Privacy Policy

1. Introduction

laju22 ("we", "us", "our", or the "Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect the personal data you provide when using our online betting platform, website, mobile applications, and related services (collectively, the "Service").

This Privacy Policy applies to all users of the laju22 platform, including visitors, registered players, and anyone who interacts with our services. By accessing or using the Service, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.

We process personal data in accordance with applicable data protection laws and regulations, including those governing online gaming operations in the jurisdictions where we are licensed. If you have any questions about how we handle your personal information, please contact our Data Protection Officer using the contact details provided at the end of this document.

2. Data Controller

For the purposes of applicable data protection laws, laju22 is the data controller responsible for the personal information you provide through our Service. Our registered business address and contact information can be found in Section 12 of this Privacy Policy.

As the data controller, we determine the purposes and means of processing your personal data. We are accountable for ensuring that all processing activities comply with applicable laws and that appropriate technical and organizational measures are in place to protect your information.

3. Information We Collect

laju22 collects various types of personal information necessary to provide our services, comply with legal obligations, and improve your gaming experience. The categories of information we collect include:

3.1 Information You Provide Directly

• Account Registration Data: Full name, date of birth, residential address, email address, phone number, username, and password when you create an account.
• Identity Verification Documents: Copies of government-issued identification such as Indonesian National Identity Card (KTP), passport, driver's license, proof of address documents (utility bills, bank statements), and verification selfies for KYC (Know Your Customer) compliance.
• Financial Information: Bank account details, e-wallet account information (OVO, DANA, GoPay), transaction history, deposit and withdrawal records, and payment method preferences.
• Communication Data: Information contained in messages you send to our customer support team via live chat, email, WhatsApp, or other communication channels.
• Preference Settings: Gaming preferences, notification settings, language preferences, responsible gaming limits (deposit limits, loss limits, time-out periods), and marketing communication preferences.

3.2 Information Collected Automatically

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, device identifiers, mobile network information, and time zone settings.
• Usage and Activity Data: Pages visited, features used, time spent on the platform, clickstream data, games played, bets placed, betting patterns, login timestamps, and referral sources.
• Location Data: Approximate geographic location derived from your IP address to ensure compliance with territorial restrictions and provide localized services appropriate for Indonesian players.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, and similar technologies to enhance functionality, analyze usage patterns, and personalize content. See Section 8 for detailed information about our cookie usage.

3.3 Information from Third Parties

• Payment Processors: Transaction confirmation, payment status updates, and fraud detection information from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: Results of identity checks, document authentication, and fraud prevention screenings conducted by third-party verification providers.
• Game Providers: Gameplay data, game outcomes, and technical performance information from third-party game suppliers such as Evolution Gaming, Pragmatic Play, NetEnt, and Microgaming.
• Regulatory and Compliance Sources: Information from self-exclusion databases, sanction lists, and other sources required for regulatory compliance.

4. How We Use Your Information

laju22 processes your personal data for the following purposes, based on legal grounds including contract performance, legal obligations, legitimate interests, and your consent where applicable:

4.1 Service Provision and Account Management

• Creating and managing your betting account
• Verifying your identity and age to comply with legal requirements (21+ age restriction for Indonesian players)
• Processing deposits, withdrawals, and financial transactions
• Providing access to sports betting, casino games, live dealer games, and other gaming products
• Recording and settling bets, calculating winnings, and managing account balances
• Providing customer support and responding to inquiries
• Sending transactional communications including account notifications, transaction confirmations, and service updates

4.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Verifying eligibility to use the Service based on age, location, and jurisdiction
• Preventing, detecting, and investigating fraud, money laundering, and other illegal activities
• Maintaining records required by gaming regulators and licensing authorities
• Responding to legal requests, court orders, and regulatory inquiries
• Enforcing our Terms and Conditions and protecting our legal rights

4.3 Security and Fraud Prevention

• Monitoring account activity for suspicious behavior or unauthorized access
• Implementing security measures to protect against hacking, data breaches, and cyberattacks
• Detecting and preventing bonus abuse, collusion, and other forms of gaming fraud
• Verifying the authenticity of transactions and payment methods
• Maintaining the integrity of our gaming platforms and ensuring fair play

4.4 Service Improvement and Analytics

• Analyzing usage patterns to improve platform functionality and user experience
• Conducting market research and statistical analysis to understand player preferences
• Testing new features, games, and services
• Optimizing website performance, loading times, and mobile responsiveness
• Identifying and fixing technical issues and bugs

4.5 Marketing and Personalization (With Your Consent)

• Sending promotional emails about new games, bonuses, and special offers
• Displaying personalized content and game recommendations based on your preferences
• Providing targeted advertising through email and on-platform notifications
• Conducting promotional campaigns and loyalty reward programs

You may opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account notification settings, or contacting customer support. Opting out will not affect transactional communications necessary for service provision.

4.6 Responsible Gaming and Player Protection

• Monitoring betting patterns to identify potential problem gambling behavior
• Implementing and enforcing responsible gaming limits you set (deposit limits, loss limits, session time limits)
• Processing self-exclusion and time-out requests
• Providing access to responsible gaming tools and support resources
• Complying with responsible gaming obligations under our licensing conditions

5. Legal Basis for Processing

Under applicable data protection laws, laju22 must have a valid legal basis for processing your personal data. We process your information based on the following legal grounds:

Processing Purpose	Legal Basis
Account creation and service provision	Contract performance (necessary to provide the Service you requested)
Identity verification and KYC compliance	Legal obligation (required by gaming regulations and AML laws)
Fraud prevention and security	Legitimate interests (protecting our business and users from fraud)
Marketing communications	Consent (you can withdraw consent at any time)
Service improvement and analytics	Legitimate interests (improving our services and user experience)
Responsible gaming measures	Legal obligation and legitimate interests (player protection)

6. Data Sharing and Disclosure

laju22 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for the purposes described in this Privacy Policy:

6.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals.
• Identity Verification Services: Third-party KYC and AML compliance providers who verify your identity and check against fraud databases.
• Game Providers: Gaming software suppliers such as Evolution Gaming, Pragmatic Play, NetEnt, and Microgaming who power our casino games and need limited data to provide their services.
• Cloud Hosting and IT Services: Infrastructure providers who host our platform, databases, and backup systems.
• Customer Support Tools: Live chat software, ticketing systems, and communication platforms used to provide customer service.
• Analytics and Marketing Services: Service providers who help us analyze usage data and deliver marketing communications (only with your consent).

6.2 Legal and Regulatory Authorities

We may disclose your information to:

• Gaming regulatory bodies and licensing authorities as required by our operating licenses
• Law enforcement agencies in response to valid legal requests or court orders
• Tax authorities and financial regulators for compliance purposes
• Legal advisors and auditors in connection with legal proceedings or regulatory investigations

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified via email or prominent notice on our platform of any change in ownership or control of your personal data.

6.4 Data Protection Safeguards

All third parties with whom we share your data are required to:

• Process your information only for specified purposes and in accordance with our instructions
• Implement appropriate technical and organizational security measures
• Comply with applicable data protection laws and regulations
• Sign data processing agreements that include confidentiality obligations

7. Data Security

laju22 implements comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

7.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is protected using industry-standard SSL/TLS encryption (minimum 256-bit encryption).
• Secure Storage: Personal data is stored on secure servers with encryption at rest. Access to databases is restricted and monitored.
• Firewall Protection: Network security includes firewalls, intrusion detection systems, and DDoS protection to prevent unauthorized access.
• Access Controls: Multi-factor authentication, role-based access controls, and the principle of least privilege ensure only authorized personnel can access sensitive data.
• Regular Security Audits: Independent third-party security assessments, penetration testing, and vulnerability scanning are conducted regularly.

7.2 Organizational Security Measures

• Employee Training: All staff members receive regular training on data protection, security best practices, and confidentiality obligations.
• Data Minimization: We collect and retain only the personal information necessary for specific purposes and delete data when no longer needed.
• Incident Response: We maintain a data breach response plan to quickly detect, investigate, and respond to security incidents.
• Secure Development: Security is integrated into our software development lifecycle, with code reviews and security testing before deployment.

7.3 Your Role in Security

While we implement strong security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication if available
• Keep your registered email address and phone number secure
• Log out after each session, especially on shared or public devices
• Report any suspicious account activity immediately to our support team
• Be cautious of phishing attempts and only access laju22 through official channels

8. Cookies and Tracking Technologies

laju22 uses cookies and similar tracking technologies to enhance your experience, analyze usage, and personalize content. A cookie is a small text file stored on your device that helps us recognize you and remember your preferences.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function properly, including authentication, session management, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, username, and display options to enhance usability.
• Analytical Cookies: Help us understand how visitors interact with our platform by collecting anonymous usage statistics.
• Performance Cookies: Monitor platform performance, loading times, and technical errors to improve service quality.
• Marketing Cookies: Track your activity to deliver personalized advertising and promotional content (only with your consent).

8.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, blocking essential cookies may prevent certain features from functioning properly. You can manage cookie preferences through your browser settings or through our cookie consent tool available on the platform.

9. Data Retention

laju22 retains your personal information only as long as necessary to fulfill the purposes for which it was collected or as required by law:

• Active Accounts: Personal data is retained for the duration of your account's active status and for a reasonable period after account closure to comply with legal obligations.
• Regulatory Requirements: Gaming regulations require us to retain certain records (transaction history, account activity, identity verification documents) for a minimum of 5-7 years after account closure.
• Legal Claims: Data may be retained longer if necessary for legal proceedings, disputes, or regulatory investigations.
• Marketing Data: If you opt out of marketing communications, your contact information will be retained only on a suppression list to ensure we don't contact you again.

Once the retention period expires, personal data is securely deleted or anonymized so it can no longer identify you.

10. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

10.1 Right of Access

You have the right to request a copy of the personal data we hold about you. This includes information about what data we collect, how we use it, who we share it with, and how long we retain it.

10.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information. You can update most account information directly through your account settings.

10.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected, or if you withdraw consent for processing based on consent. However, we may retain data where required by legal or regulatory obligations.

10.4 Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.

10.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

10.6 Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will stop processing unless we have compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where processing is based on consent (such as marketing communications), you can withdraw your consent at any time. This will not affect the lawfulness of processing prior to withdrawal.

10.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 12. We will respond to your request within 30 days. Some requests may require identity verification to protect your data security.

11. International Data Transfers

Your personal information may be transferred to and processed in countries outside Indonesia where laju22 operates servers or engages service providers. These countries may have different data protection standards than Indonesia.

When transferring data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Certification schemes demonstrating adequate data protection
• Binding corporate rules for intra-group transfers
• Transfer to countries recognized as providing adequate data protection

12. Contact Information and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or how laju22 handles your personal information, please contact us:

• Email: [email protected]
• Data Protection Officer: [email protected]
• Live Chat: Available 24/7 through the laju22 platform
• Customer Support: Indonesian-speaking agents available around the clock

We aim to address all privacy inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority or supervisory body.

13. Changes to This Privacy Policy

laju22 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. Any changes will be effective immediately upon posting the revised Privacy Policy on our platform.

We will notify you of material changes through:

• Email notification to your registered email address
• Prominent notice on the laju22 platform homepage
• In-app notification when you log in to your account

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

14. Children's Privacy

The laju22 Service is intended exclusively for users who are at least 21 years of age. We do not knowingly collect personal information from individuals under 21. If we become aware that we have inadvertently collected information from someone under the legal gambling age, we will take immediate steps to delete that information and close the associated account.

If you believe a minor has provided personal information to laju22, please contact us immediately so we can take appropriate action.