Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings defined below:

• "Platform" — The jos77 website at https://jos77.asia and all associated mobile-optimised interfaces, gaming lobbies, sportsbook pages, and account management areas.
• "We" / "Us" / "Our" — Jos77, the internationally licensed gaming operator that owns and operates the Platform.
• "You" / "Player" — Any individual who registers an account on the Platform or accesses any part of its services.
• "Personal Data" — Any information that identifies or can reasonably be used to identify you as an individual, including your name, date of birth, email address, phone number, payment details, and IP address.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "KYC" — Know Your Customer — the identity and age verification process required before processing withdrawals or at any stage deemed necessary for compliance purposes.
• "Cookies" — Small text files placed on your device by the Platform to enable session management, preference storage, analytics, and fraud-detection functions.
• "Third-Party Processors" — Trusted external service providers engaged by jos77 to perform specific data-processing functions (e.g., payment processors, KYC verification partners, fraud-detection services) under strict contractual data-protection obligations.

Jos77 collects Personal Data through several channels: information you provide directly during registration and account management, information generated automatically by your use of the Platform, and information received from trusted third-party sources for verification and fraud-prevention purposes. The categories of data we collect are set out in the table below.

Jos77 processes Personal Data only for the purposes described below and only to the extent necessary to fulfil those purposes. We do not process your data for purposes that are incompatible with those for which it was originally collected.

• Account management: To create, maintain, and secure your jos77 account, authenticate your login sessions via OTP, and communicate account-related notifications to you.
• Service delivery: To provide access to all gaming and betting products on the Platform, including slots, live casino, baccarat, sportsbook, and togel (Indonesia's traditional numbers lottery) markets where applicable.
• Financial processing: To process deposits and withdrawal requests via local Indonesian payment channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) and cryptocurrency (USDT TRC-20), and to maintain accurate transaction records.
• Identity verification (KYC): To verify that you are at least 21 years of age and that your identity matches the registration details provided, as required under our international licensing obligations.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and any other conduct that may harm the integrity of the Platform or other players.
• Legal compliance: To comply with applicable anti-money-laundering (AML) obligations, record-keeping requirements under our gaming licence, and any lawful requests from competent regulatory authorities.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes through our internal complaint resolution process.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the performance, stability, and content of the Platform — including optimising game load times and refining sportsbook market coverage for Indonesian events such as BRI Liga 1 and the Piala AFF.
• Responsible gaming: To monitor play patterns for indicators of problem gambling and, where appropriate, to apply responsible gaming interventions such as deposit limits or cooling-off periods in line with the Responsible Gaming Policy.
• Marketing communications: To send you promotional offers, bonus alerts, and event-based communications (e.g., Idul Fitri reload bonuses, Indonesian Independence Day promotions) where you have opted in to receive such communications. You may opt out at any time via your account settings or by contacting support.

Jos77 relies on the following legal bases when processing your Personal Data:

• Contractual necessity: Processing your identity, contact, and financial data is necessary for us to provide the gaming and payment services you have contracted with us to receive. Without this processing, we cannot operate your account or process transactions.
• Legal obligation: Processing KYC documents and transaction records is required by our international gaming licence and AML compliance framework. This data must be retained for the minimum period specified by those regulatory obligations.
• Legitimate interests: Processing Technical Data and Usage Data for fraud prevention, security monitoring, and Platform analytics serves our legitimate interest in operating a secure and reliable gaming environment, provided such processing does not override your fundamental privacy rights.
• Consent: Processing your data for direct marketing communications is based on your explicit opt-in consent, which you may withdraw at any time without affecting the legality of prior processing.

Jos77 does not sell, rent, or trade your Personal Data. We share data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment processors: Your financial data is shared with the payment service providers required to execute your deposit or withdrawal transaction. This includes the relevant Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata), e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja), and USDT network nodes for cryptocurrency transactions. Each provider operates under its own regulatory framework and data-protection obligations.
• KYC verification partners: Your identity documents and selfie verification data are processed by certified third-party KYC service providers who operate under strict contractual data-processing agreements with jos77. These providers are prohibited from using your data for any purpose other than identity verification on our behalf.
• Game studio providers: When you play a game on the Platform, the relevant game studio — such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, or Spribe — receives a pseudonymous player session token and bet/result data necessary to operate the game. Studios do not receive your name, contact details, or financial data.
• Fraud prevention services: Aggregated Technical Data and Usage Data may be shared with fraud-detection and cybersecurity partners to identify and block suspicious access patterns, bot activity, or multi-accounting attempts.
• Regulatory and legal authorities: Jos77 will disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by law, valid legal process, or our licensing obligations. We will notify you of such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of jos77's assets, your Personal Data may be transferred to the successor entity, subject to the same data-protection obligations set out in this Privacy Policy. You will be notified of any such transfer in advance.

Jos77 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain the security of your session, and to understand how players interact with our games and content. We do not use cookies for cross-site advertising or to build behavioural profiles for sale to advertisers.

You may manage or delete cookies via your browser settings. Disabling essential or security cookies will impair the Platform's core functions and may prevent you from logging in. Disabling analytics cookies will not affect your ability to play games or place bets.

Jos77 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable regulatory obligations. The following retention periods apply:

• Active account data (identity, contact, financial): Retained for the duration of the active account relationship plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under our licensing framework.
• KYC documents: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
• Transaction records: Retained for five (5) years from the date of the transaction.
• Communication Data (live chat / email transcripts): Retained for two (2) years from the date of the interaction, unless the communication is relevant to an ongoing dispute or regulatory investigation.
• Technical and Usage Data: Retained in anonymised or aggregated form for up to thirteen (13) months for analytics purposes. Raw server logs containing IP addresses are retained for a maximum of ninety (90) days before automatic deletion.
• Marketing consent records: Retained for the duration of the opt-in consent plus three (3) years following opt-out, as evidence of historical consent status.

At the end of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

As a player on the jos77 Platform, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team via live chat or by email at [email protected] (plain text — not a clickable link). We will respond to all verified requests within thirty (30) calendar days.

• Right of access: You have the right to request a copy of the Personal Data that jos77 holds about you, along with information about how it is being processed.
• Right to rectification: If any Personal Data held by jos77 is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure: You have the right to request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. This right is subject to any overriding legal obligation to retain data (e.g., AML record-keeping requirements).
• Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: Where processing is based on consent or contractual necessity, you have the right to receive a structured, machine-readable copy of the Personal Data you have provided to us.
• Right to withdraw consent: Where processing is based on your consent (specifically, marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to object: You may object to processing that is based on our legitimate interests, including direct marketing (if not already addressed by consent withdrawal) and profiling for responsible gaming purposes, subject to compelling legitimate grounds on our part.

Jos77 implements a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, destruction, and disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all connections between your browser or mobile device and the Platform servers, ensuring that data in transit cannot be intercepted.
• One-time PIN (OTP) authentication for sensitive account actions, including login from new devices, withdrawal requests, and account detail changes.
• Role-based access controls (RBAC) limiting internal access to Personal Data on a strict need-to-know basis. Customer support agents see only the data necessary to resolve your specific enquiry.
• Encrypted-at-rest storage for KYC documents and financial records on access-controlled servers with intrusion detection systems.
• Regular security audits and penetration testing conducted by independent cybersecurity firms to identify and remediate vulnerabilities.
• Automated fraud-detection systems that flag anomalous login behaviour, unusual transaction patterns, and multi-accounting attempts in real time.

Despite these measures, no system is completely immune to security incidents. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, jos77 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.

The jos77 Platform is strictly intended for adults aged 21 and over. Jos77 does not knowingly collect Personal Data from individuals under the age of 21. All registration submissions are subject to automated age-verification checks and manual KYC review where warranted.

If you are a parent or guardian and believe that a minor in your care has submitted Personal Data to jos77, please contact us immediately at [email protected] (plain text — not a clickable link) so that we can take prompt action.

Jos77 operates as an internationally licensed gaming platform. Personal Data may be transferred to and processed in jurisdictions outside Indonesia in the following circumstances:

• Where game studio servers (e.g., Pragmatic Play, Evolution Gaming, PG Soft) are hosted in jurisdictions other than Indonesia — pseudonymous game session data is processed at these locations for the purpose of delivering the game to you.
• Where KYC verification partners or fraud-detection service providers maintain processing infrastructure outside Indonesia.
• Where cloud infrastructure providers hosting jos77's back-end systems operate data centres in multiple geographic regions.

In each case, Jos77 ensures that appropriate contractual safeguards are in place — including data-processing agreements with relevant data-protection provisions — before transferring Personal Data internationally. The level of data protection afforded to your information is maintained consistently regardless of where it is processed.

Jos77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When material changes are made, we will notify registered players via the email address on file at least 14 days before the revised policy takes effect.

The "Last Updated" date at the top of this page always reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Continued use of the Platform after the effective date of any revision constitutes acceptance of the updated policy. If you do not agree with a material change, you should stop using the Platform and contact support to request account closure before the change takes effect.

For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data held by jos77, please contact our support team through the following channels:

• Live chat: Available 24/7 inside your account dashboard after login. This is the fastest channel for urgent data-related requests.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line and specify the nature of your request clearly.

Support is available in both English and Bahasa Indonesia around the clock, every day of the year including Indonesian public holidays such as Idul Fitri, Idul Adha, Nyepi, and Indonesian Independence Day (17 August). We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days.