jm200 is committed to protecting the privacy and personal data of every member. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, who it may be shared with, and the rights you hold as a jm200 member in Indonesia.
Privacy is not an afterthought at jm200 — it is built into every layer of the platform. Here are the six core principles that govern how we handle your personal information.
Every connection to the jm200 platform — login, cashier, account settings, and game lobby — is protected by industry-standard 256-bit SSL encryption. Your data in transit is never readable to third parties.
Personal data is stored on secured servers with access restricted to authorised jm200 personnel on a strict need-to-know basis. We conduct regular security audits and vulnerability assessments to maintain data integrity.
jm200 does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial use. Data is shared only with service providers directly necessary to deliver jm200 services.
Data collected by jm200 is used only for the purposes stated in this Privacy Policy. We do not process your personal information for purposes that are incompatible with those declared at the time of collection.
You can review and update your personal information at any time through your jm200 account settings. For data correction requests that require document verification, our support team processes them within 5 business days.
Subject to our legal and regulatory obligations (including KYC and anti-money laundering record-keeping requirements), you may request the deletion of your personal data by contacting jm200 support at any time.
This Privacy Policy should be read alongside the jm200 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. By registering a jm200 account, you confirm that you have read and accepted this Privacy Policy in full.
For the purposes of this Privacy Policy, the following definitions apply:
2.1 The Data Controller responsible for your Personal Data collected through the jm200 Platform is jm200, operating at the domain jm200.cam. For all data protection enquiries, please use the contact details provided in Section 14 of this Privacy Policy.
2 .2 jm200 is committed to processing your Personal Data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.
2.3 Where jm200 engages third-party Data Processors to handle Personal Data on its behalf, those processors are bound by written data processing agreements that require them to maintain confidentiality and implement appropriate technical and organisational security measures.
3.1 Registration Data. When you create a jm200 account, we collect the information you provide directly, including:
3.2 KYC Verification Data. To comply with anti-money laundering and age verification obligations, jm200 collects:
3.3 Financial Data. When you use the jm200 cashier, we collect transaction records including deposit and withdrawal amounts, payment method details (masked account or e-wallet identifiers), transaction timestamps, and currency (Indonesian Rupiah, IDR). jm200 does not store full bank account numbers or e-wallet PINs.
3.4 Gaming Activity Data. jm200 records your gameplay history, bet amounts, game selections, session durations, wins and losses, and bonus usage. This data is used for account management, responsible gaming monitoring, dispute resolution, and product improvement.
3.5 Technical and Device Data. When you access the Platform, we automatically collect your IP address, browser type and version, device type and operating system, screen resolution, referring URL, and session timestamps. This data is used for fraud prevention, security monitoring, and platform optimisation.
3.6 Communications Data. If you contact jm200 via live chat, email, or WhatsApp, we retain records of those communications, including the content of messages and any attachments, for quality assurance, compliance, and dispute resolution purposes.
3.7 Marketing Preferences. Where you have opted in to receive promotional communications, we record your consent and communication preferences. You may withdraw consent at any time via your account settings or by contacting support.
jm200 collects Personal Data through the following channels:
The table below summarises the primary purposes for which jm200 processes your Personal Data and the legal basis relied upon in each case:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Registration data, contact details | Performance of contract |
| Identity and age verification (KYC) | KYC documents, selfie images | Legal obligation; legitimate interest |
| Payment processing (deposits and withdrawals) | Financial data, KYC data | Performance of contract |
| Fraud prevention and account security | Technical data, financial data, gaming activity | Legitimate interest; legal obligation |
| Responsible gaming monitoring | Gaming activity, session data, deposit history | Legal obligation; legitimate interest |
| Customer support and dispute resolution | Communications data, gaming activity, financial data | Performance of contract; legitimate interest |
| Personalised promotions and bonus offers | Gaming activity, marketing preferences | Consent |
| Platform analytics and product improvement | Technical data, gaming activity (aggregated) | Legitimate interest |
| Compliance with anti-money laundering obligations | Financial data, KYC data, transaction history | Legal obligation |
Where jm200 relies on consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal. Withdrawing marketing consent will not affect your ability to use jm200 services.
6.1 What Are Cookies. Cookies are small text files stored on your device when you visit the jm200 Platform. They enable the Platform to recognise your device between sessions, remember your preferences, maintain session authentication, and gather anonymised analytics data to improve the user experience.
6.2 Types of Cookies Used. jm200 uses the following categories of cookies:
6.3 Managing Cookies. You can control cookie behaviour through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using the jm200 cashier. Disabling functional or analytics cookies will not prevent you from accessing the Platform but may reduce the quality of your experience.
6.4 Web Beacons. In addition to cookies, jm200 may use web beacons (also known as pixel tags) in promotional emails to confirm whether an email has been opened and whether links within it have been followed. This helps jm200 measure the effectiveness of its communications. You can disable web beacon tracking by switching your email client to plain-text display mode.
7.1 Principle of Minimum Disclosure. jm200 shares your Personal Data with third parties only to the minimum extent necessary to deliver the services you have requested, to comply with legal obligations, or to pursue jm200's legitimate interests as described in this Privacy Policy.
7.2 Categories of Third Parties. Your Personal Data may be shared with the following categories of third-party service providers, each bound by contractual confidentiality and data security obligations:
7.3 Legal Disclosure. jm200 may disclose your Personal Data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, by a binding legal order, or in connection with the investigation or prevention of fraud, money laundering, or other criminal activity.
7.4 No Sale of Data. jm200 does not sell, rent, or otherwise transfer your Personal Data to third parties for their own independent marketing, advertising, or commercial purposes under any circumstances.
8.1 jm200 operates an internationally distributed infrastructure. Your Personal Data may be transferred to and processed in countries other than Indonesia, including the country in which jm200's licensing jurisdiction is located and countries where our Data Processors maintain their servers.
8.2 Where Personal Data is transferred to a country that does not provide a level of data protection equivalent to that applied in Indonesia, jm200 ensures that appropriate safeguards are in place. These safeguards may include standard contractual clauses, binding corporate rules, or other legally recognised transfer mechanisms that require the recipient to protect the data to a standard consistent with this Privacy Policy.
8.3 By registering a jm200 account and accepting this Privacy Policy, you acknowledge and consent to the transfer of your Personal Data internationally as described in this section, subject at all times to the security and purpose-limitation commitments set out throughout this document.
9.1 Retention Principles. jm200 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Once Personal Data is no longer required, it is securely deleted or anonymised.
9.2 Retention Periods. The following general retention periods apply to the main categories of data held by jm200:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation; dispute resolution |
| KYC identity documents | Duration of account + 5 years after closure | Anti-money laundering legal obligation |
| Financial transaction records | Duration of account + 7 years after closure | Financial record-keeping legal obligation |
| Gaming activity logs | Duration of account + 3 years after closure | Responsible gaming; dispute resolution |
| Customer support communications | 3 years from the date of communication | Quality assurance; dispute resolution |
| Marketing consent records | Until consent is withdrawn + 2 years | Proof of consent |
| Technical and device logs | 13 months from date of collection | Security monitoring; fraud prevention |
9.3 Early Deletion Requests. Where you request deletion of your Personal Data before the end of an applicable retention period, jm200 will delete what it is legally permitted to delete and will inform you of any data that must be retained to comply with legal obligations, together with the expected retention period for that data.
As a jm200 member, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact jm200 support using the details in Section 14. jm200 will respond to all verified data rights requests within 30 days of receipt.
Request a copy of the Personal Data jm200 holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete Personal Data held in your jm200 account record.
Request deletion of your Personal Data where it is no longer necessary and no legal retention obligation applies.
Request that jm200 restrict processing of your data while a dispute about its accuracy or lawfulness is resolved.
Receive a structured, machine-readable copy of your Personal Data in a format that allows transfer to another controller.
Object to processing based on legitimate interests, including profiling for personalised bonus offers and marketing communications.
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time with immediate effect.
Request human review of any decision made solely by automated means that produces a significant effect on your account or access.
11.1 Technical Measures. jm200 implements a comprehensive set of technical security controls to protect your Personal Data, including:
11.2 Organisational Measures. jm200 staff who handle Personal Data receive mandatory data protection training. Access to production systems containing Personal Data is logged and audited. jm200 maintains an internal data breach response procedure that specifies detection, containment, notification, and remediation steps.
11.3 Data Breach Notification. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected Members, jm200 will notify affected individuals without undue delay and in any event within 72 hours of becoming aware of the breach, providing details of the nature of the breach, the categories and approximate number of individuals affected, and the steps jm200 is taking to address and mitigate the breach.
11.4 Your Responsibilities. You are responsible for maintaining the confidentiality of your jm200 account credentials. jm200 will never ask you to provide your password via email, live chat, phone, or any channel other than the official login page at jm200.cam. If you suspect your account has been compromised, contact jm200 support immediately.
Security tip: Enable two-factor authentication (2FA) in your jm200 account settings for an additional layer of protection. With 2FA active, even if your password is compromised, your account cannot be accessed without the second factor on your registered device.
12.1 The jm200 Platform is strictly for adults aged 21 and over. jm200 does not knowingly collect, use, or retain Personal Data from any person under the age of 21. Registration by minors is prohibited.
12.2 If jm200 discovers or is notified that a member is under 21 years of age, the account will be immediately suspended, all associated Personal Data will be reviewed, and the account will be permanently closed. Any funds deposited by a minor will be returned to the originating payment method after deduction of any bonus amounts, pending completion of verification.
12.3 If you are a parent or guardian and believe that your child has registered a jm200 account, please contact us immediately at the details in Section 14. jm200 will take prompt action to investigate and close the account.
13.1 jm200 reserves the right to amend this Privacy Policy at any time. The "Last updated" date at the top of this document will be revised to reflect the date of the most recent changes. We encourage you to review this Privacy Policy periodically to stay informed about how jm200 protects your data.
13.2 Where a proposed amendment materially reduces your privacy rights or significantly changes how your Personal Data is processed, jm200 will provide at least 14 days' advance notice via the email address registered to your account or via a prominent in-Platform notification before the change takes effect.
13.3 Your continued use of the jm200 Platform after an amended Privacy Policy takes effect constitutes your acceptance of the revised terms. If you do not agree to the amended Privacy Policy, you should cease using the Platform and contact jm200 support to request account closure and withdrawal of any remaining balance.
14.1 Data Rights Requests. To exercise any of the rights described in Section 10, or to submit a question, correction request, or complaint regarding jm200's handling of your Personal Data, please contact us through any of the following channels:
14.2 Response Timeline. jm200 acknowledges all data rights requests within 5 business days and provides a substantive response within 30 calendar days. For complex requests, jm200 may extend this period by a further 30 days, with prior notification to you.
14.3 Complaint Escalation. If you are dissatisfied with jm200's response to your data privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in jm200's licensing jurisdiction. jm200 will cooperate fully with any such regulatory investigation.
Your data rights matter to us. Every request is handled by a trained member of our data protection team. We never charge a fee for processing data rights requests. For related legal documents, see the Terms & Conditions and Responsible Gaming Policy.
Now that you know exactly how jm200 handles your data, explore our full range of games and sports markets with complete confidence. Fast IDR deposits, instant e-wallet withdrawals, and a secure platform built for Indonesian players.