Privacy Policy

1. Introduction

satjp ("we," "us," "our") is committed to protecting the privacy and personal data of every user who accesses our online gaming platform at https://satjp.cam. This Privacy Policy explains in plain, transparent language what information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

This Policy applies to all users of the satjp website, mobile application (if applicable), and any related services or communications. By creating an account with satjp or continuing to use the platform, you confirm that you have read, understood, and accepted the practices described in this Policy.

If you are located in Indonesia, the processing of your personal data is subject to applicable Indonesian data protection legislation, including Law No. 27 of 2022 on Personal Data Protection (UU PDP). We take our obligations under this law seriously and have structured our data practices to comply fully.

2. Definitions

Throughout this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, including name, date of birth, email address, phone number, bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, access, use, disclosure, transfer, and deletion.
• "Data Controller" means satjp as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party engaged by satjp to process personal data on our behalf under our instructions.
• "KTP" means Kartu Tanda Penduduk — the Indonesian national identity card required for account verification.
• "KYC" means Know Your Customer — the identity and age verification process required before withdrawals are permitted.
• "Cookie" means a small data file stored on your device by your browser when you visit the satjp platform.

3. Information We Collect

3.1 Information You Provide Directly

When you register an account with satjp or use our services, we collect information you provide voluntarily, including:

• Full legal name (as it appears on your KTP)
• Date of birth
• Email address
• Indonesian mobile phone number
• Residential address in Indonesia
• Username and password (password stored in hashed form only)
• Government-issued ID documents (KTP, passport if applicable)
• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, or BSI
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja
• Any correspondence sent to our customer support team

3.2 Information Collected Automatically

When you access the satjp platform, our servers and analytics tools automatically collect certain technical information, including:

• IP address and approximate geolocation
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Referring URL and exit pages
• Session timestamps, duration, and page-visit sequences
• Game activity logs (bets placed, games played, session duration)
• Transaction logs (deposit amounts, withdrawal requests, payment method used)

3.3 Information from Third Parties

We may receive limited information about you from third-party service providers who help us deliver our services, such as payment processors confirming transaction status, fraud-detection services flagging suspicious activity, and identity-verification partners confirming KTP validity. We do not purchase marketing data about you from data brokers.

4. How We Use Your Information

satjp uses your personal data exclusively for the following purposes:

We do not use your personal data to build advertising profiles, sell audience segments, or target you with ads on third-party platforms.

5. Legal Basis for Processing

Under Indonesian Law No. 27 of 2022 on Personal Data Protection and applicable international data protection principles, satjp processes your personal data on one or more of the following legal bases:

• Contract Performance: Processing necessary to create and manage your account, process transactions, and deliver our services to you.
• Legal Obligation: Processing required to comply with Indonesian law, including anti-money-laundering obligations, age verification requirements, and regulatory reporting.
• Legitimate Interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics, where our interests do not override your fundamental privacy rights.
• Consent: Processing for optional purposes — such as sending promotional emails or newsletters — where you have given explicit, informed, freely revocable consent. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting support.

6. Data Sharing and Disclosure

6.1 Service Providers (Data Processors)

satjp engages carefully vetted third-party service providers who process personal data on our behalf and under our written instructions. These providers include payment processors (to facilitate bank transfers through BCA, BRI, BNI, Mandiri, and e-wallet providers), cloud hosting providers, identity verification services, and cybersecurity firms. All processors are contractually bound to maintain confidentiality, implement appropriate security measures, and process data only for the purposes we specify.

6.2 Game Providers

To deliver live casino, slots, and sports betting services, satjp integrates with licensed game providers including Evolution Gaming, Pragmatic Play, Spribe, and others. These providers may receive a session token and limited technical data (but not your full identity) to authenticate your game sessions. They are prohibited from using this data for any purpose other than game delivery.

6.3 Legal and Regulatory Disclosure

satjp may disclose your personal data to Indonesian government authorities, law-enforcement agencies, courts, or regulators when required by law, court order, or regulatory demand, or when disclosure is necessary to protect the rights, property, or safety of satjp, our users, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of satjp's business assets, user data may be transferred to the acquiring entity. In such an event, we will notify affected users via email or prominent notice on the platform before any transfer takes place, and the receiving entity will be required to honour this Privacy Policy.

6.5 No Sale of Personal Data

satjp does not sell, rent, lease, or trade your personal data to any third party for commercial gain. This is an absolute commitment and applies regardless of the form of consideration offered.

7. International Data Transfers

satjp's primary operations are centred on the Indonesian market, and we aim to keep data storage within or close to Indonesia's geographic region wherever practicable. However, some of our service providers — particularly cloud infrastructure and cybersecurity partners — may process data on servers located outside Indonesia.

When we transfer personal data internationally, we ensure that adequate protections are in place, including contractual data-processing agreements that mirror the protections required by Indonesian law, technical safeguards such as encryption in transit and at rest, and access restrictions limiting who can view transferred data.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website to store information about your session or preferences. satjp uses cookies and similar technologies (such as local storage) to operate the platform, maintain your login session, prevent fraud, and improve our understanding of how the platform is used.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens and anti-CSRF (cross-site request forgery) tokens. You cannot opt out of these without ceasing to use the platform.
• Functional Cookies: Remember your preferences, such as language settings, and improve your experience across sessions.
• Analytics Cookies: Collect anonymised data about how users interact with the platform (pages visited, session duration, error frequency) to help us improve performance. We use privacy-respecting analytics tools with IP anonymisation enabled.
• Security Cookies: Used by our fraud-detection systems to recognise trusted devices and flag unusual login patterns.

We do not use third-party advertising or retargeting cookies. satjp does not participate in cross-site behavioral advertising networks.

8.3 Managing Cookies

You can control cookie storage through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in or using the platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

9. Data Security

satjp implements a comprehensive, layered security programme to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Key measures include:

• 256-bit TLS/SSL Encryption: All data in transit between your device and our servers is encrypted. Our certificates are maintained by a trusted certificate authority and renewed proactively.
• Encryption at Rest: Sensitive data fields — including KTP document images, bank account numbers, and identity verification records — are encrypted at rest using AES-256.
• Password Hashing: Passwords are never stored in plain text. We use industry-standard bcrypt hashing with a high work factor.
• Access Controls: Personal data is accessible only to satjp employees and contractors who have a legitimate operational need. Access is governed by role-based permissions and logged for audit purposes.
• Two-Factor Authentication: Available to all users to secure account access. Strongly recommended.
• Regular Security Audits: Third-party cybersecurity firms conduct quarterly penetration tests and vulnerability assessments of the satjp platform.
• Incident Response: We maintain a documented data-breach response procedure. In the event of a breach affecting your personal data, we will notify you and relevant Indonesian authorities within the timeframes required by law.

10. Data Retention

satjp retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, or to resolve disputes and enforce our agreements. The following retention periods apply as a general guide:

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised, aggregated data — which cannot identify any individual — may be retained indefinitely for statistical and operational improvement purposes.

11. Your Rights

Under Indonesian Law No. 27 of 2022 on Personal Data Protection and consistent with internationally recognised data protection principles, you have the following rights in relation to your personal data held by satjp:

11.1 Right of Access

You have the right to request a copy of the personal data satjp holds about you, along with information about how it is used and with whom it is shared. We will respond to verified access requests within 14 business days.

11.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account dashboard. For changes to identity documents or bank account details, please contact customer support.

11.3 Right to Erasure

You may request deletion of personal data that is no longer necessary for the purpose it was collected, where you have withdrawn consent and no other legal basis applies, or where data has been processed unlawfully. Note that we are required by Indonesian law to retain certain records (such as KYC documents and transaction history) for defined periods regardless of erasure requests. We will clearly inform you of any data we are legally obligated to retain.

11.4 Right to Restriction of Processing

You may ask us to restrict processing of your data while a rectification or objection request is being assessed, or where processing is unlawful but you prefer restriction over deletion.

11.5 Right to Data Portability

Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit it to another service provider.

11.6 Right to Object

You have the right to object to processing of your personal data carried out on the basis of our legitimate interests, including profiling for responsible gaming monitoring. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests or where processing is necessary for legal claims.

11.7 Right to Withdraw Consent

Where processing is based solely on your consent (for example, receiving promotional emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing communications, update your preferences in your account settings or contact support.

11.8 How to Exercise Your Rights

To exercise any of the rights listed above, submit a written request to [email protected] with the subject line "Data Rights Request." We will verify your identity before processing the request and will respond within 14 business days. For complex requests, we may extend this period by a further 14 business days, in which case we will notify you of the extension and the reason for it.

12. Minors and Age Restriction

satjp is strictly an adults-only platform. You must be at least 21 years of age to register an account or use any of our services. We do not knowingly collect personal data from individuals under 21 years of age.

All new accounts undergo mandatory KTP verification to confirm age before deposits or withdrawals are permitted. If we discover that personal data has been collected from a person under 21 years of age, we will immediately suspend the account, delete all associated personal data, and return any deposited funds to the originating payment method where legally permissible.

13. Changes to This Policy

satjp may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will notify you by email to your registered address and by posting a prominent notice on the platform at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page always reflects the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the satjp platform after changes take effect constitutes your acceptance of the updated Policy. If you do not agree with the revised terms, you should close your account before the effective date of the changes.

Previous versions of this Privacy Policy are archived and available upon request by contacting customer support.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way satjp handles your personal data, please contact our Data Privacy team through one of the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" for fastest routing
• Live Chat: Available 24/7 through the satjp platform
• WhatsApp Support: Customer support line monitored 24/7 (number available through the platform)

We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 14 business days. If you are dissatisfied with our response, you may escalate your concern to the relevant Indonesian data protection authority in accordance with Law No. 27 of 2022.