Desktop & Mobile
Privacy protections are identical whether you access online138 on your phone or desktop. Encryption and data handling never change between platforms.
LEGAL REFERENCE
Your Data. Our Responsibility.
We handle your account information, payment details and gaming activity with the same care we put into our lobby. This policy shows exactly how we collect, use and...
Data SecurityPayment ProtectionYour ControlTransparencyIndonesia Compliant
What We Collect and Why
When you open an account, we collect your name, email, phone number and identity details to verify your age and location. We record your gaming activity, session history and payment transactions to maintain account integrity and detect fraud. Your DANA, OVO, GoPay and QRIS payment information is encrypted and never stored in plain text. We use this data to process withdrawals, send
account updates and comply with local regulations in supported regions. You can request access to or deletion of your personal data at any time through your account settings.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
WHY THIS PLATFORM
How We Earn Your Trust
Encryption Standard
All data in transit and at rest uses industry-standard TLS 1.3 encryption. Your payment details and login credentials are protected by multi-layer security protocols.
Regular Audits
We conduct quarterly security audits and penetration testing to identify and close vulnerabilities before they become risks to your account.
No Third-Party Sales
We never sell your personal data to advertisers or brokers. Your information stays within online138 and trusted payment processors only.
Transparent Logging
Every access to your account is logged and timestamped. You can view login history and active sessions from your security dashboard.
Compliance Framework
Our privacy practices align with Indonesian data protection standards and international best practices for gaming platforms in supported regions.
Incident Response
If a breach occurs, we notify affected users within 24 hours with details and recommended actions. We maintain a public incident log for transparency.
BENCHMARKED
Consistency Across Our Platform
Live Casino & Slots
Your data security is the same in our live dealer rooms and slot lobbies. All game types use the same encrypted connection and fraud detection.
Sportsbook Markets
Betting activity in our sportsbook is protected with the same standards as casino play. Your wagers and account balance are equally secure.
Payment Methods
DANA, OVO, GoPay and QRIS transactions receive identical encryption and fraud monitoring. No payment method is treated as less secure than another.
Account History
Your gaming history, deposits and withdrawals are stored with the same security level. Historical data is never downgraded or moved to less-protected storage.
Support Channels
Whether you contact us via email or in-app chat, your privacy inquiry is handled by the same trained team using identical security protocols.
Policy Updates
When we update this privacy policy, changes apply uniformly across all regions and all account types. We notify you 30 days before any material change takes effect.
QUICK SIGNAL
What Defines Our Privacy Approach
01
Minimal Collection
We ask only for information needed to verify your identity, process payments and comply with local law. We don't collect browsing history or device fingerprints.
02
Clear Retention
Account data is kept for the life of your account plus 7 years for regulatory compliance. Deleted accounts are purged from active systems within 90 days.
03
Your Rights
You can access, correct, download or delete your personal data anytime. We don't charge fees for these requests and process them within 30 days.
04
Cookie Control
Essential cookies keep you logged in and secure. Marketing cookies are optional — you control them from your privacy settings without losing core features.
05
Third-Party Limits
We share data only with payment processors, fraud detection services and legal authorities when required. Partners sign strict data protection agreements.
06
Breach Notification
If your data is compromised, we notify you within 24 hours with details, impact assessment and recommended security steps to protect your account.
Privacy Policy Questions
Payment information is encrypted with TLS 1.3 and never stored in plain text on our servers. We use PCI-DSS compliant processors and tokenization so your actual card or wallet details are never exposed during transactions.
Yes. Go to Account Settings > Privacy > Data Export and request a complete copy of your profile, gaming history and transactions. We deliver it as a downloadable file within 7 business days.
Your account is deactivated immediately and marked for deletion. Personal data is purged from active systems within 90 days. We retain transaction records for 7 years to meet regulatory requirements in supported regions.
No. We never sell personal data to advertisers, brokers or marketing firms. We share data only with payment processors, fraud prevention services and legal authorities when required by law.
We review our policy quarterly and update it when regulations change or we introduce new features. Material changes are announced 30 days in advance via email and in-app notification.
Change your password immediately and contact our support team. We'll review your account activity, flag suspicious transactions and help you secure your DANA, OVO, GoPay or QRIS payment methods.
No. Your game history, bets and account balance are private. Other players see only your username in live dealer chat if you choose to participate. You can disable chat anytime.