At jp168, safeguarding your personal information is a fundamental responsibility — not an afterthought. This Privacy Policy explains precisely what data we collect, why we collect it, how we use and protect it, and what rights you hold as a Member of our platform.
Your Privacy Matters: By registering an account or using any service on jp168, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to request Account closure.
jp168 ("we", "us", "our") operates the online gaming platform accessible at https://jp168.bio and all related subdomains, mobile applications, and digital services (collectively, the "Platform"). As part of delivering a secure, compliant, and personalised gaming experience to our Members — primarily players located across Indonesia, including Jakarta, Surabaya, Medan, Bandung, Bali, and Yogyakarta — jp168 necessarily collects and processes certain categories of personal data.
This Privacy Policy has been drafted in accordance with internationally recognised data protection principles, including those governing purpose limitation, data minimisation, storage limitation, and the rights of data subjects. We are committed to handling your personal information with the care, transparency, and professionalism that our Members deserve.
This Policy applies to all personal data collected in connection with your use of jp168, regardless of the channel through which it was provided — including account registration, deposits and withdrawals via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), participation in promotions, live chat interactions, and browsing activity on the Platform.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, either on its own or in combination with other data held by jp168. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, alteration, archival, and deletion. |
| "Member" / "you" / "your" | Any individual who has registered an Account on the jp168 Platform or who visits and interacts with the Platform without registering. |
| "Account" | The personalised account created by a Member upon completing the jp168 registration process. |
| "Third-Party Processor" | Any external service provider engaged by jp168 to process Personal Data on our behalf, under a contractual obligation to comply with data protection standards equivalent to those described in this Policy. |
| "Cookie" | A small text file placed on your device by the Platform for the purposes of session management, preference storage, analytics, and fraud prevention. |
| "KYC" | Know Your Customer — the identity and age verification process applied to all jp168 Members, particularly in connection with withdrawal processing. |
jp168 collects the following categories of personal data from Members and Platform visitors. We collect only data that is necessary for the stated purposes and do not engage in speculative or excessive data collection.
jp168 collects personal data through the following channels:
No Data Purchased from Brokers: jp168 does not purchase personal data lists from data brokers, lead generation companies, or any other third-party data aggregators. All personal data we hold was collected directly from you or generated through your use of the Platform.
jp168 processes your personal data for the following specific and clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent or being required to do so by applicable law.
| Purpose | Categories of Data Used |
|---|---|
| Account registration and management | Identity and Contact Data |
| Age and identity verification (KYC) | Identity Data, KYC Documents |
| Processing deposits and withdrawals | Financial and Transaction Data |
| Anti-money laundering (AML) compliance | Identity Data, Financial Data, KYC Documents |
| Fraud prevention and platform security | Technical Data, Financial Data, Identity Data |
| Delivering and improving gaming services | Technical Data, Transaction Data |
| Customer support and dispute resolution | Identity Data, Communications Data, Transaction Data |
| Responsible gaming monitoring and intervention | Transaction Data, Responsible Gaming Data |
| Personalised promotional offers and bonuses | Identity Data, Transaction Data (with consent) |
| Legal compliance and regulatory reporting | All categories, as required by applicable law |
jp168 processes your personal data on one or more of the following legal grounds:
jp168 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data with external parties only in the following strictly limited circumstances:
jp168 engages a limited number of specialist service providers who process personal data on our behalf and under our documented instructions. These include:
All Third-Party Processors are contractually bound to process personal data only for the purposes specified by jp168 and to apply data protection standards consistent with this Policy.
jp168 may disclose personal data to government authorities, law enforcement agencies, or financial regulators where we are required to do so by law, court order, or binding regulatory direction. In such cases, jp168 will disclose only the minimum data necessary to satisfy the legal obligation and, where legally permissible, will notify the affected Member of such disclosure.
In the event that jp168 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. jp168 will provide advance notice of any such transfer and ensure that the receiving entity commits to data protection standards at least equivalent to those set out in this Policy.
No Sale of Data: jp168 has never sold and will never sell Member personal data to advertising networks, data brokers, or any third party for commercial exploitation. Your data is used exclusively for the purposes described in this Policy.
jp168 operates as an internationally licensed platform and may store or process your personal data on servers located outside of Indonesia, including in jurisdictions that provide data protection frameworks recognised under international standards. Wherever your data is processed outside Indonesia, jp168 applies contractual safeguards — such as standard data protection clauses — to ensure your information remains subject to a comparable level of protection to that described in this Policy.
By using jp168, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions outside Indonesia. If you have questions about the specific countries involved in the processing of your data, please contact us at [email protected].
jp168 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Duration of Account plus 5 years following closure |
| KYC documents | Duration of Account plus 5 years following closure |
| Financial and transaction records | 7 years from the date of the transaction |
| Responsible gaming records | Duration of Account plus 5 years following closure |
| Customer support communications | 3 years from the date of each interaction |
| Technical and device logs | 13 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn, then 3 years |
When personal data is no longer required, jp168 will securely delete or anonymise it in a manner that prevents reconstruction or re-identification.
jp168 uses cookies and similar client-side tracking technologies to operate the Platform effectively. The following types of cookies are deployed:
Cookie Management: You may configure your browser to block or delete cookies at any time. Note, however, that disabling strictly necessary or fraud prevention cookies will impair your ability to use certain Platform features, including Account login and payment processing. jp168 does not use third-party advertising or retargeting cookies.
As a Member of jp168, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request — [Your Username]". We will acknowledge your request within 48 hours and provide a substantive response within 30 days.
Identity Verification for Rights Requests: To protect against fraudulent data requests, jp168 will verify your identity before fulfilling any data rights request. You may be asked to confirm your registered email address, Account username, and provide a copy of your identification document. jp168 does not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive.
jp168 implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our primary technical and organisational security measures include:
While jp168 applies industry-standard safeguards, no digital platform can guarantee absolute security. You are encouraged to use a strong, unique password for your jp168 Account and to enable any additional security features available within your Account settings. Never share your login credentials with any third party.
jp168 is strictly an adults-only platform. All gaming services, promotional offers, and Account features are available exclusively to individuals who are 21 years of age or older. jp168 does not knowingly collect personal data from individuals under the age of 21.
As part of our KYC onboarding process, all Members are required to verify their age by submitting a valid government-issued identification document. Where jp168 has reasonable grounds to believe that a Member is under the age of 21, the relevant Account will be suspended immediately pending identity and age verification. If the Member is confirmed to be under 21, the Account will be permanently closed, all balances forfeited, and any personal data associated with the Account securely deleted.
If you are a parent or guardian and believe that a minor in your care has created an Account on jp168, please contact us immediately at [email protected] so that we may take prompt action.
jp168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — jp168 will provide at least fourteen (14) days' advance notice by publishing a prominent notice on the Platform and, where practicable, sending a notification to your registered email address.
Your continued use of the jp168 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may request Account closure in accordance with our Terms & Conditions. The most current version of this Privacy Policy is always available at https://jp168.bio/privacy-policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of the data rights described in Section 11, please contact the jp168 Data Protection team through the following channels:
Related Policies: This Privacy Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between you and jp168, and our Responsible Gaming page, which explains the tools available to help you manage your gaming habits. Our FAQ also addresses common questions about account security and data handling.
Six principles that shape how jp168 handles your personal information — every day, on every transaction
Every session on jp168 is protected by TLS 1.3 encryption — the same standard used by BCA and Mandiri's internet banking portals. Your credentials, transaction data, and personal details travel encrypted at all times.
jp168 has never sold Member data to advertisers, data brokers, or marketing agencies — and never will. Your information is used exclusively to operate your account, process payments, and keep the Platform secure.
Access, correct, export, or delete your personal data at any time by contacting our support team. jp168 responds to all data rights requests within 30 days — no fees, no unnecessary friction.
We collect only the data that is strictly necessary for the purposes described in this Policy. jp168 does not build advertising profiles, sell behavioural data, or share your information with third parties for their own gain.
In the unlikely event of a data security incident that affects your personal information, jp168 will notify you promptly — explaining what happened, what data was involved, and exactly what steps we are taking to protect you.
jp168 operates under an internationally recognised gaming licence and applies data protection standards consistent with globally accepted privacy principles. Your data is handled to the same standard whether you're in Jakarta, Surabaya, Bali, or anywhere else in Indonesia.
jp168 keeps your personal information protected so you can focus on what matters — great games, fast withdrawals, and a premium online gaming experience built for Indonesian players.
Adults only (21+). Gambling involves financial risk. Please play responsibly. Visit our Responsible Gaming page for support tools and self-exclusion options.