Privacy Policy

1. Introduction

This Privacy Policy applies to all users of sja138 (the "Platform", "We", "Us", or "Our"), the online betting platform accessible at https://sja138.cam. This policy describes our practices regarding the collection, use, disclosure, and protection of personal information provided by users (the "User", "You", or "Your") when accessing or using our services.

sja138 operates as an online betting platform serving Indonesian players across Jakarta, Surabaya, Medan, Bandung, Bali, and other regions throughout Indonesia. We offer comprehensive sports betting markets including football (bandar bola), live casino games, slot machines, and togel (Indonesia's traditional numbers lottery). Our platform processes deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).

We recognize that privacy is a fundamental right, and we are committed to transparency about our data handling practices. This policy complies with international data protection principles and reflects our commitment to responsible data stewardship. If you have questions or concerns about this policy, please contact our Data Protection Officer using the contact details provided at the end of this document.

2. Information We Collect

sja138 collects several types of information to provide, maintain, protect, and improve our services. The categories of data we collect include:

2.1 Information You Provide Directly

When you register an account with sja138, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (KTP number for Indonesian residents)
• Contact Information: Email address, mobile phone number, residential address including street, city, postal code, and province
• Account Credentials: Username and encrypted password (we do not store plain-text passwords)
• Financial Information: Bank account details including bank name, account number, account holder name, and e-wallet information for deposits and withdrawals
• Verification Documents: Copies of government-issued ID (KTP, passport), proof of address (utility bills, bank statements), and proof of payment method ownership
• Communication Records: Correspondence with customer support via live chat, email, WhatsApp, including the content of messages, attachments, and support tickets

2.2 Information Collected Automatically

When you use sja138 services, we automatically collect certain technical and usage data:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID)
• Connection Data: IP address, internet service provider (ISP), approximate geographic location (city/region level, not precise GPS coordinates)
• Usage Data: Pages visited, games played, betting history including bet amounts and outcomes, deposit and withdrawal transactions, login timestamps, session duration, referral source
• Technical Data: Error logs, crash reports, performance metrics, system diagnostics

2.3 Information from Third Parties

We may receive limited information from third-party sources to verify your identity, prevent fraud, or facilitate payments:

• Payment Processors: Transaction confirmation, payment method verification, fraud screening results
• Identity Verification Services: Age verification, identity authentication, address validation
• Fraud Prevention Agencies: Risk scoring, blacklist checks, suspicious activity reports

3. How We Use Your Data

sja138 uses the collected information for the following legitimate business purposes:

3.1 Service Delivery and Account Management

• Creating and managing your account on the sja138 platform
• Processing deposits, withdrawals, and other financial transactions
• Verifying your identity, age, and residency to comply with legal requirements
• Authenticating your access and preventing unauthorized account use
• Providing customer support and responding to inquiries
• Processing bets and settling winnings according to game outcomes
• Administering bonuses, promotions, and loyalty rewards

3.2 Security and Fraud Prevention

• Detecting and preventing fraudulent transactions, money laundering, and other illegal activities
• Monitoring betting patterns to identify collusion, bonus abuse, and terms violations
• Investigating suspicious activity and resolving disputes
• Protecting the security and integrity of our platform and services
• Complying with anti-money laundering (AML) and know-your-customer (KYC) regulations

3.3 Service Improvement and Analytics

• Analyzing user behavior and preferences to improve platform functionality
• Conducting research to develop new features and services
• Optimizing website performance, loading speeds, and user experience
• Testing new features and measuring their effectiveness
• Generating aggregated statistics and reports (anonymized, non-personal data)

3.4 Marketing and Communications

• Sending promotional emails about new games, bonuses, and special offers (with your consent)
• Displaying personalized content and recommendations based on your preferences
• Notifying you about important account updates, policy changes, and service announcements
• Conducting surveys and requesting feedback to improve our services

3.5 Legal and Regulatory Compliance

• Complying with applicable laws, regulations, and legal processes in Indonesia and internationally
• Responding to lawful requests from government authorities, courts, and law enforcement
• Enforcing our Terms & Conditions and other policies
• Protecting our legal rights and defending against claims
• Maintaining records for audit and regulatory purposes

4. Data Sharing and Disclosure

sja138 does not sell your personal information to third parties. We share your data only in the limited circumstances described below:

4.1 Service Providers and Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: To facilitate deposits and withdrawals via Indonesian banks and e-wallets
• Identity Verification Services: To verify age, identity, and address during KYC procedures
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, and other suppliers providing casino games and slots
• Cloud Hosting Providers: To store data on secure servers and provide platform infrastructure
• Customer Support Tools: Live chat software, email platforms, and ticketing systems
• Analytics Services: Website analytics, performance monitoring, and user behavior tracking

These service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws. We conduct due diligence to ensure our partners maintain adequate security standards.

4.2 Legal and Regulatory Authorities

We may disclose your information to government agencies, regulators, law enforcement, or courts when:

• Required by law, court order, subpoena, or legal process
• Necessary to comply with regulatory investigations or audits
• Requested by law enforcement in connection with criminal investigations
• Needed to protect our legal rights, property, or safety, or that of our users or the public
• Required to prevent fraud, money laundering, or other illegal activities

4.3 Business Transfers

In the event sja138 undergoes a merger, acquisition, reorganization, asset sale, or bankruptcy, your personal information may be transferred to the successor entity. You will be notified via email or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you have explicitly consented to such sharing, for example when participating in co-branded promotions or third-party loyalty programs.

5. Data Security Measures

sja138 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols
• Secure Storage: Personal data is encrypted at rest on secure servers with restricted physical and digital access
• Firewalls: Network-level protection to prevent unauthorized intrusion attempts
• Access Controls: Multi-factor authentication, role-based permissions, and the principle of least privilege
• Security Monitoring: 24/7 system monitoring, intrusion detection, and automated threat response
• Regular Updates: Timely software patches and security updates to address vulnerabilities

5.2 Organizational Security

• Employee Training: All staff receive data protection and security awareness training
• Confidentiality Agreements: Employees with access to personal data sign non-disclosure agreements
• Background Checks: Pre-employment screening for positions with data access
• Security Audits: Regular internal and third-party security assessments
• Incident Response Plan: Procedures to detect, respond to, and recover from data breaches

5.3 Your Security Responsibilities

While we implement robust security measures, you also play a crucial role in protecting your account:

• Use a strong, unique password combining letters, numbers, and symbols
• Never share your login credentials with anyone
• Log out after each session, especially on shared devices
• Enable two-factor authentication (2FA) if available
• Report suspicious activity or unauthorized access immediately to customer support
• Keep your contact information current so we can reach you about security matters

6. Data Retention

sja138 retains your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Retention Periods

• Active Accounts: Personal data is retained for the duration of your account's active status
• Closed Accounts: Account information is retained for 7 years after account closure to comply with financial regulations and anti-money laundering requirements
• Transaction Records: Betting history, deposits, and withdrawals are retained for 10 years for audit and dispute resolution purposes
• KYC Documents: Identity verification documents are retained for 5 years after the end of the business relationship
• Marketing Data: Marketing preferences and communication history are deleted within 30 days of unsubscribing or account closure
• Technical Logs: Server logs, IP addresses, and analytics data are retained for 12 months unless required longer for security investigations

6.2 Data Deletion

After the applicable retention period expires, we securely delete or anonymize your personal information. Anonymized data (with all identifiable elements removed) may be retained indefinitely for statistical analysis and service improvement purposes.

7. Your Privacy Rights

As a sja138 user, you have the following rights regarding your personal data:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To exercise this right, contact our Data Protection Officer at the email address provided below. We will provide the requested information within 30 days in a structured, commonly used, and machine-readable format.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you can update it directly in your account settings or request correction by contacting customer support. We will update your information promptly upon verification.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent. However, we may retain certain information where required by law (e.g., transaction records for regulatory compliance).

7.4 Right to Restrict Processing

You can request that we limit the processing of your personal data in specific situations, such as while we verify the accuracy of disputed data or investigate an objection you've raised.

7.5 Right to Data Portability

You have the right to receive your personal data in a portable format and, where technically feasible, request that we transmit it directly to another service provider.

7.6 Right to Object

You can object to processing of your personal data for direct marketing purposes at any time by clicking the "unsubscribe" link in marketing emails or adjusting your communication preferences in account settings. You may also object to processing based on legitimate interests by contacting us.

7.7 Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

7.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer at the email address provided in Section 11. We will respond to your request within 30 days. In some cases, we may request additional information to verify your identity before fulfilling your request.

8. Cookies and Tracking Technologies

sja138 uses cookies and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize you on return visits, remember your preferences, and provide a more personalized experience.

8.2 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality, login authentication, and security features. These cannot be disabled without affecting your ability to use our services.
• Performance Cookies: Collect anonymous usage statistics to help us understand how visitors interact with our platform and identify areas for improvement.
• Functionality Cookies: Remember your preferences (language, currency, display settings) to provide a customized experience.
• Marketing Cookies: Track your browsing activity to deliver relevant advertisements and measure campaign effectiveness. These are used only with your consent.

8.3 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, though this may affect website functionality. You can opt out of marketing cookies through our cookie consent banner when you first visit the site or by adjusting your preferences in account settings.

9. Children's Privacy

sja138 services are intended solely for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21. If we become aware that a user is under the minimum age, we will immediately suspend the account, delete all associated personal data, and refund any remaining balance to the payment source.

If you are a parent or guardian and believe your child has provided personal information to sja138, please contact us immediately at the email address provided below so we can take appropriate action.

10. Changes to This Privacy Policy

sja138 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify users through one or more of the following methods:

• Email notification to the address associated with your account
• Prominent notice on the sja138 website homepage
• In-app notification upon your next login

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this document indicates when the most recent changes were made. Continued use of sja138 services after policy changes constitutes acceptance of the updated terms.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer:

• Email: [email protected] (Please include "Privacy Inquiry" in the subject line)
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours during business hours (Monday-Sunday, 09:00-21:00 WIB)
• Live Chat: Available 24/7 for urgent account security concerns

For general customer support inquiries unrelated to privacy, please use our standard support channels (live chat, email, WhatsApp). Our customer support team is available around the clock to assist with account issues, technical problems, and payment inquiries.