buy138 Privacy Policy

This page describes what we collect when you use buy138 and how we keep that data protected. We collect personal information to verify your identity, process your deposits and withdrawals, and deliver sports betting and live casino services available where local law permits.

Our buy138 privacy practices center on transparency and security. We encrypt your account credentials, store payment details in segregated systems, and limit staff access to personal data on a need-to-know basis. We do not sell your information to third parties and only share data where required for payment processing, legal compliance, or fraud prevention.

This document outlines what information we collect on buy138, how we use it, who has access, and what rights you have to access, correct, or delete your data.

What Data We Collect on buy138

When you register an account on buy138, we collect your email address, password hash, and full name. During KYC verification, we collect your government ID number, date of birth, physical address, and proof of address documents. For payment processing, we collect the payment method details you provide (bank account number for BCA, e-wallet, mobile banking, local payment transfers; mobile wallet identifier for online payment, e-wallet, mobile banking; local payment reference).

Our buy138 system also records your betting history, entry amounts, settlement outcomes, deposit and withdrawal transactions, login timestamps, IP address, and browser type. We monitor account activity patterns to detect fraud and compliance risk. Push notification preferences, two-factor authentication settings, and language preferences are stored in your account profile.

• Registration data: Email, password, name, phone number (optional).
• KYC documents: Government ID image, proof of address image, ID number, date of birth, address.
• Payment data: Payment method type, bank or wallet identifier, transaction records.
• Activity data: Entry history, settlement records, login logs, IP address, device information.
• Preferences: Notifications, authentication settings, language, communication preferences.

How We Use Your Data on buy138

We use your buy138 data for the following purposes. First, account administration: we verify your identity during registration, authenticate your login, process password resets, and manage your account settings. Second, transaction processing: we route your deposits to the correct payment processor, settle withdrawals to your linked account, and maintain transaction records for reconciliation and dispute resolution.

Third, compliance and fraud prevention: we cross-check your KYC documents against public databases to prevent duplicate accounts and money-laundering risk. We monitor entry patterns for unusual activity (e.g., accounts matching outcomes with impossible accuracy, rapid betting and withdrawals, entries from multiple jurisdictions). Fourth, communication: we send account confirmations, settlement notices, password reset links, and support responses to your registered email.

Fifth, product improvement: we analyze aggregated, anonymized betting patterns to understand user preferences for Liga 1, Piala AFF, Champions League markets and identify technical issues on our platform. We do not use your personal data for marketing emails unless you have opted in.

How We Store Your Data on buy138

Our buy138 servers are located in data centers outside Indonesia with standard encryption (AES-256 for data at rest, TLS 1.2 for data in transit). Your password is hashed using bcrypt and is never stored in plain text. KYC documents (ID images, proof of address) are stored in a separate encrypted vault with restricted access.

Payment credentials are processed through PCI-DSS compliant third-party gateways. We do not store your full bank account number or wallet credentials on our primary servers. Only transaction confirmations and settlement records are kept in our database. We retain your transaction history for seven years per regulatory requirement, even after account closure.

Third-Party Data Processors on buy138

We engage third-party providers to handle specific functions. Payment processors (online payment, e-wallet, mobile banking, local payment gateway, online payment, e-wallet, mobile banking, local payment) receive your payment details and settlement instructions but do not receive your full KYC documents. These providers operate under their own privacy policies and data protection standards.

Our email service provider receives your email address and confirmation messages but not your payment information. Our fraud detection provider receives transaction patterns and IP address data to flag suspicious activity but not your personal ID details. All third-party processors are contractually obligated to protect your data and use it only for the contracted purpose.

Cookies and Tracking on buy138

Our buy138 platform uses session cookies to keep you logged in during your browsing session. These cookies expire when you log out or after subject to verification of inactivity. We use analytics cookies (Google Analytics) to understand how users navigate our platform, which markets (Liga 1, Piala AFF, Champions League) are most popular, and which pages have technical issues. These cookies do not identify you personally.

We do not use targeted advertising cookies or share analytics data with advertisers. Your IP address is logged for security purposes (login verification, fraud detection) and is not used for location tracking beyond country-level geolocation to enforce jurisdiction restrictions. You can disable non-essential cookies in your browser settings; doing so may limit some platform features but will not affect your ability to deposit, bet, or withdraw.

Your Rights Regarding Your Data on buy138

You have the right to request access to all personal data we hold about you on buy138. Submit a data access request via our support email, and we will provide a summary of your information within 14 days. You also have the right to correct inaccuracies—if your address or phone number is outdated, contact us and we will update it immediately.

You may request deletion of your personal data after your account is closed, except where we are legally required to retain transaction records (typically seven years for regulatory compliance). You may also withdraw consent for certain data uses (e.g., analytics cookies) by adjusting your account preferences. If you believe your data has been misused, you may lodge a complaint with your local data protection authority.

International Data Transfers from buy138

Our buy138 servers may sit outside Indonesia. When your data is transferred to these locations, it remains subject to our encryption and access controls. We ensure that any jurisdictions hosting our data maintain comparable data protection standards. You acknowledge that international data transfers may occur and that your data will be protected under our security standards regardless of server location.

Changes to Our buy138 Privacy Policy

We may update this privacy policy to reflect changes in our data practices, legal requirements, or platform features. Material changes are notified via email to your registered address at least 30 days before taking effect. Continued use of buy138 following notification of changes constitutes acceptance of the updated policy. We recommend reviewing this page periodically to stay informed of how we handle your data.

Contact Us About Your buy138 Data

If you have questions about our buy138 privacy practices, wish to exercise your rights to access or delete your data, or believe we have mishandled your information, contact our data protection team via email. We respond to all data-related inquiries within 14 business days. You may also escalate a complaint to your local data protection authority if you believe we have violated applicable privacy laws.

Jurisdiction and Legal Compliance

Our buy138 privacy policy is governed by the laws of the jurisdiction where buy138 is registered, subject to the data protection regulations applicable to our service areas. Users in different regions may have different data protection rights under local law. We comply with all applicable privacy regulations in the jurisdictions where we offer our services.

Summary: Your Data on buy138

We at buy138 collect personal and transaction data to provide our service, verify your identity, process payments via DANA, e-wallet, mobile banking, local payment, and bank transfer, and prevent fraud. Your data is encrypted, stored securely, and accessed only by authorized staff. We do not sell your information and share it only with payment processors and fraud prevention services under strict contracts.

You have the right to access, correct, and delete your data (subject to legal retention requirements). We retain transaction records for seven years per regulatory mandate; personal information is deleted after account closure unless you request retention or we are legally required to keep it. Cookies on our buy138 platform are limited to session management and anonymized analytics—no targeted advertising or third-party tracking.

If you have privacy concerns or wish to exercise your rights, contact our support team. We take data protection seriously and are committed to maintaining the security and confidentiality of your information throughout your relationship with buy138.