Privacy Policy

At jupe66, we understand that privacy and data security are paramount concerns for our users. This Privacy Policy explains in detail how we collect, use, store, share, and protect your personal information when you access and use our Platform. We are committed to transparency in our data practices and compliance with applicable data protection laws including Indonesian privacy regulations and international standards such as the General Data Protection Regulation (GDPR) principles where relevant. By registering an account or using jupe66 services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

When you register for a jupe66 account or use our services, you voluntarily provide us with personal information including:

• Account Registration Information: Full legal name, date of birth, gender, email address, phone number (Indonesian mobile number), residential address, and chosen username and password.
• Identity Verification (KYC) Information: Government-issued identification documents (Indonesian National Identity Card / KTP, passport, or driver's license), proof of address documents (utility bills, bank statements), selfie photographs for identity confirmation, and payment method verification documents.
• Payment Information: Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Danamon, OCBC NISP, and BSI; e-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja; credit or debit card details (card number, expiration date, CVV—processed through PCI-DSS compliant payment processors).
• Communication Data: Any information you provide when contacting customer support, including live chat transcripts, email correspondence, WhatsApp messages, feedback submissions, and complaint details.
• Marketing Preferences: Your communication preferences for receiving promotional offers, newsletters, and marketing materials via email, SMS, or push notifications.

1.2 Information Collected Automatically

When you access and use the jupe66 Platform, we automatically collect certain technical and usage information:

• Device Information: Device type (smartphone, tablet, desktop), operating system and version (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers (IMEI, Android Advertising ID, Apple IDFA where permitted), and device language settings.
• Connection Information: IP address, internet service provider, connection type (mobile data, WiFi), approximate geographic location based on IP address (city/region level, not precise GPS coordinates), and time zone.
• Usage Data: Pages visited, features accessed, games played, bets placed, deposit and withdrawal history, session duration, click patterns, navigation paths through the Platform, and timestamps of all activities.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, and similar technologies to remember your preferences, authenticate your sessions, analyze Platform usage patterns, and deliver personalized content. See Section 8 for detailed cookie information.

1.3 Information from Third-Party Sources

We may receive information about you from third parties including:

• Payment Processors: Transaction confirmation data, payment method verification results, and fraud screening information from Indonesian banks, e-wallet providers, and international payment gateways.
• Identity Verification Providers: Results of identity checks, sanctions screening, and politically exposed person (PEP) screening from third-party KYC service providers.
• Marketing Partners: Anonymized marketing attribution data showing which advertising campaigns referred you to jupe66 (without revealing your personal identity).
• Social Media Platforms: If you choose to register or log in using social media accounts (Facebook, Google), we receive basic profile information you authorize us to access, such as name, email address, and profile picture.

2. How We Use Your Information

jupe66 uses your personal information for the following legitimate business purposes:

2.1 Account Management and Service Delivery

• Create, maintain, and authenticate your user account.
• Process deposits, withdrawals, and financial transactions in Indonesian Rupiah (IDR).
• Enable you to place bets on sports events including BRI Liga 1, English Premier League, La Liga, Champions League, and other competitions; play casino games, slots, and other gaming products; and access all Platform features.
• Maintain accurate transaction records and account balances.
• Provide customer support via live chat, email, WhatsApp, and phone.
• Send transactional notifications including deposit confirmations, withdrawal status updates, bet settlement notifications, and account security alerts.

2.2 Legal Compliance and Security

• Verify your identity and age (minimum 21 years) to comply with Indonesian gambling age restrictions and prevent underage gambling.
• Conduct Know Your Customer (KYC) checks as required by anti-money laundering (AML) regulations and international financial crime prevention standards.
• Monitor for suspicious activity, fraud, collusion, arbitrage betting, bonus abuse, and other violations of our Terms and Conditions.
• Detect and prevent unauthorized account access, hacking attempts, and cybersecurity threats.
• Comply with legal obligations including court orders, law enforcement requests, regulatory reporting requirements, and tax obligations.
• Enforce our Terms and Conditions, resolve disputes, and protect jupe66's legal rights.

2.3 Platform Improvement and Analytics

• Analyze user behavior, betting patterns, and game preferences to improve Platform functionality and user experience.
• Identify technical issues, bugs, and performance problems requiring fixes.
• Develop new features, games, and services based on user demand and feedback.
• Optimize Platform speed, stability, and mobile responsiveness.
• Conduct A/B testing of different Platform layouts, features, and promotional offers to determine user preferences.

2.4 Marketing and Personalization

• Send promotional offers, bonuses, free bets, and special event announcements via email, SMS, and push notifications (only if you have consented to marketing communications).
• Personalize your Platform experience by displaying games, betting markets, and offers aligned with your interests and play history.
• Display targeted advertising on third-party websites and social media platforms (using anonymized data and advertising identifiers, not personally identifiable information).
• Conduct customer satisfaction surveys and request feedback on your jupe66 experience.

2.5 Responsible Gaming

• Monitor your gambling behavior for patterns indicative of problem gambling.
• Enforce deposit limits, loss limits, session time limits, and self-exclusion settings you have configured.
• Provide reality check reminders displaying your play duration and win/loss amounts.
• Contact you if our responsible gaming algorithms detect potentially harmful gambling patterns, offering support resources and self-exclusion options.

3. How We Share Your Information

jupe66 does not sell your personal information to third parties. However, we may share your information in the following circumstances:

3.1 Service Providers and Business Partners

We share necessary information with trusted third-party service providers who perform functions on our behalf:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Danamon, OCBC NISP, BSI), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and international payment gateways to process deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party services that verify your identity documents, conduct sanctions screening, and check against politically exposed person (PEP) lists.
• Game Providers: We share minimal information (user ID, bet amounts, game results) with game studios like Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and PG Soft to facilitate gameplay and ensure fair outcomes.
• Cloud Hosting and IT Infrastructure: Providers of server hosting, database management, data storage, content delivery networks (CDNs), and cybersecurity services.
• Customer Support Tools: Platforms for live chat, email ticketing, and customer relationship management (CRM) that help us deliver support services.
• Marketing and Analytics Platforms: Email marketing services, SMS providers, push notification platforms, and web analytics tools (Google Analytics, anonymized and with IP masking enabled).

All service providers are contractually required to maintain strict data confidentiality, use data only for specified purposes, implement appropriate security measures, and comply with data protection regulations.

3.2 Legal and Regulatory Requirements

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with court orders, subpoenas, warrants, or other legal processes.
• Respond to requests from law enforcement agencies, tax authorities, or regulatory bodies.
• Enforce our Terms and Conditions and other agreements.
• Protect the rights, property, or safety of jupe66, our users, or the public.
• Prevent, detect, or investigate fraud, security breaches, money laundering, or other illegal activities.

3.3 Business Transfers

In the event of a merger, acquisition, asset sale, corporate restructuring, or bankruptcy involving jupe66, your personal information may be transferred to the acquiring or successor entity. You will be notified via email and Platform notice of any such transfer and any changes to this Privacy Policy resulting from it.

3.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot be used to identify you personally with third parties for industry analysis, market research, business intelligence, and similar purposes. This data does not contain personally identifiable information.

4. Data Security Measures

jupe66 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

4.1 Technical Security

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols, ensuring secure communication.
• Data Encryption at Rest: Personal information stored in our databases is encrypted using AES-256 encryption algorithms.
• Firewalls and Intrusion Detection: Multi-layer firewall protection and real-time intrusion detection systems monitor for unauthorized access attempts and cyberattacks.
• Secure Data Centers: Our servers are hosted in secure, climate-controlled data centers with 24/7 physical security, biometric access controls, and redundant power and network connections.
• Regular Security Audits: Independent third-party security firms conduct annual penetration testing and vulnerability assessments.
• PCI-DSS Compliance: Our payment processing infrastructure meets Payment Card Industry Data Security Standard (PCI-DSS) Level 1 requirements, the highest certification in the payment industry.

4.2 Organizational Security

• Access Controls: Personal data is accessible only to authorized employees and contractors who require it to perform their job functions. Access is granted on a need-to-know basis and is logged for audit purposes.
• Employee Training: All staff receive regular training on data protection, privacy regulations, phishing prevention, and security best practices.
• Confidentiality Agreements: Employees and contractors sign legally binding confidentiality agreements prohibiting unauthorized disclosure of user information.
• Incident Response Plan: We maintain a documented data breach response plan to quickly contain, investigate, and remediate any security incidents, with mandatory breach notification procedures.

4.3 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

• Use a strong, unique password (minimum 8 characters, combining uppercase, lowercase, numbers, and symbols).
• Enable two-factor authentication (2FA) for an additional security layer.
• Never share your password or account credentials with anyone.
• Log out of your account when using shared or public devices.
• Be cautious of phishing emails or messages claiming to be from jupe66—we will never ask for your password via email.
• Keep your registered email account and phone number secure.
• Immediately notify our Customer Support team if you suspect unauthorized account access.

5. Data Retention

jupe66 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

5.1 Retention Periods

Data Type	Retention Period	Reason for Retention
Account Information	Duration of account + 7 years	Legal compliance, tax records, dispute resolution
Transaction Records	7 years from transaction date	Financial regulations, AML compliance, audits
KYC Documents	7 years after account closure	Regulatory requirements, fraud prevention
Betting History	7 years from bet placement	Dispute resolution, regulatory reporting, audits
Communication Logs	3 years from communication date	Customer service quality, dispute resolution
Marketing Data	Until consent withdrawal + 30 days	Compliance with marketing preferences
Website Analytics	26 months (Google Analytics default)	Platform optimization, usage analysis

5.2 Account Closure and Data Deletion

When you close your jupe66 account, we will deactivate it and cease processing your data for operational purposes. However, we are legally required to retain certain records (transaction history, KYC documents) for seven (7) years to comply with Indonesian financial regulations and anti-money laundering laws. After the mandatory retention period expires, your data will be securely deleted or anonymized so it can no longer identify you.

6. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To exercise this right, contact our Data Protection Officer at [email protected] with the subject line "Data Access Request." We will provide the requested information within thirty (30) days in a commonly used electronic format.

6.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings, or contact Customer Support for assistance with changes requiring verification (name, date of birth, address).

6.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent where consent was the legal basis for processing. However, we may retain data when legally required (see Section 5.1 retention periods) or when necessary for legal claims defense.

6.4 Right to Restrict Processing

You may request that we limit how we use your personal information in certain situations, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will store the data but not actively use it.

6.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible.

6.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes at any time. You can opt out of marketing communications by clicking the "unsubscribe" link in emails, adjusting preferences in your account settings, or contacting Customer Support.

6.7 Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

6.8 Right to Lodge a Complaint

If you believe we have violated your privacy rights or applicable data protection laws, you have the right to lodge a complaint with the relevant data protection supervisory authority in Indonesia or your country of residence.

7. International Data Transfers

jupe66 operates internationally, and your personal information may be transferred to, stored in, and processed in countries outside Indonesia where our servers, service providers, or business partners are located. These countries may have data protection laws that differ from Indonesian law. When transferring data internationally, we implement appropriate safeguards to protect your information, including:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities.
• Ensuring service providers maintain adequate data protection measures meeting international standards.
• Conducting data protection impact assessments for high-risk transfers.
• Encrypting data in transit and at rest when crossing international borders.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They help websites remember your preferences, authenticate your sessions, and analyze how you use the site. jupe66 uses cookies and similar technologies (web beacons, pixel tags, local storage) to enhance your experience and improve our services.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. They enable account login, session authentication, security features, and load balancing. You cannot opt out of these cookies as they are required for Platform operation.
• Functional Cookies: Remember your preferences (language, currency, display settings) and provide enhanced features. Disabling these cookies may limit certain Platform functionality.
• Performance and Analytics Cookies: Collect anonymized information about how users navigate the Platform, which pages are visited most, error messages encountered, and performance metrics. We use this data to identify and fix technical issues and optimize user experience.
• Marketing and Advertising Cookies: Track your browsing behavior across websites to deliver targeted advertisements and measure campaign effectiveness. These cookies are used only with your consent and can be disabled through cookie preferences.

8.3 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling cookies may affect Platform functionality and prevent you from accessing certain features. You can also use the cookie preference tool available in your account settings to manage non-essential cookies.

9. Third-Party Links and Services

The jupe66 Platform may contain links to third-party websites, social media platforms, or services that are not owned or controlled by jupe66. This Privacy Policy applies only to information collected by jupe66. We are not responsible for the privacy practices or content of third-party sites. We encourage you to read the privacy policies of any third-party services before providing them with personal information.

10. Children's Privacy

jupe66 services are intended exclusively for individuals aged 21 years or older, in compliance with Indonesian legal requirements for online gambling. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected information from a minor, we will immediately delete such information and terminate the associated account. If you believe a minor has provided us with personal information, please contact us immediately at [email protected] so we can take appropriate action.

11. Changes to This Privacy Policy

jupe66 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. When we make material changes, we will notify you by email, Platform notification, or prominent notice on our website at least fourteen (14) days before the changes take effect. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of jupe66 services after the effective date of an updated Privacy Policy constitutes acceptance of the changes.

12. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact our Data Protection Officer: