements and are not permitted to use your data for any purpose other than identity verification on jp303's behalf.
• Game Providers: Gameplay data (game session identifiers, bet amounts, game outcomes) is shared with jp303's third-party game suppliers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — to the extent necessary to deliver and settle the games you play. These providers operate under their own data protection frameworks and jp303's licensing agreements with them.
• Regulatory & Law Enforcement Authorities: jp303 may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by law, court order, or regulatory directive. jp303 will notify affected Members of such disclosures where legally permitted to do so.
• Professional Advisors: jp303 may share data with legal counsel, auditors, and compliance consultants under strict confidentiality obligations, to the extent necessary to obtain professional advice or to defend legal claims.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of jp303's assets, your Personal Data may be transferred to the acquiring entity. jp303 will notify affected Members in advance of any such transfer and ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy.

jp303 operates from servers located in jurisdictions outside Indonesia. As a result, your Personal Data may be transferred to, stored in, and processed in countries other than Indonesia. jp303 takes reasonable steps to ensure that such transfers are conducted in accordance with applicable data protection principles, including:

• Engaging only with Data Processors that have adopted internationally recognised data security standards (such as ISO 27001 certification or equivalent).
• Including standard contractual data protection clauses in agreements with all third-party processors located in jurisdictions that may not have equivalent data protection laws to those of your home jurisdiction.
• Applying the same security standards and data minimisation principles to data held on overseas servers as to data held locally.

By using the jp303 Platform, you acknowledge and consent to the transfer of your Personal Data to countries outside Indonesia for the purposes described in this Privacy Policy.

jp303 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All communications between your browser or device and jp303 servers are encrypted using industry-standard TLS 1.2 or higher. The padlock icon in your browser's address bar confirms that an encrypted connection is active.
• Password Hashing: Passwords are processed using a strong, salted one-way hashing algorithm before storage. jp303 employees cannot view your password in plaintext under any circumstance.
• Access Controls: Access to Personal Data within jp303 is strictly role-based. Staff members are granted access only to the data required to perform their specific job functions. All internal data access is logged and audited.
• Two-Factor Authentication (2FA): jp303 strongly encourages all Members to enable 2FA on their account. 2FA is mandated for all internal staff with access to Member data.
• Intrusion Detection & Monitoring: jp303's infrastructure is monitored around the clock for anomalous activity, attempted breaches, and denial-of-service attacks. Automated alerting systems notify the security team of suspicious events in real time.
• Data Breach Response: In the event of a confirmed personal data breach affecting Member data, jp303 will notify affected Members and, where required, the relevant regulatory authority, within the timeframes required by applicable law and no later than seventy-two (72) hours of discovery.

jp303 retains Personal Data for no longer than is necessary for the purposes described in this Privacy Policy, or as required by applicable law. The specific retention periods for key data categories are outlined below:

Upon expiry of the applicable retention period, Personal Data is either securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Depending on the laws applicable in your jurisdiction, you may have some or all of the following rights with respect to your Personal Data held by jp303. To exercise any of these rights, please contact jp303 at [email protected] with the subject line "Privacy Rights Request". jp303 will respond within thirty (30) days of receiving a verified request.

• Right of Access: You have the right to request a copy of all Personal Data jp303 holds about you, along with information about how it is being processed and on what legal basis.
• Right to Rectification: If any Personal Data jp303 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that jp303 delete your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and there is no other legal basis for processing. This right is subject to jp303's legal obligations to retain certain records (see Section 10).
• Right to Restriction of Processing: You may request that jp303 restrict the processing of your data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and jp303 is verifying whether its legitimate interests override your objection.
• Right to Data Portability: Where processing is carried out on the basis of your consent or a contract with you, and is performed by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to processing of your Personal Data carried out on the basis of legitimate interests, including profiling for fraud detection purposes. jp303 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

jp303 employs age-verification checks at registration and during KYC processing to ensure that minors are not able to access the Platform. If jp303 discovers or has reason to believe that an account has been registered by, or on behalf of, a person under 21 years of age, the account will be immediately suspended and all associated Personal Data will be securely deleted. Any funds held in the account will be returned to the funding payment method following verification of the rightful account holder's identity.

If you are a parent or guardian and believe your child may have registered a jp303 account, please contact support immediately at [email protected]. jp303 will act on such reports with priority.

The jp303 Platform does not contain links to external third-party websites or services. All navigation within the Platform remains within the jp303 domain. If jp303 ever introduces links to external resources in the future, this Privacy Policy will be updated to address how data may be affected by visiting such external sites. jp303 is not responsible for the privacy practices or content of any third-party website.

jp303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, jp303 will notify Members by posting a prominent notice on the Platform and, where appropriate, by sending a notification to the email address registered to your account.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. Continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should discontinue use of the Platform and contact support to request account closure before the changes take effect.

jp303 recommends that Members review this Privacy Policy periodically — at minimum when you receive a notification of changes — to stay informed about how your Personal Data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or jp303's data practices, please contact our Privacy team using the details below. jp303 is committed to responding to all legitimate privacy inquiries within thirty (30) days.

• Email: [email protected] — use the subject line "Privacy Inquiry" for fastest routing.
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the Platform. Our support team includes Indonesian-speaking agents available during peak WIB (UTC+7) hours.
• Postal Address: Privacy Team, jp303 Operations, International Business Centre (jurisdiction details available on request).

For privacy rights requests specifically (access, rectification, erasure, portability, objection), use the subject line "Privacy Rights Request" when emailing [email protected] and include your registered username and account email address so that jp303 can verify your identity before acting on the request.