Data & Privacy
At jon33, your privacy is a fundamental commitment, not a compliance checkbox. This Privacy Policy explains precisely what personal data we collect, why we collect it, how it is used, and the rights you hold over your information as a player on our platform.
Last Updated: January 20261.1 jon33 ("the Company", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the jon33 Platform — including registered players, prospective players who browse the site without registering, and former account holders whose data is retained under our legal obligations.
1.2 This Privacy Policy governs the collection, processing, storage, disclosure, and deletion of personal data in connection with your use of the jon33 website (https://jon33.cam), any associated mobile interfaces, and all communication channels operated by jon33, including live chat and email support.
1.3 jon33 primarily serves players resident in Indonesia and processes personal data in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework and applicable Indonesian data protection obligations under Government Regulation No. 71 of 2019 (PP 71/2019) on the Operation of Electronic Systems and Transactions.
1.4 This Policy should be read in conjunction with the jon33 Terms & Conditions, which govern the broader contractual relationship between you and jon33.
2.1 jon33 collects personal data across several categories depending on your relationship with the Platform. The table below summarises the categories of data we collect and why each category is necessary:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number (KTP / passport) | Account registration, KYC verification, age and eligibility verification (21+) |
| Contact Data | Email address, mobile phone number, residential address in Indonesia (city, province, postal code) | Account communication, customer support, transactional notifications, marketing (where consented) |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts in IDR | Payment processing, withdrawal verification, AML compliance, fraud detection |
| Verification Data | Copies of identity documents, selfie photographs, proof-of-address documents, payment method screenshots | KYC compliance, account security, fraud prevention |
| Technical Data | IP address, device type and model, operating system, browser type and version, screen resolution, session duration, login timestamps | Platform security, fraud detection, service optimisation, geolocation verification |
| Gameplay Data | Game sessions, bet amounts, bet outcomes, game preferences, bonus usage, wagering activity | Account management, responsible gaming monitoring, dispute resolution, product improvement |
| Communication Data | Live chat transcripts, support email content, player feedback, complaint records | Customer service delivery, dispute resolution, quality assurance, staff training |
| Marketing Preferences | Promotional opt-in/opt-out status, communication channel preferences, bonus claim history | Delivering relevant offers, respecting communication preferences |
2.2 We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data beyond identity verification photographs, or health data) unless specifically required and lawfully justified for responsible gaming assessments.
3.1 Data You Provide Directly. The majority of personal data jon33 holds is provided directly by you during the following interactions:
3.2 Data Collected Automatically. When you access the Platform, jon33's systems automatically collect certain technical information about your device and session. This includes your IP address, device identifiers, browser fingerprint data, page navigation paths, session timestamps, and interaction events. This data is collected primarily for security, fraud prevention, and platform performance monitoring purposes.
3.3 Data from Third Parties. In limited circumstances, jon33 may receive personal data about you from third parties, including:
4.1 jon33 processes your personal data on one or more of the following legal bases:
5.1 jon33 uses the personal data described in Clause 2 for the following purposes:
5.2 jon33 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where required by our fraud-prevention and AML compliance obligations — in which case you retain the right to request human review of any decision.
6.1 jon33 does not sell, trade, or disclose your personal data to unrelated third parties for their own commercial purposes. We share personal data only with the categories of recipients listed below, and only to the extent necessary for the stated purpose:
6.2 All third-party data processors engaged by jon33 are bound by data processing agreements that require them to maintain at least the same level of data protection as described in this Policy.
7.1 As an internationally operated Platform, jon33 may transfer your personal data to servers and service providers located outside Indonesia, including in jurisdictions within the Asia-Pacific region and in the jurisdiction of our gaming licence authority.
7.2 Wherever personal data is transferred outside your country of residence, jon33 ensures that appropriate safeguards are in place. These safeguards may include contractual clauses based on internationally recognised data protection standards, or reliance on the adequacy of the recipient country's data protection framework.
7.3 By using the Platform, you acknowledge and consent to the transfer of your personal data to these jurisdictions as necessary to deliver the services described in this Policy.
8.1 jon33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of Account plus 5 years after closure | AML legal obligation, licensing requirements |
| Financial & Transaction Data | 7 years from transaction date | Financial record-keeping obligations |
| KYC Verification Documents | 5 years after Account closure | AML / CTF compliance obligations |
| Gameplay & Betting Records | 3 years from date of each session | Dispute resolution, responsible gaming monitoring |
| Customer Support Communications | 3 years from date of interaction | Quality assurance, dispute resolution |
| Marketing Preferences | Until opt-out or Account closure, plus 1 year | Consent management records |
| Technical / Log Data | 12 months from collection | Security monitoring, fraud detection |
8.2 Upon expiry of the applicable retention period, jon33 will securely delete or anonymise your personal data in a manner that prevents reconstruction of your identity. Where full deletion is not immediately practicable due to backup or archival cycles, the data will be isolated from active processing until deletion is completed.
9.1 jon33 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
9.2 Despite these measures, no digital system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, jon33 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.
9.3 You also play an important role in keeping your Account secure. You are responsible for maintaining the confidentiality of your login credentials and for notifying jon33 immediately at [email protected] if you suspect any unauthorised access to your Account.
10.1 The jon33 Platform uses cookies and similar tracking technologies to support core functionality, improve performance, and enhance your experience. The following categories of cookies are in use:
10.2 jon33 does not deploy third-party advertising or retargeting cookies. The Platform does not share your browsing behaviour with external advertising networks.
10.3 You may manage your cookie preferences through your browser settings. Please be aware that disabling strictly necessary cookies will affect the functionality of the Platform and may prevent you from logging in or completing transactions.
11.1 As a player whose personal data is processed by jon33, you hold the following rights in relation to your data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request":
Request a copy of all personal data jon33 holds about you, along with information about how it is being used and shared.
Request correction of any inaccurate or incomplete personal data held in your Account or in our records.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Request that processing of your data be restricted while a dispute regarding accuracy or lawfulness is pending resolution.
Receive a copy of your personal data in a structured, machine-readable format, where technically feasible and where processing is based on consent or contract.
Object to processing based on jon33's legitimate interests, including profiling for responsible gaming assessments, where your individual circumstances justify it.
Withdraw consent to marketing communications at any time by updating your preferences in your Account settings or by contacting support.
Request human review of any automated decision that produces a significant effect on your Account, including fraud flags or responsible gaming restrictions.
11.2 jon33 will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case you will be notified of the extension and the reasons for it.
11.3 Exercising your data rights will not result in any penalty, restriction of services, or negative treatment by jon33, except where the exercise of a right necessarily affects jon33's ability to deliver a service that depends on that data (for example, erasure of KYC data would require Account closure due to our legal obligations).
12.1 The jon33 Platform is strictly intended for adults aged 21 years and older. jon33 does not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory step in our registration and KYC process, and we maintain procedures to detect and close accounts registered by underage individuals.
12.2 If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered on the Platform, please contact us immediately at [email protected]. Upon verification of the report, jon33 will promptly close the Account, delete the associated personal data to the extent legally permissible, and return any legitimately deposited funds.
12.3 Any personal data inadvertently collected from a person under 21 will be deleted as soon as the underage registration is identified, consistent with our legal obligations to retain certain records for AML and fraud prevention purposes.
13.1 jon33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The "Last Updated" date at the top of this page will be revised with each material change.
13.2 Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — jon33 will notify registered players by email to their registered address at least 14 days before the changes take effect. For non-material updates (such as clarifications of existing practices or corrections of typographical errors), the revised Policy will be published on the Platform without prior individual notice.
13.3 Continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revised Policy, you must cease using the Platform and request Account closure in accordance with the jon33 Terms & Conditions.
14.1 For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the jon33 Data Privacy team through the following channels:
14.2 If you are dissatisfied with jon33's handling of your personal data or our response to a data rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. For Indonesian residents, this includes the Ministry of Communication and Information Technology (Kementerian Komunikasi dan Informatika — Kominfo).
Our Privacy Commitments
Beyond legal compliance, jon33 treats responsible data stewardship as a core platform value. Here are the six principles that guide every data decision we make.
Every data exchange between your device and the jon33 Platform is protected by 256-bit SSL/TLS encryption. Your personal information, payment details, and login credentials are never transmitted in plain text over any network.
jon33 does not sell, rent, or trade your personal data to any third-party data brokers, advertisers, or unrelated commercial entities — ever. Your data is used exclusively to operate, improve, and secure the jon33 Platform.
You hold eight clearly defined rights over your personal data — including access, rectification, erasure, portability, and objection. jon33 responds to all verified data rights requests within 30 days, without penalty or service restriction.
jon33 keeps your data only for as long as legally required or operationally necessary. Clear retention periods are published for every category of personal data, after which your information is securely deleted or anonymised.
Data shared with third parties — including Indonesian payment partners like BCA, BRI, OVO, and DANA — is limited strictly to what is necessary for transaction processing. Game providers receive only anonymised session identifiers, not your identity data.
In the unlikely event of a data breach affecting your personal information, jon33 commits to notifying impacted players without undue delay — giving you the information you need to protect yourself promptly and effectively.
Our support team is available around the clock to answer any data privacy question, process a data rights request, or help you manage your account preferences. You can also review our full Terms & Conditions or visit our FAQ.
Read Our FAQ Terms & Conditions Back to Home21+ only. Please gamble responsibly. Learn more