Scope of this Policy: This Privacy Policy applies to all personal data collected by j200m through the website https://j200m.club, associated mobile-optimised views, live chat, email communications, and any other channel through which you interact with j200m. By registering an account or continuing to use the j200m platform, you acknowledge that you have read and understood this Policy.
1
Introduction
j200m is committed to protecting the privacy and personal data of every member who registers and plays on our platform. This Privacy Policy sets out, in clear and transparent terms, exactly what information j200m collects about you, why we collect it, how it is used, how long it is kept, and the rights you have over your own data.
j200m operates as an internationally structured online betting and gaming platform, serving primarily Indonesian members across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and beyond. All transactions on j200m are denominated in Indonesian Rupiah (IDR), and our customer service team includes native Indonesian-speaking agents available 24/7 (WIB, UTC+7).
This Policy should be read alongside j200m's Terms & Conditions and Responsible Gaming policy, both of which are integral parts of your contractual relationship with j200m. In the event of any conflict between this Privacy Policy and another j200m document, this Privacy Policy governs with respect to data privacy matters.
j200m applies internationally recognised data protection standards to all personal data we process. We treat your data with the same level of care and security that we apply to our own confidential business information.
2
Data We Collect
j200m collects personal data from you through several channels: directly when you register an account and use our services; automatically when you browse and interact with the j200m platform; and, in limited circumstances, from trusted third-party verification and payment providers. The categories of data we collect are described below.
| Category |
Specific Data Points |
Collection Method |
| Identity Data |
Full legal name, date of birth, gender, nationality, government-issued ID number (KTP or passport) |
Provided by you at registration and KYC verification |
| Contact Data |
Email address, mobile phone number, residential address (city, province) |
Provided by you at registration or account update |
| Financial Data |
Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit/withdrawal history, account balance |
Provided by you when adding a payment method; generated automatically by platform activity |
| Transaction Data |
Betting history (sportsbook markets, togel draws, live casino sessions, slot spins), stake amounts, settlement outcomes, bonus usage records |
Generated automatically by platform activity |
| Technical Data |
IP address, device type and OS, browser type and version, screen resolution, session timestamps, referring URL |
Collected automatically via server logs and analytics |
| Usage Data |
Pages visited, features used, time spent on platform, game preferences, search queries within the platform |
Collected automatically via cookies and analytics tools |
| Communications Data |
Live chat transcripts, email correspondence, support ticket content |
Generated when you contact j200m support |
| Verification Documents |
Copies of government-issued photo ID, proof of address documents, payment method ownership evidence submitted during KYC |
Provided by you upon request during KYC verification |
j200m does not collect or store full payment card numbers. Where card payments are facilitated through a licensed third-party processor, card data is handled exclusively by that processor under their own PCI-DSS compliance framework and is never stored on j200m's own servers.
3
How We Use Your Data
j200m uses personal data collected from members for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The primary purposes for which j200m processes personal data are set out below.
- Account Creation & Management: We use your identity and contact data to create and administer your j200m account, verify your eligibility to register, and maintain accurate records of your account activity.
- Identity Verification (KYC): We are required to verify the identity and age of all members as part of our responsible gaming obligations and fraud prevention programme. KYC verification uses your identity and verification document data.
- Payment Processing: Financial data and transaction data are used to process your deposits and withdrawal requests accurately and promptly, and to reconcile your account balance.
- Platform Personalisation: Usage data and transaction data allow j200m to personalise your experience — for example, surfacing game categories you frequently play (sportsbook, slots, live casino, togel) or tailoring promotional offers to your activity profile.
- Fraud Detection & Security: Technical data, transaction data, and usage data are analysed by j200m's automated and manual security systems to identify suspicious account activity, potential fraud, bonus abuse, money laundering indicators, and other prohibited conduct.
- Customer Support: Communications data is used to respond to your support enquiries, resolve complaints, and improve the quality of j200m's customer service.
- Regulatory Compliance: j200m processes and retains certain categories of data to comply with applicable anti-money laundering (AML) obligations, age verification requirements, and any other legal or regulatory requirements applicable to j200m's operations.
- Marketing Communications: Where you have given explicit consent, j200m will use your contact data to send you promotional emails and notifications about bonuses, new games, and seasonal offers (e.g., promotions tied to Idul Fitri, Ramadhan, or Indonesian Independence Day). You may withdraw this consent at any time.
- Platform Analytics & Improvement: Aggregated and anonymised usage and technical data are used to analyse platform performance, identify usability issues, and improve j200m's products and features.
4
Legal Basis for Processing
j200m processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing required to perform the contract between j200m and you — including account management, payment processing, and delivery of betting and gaming services — is conducted on the basis that it is necessary to fulfil our contractual obligations to you.
- Legal Obligation: Where j200m is required by applicable law or regulation to process or retain certain data (for example, AML record-keeping, age verification, or compliance with a court order), we process that data on the basis of legal obligation.
- Legitimate Interests: Fraud prevention, platform security, abuse detection, and internal analytics are conducted on the basis of j200m's legitimate interests in operating a secure, fair, and commercially sustainable platform — provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Marketing communications and optional cookies beyond strictly necessary session management are processed solely on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without detriment to your account status.
5
Data Sharing
j200m does not sell, rent, or otherwise commercially disclose your personal data to third parties. Data is shared externally only in the limited circumstances described below, and only to the extent strictly necessary for the specified purpose.
- Payment Service Providers: Financial data necessary to process your deposits and withdrawals is shared with licensed payment service providers including the relevant Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as independent data controllers under their own privacy frameworks.
- KYC & Identity Verification Providers: Where j200m engages a licensed third-party identity verification service to support its KYC process, relevant identity and verification document data is shared with that provider solely for identity and age verification purposes.
- Game Studio Providers: Technical session data (such as session tokens and bet outcomes) is shared with certified game studio providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) to the extent necessary to deliver and settle their games within the j200m platform environment. These studios do not receive identifiable personal data beyond what is technically required for game session management.
- Legal & Regulatory Authorities: j200m will disclose personal data to competent governmental or regulatory authorities where required to do so by applicable law, court order, or lawful regulatory demand. Where legally permitted, j200m will notify you of any such disclosure.
- Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of j200m's business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via the email address registered to your j200m account.
- Professional Advisers: j200m's legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.
j200m requires all third-party data processors to implement appropriate technical and organisational security measures consistent with their handling of sensitive personal data. j200m is not responsible for the independent privacy practices of payment providers, banks, or e-wallet operators acting as data controllers in their own right.
6
Cookies & Tracking Technologies
j200m uses cookies and similar tracking technologies on the j200m platform to ensure the website functions correctly, to maintain your authenticated session, and to collect analytics data that helps us improve the platform experience for all members.
| Cookie Type |
Purpose |
Consent Required? |
| Strictly Necessary |
Session management, authentication tokens, CSRF protection, load balancing. These cookies are essential for the platform to function and cannot be disabled. |
No — legally exempt |
| Functional |
Remembering your language and display preferences, game lobby layout settings, and notification preferences across sessions. |
No — legitimate interest |
| Analytics |
Aggregated, anonymised data on page views, session duration, feature engagement, and error rates. Used to improve platform performance and usability. |
Yes — consent-based |
| Marketing |
Tracking interactions with j200m promotional content to measure campaign effectiveness and personalise bonus offers. |
Yes — consent-based |
You may manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will prevent the j200m platform from functioning correctly. Disabling analytics or marketing cookies will not affect your ability to bet or play on j200m, but may result in less personalised promotional offers.
7
Data Retention
j200m retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Active Account Data: All personal, financial, and transaction data associated with an active j200m account is retained for the full duration of the account's active status.
- Closed Account Data: Following voluntary or involuntary account closure, j200m retains identity, financial, and transaction records for a minimum of five (5) years to satisfy AML record-keeping obligations and to respond to any legal claims or regulatory enquiries that may arise after closure.
- KYC Documents: Copies of identity documents and proof of address submitted during KYC verification are retained for a minimum of five (5) years after the relevant account is closed.
- Support & Communications Data: Live chat transcripts and email correspondence are retained for a minimum of two (2) years to support complaint resolution and quality assurance processes.
- Marketing Consent Records: Records of your marketing consent (or withdrawal of consent) are retained for the lifetime of your account plus three (3) years, in order to evidence compliance with consent obligations.
- Technical & Log Data: Server log and technical data is typically retained for 90 days in active logs, and up to twelve (12) months in archived form, for security investigation purposes.
When data is no longer required for any of the purposes described above and no legal retention obligation applies, j200m will securely delete or irreversibly anonymise that data in accordance with our internal data destruction procedures.
8
Your Rights
As a j200m member, you hold meaningful rights over your personal data. j200m is committed to honouring these rights promptly and without unnecessary obstruction. Your rights are described below.
- Right of Access: You may request a copy of all personal data j200m holds about you. j200m will provide this information in a clear, structured format within 30 days of receiving a verified request.
- Right to Rectification: If any personal data j200m holds about you is inaccurate or incomplete, you have the right to request its correction. You may update most account details directly via your j200m account settings; for information that cannot be self-corrected, contact our support team.
- Right to Erasure: You may request that j200m delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to j200m's legal data retention obligations — certain data cannot be deleted before the applicable retention period expires.
- Right to Restriction of Processing: In certain circumstances (for example, where you contest the accuracy of data or have objected to processing), you may request that j200m restricts its use of your data while the matter is resolved.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a machine-readable format and to request that j200m transmit it directly to another service provider where technically feasible.
- Right to Object: You may object at any time to the processing of your personal data on the basis of legitimate interests (including fraud prevention and analytics). j200m will cease that specific processing unless it can demonstrate compelling legitimate grounds that override your rights.
- Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications or optional cookies), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.
To exercise any of the rights described above, contact j200m's support team via live chat (available 24/7 within your logged-in account) or by email at [email protected] (plain text — not a clickable link). j200m will acknowledge your request within 48 hours and aim to fulfil it within 30 calendar days.
9
Minors & Age Verification
j200m enforces a strict minimum age requirement of 21 years for all members. The j200m platform is not intended for, marketed to, or accessible by persons under the age of 21. j200m does not knowingly collect personal data from individuals under 21.
Age is verified at the point of registration through self-declaration and, where required, through KYC document review. j200m employs automated checks to cross-reference declared date of birth against submitted identity documents. Where an underage user is identified at any stage — whether during registration, KYC, or through a subsequent report — j200m will immediately close the Account, return any deposited real-money funds, forfeit associated winnings, and delete all personal data related to that individual as promptly as legally permissible.
If you are a parent or guardian and believe that a minor under your care has registered on the j200m platform, please contact j200m support immediately at [email protected]. We will investigate and take appropriate action without delay. All content on j200m is intended for adults only (21+).
10
Data Security
j200m implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Key security measures in place include:
- Encryption in Transit: All data transmitted between your browser or mobile device and j200m's servers is encrypted using 256-bit SSL (TLS 1.3). Connections over unencrypted HTTP are automatically redirected to HTTPS.
- Encryption at Rest: Sensitive personal and financial data stored in j200m's databases is encrypted at rest using AES-256 encryption. Database servers are isolated from public internet access behind multiple layers of network security.
- Access Controls: Internal access to personal member data is restricted on a strict need-to-know basis. All j200m personnel with authorised data access are subject to confidentiality obligations and role-based access control policies.
- Penetration Testing & Audits: j200m's platform and infrastructure undergo regular third-party security audits and penetration testing. Identified vulnerabilities are remediated according to a risk-tiered timeline.
- Fraud Monitoring: Real-time automated monitoring systems scan for anomalous account activity, suspicious login patterns, and potential account takeover attempts 24 hours a day.
- Incident Response: j200m maintains a formal data breach incident response plan. In the event of a security incident that poses a material risk to your personal data, j200m will notify affected members promptly in accordance with applicable obligations.
While j200m employs robust security measures, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your j200m account credentials. Never share your username, password, or one-time PINs with any third party. j200m will never ask you for your password via email or live chat.
11
Third-Party Services
The j200m platform integrates third-party services — including certified game studio providers, licensed payment processors, and analytics tools — to deliver a complete betting and gaming experience. Each of these third parties operates under its own privacy policy and data protection framework.
- Game Studios: Games provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft are delivered via embedded iFrame or API integrations. These studios may process limited session-level data (such as session tokens and bet results) within their own secure environments. j200m does not share your identifiable personal data (name, contact details, KYC documents) with game studios.
- Payment Processors & Banks: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process financial transaction data in accordance with their own privacy notices and applicable Indonesian financial services regulations.
- Analytics: j200m may use anonymised and aggregated analytics tools to understand platform usage patterns. These tools do not receive personally identifiable member data.
j200m is not responsible for the data practices of third-party services operating as independent data controllers. We encourage you to review the privacy policies of any third-party payment provider or bank through which you transact.
12
Policy Changes
j200m reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, j200m will notify registered members via the email address associated with their account at least 14 days before the updated Policy takes effect.
The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the j200m platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and contact j200m to close your account.
We encourage you to review this Privacy Policy periodically to stay informed about how j200m is protecting your personal data. The current version of this Policy is always accessible at https://j200m.club/privacy-policy.