joy88 Privacy Policy

joy88 operates the online casino and sportsbook platform accessible at https://joy88.vu (the "Platform"). In the context of this Privacy Policy, "joy88", "we", "us", and "our" refer to the Platform operator and any affiliated entities responsible for collecting and processing your personal data.

joy88 acts as the data controller in respect of the personal information collected from players who register and use the Platform. We are committed to handling your data responsibly, transparently, and in accordance with internationally recognised data protection standards.

This Privacy Policy applies to all visitors, registered account holders, and users of the joy88 Platform, including players based in Jakarta, Surabaya, Medan, Bandung, Bali, and across all of Indonesia.

joy88 collects personal data from you in three ways: information you provide directly, information generated automatically through your use of the Platform, and information received from trusted third-party verification partners.

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you access and use the Platform, we automatically collect certain technical and behavioural data:

• Device and access data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network information.
• Session data: Pages visited, time spent on each page, clickstream data, search queries within the Platform, and feature interactions.
• Gameplay and betting data: Bet history, game session records, wager amounts (in IDR), win/loss outcomes, bonus redemption activity, and wagering requirement progress.
• Fraud-detection signals: Login timestamps, geographic location (city-level, derived from IP), concurrent session indicators, and device fingerprint data used to detect account-sharing or bot activity.

2.3 Information from Third Parties

In limited circumstances, joy88 may receive data about you from trusted third-party sources, including:

• Identity verification service providers used to cross-check the documents you submit during KYC;
• Payment processing partners (Indonesian bank gateways and e-wallet operators) confirming the status of deposit or withdrawal transactions;
• Fraud-prevention and anti-money-laundering screening services that check your details against publicly available sanctions and watchlists.

joy88 uses your personal data only for the specific purposes described below. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

joy88 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to create your account, provide access to the Platform, process deposits and withdrawals, and settle bets — all of which are required to deliver the service you signed up for.
• Legal obligation: Processing required to comply with our international licensing conditions, including KYC identity verification, age verification (21+), and transaction record-keeping for anti-money-laundering purposes.
• Legitimate interests: Processing carried out to protect the Platform and its users from fraud, money laundering, bonus abuse, and multi-accounting; to analyse Platform performance; and to maintain and improve the security of our systems. We always balance our legitimate interests against your rights and freedoms before relying on this basis.
• Consent: Where we send you promotional emails or in-Platform marketing communications, we do so only on the basis of your explicit consent given during registration or subsequently via your Account settings. You may withdraw this consent at any time by updating your communication preferences in your Account dashboard or by contacting our support team.

5.1 We Do Not Sell Your Data. joy88 does not sell, rent, exchange, or otherwise transfer your personal data to any third party for their own commercial or marketing purposes. Full stop.

5.2 Service Providers. We share personal data with carefully selected third-party service providers who process data strictly on our behalf and under our instructions. These include:

• Payment processors: Indonesian bank gateways and e-wallet operators (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) — to process financial transactions;
• Identity verification partners: KYC service providers who verify the authenticity of identity documents submitted during account verification;
• Fraud prevention services: Anti-money-laundering and fraud-screening platforms that check player details against sanctions lists and risk databases;
• IT infrastructure providers: Hosting, cloud storage, and content delivery network partners who store Platform data under data processing agreements;
• Customer support platforms: Live chat and communication tools used to deliver 24/7 support to Indonesian players.

All third-party service providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose beyond delivering the specified service to joy88.

5.3 Legal Disclosures. joy88 may disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required to do so by applicable law, a valid court order, or our international licensing obligations. We will notify you of such disclosures where legally permitted to do so.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of joy88's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change in data controller identity prior to the transfer taking effect.

joy88 uses a limited set of cookies and similar tracking technologies to operate the Platform efficiently and securely. We do not use advertising cookies, cross-site tracking pixels, or third-party profiling technologies.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary or fraud-detection cookies will impair or prevent your ability to use the Platform. joy88 does not respond to browser "Do Not Track" signals at this time, as no consistent industry standard for such signals currently exists.

joy88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to meet applicable legal retention obligations.

• Active accounts: Personal data is retained for the duration of your account relationship with joy88, plus a mandatory post-closure retention period (see below).
• Closed accounts — standard: Following voluntary account closure with no outstanding disputes or regulatory flags, identity and transaction records are retained for a minimum of five (5) years from the date of closure to meet our international licensing obligations.
• Closed accounts — fraud or AML flag: Where an account was closed due to suspected fraud, money laundering, or regulatory investigation, records are retained for up to ten (10) years or for the duration of any active investigation or legal proceeding, whichever is longer.
• Marketing data: If you withdraw consent for promotional communications, your contact details are removed from marketing lists within 30 days. Transactional records are not affected.
• Support communications: Live chat transcripts, email correspondence, and WhatsApp support records are retained for three (3) years from the date of the interaction.

As a joy88 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via the channels listed in Clause 14. We will acknowledge your request within one business day and respond in full within 30 days.

Verification Requirement. For the security of all players, joy88 will require you to verify your identity before processing any data rights request. This prevents unauthorised third parties from accessing or deleting another person's account data.

joy88 takes the security of your personal and financial data seriously. We implement a layered set of technical and organisational security measures to protect your information against unauthorised access, disclosure, alteration, and destruction.

Technical measures include:

• 256-bit TLS/SSL encryption on all data transmitted between your device and the joy88 Platform;
• Encrypted storage of sensitive data at rest, including identity documents and financial records;
• Multi-factor authentication (MFA) available for all player accounts;
• Automated intrusion detection and real-time threat-monitoring systems;
• Regular vulnerability assessments and penetration testing conducted by independent security specialists;
• Strict access controls ensuring that only authorised staff with a genuine need can access player data, on a need-to-know basis.

Organisational measures include:

• Mandatory data protection training for all joy88 staff with access to player data;
• Documented data breach response procedures with a commitment to notify affected players of any significant breach within 72 hours of discovery;
• Data processing agreements with all third-party service providers setting out their security obligations.

The joy88 Platform is strictly for adults aged 21 years and over. We do not knowingly collect personal data from any person under the age of 21.

During registration, all players are required to confirm their date of birth and, where requested, to submit documentary proof of age via the KYC process. Any account found to be registered by a person under the age of 21 will be closed immediately, all balances forfeited, and the incident reported to relevant authorities in accordance with our international licensing obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account on joy88, please contact our support team immediately via live chat or at [email protected]. We will investigate and take appropriate action within 24 hours of receiving your report.

joy88 is an internationally operated Platform. As a result, your personal data may be processed and stored on servers located outside of Indonesia. In all cases where data is transferred internationally, joy88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards for international transfers include:

• Contractual data processing clauses with all third-party processors receiving data, requiring them to maintain data protection standards consistent with internationally recognised frameworks;
• Transfer only to countries or processors that maintain adequate data protection regimes as assessed by our data protection team;
• Encryption of data in transit for all cross-border transfers.

By registering an account with joy88, you acknowledge that your personal data may be transferred to, stored, and processed in countries outside of Indonesia for the purposes described in this Privacy Policy, subject to the safeguards above.

The joy88 Platform does not contain links to external third-party websites. All navigation within the Platform directs users to joy88-operated pages only. If any external link appears as a result of a technical error or a third-party game studio's embedded interface, joy88 accepts no responsibility for the privacy practices or data handling of that external destination.

When you interact with third-party payment providers (such as your BCA, BRI, BNI, Mandiri, or e-wallet app during a deposit or withdrawal), you are subject to that provider's own terms and privacy policy for the duration of that interaction. joy88 has no visibility into, or control over, how those providers handle your data within their own systems.

joy88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Platform features, legal obligations, or regulatory requirements. When we make material changes to this Policy, we will:

• Update the "Last updated" date at the top of this page;
• Display a prominent notice on the Platform informing active players of the update;
• Where the changes are significant and affect how we process data you have already provided, send a direct notification to your registered email address at least 14 days before the changes take effect.

Your continued use of the joy88 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must stop using the Platform and may request closure of your account by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way joy88 processes your personal data, please reach out to us through any of the following channels:

• Email: [email protected] — include "Privacy Request" in the subject line for faster routing to our data protection team.
• WhatsApp: +62 811 0000 8888 — available 24/7, with Indonesian-speaking agents ready to assist.
• Live Chat: Available directly on the Platform, 24 hours a day, 7 days a week (WIB).

When submitting a data rights request (Clause 8), please provide your registered username or account email address and a brief description of your request. We will acknowledge receipt within one business day and complete our response within 30 days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you promptly and explain the reason for the extension.