Privacy Policy — joz178 Platform

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly, including name, date of birth, national identity number, contact details, financial account information, device identifiers, and IP addresses.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage , retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" means joz178, which determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" means any third party that processes Personal Data on behalf of joz178 under a written data processing agreement, including payment service providers, KYC verification partners, and cloud infrastructure providers.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and document verification process required before a Member's first withdrawal and at any time joz178 deems necessary to comply with its anti-money-laundering obligations.
• "Sensitive Data" means a subset of Personal Data warranting heightened protection, including government-issued identification numbers (e.g., Indonesian KTP numbers), financial account details, and transaction history.
• "Cookie" means a small data file placed on a Member's device by the joz178 platform to support platform functionality, session management, and analytics.

This Policy applies to all Personal Data collected by joz178 in connection with the operation of the joz178 online gaming platform, accessible at joz178.net, and all associated mobile or desktop client applications. It covers data collected from:

• Prospective Members who browse the platform without registering;
• Registered Members who hold an active or suspended joz178 account;
• Former Members whose accounts have been closed, for the duration of any applicable data retention period;
• Individuals who contact joz178 support via email or live chat without necessarily holding an account.

This Policy does not apply to third-party websites or services that may be linked from joz178's platform. joz178 is not responsible for the privacy practices of any third party, and Members should review those parties' own privacy notices independently.

joz178's primary player base consists of Indonesian residents, with particular concentration in major cities including Jakarta, Surabaya, Bandung, Medan, Semarang, Yogyakarta, and Bali. Our data practices are designed with the expectations and regulatory context of these users in mind, while also meeting internationally recognized privacy standards.

joz178 collects the following categories of Personal Data, grouped by function:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• Email address and mobile phone number
• Preferred username and encrypted password
• City and province of residence within Indonesia (e.g., DKI Jakarta, Jawa Barat, Bali)

3.2 KYC & Verification Data

• Copy or photograph of Indonesian National Identity Card (KTP), passport, or driving licence
• Proof of address documentation (bank statement, utility bill, or government correspondence)
• Source of funds documentation where requested for enhanced due diligence
• Facial biometric data where a liveness check is required as part of the KYC process (processed by our third-party KYC provider and not retained by joz178 directly)

3.3 Financial & Transaction Data

• Bank account name, account number, and bank name (BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit and withdrawal amounts, timestamps, and reference numbers
• Transaction history across all products including sports betting, live casino, slots, and togel (Indonesia's traditional numbers lottery) markets

3.4 Gaming Activity Data

• Game sessions, bet amounts, outcomes, and win/loss history
• Sports markets wagered on (including BRI Liga 1, Timnas Indonesia fixtures, EPL, La Liga, Bundesliga, Serie A, and UEFA Champions League)
• Bonus and promotion eligibility, claim history, and wagering progress
• Responsible gaming tool usage (deposit limits set, cooling-off periods applied, self-exclusion requests)

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser or application version
• Session duration, login timestamps, and navigation patterns within the platform
• Cookie identifiers and similar tracking technologies (see Clause 9)

3.6 Communications Data

• Content of support enquiries submitted via email ([email protected]) or live chat
• Feedback, complaints, and dispute submissions
• Marketing communication preferences and opt-in/opt-out history

joz178 collects Personal Data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or respond to a promotion.
• Automatically: through cookies, server logs, device fingerprinting, and platform analytics tools that record your interactions with the joz178 website and applications.
• From third-party service providers: payment processors (local Indonesian banks and e-wallet operators), KYC and identity verification partners, and fraud detection services may share data with us as part of the service they provide on our behalf.
• From publicly available sources: in limited circumstances, joz178 may supplement account data with information from publicly available registers for the purpose of AML compliance and sanctions screening.

joz178 processes Personal Data only where a valid legal basis exists. The table below summarizes our primary processing activities, purposes, and legal bases:

Where processing is based on your Consent (e.g., marketing communications), you may withdraw that consent at any time by adjusting your account preferences or contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

joz178 does not sell, rent, or trade your Personal Data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process data strictly on our behalf and under written data processing agreements. These include:

• KYC and identity verification providers
• Payment gateway operators facilitating transactions with BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and other approved channels
• Cloud hosting and content delivery infrastructure providers
• Fraud detection and cybersecurity service providers
• Game studio providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) to the minimum extent required for game delivery and audit compliance
• Customer support platform providers

6.2 Legal & Regulatory Disclosure

joz178 may disclose Personal Data to law enforcement agencies, regulatory authorities, courts, or other public bodies where required by applicable law, court order, or where disclosure is necessary to protect the rights, property, or safety of joz178, its Members, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of joz178's assets, Member Personal Data may be transferred to the successor entity. Members will be notified of any such transfer and of any material change in data processing practices that results from it, with reasonable advance notice provided prior to the change taking effect.

6.4 With Your Explicit Consent

Outside of the categories above, joz178 will share your Personal Data with third parties only where you have provided explicit, informed Consent to that specific sharing.

joz178 operates as an internationally licensed gaming platform. Some of our Data Processors are located outside of Indonesia, meaning your Personal Data may be transferred to, stored in, or processed in jurisdictions other than your own. In all such cases, joz178 ensures that appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses (SCCs) in agreements with Data Processors in third countries;
• Transfer only to jurisdictions that provide an adequate level of data protection as recognized under applicable international standards;
• Binding data processing agreements that impose data protection obligations equivalent to those applicable to joz178 itself.

Where your data is transferred outside Indonesia, we take all reasonable steps to ensure it receives a standard of protection consistent with Indonesian player expectations and internationally recognized privacy principles.

joz178 retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention periods apply as a general guide:

At the end of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be linked to any identifiable individual. Where anonymized data is retained for analytical purposes, it is no longer considered Personal Data under this Policy.

joz178 uses cookies and similar tracking technologies to provide essential platform functionality, improve user experience, and support our analytics and fraud-prevention capabilities. The following categories of cookies are used on the joz178 platform:

9.1 Strictly Necessary Cookies

These cookies are required for the platform to function and cannot be disabled. They include session authentication tokens, load-balancing cookies, and security cookies that protect against cross-site request forgery. No consent is required for these cookies as they are essential to service delivery.

9.2 Functional Cookies

These cookies remember your preferences (such as preferred language settings and time-zone display) to provide a more personalized experience. They are activated upon your consent and do not track activity outside the joz178 platform.

9.3 Analytics Cookies

joz178 uses first-party analytics tools to measure platform performance and understand how Members interact with the site. Analytics data is aggregated and anonymized where possible. Analytics cookies are activated upon your consent and may be disabled without affecting core platform functionality.

9.4 Managing Cookies

You may manage, disable, or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the platform. Detailed instructions for managing cookies on common browsers (Chrome, Firefox, Safari, Edge) are available through each browser's help documentation.

As a joz178 Member, you hold the following rights in relation to your Personal Data. To exercise any of these rights, submit a written request to [email protected] from the email address associated with your account. joz178 will respond to all verified requests within 30 days.

• Right of Access: You may request a copy of all Personal Data joz178 holds about you, along with information about how it is being processed.
• Right to Rectification: If any Personal Data joz178 holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations — for example, KYC and transaction records must be retained for the periods specified in Clause 8.
• Right to Restriction of Processing: You may request that joz178 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested, or while a legitimate-interest assessment is being reviewed.
• Right to Data Portability: Where processing is based on your consent or contract performance and is carried out by automated means, you may request a machine-readable copy of your Personal Data for transfer to another service provider.
• Right to Object: You may object to processing based on joz178's legitimate interest or for direct marketing purposes. Where you object to direct marketing, your data will no longer be processed for that purpose with immediate effect.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

joz178 will not charge a fee for handling standard data subject requests. Where a request is manifestly unfounded or excessive, joz178 reserves the right to charge a reasonable administrative fee or decline the request, with written reasons provided to the Member.

joz178 implements a layered, defense-in-depth security architecture to protect Member Personal Data against unauthorized access, disclosure, alteration, or destruction. Our technical and organizational security measures include, but are not limited to:

• TLS 1.3 transport-layer encryption on all connections between Members' devices and joz178 servers;
• AES-256 encryption at rest for all Sensitive Data, including KYC documents, financial account identifiers, and transaction records;
• Hashed and salted password storage using a modern cryptographic algorithm — passwords are never stored in plaintext;
• Two-factor authentication (2FA) available to all Members, and mandatory for administrative accounts;
• Role-based access controls (RBAC) limiting staff access to Personal Data strictly to those with a legitimate operational need;
• Automated fraud detection and anomaly monitoring to identify unusual account activity, including suspicious login patterns and abnormal transaction volumes;
• Regular penetration testing and security audits conducted by independent third-party security professionals;
• Incident response plan — in the event of a data breach that poses a risk to Members, joz178 will notify affected Members within 72 hours of becoming aware of the incident, describing the nature of the breach, the data involved, and the steps taken to mitigate harm.

Despite these measures, no system is entirely immune to risk. Members are strongly advised to use a strong, unique password for their joz178 account, to enable 2FA, and to report any suspected unauthorized access immediately to [email protected].

joz178 is strictly an adults-only platform. We do not knowingly collect Personal Data from any individual under the age of 21. Our registration process requires all applicants to confirm they are aged 21 or over, and KYC verification is used to confirm this claim before the first withdrawal is processed.

If joz178 becomes aware that it has inadvertently collected Personal Data from an individual who is under 21 years of age, it will delete that data as promptly as possible and permanently close the associated account. Any deposits made by or on behalf of a minor are subject to return to the originating payment method after deducting any applicable administrative costs.

If you have reason to believe that a minor has registered an account on joz178, please contact us immediately at [email protected]. 21+ only. Play responsibly.

The joz178 platform may display content or references that originate from third-party game studios or payment providers, such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers operate under their own privacy policies, which are independent of this document.

joz178 is not responsible for the data collection, processing, or privacy practices of any third party whose services are accessible through or referenced by the joz178 platform. Members are encouraged to review the privacy notices of any third-party service they interact with, separately from this Policy.

joz178 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a new category of data being collected, a new purpose for processing, or a new category of third-party recipient — joz178 will provide advance notice to all active Members via in-platform notification or email, at least 14 days before the changes take effect.

Where changes are minor or administrative in nature (such as updated contact details or clarifications that do not affect how data is processed), they may take effect immediately upon publication. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Continued use of the joz178 platform following the effective date of any revised Policy constitutes acceptance of the updated terms. Members who do not agree with a material change should cease using the platform and submit an account closure request to [email protected] before the change takes effect. The most current version of this Policy is always available at joz178.net/privacy-policy.

For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints regarding joz178's data processing practices, please contact the joz178 Privacy Team using the details below:

• Email: [email protected] (plain text — not a clickable link; please copy the address manually)
• Subject line: Include "Privacy Request" or "Data Subject Request" for faster routing
• Response time: joz178 aims to acknowledge all privacy requests within 48 hours and to resolve them fully within 30 calendar days
• Support availability: 24/7 across all Indonesian time zones (WIB / WITA / WIT)

Where a complaint cannot be resolved directly with joz178, you may escalate the matter to the data protection authority or dispute resolution body applicable in your jurisdiction. joz178 is committed to cooperating fully with any such investigation.

The English-language version of this Privacy Policy is the authoritative and binding version. Any translations provided for informational purposes shall not be used to interpret or construe this Policy.