Privacy Policy

1. Introduction

joc69 is an internationally operated online betting and gaming platform serving English-preference players across Indonesia. In the course of providing our services — which include sports betting (bandar bola — football bookmaking and live betting), live dealer casino games, togel (Indonesia's traditional numbers lottery), slot games, and live sabung ayam (cockfighting) streaming — we necessarily collect and process personal data about our users.

We take our data protection obligations seriously. This Privacy Policy has been drafted to be transparent, comprehensive, and accessible — we want you to understand exactly what we collect, why we collect it, how long we keep it, who we share it with, and what rights you have over your own information.

This policy applies to all users of the joc69 platform, whether accessing via web browser on desktop or mobile devices. It applies to data collected through account registration, gameplay activity, payment processing, customer support interactions, and any other touchpoints between you and joc69.

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data": Any information that identifies or could reasonably be used to identify an individual, including name, national identification number, email address, bank account details, IP address, and device identifiers.
• "Processing": Any operation performed on personal data, including collection, storage, use, transmission, deletion, or any combination thereof.
• "Data Controller": joc69, which determines the purposes and means of processing your personal data.
• "Data Processor": Any third party that processes personal data on behalf of joc69 under a written data processing agreement.
• "Consent": A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC (Know Your Customer)": The identity verification process by which joc69 confirms a user's age, identity, and residency using government-issued identification documents.
• "Cookie": A small data file stored on your device by your web browser when you visit the joc69 platform.

3. Personal Data We Collect

joc69 collects the following categories of personal data, depending on how you interact with our platform:

3.1 Identity & Account Data

• Full legal name (as it appears on your government-issued identification)
• Date of birth (to verify you are at least 21 years of age)
• National identification number (KTP number or passport number)
• Username and encrypted password
• Profile photograph (if submitted for KYC)

3.2 Contact Data

• Email address
• Mobile phone number (including WhatsApp-registered number)
• Residential address in Indonesia (city, province, postal code)

3.3 Financial Data

• Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata)
• E-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction history (deposits, withdrawals, bet settlements)
• Account balance history

3.4 Technical & Usage Data

• IP address and approximate geographic location (city/province level)
• Device type, operating system, and browser version
• Platform session timestamps (login, logout, duration)
• Pages visited, features used, bet history, and game session data
• Referral source (how you arrived at joc69.cam)

3.5 Support & Communications Data

• Transcripts of live chat conversations
• Email correspondence with the joc69 support team
• WhatsApp message records (for support-channel communications)
• Records of disputes, complaints, and their resolutions

4. How We Collect Your Data

joc69 collects personal data through the following channels:

4.1 Direct Provision

You provide data directly when you: register an account, complete the KYC verification process, make a deposit or withdrawal request, contact our customer support team, participate in promotions, or respond to surveys.

4.2 Automated Collection

We automatically collect technical and usage data through server logs, session tracking, and browser cookies when you access and use the joc69 platform. This data is collected passively and does not require any action on your part beyond visiting the site.

4.3 Third-Party Sources

We may receive data about you from the following third parties:

• Payment processors: BCA, BRI, BNI, Mandiri, and e-wallet providers (OVO, DANA, GoPay) confirm transaction statuses and may share limited financial verification data.
• Identity verification services: Third-party KYC providers may cross-reference your submitted documents against official Indonesian government databases.
• Fraud prevention services: Risk scoring and device fingerprinting services that help us detect and prevent fraudulent account activity.
• Game providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other certified studios provide game session logs and RNG audit data.

5. Purposes of Processing & Legal Bases

The table below summarizes how joc69 uses your personal data, the legal basis for each processing activity, and the data categories involved:

6. Data Sharing & Third-Party Disclosure

joc69 does not sell your personal data. We share personal data only in the following circumstances:

6.1 Service Providers (Data Processors)

We engage carefully vetted third-party service providers who process data on our behalf under strict contractual data processing agreements. These include:

• Payment processors and e-wallet platforms (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja)
• KYC and identity verification services
• Cloud hosting and data storage providers
• Fraud detection and risk management services
• Customer support platform providers (live chat, helpdesk software)
• Game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe)

6.2 Legal & Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or regulatory requirement. We will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of joc69's assets, your personal data may be transferred to the acquiring entity. We will notify you via email or a prominent platform notice before your data is transferred and becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your personal data with third parties not listed above if we have obtained your explicit, informed consent to do so. You may withdraw such consent at any time by contacting our support team.

7. Data Retention

joc69 retains personal data for as long as is necessary to fulfill the purposes described in this Privacy Policy, subject to the following specific retention periods:

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymized so that it can no longer be linked to you as an individual.

8. Security Measures

joc69 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

8.1 Technical Safeguards

• Transport Layer Security (TLS 1.3): All data transmitted between your browser and joc69 servers is encrypted using TLS 1.3 with 256-bit cipher suites.
• AES-256 Encryption at Rest: Sensitive data stored on joc69 servers — including KYC documents, financial records, and passwords — is encrypted using AES-256.
• Password Hashing: User passwords are stored as bcrypt hashes with a minimum cost factor of 12. joc69 never stores plaintext passwords.
• Two-Factor Authentication (2FA): Available to all users for an additional layer of account security.
• Firewalls & Intrusion Detection: Multi-layer firewall infrastructure and real-time intrusion detection systems monitor all inbound and outbound network traffic.
• DDoS Protection: Enterprise-grade distributed denial-of-service mitigation to maintain platform availability.

8.2 Organizational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Only authorized personnel with a legitimate business requirement may access user data.
• All joc69 employees with access to personal data undergo mandatory data protection training on an annual basis.
• Third-party service providers are contractually obligated to implement equivalent security standards.
• We conduct periodic security audits and vulnerability assessments of our infrastructure.

8.3 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, joc69 will notify affected users without undue delay (within 72 hours of becoming aware of the breach). Notification will be provided via the email address registered to your account, and will include a description of the breach, the categories of data affected, and the steps we are taking to address it.

9. Cookies & Tracking Technologies

joc69 uses cookies and similar tracking technologies to deliver, improve, and secure our platform. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They maintain your login session, remember your preferred language settings, and enable core security features. You cannot opt out of strictly necessary cookies without ceasing to use the platform.

9.2 Performance & Analytics Cookies

We use performance cookies to understand how users interact with joc69 — which pages are most visited, where users encounter errors, and how long sessions typically last. This data is aggregated and anonymized wherever possible. These cookies help us continuously improve the platform experience.

9.3 Functional Cookies

Functional cookies remember your preferences (such as display settings and notification preferences) to provide a more personalized experience on return visits. They do not track your activity across external websites.

9.4 Managing Cookies

Most web browsers allow you to control cookie settings through your browser preferences. You may block or delete cookies at any time. However, please note that disabling certain categories of cookies may limit the functionality of the joc69 platform — for example, blocking session cookies will prevent you from staying logged in.

10. Your Data Rights

As a user of the joc69 platform, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team using the details in Section 14.

10.1 Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, machine-readable format within 30 days of your verified request.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly via your account settings panel, or contact support for assistance with data that cannot be self-edited.

10.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that certain data must be retained for legal compliance reasons (see Section 7) and cannot be deleted upon request during the mandatory retention period.

10.4 Right to Restrict Processing

You have the right to request that joc69 limit the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have contested, or while a legitimate interest assessment is pending.

10.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller.

10.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to the processing of your data for direct marketing purposes, and we will honor such objections immediately.

10.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., for personalized promotions), you may withdraw that consent at any time by updating your communication preferences in the account settings panel or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11. Minors & Age Restrictions

joc69 strictly prohibits use of the platform by individuals under the age of 21. We do not knowingly collect, process, or store personal data belonging to anyone under 21 years of age. If you believe that a minor has created an account on joc69, please contact our support team immediately at [email protected] (plain text — not a clickable link) so that we may investigate and close the account.

During account registration, all users must confirm that they are at least 21 years of age. joc69 may conduct random or triggered age verification checks using KYC document review. Any account found to belong to a person under 21 will be immediately suspended, all balances forfeited, and the matter reported to the appropriate authorities where required by law.

Parents and guardians who are concerned about minors accessing online gambling content are encouraged to install parental control software on shared devices and to review our Responsible Gaming page for additional guidance.

12. International Data Transfers

joc69 is operated internationally, and your personal data may be transferred to and processed in countries outside Indonesia. When such transfers occur, we ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections provided within Indonesia. These safeguards include:

• Standard contractual clauses incorporated into data processing agreements with all international service providers
• Transfer only to jurisdictions that the applicable regulatory authority has recognized as providing an adequate level of data protection
• Binding corporate rules where applicable within our group of companies

By using the joc69 platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

13. Changes to This Privacy Policy

joc69 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page
• Send an email notification to the address registered to your account
• Display a prominent notice on the joc69 platform for a minimum of 30 days following the change

Your continued use of the joc69 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you must discontinue use of the platform and may request account closure and data deletion in accordance with Section 10.3.

14. Contact Us — Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or joc69's data practices, please contact our Data Protection team using the following details:

• Privacy Email: [email protected] (plain text — not a clickable link)
• General Support Email: [email protected] (plain text — not a clickable link)
• WhatsApp Support: +62 811 0000 6969 (plain text — not a clickable link)
• Live Chat: Available 24/7 via the joc69 platform interface
• Response Time: Privacy-related requests are handled within 30 calendar days of receipt

For general account questions, our full customer support team is available 24/7 via live chat and daily from 07:00–24:00 WIB via WhatsApp. For related legal documentation, please also review our Terms & Conditions and Responsible Gaming policy.