Privacy Policy

1. Introduction and Scope

jona69 ("we," "us," or "our") operates the online gaming and sports-betting platform accessible at https://jona69.cam. This Privacy Policy applies to all visitors, registered users, and prospective users of the platform, regardless of where they are located. It governs the collection, use, storage, disclosure, and protection of personal data that we obtain through your interactions with our website, mobile platform, customer-support channels, and any other services operated under the jona69 brand.

jona69 is committed to handling your personal data responsibly and in accordance with internationally recognised data-protection principles. While Indonesia's Personal Data Protection Law (UU PDP, enacted 2022) and its implementing regulations provide the primary legal framework for our Indonesian users, we additionally align our practices with globally recognised standards to ensure the highest level of protection for all players.

This policy does not cover third-party websites, payment processors, or game providers that may be accessed through links or integrations on our platform. We encourage you to review the privacy policies of any third party you interact with.

2. Definitions

• "Personal Data" means any information that identifies or can reasonably identify you as an individual, including your name, email address, phone number, ID card number, payment details, and IP address.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, and deletion.
• "Data Controller" refers to jona69 as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" refers to any third party that processes personal data on behalf of jona69 under a contractual agreement and our instructions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Cookies" means small text files placed on your device by the jona69 website to enable certain technical functions and analytics.

3. Information We Collect

3.1 Information You Provide Directly

When you register an account, undergo identity verification (KYC), make deposits or withdrawals, contact customer support, or participate in promotions, you may provide us with the following categories of personal data:

• Identity Information: Full legal name (as it appears on your Indonesian ID card / KTP or passport), date of birth, nationality, and a copy or photograph of your identity document.
• Contact Information: Email address, mobile phone number, and residential address (including city and province, e.g., Jakarta, Surabaya, Bandung, Medan).
• Financial Information: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) for the sole purpose of processing deposits and withdrawals. We do not store full account numbers or e-wallet PINs — only the minimum reference information required to execute transactions.
• Account Credentials: Username and an encrypted (hashed) version of your password. We never store your password in plain text.
• Communications: Messages, chat transcripts, and email correspondence you send to our customer-support team.

3.2 Information Collected Automatically

When you access and interact with the jona69 platform, our servers and tracking technologies automatically record certain technical information:

• Device and Technical Data: IP address, browser type and version, operating system, device model, screen resolution, and language settings.
• Usage Data: Pages visited, features used, games played, bets placed, session duration, click-stream data, and error logs.
• Cookies and Similar Technologies: Session cookies (deleted when you close your browser), persistent cookies (retained for a set period), and local storage tokens used for authentication, preference retention, and platform analytics.
• Geolocation Data: Approximate location derived from your IP address, used to detect access from restricted jurisdictions and to serve location-appropriate content.

3.3 Information from Third Parties

In certain circumstances, jona69 may receive personal data about you from third parties, including:

• Identity-verification service providers used to confirm your KYC documents.
• Payment processors and banking partners that confirm the status of deposit or withdrawal transactions.
• Fraud-detection and anti-money-laundering (AML) screening services that help us identify suspicious activity.
• Responsible-gaming databases, where applicable, to identify players who have self-excluded from other gaming platforms.

4. How We Use Your Information

jona69 processes your personal data for the following specific and legitimate purposes:

Purpose	Legal Basis	Data Categories Used
Account registration and maintenance	Contractual necessity	Identity, contact, credentials
Identity verification (KYC)	Legal obligation / contractual necessity	Identity, date of birth, ID documents
Processing deposits and withdrawals	Contractual necessity	Financial information, identity
Customer support and dispute resolution	Contractual necessity / legitimate interest	Communications, account data
Fraud prevention and security monitoring	Legal obligation / legitimate interest	Usage data, device data, financial data
Anti-money-laundering (AML) compliance	Legal obligation	Identity, financial information, usage data
Responsible gaming monitoring and intervention	Legitimate interest / legal obligation	Usage data, transaction history
Platform improvement and analytics	Legitimate interest	Usage data, device data, cookies
Promotional communications (with consent)	Consent	Contact information, preferences
Legal and regulatory compliance	Legal obligation	Identity, transaction records

We do not use your personal data for automated decision-making that produces legally significant effects without human oversight, except where required by our fraud-detection or AML systems. In such cases, you may request a manual review of any automated decision by contacting our support team.

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

jona69 uses the following categories of cookies on our platform:

• Strictly Necessary Cookies: Essential for the platform to function correctly, including session management, authentication, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred payment methods, and interface layout choices to improve your experience.
• Analytics Cookies: Collect aggregated, anonymised data on how users interact with the platform, helping us identify areas for improvement. Data from analytics cookies does not identify individual users.
• Security Cookies: Detect and prevent fraudulent activity, protect against cross-site request forgery (CSRF), and maintain session integrity.

5.2 Managing Cookies

Most browsers allow you to control cookies through their settings. You can typically block or delete cookies via your browser preferences. However, please note that disabling strictly necessary cookies will impair your ability to log in and use the jona69 platform. For detailed guidance, consult the help documentation for your browser (Chrome, Firefox, Safari, Edge, etc.).

6. How We Share Your Information

jona69 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your information only in the following limited and controlled circumstances:

• Service Providers and Data Processors: We engage carefully vetted third-party vendors — including payment processors (for BCA, BRI, BNI, Mandiri, OVO, DANA transactions), KYC verification providers, cloud hosting services, and customer-support software operators — who process data solely on our behalf and under binding data-processing agreements.
• Game Providers: Software providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe may receive limited technical identifiers (such as an anonymised player ID) necessary to deliver games and calculate payouts. They do not receive your name, bank details, or ID documents.
• Legal and Regulatory Authorities: We may disclose personal data when required to do so by applicable law, court order, regulatory requirement, or to cooperate with law-enforcement investigations, including AML inquiries.
• Business Transfers: If jona69 is subject to a merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity. We will notify affected users before such a transfer takes effect and before personal data becomes subject to a different privacy policy.
• Responsible Gaming Partners: With your consent or as required by licensing obligations, we may share limited data with problem-gambling support organisations to facilitate self-exclusion or counselling referrals.
• With Your Consent: For any other purpose not described above, we will obtain your explicit consent before sharing your data.

7. International Data Transfers

jona69 is an internationally licensed platform, and your personal data may be transferred to and processed in countries outside of Indonesia where our servers, service providers, or game partners are located. When transferring data internationally, we implement appropriate safeguards to ensure that your information receives a level of protection consistent with internationally recognised standards, including the use of standard contractual clauses with data processors and requiring contractual commitments from partners to maintain equivalent data-protection standards.

8. Data Retention

jona69 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The following general retention periods apply:

• Account Data: Retained for the duration of your account's existence and for a minimum of five (5) years after account closure, to comply with AML and licensing obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by financial regulations.
• KYC Documents: Retained for a minimum of five (5) years after your account is closed or the business relationship ends.
• Customer Support Communications: Retained for a minimum of two (2) years from the date of the last interaction.
• Usage and Analytics Data: Anonymised or aggregated after twelve (12) months; raw usage logs deleted after twenty-four (24) months.
• Cookies: Session cookies are deleted when you close your browser; persistent cookies expire within the timeframe set at their creation, typically no longer than twelve (12) months.

When personal data is no longer required, we securely delete or anonymise it using industry-standard methods. Where deletion is not immediately possible due to technical or legal constraints, we isolate the data from further processing until deletion can be completed.

9. Your Rights as a Data Subject

Depending on your jurisdiction and applicable law, you may have the following rights with respect to your personal data held by jona69. We are committed to honouring these rights in a timely and transparent manner.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we temporarily restrict processing of your personal data while a dispute or correction request is being resolved.
• Right to Data Portability: Where technically feasible and legally required, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. We will honour such objections unless we have compelling legal grounds to continue processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our Data Protection team via the support email listed in Section 13 of this policy. We will respond to all verified requests within thirty (30) calendar days. We may ask you to provide proof of identity before processing your request to prevent unauthorised access to your data.

10. Security Measures

jona69 employs a layered, defence-in-depth security strategy to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our key security controls include:

• Transport Security: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL), ensuring that data in transit cannot be intercepted by third parties.
• Data Encryption at Rest: Sensitive data fields, including identity document references and financial identifiers, are encrypted in our databases using AES-256 encryption.
• Password Hashing: User passwords are never stored in plain text. We apply industry-standard one-way cryptographic hashing (bcrypt) with salting, making stored password hashes computationally infeasible to reverse.
• Access Controls: Access to personal data within jona69 is restricted on a strict need-to-know basis. Staff members are granted the minimum level of access required to perform their roles, and all access is logged and audited.
• Two-Factor Authentication (2FA): We offer 2FA for player accounts and require it for all administrative access to internal systems containing personal data.
• Penetration Testing and Security Audits: Our platform undergoes regular penetration testing and security audits conducted by independent third-party security firms.
• Fraud Detection Systems: Automated systems monitor transactions and login activity in real time for patterns indicative of fraud, account takeover, or money laundering.
• Incident Response Plan: In the event of a confirmed data breach that poses a risk to your rights and freedoms, jona69 will notify affected users and relevant authorities within the timeframes prescribed by applicable law.

11. Children and Minors

The jona69 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or store personal data from individuals under the age of 21. If we discover or are notified that personal data has been submitted by a person under 21, we will promptly close the associated account, reverse any transactions, and delete the relevant data. If you are a parent or guardian and believe your child has registered on our platform, please contact us immediately via the support channels listed in Section 13.

12. Changes to This Privacy Policy

jona69 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data-processing practices, legal obligations, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or an in-platform notification prior to the changes taking effect.

Your continued use of the jona69 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using our services and may request account closure and deletion of your data as described in Section 9.

We recommend reviewing this page periodically so that you remain informed about how we are protecting your information. Archived versions of previous policies are available upon request from our support team.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please reach out to our dedicated Data Protection team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through your account dashboard — the fastest way to reach us.
• WhatsApp: Available 24/7 for registered account holders.

Please mark your message with the subject line "Privacy Request" and include your registered username or email address so we can locate your account and respond efficiently. We aim to acknowledge all privacy-related inquiries within 48 hours and to resolve them within 30 calendar days.