138klub Casino & Sportsbook Data Care

This page describes what data we collect when you use 138klub and how we keep that information protected. We take data security seriously because your account details, payment information, and transaction history are sensitive. Our commitment is to collect only what we need, store it safely, and never share it with third parties without your permission or legal obligation.

At 138klub, we operate across multiple Indonesian cities — Jakarta, Surabaya, Bandung, Medan — and supported jurisdictions worldwide. Your data may travel between our servers, payment processors, and backup facilities. This page explains how data flows, where it sits, and what rights you have over it. We comply with applicable data-protection laws in every territory where we operate.

If you have questions about how we handle your data, or if you want to exercise your privacy rights, our support team is available to help.

What data we collect at 138klub

When you register for a 138klub account, we collect your name, email address, phone number, and date of birth. During identity verification, we may ask for a copy of your national ID or passport. We use this data to verify your age and identity, comply with anti-money-laundering regulations, and prevent fraud.

We also collect payment information. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we record the transaction details, the amount, and the timestamp. We store limited payment data — we do not store full card numbers or wallet passwords. Payment processors (mobile banking, local payment, etc.) handle the sensitive credentials; we only see transaction confirmations.

Your gaming activity is logged on our platform. We record which markets you place bets on (Liga 1, Piala AFF, Champions League, esports), which games you play (live blackjack, roulette, Dragon Tiger, slots), how much you wager, and the outcomes. This data helps us detect fraud, manage your account limits, and improve our platform. We also log your login times, devices, and IP addresses to protect account security.

How we use your data

We use your personal data for several purposes. First, account management: your name and contact details let us send you account statements, respond to support requests, and notify you of important changes. Second, transaction processing: your payment information enables deposits and withdrawals. Third, legal compliance: we verify your identity and age as required by gaming regulations in each jurisdiction.

We also use data for fraud detection and prevention. When we see suspicious activity — multiple accounts from one location, unusual betting patterns, rapid large withdrawals — our security team investigates. This protects both you and 138klub. Finally, we use aggregated, anonymized data to improve our platform: we analyze which football leagues are most popular, which payment methods players prefer, and how often players engage with different game types.

Third-party processors and data transfers

We rely on third-party services to operate 138klub. Payment processors (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, and banks mobile banking, local payment, online payment, e-wallet) handle financial transactions. Cloud service providers host our databases and backups. Email delivery services send you account confirmations and support responses. Each processor has a contract with us that requires them to protect your data to the same standard we do.

Our servers may sit outside your jurisdiction. Data backups are stored in multiple geographic locations for redundancy and disaster recovery. When your data crosses borders, it remains encrypted. We comply with data-protection laws in every territory — if local law restricts data transfers, we follow that restriction.

Your rights over your 138klub data

You have the right to access your data. If you want to see what we hold about you, contact our support team and we'll provide a complete export of your account data within ten business days. You can also update your contact information, email, or phone number directly in your account settings.

You have the right to delete your account and associated data. Request account closure through your settings or contact support. When we close your account, we delete your personal data from active systems. We retain transaction records and identity verification documents as long as required by law (typically 5–7 years for gaming operators), but we remove direct identifiers so the data cannot be linked back to you.

You have the right to object to marketing communications. If we ever send you promotional emails (which we limit to account-related updates), you can unsubscribe by clicking the link in the email or requesting removal through support. You cannot unsubscribe from legally required notices, such as confirmations of account closure.

At 138klub, we collect data to serve you — not to exploit you. Your information is a trust we hold, and we protect it accordingly.

Cookies and tracking technologies

When you visit 138klub, your browser stores small files called cookies. We use cookies to remember your login, keep you signed in across sessions, and track your navigation patterns to detect fraud. For example, if someone tries to log in from an unusual location, our system flags it as a potential security breach. Cookies help us do this.

We use first-party cookies (set by 138klub) and may use third-party cookies from analytics services. These track which pages you visit, how long you spend on each, and which features you use. This helps us improve 138klub — if we see that most players abandon a particular game type quickly, we know to investigate why.

You can disable cookies in your browser settings, but doing so may limit 138klub functionality. We do not use cookies to track you across unrelated websites. We do not build profiles for sale to advertisers. Our cookie use is limited to platform operations, security, and internal analytics.

Data retention and deletion

We retain account data for as long as your 138klub account is active. Once you close your account, we retain transaction records and identity verification documents as required by gaming and anti-money-laundering regulations — typically 5–7 years. After that period, we delete the records.

We retain login logs and activity data for up to 2 years. This allows us to investigate account disputes or security incidents if they surface months after the fact. Aggregated, anonymized data (such as "non-specific info of Liga 1 bettors also play Dragon Tiger") is retained indefinitely because it cannot identify individuals.

Data security measures

We protect your 138klub data using industry-standard encryption (TLS for data in transit, AES-256 for data at rest). Our servers are protected by firewalls and intrusion-detection systems. Access to your data is restricted to staff members who need it to serve your account — a principle called least privilege.

We regularly audit our systems and conduct penetration testing to find and fix vulnerabilities. If we ever discover a data breach affecting your information, we notify you within 72 hours as required by law. We also notify relevant authorities and provide guidance on protective steps you can take.

Your jurisdiction and this privacy policy

This privacy policy applies to all users of 138klub, regardless of where they access the platform. Our services are available only where local law permits. If your jurisdiction has specific data-protection laws (such as GDPR in Europe), those laws apply to you in addition to this policy. If there is a conflict between this policy and local law, local law takes precedence.

We do not knowingly collect data from users under the age of legal participation in their jurisdiction. If we discover that an account belongs to someone underage, we immediately close the account and return any funds.

If you have questions about this privacy policy or want to exercise your data rights, contact our support team. We will respond within 5–10 business days. You can also consult our terms of use for additional information about account policies and dispute resolution.