onlen138 Casino & Sportsbook Data Care

This page describes what we collect when you use onlen138 and how we keep that data protected. We collect personal information only to operate the platform, process your deposits and withdrawals, verify your identity, and communicate with you about your account. We do not sell your data to advertisers or data brokers. We store your information securely and limit access to staff who need it to serve you.

Our data practices reflect a simple principle: your information belongs to you, and we treat it as a trust. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer through mobile banking, local payment, online payment, or e-wallet, we handle payment details according to industry security standards. When you upload identity documents for verification, we encrypt them and store them separately from your account profile. We do not retain documents longer than necessary for compliance.

We operate onlen138 across multiple jurisdictions, which means our servers and data processors may sit outside your home country. This page explains how that works and what rights you have over your data.

What we collect and why

We collect your email address, username, password, and contact details when you create an account on onlen138. We use this information to authenticate you, send account notifications, and process support requests. We also collect your government ID and proof of address during identity verification. We store these documents in encrypted form and use them only to confirm your identity and comply with anti-money-laundering regulations.

When you deposit or withdraw, we collect transaction details—the amount, payment method, timestamp, and your account identifier. We use this data to process your payment, reconcile your account balance, and detect fraud. We retain transaction records for at least one year to support dispute resolution and regulatory compliance.

We collect game activity data—which games you play, your stakes, results, and timestamps. We use this to calculate your account balance, settle tournaments, and detect abuse. We also collect your IP address and device information to monitor for suspicious access patterns and protect your account from unauthorised login attempts.

How we protect your data on onlen138

We encrypt data in transit using industry-standard TLS protocols. Your password is hashed and salted so we cannot read it even if our database is compromised. Payment information is handled by PCI-compliant processors and never stored on our servers in plain text. Identity documents are encrypted at rest and accessible only to authorised staff members who need them for verification or compliance purposes.

We maintain access controls so that staff can only view data relevant to their role. Our support team can see your account balance and transaction history but not your password or payment card details. Our compliance team can access identity documents but not your game activity. We audit access logs regularly to detect unauthorised viewing.

We conduct regular security assessments and penetration testing to identify vulnerabilities. If we discover a data breach, we notify affected users and relevant authorities as required by law. We maintain cyber insurance and incident response procedures to minimise harm.

Third-party processors and data location

We use third-party payment processors to handle deposits and withdrawals. When you deposit via DANA, e-wallet, mobile banking, or local payment, your transaction data passes through those providers' systems. When you use bank transfer via online payment, e-wallet, mobile banking, or local payment, your bank processes the transaction. We do not control how those third parties handle your data, but we require them to meet security standards equivalent to our own.

Our servers may be located outside Indonesia. This means your data may be processed in jurisdictions with different privacy laws. By using onlen138, you consent to this cross-border data transfer. If you are in the European Union or another jurisdiction with strict data residency requirements, you should verify that onlen138 complies with your local regulations before creating an account.

We keep your data secure not because we are required to, but because your trust in onlen138 depends on it.

Your rights and data retention

You have the right to request a copy of the data we hold about you. You can ask us to correct inaccurate information or delete your account and associated data. We will comply with these requests within a reasonable timeframe, typically 30 days. Some data may be retained longer if required by law or to resolve disputes.

We retain transaction records for at least one year to support dispute resolution and regulatory compliance. We retain identity documents for the duration of your account plus one year after closure. We delete game activity logs after two years unless a dispute is pending. If you request account deletion, we anonymise your data so it cannot be linked back to you, but we may retain aggregated statistics for platform analysis.

You can update your account information—email, contact details, payment methods—at any time through your onlen138 dashboard. You can also request that we stop sending you promotional emails, though we will continue to send transactional emails about your account and withdrawals.

Cookies and tracking on onlen138

We use cookies to maintain your login session and remember your preferences. These cookies are essential to platform operation and do not require consent. We do not use cookies for tracking or advertising purposes. We do not share cookie data with advertisers or analytics companies.

Our website may include links to external sites. We are not responsible for the privacy practices of those sites. If you click a link to a third-party site, that site's privacy policy applies, not ours.

Contact and policy updates

If you have questions about our privacy practices or want to exercise your data rights, contact our support team through the onlen138 dashboard or email. We respond to data requests within 30 days. We update this privacy policy periodically to reflect operational changes or regulatory updates. We notify users of material changes through the onlen138 dashboard or email. Continued use of onlen138 after policy updates constitutes acceptance of the new terms.

We are committed to protecting your data and operating onlen138 transparently. If you believe we have mishandled your information, you have the right to lodge a complaint with your local data protection authority.