Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by gas138 through our website, mobile platform, and related services. It covers data collection from Indonesian residents who register accounts, place bets, make deposits and withdrawals, contact customer support, or otherwise engage with gas138 services.

gas138 operates as an online gaming platform offering casino games, sports betting, live dealer tables, and lottery products to players located in Indonesia. Our data practices comply with internationally recognized privacy principles and are designed to ensure transparency, security, and user control over personal information.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of gas138 services. Questions regarding this policy or your privacy rights should be directed to our Data Protection Officer through the contact channels listed at the end of this document.

2. Information We Collect

2.1 Personal Information Provided by You

When you register an account on gas138, we collect the following personal information directly from you:

• Identity Information: Full legal name, date of birth, gender, and nationality
• Contact Details: Email address, mobile phone number, and residential address within Indonesia
• Account Credentials: Username and encrypted password
• Verification Documents: Government-issued identification (KTP - Indonesian national identity card) submitted during KYC (Know Your Customer) verification
• Financial Information: Bank account details, e-wallet accounts (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), and payment transaction history
• Communication Records: Customer support inquiries, live chat transcripts, email correspondence, and WhatsApp messages

2.2 Information Automatically Collected

When you access gas138 services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers
• Connection Data: IP address, internet service provider, geographic location (city/region level), and time zone
• Usage Analytics: Pages visited, time spent on each page, click patterns, navigation paths, and feature usage statistics
• Gaming Activity: Bets placed, games played, stake amounts, winnings and losses, betting patterns, and game preferences
• Session Information: Login times, logout times, session duration, and concurrent device usage

2.3 Information from Third Parties

gas138 may receive information about you from third-party sources including:

• Payment Processors: Transaction confirmation, payment status, and fraud prevention data from Indonesian banks and e-wallet providers
• Verification Services: Identity verification results and document authentication from KYC service providers
• Fraud Prevention Partners: Risk scores, behavioral analysis, and security alerts from anti-fraud platforms

3. How We Use Your Information

gas138 processes your personal information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your gaming account
• Processing deposits and withdrawal requests
• Enabling you to place bets and play games
• Calculating winnings, losses, and account balances
• Managing VIP tier status and loyalty rewards
• Providing access to promotional offers and bonuses

3.2 Verification and Compliance

• Verifying your identity and age to ensure compliance with 21+ age restrictions
• Conducting KYC (Know Your Customer) checks before processing withdrawals
• Detecting and preventing fraud, money laundering, and other illegal activities
• Complying with applicable legal and regulatory obligations
• Maintaining audit trails and transaction records as required by law

3.3 Customer Support and Communication

• Responding to your inquiries via live chat, email, WhatsApp, or in-app messaging
• Troubleshooting technical issues and resolving disputes
• Sending transactional notifications (deposit confirmations, withdrawal status updates, password resets)
• Providing updates about changes to our Terms and Conditions or Privacy Policy
• Notifying you about new features, games, or platform improvements

3.4 Marketing and Personalization

• Sending promotional emails about bonuses, tournaments, and special offers (with your consent)
• Personalizing game recommendations based on your playing history
• Displaying relevant promotions tailored to your VIP tier and preferences
• Conducting player surveys to improve our services (optional participation)

3.5 Security and Risk Management

• Monitoring for suspicious activity, unauthorized access, and account takeover attempts
• Detecting multi-accounting, bonus abuse, and collusive betting patterns
• Implementing responsible gaming tools (deposit limits, time-outs, self-exclusion)
• Protecting against distributed denial-of-service (DDoS) attacks and cyber threats

3.6 Analytics and Platform Improvement

• Analyzing user behavior to optimize website performance and user experience
• Identifying popular games and betting markets to guide content decisions
• Testing new features and measuring their effectiveness
• Generating aggregate statistics about player demographics and engagement (anonymized data)

4. Data Security Measures

gas138 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

4.1 Technical Security Controls

• Encryption: All data transmitted between your device and our servers is protected using 128-bit SSL (Secure Socket Layer) encryption, the same technology used by major Indonesian banks
• Secure Storage: Personal information is stored on secure servers located in protected data centers with restricted physical and digital access
• Password Protection: User passwords are encrypted using industry-standard hashing algorithms and are never stored in plain text
• Firewall Protection: Multi-layered firewall systems prevent unauthorized access to our network infrastructure
• Intrusion Detection: Real-time monitoring systems detect and respond to potential security threats

4.2 Organizational Security Practices

• Access Controls: Employee access to personal data is restricted based on job role and necessity, following the principle of least privilege
• Staff Training: All employees undergo regular data protection and security awareness training
• Vendor Management: Third-party service providers are carefully vetted and contractually bound to maintain data security standards
• Incident Response: We maintain a security incident response plan to address data breaches promptly and effectively
• Regular Audits: Our security measures are periodically reviewed and updated to address emerging threats

4.3 Your Security Responsibilities

While gas138 implements robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password that is not used on other websites
• Never share your password with anyone, including gas138 staff (we will never ask for your password)
• Log out of your account when using shared or public devices
• Keep your registered email address and phone number secure, as they are used for password recovery
• Report any suspicious activity on your account to customer support immediately
• Ensure your personal device has updated antivirus software and operating system patches

5. Information Sharing and Disclosure

gas138 does not sell your personal information to third parties. We only share your data in the following limited circumstances:

5.1 Service Providers and Business Partners

We share necessary personal information with trusted third-party service providers who assist us in operating our platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction details to process your deposits and withdrawals
• KYC Verification Services: Identity verification providers receive your KTP documents to confirm your age and identity
• Game Providers: Casino game studios and live dealer providers receive basic account information to enable gameplay
• Customer Support Tools: Live chat and ticketing system providers may process communication records to facilitate support services
• Cloud Hosting: Infrastructure providers host our servers and databases in secure data centers

All service providers are contractually obligated to use your information only for specified purposes and to maintain confidentiality and security standards equivalent to our own.

5.2 Legal Requirements and Compliance

We may disclose your personal information if required to do so by law or in response to:

• Valid legal requests from law enforcement agencies or government authorities
• Court orders, subpoenas, or similar legal processes
• Requests to comply with anti-money laundering or counter-terrorism financing regulations
• Situations where disclosure is necessary to protect the rights, property, or safety of gas138, our users, or the public

5.3 Business Transfers

In the event gas138 undergoes a business transition such as a merger, acquisition, or sale of assets, your personal information may be transferred to the successor organization. You will be notified of any such change in ownership or control of your personal data.

5.4 With Your Consent

We may share your information with third parties for purposes not described in this Privacy Policy if we obtain your explicit consent to do so. You have the right to withdraw such consent at any time.

6. Cookies and Tracking Technologies

gas138 uses cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content.

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They contain information about your preferences, login status, and browsing behavior. Cookies enable functionality like staying logged in between sessions and remembering your language preferences.

6.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for core platform functionality, login authentication, and secure transactions. Cannot be disabled.	Session or up to 30 days
Performance Cookies	Collect anonymous data about how users interact with our platform to improve performance and fix errors.	Up to 2 years
Functional Cookies	Remember your preferences (language, currency, display settings) to provide a personalized experience.	Up to 1 year
Advertising Cookies	Track your activity to deliver relevant promotional content and measure campaign effectiveness.	Up to 1 year

6.3 Managing Cookies

You can control cookie settings through your web browser preferences. Most browsers allow you to:

• View and delete cookies stored on your device
• Block all cookies or only third-party cookies
• Receive notifications when websites attempt to set cookies
• Clear cookies upon closing the browser

Please note that disabling essential cookies may affect your ability to use certain features of gas138, such as staying logged in or placing bets.

6.4 Other Tracking Technologies

In addition to cookies, gas138 may use:

• Web Beacons: Small transparent images embedded in emails to track open rates and engagement
• Local Storage: HTML5 local storage to cache game data and improve loading speeds
• Device Fingerprinting: Collecting device characteristics to detect fraud and prevent multi-accounting

7. Your Privacy Rights

gas138 respects your privacy rights and provides the following controls over your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information gas138 holds about you. We will provide this information in a structured, commonly used format within 30 days of your request. This includes account details, transaction history, betting records, and communication logs.

7.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most account information directly through your account settings. For changes to verified information (such as name or date of birth), contact our support team with supporting documentation.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information under certain circumstances. However, please note that gas138 is required to retain certain records for legal and regulatory compliance purposes (typically 5-7 years for financial transactions). After account closure, we will delete or anonymize your information to the extent legally permissible.

7.4 Right to Restrict Processing

You have the right to request that we limit how we use your personal information in specific situations, such as while we verify data accuracy or assess whether we have legitimate grounds to continue processing.

7.5 Right to Data Portability

You can request a copy of your personal information in a machine-readable format that can be transferred to another service provider. This right applies to information you provided to gas138 that we process based on your consent or contractual necessity.

7.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You can opt out of promotional emails by clicking the unsubscribe link in any marketing email or adjusting your communication preferences in your account settings.

7.7 Right to Withdraw Consent

Where we process your personal information based on consent (such as marketing communications), you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing conducted before withdrawal.

7.8 Exercising Your Rights

To exercise any of these privacy rights, contact our Data Protection Officer via:

• Email: [email protected] (displayed as plain text)
• Live chat through your account dashboard
• In-app messaging system

We will respond to verified requests within 30 days. If we require additional time, we will inform you of the reason and extension period.

8. Data Retention and Deletion

gas138 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

8.1 Active Account Data

While your account remains active, we retain all personal information, transaction records, betting history, and communication logs to provide continuous service and maintain accurate financial records.

8.2 Closed Account Data

After you close your account, we retain:

• Financial Records: Transaction history, deposit and withdrawal records are retained for 7 years to comply with anti-money laundering and tax regulations
• Identity Verification: KYC documents and verification records are retained for 5 years for regulatory compliance
• Gaming History: Bet records and game outcomes are retained for 5 years for dispute resolution and auditing purposes
• Communication Records: Customer support interactions are retained for 3 years for quality assurance and training

8.3 Anonymized Data

After required retention periods expire, we anonymize personal data by removing all identifying information. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes, as it can no longer identify you personally.

8.4 Legal Holds

In exceptional circumstances, such as pending litigation or regulatory investigations, we may retain relevant data beyond standard retention periods until the matter is fully resolved.

9. International Data Transfers

While gas138 primarily serves Indonesian users, certain aspects of our operations may involve international data transfers:

9.1 Cloud Infrastructure

Our platform utilizes cloud hosting services that may store data on servers located outside Indonesia. These service providers maintain data centers in multiple countries to ensure reliability and performance. All international transfers are protected by:

• Standard contractual clauses approved for international data transfers
• Encryption during transmission and at rest
• Compliance with internationally recognized data protection standards

9.2 Game Providers

Casino games and live dealer tables are provided by international gaming studios. When you play games, certain session data (bet amounts, game outcomes, timestamps) may be transmitted to servers operated by these providers outside Indonesia. All game providers are contractually required to maintain data security and confidentiality.

9.3 Safeguards

gas138 ensures that all international data transfers comply with applicable data protection laws and that adequate safeguards are in place to protect your privacy rights. We conduct due diligence on all international partners to verify their data protection practices.

10. Children's Privacy Protection

gas138 services are strictly intended for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21 years of age.

If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete that information from our systems. Parents or guardians who believe their child has provided personal information to gas138 should contact us immediately at [email protected].

Our age verification measures include:

• Mandatory date of birth declaration during registration
• KYC verification requiring submission of government-issued ID (KTP)
• Automated age calculation to prevent underage registration
• Immediate account suspension if underage status is detected

11. Changes to This Privacy Policy

gas138 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you through:

• Email notification to your registered email address
• Prominent notice on the gas138 homepage
• In-app notification upon your next login

The "Last Updated" date at the top of this document indicates when the most recent revisions were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

Your continued use of gas138 services after notification of changes constitutes acceptance of the updated Privacy Policy. If you do not agree with any modifications, you must discontinue use of our services and may request account closure.

12. Contact Information and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our Data Protection Officer:

When contacting us about privacy matters, please include:

• Your full name and registered email address for account verification
• Clear description of your request or concern
• Any relevant documentation supporting your request
• Preferred method of response (email, live chat, in-app message)