Why Two-Factor Authentication Matters on judisgp login
Your judisgp login account holds payment methods, transaction history, and access to tournaments and live games. If someone gains your password, they could change your email, initiate withdrawals, or lock you out. Two-factor authentication adds a barrier: even with your correct password, they cannot access your account without the second verification code.
We do not force 2FA on all users, but we strongly recommend it. After major holidays (Idul Fitri, Idul Adha, Imlek, Nyepi), when account activity peaks and phishing attacks increase, we see higher adoption of 2FA among security-conscious users. If you've ever had concerns about account takeover or shared internet access, 2FA is the simplest safeguard.
2FA protects not only your account but also your balance and payment methods. When you withdraw funds to your bank account or digital wallet (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet), large requests may require 2FA verification as an extra step. This ensures that a bad actor cannot silently redirect your balance to a different account.
Our support team uses 2FA status as a verification step during account recovery. If you lose access to your email or phone, we can still help you regain control, but the process is faster if you have 2FA enabled—it proves you had intentional security practices in place.
Enabling SMS-Based Two-Factor Authentication
To enable SMS 2FA, go to Account Settings → Security Settings → Two-Factor Authentication. Select "SMS Code" and enter your phone number. We send a test code to confirm the number is correct. Enter that code to activate SMS 2FA.
From that moment on, every login prompts you for a one-time password (OTP) sent to your registered phone via SMS. The code expires in subject to verification. If you don't receive it, we offer a "Resend Code" button—wait 30 seconds between attempts. Most users receive SMS codes within seconds, but during high-traffic periods (e.g., major Liga 1 or Piala AFF matches), SMS queues can add subject to verification.
Using an Authenticator App for Time-Based Codes
If you prefer not to rely on SMS, select "Authenticator App" during 2FA setup. We generate a QR code that you scan with apps like Google Authenticator, Microsoft Authenticator, or Authy. The app then generates six-digit codes that refresh every 30 seconds. No internet connection is needed—the codes work offline.
Authenticator app codes are faster than SMS (instant, no network delay) and work in any region or time zone. The downside: if you lose your phone, you lose access to those codes. We recommend saving your recovery codes (provided during setup) in a secure location—a password manager, a locked drawer, or a trusted friend's secure storage.
Key takeaways
- SMS 2FA sends one-time codes to your phone; app-based 2FA generates codes locally on your device
- You may enable both methods and choose which to use at login time
- Recovery codes allow account access if you lose your phone or authenticator app
- Large withdrawals and account-recovery flows may require 2FA verification as an extra step
- Disabling 2FA requires your password and a verification code—protecting against accidental deactivation
Managing Multiple Devices and Changing Your Phone Number
If you use SMS 2FA and change your phone number, update your account immediately. Go to Account Settings → Phone Number and enter your new number. We send a verification code to your old number as a final check, then switch to the new number. You'll need to re-enter 2FA codes on your next login using the new number.
If you switch to a new phone but keep the same number, there's nothing to update—2FA continues working without interruption. If you switch phones and your authenticator app codes, reinstall the app on the new device and re-scan the QR code from your Account Settings. Your old app will stop generating valid codes, but the new installation will work immediately.
Lost Access to Your 2FA Device—Account Recovery
If you lose your phone or can no longer access your authenticator app, you can still regain access to your account using your recovery codes. During login, if you don't have access to your 2FA method, select "Use a recovery code" and enter one of the eight codes we provided during setup. Each recovery code works once; after use, it's marked as consumed.
If you've lost your recovery codes as well, contact our support team. We verify your identity using your email address and government ID (the one you provided during KYC verification). Our support team asks you to confirm your account details—name, registered address, phone number—and verifies the information against our records. This process typically takes 2–4 hours during business hours (08:00–20:00 Indonesia Standard Time). Once verified, we disable 2FA temporarily and allow you to re-establish it with a new phone number or authenticator app.
Two-Factor Authentication and Your Tournaments, Live Games, and Withdrawals
2FA does not interfere with daily tournament play on Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, or Mahjong Ways. After your initial login, you stay signed in across your browsing session and can join tournaments without re-entering a 2FA code. If your session expires (typically after 24 hours of inactivity), you'll need to log in again, and 2FA will prompt you once more.
For withdrawal requests above a certain threshold (account-tier dependent), we may request a 2FA code as a final security check before processing. This is an additional layer on top of your account's standard withdrawal flow. You'll see a prompt on-screen: enter your SMS code or authenticator app code, and the withdrawal moves to processing within 2–4 hours depending on your chosen payment method (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, or bank transfer via online payment, e-wallet, mobile banking, local payment).
Disabling Two-Factor Authentication
To turn off 2FA, go to Account Settings → Security Settings → Two-Factor Authentication and select "Disable." You'll be asked to confirm your password and provide a current 2FA code (SMS or app-based, whichever is active). This double-confirmation prevents accidental disabling. Once disabled, your next login requires only your password—no 2FA prompt. We recommend leaving 2FA enabled, but the choice is yours.