Privacy Policy — jp500

jp500 ("we", "us", "our", or "the Platform") operates the online gaming website accessible at jp500.cam and all associated mobile applications, sub-domains, and digital services. This Privacy Policy describes how jp500 collects, uses, stores, shares, and protects the personal data of individuals ("Players" or "you") who register for an Account, visit the Platform, or interact with any jp500 service.

This Policy should be read alongside the jp500 Terms & Conditions, which govern the overall relationship between jp500 and its Players. By accessing the Platform or creating an Account, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

jp500 is designed primarily for verified Indonesian residents aged 21 and above. All data processing activities described in this Policy are conducted in a manner consistent with internationally recognised privacy principles, including data minimisation, purpose limitation, and storage limitation.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, government-issued ID number, address, email address, phone number, IP address, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Controller" — jp500, which determines the purposes and means of processing your Personal Data.
• "Processor" — a third-party service provider that processes Personal Data on behalf of jp500 under a written data processing agreement.
• "Account" — a registered Player account on the jp500 Platform.
• "KYC" — Know Your Customer verification procedures used to confirm a Player's identity, age, and residence.
• "IDR" — Indonesian Rupiah, the sole transactional currency on the jp500 Platform.
• "Cookies" — small text files placed on a Player's device by the jp500 Platform to facilitate session management, analytics, and personalisation.

jp500 collects only the minimum Personal Data necessary to provide a safe, compliant, and high-quality gaming experience. The categories of data we collect are as follows:

3.1 Registration & Identity Data

• Full legal name as it appears on government-issued identification
• Date of birth (to verify the 21+ age requirement)
• Residential address in Indonesia (including city, province, and postal code)
• Email address and mobile phone number
• Username and encrypted password

3.2 KYC Verification Data

• Government-issued photo identification: KTP (Kartu Tanda Penduduk), passport, or SIM (Surat Izin Mengemudi)
• Proof of address documentation dated within 90 days (e.g., bank statement, utility bill)
• Payment method documentation where required for source-of-funds verification
• Selfie photograph taken during the identity verification process

3.3 Financial & Transaction Data

• Bank account details (bank name, account holder name, account number) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, and Bank Danamon
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Deposit and withdrawal history including amounts in IDR, timestamps, and payment method used
• Bonus claims, wagering history, and account balance records

3.4 Technical & Usage Data

• IP address, device type, operating system, and browser version
• Session duration, pages visited, and features accessed on the Platform
• Game play logs including game titles, bet amounts, win/loss outcomes, and timestamps
• Click-stream data and navigation patterns collected via cookies and analytics tools

3.5 Communication Data

• Records of live chat, WhatsApp, and email communications with jp500's customer support team
• Survey and feedback responses submitted voluntarily by Players
• Complaints and formal dispute correspondence

jp500 collects Personal Data through the following channels:

4.1 Directly from You

The majority of Personal Data is collected directly from Players when they register an Account, complete the KYC verification process, make deposits or withdrawal requests, or contact customer support. You are never required to provide more information than is specified in Clause 3; however, failure to provide mandatory data may prevent Account activation, withdrawal processing, or access to certain features.

4.2 Automatically via the Platform

When you access jp500.cam or any associated mobile interface, our servers automatically log technical data including your IP address, device identifiers, browser type, and session timestamps. This data is collected via server logs, cookies, and similar tracking technologies as described in Clause 11.

4.3 From Third-Party Service Providers

jp500 may receive additional identity or fraud-risk information from authorised third-party KYC verification providers, payment processors, and fraud-detection services. This data is used exclusively to supplement our internal verification and compliance procedures and is handled under strict data processing agreements.

jp500 processes your Personal Data for the following specific, documented purposes:

jp500 does not use Personal Data for purposes beyond those listed above without first obtaining your explicit consent or where required by applicable law.

jp500 relies on the following legal bases to process your Personal Data:

• Contractual Necessity: Processing required to fulfil the contract established when you register an Account and accept the jp500 Terms & Conditions — including account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, counter-financing of terrorism (CFT) obligations, and age verification mandates.
• Legitimate Interests: Processing necessary for jp500's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — for example, the use of non-essential analytics cookies or the delivery of personalised marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jp500 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Data is shared with third parties only in the following limited circumstances:

7.1 Service Providers (Processors)

jp500 engages trusted third-party Processors to support Platform operations. These include:

• KYC & Identity Verification Providers: Receive Registration Data and KYC Data to perform automated and manual identity checks.
• Payment Processors: Receive Financial Data necessary to execute deposit and withdrawal transactions via Indonesian local banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Game Studio Partners: Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, and Spribe receive limited Technical Data (session tokens, bet amounts) necessary to deliver live casino and slot content. These studios do not receive Registration Data or Financial Data.
• Fraud Detection & Security Services: Receive Technical Data and transaction patterns to identify and prevent fraudulent activity.
• Customer Support Platforms: Receive Communication Data to manage live chat and email support queues.

All Processors are bound by written data processing agreements that prohibit the use of your data for any purpose other than the specific service they provide to jp500.

7.2 Legal and Regulatory Disclosure

jp500 may disclose Personal Data to competent authorities, regulatory bodies, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive. Such disclosures will be limited to the minimum data required to fulfil the legal obligation.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of jp500's assets, Personal Data held by jp500 may be transferred to the acquiring entity, subject to equivalent privacy protections. Players will be notified of any such transfer that materially affects their data rights with a minimum of 30 days' advance notice.

jp500 operates globally and some of its third-party Processors may be located outside Indonesia. Where Personal Data is transferred to a country that does not provide an equivalent level of data protection, jp500 ensures that appropriate safeguards are in place, including:

• Binding contractual clauses consistent with internationally recognised standard contractual protections
• Vendor due-diligence assessments confirming adequate technical and organisational security measures
• Data processing agreements that specifically prohibit onward transfer without jp500's written authorisation

By using the jp500 Platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia in accordance with the safeguards described above.

jp500 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

After the applicable retention period expires, Personal Data is securely deleted or irreversibly anonymised. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes as it no longer constitutes Personal Data.

jp500 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction.

10.1 Technical Controls

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and jp500's servers is protected by TLS 1.3 transport security, ensuring that payment information and login credentials cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive Personal Data fields (including KYC documents and financial account numbers) are encrypted at rest using AES-256 encryption within jp500's database infrastructure.
• Password Hashing: Player passwords are stored exclusively as salted cryptographic hashes — jp500 cannot retrieve your plaintext password under any circumstances.
• Two-Factor Authentication (2FA): jp500 offers optional 2FA for Player Accounts to provide an additional layer of login security beyond the password alone.

10.2 Organisational Controls

• Access to Personal Data is restricted on a strict need-to-know basis. Only personnel whose job functions require access to specific data categories are granted those privileges.
• All staff with access to Personal Data are bound by confidentiality obligations and receive regular data protection training.
• jp500 conducts periodic security assessments and penetration testing to identify and address vulnerabilities in its systems.

10.3 Data Breach Response

In the event of a Personal Data breach that poses a risk to Players' rights and freedoms, jp500 will notify affected Players without undue delay and take all reasonable steps to contain and remediate the breach. jp500 maintains a documented incident response plan to ensure a coordinated and timely response to any security incident.

jp500 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to analyse usage patterns, and to deliver a personalised experience. The following categories of cookies are used:

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the core functionality of the jp500 Platform, including secure login and payment processing. Withdrawing consent for analytical or marketing cookies will not affect your ability to access games or process transactions.

As a Player on the jp500 Platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact jp500's support team at [email protected] or via 24/7 live chat. jp500 will respond to verified requests within 30 days.

• Right of Access: You have the right to request a copy of the Personal Data jp500 holds about you, along with information about how that data is being processed.
• Right to Rectification: If any Personal Data jp500 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to jp500's overriding legal retention obligations (see Clause 9).
• Right to Restriction of Processing: In certain circumstances, you may request that jp500 restrict the processing of your Personal Data while a dispute or review is ongoing.
• Right to Data Portability: You have the right to receive the Personal Data you provided to jp500 in a structured, commonly used, machine-readable format, and to request that it be transferred to another controller where technically feasible.
• Right to Object: You may object to processing of your Personal Data where jp500 relies on legitimate interests as the legal basis, including profiling carried out for personalisation purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

The jp500 Platform is strictly intended for adults aged 21 and above. jp500 does not knowingly collect Personal Data from individuals under the age of 21. Every Account registration triggers a KYC verification process specifically designed to confirm that the applicant meets the minimum age requirement before any gaming or withdrawal activity is permitted.

If jp500 becomes aware that Personal Data has been collected from a person under the age of 21, all data associated with that individual will be deleted immediately, the Account will be suspended, and any funds deposited will be returned to the verified payment source.

Parents and guardians who believe that a minor may have registered an Account on the jp500 Platform should contact our support team immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving such a report.

jp500 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the scope of Platform services. Material changes to this Policy will be communicated to registered Players via the in-app notification system and/or by email to the address on file, with a minimum of seven days' notice before the changes take effect.

The effective date at the top of this document will be updated each time a revised version is published. We encourage Players to review this Policy periodically. Continued use of the jp500 Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the revised terms, you must cease using the Platform and contact support to close your Account.

The most current version of this Privacy Policy is always accessible at jp500.cam/privacy-policy and supersedes all previous versions.

If you have any questions, concerns, or requests relating to this Privacy Policy or jp500's data processing practices, please reach out through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the in-app chat widget
• WhatsApp: Available 09:00 – 23:00 WIB

jp500 commits to acknowledging all privacy-related enquiries within 24 hours and providing a substantive response within 30 days of receipt. For complex requests or those involving significant volumes of data, we may extend this period by up to an additional 30 days, in which case you will be notified of the extension and the reasons for it.