Privacy Policy

01Introduction

This Privacy Policy describes how jos198 ("we", "us", "our", or "the Platform") collects, uses, stores, shares, and protects the personal information of individuals who visit or use our online betting and casino platform at https://jos198.bet (the "Platform"). It applies to all users located in Indonesia and any other jurisdiction from which the Platform is lawfully accessed.

Jos198 is committed to handling your personal data responsibly and transparently. We recognize that the trust you place in us when you provide your personal information is something that must be earned and maintained. This Policy is written in plain English — supplemented by formal legal language where necessary — so that you can clearly understand what we do with your data and why.

By accessing or using the Platform — including browsing the website, creating an account, making a deposit, placing a bet, or contacting our support team — you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

This Privacy Policy is incorporated into and forms part of the jos198 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on a matter relating to personal data, this Privacy Policy shall prevail.

02Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal information is the licensed entity operating the jos198 brand. Details of the operating entity, including its registered name and jurisdiction of incorporation, are available upon request by contacting our support team at [email protected].

The operating entity holds an international gaming license that imposes data protection, security, and responsible gaming obligations. Jos198's data practices are designed to comply with those licensing obligations as well as with generally accepted international data protection principles, including purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

Players in Indonesia acknowledge that Indonesian law (including Law No. 27 of 2022 on Personal Data Protection) may apply to certain aspects of the data processing described in this Policy. By using the Platform, you consent to the collection and processing of your personal data as described herein.

03Data We Collect

Jos198 collects personal data in the following categories. We collect only the data that is necessary for the specific purposes described in this Policy — we do not collect data speculatively or in excess of what is required to deliver and improve our Services.

04How We Collect Your Data

Jos198 collects personal data through the following channels:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a promotion, or otherwise provide information voluntarily through the Platform.
• Automatically through your use of the Platform — via cookies, web beacons, server logs, and similar tracking technologies that record technical and usage data each time you visit or interact with the Platform. See Section 10 (Cookies) for full details.
• From third-party identity verification providers — where we engage specialist KYC and AML compliance vendors to verify the identity documents you submit. These providers return a verification result and any data flagged as potentially fraudulent, which we store as part of your Account record.
• From payment processors and banking partners — confirmation of payment status and transaction references from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja when you initiate a deposit or withdrawal.
• From fraud prevention and security services — where we use third-party tools to detect irregular login patterns, device fingerprinting anomalies, or suspicious betting behavior that may indicate fraud, bonus abuse, or account compromise.
• From publicly available sources — in limited circumstances for AML compliance purposes, we may cross-reference your information against publicly available sanctions lists or politically exposed persons (PEP) databases.

05Purposes & Legal Basis for Processing

We process your personal data only where we have a valid legal basis for doing so. The table below sets out the primary purposes for which we process your data, along with the corresponding legal basis.

Where we rely on legitimate interests as a legal basis, we have assessed that our interests do not override your fundamental rights and freedoms, taking into account the reasonable expectations of players using an international online betting platform.

Where we rely on consent as a legal basis — primarily for marketing communications — you may withdraw that consent at any time by updating your communication preferences within your Account dashboard or by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

06Sharing Your Data

Jos198 does not sell your personal data. We share personal data with third parties only in the circumstances described below, and only to the extent necessary for the relevant purpose.

• Payment processors and banking partners. We share the financial data necessary to process your deposits and withdrawals with the relevant payment providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as independent data controllers for the portions of data they process in connection with their own payment services.
• KYC and identity verification providers. We share identity documents and personal details with specialist KYC vendors to perform identity and age verification checks. These vendors process data under our instructions and are contractually bound to use it only for verification purposes.
• Game technology providers and studios. Session and wagering data is shared with the game studios whose products you play — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — to the extent required for game delivery, fairness certification, and technical support.
• Fraud prevention and security services. Technical data including IP addresses and device identifiers may be shared with third-party fraud detection services to identify and block suspicious activity.
• IT infrastructure and cloud service providers. Jos198's Platform is hosted on secure third-party infrastructure. Data stored on these systems is subject to the same confidentiality and security standards we apply internally.
• Regulatory authorities and law enforcement. We may disclose personal data to government bodies, regulators, courts, or law enforcement agencies where required to do so by applicable law, court order, or our licensing obligations — including in connection with AML investigations.
• Professional advisors. Our legal counsel, auditors, and compliance consultants may access limited personal data where strictly necessary for the provision of their professional services, under obligations of confidentiality.

07International Data Transfers

Jos198 is an international platform. Some of the third-party service providers described in Section 6 are located outside Indonesia, which means that your personal data may be transferred to and processed in countries other than Indonesia. These countries may have data protection laws that differ from those in Indonesia.

When we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place to protect your information. These safeguards may include:

• Contractual clauses that require the recipient to protect personal data to a standard equivalent to that which applies in Indonesia.
• Transferring data only to countries that have been assessed as providing an adequate level of data protection for the relevant category of data.
• Applying technical measures (encryption in transit and at rest) to protect data throughout any transfer.

By using the jos198 Platform, you acknowledge and consent to your personal data being transferred internationally in accordance with the safeguards described in this section.

08Data Retention

Jos198 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any mandatory retention obligations imposed by applicable law or our gaming license. The following retention periods apply as a baseline:

• Account and identity data: Retained for the lifetime of your Account plus a minimum of five (5) years following Account closure, to satisfy AML record-keeping requirements and to handle any post-closure disputes or regulatory inquiries.
• Financial and transaction data: Retained for a minimum of five (5) years following each transaction, in line with standard financial record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years following the completion of the verification check, or longer if required by applicable law or ongoing regulatory proceedings.
• Communications data (support chat, email): Retained for three (3) years from the date of the last communication, to enable resolution of any follow-up disputes or inquiries.
• Technical and usage data: Retained for up to twelve (12) months from collection, after which it is aggregated or deleted. Aggregated analytics data that cannot be linked back to an individual may be retained indefinitely.
• Responsible gaming records: Self-exclusion and restriction records are retained for the duration of the restriction plus five (5) years, to prevent circumvention of self-exclusion measures and for compliance reporting purposes.
• Marketing consent records: Retained for the lifetime of your Account plus three (3) years, to demonstrate that marketing communications were sent on the basis of valid consent.

When the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be linked to an individual. Where deletion is not immediately possible (for example, because data is stored in backup archives), we ensure that the data is isolated and protected from further processing until deletion can be completed.

09Your Data Rights

Subject to applicable law and certain limited exceptions, you have the following rights with respect to the personal data that jos198 holds about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and provide enough information to verify your identity.

• Right of access. You have the right to request a copy of the personal data we hold about you, along with information about how that data is being processed. We will provide this within 30 days of receiving a verifiable request.
• Right to rectification. If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Many data fields — such as your email address and phone number — can be updated directly within your Account dashboard.
• Right to erasure ("right to be forgotten"). You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to our legal retention obligations; we cannot delete data that we are required by law to retain.
• Right to restriction of processing. You may request that we restrict the processing of your personal data in certain circumstances — for example, while we are investigating a challenge to the accuracy of your data.
• Right to data portability. Where we process your personal data on the basis of your consent or for the performance of a contract, and the processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to object. You have the right to object to processing of your personal data based on our legitimate interests, and to object at any time to the processing of your data for direct marketing purposes.
• Right to withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10Cookies & Tracking Technologies

Jos198 uses cookies and similar technologies (such as web beacons, pixel tags, and local storage) to operate the Platform, ensure security, and improve the user experience. Cookies are small text files placed on your device when you visit the Platform.

Jos198 does not use third-party advertising cookies or cross-site tracking cookies for ad-retargeting purposes. We do not participate in real-time bidding (RTB) ad networks that would share your browsing data with unrelated advertisers.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

11Security Measures

Jos198 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• TLS encryption in transit: All data transmitted between your device and jos198 servers is encrypted using TLS 1.2 or higher. Our connection is verified by a publicly trusted SSL certificate.
• AES-256 encryption at rest: Sensitive personal data — including identity documents, financial records, and password hashes — is encrypted at rest using AES-256, an industry-standard symmetric encryption algorithm.
• Access controls: Access to personal data within our organization is restricted on a strict need-to-know basis. Staff who handle player data undergo background screening and regular data security training.
• Two-factor authentication (2FA): All administrative access to systems containing personal data requires multi-factor authentication. We encourage players to enable 2FA on their own Accounts for additional protection.
• Penetration testing and vulnerability management: Our Platform undergoes regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident response: Jos198 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities within the timeframes required by applicable law.

12Minors

The jos198 Platform is strictly restricted to individuals aged 21 years and older. We do not knowingly collect personal data from anyone under the age of 21. If you are under 21, you must not use the Platform, create an Account, or provide any personal information to us.

Jos198 applies robust age-verification checks during registration and KYC to prevent underage access. Where we discover that personal data has been collected from a person under the age of 21 — whether through a fraudulent registration or any other means — we will take immediate steps to:

• Suspend and permanently close the relevant Account.
• Void and reverse any transactions made through the Account.
• Securely delete the personal data collected, subject to any legal retention obligations that may override deletion (for example, AML record-keeping).

If you believe that a minor has registered on the Platform using false information, please contact us immediately at [email protected]. We take all such reports seriously and will investigate and act promptly.

13Changes to This Policy

Jos198 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the Services we offer. When we make material changes to this Policy, we will notify active Account holders by one or more of the following means:

• A prominent notice displayed on the Platform homepage or within the Account dashboard.
• An email notification sent to the address registered to your Account.
• An in-Platform alert displayed at your next login session.

The updated Policy will display a revised "Last updated" date at the top of the document. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

Minor changes — such as typographical corrections, clarifications that do not affect your rights, or updates to the list of payment partners — may be made without advance notice and will be reflected immediately on publication of the updated Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how jos198 protects your personal data. If you disagree with any updated version of the Policy, you should cease using the Platform and contact support to request Account closure.

14Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or to the personal data jos198 holds about you, please contact our support team through any of the following channels:

• Email: [email protected] — for all data rights requests, privacy inquiries, and breach notifications. Please use the subject line "Privacy Inquiry" or "Data Rights Request" so that your message is routed to the correct team.
• Live Chat: Available 24 hours a day, 7 days a week via the support widget within your Account dashboard. Indonesian-speaking agents are on every shift and can assist with privacy-related questions in English or Indonesian.
• FAQ: Our FAQ page addresses common questions about account management, data verification, and security. It is often the quickest route to a direct answer.

We are committed to responding to all privacy-related inquiries within 5 business days (WIB business hours). Data rights requests will be fulfilled within 30 days of receiving a verifiable request, or we will notify you if a longer period is required due to complexity.

This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the jos198 Privacy Policy.