jet88 Privacy Policy

jet88 ("we", "us", "our", "the Platform") operates the online gambling and sports betting platform accessible at https://jet88.bio, serving players primarily across Indonesia — including Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, and Palembang. We are committed to protecting the privacy and personal data of every individual who interacts with our platform.

This Privacy Policy sets out the basis on which we collect, process, store, share, and protect personal data obtained from or about you in the course of your use of the jet88 platform. It applies to all services offered on jet88, including sports betting markets (BRI Liga 1, EPL, La Liga, Bundesliga, Champions League, AFF Cup, and Timnas Indonesia fixtures), casino games, live dealer tables, togel (Indonesia's traditional numbers lottery), virtual sports, crash games, and any other products made available from time to time.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. Where there is any conflict between this policy and the Terms & Conditions with respect to privacy matters, this policy governs.

If you do not agree with the terms of this Privacy Policy, you must not access or use the jet88 platform.

jet88 collects personal data in several categories depending on the nature of your interaction with the platform. The table below sets out each category, its specific data elements, and the purpose for which it is collected.

jet88 collects personal data through the following channels:

• Direct interactions: When you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, respond to a survey, or submit a feedback form, you provide data to us directly;
• Automated technologies: As you interact with the platform, we automatically collect Technical Data and Usage Data via cookies, server logs, web beacons, and session-tracking technologies. See Section 9 (Cookies & Tracking) for full details;
• Third-party payment processors: When you make a deposit or request a withdrawal via a bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) or an e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the relevant payment processor shares transaction confirmation data with us to reconcile your account balance;
• Identity verification partners: For KYC purposes, jet88 may engage licensed third-party identity verification services that cross-reference the documents you submit against official databases. These partners operate under strict data processing agreements with jet88;
• Game Providers: Licensed third-party Game Providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, and Spribe) may share aggregated game session data with jet88 for the purpose of settling bets, resolving disputes, and auditing game integrity.

jet88 uses your personal data only for the purposes listed below. We do not use your data in ways that are incompatible with these stated purposes without first obtaining your consent or updating this policy.

• Account management: Creating, maintaining, and closing your account; verifying your identity and age (21+); enforcing one-account-per-player policy;
• Service delivery: Processing your bets, deposits in Indonesian Rupiah (IDR), and withdrawal requests; awarding bonuses and VIP tier benefits; settling disputes;
• Legal and regulatory compliance: Fulfilling Know Your Customer (KYC) obligations; conducting Anti-Money Laundering (AML) screening and transaction monitoring; responding to lawful requests from regulatory or law enforcement authorities;
• Security and fraud prevention: Detecting and investigating unauthorised access, bot usage, account sharing, bonus abuse, and any form of financial crime; enforcing geographic access restrictions;
• Responsible gaming: Monitoring betting patterns to identify signs of problem gambling; enforcing self-exclusion, deposit limits, and cooling-off periods; proactively reaching out to players who display at-risk behaviour;
• Platform improvement: Analysing aggregated usage data to optimise platform performance, improve game selection, and enhance the user experience for players across Indonesia;
• Marketing communications: Sending promotional offers, bonus announcements, tournament invitations, and seasonal promotions (e.g., Idul Fitri, Ramadhan, Nyepi, Indonesian Independence Day offers) — but only where you have provided valid, documented consent to receive such communications. You may withdraw consent at any time;
• Customer support: Handling your queries, complaints, and technical issues promptly and effectively.

jet88 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing that is required to perform the contract between you and jet88 — i.e., the Terms & Conditions you accepted at registration. This includes account creation, transaction processing, bet settlement, and KYC verification;
• Legal obligation: Processing required for compliance with applicable laws and regulations, including AML obligations, data retention requirements, and lawful disclosure to public authorities;
• Legitimate interests: Processing that is necessary for jet88's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by your privacy rights;
• Consent: Processing for which we have obtained your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional personalisation features. You may withdraw consent at any time without penalty, although withdrawal does not affect the lawfulness of processing carried out before withdrawal.

jet88 does not sell, rent, or otherwise commercially transfer your personal data to any third party. We share your data only in the following limited circumstances:

• Licensed Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Spribe, and other licensed studios receive the minimum necessary data (typically a pseudonymous player identifier and session token) to deliver their games and resolve technical disputes. These providers are contractually prohibited from using your data for any purpose other than game delivery;
• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the financial data necessary to process your transactions. Each processor is bound by its own regulatory obligations and data protection standards;
• Identity verification partners: Licensed KYC service providers receive your identity documents and related data solely for the purpose of age and identity verification. Their data processing is governed by binding agreements with jet88;
• Regulatory and law enforcement authorities: jet88 will disclose personal data to competent authorities where required by law, by a binding court order, or where we reasonably believe that disclosure is necessary to prevent fraud, money laundering, or harm to persons. We will notify you of any such disclosure where we are legally permitted to do so;
• Professional advisers: Our legal counsel, auditors, and compliance consultants may access personal data on a need-to-know basis and are bound by professional confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of jet88's assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any material change to how your data will be processed.

jet88 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods mandated by our legal and regulatory obligations:

• Account and identity data: Retained for the duration of your account relationship with jet88, plus a minimum of five (5) years following permanent account closure, in accordance with standard AML record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in line with applicable financial record-keeping obligations;
• KYC documentation: Retained for a minimum of five (5) years from the date of submission or, where relevant, from the date of the last transaction conducted under that KYC record;
• Betting and game history: Retained for a minimum of three (3) years from the date of the relevant transaction, to support dispute resolution and responsible gaming monitoring;
• Customer support communications: Retained for a minimum of two (2) years from the date of the last interaction, for quality assurance and dispute resolution purposes;
• Marketing consent records: Retained for a minimum of three (3) years from the date on which consent was granted or withdrawn, as proof of consent status;
• Technical / log data: Typically retained for twelve (12) months, after which it is anonymised or deleted unless required for an ongoing investigation.

At the end of the applicable retention period, personal data is either securely deleted, anonymised (such that it can no longer be attributed to an identifiable individual), or — where ongoing legal proceedings or investigations make deletion impractical — placed under restricted access pending final resolution.

jet88 implements a comprehensive, layered security programme designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and jet88 servers is encrypted in transit. Connections using deprecated protocols (TLS 1.0, TLS 1.1, SSL 3.0) are rejected;
• AES-256 encryption at rest: All personal data and financial records stored on jet88 servers are encrypted at rest using the Advanced Encryption Standard with a 256-bit key length — the same standard used by major global financial institutions;
• Access controls: Access to personal data is restricted to jet88 employees and contractors who have a legitimate operational need. All access is governed by role-based permissions, logged, and audited regularly;
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts. All jet88 internal systems that process personal data require multi-factor authentication for staff access;
• Penetration testing: jet88 commissions independent security penetration tests at least annually and addresses any identified vulnerabilities on a prioritised remediation schedule;
• Incident response: jet88 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify affected Players and relevant authorities within the timeframes required by applicable law.

jet88 uses cookies and similar web technologies (including local storage, session storage, and web beacons) to operate the platform effectively. The cookies we use fall into the following categories:

jet88 does not use third-party advertising cookies or any tracking technology designed to follow you across websites outside the jet88 platform.

You may control cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent the platform from functioning correctly and will log you out of your session. Disabling analytics cookies will not affect your ability to play or transact.

As a player on the jet88 platform, you hold the following rights in relation to your personal data. These rights may be exercised free of charge by contacting our support team at [email protected] or via the 24/7 live chat service.

jet88 will acknowledge your request within 72 hours and will provide a substantive response within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and its reasons within the initial 30-day window.

We will not discriminate against you for exercising any of your privacy rights. Exercising a right will not affect your access to services unless the specific right exercised makes continued service delivery impossible (e.g., erasure of identity data that is legally required for AML purposes).

If jet88 discovers or is notified that personal data belonging to an individual under the age of 21 has been collected — whether through a misrepresentation at registration or any other means — we will take the following immediate steps:

• Suspend the associated account immediately;
• Void all bets placed from that account;
• Return any legitimate deposits to the original funding source after deducting any bonus credits;
• Permanently delete the personal data belonging to the underage individual within 30 days, subject to any overriding legal obligation to retain evidence for law enforcement purposes;
• Notify the appropriate authorities where required by applicable child protection law.

Parents and guardians who believe that a minor in their care has accessed jet88 are encouraged to contact our support team immediately at [email protected]. We treat all such notifications as a priority matter and respond within 24 hours.

jet88 operates as an internationally licensed gaming platform. In the course of delivering our services to players based in Indonesia, your personal data may be transferred to and processed in countries outside of Indonesia where our licensed Game Providers, payment processors, identity verification partners, and infrastructure providers are located.

Whenever personal data is transferred outside Indonesia, jet88 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that which applies within Indonesia. These safeguards include:

• Standard contractual clauses: Binding data processing agreements with all third-party recipients that include enforceable contractual commitments regarding data protection standards, access restrictions, and breach notification obligations;
• Adequacy assessments: Prior to transferring data to a new jurisdiction, jet88 conducts a transfer impact assessment to evaluate whether the destination country's legal framework provides adequate protection for personal data;
• Encryption in transit: All cross-border data transfers are encrypted using TLS 1.3, ensuring that data cannot be intercepted or read in transit regardless of the route it travels.

By using the jet88 platform, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the safeguards described above.

The jet88 platform may contain links to or integrations with third-party services, including licensed Game Provider lobbies, payment gateway interfaces, and identity verification portals. These third-party services operate under their own privacy policies and data practices, which are independent of jet88's Privacy Policy.

jet88 is not responsible for the privacy practices of any third-party service. When you interact with a third-party interface embedded within or linked from the jet88 platform, we encourage you to review the relevant third party's privacy policy before submitting any personal data to that service.

jet88 vets all third-party integrations for data security standards before deployment and reviews them annually. However, jet88 cannot guarantee the privacy practices of any third party and accepts no liability for any data handling by third parties that occurs outside the scope of jet88's data processing agreements with those parties.

jet88 reviews this Privacy Policy at least annually and updates it whenever our data processing practices change materially. We may also update this policy in response to changes in applicable law, regulatory guidance, or industry best practice.

Where a change is material — meaning it affects your rights, the categories of data we collect, the purposes for which we use your data, or the third parties with whom we share it — we will provide at least fourteen (14) days' advance notice by:

• Sending a notification to your registered email address summarising the key changes;
• Displaying a prominent in-platform notice when you next log in to the jet88 platform during the notice period;
• Publishing the updated policy on this page with a revised "Last Updated" date at the top.

For minor changes — such as typographical corrections, clarifications that do not affect your substantive rights, or updates to our contact details — we will update the policy on this page without advance notice. The "Last Updated" date will be revised to reflect the date of the change.

Your continued use of the jet88 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated policy, you must cease using the platform and may request account closure by contacting our support team.

All previous versions of this Privacy Policy are archived and available on request by contacting [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or about the way jet88 handles your personal data, please contact us through one of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, via the chat widget on the platform
• Response Time: Privacy-related queries are treated as a priority and are acknowledged within 72 hours. A full substantive response is provided within 30 calendar days
• Support Language: Our support agents are fluent in both English and Indonesian (Bahasa Indonesia), providing clear and accessible support for all players across Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and the broader Indonesian archipelago