Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, use, storage, disclosure, and protection of personal information by starjp ("we," "us," or "our"), the operator of the online gambling platform accessible at https://starjp.cam. The Policy applies to all users who access the website, create an account, deposit funds, place wagers, or interact with any of our services, whether via desktop browser, mobile browser, or any affiliated application.

By registering an account with starjp or using our services in any capacity, you acknowledge that you have read and understood this Policy and that you consent to the practices described herein. If you do not agree with any part of this Policy, you must discontinue use of our platform immediately.

starjp serves primarily Indonesian players and recognizes the importance of protecting privacy in accordance with internationally accepted data-protection principles. While Indonesia's Personal Data Protection Law (Undang-Undang Perlindungan Data Pribadi) shapes our commitments to Indonesian residents, we also observe broader international data-protection best practices to provide a consistently high standard of care for all users.

2. Definitions

• "Personal Data" — any information that identifies, or can reasonably be used to identify, a natural person, including name, date of birth, email address, phone number, residential address, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, or deletion.
• "Controller" — starjp, the entity that determines the purposes and means of processing your Personal Data.
• "Processor" — a third party that processes Personal Data on behalf of starjp under a data-processing agreement (e.g., payment providers, KYC verification services).
• "User" or "you" — any individual who accesses, registers on, or uses the starjp platform.
• "Cookies" — small text files placed on your device by our website to facilitate session management, analytics, and personalization.

3. Information We Collect

3.1 Information You Provide Directly

When you register, verify your identity, deposit funds, or contact our support team, you provide us with data that may include:

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the mandatory 21+ age requirement)
• Residential address, city, province, and postal code within Indonesia
• Email address and mobile phone number
• Indonesian national identity card number (NIK from KTP), passport number, or driver's license number
• Bank account details for your chosen payment method (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Profile photograph or selfie submitted for KYC (Know Your Customer) verification
• Correspondence records, including the content of live-chat sessions, emails, and WhatsApp messages sent to our support team

3.2 Information Collected Automatically

When you visit or use our platform, we automatically collect certain technical and behavioral data, including:

• IP address and approximate geolocation (country, city)
• Device type, operating system version, browser type and version
• Pages viewed, features accessed, and time spent on each page
• Date, time, and duration of each login session
• Betting history, game activity, deposit and withdrawal records
• Referral source (e.g., search engine, partner website, or direct URL entry)
• Error logs and technical diagnostic data generated during platform usage

3.3 Information from Third Parties

We may receive Personal Data about you from trusted third-party sources, including:

• Identity verification providers: Third-party KYC services that validate government-issued IDs and perform liveness checks
• Payment processors and banks: Transaction confirmation and fraud-screening data from BCA, BRI, BNI, Mandiri, and our e-wallet partners
• Anti-fraud and AML screening services: Sanctions list checks and politically exposed person (PEP) screening
• Analytics and attribution partners: Aggregated behavioral data to help us understand how players discover and use our platform

4. How We Use Your Information

starjp processes your Personal Data for the following lawful purposes:

4.1 Account Management and Service Delivery

• Creating and managing your player account
• Processing deposits and withdrawals through your nominated Indonesian bank or e-wallet
• Calculating, crediting, and tracking bonus balances and VIP loyalty points
• Providing access to sports betting, live casino, slot games, and togel (traditional Indonesian numbers lottery) products
• Personalizing your in-platform experience, including game recommendations and promotional offers relevant to your activity

4.2 Legal Compliance and Platform Integrity

• Verifying that you meet the minimum age requirement of 21 years and fulfilling our KYC obligations
• Complying with Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) regulations
• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, and multi-accounting
• Maintaining records required by our licensing authority and responding to regulatory inquiries
• Enforcing our Terms and Conditions and Responsible Gaming Policy

4.3 Customer Support

• Responding to your questions, complaints, and support requests submitted via live chat, email, or WhatsApp
• Recording and reviewing support interactions for quality-assurance and training purposes
• Proactively contacting you regarding account security alerts, verification requests, or service interruptions

4.4 Marketing and Communications (Consent-Based)

• Sending promotional offers, bonus announcements, and platform news via email or SMS, subject to your explicit opt-in consent
• Conducting player surveys to gather feedback on our services
• Personalizing advertising materials displayed on our platform based on your preferences and game history

You may withdraw marketing consent at any time without penalty by adjusting your notification preferences in the "My Account" section or by emailing our support team. Withdrawal of marketing consent does not affect the processing of Personal Data for account management or legal-compliance purposes.

5. Legal Bases for Processing

starjp processes your Personal Data on the following legal grounds:

• Contractual necessity: Processing required to fulfill our obligations under the account-holder agreement you enter into upon registration (e.g., executing deposits, paying out winnings, providing customer support).
• Legal obligation: Processing mandated by our gaming license conditions, AML/CTF regulations, and applicable data-protection law.
• Legitimate interests: Processing that serves our genuine business interests and is proportionate to your privacy rights, such as fraud prevention, platform security, and service analytics, provided these interests do not override your fundamental rights.
• Consent: Processing activities for which we have obtained your explicit, informed, and freely given consent, such as direct marketing communications. You may withdraw consent at any time.

6. Sharing and Disclosure of Personal Data

starjp does not sell, rent, or trade your Personal Data. We share it only in the circumstances described below:

6.1 Authorized Service Providers (Processors)

We engage carefully vetted third-party processors who act on our instructions and are contractually bound to protect your data to standards equivalent to our own. These include:

• Identity verification and KYC service providers
• Payment processing and banking partners (BCA, BRI, BNI, Mandiri, and e-wallet providers)
• Cloud infrastructure and data hosting providers operating on secured, encrypted servers
• Customer support software platforms facilitating live chat and ticketing
• Analytics platforms (configured in privacy-preserving mode with IP anonymization)
• Fraud detection and AML screening services

6.2 Legal and Regulatory Disclosure

We may disclose Personal Data when required by law or in good-faith belief that disclosure is necessary to:

• Comply with a legal obligation, court order, or governmental authority request
• Cooperate with our licensing authority's audit or investigation
• Protect the rights, property, or safety of starjp, our players, or the public
• Enforce our Terms and Conditions or investigate suspected violations

6.3 Corporate Transactions

In the event of a merger, acquisition, asset sale, or reorganization, your Personal Data may be transferred to the succeeding entity. We will notify affected users by prominent notice on our website before any such transfer takes place and ensure that the receiving entity commits to honoring this Privacy Policy.

7. International Data Transfers

starjp operates internationally and your Personal Data may be transferred to, stored on, and processed by servers located outside Indonesia, including countries where data-protection laws may differ. In all such cases, we implement appropriate safeguards including:

• Data Processing Agreements (DPAs) with all cross-border processors incorporating standard contractual clauses
• Technical measures including encryption in transit (TLS) and at rest (AES-256)
• Vendor security assessments prior to onboa rding and annually thereafter

By using our services, you acknowledge that your Personal Data may be transferred internationally as described above. If you have questions about specific transfer mechanisms, please contact our Data Protection contact at [email protected].

8. Data Retention

We retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected or as required by applicable law. Our standard retention schedules are as follows:

• Account data and KYC documents: Retained for the duration of your account relationship plus a minimum of 5 years after account closure, in compliance with AML record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support correspondence: Retained for 3 years from the date of the interaction unless a related dispute remains unresolved.
• Marketing preference records: Retained for 3 years from the date of your last marketing interaction or until you withdraw consent, whichever is earlier.
• Technical logs and analytics data: Retained for up to 24 months in identifiable form, after which data is aggregated and anonymized.

When Personal Data is no longer required, we securely delete or anonymize it using industry-accepted methods so that it can no longer be associated with any identifiable individual.

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

starjp uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Essential for the platform to function. These enable session management, authentication, and security features. They cannot be disabled without breaking core functionality.
• Performance and Analytics Cookies: Collect anonymized data about how players navigate our platform, which pages are visited most frequently, and where errors occur. This data helps us improve the user experience.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method display, and game lobby filters to provide a more personalized experience.
• Marketing Cookies: Used only with your prior consent to track referral sources and measure the effectiveness of promotional campaigns. These cookies do not share data with third-party advertisers without your explicit opt-in.

9.2 Managing Cookies

You can control or delete cookies at any time through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may impair certain platform features such as maintaining your login session or remembering your preferences. Strictly necessary cookies cannot be disabled via browser settings without affecting platform functionality. For more information on managing cookies, refer to your browser's help documentation.

10. Your Privacy Rights

As a starjp player, you have the following rights in relation to your Personal Data:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how we process it.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit how we use your Personal Data in certain circumstances, for example while a data-accuracy dispute is being resolved.
• Right to Data Portability: You may request a structured, machine-readable copy of the Personal Data you have provided to us, to the extent technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct-marketing purposes at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact our support team via live chat or email at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In cases of complexity or high volume, we may extend this period by a further 30 days, with prior notice to you.

11. Children's Privacy and Age Verification

starjp's services are strictly intended for adults aged 21 years or older. We do not knowingly collect Personal Data from individuals under 21. Age verification is a mandatory step in our KYC process; no withdrawal request is processed until the player's age has been confirmed against a valid government-issued identification document.

If we discover that Personal Data has been collected from an individual who does not meet the minimum age requirement, we will immediately suspend the relevant account, reverse any deposits to the originating payment method, void any pending withdrawals, and permanently delete all associated Personal Data from our systems. If you believe a minor has registered on our platform, please notify us immediately at [email protected].

12. Security Measures

starjp implements a comprehensive set of technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and our servers is encrypted in transit.
• AES-256 Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted using AES-256 symmetric encryption.
• Multi-Factor Authentication (MFA): All internal staff access to systems containing Personal Data requires MFA. We also offer MFA to players for account login.
• Role-Based Access Control: Personnel access to Personal Data is restricted on a need-to-know basis. Support agents can access only the data necessary to assist you.
• Regular Security Audits: We commission periodic third-party penetration tests and vulnerability assessments of our platform infrastructure.
• Intrusion Detection Systems: Automated systems continuously monitor our network for anomalous activity and potential breaches.
• Employee Training: All staff with access to Personal Data receive regular data-protection and security training.

13. Data Breach Notification

In the unlikely event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, starjp will:

• Take immediate steps to contain and remediate the breach.
• Notify affected users without undue delay, and in no case later than 72 hours after becoming aware of the breach, via the email address registered on your account.
• Provide clear information about the nature of the breach, the categories of data affected, the likely consequences, and the measures we are taking to address it.
• Notify relevant regulatory or licensing authorities as required by applicable law.

14. Third-Party Links and Services

Our platform may reference or integrate with third-party services such as payment gateways, game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), or sports data providers. These third parties operate under their own privacy policies, and starjp is not responsible for their data-handling practices. We encourage you to review the privacy policies of any third-party service you interact with. Links to third-party sites are provided solely for convenience and do not constitute an endorsement.

15. Changes to This Privacy Policy

starjp reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made, we will post the revised policy on this page with an updated "Last Updated" date and, where practicable, notify registered users via email or an in-platform notification. Minor editorial or clarifying changes that do not affect your rights will take effect immediately upon posting.

Your continued use of starjp services after the effective date of any revised Policy constitutes acceptance of the changes. If you disagree with the revised Policy, you should cease using our services and may request account closure by contacting our support team.

16. Contact Information

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on every page of the starjp website
• Email: [email protected]
• WhatsApp: +62 812 3456 7890

Our support team operates 24 hours a day, 7 days a week, with Indonesian-speaking agents available at all times. We are committed to resolving all privacy inquiries promptly and transparently.