Privacy Policy

For the purposes of this Privacy Policy, the following definitions apply unless the context otherwise requires:

• "js007", "we", "us", or "our" refers to the js007 platform and its operating entity, accessible at https://js007.bio.
• "Platform" means the js007 website, mobile-optimised interface, and all associated services, products, and features available to registered members.
• "Member" or "you" means any individual who has registered for an account on the js007 Platform or who accesses the Platform as a visitor.
• "Personal Data" means any information relating to an identified or identifiable natural person — including name, date of birth, national identity number, contact details, payment information, and behavioural data — as may be collected by js007 in the ordinary course of operating the Platform.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, js007.
• "Third-Party Service Provider" means any external company or individual engaged by js007 to assist in delivering platform services, including payment processors, game studio providers, and IT infrastructure suppliers.
• "KYC" means Know Your Customer — the identity verification procedures required by js007 to confirm a member's identity and eligibility to use the Platform.
• "Cookies" means small text files placed on your device by the js007 Platform for the purposes described in Section 7 of this Policy.

js007 acts as the Data Controller in respect of all Personal Data collected from members and visitors of the Platform. As Data Controller, js007 is responsible for determining the purposes and means by which your Personal Data is processed and for ensuring that such processing is carried out lawfully, fairly, and transparently.

For all privacy-related enquiries, data access requests, or complaints, you may contact the js007 Data Protection team through the following channels:

• Live Chat: Available on the js007 Platform 24 hours a day, 7 days a week.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line of your message.
• WhatsApp: +62 811 007 0077 (plain text — not a clickable link).

js007 aims to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 30 calendar days of receipt. Where requests are particularly complex or numerous, we will notify you of any extension to this timeframe.

js007 collects the following categories of Personal Data in the course of operating the Platform and delivering services to members:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (to verify that you meet the 21+ age requirement).
• Gender (optional, collected during registration for personalisation purposes).
• Indonesian national identity card number (KTP number) or passport number, collected as part of KYC verification.
• Residential address in Indonesia, including city (e.g., Jakarta, Surabaya, Bandung, Yogyakarta, Bali, Medan) and postal code.
• Chosen username and hashed account password.

3.2 Contact Data

• Primary email address associated with your account.
• Indonesian mobile phone number (used for account verification and, where opted-in, promotional communications).
• WhatsApp number, if provided separately.

3.3 Financial & Transaction Data

• Bank account details used for deposits and withdrawals — specifically the bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), account holder name, and account number.
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja accounts registered in your name.
• Deposit and withdrawal transaction histories, including amounts in Indonesian Rupiah (IDR), timestamps, and transaction reference numbers.
• Bet and wager histories across all js007 product categories.

3.4 Technical & Device Data

• IP address at the time of registration and at each subsequent login.
• Device type, operating system, and browser version.
• Unique device identifiers where applicable.
• Time zone setting (typically WIB, UTC+7, for members based in West Indonesia).

3.5 Behavioural & Usage Data

• Pages visited within the Platform, session duration, and navigation paths.
• Games played, bet types placed (including togel (Indonesia's traditional numbers lottery), mix parlay (accumulator betting), sportsbook, live casino, and slots), and product preferences.
• Responsible gaming tool usage, including deposit limits set and self-exclusion requests.

3.6 Communications Data

• Records of all live chat interactions and email correspondence with the js007 support team.
• Complaint and dispute records.
• Survey responses and feedback submissions, where voluntarily provided.

js007 collects Personal Data through the following means:

• Directly from you: When you register for an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact our support team, respond to a survey, or otherwise interact with the Platform.
• Automatically: Through cookies, web beacons, server logs, and similar tracking technologies when you browse the Platform. See Section 7 for full details of our cookie practices.
• From Third Parties: From identity verification service providers engaged to assist with KYC compliance; from payment processors in connection with deposit and withdrawal transactions; and from game studio providers (such as Pragmatic Play, Evolution Gaming, and Pocket Games Soft) where game-level data is aggregated for account management purposes.
• From Publicly Available Sources: Where permitted, js007 may supplement member data with information obtained from publicly available sources (e.g., public records) for the purpose of identity verification or fraud detection.

js007 processes your Personal Data only where a lawful basis for doing so exists. The table below summarises the primary purposes for which your data is processed and the corresponding legal basis for each:

Where js007 relies on consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact the js007 support team or adjust your communication preferences in your account settings.

Where js007 relies on legitimate interests as the legal basis, we have assessed that those interests are not overridden by your rights and interests as a data subject, taking into account the reasonable expectations of members using an online betting platform.

js007 does not sell your Personal Data to any third party. We may, however, share your data with the following categories of recipients where strictly necessary:

• Payment Service Providers: Banks and e-wallet operators (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja) solely for the purpose of processing your deposits and withdrawals. These providers receive only the minimum data necessary to execute the transaction.
• Identity Verification Providers: Third-party KYC service providers engaged to assist in verifying the identity of js007 members. These providers are bound by strict confidentiality obligations and data processing agreements.
• Game Studio Providers: Licensed game suppliers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session data required to deliver their games within the js007 platform. Game providers do not receive your financial or contact data.
• IT Infrastructure & Cloud Providers: Hosting, data storage, security, and analytics providers who process data on js007's behalf under strict data processing agreements and are prohibited from using the data for any other purpose.
• Legal and Regulatory Authorities: js007 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, by a lawful court order, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. js007 will not provide prior notice of such disclosure where doing so would be unlawful or would compromise an investigation.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of the js007 business, your Personal Data may be transferred to the acquiring entity, provided that the acquiring entity agrees to be bound by privacy standards no less protective than those set out in this Policy.

js007 uses cookies and similar tracking technologies to operate and improve the Platform experience. The following categories of cookies are used:

You may manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to refuse, delete, or selectively accept cookies. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or accessing your account.

js007 does not use cookies to serve third-party advertising on behalf of external brands, nor does it share cookie data with advertising networks.

js007 retains your Personal Data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or for as long as is required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your membership and for a minimum of five (5) years following the permanent closure of your account, to comply with anti-money laundering record-keeping requirements.
• Transaction Records (Deposits & Withdrawals): Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following the closure of your account. In cases where a suspicious activity report has been filed, documents may be retained for a longer period as required by law.
• Customer Support Communications: Retained for a minimum of three (3) years from the date of the interaction, to support dispute resolution and quality assurance.
• Marketing Preferences & Consent Records: Retained for the duration of your membership plus three (3) years, to demonstrate compliance with consent requirements.
• Technical & Device Data (Server Logs): Retained for a maximum of twelve (12) months unless required for an ongoing investigation.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised. Anonymised data — which can no longer be attributed to any identifiable individual — may be retained indefinitely for statistical and analytical purposes.

As a member of the js007 Platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact the js007 support team via live chat or at [email protected] with the subject line "Privacy Rights Request":

The js007 Platform is strictly intended for adults aged 21 years and over. js007 does not knowingly collect, process, or retain Personal Data from any individual under the age of 21.

During the registration process, all applicants are required to confirm that they are aged 21 or older. js007 reserves the right to request proof of age (via KYC documentation) at any point during a membership. Any account found to belong to a person under the age of 21 will be suspended immediately, all associated balances will be frozen pending investigation, and any relevant Personal Data will be deleted in accordance with applicable law.

If you believe that a minor has registered for or is using a js007 account, please notify us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and take appropriate action without undue delay.

js007 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and the js007 Platform is protected by 256-bit SSL/TLS encryption. Any attempt to intercept data in transit will result in unreadable ciphertext.
• Encryption at Rest: Sensitive data stored on js007 servers — including hashed passwords and financial account details — is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to member Personal Data within js007's internal systems is restricted on a strict need-to-know basis. All staff with access to Personal Data undergo background screening and are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): js007 offers 2FA for all member accounts and strongly recommends its use. 2FA significantly reduces the risk of unauthorised account access in the event that login credentials are compromised.
• Intrusion Detection & Monitoring: The Platform is monitored continuously for unusual activity patterns, attempted breaches, and suspicious login behaviour. Automated alerts are triggered in real time for investigation.
• Regular Security Audits: js007 conducts periodic security audits and vulnerability assessments of its systems and third-party integrations to identify and remediate potential weaknesses proactively.
• Incident Response Plan: In the event of a confirmed data breach affecting member Personal Data, js007 will notify affected members and relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable data protection obligations.

While js007 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure — please review the account security guidance in the js007 Terms & Conditions, available at js007.bio/terms-conditions.

js007's primary data processing infrastructure is located in secure data centres serving the Asia-Pacific region. In the course of delivering platform services , your Personal Data may be transferred to and processed in jurisdictions outside Indonesia — for example, where third-party service providers (such as game studio providers including Pragmatic Play, Evolution Gaming, and Pocket Games Soft, or cloud infrastructure partners) operate servers in other countries.

Where such international transfers occur, js007 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that described in this Privacy Policy. These safeguards include:

• Contractual clauses requiring all recipients to process Personal Data in accordance with standards no less protective than those applied by js007.
• Data processing agreements with all Third-Party Service Providers that include binding obligations on data security, confidentiality, and permissible use.
• Transfer only to jurisdictions or organisations that maintain adequate data protection standards as assessed by js007's compliance function.

By registering for and using the js007 Platform, you acknowledge and consent to the transfer of your Personal Data in the manner described in this section. If you have questions about the specific safeguards applicable to any particular transfer, please contact the js007 Data Protection team at [email protected].

The js007 Platform may, from time to time, contain references to or integrations with third-party services — such as licensed game studio environments provided by Pragmatic Play, Evolution Gaming, or other suppliers — that operate under their own distinct privacy policies. js007 does not control and is not responsible for the privacy practices of these third-party environments.

When you enter a third-party game environment embedded within the js007 Platform, that environment may independently collect technical or session data in accordance with the game provider's own privacy policy. js007 recommends that you review the privacy policies of any third-party services you interact with.

js007 does not include outbound links to external websites unrelated to the delivery of its platform services. Any navigation links on the js007 Platform point exclusively to pages within the js007 domain (js007.bio).

js007 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, applicable law, or regulatory guidance. When material changes are made, js007 will:

• Update the "Effective Date" and "Last Updated" fields at the top of this page.
• Display a prominent notice on the js007 Platform homepage and login page for a period of no less than 14 days following the update.
• Where changes are significant and affect the rights of existing members, send a direct notification to the email address registered to your account.

Your continued use of the js007 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the Platform and may request the closure of your account by contacting our support team.

We encourage all members to review this Privacy Policy periodically to stay informed about how js007 protects their Personal Data. The most current version of this Policy is always available at js007.bio/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or js007's handling of your Personal Data, please do not hesitate to reach out to us through any of the following channels. All privacy-related enquiries are handled by our dedicated Data Protection team:

• Live Chat: Available 24/7 directly on the js007 Platform. This is the fastest way to reach us for time-sensitive privacy requests.
• Email: [email protected] — please include "Privacy Request" or "Data Rights" in your subject line to ensure prompt routing to the appropriate team.
• WhatsApp: +62 811 007 0077 — available during extended support hours for Indonesian members across WIB, WITA, and WIT time zones.

js007 aims to acknowledge all privacy-related enquiries within 5 business days and to resolve them fully within 30 calendar days. For complex requests, we will keep you informed of progress and any extension to this timeframe.