joz77 Privacy Policy

joz77 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or registers on the joz77 platform, available at https://joz77.vip (the "Platform"). This Privacy Policy is a binding document that governs our data collection, processing, storage, and sharing practices in connection with the Platform.

This Privacy Policy applies to all users of the Platform, including registered account holders, guests who browse without registering, and individuals who contact our customer support team. By accessing the Platform, creating an account, or submitting personal data in any form, you confirm that you have read and understood this Privacy Policy and consent to the practices described herein.

This Policy should be read together with joz77's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy takes precedence.

joz77 collects the minimum personal data necessary to deliver a secure, compliant, and personalised gaming experience. The categories of personal data we collect include:

2.1 Identity & Registration Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify that you are at least 21 years of age)
• Indonesian national identity card number (NIK from KTP) or passport number
• Gender (optional, for personalisation purposes)
• Username chosen at registration

2.2 Contact Data

• Email address (primary communication channel)
• Mobile phone number (used for SMS verification and two-factor authentication)
• Residential address within Indonesia (city, province — e.g., Jakarta, Surabaya, Bandung, Bali, Yogyakarta, Medan, Semarang)

2.3 Financial & Transaction Data

• Bank account name and account number (for deposit and withdrawal processing via BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, BSI, Bank Permata, or OCBC NISP)
• E-wallet identifiers linked to OVO, DANA, GoPay, ShopeePay, or LinkAja accounts
• Deposit history, withdrawal history, and current account balance (denominated in IDR)
• Source of funds documentation (required for deposits above applicable thresholds, as part of our anti-money-laundering obligations)

2.4 KYC Verification Documents

• Scanned or photographed copy of your Indonesian KTP or passport
• Proof of address (bank statement or utility bill dated within 90 days)
• Selfie photograph (for liveness verification, where required)

2.5 Technical & Usage Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session duration, pages visited, and features interacted with on the Platform
• Login timestamps and logout events
• Wager history, game session data, and betting patterns (used for responsible gaming monitoring)

2.6 Communications Data

• Records of live chat conversations and email correspondence with our support team
• Feedback, complaint submissions, and survey responses
• Marketing communication preferences and opt-in/opt-out records

joz77 collects personal data through the following channels:

• Direct submission: Data you provide when creating your account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the Platform, via cookies, server logs, and analytics tools. See Clause 7 for full details of our cookie practices.
• Payment processors: When you make a deposit or withdrawal via a local Indonesian bank or e-wallet, the relevant payment provider (e.g., BCA, OVO, DANA, GoPay) may share transaction confirmation data with joz77 for reconciliation purposes. joz77 does not receive your full bank account credentials — only the account name, last few digits, and transaction reference necessary to verify the payment.
• Identity verification partners: Where joz77 uses a third-party KYC verification service provider, that provider may process your identity documents and return a verification result to joz77. The full document data is handled by the KYC provider under their own data protection obligations.
• Fraud prevention systems: joz77's automated fraud detection systems analyse device fingerprints, IP addresses, and behavioural signals to identify and prevent fraudulent account activity, multi-accounting, and bonus abuse.

joz77 uses the personal data we collect for the following purposes:

joz77 will not use your personal data for any purpose not listed above without first obtaining your explicit consent, unless joz77 is required to do so by applicable law or regulatory directive.

joz77 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the account agreement with you — including account registration, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) regulations, age verification mandates, fraud reporting obligations, and any other applicable legal requirements.
• Legitimate interests: Processing carried out for joz77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where those interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes — primarily direct marketing communications — where you have given explicit, freely withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

joz77 does not sell your personal data. We may share personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors and banking partners: BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja — for the purpose of processing your deposit and withdrawal transactions. These parties receive only the transaction data necessary to complete the payment.
• KYC and identity verification providers: Third-party services engaged by joz77 to carry out automated identity document verification, liveness checks, and age verification. These providers act as data processors under joz77's instructions.
• Game technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a session token and anonymised player identifier when you launch a game. These providers do not receive your full name, ID number, or financial account details.
• Fraud prevention and security vendors: Specialist third-party services used to detect multi-accounting, bonus abuse, and other fraudulent behaviours. These vendors process technical and behavioural data under strict confidentiality agreements.
• Legal and regulatory authorities: joz77 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies when required by law, court order, or in response to a legitimate legal request. joz77 will notify affected players of such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of joz77's assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and will have the right to request deletion of their data prior to the transfer taking effect.

joz77 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to gather aggregate analytical data that helps us improve the user experience.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies will prevent you from logging into your joz77 account and using core Platform features.

joz77 does not use cookies to track your browsing activity on third-party websites outside of the joz77 Platform. We do not use cross-site tracking or participate in real-time advertising bidding networks.

joz77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable legal or regulatory obligations.

• Active account data: Retained for the full duration of your account's existence, and for a period of five (5) years following permanent account closure, to satisfy anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, in accordance with applicable AML and identity verification regulations. Scanned document images are securely deleted once the retention period expires.
• Transaction records: Retained for five (5) years from the date of the transaction, consistent with financial record-keeping best practices.
• Support communications: Retained for three (3) years from the date of the most recent interaction, to allow joz77 to reference prior correspondence in the event of a follow-up complaint or dispute.
• Marketing opt-in records: Retained for the duration of your consent, plus three (3) years following withdrawal of consent, as evidence of the lawful basis for prior communications.
• Analytical/technical data: Anonymised aggregate data may be retained indefinitely for Platform improvement purposes. Raw IP logs are deleted after 90 days.

Where retention is based solely on joz77's legitimate interests (rather than a legal obligation), you may request early deletion of your data by contacting our support team. joz77 will assess such requests within 30 days and will delete data unless a compelling legal basis for continued retention exists.

joz77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and joz77 servers is encrypted using TLS 1.2 or higher. The Platform enforces HTTPS across all pages and APIs.
• Encryption at rest: Sensitive data fields — including payment account numbers, KYC document images, and identity numbers — are encrypted at the database level using AES-256 encryption.
• Access controls: Personal data is accessible only to joz77 staff members and authorised processors whose role specifically requires it. Role-based access controls (RBAC) are applied, and all access events are logged for audit purposes.
• Two-factor authentication (2FA): joz77 strongly encourages all players to enable 2FA on their accounts. Internal joz77 systems that access player data require 2FA for all staff accounts without exception.
• Penetration testing: The Platform undergoes regular third-party security audits and penetration testing. Identified vulnerabilities are patched according to a risk-prioritised remediation schedule.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, joz77 will notify affected players without undue delay and will take immediate remedial action to contain the breach.

As a joz77 account holder, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and your registered account username.

• Right of access: You may request a copy of all personal data joz77 holds about you. joz77 will provide this within 30 days of receiving a valid request, free of charge for the first request per calendar year.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your account. Some data fields can be updated directly from your account dashboard; others (such as legal name or date of birth) require a formal correction request accompanied by supporting documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Deletion requests are subject to joz77's legal data retention obligations — see Clause 8.
• Right to restriction: You may request that joz77 temporarily restrict the processing of your data while a rectification or objection request is under review.
• Right to data portability: You may request that joz77 provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider.
• Right to object: You may object to processing based on legitimate interests at any time. You also have an unconditional right to object to direct marketing processing, which joz77 will action immediately upon receipt.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

All data rights requests will be acknowledged within 5 business days and fully resolved within 30 calendar days. Complex or high-volume requests may require a 60-day resolution period, in which case joz77 will notify you of the extension within the initial 30-day window.

The joz77 Platform is strictly intended for adults aged 21 and over. joz77 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately delete that data and permanently close the associated account.

If you believe that a person under 21 has registered an account on joz77 using false age information, please contact us immediately at [email protected]. joz77 takes child protection obligations with the utmost seriousness and cooperates fully with law enforcement authorities in all related cases.

The joz77 Platform may contain references to third-party services such as payment providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), and sports organisations (BRI Liga 1, EPL, La Liga, Bundesliga, Champions League). These references do not constitute endorsements, and joz77 is not responsible for the privacy practices of any third-party service.

When you interact with a third-party payment provider or launch a game powered by a third-party studio, you may be subject to that provider's own privacy policy and terms of service. joz77 encourages you to review the privacy policies of all third-party services you interact with through or in connection with the Platform.

joz77 primarily serves players located in Indonesia, and the Platform's primary data infrastructure is designed with Indonesian player data residency in mind. However, some of joz77's third-party service providers — including KYC verification partners and game technology providers — may process data on servers located outside Indonesia.

Where personal data is transferred internationally, joz77 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy. Such safeguards may include:

• Contractual clauses requiring the recipient to maintain equivalent data protection standards
• Processing agreements that limit the recipient's use of data to the specific purpose for which it was transferred
• Technical measures such as pseudonymisation and data minimisation applied before transfer

You may request details of the safeguards applicable to any specific international transfer of your data by contacting our support team at [email protected].

joz77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the Platform. When material changes are made, joz77 will notify registered account holders via their registered email address and/or via a prominent notice on the Platform, providing at least 7 days' advance notice before the changes take effect.

Non-material amendments — such as typographical corrections, clarifications that do not affect the substance of your rights, and updates to contact information — may take effect immediately without prior notice.

The "Last Updated" date displayed at the top of this page always reflects the date of the most recent amendment. Your continued use of the Platform following any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree to any updated terms, you should stop using the Platform and request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way joz77 handles your personal data, please contact our dedicated data protection team using the details below. Our support team includes native Indonesian-speaking agents available at all hours to assist players across all time zones — WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9).

Email: [email protected]

Subject line for data enquiries: "Privacy Policy Enquiry" or "Data Rights Request"

Response time: All privacy-related enquiries are acknowledged within 5 business days and fully resolved within 30 calendar days.

Live chat: 24/7 live chat support is available directly within the joz77 Platform for general account and payment enquiries. For formal data rights requests, email is the preferred channel as it creates a verifiable written record.