jawa138 Platform Privacy Notice

This page describes what we collect when you use jawa138 and how we keep that data protected. Online entertainment platforms handle sensitive information—financial details, identity documents, account history—so transparency about data handling is essential. We at jawa138 collect only what is necessary to provide our service, and we do not sell or share your personal information with third parties without your consent.

Our privacy practice is centred on account security and regulatory compliance. When you deposit via QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, we receive your transaction details but do not store your payment credentials. When you place a selection on Liga 1 or Piala AFF markets, we record your selection and outcome for dispute resolution and audit purposes, but we do not share individual betting data with teams, sponsors, or the public.

The sections below outline what data we collect, how long we keep it, your rights, and how to contact us if you have concerns.

What Data We Collect on jawa138

We collect data in four categories: account information, transaction history, device and usage data, and communication records.

We do not collect sensitive data unnecessarily

We never ask for your full bank credentials, PIN, or credit card numbers. Payment processing is handled by our payment partners (QRIS providers, e-wallet operators); we receive only transaction confirmation, not stored payment tokens.

How We Use Your Data on jawa138

We use the data we collect for specific, justified purposes. Account information and KYC documents are used to verify your identity, prevent fraud, and comply with anti-money-laundering regulations. Transaction history is used to process withdrawals, settle disputes, and provide you with an accurate account statement. Device and usage data helps us identify security threats (unusual login patterns, possible account takeover attempts) and improve app performance.

We do not use your data for marketing purposes without consent. We do not sell your information to third parties. During holidays like Idul Fitri, Idul Adha, Imlek, or Nyepi, when traffic surges and our support team is under pressure, we may retain support tickets longer than usual, but we do not disclose your chat history to external parties.

Occasionally, our payment partners (e-wallet operators, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking) may request aggregated, anonymised data about transaction patterns to detect fraud or comply with their own regulatory obligations. In these cases, we share summary statistics (e.g., "payment method X processed Y transactions worth Z total value") but never individual account details.

Where Your Data Is Stored and Who Has Access

Our servers may sit outside your jurisdiction—we use cloud infrastructure hosted in multiple regions for reliability and redundancy. Your data is encrypted both in transit (using SSL/TLS) and at rest (using AES-256 encryption). This means even if someone intercepted network traffic or physically accessed our servers, they could not read your information without the encryption key.

Within jawa138, only authorised staff members have access to your account data. Our support team can view your account history and selections to resolve disputes, but they cannot access your password or withdraw your balance. Our engineering team can view encrypted data for debugging, but they cannot decrypt your personal information without explicit authorisation.

We use third-party processors for specific functions: payment gateways for deposit and withdrawal processing, email providers for password-reset notifications, and analytics services for understanding app usage trends. These processors are bound by confidentiality agreements and may only use your data for the services they provide.

Note: Our analytics service may collect anonymised, aggregated usage data to help us understand how users navigate jawa138. This data cannot be traced back to individual accounts.

Your Rights and Data Access on jawa138

You have the right to access, correct, or request deletion of your personal data. If you want to download your account data, open the account settings menu and select "Export my data." We will provide a CSV file containing your registration details, transaction history, and selections within 5 business days.

If you discover incorrect information (e.g., wrong address on file), contact our support team to request correction. We will verify your identity and update the record within 2 business days. If you request account deletion, we will anonymise your personal information (remove your name, ID, address) but retain transaction records in encrypted form for compliance and dispute resolution—deletion does not erase our regulatory obligations.

You can opt out of non-essential communications (e.g., promotional notifications, survey invitations) through your account settings. However, you cannot opt out of essential communications (e.g., deposit confirmations, withdrawal notifications, security alerts) without disabling your account.

Cookies and Tracking on jawa138

Our app and website use cookies and similar tracking technologies to maintain your session, remember your preferences (e.g., language selection), and improve user experience. Strictly necessary cookies—those required for login and transaction processing—cannot be disabled. Optional cookies (for analytics and personalisation) can be declined without affecting core functionality.

Third-party analytics services may place their own cookies on your device to track your behaviour across websites. You can control third-party cookies through your browser settings or opt-out mechanisms provided by analytics services.

How We Protect Your Account on jawa138

We protect your account through SSL encryption, optional two-factor authentication (2FA), and password-hashing algorithms. We do not store your password in plain text; instead, we hash it using PBKDF2 or bcrypt, making it impossible for us or attackers to recover your original password. If you forget your password, you request a reset, we verify your identity through a security challenge, and you set a new password.

We recommend enabling 2FA for any account with substantial balance or frequent selections. 2FA requires an SMS code or authenticator-app code on login from a new device, preventing account takeover even if someone obtains your password. If you lose your 2FA device, account recovery is available via email backup codes (which we encourage you to store securely).

Data Retention and Jurisdiction

We retain account registration data indefinitely. We retain transaction history indefinitely for compliance and dispute resolution. We retain device and usage logs for 90 days; older logs are deleted unless relevant to an ongoing investigation. We retain support communications for 2 years after resolution; older tickets are archived but not deleted, as they may be needed for future dispute reference.

Our privacy practices comply with applicable laws in jurisdictions where we operate. Our services are available only where local law permits. Users are responsible for verifying that their use of jawa138 complies with their own jurisdiction's data protection and gambling regulations. If your jurisdiction has specific data-protection laws (e.g., right to be forgotten), contact our support team to discuss how those rights apply to your account.

Policy Updates and Contact

We may update this privacy policy to reflect changes in our service, technology, or legal requirements. When we make material changes, we notify users via email and through an in-app notification. Continued use of jawa138 after a policy update constitutes acceptance of the new terms.

If you have questions about our privacy practices, want to request data access or deletion, or believe your data has been mishandled, contact our support team through the in-app help menu or by email. We do not publish guaranteed response times, but we prioritise data-related inquiries and typically respond within 3-5 business days. For specific jurisdiction concerns—particularly in Jakarta, Surabaya, Bandung, Medan, or Semarang—contact us with your location so we can provide region-specific guidance.