Last Updated: January 28, 2026

Effective Date: January 28, 2026

1. Introduction

This Privacy Policy describes how age138 (the "Company", "Platform", "we", "us", or "our") collects, uses, discloses, and protects the personal information of users (the "User", "Player", "you", or "your") who access or use our online betting platform, website, mobile applications, and related services (collectively, the "Services").

age138 operates an international online sportsbook and casino platform serving Indonesian players and users in other jurisdictions. We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with applicable data protection laws and industry best practices.

By creating an account on age138, accessing the Platform, or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, you must immediately cease using our Services and contact us to close your account.

2. Information We Collect

age138 collects various types of personal information to provide, maintain, and improve our Services, comply with legal obligations, and prevent fraud. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register an account on age138, we collect the following personal information:

  • Identity Information: Full legal name, date of birth, gender, and nationality
  • Contact Information: Email address, mobile phone number, and residential address
  • Account Credentials: Username, password (encrypted), and security questions/answers
  • Verification Documents: Government-issued ID (KTP for Indonesian residents, passport, or driver's license), proof of address (utility bills, bank statements), and payment method verification documents
  • Financial Information: Bank account details, e-wallet account information, transaction history, deposit and withdrawal records
  • Communication Records: Content of messages sent to customer support via live chat, email, WhatsApp, or in-app messaging

2.2 Information Collected Automatically

When you access or use age138 Services, we automatically collect certain technical and usage information:

  • Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address)
  • Connection Information: IP address, internet service provider, geographic location (country, city), time zone
  • Usage Data: Pages visited, features used, time spent on pages, navigation paths, betting history, game play records, login/logout times, session duration
  • Transaction Data: Deposit amounts, withdrawal amounts, bet stakes, bet outcomes, bonus claims, loyalty points earned
  • Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixel tags (see Section 8 for details)

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

  • Payment Processors: Transaction confirmation, payment method validation, fraud detection signals
  • Identity Verification Services: KYC/AML verification results, identity authentication data
  • Affiliate Partners: Referral source, campaign tracking information (if you registered via an affiliate link)
  • Game Providers: Game play statistics, RTP (Return to Player) data, game results

3. How We Use Your Information

age138 uses the personal information we collect for the following purposes:

3.1 Account Management and Service Provision

  • Create and maintain your player account
  • Process account registration and verification (KYC/AML compliance)
  • Authenticate your identity and prevent unauthorized access
  • Provide access to betting markets, casino games, and other gaming products
  • Process deposits, withdrawals, and other financial transactions
  • Track betting activity, game play, and account balances
  • Manage bonuses, promotions, and loyalty rewards

3.2 Legal and Regulatory Compliance

  • Verify that you are at least 21 years of age or the minimum legal gambling age in your jurisdiction
  • Comply with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
  • Detect and prevent fraud, money laundering, collusion, and other prohibited activities
  • Enforce our Terms and Conditions and investigate violations
  • Respond to legal requests, court orders, or regulatory inquiries
  • Maintain records required by applicable gambling regulations and licensing authorities

3.3 Customer Support and Communication

  • Respond to customer service inquiries and support requests
  • Send account-related notifications (deposits, withdrawals, login alerts, verification status)
  • Provide technical support and troubleshooting assistance
  • Communicate important updates regarding our Services, policies, or terms
  • Notify you of promotional offers, bonuses, and new features (with your consent)

3.4 Platform Improvement and Analytics

  • Analyze user behavior to improve platform design and functionality
  • Monitor platform performance, uptime, and technical issues
  • Conduct research and analysis to enhance user experience
  • Develop new products, features, and services
  • Perform A/B testing and optimize conversion rates

3.5 Security and Fraud Prevention

  • Detect and prevent fraudulent accounts, duplicate accounts, and identity theft
  • Monitor for suspicious betting patterns, collusion, and match-fixing
  • Protect against hacking, denial-of-service attacks, and other security threats
  • Investigate and resolve disputes, chargebacks, and payment fraud

3.6 Marketing and Personalization (With Consent)

  • Send promotional emails, SMS messages, or push notifications about bonuses and special offers
  • Personalize game recommendations based on your play history
  • Display targeted content and advertisements (on our Platform only; we do not share data with third-party advertisers)

You may opt out of marketing communications at any time by adjusting your account settings or clicking the unsubscribe link in promotional emails.

4. How We Share Your Information

age138 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with trusted partners and service providers in the following circumstances:

4.1 Service Providers and Business Partners

We share personal information with third-party service providers who perform services on our behalf, including:

  • Payment Processors: Banks, e-wallet providers, and payment gateways (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay) to process deposits and withdrawals
  • Identity Verification Services: KYC/AML verification providers to confirm your identity and prevent fraud
  • Game Providers: Casino game and live dealer providers to deliver gaming content
  • Cloud Hosting and IT Infrastructure: Data storage and server hosting providers
  • Customer Support Tools: Live chat software, email services, and CRM platforms
  • Analytics and Monitoring: Website analytics and performance monitoring tools

These service providers are contractually obligated to protect your data and may only use it for the purposes we specify. They are prohibited from selling or using your information for their own purposes.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, law enforcement agencies, regulators, or courts when required by law or when we believe disclosure is necessary to:

  • Comply with legal obligations, court orders, subpoenas, or regulatory requests
  • Enforce our Terms and Conditions or investigate violations
  • Protect the rights, property, or safety of age138, our users, or the public
  • Prevent fraud, money laundering, or other illegal activities
  • Cooperate with investigations by licensing authorities or gambling regulators

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring involving age138, your personal information may be transferred to the acquiring entity. We will notify you of any such transfer and ensure that the new entity continues to protect your data in accordance with this Privacy Policy.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing. For example, if you choose to participate in a third-party promotion or survey, we will share the necessary information with that third party only with your permission.

5. Data Security Measures

age138 takes data security seriously and employs industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

5.1 Technical Security Controls

  • Encryption: All data transmitted between your device and our servers is protected using SSL/TLS encryption (256-bit). Sensitive data at rest (passwords, payment details) is encrypted using strong cryptographic algorithms.
  • Secure Authentication: Two-factor authentication (2FA) is available for all accounts. Passwords are hashed and salted using industry-standard algorithms.
  • Firewalls and Intrusion Detection: Our servers are protected by advanced firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS).
  • Regular Security Audits: We conduct periodic security audits, penetration testing, and vulnerability assessments to identify and remediate potential security risks.
  • Access Controls: Access to personal data is restricted to authorized employees and service providers on a need-to-know basis. All access is logged and monitored.

5.2 Organizational Security Measures

  • Employee training on data protection and privacy best practices
  • Confidentiality agreements with employees and contractors
  • Incident response procedures for data breaches and security incidents
  • Secure disposal of physical and electronic records containing personal data

5.3 Your Responsibility

While we implement robust security measures, you are also responsible for protecting your account. Please follow these best practices:

  • Choose a strong, unique password and do not share it with anyone
  • Enable two-factor authentication (2FA) on your account
  • Log out of your account when using shared or public devices
  • Do not click on suspicious links or download attachments from unknown sources
  • Report any unauthorized account activity to customer support immediately

6. Data Retention

age138 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Active Account Data

While your account is active, we retain all account information, transaction history, and betting records to provide ongoing service and comply with regulatory requirements.

6.2 Closed Account Data

When you close your account, we retain certain information for the following periods:

  • Identity and KYC Records: Retained for a minimum of 5 years after account closure to comply with anti-money laundering (AML) regulations and licensing requirements
  • Transaction and Betting Records: Retained for a minimum of 5 years to resolve disputes, audits, or regulatory inquiries
  • Communication Records: Retained for 3 years to address customer service issues or legal claims
  • Marketing Preferences: Retained indefinitely to honor opt-out requests and prevent unwanted communications

6.3 Data Deletion

After the retention periods expire, we securely delete or anonymize your personal information so that it can no longer be associated with you. However, we may retain aggregated, anonymized data for statistical and analytical purposes indefinitely.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.

7.2 Right to Rectification

If you believe that any personal information we hold about you is inaccurate or incomplete, you have the right to request correction or update of that information.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes it was collected, or when you withdraw consent. However, we may be legally required to retain certain information to comply with regulatory obligations.

7.4 Right to Restrict Processing

You may request that we limit the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing.

7.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider (where technically feasible).

7.6 Right to Object

You may object to processing of your personal information for direct marketing purposes, profiling, or when processing is based on legitimate interests.

7.7 Right to Withdraw Consent

If we process your personal information based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] or through our customer support channels. We will respond to your request within 30 days. You may also update certain account information directly through your account settings.

8. Cookies and Tracking Technologies

age138 uses cookies and similar tracking technologies to enhance your experience on our Platform, analyze usage patterns, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the website remember your preferences, login status, and other information to improve your browsing experience.

8.2 Types of Cookies We Use

  • Essential Cookies: Necessary for the Platform to function properly. These cookies enable core functionality such as security, authentication, and session management. You cannot disable these cookies.
  • Performance Cookies: Collect information about how you use the Platform (pages visited, time spent, errors encountered) to help us improve performance and user experience.
  • Functional Cookies: Remember your preferences (language, currency, display settings) and provide enhanced features.
  • Analytics Cookies: Help us analyze traffic patterns, user behavior, and conversion rates using tools like Google Analytics (anonymized data).

8.3 Managing Cookies

Most web browsers allow you to control cookies through settings. You can set your browser to block or delete cookies, but this may affect the functionality of the age138 Platform. For more information on managing cookies, visit your browser's help section.

9. Third-Party Services and Links

The age138 Platform may contain links to third-party websites, services, or content (such as game providers or payment processors). This Privacy Policy applies only to information collected by age138. We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

age138 strictly prohibits use of our Services by individuals under the age of 21. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected information from a person under 21 years of age, we will immediately delete that information and close the associated account. Parents or guardians who believe their child has provided personal information to age138 should contact us immediately at [email protected].

11. Changes to This Privacy Policy

age138 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or other operational needs. When we make material changes, we will notify you by:

  • Posting the updated Privacy Policy on our website with a new "Last Updated" date
  • Sending an email notification to the email address associated with your account
  • Displaying a prominent notice on the Platform upon login

Your continued use of age138 Services after the effective date of the revised Privacy Policy constitutes acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

Our customer support team is available in Indonesian and English and will respond to privacy inquiries within 48 hours.

Your Privacy Matters to Us

At age138, protecting your personal information is a top priority. We are committed to transparency, security, and giving you control over your data. If you have any concerns about how your information is handled, please do not hesitate to contact our privacy team. We are here to help and will work to address your concerns promptly.

How We Protect Your Data

256-Bit SSL Encryption

All data transmitted between your device and our servers is protected with bank-level 256-bit SSL encryption, ensuring your information remains secure.

Strict KYC/AML Compliance

We verify every account to prevent fraud, identity theft, and money laundering, ensuring a safe environment for all players.

No Data Selling

We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data stays with us.

Data Access Controls

Only authorized personnel have access to your personal information, and all access is logged and monitored for security.

Regular Security Audits

We conduct periodic security assessments, penetration testing, and vulnerability scans to identify and fix potential risks.

Your Privacy Rights

Request access, correction, or deletion of your personal data at any time. We respect your rights and respond promptly.

Questions About Your Privacy?

Our dedicated privacy team is available to answer any questions about how we collect, use, and protect your personal information.

View FAQ Terms & Conditions Responsible Gaming