138slot Privacy Policy

This page describes what data we collect when you use 138slot and how we keep that data protected. Our privacy practices reflect our commitment to transparency — we explain which information we gather, who has access to it, how long we retain it, and what rights you have over your personal data.

We collect data only when you interact with our platform: creating an account, making a deposit, placing a bet, or contacting support. We use this data to operate our service, verify your identity, process withdrawals, and prevent fraud. We do not sell your information to advertisers or unrelated third parties. Instead, we share data only with payment processors, KYC verification providers, and regulatory partners where necessary to provide our service and comply with law.

Our servers may be located outside Indonesia. By using 138slot, you acknowledge that your data may be processed and stored internationally, subject to the data protection standards we maintain. Access to our services is available only where local law permits.

What data we collect and how we use it

Account creation and identity data

When you open an account on 138slot, we collect your email address, a password you create, and your name. We use this data to authenticate you, send account notifications (withdrawal confirmations, login alerts), and recover your account if you forget your password. We store your email securely and never share it with advertisers or unrelated third parties.

Before your first withdrawal, we ask for Know-Your-Customer (KYC) verification. You provide your national ID number, a selfie, and an address proof (utility bill, rental agreement, or government document). We verify this information against official databases to confirm your identity and age. We retain KYC documents encrypted in our secure vault, accessible only to our compliance and fraud teams. We do not share KYC data with any party outside our internal fraud and verification teams, except where required by law.

Transaction and payment data

We record every deposit and withdrawal you make on 138slot. For deposits via DANA, e-wallet, mobile banking, local payment, online payment, or e-walletwe log the timestamp, amount, and confirmation from your payment provider. For bank transfers to our mobile banking, local payment, online payment, or e-wallet Virtual Accountswe note the transaction reference and arrival time. We use this data to reconcile your account, detect fraud, and comply with anti-money-laundering regulations.

We do not store your payment details (credit card numbers, e-wallet passwords, or bank account credentials) on our servers. Instead, we direct you to your payment provider's own secure checkout, where they handle sensitive information. We receive only a confirmation token from your provider confirming payment was successful.

Betting and gameplay data

We log every bet you place, spin you take on slot games, and hand you play at our live-dealer tables. This data includes the date, time, game type, stake, result, and balance change. We collect this data to reconstruct your account activity, resolve disputes, and detect irregularities (e.g., collusion between accounts, automated betting). We retain detailed betting records for at least one year so you can review your history and we can settle any claims.

KYC verification

Identity check we perform before allowing withdrawals, using national ID, selfie, and address proof to confirm your identity and age.

Encryption

A security method we use to scramble sensitive data (passwords, KYC documents, payment records) so only authorised systems can read it.

Third-party processor

A company we partner with (payment provider, KYC vendor, or fraud service) that accesses your data only for a specific purpose we've authorised.

Device and login data

When you log into 138slot, we record your device type (Android phone, iOS phone, or web browser), IP address, and login time. We use this data to detect unauthorised access — if we see a login from an unfamiliar location or device, we may send you a verification email or enable two-factor authentication temporarily. We retain login records for three months so we can investigate account compromise or support password-reset requests.

Data sharing and retention

Who we share your data with

We share your data only when necessary to operate 138slot or comply with law. Our payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank partners) receive your KYC data and transaction records when you deposit or withdraw. Our KYC verification provider receives your ID, selfie, and address proof to confirm your identity. Our anti-fraud service receives your betting patterns and IP address to detect suspicious activity.

If we are required by law to disclose your data — for example, if a court orders it or a government regulator investigates us — we will comply. We will inform you of any such disclosure unless law prohibits us from doing so. We do not sell your data to marketers, advertisers, or unrelated businesses.

How long we keep your data

We retain your account data (email, name, KYC documents) for as long as your account is active and for a reasonable period afterward (typically two years) to settle disputes and comply with law. We keep betting records for at least one year so you can access your history. We delete login and device records after three months unless we suspect fraud. If you request account closure, we begin deleting your personal data after the retention period, though we may keep transaction records longer if required by law.

Your data on 138slot belongs to you. We keep it protected, never sell it, and respect your right to access, correct, or delete it within legal limits.

Your rights and security measures

Your rights on 138slot

You have the right to access all personal data we hold about you. Log into your Account, tap Privacy Settings, and download your data in a portable format. You may also request that we correct inaccurate data — for example, if your address has changed, update it in Account Settings. If you believe we are misusing your data, you may request deletion (subject to legal retention requirements). To exercise any of these rights, contact our support team with proof of identity.

How we protect your data

We secure all data on 138slot using industry-standard encryption (TLS/SSL for data in transit, AES-256 for data at rest). We restrict access to KYC documents and payment records to authorised staff only. We use two-factor authentication on our internal systems and conduct regular security audits. Our servers are located in secure data centres with 24/7 monitoring and backup systems.

However, no security system is perfect. If we suffer a breach and your data is compromised, we will notify you as soon as legally permissible and describe what happened, what data was affected, and what steps we are taking to mitigate harm.

Cookies and tracking

We use cookies on 138slot to maintain your login session, remember your preferences (language, theme, notification settings), and analyse platform performance. Most cookies are session-based and expire when you close your browser. We do not use cookies to track you across other websites. You may disable cookies in your browser settings, but this may prevent you from logging into 138slot.

Contact and updates

If you have questions about our privacy practices, contact our support team via email or our in-app chat. If you notice suspicious activity on your 138slot account — unfamiliar logins, unexplained withdrawals, or data-access requests — report it immediately so we can investigate. We update this privacy policy periodically to reflect changes in our practices or applicable law. Material changes are announced in your account dashboard. Your continued use of 138slot after a policy update signifies acceptance of the new terms.

Our privacy practices reflect our commitment to keeping your data secure and your trust intact. We operate across multiple jurisdictions, so data protection laws vary by region. If you are in a jurisdiction with specific data rights (such as the European Union), additional protections may apply. Contact us if you believe your data rights have been violated, and we will respond promptly.