jap77 Privacy Policy

jap77 ("we", "us", or "our") is committed to protecting the privacy and personal data of every individual who accesses, registers for, or uses the jap77 platform at https://jap77.cam (the "Platform"). This Privacy Policy constitutes a binding legal document that describes our data collection practices, the purposes for which personal data is processed, the parties with whom data may be shared, and the rights available to you as a data subject.

This policy applies to all users of the Platform, including registered Account holders, visitors who browse without registering, and individuals who contact our customer support team. It covers data collected through the Platform itself, through email correspondence, through our customer support channels, and through automated technologies such as cookies and server logs.

Where this Privacy Policy references "personal data", we mean any information that identifies or could reasonably be used to identify a natural person, either directly (such as your full name or national identity number) or indirectly (such as your IP address combined with other identifiers). This definition is consistent with internationally recognised data protection standards.

jap77 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes, or health data, except where health-related information is voluntarily provided by a User in connection with a self-exclusion or responsible gaming request.

jap77 collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when completing the Account registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting our customer support team.
• Automated technologies: When you access the Platform, our servers automatically record Technical Data including your IP address, browser type, and pages visited. We also use cookies and similar technologies as described in Section 7 of this policy.
• Third-party payment processors: When you transact via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja, those providers may share transaction confirmation data with jap77 to facilitate deposit and withdrawal processing.
• KYC verification partners: Identity verification data may be cross-referenced against third-party databases operated by our certified KYC partners to confirm the authenticity of documents submitted.
• Game studios and live streaming providers: Gameplay Data is generated in real time by game software provided by studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PGSoft, and Spribe, and is transmitted to jap77 servers for Account record-keeping purposes.

jap77 processes your personal data only for specific, legitimate purposes. We do not process personal data in any manner that is incompatible with those purposes. The primary purposes for which we process personal data are:

• Account management: Creating, maintaining, and administering your jap77 Account, including processing login events, enforcing session security, and managing Account settings.
• Transaction processing: Facilitating deposits and withdrawals in IDR via supported local payment methods, reconciling transaction records, and resolving payment disputes.
• Identity verification (KYC): Verifying that users are who they claim to be, confirming minimum age of 21, and fulfilling anti-money laundering (AML) obligations required by our international gaming licence.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, enforcing player-set deposit limits and session time-outs, and processing self-exclusion requests in accordance with our Responsible Gaming policy.
• Customer support: Responding to enquiries, resolving complaints, and maintaining a record of support interactions for quality assurance purposes.
• Fraud prevention and security: Detecting and preventing unauthorised Account access, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Platform improvement: Analysing aggregate usage data — not individual profiles — to identify technical issues, improve game loading performance, and optimise the user experience across devices commonly used in Indonesia.
• Marketing communications: Sending promotional emails, bonus notifications, and seasonal offers (such as Idul Fitri or Ramadhan promotions) to Users who have opted in to marketing communications. You may withdraw consent at any time.
• Legal and regulatory compliance: Retaining records as required by the conditions of our operating licence, responding to lawful requests from regulatory authorities, and enforcing our Terms & Conditions.

jap77 processes personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing that is required to perform the contract between jap77 and you as a registered Account holder — including Account creation, transaction processing, and KYC verification — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with anti-money laundering regulations, licensing conditions, or lawful requests from competent authorities is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of jap77's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications is carried out on the basis of your explicit, freely given, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jap77 does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. We may disclose personal data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja, to the extent necessary to process deposit and withdrawal transactions.
• KYC and AML service providers: Certified identity verification partners who assist jap77 in fulfilling its Know Your Customer obligations. These partners are contractually bound to process data only for the purposes of verification and AML screening.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PGSoft, and Spribe may receive anonymised or pseudonymised gameplay session data for technical support and game integrity purposes.
• IT infrastructure providers: Cloud hosting, content delivery, and cybersecurity providers engaged by jap77 to operate and protect the Platform. These providers act as data processors under jap77's instructions and are not permitted to use your data for their own purposes.
• Regulatory authorities: Where required by the conditions of our operating licence or by a lawful order from a competent authority, jap77 may disclose Account and transaction records to regulators or law enforcement agencies.
• Professional advisers: Legal counsel, auditors, and compliance consultants, where disclosure is necessary to obtain professional advice or to establish, exercise, or defend legal claims.

jap77 uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform effectively. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences, such as your chosen language display setting and whether you have previously acknowledged our age verification prompt.
• Analytics cookies: Used to collect aggregate, anonymised data about how users navigate the Platform — for example, which game categories are most visited from Jakarta vs. Surabaya, or which device types are most common among Indonesian users. This data is used solely to improve platform performance and is not linked to individual identities.

jap77 does not use behavioural advertising cookies, cross-site tracking pixels, or social media retargeting technologies. You may manage or clear cookies through your browser settings; note that disabling strictly necessary cookies will affect your ability to log in and use the Platform.

jap77 retains personal data only for as long as is necessary for the purposes described in this policy, or as required by law. Our standard retention periods are as follows:

• Account data and KYC documents: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in accordance with our AML and licensing obligations.
• Transaction records: Retained for a minimum of five (5) years following each transaction date.
• Gameplay records: Retained for a minimum of three (3) years following each game session.
• Customer support correspondence: Retained for two (2) years following the resolution of each support case, except where a case remains subject to a formal dispute or legal proceeding.
• Marketing preferences: Retained until you withdraw consent or close your Account, at which point opt-in records are archived for one (1) year to evidence the basis of prior communications.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

jap77 implements a layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• AES-256 encryption for all personal data stored on jap77 servers.
• TLS 1.3 encryption for all data transmitted between your device and the Platform.
• Two-factor authentication (2FA) available for all Account holders and mandatory for all internal staff with access to user data systems.
• Role-based access controls ensuring that personal data is accessible only to staff members who require it to perform their specific job functions.
• Regular third-party penetration testing and vulnerability assessments of the Platform and its supporting infrastructure.
• An incident response plan that includes procedures for detecting, containing, and reporting data breaches, with notification to affected users and relevant authorities where required.
• Contractual data processing agreements with all third-party processors, requiring equivalent security standards.

While jap77 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all threats. You also have a responsibility to protect your Account by using a strong, unique password and enabling two-factor authentication.

As a data subject, you hold the following rights with respect to the personal data that jap77 processes about you. To exercise any of these rights, please contact us at the email address listed in Section 14 of this policy. We will respond to all verified requests within 30 calendar days.

The jap77 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual under 21 — whether through a misrepresentation at registration or through any other means — we will immediately suspend the relevant Account, delete all associated personal data to the extent permitted by our legal obligations, and report the matter to the appropriate authorities where required.

If you are a parent or guardian and believe that your child or a minor in your care has created a jap77 Account, please contact our support team immediately at the email address in Section 14. We will investigate and act promptly. Parents and guardians are encouraged to make use of parental control software to restrict minors' access to online gambling platforms.

The jap77 Platform does not contain links to third-party websites for general browsing or advertising purposes. Any third-party services engaged by jap77 — such as payment processors and KYC providers — are accessed through secure, embedded integrations rather than outbound navigational links. jap77 is not responsible for the privacy practices of any third-party service with which a user independently chooses to interact outside the Platform.

jap77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, updates to our operating licence requirements, or amendments to applicable data protection standards. When material changes are made, we will notify registered Account holders by email and display a prominent notice on the Platform for at least seven (7) days prior to the updated policy taking effect.

The effective date at the top of this policy reflects the date of the most recent revision. We encourage you to review this policy periodically. Your continued use of the Platform following the effective date of any revised policy constitutes your acknowledgement of the updated terms.

The current version of this Privacy Policy is always available at https://jap77.cam/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or need to report a suspected data breach involving your personal data, please contact our Data Protection team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy Request" or "Data Subject Rights" in your subject line so we can route your enquiry to the correct team promptly.
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays
• Response Time: We aim to acknowledge all data-related requests within 5 business days and to resolve them fully within 30 calendar days (WIB)
• Languages: English and Indonesian

For responsible gaming concerns, including deposit limit adjustments, time-out requests, and self-exclusion, please visit our dedicated Responsible Gaming page, which provides self-service tools accessible directly from your Account settings at any time.