Privacy Policy

1. Introduction

sa138 (hereinafter referred to as "we," "us," "our," or "the Platform") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, protect, and share information about you when you access or use our online gaming platform, register an account, make deposits or withdrawals, or interact with our services in any manner.

This Privacy Policy applies to all users of sa138 services, including individuals who browse our website without registering an account and registered members who actively use our gaming products. By accessing or using the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must immediately cease using our services and refrain from providing any personal information.

We process personal data in accordance with international data protection standards and best practices for online gaming operators. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of sa138 services and contain additional provisions relevant to data handling, account security, and user obligations.

2. Data Controller

sa138 operates as the data controller responsible for the collection, processing, and protection of your personal information. As data controller, we determine the purposes for which and the means by which your personal data is processed. We maintain administrative, technical, and physical safeguards designed to protect the personal information you provide against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use.

Our registered business operations are conducted through international gaming infrastructure with servers located in secure data centers outside Indonesian jurisdiction. However, we are committed to protecting the privacy rights of Indonesian users and comply with international privacy frameworks applicable to online gaming services, including principles of data minimization, purpose limitation, and transparency.

3. Information We Collect

3.1 Information You Provide Directly

When you register an account with sa138, we collect the following personal information that you provide voluntarily:

• Identity Information: Full legal name, date of birth, gender, nationality, Indonesian national identity card number (KTP), passport number (if applicable)
• Contact Information: Residential address (including street address, city, province, postal code), email address, mobile phone number
• Account Credentials: Username, password (stored in encrypted form), security questions and answers
• Financial Information: Bank account details (account number, bank name, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay account identifiers), payment transaction history
• Verification Documents: Copies of identity documents (Indonesian ID card, passport), proof of address documents (utility bills, bank statements), photographs for identity verification purposes
• Communication Data: Content of messages you send to our customer support team via live chat or email, survey responses, feedback submissions

3.2 Information Collected Automatically

When you access and use the sa138 Platform, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device identifiers
• Connection Data: IP address, internet service provider, geographic location (country, region, city), time zone settings
• Usage Information: Pages viewed, features used, games played, time spent on platform, navigation paths, click patterns, session duration
• Gaming Data: Betting history (amounts wagered, games played, win/loss records), deposit and withdrawal transactions, bonus claims and wagering progress, account balance changes
• Log Data: Server logs containing timestamps, error messages, system activities, security events

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet services confirm transaction details and account ownership
• Identity Verification Services: Third-party KYC providers validate the authenticity of identity documents and cross-check information against fraud databases
• Game Providers: Software suppliers providing casino games, live dealer tables, and sports betting platforms share game outcome data and session information
• Analytics Services: Third-party analytics tools provide aggregated demographic and behavioral insights to help us improve user experience

4. How We Use Your Information

sa138 processes your personal information for the following legitimate business purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your sa138 account
• Verifying your identity and age (21+ requirement) to comply with legal obligations
• Processing deposits, withdrawals, and other financial transactions
• Providing access to gaming products including slots, live casino, sports betting, togel, and other available games
• Calculating and crediting bonuses, cashback, and promotional rewards
• Maintaining accurate account balances and transaction records
• Providing customer support and responding to inquiries

4.2 Security and Fraud Prevention

• Detecting and preventing fraudulent activities, money laundering, and unauthorized account access
• Monitoring gameplay for patterns indicating collusion, bonus abuse, or exploitation of system vulnerabilities
• Enforcing our Terms and Conditions and investigating potential violations
• Complying with anti-money laundering (AML) and know-your-customer (KYC) regulations
• Protecting the integrity of our gaming platform and ensuring fair play for all users
• Maintaining system security against cyber threats, hacking attempts, and distributed denial-of-service attacks

4.3 Communication and Marketing

• Sending transactional emails regarding deposits, withdrawals, bonus claims, and account changes
• Providing important platform updates, policy changes, and security notifications
• Delivering promotional offers, bonus announcements, and tournament invitations (with your consent)
• Conducting customer satisfaction surveys and requesting feedback
• Sending responsible gaming reminders and notifications about deposit limits or self-exclusion options

4.4 Platform Improvement and Analytics

• Analyzing user behavior to optimize website design, navigation, and feature placement
• Understanding game popularity and player preferences to curate relevant content
• Testing new features and improvements before full deployment
• Generating aggregated statistical reports for business planning (no individual identification)
• Improving customer support quality through conversation analysis and agent training

4.5 Legal Compliance

• Complying with applicable laws, regulations, and legal processes
• Responding to lawful requests from government authorities, courts, or law enforcement agencies
• Establishing, exercising, or defending legal claims
• Maintaining records for audit and regulatory inspection purposes

5. Information Sharing and Disclosure

sa138 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Indonesian banks and e-wallet providers process deposits and withdrawals. They receive only the information necessary to complete transactions.
• Identity Verification Services: KYC providers verify the authenticity of identity documents and detect fraudulent submissions.
• Cloud Hosting Providers: Secure data centers store our platform infrastructure and databases with industry-standard encryption.
• Customer Support Tools: Live chat software and ticketing systems help our support team manage inquiries efficiently.
• Analytics Providers: Anonymous analytics tools help us understand platform usage without identifying individual users.

All service providers are contractually bound to protect your data, use it only for specified purposes, and maintain confidentiality. We conduct due diligence before engaging any service provider and regularly audit their security practices.

5.2 Game Providers

When you play games on sa138, certain session data (username, bet amounts, game outcomes) is shared with the respective game provider to enable gameplay, ensure fairness, and track progressive jackpots. Game providers are bound by strict confidentiality agreements and are prohibited from using your data for purposes unrelated to game delivery.

5.3 Legal Requirements

We may disclose your personal information if required to do so by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms and Conditions or investigate potential violations
• Detect, prevent, or address fraud, security, or technical issues
• Protect the rights, property, or safety of sa138, our users, or the public

5.4 Business Transfers

In the event sa138 undergoes a business transition such as a merger, acquisition, sale of assets, or bankruptcy, your personal information may be among the assets transferred. We will notify you via email and prominent notice on our website before your information becomes subject to a different privacy policy.

6. Data Security Measures

sa138 implements comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

6.1 Technical Safeguards

• SSL Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same encryption standard used by banks.
• Database Encryption: Personal information stored in our databases is encrypted at rest using AES-256 encryption algorithms.
• Password Security: User passwords are hashed using bcrypt with strong salt values. We never store passwords in plain text, and even our administrators cannot view your password.
• Firewall Protection: Multi-layer firewalls protect our infrastructure from unauthorized network access and cyber attacks.
• Intrusion Detection: Automated systems monitor for suspicious activities and potential security breaches 24/7.
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments on our platform.

6.2 Administrative Safeguards

• Access Controls: Personal data is accessible only to authorized employees and contractors who require it to perform their job functions.
• Employee Training: All staff members receive regular training on data protection principles, security protocols, and confidentiality obligations.
• Confidentiality Agreements: Employees and contractors sign legally binding confidentiality agreements prohibiting unauthorized disclosure of user information.
• Incident Response Plan: We maintain documented procedures for responding to data breaches, including user notification protocols and remediation steps.

6.3 Physical Safeguards

• Data centers housing our servers employ 24/7 security monitoring, biometric access controls, and surveillance systems
• Redundant power supplies and climate control systems ensure continuous operation and prevent data loss
• Regular backup procedures create secure copies of data stored in geographically distributed locations

Despite our security measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect unauthorized access.

7. Data Retention

sa138 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Active Accounts

While your account remains active, we retain all personal information, transaction history, and gaming data to provide continuous service, process transactions, and maintain accurate records. You can update certain account information at any time through your account dashboard.

7.2 Closed Accounts

If you close your account voluntarily or if we terminate your account for Terms violations, we will retain your personal information for a minimum of six years from the account closure date to comply with financial regulations, anti-money laundering requirements, and legal obligations. This retention period allows us to:

• Respond to legal disputes or regulatory inquiries
• Detect and prevent fraud or future Terms violations
• Maintain accurate financial records for audit purposes
• Enforce self-exclusion agreements and prevent re-registration during exclusion periods

7.3 Marketing Communications

If you opt out of marketing communications, we will retain your email address on a suppression list to ensure we do not inadvertently contact you in the future. This minimal data retention is necessary to honor your opt-out request.

7.4 Data Deletion

After the applicable retention period expires, we securely delete or anonymize your personal information such that it can no longer be associated with you as an individual. Deletion is performed using secure methods that prevent data recovery. Anonymous aggregated data may be retained indefinitely for statistical and analytical purposes.

8. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. You can access much of your account information directly through your sa138 account dashboard, including transaction history, deposit/withdrawal records, and account details. For additional information not available through your dashboard, contact our customer support team.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update your contact details, address, and certain account information directly through your account settings. For changes to verified identity information (name, date of birth), you must contact customer support and provide supporting documentation.

8.3 Right to Erasure

In certain circumstances, you have the right to request deletion of your personal data. However, this right is not absolute and may be limited by legal obligations that require us to retain certain information (e.g., financial records for tax purposes, anti-money laundering compliance, or ongoing legal proceedings). After the required retention period, we will delete your data as described in Section 7.

8.4 Right to Restrict Processing

You have the right to request that we restrict processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will store your data but not actively process it except with your consent or for legal reasons.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider. This applies to data you provided to us with your consent or for contract performance.

8.6 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes. You can opt out of marketing communications at any time by clicking the unsubscribe link in promotional emails or contacting customer support. You may also object to processing based on legitimate interests by contacting us with your specific situation.

8.7 Right to Withdraw Consent

Where we process your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

8.8 Exercising Your Rights

To exercise any of these rights, please contact our customer support team via email at [email protected] (plain text, not a clickable link) or through live chat. We will respond to your request within 30 days and may require identity verification to prevent unauthorized access to your information. There is no fee for making a request, though we reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests.

9. Cookies and Tracking Technologies

sa138 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.

9.1 What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit our website. Cookies allow us to recognize your device on subsequent visits, remember your preferences, and provide a seamless gaming experience.

9.2 Types of Cookies We Use

• Essential Cookies: Necessary for platform functionality, including authentication, session management, and security. These cookies cannot be disabled without severely impacting your ability to use sa138 services.
• Performance Cookies: Collect anonymous information about how users interact with our platform, including pages visited, errors encountered, and time spent on site. This helps us identify and fix technical issues.
• Functionality Cookies: Remember your preferences such as language settings, preferred payment methods, and display options to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertisements and measure advertising campaign effectiveness. These cookies are used only with your consent.

9.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling cookies may limit your ability to use certain features of the sa138 platform. Refer to your browser's help documentation for instructions on managing cookies.

9.4 Third-Party Cookies

Third-party service providers such as analytics tools and advertising networks may place cookies on your device when you visit sa138. These third parties have their own privacy policies governing cookie use. We do not control third-party cookies and recommend reviewing the privacy policies of these providers.

10. International Data Transfers

sa138 operates internationally with servers and service providers located in various countries. When you provide personal information to us, that information may be transferred to and processed in jurisdictions outside Indonesia that may have different data protection laws.

We ensure that international transfers of personal data are protected through appropriate safeguards, including:

• Transferring data only to countries recognized as providing adequate data protection
• Implementing standard contractual clauses approved by data protection authorities
• Ensuring service providers are certified under recognized privacy frameworks
• Conducting regular audits of third-party data handling practices

By using sa138 services, you acknowledge and consent to the transfer of your personal information to countries outside Indonesia for the purposes described in this Privacy Policy.

11. Children's Privacy

sa138 services are intended solely for individuals who are at least 21 years of age. We do not knowingly collect, use, or disclose personal information from individuals under the age of 21. Our account registration process requires date-of-birth verification, and we conduct identity verification to confirm age eligibility.

If we discover that we have inadvertently collected personal information from someone under 21 years of age, we will immediately delete that account and all associated information from our systems. Parents or guardians who believe we may have collected information from an underage individual should contact us immediately at [email protected] (plain text, not a clickable link).

We take underage gambling prevention seriously and cooperate with parents, guardians, and authorities to enforce age restrictions. Attempting to create an account using false age information or identity documents is a serious violation of our Terms and Conditions and may result in legal consequences.

12. Changes to This Policy

sa138 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on the sa138 homepage for at least 30 days

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of sa138 services after changes become effective constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you must cease using our services and may request account closure.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact the sa138 Data Protection Team:

For specific topics, please refer to our other policy documents:

• General terms of use: Terms & Conditions
• Responsible gambling resources: Responsible Gaming
• Frequently asked questions: FAQ