138 Privacy Policy

This page describes what we collect when you use 138 and how we keep that data protected. We built our privacy practices on transparency—all our rules, data-handling procedures, and your rights are documented here so you understand exactly what happens to your information.

We at 138 operate an online entertainment platform offering live-dealer tables, sportsbook markets, slot games, and esports coverage. Our service is available only where local law permits—players are responsible for verifying compliance with their own jurisdiction's regulations. When you create an account, deposit via DANA, e-wallet, mobile banking, or other Indonesia-region payment methods, or play our blackjack, roulette, baccarat, Dragon Tiger, or sportsbook markets, we collect certain personal data. This policy explains what data we gather, how we use it, who has access to it, and what rights you have over your information.

What We Collect on 138

We collect account information when you register—your name, email address, phone number, date of birth, and residential address. We also collect identity documents (Indonesian ID card, passport, or utility bill) during our Know Your Customer (KYC) verification process. This verification is mandatory before your first withdrawal and protects both you and 138 from fraud and money-laundering risks.

We collect payment information when you fund your 138 account. If you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or our partner banks (mobile banking, local payment, online payment, e-wallet), we store transaction records, amounts, timestamps, and the payment method you selected. We do not store your full bank credentials or e-wallet passwords—only the transaction receipt and your chosen method identifier.

Our servers record your activity on 138: which games you access, how long you play, your session timestamps, and your IP address. We also collect browser and device information (operating system, browser type, screen resolution) to optimize the platform's performance on Android, iOS, and desktop browsers.

How We Use Your Data

We use your account information to verify your identity, process deposits and withdrawals, and communicate with you about your 138 account—login alerts, deposit confirmations, withdrawal status, and service updates. We may contact you via email, SMS, or phone during Liga 1 seasons, Piala AFF tournaments, or other major esports events to inform you of new market coverage or live-table promotions, but only if you have not opted out of promotional communication.

We use payment data to reconcile your balance, detect fraudulent transactions, and ensure compliance with anti-money-laundering (AML) regulations. If your withdrawal is delayed or flagged for review, we may share your transaction history with our compliance team and our banking partners to verify the legitimacy of your funds.

We use session and device data to improve 138's user experience—analyzing which features are slow, which payment methods encounter errors, and how our live-dealer streams perform on weak 4G networks. We also use this data to detect abuse (account sharing, bonus manipulation, automated software) and protect the integrity of our sportsbook and live-casino games.

Third-Party Processors and Data Sharing

Our 138 platform relies on third-party service providers who process your data on our behalf. Our payment-gateway partners (handling mobile banking, local payment, online payment, and bank transfers) receive your transaction details to validate deposits and initiate withdrawals. Our KYC verification provider receives your scanned ID and address documents to confirm your identity. Our live-casino studio partners in Southeast Asia receive only your username and session ID—not your personal details—to manage table entry and dealer interaction.

We may be required by law to share your data with Indonesian regulatory authorities, financial-crime units, or courts if we receive a lawful request. We do not sell your data to third parties for marketing purposes, nor do we share your email or phone number with external advertisers.

Our servers may sit outside your jurisdiction—we use cloud infrastructure in Singapore and Australia for platform stability and backup. Your data in transit is encrypted (TLS 1.2 or higher), and our databases are access-restricted to authorized 138 staff only.

Your Rights and Contact

You have the right to request access to all personal data we hold on your 138 account. You may also request correction of inaccurate information (e.g., if your registered name contains a typo) or deletion of your account and associated records after any pending withdrawals or disputes are resolved. To exercise these rights, contact our support team via the email address listed in your 138 account settings.

We use cookies and browser-session tokens to keep you logged into 138 and to remember your preferred language and table-limit settings. These are necessary for platform operation—you cannot use 138 without accepting them. We do not use third-party tracking cookies for behavioral advertising.

Last updated: This privacy policy is effective as of the date shown in your 138 account settings. We may update it to reflect changes in law or platform operations. We will notify you via email if material changes occur.