At jam37, protecting your personal data is not an afterthought — it is a foundational commitment. This Privacy Policy explains precisely what information we collect, why we collect it, how we use and safeguard it, and what rights you hold over your own data as a player on our platform.
Last updated: January 2026 | Applies to all jam37 players in Indonesia and internationallyThese summary cards highlight the six pillars of the jam37 privacy framework. They are provided for convenience — the full binding policy text follows below.
Every connection between your device and the jam37 platform is protected by 256-bit SSL/TLS encryption. This means all data you transmit — login credentials, payment details, personal information — is unreadable to any third party in transit.
jam37 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used exclusively to operate your account, process transactions, and improve your experience on the platform.
We collect only the personal data that is strictly necessary to operate your account, verify your identity, process deposits and withdrawals in Indonesian Rupiah (IDR), and comply with our licensing and anti-money laundering obligations.
You have the right to access, correct, export, or request deletion of your personal data at any time. Submit a data subject request via our 24/7 live chat or by emailing [email protected], and our compliance team will respond within the timeframe set out in this policy.
jam37 uses strictly necessary cookies to maintain your session and preferences, and analytics cookies to understand how players navigate the platform. We do not use cookies to build advertising profiles or share browsing data with social media networks.
jam37 processes personal data in accordance with internationally recognised data protection standards. Our data handling practices are audited as part of our licensing obligations. We maintain a formal data breach response procedure with defined notification timelines.
In this Privacy Policy, the following terms shall have the meanings assigned to them below. Where a term is not defined here, it carries the meaning given to it in the jam37 Terms & Conditions.
jam37 acts as the Data Controller for all Personal Data collected through the platform at https://jam37.app. As Data Controller, jam37 determines why your Personal Data is collected and the manner in which it is processed. All data subject requests, privacy inquiries, and formal complaints regarding the processing of your Personal Data should be directed to the jam37 Data Protection contact, details of which are set out in Clause 15 of this policy.
Where jam37 engages third-party Data Processors — such as payment gateway operators, identity verification providers, live casino game studios (including Evolution Gaming, Pragmatic Play Live, and Ezugi), or analytics platforms — those parties process data only under jam37's documented instructions and are contractually prohibited from using player data for their own independent purposes.
When you create a jam37 account, we collect the information you provide directly: your full legal name, date of birth, Indonesian residential address, mobile telephone number, and email address. This information is mandatory — without it, we cannot open or maintain a player account for you.
To comply with our anti-money laundering (AML) and licensing obligations, jam37 may require you to submit copies of one or more of the following documents: your Indonesian National Identity Card (KTP) or valid international passport; a recent utility bill, bank statement, or official correspondence confirming your residential address (dated within the last three months); a selfie photograph holding your identity document; and proof of ownership of the bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, or other) registered for your withdrawals. These documents are processed securely and retained only for the period required by applicable law and our licensing conditions.
jam37 records all deposit and withdrawal transactions made through supported Indonesian payment channels, including bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). Transaction records include the amount in Indonesian Rupiah (IDR), the payment method used, timestamps, and reference numbers. We do not store full card numbers or complete bank account credentials on our own servers.
We maintain complete records of your gameplay and betting history on jam37, including bets placed (including mix parlay and live sportsbook markets), games played (slots, live casino tables, virtual sports), session start and end times, and wagering requirement progress on any active bonuses. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory reporting.
When you access jam37, our servers automatically collect certain technical data: your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited, and time spent on each page. This data is used to maintain platform security, detect and prevent fraudulent access, and improve platform performance for players across Jakarta, Surabaya, Medan, Bandung, Bali, and other parts of Indonesia.
If you contact jam37's support team via live chat or by emailing [email protected], we retain a record of that correspondence. This includes the content of your messages, any attachments you provide, and the timestamps of all interactions. These records are maintained for quality assurance, training, compliance, and dispute resolution purposes.
If you use the jam37 responsible gaming tools — including deposit limits, loss limits, session time limits, reality-check alerts, or self-exclusion — we record your settings and any changes you make to them. This data is processed for the sole purpose of enforcing those tools and honouring your self-imposed restrictions. It is treated with the highest level of sensitivity and is not used for marketing or profiling purposes.
jam37 processes your Personal Data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:
jam37 uses the Personal Data it collects for the following purposes:
jam37 does not sell, rent, or share your Personal Data with third parties for their own commercial purposes. We share your data only in the following limited circumstances:
To process your deposits and withdrawals through Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), we share the minimum necessary financial data with the relevant payment processing partners. These partners are bound by contractual data protection obligations and applicable financial regulation.
Where jam37 uses a third-party identity verification service to process KYC document checks, your identity documents and verification data are shared with that provider under a strict data processing agreement. The provider may not retain or use your identity data beyond the scope of the verification service.
When you play games powered by third-party studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Pocket Games Soft, and Ezugi — limited session data (your anonymised player ID and bet amounts) is transmitted to those studios' game servers to facilitate gameplay. These studios do not receive your name, address, or payment details.
jam37 may disclose your Personal Data to law enforcement authorities, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, a valid legal order, or to protect the rights, property, or safety of jam37, its players, or third parties. Where legally permissible, jam37 will notify you of any such disclosure request.
In the event of a merger, acquisition, restructuring, or sale of all or part of jam37's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to the way your data is processed as a result.
jam37 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and licensing obligations. The following retention periods apply as a general guide:
Where you request erasure of your Personal Data and no overriding legal retention obligation applies, jam37 will action your request within thirty (30) calendar days of receipt of a verified data subject request.
jam37 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction. These measures include:
jam37 uses the following categories of cookies on the platform:
jam37 does not use advertising or tracking cookies to build profiles of your browsing behaviour across third-party websites. We do not embed Facebook Pixel, Google Ads tags, or any other external advertising tracking technology on the platform. We do not share cookie data with social media networks.
You may control and delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.
As a player on the jam37 platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact us using the details set out in Clause 15.
jam37 will respond to all verified data subject requests within thirty (30) calendar days. Where a request is complex or involves a high volume of data, we may extend this period by a further two months and will notify you accordingly. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
The jam37 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under 21 years of age. During registration, you are required to declare your date of birth, and jam37 reserves the right to request documentary proof of age at any time.
As an internationally operated platform serving players primarily in Indonesia, jam37 may process and store your Personal Data on servers located in jurisdictions outside of Indonesia. Where such transfers occur, jam37 takes steps to ensure that your data receives an equivalent level of protection to that afforded under applicable data protection standards.
These safeguards include: entering into standard contractual data transfer agreements with receiving entities; conducting transfer impact assessments where required; and selecting data processors and infrastructure providers that maintain recognised international security certifications (including ISO 27001 and SOC 2 Type II where applicable).
By registering an account on jam37 and accepting these terms, you acknowledge that your Personal Data may be transferred to, and processed in, countries outside Indonesia. If you have questions about the specific safeguards in place for international transfers of your data, please contact us using the details in Clause 15.
The jam37 platform integrates with third-party game studios and service providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to deliver casino games, live dealer experiences, and virtual sports products. When you interact with a game powered by one of these studios, limited session and wagering data is processed by that studio's game servers as part of normal game operation.
Each third-party studio operates under its own privacy practices and data handling standards. jam37 has contractual data processing agreements in place with all studios and service providers that access player data, requiring them to process data only as instructed and to implement appropriate security measures.
jam37 is not responsible for the privacy practices of websites that may be linked to or from the platform by third parties. This Privacy Policy applies exclusively to data processing conducted by jam37 in connection with the https://jam37.app platform. Players are encouraged to review the privacy policies of any third-party services they use independently.
jam37 reserves the right to update or modify this Privacy Policy at any time. Material changes — meaning changes that significantly affect the way we collect, use, or share your Personal Data, or that materially affect your rights — will be communicated to you via email and by a prominent notice on the platform homepage at least fourteen (14) days before the changes take effect.
Non-material changes (such as clarifications of existing language, corrections of typographical errors, or updates to contact details) may be made without advance notice, although the "Last updated" date at the top of this policy will always reflect the date of the most recent revision.
Your continued use of the jam37 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to any change, you must cease using the platform and may close your account by contacting support prior to the effective date of the change.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way jam37 processes your Personal Data, please contact us through the following channels:
jam37 aims to acknowledge all privacy-related written enquiries within two (2) business days (WIB) and to resolve all formal data subject requests within thirty (30) calendar days of receipt of a verified request.
Now that you understand how jam37 protects your personal data, you can play with confidence. Log in to your account, explore our full game library, or check our FAQ if you have any remaining questions.