jos78 Privacy Policy

Introduction

Jos78 ("we", "us", "our", "the Platform") operates the online sports betting and casino website accessible at https://jos78.bet. We are committed to protecting the privacy and personal data of every player ("you", "your") who accesses or uses our Platform. This Privacy Policy applies to all personal data collected through the jos78 website, mobile-optimised pages, Live Chat service, email communications, and any other digital touchpoints associated with the jos78 brand.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall relationship between you and jos78. Where this Policy conflicts with the Terms & Conditions on a privacy-specific matter, this Policy shall prevail.

Jos78 processes personal data in accordance with internationally recognised data protection principles, including those enshrined in the General Data Protection Regulation (GDPR) as a baseline standard, as well as applicable Indonesian personal data protection legislation. By registering an Account on jos78 or by continuing to use the Platform after this Policy takes effect, you acknowledge that you have read and understood how we handle your personal data as described herein.

Personal Data We Collect

Jos78 collects the following categories of personal data from players. We collect only what is necessary for the purposes described in Section 4 of this Policy.

How We Collect Your Data

3.1 Directly from You

The majority of personal data jos78 holds about you is provided directly by you during the account registration process, KYC document submission, deposit and withdrawal requests, Live Chat or email support interactions, and responses to promotions or surveys.

3.2 Automatically via Technology

When you visit and interact with the jos78 Platform, we automatically collect technical and behavioural data through cookies, web beacons, server logs , and similar tracking technologies. This includes your IP address, device fingerprint, browser characteristics, pages visited, time spent on each page, and the sequence of actions taken within your session. This data is collected passively and does not require any action on your part beyond accessing the Platform.

3.3 From Third Parties

Jos78 may receive limited personal data about you from trusted third-party sources, including:

• Payment processors and Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja) — to confirm transaction status and verify account ownership.
• Identity verification service providers — to cross-check KYC documents against official databases where permitted by law.
• Fraud prevention and AML screening services — to verify that your identity and financial activity do not appear on sanctions lists or in fraud databases.
• Analytics and attribution partners — to understand how you discovered the jos78 Platform (e.g., via search engine, affiliate, or direct navigation).

Jos78 does not purchase personal data from data brokers or consumer profiling companies. Any third-party data received is used solely for the purposes described in Section 4 and is subject to the same protections as data collected directly from you.

How We Use Your Personal Data

Jos78 uses your personal data for the following specific purposes. We process your data only where we have a valid legal basis to do so, as described in Section 5.

• Account creation and management: Registering your Account, authenticating your identity at login, maintaining your Account profile, and enabling all Platform features available to verified players.
• Identity verification (KYC): Verifying your age (21+), identity, and residential address in Indonesia in accordance with our anti-money laundering (AML) and responsible gaming obligations.
• Transaction processing: Processing deposits and withdrawals via Indonesian local banks and e-wallets, reconciling your Account balance, and maintaining accurate financial records.
• Customer support: Responding to your enquiries and complaints via Live Chat, WhatsApp, and email; maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Responsible gaming: Monitoring your betting and deposit patterns to identify potential problem gambling indicators; administering deposit limits, session reminders, cooling-off periods, and self-exclusion tools at your request or as required by our responsible gaming framework.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, bonus abuse, money laundering, match-fixing, and other prohibited conduct; monitoring login activity and flagging unusual access patterns.
• Legal and regulatory compliance: Maintaining records required by applicable AML regulations, responding to lawful requests from regulatory or law enforcement authorities, and defending or pursuing legal claims.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the design, performance, and content of the Platform, including game selection and payment method availability.
• Marketing communications (opt-in only): Sending you promotional offers, bonus notifications, and news about new products and features — but only where you have given your explicit consent to receive such communications. You may withdraw your consent at any time via your Account settings or by contacting support.
• Personalisation: Tailoring the Platform experience to your preferences, including displaying relevant sports markets (e.g., BRI Liga 1, EPL, badminton) and game recommendations based on your history.

Legal Basis for Processing

For each processing activity described in Section 4, jos78 relies on one of the following legal bases:

• Performance of a contract: Processing necessary to fulfil our obligations to you under the Terms & Conditions — including operating your Account, processing transactions, and providing customer support.
• Compliance with a legal obligation: Processing required to comply with AML regulations, KYC obligations, responsible gaming requirements, and responses to lawful authority requests.
• Legitimate interests: Processing that serves jos78's legitimate business interests — such as fraud detection, platform security, and aggregated analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — applicable exclusively to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

6.1 Service Providers

Jos78 shares personal data with carefully selected third-party service providers who process data on our behalf under strict contractual data processing agreements. These providers include:

• Payment processing infrastructure providers that facilitate transfers between your Indonesian bank account or e-wallet and your jos78 Account balance.
• KYC and identity verification technology providers that automate document authentication and age verification.
• Cloud hosting and data centre operators that store Platform data within secure, access-controlled infrastructure.
• Customer support platform providers that power our Live Chat system.
• Fraud detection and AML screening services that cross-reference player data against sanctions databases.
• Game content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — who may receive the minimum data required to authenticate your game session and return results.

6.2 Legal Disclosures

Jos78 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required by applicable law, a valid court order, or a binding regulatory instruction. We will notify you of such disclosures to the extent permitted by law.

6.3 Business Transfers

In the event that jos78 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such transfer and the privacy terms that will apply post-transfer before the change takes effect.

6.4 No Third-Party Marketing

Jos78 does not share your personal data with third-party advertisers or marketing companies for the purpose of enabling them to send you promotional material. Any marketing communications you receive from jos78 are sent directly by jos78 and only to players who have opted in.

Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device, remember your preferences, maintain your login session, and collect usage analytics. Jos78 uses cookies and similar technologies (including web beacons and local storage) across the Platform.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in, and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking the Platform.
• Functional Cookies: Remember your preferences — such as your default language, preferred sports markets, and responsible gaming settings — so you do not need to re-configure them on each visit.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the Platform — including which pages are visited most frequently, where users drop off, and how long sessions typically last. This data helps us improve the Platform experience.
• Security and Fraud Detection Cookies: Assist our fraud detection systems in identifying anomalous login and betting behaviour by maintaining a consistent device fingerprint across sessions.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, restrict which sites can set cookies, and receive notifications when a new cookie is set. Please note that disabling strictly necessary cookies will impair the functionality of the jos78 Platform and may prevent you from logging in or completing transactions.

Jos78 does not use third-party advertising cookies or retargeting pixels that track your activity across other websites outside of the jos78 domain.

Data Retention

Jos78 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law. The following retention guidelines apply:

• Active Account data: Retained for the duration of your Account's active status plus a minimum of five (5) years after Account closure, in accordance with standard AML record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later, as required by applicable AML and financial regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction for financial compliance and audit purposes.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if the communication relates to an ongoing dispute or regulatory matter.
• Marketing consent records: Retained for the duration of your consent and for three (3) years after consent is withdrawn, to demonstrate compliance with consent requirements.
• Technical and analytics data: Typically retained in anonymised or aggregated form for up to two (2) years. Individual-level technical logs (e.g., IP access logs) are retained for twelve (12) months.

At the end of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods. Anonymised data that can no longer reasonably identify you may be retained indefinitely for statistical and research purposes.

Data Security

Jos78 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• TLS/SSL Encryption: All data transmitted between your device and the jos78 Platform is encrypted using TLS 1.2 or higher, making it unreadable to any third party intercepting the connection.
• Encryption at Rest: Sensitive personal data — including KYC documents, financial records, and authentication credentials — is encrypted in storage using AES-256 encryption.
• Access Controls: Access to systems holding personal data is restricted to jos78 staff and service providers who genuinely need it to perform their functions. Access is controlled by role-based permissions, multi-factor authentication, and regular access reviews.
• Password Security: Player passwords are stored using one-way cryptographic hashing with salting. Jos78 staff cannot view your password in plain text under any circumstances.
• Penetration Testing: The Platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: Jos78 maintains a documented data breach response plan. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

Your Privacy Rights

As a jos78 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team as described in Section 14.

• Right of Access: You have the right to request a copy of all personal data jos78 holds about you, together with information about how it is processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update most Account information directly through your Account profile; for document-level corrections, please contact support.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that this right is subject to overriding legal obligations — for example, we are required to retain AML and KYC records for a minimum of five years and cannot delete them on request during that period.
• Right to Restriction of Processing: You may request that we restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is under dispute, or while a legitimate interests objection is being assessed.
• Right to Data Portability: You have the right to receive personal data you have provided to jos78 in a structured, commonly used, machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where jos78 relies on legitimate interests as its legal basis. Jos78 will assess whether its legitimate interests are overridden by your rights and will cease processing if they are.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by updating your Account preferences or contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Jos78 will respond to all privacy rights requests within 30 calendar days of receiving a verified request. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for the delay within the initial 30-day period.

Children's Privacy

The jos78 Platform is strictly intended for adults aged 21 years and over. Jos78 does not knowingly collect, process, or retain personal data from individuals under the age of 21. The Platform employs age verification checks at the registration stage and again during the KYC process to enforce this restriction.

If jos78 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data, close the associated Account, and return any deposits to the originating payment method. If you are a parent or guardian and believe that your child has registered an Account on jos78, please contact us immediately at support at jos78.bet so that we can investigate and take appropriate action.

International Data Transfers

Jos78 is an internationally operated platform and some of our service providers — including cloud hosting infrastructure, KYC verification services, and game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may process your personal data in jurisdictions outside Indonesia.

Where personal data is transferred internationally, jos78 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required in Indonesia. These safeguards may include:

• Standard contractual clauses (SCCs) incorporated into data processing agreements with service providers.
• Binding corporate rules (BCRs) where the receiving entity is part of a corporate group with approved BCRs.
• Transfers to jurisdictions that have received an adequacy determination from a recognised data protection authority.

Jos78 does not transfer your personal data to jurisdictions that lack adequate data protection frameworks without first implementing the contractual and technical safeguards described above. If you would like further information about the international transfers applicable to your data, please contact our support team as described in Section 14.

Changes to This Privacy Policy

Jos78 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered players by email and/or by displaying a prominent notice on the Platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the jos78 Platform after the effective date of any revised Policy constitutes your acknowledgement of the updated terms. We encourage you to review this Policy periodically to stay informed about how we are protecting your data.

If you do not agree with any material change to this Policy, you have the right to close your Account and request deletion of your personal data as described in Section 10, subject to applicable legal retention obligations.

Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jos78 handles your personal data, please reach out to our support team through any of the following channels:

• Live Chat: Available 24/7 via your jos78 Account dashboard. This is the fastest channel — typical response time is under 3 minutes during WIB peak hours (09:00–22:00 WIB).
• WhatsApp Support: Available daily from 07:00 to 24:00 WIB.
• Email: support at jos78.bet (plain text — not a clickable link). Please include "Privacy Request" in the subject line, along with your Account username and registered email address so we can locate your record promptly. Response time: up to 12 hours.

For formal data subject rights requests (access, erasure, portability, objection), please email us with the subject line "Data Rights Request" and include your full name, Account username, registered email address, and a clear description of the right you wish to exercise. We will acknowledge your request within 3 business days and provide a full response within 30 calendar days.