jawabet Privacy Policy

This page describes what we collect when you use jawabet and how we keep that data protected. We collect personal information to operate our sportsbook, live-casino, and slot-game services, to process your deposits and withdrawals via QRIS, e-wallet, mobile banking, local payment, and bank transfer, and to comply with Indonesian financial regulations. We do not sell your data to third parties, and we encrypt all sensitive information in transit and at rest.

Our privacy practices are designed around a single principle: your account data belongs to you, and we hold it in trust. We share information with processors—payment gateways, identity-verification services, and hosting providers—only as needed to deliver jawabet's services. Each processor is bound by written data-protection agreements and must handle your information according to Indonesian data-protection standards.

We update this policy periodically as our services evolve. Material changes are notified to your email address on file. Your continued use of jawabet after an update constitutes acceptance of the revised policy.

What We Collect and How We Use It

Registration and Account Data

When you create a jawabet account, we collect your email address, a password (stored hashed, never readable by us), your full name, date of birth, and residential address. We use this information to authenticate your login, communicate account notices, and comply with KYC (Know Your Customer) verification required by Indonesian financial law. We do not share your email with marketing partners—we use it only for account management and security alerts.

KYC Documents and Identity Verification

Before you can deposit or withdraw, we require identity verification. You submit a photograph of a valid government-issued ID (KTP, KITAS, or passport), a recent utility bill or bank statement showing your residential address, and a selfie holding your ID. We store these documents encrypted in a secure database accessible only by our compliance team. We retain KYC documents for seven years per Indonesian financial regulations, then securely delete them. You can request a copy of your stored documents at any time by contacting our support team.

Payment and Transaction Data

When you deposit via QRIS, e-wallet, mobile banking, local payment, or bank transfer, we record the payment method, amount, timestamp, and confirmation number. We do not store your banking credentials or payment app passwords—you authenticate directly with your bank or fintech provider, and we receive only the settlement notification. We use transaction data to track your account balance, audit deposits and withdrawals, detect fraud, and generate statements for your review.

Your complete transaction history—deposits, withdrawals, wagers, and payouts—is stored in your jawabet account and accessible to you at any time. We retain transaction records for seven years per Indonesian financial law, then securely archive them offline.

Game Activity and Betting Records

We log every wager you place on jawabet: Liga 1 matches, live blackjack hands, slot spins, Mobile Legends bets, all of it. We record your stake, the outcome, the timestamp, and your resulting balance. This data serves three purposes: (1) to settle your wagers accurately, (2) to detect unusual betting patterns that may indicate fraud or account compromise, and (3) to provide you with a complete record of your activity for reference and dispute resolution.

Your game data is tied to your account ID, not your personal name or ID number, so anonymized game analytics do not identify you individually. However, your account can be linked back to you if needed for fraud investigation or withdrawal verification.

Technical Data: IP Addresses, Device Information, Cookies

We collect your IP address (the internet address of your device) when you access jawabet via browser or app. We use IP data to detect unauthorized access attempts, prevent account takeovers, and comply with regional restrictions—for example, if our services are not available in your jurisdiction, we may block access from that region's IP range. We also log your device type, browser version, and operating system to troubleshoot technical issues and optimize our platform for different devices.

jawabet uses cookies and similar tracking technologies to maintain your login session, remember your preferences, and measure how users interact with our website. Strictly necessary cookies are always active; optional analytics cookies can be disabled in your browser settings. We do not use cookies to track you across other websites—only within jawabet.

Third-Party Processors

We work with service providers to deliver jawabet's services. These include:

• Payment processors: online payment, e-wallet, mobile banking, local payment, and online payment virtual account partners handle fund transfers. We share only your account ID, deposit amount, and confirmation details—not your full identity documents.
• Identity verification providers: Third-party services verify your KYC documents. We share your ID photograph and address proof with these providers and then delete the copies from their systems per contract.
• Cloud hosting providers: Our servers and databases are hosted by data centers located in Southeast Asia and internationally. Your data may transit or be stored outside Indonesia; we ensure all hosting partners encrypt data and comply with Indonesian data-protection standards.
• Fraud detection and security services: We use automated tools to flag suspicious activity. These services receive anonymized transaction patterns, not your personal details.

Each processor signs a data-processing agreement committing to protect your information and use it only for jawabet's purposes. You can request a list of our current processors by contacting our privacy team.

Your Rights and Our Commitments on jawabet

Your Data Rights

Under Indonesian data-protection law and our privacy commitments, you have the right to:

• Access: Request a copy of all personal data we hold about you. Contact our support team with your account ID; we provide a download within five business days.
• Correction: If your name, address, or other details are wrong in our system, notify us and we will update them immediately.
• Deletion: Request deletion of your account and associated data. We delete your account upon request; however, we retain transaction records for seven years per financial law and cannot delete them early.
• Data portability: Request your data in a machine-readable format (CSV, JSON). We provide this within ten business days.
• Object to processing: Object to certain uses of your data, e.g., marketing communications. We honor objections within five business days.

We at jawabet hold your personal data in trust—not for sale, not for sharing with advertisers, only for operating your account and complying with law.

Data Retention

We retain KYC documents and transaction records for seven years per Indonesian financial regulations, then securely delete them. Account login history is retained for two years for security auditing. Game activity logs are retained as long as your account exists; upon account deletion, game logs are archived offline for seven years. Cookies expire based on their type—session cookies clear when you log out; optional analytics cookies persist for one year unless you clear them manually.

Security Measures

We protect your data using SSL/TLS encryption (all data in transit between your device and our servers is encrypted), AES-256 encryption (sensitive data at rest is encrypted), and encrypted database backups. We restrict data access to jawabet employees and contractors who need it to provide services. All staff sign confidentiality agreements. We conduct regular security audits and respond to suspected breaches within 24 hours by notifying affected users and relevant authorities.

International Data Transfers

Our servers may sit outside Indonesia—for example, in other Southeast Asian countries or internationally. When your data transfers across borders, it remains encrypted and subject to contractual protections. We do not transfer data to jurisdictions with weaker privacy laws than Indonesia without your explicit consent. If you object to international data transfers, contact our support team to discuss alternatives.

Children's Privacy

jawabet is not intended for users under the age of majority in their jurisdiction. We do not knowingly collect personal data from minors. If we discover that we have done so, we delete that data immediately upon notification. Parents or guardians who believe a minor has created a jawabet account should contact our support team at once.

Changes to This Privacy Policy

We may update this policy to reflect changes in law, technology, or our operations. Material changes—such as new data collection or sharing practices—are notified to your email on file at least 30 days before taking effect. Your continued use of jawabet after an update constitutes acceptance of the revised policy. Non-material clarifications may be made without notice.

Contact and Data Privacy Requests

If you have questions about our privacy practices, wish to exercise a data right, or wish to report a potential data breach, contact our privacy team through your jawabet account's Help menu. Include your account ID and a description of your request. We respond to data-access requests within five business days and to complaints within ten business days. If you are in Jakarta, Bandung, Surabaya, or Medan, you can also request an in-person meeting to discuss privacy concerns by contacting our support team.

This privacy policy is effective as of the last update date shown on our website. We reserve the right to update it as our services evolve or as law changes. If you do not agree with our privacy practices, you may close your jawabet account at any time; upon closure, we retain only transaction records required by law.