Reference

win138 Privacy Policy – What We Collect and Why

The win138 Privacy Policy sets out exactly what personal data we collect when you open an account, make a deposit via DANA, OVO, GoPay or QRIS, and use…

Data collected at account creationDANA, OVO, GoPay & QRIS transaction recordsCookie & device dataYour right to access or delete dataContact path for privacy requests
win138 win138 Privacy Policy – What We Collect and Why
PRIVACY CONTACT PATHS

Reach Us With Any Privacy Policy Question

If you have a question about how we handle your data, want to update incorrect information on your account, or need to submit a formal data-access…

Live Chat Open the chat widget inside your account dashboard at any time.
Email Support Send your privacy request or data-deletion query to our dedicated support address.
Account Help Centre Navigate to Settings inside your account, then select Privacy & Data.
HOW WE HANDLE YOUR DATA

Six Ways We Keep Your Information Secure

Data security is not a background function at win138 — it is built into every account step, from the phone-verification check you complete before first login through to how we store your…

Encrypted Account Storage

All personal details collected at account creation — including your phone number used for verification — are stored using encryption at rest. We do not log plain-text passwords at any point.

Payment Data Isolation

Your DANA, GoPay, OVO and QRIS wallet identifiers are stored in a separate data layer from your game-session history. This limits the risk of cross-data exposure in the event of an incident.

Cookie Controls

We use session cookies to keep you logged in and analytics cookies to understand which lobby sections you visit most. You can manage cookie preferences through the settings panel on any device.

Retention & Deletion Policy

Account data is retained for as long as your account remains active and for the period required by Indonesian regulations. Once you request deletion and your account is closed, we remove identifiable records within 30 days.

Third-Party Data Sharing

We share data only with payment processors needed to clear your DANA or bank transfer deposit, and with identity-verification services where local law permits. We do not share data with advertisers.

Data-Access Requests

You have the right to request a full copy of the data we hold on your account. Submit the request via Live Chat or email and we will deliver a structured summary within seven business days.

Frequently Asked Questions About Our Privacy Policy

The questions below reflect what account holders in Indonesia commonly ask about the win138 Privacy Policy — from what we collect during registration to how you can request changes or deletion of your data.

We collect your name, email address, phone number and the payment method you register — such as DANA, OVO, GoPay or QRIS. Phone verification is required before your account becomes active, and that record is stored securely in your profile.

Yes. Every deposit and withdrawal made through DANA, OVO, GoPay, QRIS, virtual account or bank transfer is logged against your account ID. You can request a copy of this transaction history through the Account Help Centre.

We retain identifiable account data for the period required under applicable Indonesian data regulations. After that mandatory period, and once you have submitted a deletion request, we remove your records within 30 days.

Submit your request via Live Chat inside your account or by email to our support address. Include your registered phone number so we can locate your record. We aim to respond within 24 hours and complete corrections within seven business days.

We share data only with payment processors required to clear DANA, GoPay or bank-transfer transactions, and with identity-verification partners where local law permits. We do not sell or share your data with advertisers or unrelated third parties.

We use session cookies to maintain your login state and analytics cookies to see which lobby sections are visited most. You can review and adjust your cookie preferences in the settings panel accessible from any device, including mobile.

The policy applies to all accounts registered in Indonesia. Access to certain account features and the exact data-retention rules that apply to your records depend on local law, as Indonesian data-protection requirements govern our operations here.