Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how jos29 ("We," "Us," "Our") collects, uses, discloses, stores, and protects personal information obtained from users ("You," "Your") of our online gaming platform accessible at https://jos29.cam. This policy applies to all services offered by jos29, including sports betting, live casino games, slot machines, togel (traditional Indonesian lottery), and sabung ayam (cockfighting) streaming services.

By creating an account, accessing our Website, or using any jos29 services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you must immediately discontinue use of jos29 services and contact us to close your account.

jos29 is committed to protecting your privacy and handling your personal information responsibly in accordance with Indonesian data protection laws and international privacy standards. We recognize the trust you place in us when sharing personal information, and we take that responsibility seriously.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a jos29 account or use our services, we collect the following categories of personal information that you voluntarily provide:

• Account Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, residential address (including city, province, postal code), chosen username, and encrypted password.
• Identity Verification Documents (KYC): Government-issued identification (KTP / Indonesian National Identity Card, passport, or driver's license), proof of address documents (utility bills, bank statements), selfie photographs holding identification, and any additional documentation requested to verify your identity or source of funds.
• Financial Information: Bank account details (account number, bank name, account holder name), e-wallet account information (OVO, DANA, GoPay usernames), payment card details (processed by secure third-party payment processors), transaction history, deposit amounts, withdrawal requests, and financial verification documents.
• Communication Data: Content of messages sent through our customer support channels (live chat, email, WhatsApp), feedback surveys, complaints, inquiries, and any other correspondence with jos29 staff.
• Marketing Preferences: Your consent preferences for receiving promotional communications, newsletter subscriptions, and participation in marketing campaigns.

2.2 Information Collected Automatically

When you access and use jos29 services, we automatically collect certain technical and behavioral information through cookies, log files, and similar tracking technologies:

• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, device identifiers, and mobile network information.
• Usage Data: Pages visited, features accessed, time spent on pages, click patterns, navigation paths through our Website, search queries, bet placements, game sessions, login timestamps, and session duration.
• Gaming Activity: Games played, bet amounts and types, win/loss records, bonus claims, promotional participation, loyalty program status, and gaming preferences.
• Geolocation Data: Your approximate geographic location based on IP address to verify residency requirements and comply with licensing restrictions.
• Cookies and Tracking: Session cookies, persistent cookies, analytics cookies, advertising cookies, and web beacons to enhance functionality, personalize experiences, and analyze usage patterns.

2.3 Information from Third-Party Sources

In certain circumstances, we may receive information about you from third-party sources, including:

• Payment processors and financial institutions to verify transaction authenticity and prevent fraud
• Identity verification services to confirm the accuracy of information provided during KYC processes
• Publicly available databases and records to comply with anti-money laundering (AML) obligations
• Affiliate partners who referred you to jos29 (limited to referral codes, not personal information)
• Social media platforms if you choose to connect your account (though jos29 does not currently offer social login)

3. How We Use Your Information

jos29 processes your personal information for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Creating, maintaining, and managing your user account
• Verifying your identity and age to comply with 21+ legal requirements
• Processing deposits, withdrawals, and other financial transactions
• Providing access to sports betting, casino games, togel, and other gaming services
• Tracking gaming activity, calculating winnings, and crediting balances
• Managing bonuses, promotions, and loyalty rewards
• Responding to customer support inquiries and resolving disputes

3.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Preventing underage gambling by verifying age eligibility
• Detecting and preventing fraudulent activities, bonus abuse, and multiple account violations
• Investigating suspected illegal activities or breaches of our Terms & Conditions
• Responding to legal requests from government authorities, law enforcement, or courts
• Maintaining records for audit and regulatory reporting purposes
• Enforcing responsible gaming policies and identifying problem gambling behaviors

3.3 Service Improvement and Personalization

• Analyzing usage patterns to improve Website functionality and user experience
• Personalizing content, game recommendations, and promotional offers based on preferences
• Conducting market research and customer satisfaction surveys
• Testing new features, games, and services before public release
• Optimizing Website performance, loading speeds, and mobile compatibility

3.4 Marketing and Communication

• Sending promotional emails, SMS messages, or push notifications about bonuses, tournaments, and special offers (only with your consent)
• Providing personalized recommendations for games and betting markets
• Announcing new game releases, platform updates, and feature enhancements
• Communicating important account notifications, policy changes, and security alerts

4. Data Sharing and Disclosure

jos29 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist in operating our platform and delivering services. These providers have access to personal information only to perform specific tasks on our behalf and are contractually obligated to protect your data:

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, and other Indonesian financial institutions to process deposits and withdrawals.
• Identity Verification Services: Third-party KYC/AML providers to verify identity documents and screen against fraud databases.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, and other casino game suppliers who host games on our platform.
• Cloud Hosting Services: Secure data centers and cloud infrastructure providers where jos29 data is stored.
• Customer Support Tools: Live chat software, email services, and CRM systems to manage customer inquiries.
• Analytics Providers: Tools to analyze Website traffic, user behavior, and conversion metrics (anonymized where possible).

4.2 Legal Obligations

We may disclose your information when required by Indonesian law, court order, government authority, or regulatory body, including:

• Responding to subpoenas, warrants, or legal process from courts or law enforcement
• Cooperating with financial crime investigations or anti-money laundering audits
• Complying with tax reporting obligations to Indonesian tax authorities
• Protecting jos29's legal rights in disputes or litigation
• Preventing imminent harm to individuals or property

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email or prominent Website notice before your information becomes subject to a different privacy policy.

5. Data Security Measures

jos29 implements comprehensive technical, physical, and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction:

5.1 Encryption Technologies

• 256-bit SSL/TLS Encryption: All data transmitted between your device and jos29 servers is encrypted using industry-standard Secure Socket Layer (SSL) technology.
• Database Encryption: Personal information stored in our databases is encrypted at rest using advanced encryption algorithms.
• Payment Security: Financial transactions are processed through PCI-DSS compliant payment gateways with tokenization to protect card details.

5.2 Access Controls

• Role-based access control (RBAC) limiting employee access to personal data on a need-to-know basis
• Multi-factor authentication (MFA) for administrative access to systems
• Regular access audits and immediate revocation of access for departed employees
• Secure password policies with minimum complexity requirements

5.3 Infrastructure Security

• Firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS)
• Regular security vulnerability scans and penetration testing by third-party security firms
• Distributed Denial of Service (DDoS) protection to maintain platform availability
• Secure data centers with physical access controls, surveillance, and environmental protections
• Regular data backups stored in geographically distributed locations

5.4 Employee Training

All jos29 employees undergo mandatory data protection and security awareness training. Staff with access to personal information sign confidentiality agreements and are subject to disciplinary action for breaches.

5.5 Security Breach Response

In the unlikely event of a data breach affecting your personal information, jos29 will notify affected users within 72 hours of discovering the breach, as required by Indonesian data protection law. Notifications will include the nature of the breach, affected data categories, potential consequences, and remedial actions taken.

6. Data Retention

jos29 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

Data Category	Retention Period	Justification
Account Information	Duration of account + 7 years	Legal and tax compliance requirements
Transaction Records	7 years from transaction date	AML/financial regulations compliance
KYC Documents	7 years from account closure	Identity verification audit trail
Gaming Activity Logs	5 years	Dispute resolution and regulatory reporting
Marketing Consent	Until withdrawal of consent	Respect for user communication preferences
Customer Support Chats	3 years	Quality assurance and dispute documentation
Website Analytics	26 months (anonymized)	Usage pattern analysis for improvements

After the retention period expires, personal data is securely deleted or anonymized beyond recovery. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

7. Your Privacy Rights

Under Indonesian data protection law and international privacy standards, you have the following rights regarding your personal information:

7.1 Right of Access

You may request a copy of all personal information jos29 holds about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

7.2 Right to Rectification

If you believe any personal information we hold is inaccurate or incomplete, you may request correction or update. Most account information can be updated directly through your account dashboard.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information when: (a) it is no longer necessary for the purposes collected; (b) you withdraw consent and no other legal basis exists; (c) you object to processing and no overriding legitimate grounds exist; or (d) data was unlawfully processed. Note that certain information must be retained for legal compliance (e.g., transaction records for 7 years).

7.4 Right to Restrict Processing

You may request that we limit processing of your personal information in certain circumstances, such as while disputing accuracy of data or contesting the lawfulness of processing.

7.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider where technically feasible.

7.6 Right to Object

You may object to processing of your personal information based on legitimate interests or for direct marketing purposes. We will cease processing unless compelling legitimate grounds override your interests.

7.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to requests within 30 days. Identity verification may be required before fulfilling requests to protect against fraudulent data access.

8. Cookies and Tracking Technologies

jos29 uses cookies, web beacons, and similar technologies to enhance user experience, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device when you visit our Website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for Website operation, enabling core functionality like login sessions and secure transactions. Cannot be disabled without affecting service availability.
• Performance Cookies: Collect anonymous information about how visitors use the Website, including most visited pages, error messages, and time spent on pages.
• Functionality Cookies: Remember user preferences (language, currency) and personalization choices to enhance experience.
• Targeting/Advertising Cookies: Track browsing habits to deliver relevant promotional content and measure campaign effectiveness.

8.2 Managing Cookie Preferences

You can control and delete cookies through your browser settings. However, disabling certain cookies may limit Website functionality. Most browsers allow you to: refuse all cookies, accept only first-party cookies, or receive notifications when cookies are sent.

9. International Data Transfers

jos29 primarily processes data within Indonesia. However, some third-party service providers (cloud hosting, analytics) may be located outside Indonesia. When data is transferred internationally, we ensure adequate protection through: (a) contractual clauses requiring equivalent protection standards; (b) verification that the receiving country has adequate data protection laws; or (c) explicit consent for the transfer where required by law.

10. Children's Privacy

jos29 does not knowingly collect personal information from individuals under 21 years of age. Our services are strictly for adults aged 21 and older, in compliance with Indonesian gambling laws. If we become aware that we have inadvertently collected information from a minor, we will immediately delete such data and terminate the associated account. Parents or guardians who believe their child has provided personal information to jos29 should contact us immediately at [email protected].

11. Changes to This Privacy Policy

jos29 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When changes are material, we will notify you via email to your registered address or through a prominent notice on our Website at least 30 days before the new policy takes effect. Continued use of jos29 services after policy changes constitutes acceptance of the revised terms. We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this page indicates when the policy was last revised.

12. Contact Information