Privacy Policy

Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

Data Controller

jitu62 acts as the data controller in respect of all Personal Data collected through the Platform. As data controller, jitu62 determines the purposes and means by which your Personal Data is processed. Where jitu62 engages Third-Party Processors — such as payment providers, KYC verification bureaus, or game content suppliers — those parties act as data processors under written agreements that bind them to confidentiality and security obligations consistent with this Policy.

If you have any questions about how your Personal Data is handled, or wish to exercise any of your rights under Section 11, you may contact our Data Protection team at the address given in Section 15.

Personal Data We Collect

jitu62 collects only the categories of Personal Data that are necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories we process are as follows:

3.1 Registration & Account Data

• Full legal name, date of birth, and gender.
• Indonesian residential address (street, city, province, postal code).
• Email address and active mobile phone number.
• Username and hashed (encrypted) account password.

3.2 Identity Verification (KYC) Data

• Scanned or photographed copy of your Indonesian National Identity Card (KTP), Indonesian passport, or Indonesian driving licence (SIM).
• Proof of address documents (e.g., bank statements from BCA, BRI, BNI, Mandiri, CIMB Niaga, or utility bills not older than three months).
• Facial biometric data (selfie/liveness check) where required by our KYC provider to confirm document authenticity. This data is processed solely for verification purposes and is not retained beyond the verification workflow unless required by applicable compliance obligations.

3.3 Financial Data

• Bank account numbers and account holder names for Indonesian bank transfer methods (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, Bank Danamon).
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja (phone number registered to the wallet).
• Deposit amounts, withdrawal amounts, transaction timestamps, and transaction reference numbers. jitu62 does not store full card numbers or CVV codes; payment card data is processed exclusively by our PCI-DSS-compliant payment processors.

3.4 Gaming & Behavioural Data

• Records of all bets placed, game sessions, stake amounts, winnings, and losses.
• Bonus offers claimed, wagering progress, and promotional interactions.
• Session duration, frequency of play, and responsible gaming tool usage (deposit limits, self-exclusion requests, cooling-off periods).

3.5 Technical & Device Data

• IP address, device type, operating system, browser type and version.
• Geolocation data (country and city level) derived from your IP address.
• Referring URLs, pages visited on the Platform, click-path data, and session duration.
• Cookie identifiers and similar tracking technologies as described in Section 8.

3.6 Communications Data

• Content of live chat conversations, email correspondence, and support tickets submitted to jitu62's customer service team.
• Records of promotional communications sent to you and your opt-in/opt-out preferences.

How We Collect Your Data

jitu62 collects Personal Data through the following channels:

Purposes of Processing

jitu62 processes your Personal Data for the following specific purposes:

• Account Management: To create, maintain, and administer your jitu62 Account, including authenticating your identity at login and managing your Account settings.
• Service Delivery: To process deposits and withdrawals in Indonesian Rupiah, to settle bets and game outcomes, and to credit or debit your Account Balance accordingly.
• Identity Verification (KYC): To comply with our internal anti-money laundering (AML) and counter-terrorism financing (CTF) compliance programme, and to confirm that all Players meet the 21-years-of-age minimum requirement.
• Fraud Prevention & Platform Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, match-fixing, and other forms of Prohibited Conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling behaviour, to administer responsible gaming tools (deposit limits, self-exclusion, cooling-off periods), and to proactively reach out to Players who may need support.
• Customer Support: To respond to your enquiries, complaints, and support requests through live chat, email, and other contact channels.
• Marketing & Promotions: To send you promotional offers, seasonal campaigns (including Idul Fitri, Ramadhan, Imlek, and Indonesian Independence Day promotions), and personalised bonus recommendations — where you have opted in to receive such communications.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the design, functionality, and content of the jitu62 Platform.
• Legal & Regulatory Compliance: To retain records as required by applicable law, to respond to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction, and to enforce our Terms & Conditions.

Legal Basis for Processing

jitu62 relies on the following legal bases to process your Personal Data, depending on the specific purpose:

Data Sharing & Disclosure

jitu62 does not sell your Personal Data. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose:

7.1 Third-Party Processors (service providers acting on our behalf)

• Payment Processors: Indonesian bank transfer partners and e-wallet operators (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data required to execute your deposit or withdrawal instruction.
• KYC & Identity Verification Providers: Our KYC bureau partners receive copies of identity documents and facial verification data solely to perform identity checks on jitu62's behalf.
• Game Content Suppliers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session and bet-placement data to operate game rounds and return results to the Platform.
• Analytics Providers: Anonymised or pseudonymised usage data may be shared with analytics platforms to enable Platform performance monitoring and improvement.
• Fraud & Risk Management Vendors: Transaction data and behavioural signals may be shared with fraud-detection service providers to identify and prevent Prohibited Conduct.

7.2 Legal Disclosure

jitu62 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, court order, or binding regulatory direction. In such cases, we will disclose only the minimum data legally required and will, where permitted, notify you of the disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of jitu62's business, Personal Data held at the time of the transaction may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

Cookies & Tracking Technologies

jitu62 uses cookies and similar technologies (including local storage, session storage, and pixel tags) to operate the Platform effectively and to improve your experience. The categories of cookies we use are:

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will impair or prevent your use of the Platform. Please consult your browser's help documentation for instructions on managing cookie preferences.

Data Retention

jitu62 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or compliance obligations. The following indicative retention periods apply:

• Account Data: Retained for the duration of your Account's active status, plus a minimum of five years following Account closure, to satisfy record-keeping and audit obligations.
• KYC Documents: Retained for a minimum of five years from the date of verification, in line with standard AML compliance requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction.
• Gaming History: Retained for a minimum of three years from the date of each game session or bet settlement.
• Customer Support Communications: Retained for a minimum of two years from the date of the final message in each conversation thread.
• Marketing Preferences: Retained until you withdraw consent or for a maximum of three years from your last interaction with a marketing communication, whichever comes first.
• Technical & Analytics Data: Aggregated or pseudonymised analytics data may be retained indefinitely. Raw IP-level logs are deleted after 12 months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Security Measures

jitu62 implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and jitu62's servers is encrypted using TLS 1.2 or higher.
• At-Rest Encryption: Sensitive Personal Data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within jitu62's internal systems is restricted on a strict need-to-know basis. Staff with access to Personal Data are bound by confidentiality obligations and receive regular data-protection training.
• Password Security: Account passwords are stored using one-way cryptographic hashing (bcrypt). jitu62 staff cannot view your password in plain text.
• Intrusion Detection: Our infrastructure includes automated intrusion detection and anomaly monitoring systems that operate around the clock.
• Regular Security Audits: jitu62 conducts periodic penetration testing and vulnerability assessments on its Platform infrastructure.
• Data Breach Response: In the event of a confirmed Personal Data breach that poses a risk to your rights, jitu62 will notify affected Players and relevant authorities in accordance with applicable law, without undue delay.

Your Data Rights

As an individual whose Personal Data is processed by jitu62, you hold the following rights. To exercise any of these rights, please contact us using the details in Section 15:

• Right of Access: You may request a copy of the Personal Data jitu62 holds about you, together with information about how it is being used. We will respond within 30 days of a verified request.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that we correct it. Account holders may update basic profile information directly through their Account dashboard.
• Right to Erasure ("Right to Be Forgotten"): You may request that jitu62 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you believe processing is unlawful. Note that we may be required to retain certain data to fulfil legal obligations (e.g., KYC records, financial transaction logs) and in such cases cannot fulfil an erasure request in full.
• Right to Restriction: You may request that jitu62 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that we provide your Personal Data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing based on jitu62's legitimate interests (including profiling for marketing purposes) at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: If you believe your data rights have been infringed, you have the right to raise a complaint with the relevant supervisory authority in your jurisdiction.

Minors & Age Restrictions

The jitu62 Platform is strictly intended for adults aged 21 and above. jitu62 does not knowingly collect Personal Data from individuals under the age of 21. Account registration is conditional on the applicant confirming that they meet the minimum age requirement.

Where jitu62 identifies, through KYC verification or other means, that Personal Data has been provided by or on behalf of a person under the age of 21, that Account will be immediately suspended, all balances will be held pending investigation, and the relevant Personal Data will be deleted or returned in accordance with applicable law. Any winnings generated will be forfeited and deposits returned to the original payment source.

If you believe a minor may have registered or may be using a jitu62 Account, please report this to [email protected] without delay.

International Data Transfers

jitu62 operates as an internationally licensed gaming platform. Some of our Third-Party Processors — including certain KYC providers, game content suppliers, and analytics platforms — may be located in countries outside Indonesia. Where Personal Data is transferred internationally, jitu62 ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those described in this Policy.
• Transfer only to processors in countries that maintain adequate data protection frameworks as recognised by international standards.
• Strict data minimisation — only the minimum data necessary for the specific service is transferred cross-border.

By using the Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Indonesia as described above. We take all reasonable steps to ensure that such processing is secure and compliant with applicable standards.

Changes to This Privacy Policy

jitu62 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will notify registered Players by email (to the address on file) and by displaying a prominent notice on the Platform, no fewer than seven days before the changes take effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

For historical versions of this Privacy Policy, please contact us at the address given in Section 15.

Contact & Data Rights Requests

For all privacy-related enquiries, data rights requests, or concerns about how jitu62 handles your Personal Data, please use the contact details below. Our Data Protection team is available to assist you seven days a week, including Indonesian public holidays.

When submitting a data rights request, please include your registered username and a clear description of the data right you wish to exercise. We may ask you to verify your identity before processing the request to ensure your data is protected against unauthorised access.