Privacy Policy — jaya46

Clause 1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "jaya46", "we", "us", or "our" refers to the operator of the jaya46 platform at jaya46.app.
• "Platform" means the jaya46 website, mobile-optimised web application, and all associated services accessible at jaya46.app.
• "Player", "you", or "your" means any individual who has registered a jaya46 account or who accesses the Platform.
• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, national identity number, email address, phone number, payment details, device identifiers, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, jaya46.
• "Data Processor" means a third party that processes Personal Data on behalf of jaya46, strictly according to jaya46's instructions.
• "KYC" means Know Your Customer — the identity verification process requiring Players to submit government-issued identification and proof of address.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences, and analytical data.
• "IDR" and "Rp" refer to Indonesian Rupiah, the sole transaction currency of the Platform.

Clause 2 Data Controller

jaya46 is the Data Controller for all Personal Data collected through the Platform. As Data Controller, jaya46 is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently, and that appropriate technical and organisational measures are in place to protect it.

For all privacy-related enquiries, including data access requests, correction requests, and deletion requests, the Data Controller may be contacted at:

• Email: [email protected]
• Subject line: "Privacy Request — [Your Registered Username]"
• Response time: Within 30 days of receipt of a valid, complete request.

Clause 3 Personal Data We Collect

jaya46 collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:

3.1 Identity and Registration Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify the 21+ age requirement)
• Indonesian National Identity Card (KTP) number, or passport number for non-Indonesian passport holders
• Residential address in Indonesia (city, province, postal code)
• Username and encrypted password

3.2 Contact Data

• Email address registered to your Account
• Indonesian mobile phone number (used for SMS OTP and WhatsApp support)

3.3 Financial and Payment Data

• Bank account details for withdrawal processing (bank name, account number, account holder name) — applicable to BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP, and BSI accounts
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja accounts (registered phone number or account ID)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used, all denominated in IDR
• Bonus credits received, wagering activity, and withdrawal requests

3.4 KYC Verification Documents

• Scanned or photographed copy of government-issued photo identity document (KTP or passport)
• Proof of residential address (utility bill, bank statement, or equivalent) where required by enhanced due-diligence procedures
• Selfie or liveness-check image where required for biometric identity matching

3.5 Technical and Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, browser type and version
• Session timestamps, pages visited, and navigation paths within the Platform
• Game session data: games played, bet amounts (in IDR), wager outcomes, session duration
• Login history and failed authentication attempts

3.6 Communications Data

• Content of live chat conversations with jaya46 support agents
• Email correspondence sent to or received from [email protected]
• WhatsApp message content where you initiate contact via the jaya46 WhatsApp support number

Clause 4 How Personal Data Is Collected

jaya46 collects Personal Data through the following channels:

• Directly from you — when you register an Account, complete the KYC verification process, make a deposit or withdrawal request, contact support, or participate in a promotion.
• Automatically — through Cookies, web beacons, and server logs when you access the Platform, as described in Clause 9.
• From third-party service providers — including identity verification providers, payment processors (banks and e-wallet operators), fraud detection services, and analytics providers, to the extent necessary to verify your identity, process transactions, and maintain Platform integrity.

Clause 5 Lawful Basis for Processing

jaya46 processes Personal Data on the following lawful bases:

Processing Activity	Lawful Basis
Account registration and management	Performance of a contract with you
KYC identity verification	Legal obligation (AML compliance)
Payment processing (deposits & withdrawals in IDR)	Performance of a contract with you
Fraud prevention and security monitoring	Legitimate interests of jaya46
Responsible gaming monitoring and intervention	Legal obligation and legitimate interests
Customer support communications	Performance of a contract with you
Platform analytics and improvement	Legitimate interests of jaya46
Promotional communications (where opted in)	Consent
Regulatory record-keeping and reporting	Legal obligation

Clause 6 Purposes of Processing

jaya46 uses Personal Data for the following clearly defined purposes:

1. Account administration: Creating, maintaining, and closing your jaya46 Account; authenticating your identity at login; managing your Account preferences and settings.
2. Age and identity verification: Confirming that you are at least 21 years of age and a resident of Indonesia, in compliance with jaya46's eligibility requirements and applicable gaming standards.
3. Transaction processing: Receiving deposits from and sending withdrawals to your nominated BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja account, all in Indonesian Rupiah.
4. Anti-money-laundering compliance: Monitoring transaction patterns, conducting enhanced due diligence where required, and maintaining records as mandated by applicable AML regulations.
5. Responsible gaming: Monitoring gaming behaviour to identify signs of problem gambling; enforcing deposit limits, cool-off periods, and self-exclusion restrictions at a player's request; providing targeted responsible gaming resources.
6. Fraud and security: Detecting and preventing fraudulent account activity, bonus abuse, multiple-account violations, and unauthorised access attempts.
7. Customer support: Responding to enquiries, complaints, and dispute resolution requests submitted via live chat, email, or WhatsApp.
8. Platform improvement: Analysing aggregated, anonymised usage data to improve the Platform's performance, user experience, and product offering.
9. Promotional communications: Sending bonus offers, tournament announcements, and promotional updates to Players who have opted in to marketing communications. You may withdraw this consent at any time by contacting [email protected].

Clause 7 Third-Party Sharing

jaya46 does not sell, rent, or license your Personal Data to third parties for their own commercial purposes. Personal Data is shared with third parties only in the following circumstances:

• Payment processors: Banks (BCA, BRI, BNI, Mandiri, and others) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum payment and identity information required to execute deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party identity verification services may receive copies of your KYC documents and identity data solely for the purpose of verifying your identity on jaya46's behalf.
• Game studio providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe may receive session identifiers and anonymised player activity data for game integrity, RTP auditing, and jackpot validation purposes.
• Fraud and security services: Specialised third-party providers may receive technical data (IP address, device fingerprint, login history) to assist with fraud detection and prevention.
• Legal and regulatory authorities: jaya46 will disclose Personal Data to competent authorities where legally required to do so, including in response to valid court orders, regulatory investigations, or applicable AML reporting obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of jaya46's assets, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

Clause 8 International Data Transfers

jaya46's primary servers are located in secure data centres operating under international gaming and data protection standards. As the Platform serves Indonesian players and processes payments via Indonesian banks and e-wallets, some Personal Data may be processed by service providers located outside Indonesia.

Where Personal Data is transferred internationally, jaya46 ensures that the transfer is subject to appropriate safeguards, which may include contractual clauses requiring the recipient to provide an equivalent level of data protection to that described in this Policy. If you have questions about the specific safeguards in place for international transfers relevant to your data, contact [email protected].

Clause 9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your browser or device when you visit the Platform. jaya46 uses cookies and similar technologies (web beacons, local storage) to enable essential Platform functions and to improve your experience.

9.2 Categories of Cookies Used

Cookie Type	Purpose	Retention
Essential	Maintain your login session, remember language preferences, and enable Platform security features. These cannot be disabled without affecting core Platform functionality.	Session / up to 30 days
Functional	Remember your display preferences, favourite games, and responsible gaming settings between sessions.	Up to 12 months
Analytical	Collect anonymised data on page views, navigation paths, and game usage to help jaya46 improve the Platform.	Up to 24 months
Security	Detect and prevent fraudulent access attempts, bot activity, and account takeover patterns.	Up to 90 days

9.3 Managing Cookies

You may configure your browser to block or delete cookies. Please note that disabling essential cookies will impair your ability to log in and use core Platform features. Analytical and functional cookies may be disabled without affecting access to your Account.

Clause 10 Data Retention

jaya46 retains Personal Data for no longer than is necessary for the purpose for which it was collected, subject to any longer retention period required by applicable law. The following retention periods apply as a general guide:

• Active Account data (identity, contact, payment information): Retained for the duration of the Account relationship.
• Transaction records (deposit and withdrawal history in IDR): Retained for a minimum of 5 years following the date of each transaction, in accordance with AML record-keeping requirements.
• KYC documents (KTP, passport copies, proof of address): Retained for a minimum of 5 years following account closure or the last transaction date, whichever is later.
• Support communications (live chat transcripts, email correspondence): Retained for 2 years from the date of the communication, or longer where the communication relates to an ongoing dispute.
• Technical and usage data (IP logs, session data): Retained for up to 12 months from collection for security and fraud purposes, and up to 24 months in anonymised form for analytics.
• Closed Account data: Following account closure not related to fraud or regulatory action, Personal Data is anonymised or deleted within 6 months, subject to mandatory retention periods above.

Clause 11 Your Privacy Rights

As a jaya46 Player, you have the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Request — [Your Username]":

• Right of access: You may request a copy of all Personal Data jaya46 holds about you, together with information about how it is being processed.
• Right of rectification: You may request correction of any inaccurate or incomplete Personal Data held in your Account. Minor updates (email address, phone number) may be made directly within your Account settings.
• Right of erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that erasure requests cannot be fulfilled where jaya46 is required by law to retain the data (e.g., AML transaction records).
• Right to restrict processing: You may request that jaya46 restricts processing of your Personal Data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: You may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format, where technically feasible.
• Right to object: You may object to processing carried out on the basis of jaya46's legitimate interests, including processing for direct marketing purposes. You may withdraw consent for marketing communications at any time without affecting the lawfulness of processing prior to withdrawal.
• Right not to be subject to automated decisions: Where jaya46 makes decisions about your Account (such as risk-based withdrawal holds) using automated processes, you have the right to request human review of those decisions.

jaya46 will respond to valid privacy requests within 30 days. Where a request is particularly complex, jaya46 may extend this period by a further 30 days, notifying you of the extension within the initial 30-day period.

Clause 12 Security Measures

jaya46 implements a layered set of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, and destruction:

• Transport security: All data transmitted between your browser and jaya46 servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Storage security: Personal Data and KYC documents are stored in AES-256 encrypted form on access-controlled servers with multi-factor administrative access requirements.
• Access controls: Access to Personal Data within jaya46's systems is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to background checks and confidentiality obligations.
• Two-factor authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their Account. jaya46 may require 2FA for high-value withdrawal requests.
• Fraud monitoring: Automated systems continuously monitor Account activity for signs of unauthorised access, unusual transaction patterns, and device anomalies.
• Third-party security assessments: jaya46 conducts periodic security reviews of its own systems and requires Data Processors to maintain equivalent security standards under the terms of their data processing agreements.

Despite these measures, no online platform can guarantee absolute security. If you have reason to believe that your Account has been compromised, contact jaya46 support immediately at [email protected] or via live chat.

Clause 13 Minors

The jaya46 Platform is strictly intended for adults aged 21 and above. jaya46 does not knowingly collect Personal Data from persons under the age of 21. If jaya46 becomes aware that Personal Data has been submitted by a person under 21, the relevant Account will be immediately closed, the data deleted, and any balance forfeited in accordance with the Terms & Conditions.

If you believe that a minor may have registered an Account using false age information, please report this to [email protected] immediately so that appropriate action can be taken.

Clause 14 Amendments to This Policy

jaya46 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect your rights or the way your Personal Data is processed — will be communicated to registered Players via email to the address on their Account, no less than 7 days before the change takes effect.

The effective date at the top of this Policy indicates when the current version came into force. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the Platform and may close your Account in accordance with the Terms & Conditions.

Prior versions of this Privacy Policy are available upon written request to [email protected].

Clause 15 Contact

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the jaya46 privacy team through the following channels:

• Email: [email protected] — use the subject line "Privacy Request" for fastest routing
• Live Chat: Available 24/7 from your Account dashboard
• WhatsApp: +62 811 0000 4646 (available 07:00–24:00 WIB)

jaya46 is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with jaya46's response to a privacy request, you may escalate the matter to the relevant data protection authority or seek independent legal advice.

This Privacy Policy was last reviewed and updated on 1 January 2026. Prior versions are available upon written request to [email protected].