Privacy Policy

1. Introduction

This Privacy Policy applies to all personal information collected by apk138 through our website (https://apk138.cam), mobile applications, and related services (collectively, the "Platform"). apk138 operates as an online gaming platform offering casino games, sports betting, live dealer games, and specialty games to players in Indonesia.

We comply with applicable data protection laws and international privacy standards. We are committed to transparency in our data handling practices and to giving you control over your personal information.

2. Information We Collect

2.1 Information You Provide to Us

When you register an account with apk138, deposit funds, or use our services, you voluntarily provide us with personal information, including:

• Account Registration Data: Full name, date of birth, email address, phone number, username, password, and security questions.
• Identity Verification Data (KYC): Government-issued ID (Indonesian National Identity Card / KTP, passport, or driver's license), proof of address (utility bill, bank statement, or government document), and proof of payment method ownership (bank account statement or e-wallet screenshot).
• Payment Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers), and transaction history.
• Communication Data: Messages, emails, and chat logs when you contact our customer support team.
• Gaming Preferences: Favorite games, betting patterns, deposit/withdrawal preferences, and responsible gaming settings (deposit limits, loss limits, self-exclusion periods).

2.2 Information We Collect Automatically

When you access and use the apk138 Platform, we automatically collect certain technical and usage information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
• Usage Data: Pages visited, games played, bet history, deposit and withdrawal history, session duration, click patterns, and navigation paths.
• Location Data: IP address, geographic location (country, city, region), and time zone. We use this information to verify that you are physically located in Indonesia when accessing our services and to comply with geo-blocking requirements.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track your activity on our Platform, remember your preferences, and analyze usage patterns. See Section 8 for more details on cookies.

2.3 Information from Third Parties

We may receive personal information about you from third-party sources, including:

• Payment Processors: Transaction data from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to verify deposits and withdrawals.
• Identity Verification Services: Data from third-party KYC providers to verify your identity and comply with anti-money laundering (AML) regulations.
• Fraud Prevention Services: Information from fraud detection and risk assessment services to protect against fraudulent accounts and transactions.
• Affiliate Partners: Referral data if you signed up through an affiliate link or promotional campaign.

3. How We Use Your Information

apk138 uses your personal information for the following purposes:

3.1 Account Management and Service Delivery

• Create and manage your gaming account
• Process deposits, withdrawals, and other financial transactions
• Provide access to games, sports betting markets, and platform features
• Maintain game history, bet slips, and transaction records
• Provide customer support and respond to your inquiries

3.2 Legal and Regulatory Compliance

• Verify your identity and age (21+ requirement for Indonesian players)
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Detect and prevent fraud, cheating, collusion, and other prohibited activities
• Enforce our Terms & Conditions and other legal agreements
• Respond to legal requests from law enforcement or regulatory authorities

3.3 Responsible Gaming and Player Protection

• Monitor play patterns to identify signs of problem gambling
• Enforce deposit limits, loss limits, and self-exclusion settings you have requested
• Provide reality check reminders and session time notifications
• Offer responsible gaming resources and support

3.4 Marketing and Personalization

• Send promotional offers, bonuses, and marketing communications (with your consent)
• Personalize your gaming experience based on your preferences and play history
• Recommend games and betting markets that may interest you
• Conduct market research and analyze customer behavior to improve our services

3.5 Platform Improvement and Analytics

• Analyze usage patterns to improve platform performance and user experience
• Test new features and optimize game offerings
• Monitor system security and detect technical issues
• Generate aggregated, anonymized statistics for business intelligence

4. Legal Basis for Processing (GDPR and International Standards)

Where applicable under data protection laws such as the EU General Data Protection Regulation (GDPR), we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (providing gaming services, processing transactions).
• Legal Obligation: Processing is required to comply with legal and regulatory obligations (KYC, AML, age verification, tax reporting).
• Legitimate Interests: Processing is necessary for our legitimate business interests (fraud prevention, platform security, service improvement), provided your rights and interests are not overridden.
• Consent: You have given explicit consent for specific processing activities (marketing communications, personalized recommendations).

5. How We Share Your Information

apk138 does not sell or rent your personal information to third parties. However, we may share your information with the following categories of recipients for the purposes described in this Privacy Policy:

5.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Game Providers: Third-party game studios and live casino operators who provide the games you play. These providers may log game sessions and outcomes for RTP verification and fair play audits.
• Identity Verification Services: KYC and AML compliance providers to verify your identity and screen for prohibited persons.
• Customer Support Tools: Live chat software, email service providers, and CRM systems to manage customer communications.
• Analytics and Marketing Platforms: Tools for website analytics, email marketing, and advertising (with your consent).
• Cloud Infrastructure Providers: Hosting services and data storage providers who maintain our servers and databases.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement, regulatory bodies, courts, or other government authorities if required by law or if we believe disclosure is necessary to:

• Comply with a legal obligation, court order, or subpoena
• Protect the rights, property, or safety of apk138, our players, or the public
• Detect, prevent, or investigate fraud, money laundering, or other illegal activities
• Enforce our Terms & Conditions or other legal agreements

5.3 Business Transfers

If apk138 is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the successor entity as part of the transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

6. Data Security

apk138 takes data security seriously and implements industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols (minimum 256-bit encryption). Sensitive data at rest (passwords, payment details) is encrypted using AES-256.
• Secure Payment Processing: Payment information is handled by PCI DSS-compliant payment processors. apk138 does not store full credit card numbers or CVV codes.
• Access Controls: Access to personal data is restricted to authorized employees and service providers who need it to perform their duties. All personnel are bound by confidentiality obligations.
• Regular Security Audits: We conduct regular security assessments, penetration testing, and vulnerability scans to identify and address potential risks.
• Fraud Detection Systems: AI-powered monitoring tools detect suspicious login attempts, duplicate accounts, and fraudulent transactions.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical security controls, firewalls, intrusion detection systems, and redundant backups.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

7. Data Retention

apk138 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal and regulatory requirements. Our retention periods are as follows:

Data Type	Retention Period
Account Information	Duration of account + 5 years after closure
Transaction Records	7 years (AML and tax compliance requirement)
KYC Documents	7 years after account closure
Bet History and Game Logs	5 years (regulatory requirement for dispute resolution)
Marketing Communications Consent	Until you withdraw consent or 2 years of inactivity
Support Chat Logs	3 years
Analytics and Usage Data	2 years (aggregated data may be retained indefinitely)

After the retention period expires, we securely delete or anonymize your personal information. You may request deletion of your account and personal data at any time (subject to legal retention requirements) by contacting our Data Protection Officer.

8. Cookies and Tracking Technologies

apk138 uses cookies, web beacons, and similar tracking technologies to enhance your experience on our Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use our services.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly. These cookies enable core features like account login, session management, and secure transactions. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous data about how you use the Platform (pages visited, time spent, errors encountered) to help us improve performance and user experience.
• Functionality Cookies: Remember your preferences (language, currency, favorite games) to personalize your experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. We only use marketing cookies with your explicit consent.

8.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can block or delete cookies, but doing so may affect your ability to use certain features of the Platform. To opt out of third-party advertising cookies, you can use tools like the Network Advertising Initiative opt-out page or the Digital Advertising Alliance opt-out page.

9. Your Privacy Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data, subject to legal retention requirements.
• Right to Restrict Processing: Request that we limit how we use your personal data in certain circumstances.
• Right to Data Portability: Request a copy of your personal data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw your consent for marketing communications or other consent-based processing at any time.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days. Please note that some requests may be subject to legal or contractual limitations (e.g., we cannot delete transaction records required for AML compliance).

10. International Data Transfers

apk138 operates internationally and may transfer your personal information to countries outside of Indonesia for processing and storage. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by data protection authorities
• Data Processing Agreements with third-party service providers
• Adequacy decisions recognizing equivalent data protection standards

By using apk138 services, you consent to the transfer of your personal information to countries that may have different data protection laws than Indonesia.

11. Children's Privacy

apk138 services are strictly for adults aged 21 years or older. We do not knowingly collect personal information from individuals under the age of 21. If we discover that we have inadvertently collected data from a minor, we will immediately delete that information and close the associated account. If you believe a minor has accessed our Platform, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

apk138 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page and notify you via email or a prominent notice on the Platform. Your continued use of apk138 services after changes are posted constitutes acceptance of the revised Privacy Policy.

13. Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Privacy Policy Inquiry" or "Data Protection Request"
• Live Chat: Available 24/7 on the apk138 website

We will respond to all inquiries within 30 days and will work with you to address any concerns about how we handle your personal information.