master138 Casino & Sportsbook Data Care
This page describes what we collect when you use master138 and how we keep that data protected. We at master138 operate an online sportsbook and casino platform serving users in supported jurisdictions. Your account information, betting history, payment details, and personal identity are collected, used, and stored according to this privacy policy and applicable Indonesian data-protection standards.
We at master138 collect only the data necessary to verify your account, process your deposits and withdrawals, settle your bets, and comply with local regulations. We encrypt your data in transit and at rest, store it on secure servers, and never share it with third parties outside of necessary payment processing or legal requirements.
This policy covers what we collect, how we use it, who has access, how long we keep it, and what rights you have regarding your information. If you have questions about our data practices, contact our support team through your account dashboard help centre.
What Data We at master138 Collect
We collect information in several categories when you use master138. First, identity information: we require your full name, date of birth, residential address, and a scanned copy of your Indonesian ID card, passport, or driver's licence. This is mandatory for account verification (KYC — Know Your Customer) and is collected before you can deposit or bet.
Second, contact information: we collect your email address and phone number during signup. We use these to send you account notifications, password resets, withdrawal confirmations, and support responses. You can update your email and phone in your account settings at any time.
Third, payment information: when you deposit via QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer from mobile banking, local payment, online payment, e-wallet, we record the payment method, amount, date, and settlement status. We do not store your bank account numbers or e-wallet credentials directly — those details are encrypted and handled by our payment processors.
Fourth, activity data: we log every action on your account. Sportsbook bets (Liga 1, Piala AFF, Champions League fixtures), casino game spins, live-dealer table hands, deposits, withdrawals, and logins are all recorded with timestamps. This creates your complete transaction history, which you can review and export at any time.
Fifth, device and connection data: we record your IP address, browser type, device type, and approximate geographic location when you access master138. This helps us detect suspicious activity and protect against fraud.
How We Use Your Data on master138
We use identity information to verify your account and comply with Indonesian financial regulations and anti-money-laundering (AML) requirements. We compare your provided details against official records. During Idul Fitri, Idul Adha, and Imlek holidays, verification may be slightly delayed due to reduced government office hours.
We use contact information to send you account notifications — login alerts, deposit confirmations, withdrawal status, bet settlement results — and to respond to your support requests. We will never use your email or phone to send unsolicited marketing unless you opt in.
We use payment information to process your deposits and withdrawals and to maintain records for regulatory and tax compliance. Payment processors (mobile banking providers, e-wallet companies, banks) have their own privacy policies. We recommend reviewing those policies before initiating transactions.
We use activity data to maintain your account history, calculate your balance, settle your bets accurately, and provide you with transaction records for personal tracking and dispute resolution. This data also supports our fraud detection — if we notice unusual activity (multiple failed login attempts, withdrawals to new accounts), we may pause the transaction and contact you to verify.
We use device and connection data to improve platform security, detect unauthorized access, and comply with legal requests from authorities.
Third Parties and Data Processors on master138
We share your data with third parties only when necessary. Payment processors (local payment networks, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment) receive your payment information to process deposits and withdrawals. These processors have their own privacy policies and data-protection standards.
We may share transaction records with government authorities if required by law, court order, or regulatory investigation. We comply with Indonesian data-protection law and will not share your data voluntarily without legal authority.
Game providers (for live-dealer tables and slot games) may receive minimal data — only your account ID and bet amounts — to settle bets. They do not receive your personal identity or contact information.
Our servers are hosted by third-party data-centre providers. Your data may physically sit outside Indonesia, but it remains encrypted and access-restricted. We maintain service agreements with these providers requiring them to uphold data security and confidentiality standards equivalent to ours.
Your data is never sold
We at master138 never sell your personal information to advertisers, data brokers, or other commercial entities. Your data is used exclusively to operate your account and comply with law.
How Long We Keep Your Data
We retain your identity information, payment records, and transaction history for a minimum of five years after your account becomes inactive or after you request closure. This supports regulatory compliance and tax record-keeping in jurisdictions where we operate. After five years, we delete or anonymize your data unless we are legally required to retain it longer.
If you request account closure, we immediately deactivate your account and disable login access. Your data remains in our secure archive for the retention period described above. You can request a download of your complete account history (all transactions, balances, activity logs) at any time during or after this retention period.
We delete cookies and session data when your browser session ends (or after 30 days of inactivity if you remain logged in). You can clear your browser cookies at any time; this will not affect your master138 account data.
Your Rights Regarding Your Data on master138
You have the right to access your personal data. Log in to your master138 account and navigate to Account Settings to view your registered identity, contact information, and complete transaction history. You can download your transaction records as a CSV file for personal analysis or backup.
You have the right to correct inaccurate information. If your name, address, or contact details are incorrect in your master138 account, contact our support team and we will update them after verifying your identity.
You have the right to request deletion of your account and associated data. Contact our support team to request account closure. We will deactivate your account immediately, but we will retain your transaction records for the legally required retention period (typically five years) for regulatory and tax compliance.
You have the right to object to processing of your data for certain purposes. If you do not want to receive account notification emails, you can disable non-critical notifications in your account preferences. However, we must retain and process core identity and transaction data to operate your account and comply with law.
You have the right to lodge a complaint with Indonesian data-protection authorities if you believe we are mishandling your data. Our contact information and data-protection officer details are provided below.
How We Secure Your Data on master138
We at master138 encrypt your data in transit using TLS (Transport Layer Security) and at rest using AES-256 encryption on our servers. When you log in, deposit funds, or request a withdrawal, data transmission is encrypted — third parties cannot intercept your information mid-transfer.
Your account is protected by your password and optional two-factor authentication (2FA). We never store passwords in plain text — we hash and salt them so that even our staff cannot recover your password. If you forget it, we send you a reset email; you create a new password yourself.
We maintain regular security audits and penetration testing. Our infrastructure undergoes annual third-party security assessments to identify and remediate vulnerabilities.
Only authorized staff members have access to your data, and that access is logged and monitored. We have strict access-control policies — customer support staff see only the minimum information needed to help you; developers see anonymized test data, never production account details.
Data Jurisdictions and Applicable Law
We at master138 operate under Indonesian law. Your personal data is protected by Indonesian data-protection standards and our contractual commitments. Our servers may be hosted in multiple jurisdictions (Indonesia and regional data centres in Asia-Pacific). Regardless of physical location, your data remains subject to our privacy policy and Indonesian legal protections.
If you are accessing master138 from outside Indonesia, you may be subject to additional local data-protection laws (GDPR in Europe, CCPA in California, etc.). We will comply with those laws to the extent they apply. For example, if you are in Europe, you have GDPR rights; we respect those rights in parallel with this policy.
Contact Us About Your Data
If you have questions about our privacy practices, want to access your data, or wish to exercise any of your rights, contact our support team through your master138 account dashboard help centre. Provide as much detail as possible about your request. Our team will respond within a standard timeframe.
For formal data-protection complaints or rights requests, you can also contact the Indonesian Data Protection Authority or our designated data-protection officer. We will respond to all official requests in compliance with applicable law.
master138 Privacy Policy — Summary and Commitments
We at master138 are committed to protecting your data. We collect only the information necessary to operate your account, verify your identity, process your payments (QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, or Indonesian bank transfers), and comply with law. We encrypt your data, store it securely, and never share it with third parties except for necessary payment processing or legal requirements.
Your transaction history is your property. You can review it, download it, and export it at any time. Your identity information can be corrected if inaccurate. Your account can be closed and your data deleted (after the legally required retention period). We respect your privacy and operate transparently.
Our services are available only where local law permits. Users are responsible for verifying that their use of master138 complies with their own jurisdiction's law. This privacy policy is subject to periodic updates — we will notify you of material changes via your account email. Your continued use of master138 constitutes acceptance of our current privacy policy.