Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

ligajp acts as the Data Controller for all personal data collected through the Platform. This means ligajp determines the purposes for which your personal data is collected and the manner in which it is processed.

For all data-related inquiries, correction requests, deletion requests, or complaints, you may contact the ligajp Data Protection team directly:

Where ligajp engages third-party processors (such as payment gateways or identity verification providers), those parties act under ligajp's instruction and are bound by data processing agreements that require them to maintain at minimum the same level of data protection as described in this policy.

ligajp collects personal data through three primary channels: information you provide directly, information generated automatically through your use of the Platform, and information received from third parties. The table below summarizes the categories of data collected:

ligajp uses the personal data it collects for the following specific purposes only:

1. Account Management: Creating, maintaining, and securing your ligajp account; processing login requests; enabling password resets and account recovery.
2. Identity & Age Verification (KYC): Confirming that you meet the 21+ age requirement and that your identity matches the information provided at registration, in compliance with anti-money laundering obligations.
3. Payment Processing: Facilitating deposits and withdrawals via Indonesian banks and e-wallets; reconciling transactions; investigating payment discrepancies.
4. Bonus & Promotion Administration: Verifying bonus eligibility, tracking wagering requirement progress, and detecting bonus abuse or multi-accounting.
5. Fraud Prevention & Security: Monitoring for suspicious login patterns, unusual transaction behavior, and potential account compromise; taking protective action where necessary.
6. Customer Support: Responding to your inquiries, resolving disputes, and maintaining records of support interactions for quality assurance.
7. Platform Improvement: Analyzing aggregated, anonymized usage data to improve game selection, interface design, payment flows, and overall platform performance.
8. Legal & Regulatory Compliance: Meeting obligations under applicable international gaming licensing requirements, AML regulations, and data protection laws.
9. Marketing Communications: Sending promotional emails or notifications about ligajp offers, new game launches, and seasonal promotions — only where you have opted in, or where ligajp has a legitimate interest and you have not opted out. See Section 13 for full details.
10. Responsible Gaming: Monitoring wagering patterns to identify early indicators of problem gambling and intervening through the responsible gaming tools described in our Responsible Gaming page.

ligajp processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between you and ligajp — including account registration, payment processing, and withdrawal facilitation.
• Legal Obligation: Processing required to comply with applicable laws — including KYC/AML verification, age checks, and record-keeping mandated by our international gaming license.
• Legitimate Interests: Processing where ligajp has a legitimate business interest that is not overridden by your rights — including fraud prevention, platform security, and aggregated analytics for product improvement.
• Consent: Processing based on your explicit opt-in — specifically for marketing communications and for the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ligajp does not sell or rent your personal data to any third party. Data is shared externally only in the following limited circumstances:

1. Payment Processors: Your bank account details and transaction amounts are shared with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute the payment you have initiated.
2. KYC & Identity Verification Providers: Your identity documents and facial liveness data are shared with our contracted third-party verification provider solely for the purpose of completing your KYC check. Verification providers are prohibited from retaining or using your data beyond the scope of the verification.
3. Game Content Providers: Aggregated, anonymized gameplay data (not personally identifying information) may be shared with game studios such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft for game-performance analytics.
4. Legal & Regulatory Authorities: ligajp will disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or regulatory directive. ligajp will notify you of such disclosure where legally permitted to do so.
5. Business Transfers: In the event of a merger, acquisition, or sale of substantially all of ligajp's assets, your personal data may be transferred to the successor entity. You will be notified in advance and given the option to close your account and request data deletion prior to any such transfer taking effect.

All third-party processors engaged by ligajp are bound by data processing agreements that impose confidentiality, security, and limited-use obligations consistent with this Privacy Policy.

ligajp's primary server infrastructure is hosted in data centers that maintain ISO 27001 certification or equivalent international security standards. As an internationally licensed platform serving Indonesian players, some data processing operations may involve transfers to servers or service providers located outside Indonesia.

Where such transfers occur, ligajp ensures that adequate safeguards are in place, including:

• Contractual data protection clauses requiring the receiving party to maintain standards equivalent to those in this policy;
• Selection of processors that operate in jurisdictions with recognized data protection frameworks;
• Encryption of data both in transit and at rest, ensuring that transferred data remains protected irrespective of the physical location of the receiving server.

By registering an account and accepting these terms, you acknowledge that your personal data may be transferred and processed outside Indonesia for the purposes described in this policy, subject to the protections outlined above.

ligajp retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Anonymized data may be retained indefinitely for aggregate analytics purposes.

ligajp uses cookies and similar tracking technologies to ensure the Platform functions correctly and to improve your experience. The types of cookies used are described below:

• Essential Cookies: Required for core Platform functionality — including maintaining your login session, storing your language preference, and enabling secure payment flows. These cannot be disabled without impairing Platform functionality.
• Performance Cookies: Collect anonymized data about how Members interact with the Platform — such as which pages are visited most frequently and where errors occur — to help ligajp improve performance and reliability.
• Functional Cookies: Remember your personal settings, such as preferred betting markets, display preferences, and notification settings, so you do not need to reconfigure them on each visit.
• Analytics Cookies: Used to generate aggregate, anonymized reports on Platform traffic, session lengths, and feature adoption. ligajp uses this data internally and does not share identifiable analytics data with third parties.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform, but some personalization features may not function as intended. Note that essential cookies cannot be disabled via browser settings without affecting core Platform functionality.

As a ligajp Member, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at support@ligajp.cam with the subject line "Data Privacy Request". We will respond within 30 calendar days.

ligajp applies a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. The following technical and organizational measures are in place:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and the ligajp Platform is encrypted end-to-end.
• AES-256 Encryption at Rest: Sensitive stored data — including identity documents, payment details, and account credentials — is encrypted at the database level.
• Access Controls: Strict role-based access controls limit which ligajp personnel can view personal data, on a need-to-know basis only. All access is logged and audited.
• Two-Factor Authentication (2FA): Available to all Members for account login. ligajp strongly recommends enabling 2FA for enhanced account security.
• Intrusion Detection: Automated monitoring systems detect and alert on anomalous login patterns, unusual transaction volumes, and potential system intrusions in real time.
• Regular Security Audits: The Platform undergoes periodic third-party security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All ligajp staff who handle personal data receive regular training on data protection obligations, phishing awareness, and secure data handling procedures.

While ligajp takes all reasonable precautions to safeguard your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying ligajp immediately if you suspect unauthorized access to your account.

If ligajp discovers that personal data has been collected from an individual who is under 21 years of age, the following steps will be taken immediately:

1. The associated account will be suspended and all access revoked;
2. All personal data collected from the minor will be permanently deleted from ligajp's systems within 72 hours;
3. Any deposits made will be refunded to the originating payment method, and any winnings accrued will be voided;
4. The incident will be documented internally for audit purposes.

If you believe a minor may have accessed or registered on the ligajp Platform, please notify us immediately at support@ligajp.cam. ligajp also recommends that parents and guardians make use of parental control software to prevent minors from accessing online gambling platforms.

ligajp may send you promotional communications about new games, seasonal offers (such as Idul Fitri promotions, Ramadhan specials, and Indonesian Independence Day campaigns), bonus launches, and platform updates in the following circumstances:

• You have explicitly opted in to marketing communications during registration or subsequently through your Account Settings; or
• You are an existing Member and the communication relates to services similar to those you have already used, and you have not opted out.

You may opt out of marketing communications at any time by:

1. Clicking the "Unsubscribe" link at the bottom of any marketing email;
2. Updating your notification preferences in the Account Settings panel; or
3. Contacting support at support@ligajp.cam with the subject line "Unsubscribe".

Opting out of marketing communications does not affect your receipt of transactional messages — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which are necessary for the operation of your Account and cannot be disabled.

ligajp reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, ligajp will:

1. Update the "Last updated" date at the top of this page;
2. Send a notification to your registered email address summarizing the key changes, at least 14 days before the amended policy takes effect;
3. Display a prominent notice on the Platform homepage for a period of 14 days following any material amendment.

Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment and acceptance of the revised Privacy Policy. If you do not accept the changes, you must discontinue use of the Platform and contact support to close your account and request deletion of your personal data.

The most current version of this Privacy Policy is always accessible at https://ligajp.cam/privacy-policy and supersedes all prior versions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how ligajp has handled your personal data, please contact us directly:

ligajp takes all privacy complaints seriously. Upon receipt of a complaint, we will:

1. Acknowledge receipt within 3 business days;
2. Investigate the complaint thoroughly and in good faith;
3. Provide a written response within 30 calendar days, or notify you if additional time is required due to the complexity of the matter.

If you are not satisfied with ligajp's response to your complaint, you may escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. This Privacy Policy was last reviewed and updated on January 1, 2026.