Privacy Policy - How joiway Protects Your Data

1. Introduction and Scope

This Privacy Policy governs the collection, use, disclosure, and protection of personal information by joiway, an online gaming platform operated under a Curacao gaming license. This policy applies to all users who access or use the joiway website at https://joiway.cam, including visitors, registered players, and anyone who interacts with our services.

joiway is the data controller responsible for your personal information. We are committed to processing your data in accordance with international data protection principles and applicable laws. If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at [email protected].

2. Information We Collect

2.1 Personal Information Provided by You

When you register an account on joiway, we collect the following personal information directly from you:

• Identity Information: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address, postal code
• Identity Verification Documents: Indonesian identity card (KTP), driver's license (SIM), passport, proof of address (utility bills or bank statements)
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay account IDs)
• Security Information: Username, password (stored in encrypted format), security questions and answers

2.2 Information Collected Automatically

When you use the joiway platform, we automatically collect technical and behavioral information including:

• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution
• Usage Data: Pages visited, features used, games played, betting history, time spent on platform, click patterns, search queries
• Transaction Data: Deposit amounts, withdrawal requests, payment methods used, transaction timestamps, transaction success or failure status
• Communication Records: Live chat transcripts, email correspondence, customer support tickets, phone call recordings (with your consent)
• Cookies and Tracking Technologies: Session cookies, preference cookies, analytics cookies, and similar tracking technologies (see Section 8 for details)

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Confirmation of deposit and withdrawal transactions from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay)
• Identity Verification Services: Results of identity checks, fraud screening, and anti-money laundering checks performed by specialized third-party vendors
• Gaming Providers: Game session data, betting outcomes, and win/loss information from game studios like Pragmatic Play, Evolution Gaming, and others
• Marketing Partners: Referral source information if you were referred to joiway through an affiliate or marketing campaign

3. How We Use Your Information

3.1 Account Management and Service Delivery

We use your personal information to:

• Create and maintain your joiway account
• Verify your identity and age (21+ requirement)
• Process deposits and withdrawals through Indonesian banks and e-wallets
• Provide access to casino games, live dealer tables, sports betting markets, and other gaming products
• Deliver customer support via live chat, email, WhatsApp, and phone
• Manage your account preferences, limits, and self-exclusion requests
• Maintain accurate records of your transactions and gaming activity

3.2 Legal and Regulatory Compliance

joiway processes your personal data to comply with legal obligations including:

• Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) regulations
• Know Your Customer (KYC) requirements mandated by our gaming license
• Age verification to prevent underage gambling (21+ restriction)
• Tax reporting obligations in applicable jurisdictions
• Court orders, legal proceedings, and requests from law enforcement authorities
• Responsible gaming monitoring to identify and assist problem gamblers

3.3 Fraud Prevention and Security

We analyze your information to detect and prevent:

• Fraudulent transactions and payment disputes
• Multiple account creation and bonus abuse
• Collusion between players in live games
• Use of stolen credit cards or bank accounts
• Unauthorized access to accounts
• Money laundering and terrorist financing activities

3.4 Marketing and Communications

With your consent, we may use your contact information to send:

• Promotional offers, bonuses, and special deals tailored to Indonesian players
• Information about new games, features, and platform updates
• Newsletters with gaming tips, sports betting insights, and industry news
• Birthday bonuses and anniversary rewards
• VIP program benefits and tier upgrade notifications

You can opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account communication preferences, or contacting customer support. Note that you cannot opt out of essential service communications such as transaction confirmations, security alerts, and account notifications.

3.5 Platform Improvement and Analytics

We use aggregated and anonymized data to:

• Analyze user behavior and preferences to improve platform design and user experience
• Optimize game selection based on popularity among Indonesian players
• Test new features and functionalities through A/B testing
• Generate business intelligence reports and performance metrics
• Conduct market research to understand Indonesian gambling trends

4. Legal Basis for Processing

joiway processes your personal data under the following legal bases:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (providing gaming services, processing payments)
• Legal Obligation: Processing is required to comply with AML, KYC, age verification, and other regulatory requirements
• Legitimate Interests: Processing is necessary for fraud prevention, security, platform improvement, and business operations
• Consent: You have given explicit consent for marketing communications and non-essential cookies

5. Data Sharing and Disclosure

5.1 When We Share Your Information

joiway may share your personal information with the following categories of recipients:

• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals
• Gaming Providers: Game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe) to deliver casino games and live dealer tables
• Identity Verification Services: Third-party KYC and AML screening providers to verify your identity and comply with regulatory requirements
• Cloud Service Providers: Hosting and storage providers where your data is securely stored
• Analytics Providers: Services like Google Analytics to understand platform usage (anonymized data only)
• Customer Support Tools: Live chat platforms and help desk software to deliver customer service
• Legal and Regulatory Authorities: Courts, law enforcement, tax authorities, and gaming regulators when legally required

5.2 Data Protection Safeguards

All third parties who process personal data on behalf of joiway are contractually obligated to:

• Use your data only for specified purposes and not for their own business interests
• Implement appropriate technical and organizational security measures
• Not share your data with additional third parties without authorization
• Delete or return your data upon request or contract termination
• Comply with applicable data protection laws and regulations

5.3 International Data Transfers

Your personal data may be transferred to and processed in countries outside Indonesia, including servers located in secure data centers in Europe and Asia. When transferring data internationally, joiway ensures adequate protection through:

• Standard Contractual Clauses approved by data protection authorities
• Data Processing Agreements with third-party processors
• Ensuring recipients are located in countries with adequate data protection laws

6. Data Security Measures

joiway implements industry-leading security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmissions are protected by 256-bit SSL/TLS encryption. Passwords are hashed using bcrypt with salt.
• Secure Servers: Data is stored on secure servers in ISO 27001-certified data centers with 24/7 monitoring, biometric access controls, and redundant backup systems.
• Firewall Protection: Advanced firewall systems and intrusion detection prevent unauthorized network access.
• Access Controls: Employee access to personal data is restricted on a need-to-know basis with role-based permissions.
• Regular Audits: Independent security audits and penetration testing are conducted quarterly.
• Incident Response: We maintain a comprehensive data breach response plan and will notify affected users within 72 hours of discovering any security incident.

7. Data Retention

joiway retains your personal information for the following periods:

Data Type	Retention Period	Reason
Account Information	Duration of account + 7 years after closure	Legal, regulatory, and tax compliance
Transaction Records	10 years	AML/CTF regulations
KYC Documents	7 years after account closure	Regulatory requirements
Gaming History	7 years	Dispute resolution and audit trails
Marketing Consent	Until consent is withdrawn	Ongoing marketing communications
Chat Transcripts	3 years	Customer service quality and dispute resolution

After retention periods expire, personal data is securely deleted or anonymized. You may request earlier deletion of certain data types subject to our legal obligations.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit joiway. We use cookies to enhance your experience, remember your preferences, and analyze platform usage.

8.2 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, account login, and security. Cannot be disabled.
• Performance Cookies: Collect anonymous usage statistics to improve platform performance.
• Functionality Cookies: Remember your language preference, currency settings, and other customizations.
• Marketing Cookies: Track your activity to deliver personalized promotions and measure campaign effectiveness. Requires your consent.

8.3 Cookie Management

You can manage cookie preferences through your browser settings or our cookie consent tool. Note that disabling certain cookies may affect platform functionality and limit your ability to use some features.

9. Your Privacy Rights

As a joiway user, you have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Restriction: Limit how we process your data in certain circumstances
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Opt out of marketing communications and profiling
• Right to Withdraw Consent: Withdraw consent for processing at any time

To exercise any of these rights, contact our Data Protection Officer at [email protected] or submit a request through your account settings. We will respond within 30 days.

10. Children's Privacy

joiway services are intended exclusively for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected data from a minor, we will immediately delete it and close the account. Parents or guardians who believe their child has provided personal information to joiway should contact us immediately at [email protected].

11. Changes to This Privacy Policy

joiway reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or business operations. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on the platform homepage

Your continued use of joiway services after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Information

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact:

• Data Protection Officer: [email protected]
• Customer Support: [email protected]
• Live Chat: Available 24/7 on the joiway platform
• Phone Support: Available 24/7 (contact details provided in your account area)

We aim to respond to all privacy-related inquiries within 48 hours during business days (Monday-Friday, 08:00-18:00 WIB) and within 72 hours on weekends and Indonesian public holidays.