Privacy Policy

1. Introduction

ag138 ("we," "us," or "our") operates the online betting and gaming platform accessible at https://ag138.cam. We are committed to protecting the privacy and security of our users' personal information in accordance with international data protection standards and best practices applicable to the Indonesian online gaming market.

This Privacy Policy describes how ag138 collects, uses, processes, stores, and protects the personal data you provide when registering an account, making deposits or withdrawals, placing bets, contacting customer support, or otherwise using our services. By creating an account and using the ag138 platform, you consent to the data practices described in this Privacy Policy.

We process personal data only for the purposes outlined in this policy and in compliance with applicable data protection regulations. ag138 operates under strict security protocols including 256-bit SSL encryption, secure payment processing through licensed Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay), and adherence to Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements mandated by international gaming licensing authorities.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming policies, which together govern your use of the ag138 platform. If you have questions about how we handle your personal information, please contact our Data Protection Officer at [email protected].

2. Information We Collect

ag138 collects several categories of personal information to provide our services, verify your identity, process transactions, comply with legal obligations, and enhance your user experience. The types of information we collect include:

2.1 Registration Information

When you create an ag138 account, we collect the following personal details:

• Full name as it appears on your Indonesian National Identity Card (KTP) or other government-issued identification
• Date of birth (to verify you meet the minimum age requirement of 21 years)
• Indonesian phone number for account verification and communication
• Email address for account notifications, promotional communications, and password recovery
• Residential address including city, province, and postal code
• Username and password (passwords are encrypted and stored securely)
• Security questions and answers for account recovery purposes

2.2 Financial Information

To process deposits and withdrawals, we collect:

• Bank account details including bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.), account number, and account holder name
• E-wallet information for OVO, DANA, GoPay, ShopeePay, or LinkAja accounts
• Transaction history including deposit amounts, withdrawal requests, bet placements, and account balance changes
• Payment method preferences and transaction receipts

2.3 Identity Verification Documents (KYC)

For security and regulatory compliance, we may request:

• Copies of your Indonesian National Identity Card (KTP) or passport
• Proof of address documents such as utility bills, bank statements, or government correspondence
• Selfie photographs holding your identification document for biometric verification
• Source of funds documentation for large deposits or withdrawals

2.4 Usage and Technical Data

We automatically collect technical information when you access ag138:

• IP address and approximate geographic location (city level)
• Device information including device type, operating system (Android, iOS, Windows), browser type, and screen resolution
• Gameplay data including games played, bet amounts, win/loss records, favorite games, and session duration
• Cookies and similar tracking technologies (see Section 6 for details)
• Access logs including login times, page views, and navigation patterns
• Customer support communications including live chat transcripts and email correspondence

3. How We Use Your Data

ag138 uses your personal information for the following legitimate business purposes:

3.1 Service Provision

• Creating and managing your ag138 user account
• Processing deposits via BCA, BRI, BNI, Mandiri, and e-wallets (OVO, DANA, GoPay)
• Processing withdrawal requests to your registered bank account or e-wallet
• Facilitating betting on sports events (BRI Liga 1, English Premier League, La Liga, Champions League), togel draws (Togel Singapore, Togel Hongkong, Togel Sydney), live casino games, and slot games
• Calculating winnings, settling bets, and updating account balances in real-time
• Providing access to game history, transaction records, and account statements

3.2 Identity Verification and Security

• Verifying your age to ensure compliance with the 21+ age restriction
• Conducting KYC (Know Your Customer) verification to prevent identity fraud and account takeover
• Detecting and preventing fraudulent activity, money laundering, and bonus abuse
• Monitoring for duplicate accounts and unauthorized access attempts
• Protecting against security threats, cyber attacks, and unauthorized transactions

3.3 Customer Support

• Responding to customer inquiries via live chat, email ([email protected]), and other support channels
• Resolving technical issues, payment problems, and account disputes
• Providing assistance with deposits, withdrawals, bonus claims, and game rules
• Offering Indonesian-speaking customer support 24/7 in Western Indonesia Time (WIB)

3.4 Marketing and Communications

• Sending promotional offers, bonus announcements, and exclusive VIP rewards (with your consent)
• Notifying you of new game releases, tournament schedules, and platform updates
• Personalizing marketing content based on your gaming preferences and bet history
• Sending transactional emails regarding deposits, withdrawals, and account activity

3.5 Compliance and Legal Obligations

• Complying with international gaming license requirements and regulatory audits
• Meeting Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) obligations
• Responding to legal requests from Indonesian government authorities or international regulatory bodies
• Enforcing our Terms and Conditions and investigating terms violations
• Maintaining records for tax reporting and financial auditing purposes

4. Data Protection and Security Measures

ag138 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

4.1 Encryption Technologies

• SSL/TLS Encryption: All data transmitted between your device and ag138 servers is encrypted using 256-bit Secure Socket Layer (SSL) technology, the same encryption standard used by major Indonesian banks.
• Database Encryption: Personal information stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Password Protection: User passwords are hashed using bcrypt or similar one-way cryptographic hashing functions, ensuring passwords cannot be reverse-engineered even in the unlikely event of a database breach.

4.2 Access Controls

• Strict access controls limit employee access to personal data on a need-to-know basis
• Multi-factor authentication for administrative access to sensitive systems
• Regular access audits and logging of all data access activities
• Immediate revocation of access for terminated employees or contractors

4.3 Infrastructure Security

• Secure data centers with physical security controls, redundant power supplies, and 24/7 monitoring
• Firewalls, intrusion detection systems, and DDoS protection to prevent cyber attacks
• Regular security vulnerability assessments and penetration testing by independent security firms
• Automated backup systems with encrypted off-site storage for disaster recovery

4.4 Payment Security

• PCI DSS (Payment Card Industry Data Security Standard) compliant payment processing
• Secure integration with Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay)
• Fraud detection algorithms monitoring suspicious transaction patterns
• Two-factor authentication for large withdrawal requests

5. Data Sharing and Third-Party Disclosure

ag138 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share limited data with trusted service providers and in certain legal circumstances:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) receive transaction details necessary to process deposits and withdrawals.
• Game Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Pocket Games Soft may receive gameplay data for game delivery and RNG verification purposes.
• Identity Verification Services: Third-party KYC providers assist with identity document verification and fraud detection, processing only the information necessary for verification.
• Customer Support Tools: Live chat platforms and ticketing systems used by our support team process customer inquiries and communications.

5.2 Legal and Regulatory Disclosure

We may disclose personal information when legally required or to protect our legitimate interests:

• In response to valid legal requests from Indonesian government authorities, law enforcement, or courts
• To comply with international gaming license requirements and regulatory audits
• To investigate suspected fraud, money laundering, or violations of our Terms and Conditions
• To protect the rights, property, or safety of ag138, our users, or the public
• In connection with a business merger, acquisition, or asset sale (with advance notice to affected users)

5.3 Data Processing Agreements

All third-party service providers are bound by strict data processing agreements requiring them to protect your personal information, use it only for specified purposes, and comply with data protection regulations. We conduct due diligence on all partners to ensure they maintain adequate security standards.

6. Cookies and Tracking Technologies

ag138 uses cookies and similar technologies to enhance your user experience, analyze platform performance, and deliver personalized content:

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functionality including account login, session management, and shopping cart persistence. These cookies cannot be disabled without affecting site functionality.
• Performance Cookies: Collect anonymous data on how users interact with ag138, including page views, loading times, and navigation patterns. This helps us identify technical issues and optimize performance.
• Functional Cookies: Remember your preferences such as language settings, timezone (WIB), favorite games, and customized homepage layout.
• Advertising Cookies: Track your browsing activity to deliver personalized promotions and bonus offers relevant to your gaming interests (only with your consent).

6.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, though this may impact your ability to use certain ag138 features. To manage cookies on mobile devices, adjust your device settings or use browser privacy modes.

6.3 Third-Party Analytics

We use analytics services such as Google Analytics to understand user behavior and improve our platform. These services may set cookies and collect data according to their own privacy policies. Analytics data is aggregated and anonymized to protect individual privacy.

7. Your Privacy Rights

As an ag138 user, you have the following rights regarding your personal data:

7.1 Access and Portability

You have the right to request a copy of all personal information we hold about you. This includes registration details, transaction history, gameplay records, and communications with customer support. Data will be provided in a structured, commonly used format (PDF or CSV) within 30 days of your request.

7.2 Correction and Updating

You can update your personal information at any time through your account settings or by contacting customer support. This includes changing your email address, phone number, or bank account details. Note that changes to certain verified information (name, date of birth) may require re-verification.

7.3 Deletion and Right to be Forgotten

You may request deletion of your account and associated personal data, subject to our legal obligations to retain certain records for regulatory compliance, fraud prevention, and financial auditing. Requests for deletion will be processed within 30 days, and you will receive confirmation once completed.

7.4 Marketing Opt-Out

You can opt out of promotional emails and SMS messages at any time by clicking the unsubscribe link in marketing communications or adjusting your preferences in account settings. Note that you will still receive essential transactional emails regarding deposits, withdrawals, and account security.

7.5 Exercising Your Rights

To exercise any of these privacy rights, please contact our Data Protection Officer at [email protected] with your request. Include your registered email address and account username for verification purposes. We will respond to all requests within 30 days.

8. Data Retention Policies

ag138 retains personal data for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements:

8.1 Active Account Data

While your account is active, we retain all associated personal information, transaction history, and gameplay records to provide ongoing services and support.

8.2 Closed Account Data

After voluntary account closure, we retain essential data for 7 years to comply with Anti-Money Laundering regulations, tax reporting requirements, and potential legal claims. Marketing data and non-essential information are deleted within 90 days of account closure.

8.3 Legal and Regulatory Requirements

Certain data must be retained to meet international gaming license obligations, Indonesian financial regulations, and potential audit requirements. This includes identity verification documents, transaction records, and bet settlement data.

8.4 Inactive Account Deletion

Accounts inactive for more than 24 months (no login or betting activity) may be permanently deleted after notifying you via registered email. Any remaining balance will be returned to your registered bank account before deletion.

9. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints regarding this Privacy Policy or how ag138 handles your personal information, please contact us:

9.1 Data Protection Inquiries

• Email: [email protected] (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 on the ag138 website
• Response Time: Email inquiries within 2-4 hours, live chat under 2 minutes
• Support Hours: 24 hours daily (Western Indonesia Time / WIB, UTC+7)

9.2 Policy Updates

ag138 reserves the right to update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or service offerings. Material changes will be communicated via email and a prominent notice on the platform. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. Continued use of ag138 after policy updates constitutes acceptance of the revised terms.

9.3 Regulatory Compliance

ag138 operates under international gaming licenses and complies with applicable data protection standards. While we strive to meet global best practices including GDPR principles, our primary regulatory framework is governed by our international gaming license jurisdiction. For specific regulatory questions, please contact our compliance team at [email protected].