How win138 collects, uses, protects, and manages your personal information and transaction data
Last Updated: January 15, 2026
Your Privacy Matters: win138 is committed to protecting the privacy and security of all personal information provided by our Indonesian users. This Privacy Policy explains how we collect, use, store, and safeguard your data in accordance with international privacy standards and best practices. By using win138 services, you consent to the data practices described in this policy.
This Privacy Policy applies to all users of the win138 online betting platform, accessible at https://win138.cam and through associated mobile applications. This policy governs the collection and processing of personal information from residents of Indonesia who register accounts, make deposits, place bets, or otherwise interact with our services. win138 operates as an international online gaming platform and processes user data in accordance with our licensing jurisdiction's privacy regulations while respecting Indonesian users' reasonable privacy expectations.
By creating an account on win138, you explicitly consent to the collection, use, storage, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this policy, you should not use our services. We recommend reading this policy in conjunction with our Terms & Conditions, which govern the overall relationship between win138 and our users.
win138 collects several categories of information necessary to provide secure, compliant, and personalized betting services to Indonesian players. The types of information we collect include:
During account registration and verification (KYC process), we collect the following personal details:
To process deposits and withdrawals securely, we collect and maintain records of:
We automatically collect information about your use of win138 services, including:
For security, fraud prevention, and platform optimization, we collect technical data including:
win138 uses the personal information we collect for specific, legitimate business purposes necessary to provide secure and compliant betting services. We do not use your information for purposes beyond those described below without obtaining your explicit consent.
Your personal information enables us to create and maintain your betting account, process your deposits and withdrawals through Indonesian banks and e-wallets, authenticate your identity during login and high-value transactions, settle bets and credit winnings to your account, and communicate important account updates, policy changes, or security alerts.
We process your data to comply with our licensing requirements, including verifying your age is 21 years or older as required by our terms, conducting Know Your Customer (KYC) identity verification to prevent fraud and identity theft, maintaining transaction records as required by anti-money laundering regulations, and responding to lawful requests from regulatory authorities or law enforcement agencies.
Your information helps us detect and prevent fraudulent activity including multiple account creation, collusion between players, bonus abuse, and payment fraud. We monitor betting patterns to identify potential match-fixing or irregular gambling behavior, protect your account from unauthorized access through IP tracking and device fingerprinting, and enforce our terms of service and betting rules fairly and consistently.
We use your contact information to respond to your inquiries via live chat, email, WhatsApp, or phone support, provide technical assistance with deposits, withdrawals, or gameplay issues, send transaction confirmations and withdrawal notifications, and notify you of important account security matters or policy updates.
With your consent, we may use your email address and phone number to send promotional offers, bonus opportunities, and new game announcements tailored to Indonesian players, information about sports events and betting opportunities for BRI Liga 1, EPL, and other popular leagues, VIP program updates and tier advancement notifications, and responsible gaming reminders and resources. You may opt out of marketing communications at any time through your account settings or by contacting support.
We analyze aggregated, anonymized user data to improve win138 services by understanding which games, sports, and features are most popular among Indonesian players, optimizing website performance and mobile app functionality, developing new betting markets and game offerings based on user preferences, and enhancing user interface design and navigation based on usage patterns.
win138 implements comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our data protection infrastructure includes:
All data transmitted between your device and win138 servers is protected using 256-bit SSL (Secure Socket Layer) encryption, the same security standard used by major Indonesian banks like BCA, BRI, and BNI. This encryption ensures that your login credentials, personal information, and financial data cannot be intercepted or read by third parties during transmission. Payment processing is conducted through secure, PCI-DSS compliant payment gateways.
Personal information is stored on secure servers with multiple layers of protection including physical security measures at data center facilities, firewalls and intrusion detection systems preventing unauthorized network access, regular security audits and vulnerability assessments conducted by independent cybersecurity experts, and strict access controls limiting which win138 employees can access sensitive user data, with all access logged and monitored.
We collect only the minimum information necessary to provide our services and comply with legal obligations. Personal data is retained only as long as your account remains active or as required by licensing regulations. Upon account closure, we securely delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law for regulatory, legal, tax, or anti-fraud purposes. Financial transaction records are typically retained for seven years to comply with Indonesian and international financial regulations.
All win138 employees with access to user data undergo regular privacy and security training. Access to personal information is granted on a need-to-know basis only, with separate permissions for different data categories. Customer support agents, for example, can view basic account information but cannot access financial passwords or modify security settings without additional authorization. All employee access to sensitive data is logged and subject to periodic audit.
win138 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the limited circumstances described below:
We share necessary payment information with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process your deposits and withdrawals. These partners are bound by strict confidentiality agreements and may only use your data to complete the requested financial transactions.
Certain gaming activity data (but not your full personal profile) may be shared with third-party game providers to deliver live casino services, slot games, and sports betting platforms. These providers receive only the minimum information necessary to operate games and track betting activity, typically limited to your username, bet amounts, and game outcomes.
We may disclose your information to licensing authorities and regulators to demonstrate compliance with gambling laws and regulations, to law enforcement agencies when required by valid legal process or court order, or in connection with investigations of suspected illegal activity, fraud, or violations of our terms of service. We will notify you of such disclosures where legally permitted to do so.
In the event that win138 is acquired by or merged with another company, or if we sell assets related to our business, your personal information may be transferred to the acquiring entity as part of the transaction. You will be notified via email and platform notice of any such change in ownership or control of your information.
As a win138 user, you have certain rights regarding your personal information. While win138 operates under international licensing, we respect privacy rights commonly recognized in Indonesia and internationally:
You have the right to request a copy of all personal information we hold about you. This can be accessed through your account dashboard or by submitting a formal data access request to our support team. We will provide this information in a commonly used electronic format within 30 days of your request.
If any of your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information directly through your account settings, including your email address, phone number, and communication preferences. For changes to your legal name or address, you may need to submit updated verification documents.
You may request deletion of your personal information by closing your account. Upon account closure, we will delete or anonymize your data within a reasonable timeframe, except where retention is required by law. Please note that we may retain certain transaction records for regulatory compliance even after account closure.
You can request that we limit how we use your information by opting out of marketing communications through your account settings, requesting temporary suspension of promotional emails and SMS messages, or enabling account restrictions such as cooling-off periods or self-exclusion that limit platform access.
You may object to certain data processing activities, particularly those related to marketing and profiling. However, some data processing is essential to provide betting services, and refusing such processing may prevent us from maintaining your account.
win138 uses cookies and similar tracking technologies to enhance your experience and secure the platform. Cookies are small text files stored on your device that help us recognize you during return visits, remember your preferences and login state, analyze platform usage patterns and popular features, and prevent fraud and unauthorized account access. You can manage cookie preferences through your browser settings, but disabling certain cookies may limit platform functionality, particularly features requiring persistent login sessions.
win138 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21. Our registration process includes age verification checks, and we require identification documents confirming date of birth. If we discover that a user is under 21, we will immediately close the account, void all bets and bonuses, and delete the associated personal information. Parents or guardians who believe their child has provided information to win138 should contact us immediately at [email protected].
win138 reserves the right to update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform features. The "Last Updated" date at the top of this page indicates the most recent revision. Material changes will be communicated via email to your registered address and through a prominent notice on the platform. Your continued use of win138 services after policy changes are posted constitutes acceptance of the updated terms. We encourage you to review this policy periodically to stay informed about how we protect your information.
If you have questions, concerns, or requests regarding this Privacy Policy or how win138 handles your personal information, please contact our Data Protection team:
For formal data access requests, deletion requests, or complaints regarding data handling, please provide your full name, registered email address, account username, and detailed description of your request or concern. We take all privacy inquiries seriously and will work diligently to address your concerns.
While win138 operates under international licensing, we recognize the importance of respecting Indonesian cultural and legal contexts regarding personal information:
When you use Indonesian banks such as BCA, BRI, BNI, or Mandiri, or e-wallets like OVO, DANA, GoPay, and ShopeePay, your financial information is processed according to those institutions' privacy policies in addition to ours. We do not store your complete bank account numbers or e-wallet passwords on our systems. Payment credentials are tokenized and encrypted to minimize exposure.
While our platform operates in English, our Indonesian-speaking customer support team can assist with privacy questions in both English and Indonesian. All privacy notifications and data access responses can be provided in English to accommodate Indonesian users' preferences.
As an international platform, win138 may store and process your data on servers located outside Indonesia. We ensure that any international data transfers are protected by appropriate safeguards including contractual protections with service providers, equivalent security standards to those described in this policy, and compliance with international data protection frameworks.
Your Consent: By using win138 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, storage, and disclosure of your personal information as described herein. You confirm that all information provided to win138 is accurate, complete, and belongs to you.
How we safeguard your information at every level
Bank-level encryption protects all data transmitted between your device and our servers, ensuring complete confidentiality.
Personal information stored on encrypted servers with multiple security layers, access controls, and regular security audits.
Robust identity verification prevents fraud and ensures only legitimate users access our platform, protecting the entire community.
We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data stays private.
Payment processing meets international security standards used by major banks and financial institutions worldwide.
Personal information retained only as long as necessary. Secure deletion protocols ensure data doesn't persist indefinitely.
| Data Category | Information Collected | Primary Purpose |
|---|---|---|
| Identity Information | Name, date of birth, KTP, address | Age verification, KYC compliance, fraud prevention |
| Contact Details | Email, phone number | Account communications, security alerts, support |
| Financial Data | Bank accounts, e-wallet details, transactions | Process deposits/withdrawals, transaction records |
| Gaming Activity | Bets placed, games played, win/loss history | Settle bets, bonus tracking, responsible gaming monitoring |
| Technical Data | IP address, device info, cookies | Security, fraud detection, platform optimization |
| Communications | Support chat logs, email correspondence | Resolve issues, improve customer service quality |
Learn more about our security measures and your rights as a win138 user