LEGAL REFERENCE

Your Data Stays Yours

We built top138 around Indonesia's payment flows and your account security. This privacy policy shows exactly how we handle your information — from login to payout — across...

EncryptedQRIS ReadyDANA SecureOVO ProtectedGoPay Safe
top138 Your Data Stays Yours

How We Protect Your Information

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

SUPPORT

Privacy Questions? Reach Us

Email Support Send privacy concerns to our data team. We...
Live Chat Chat with our support team during lobby hours...
Account Settings Manage your privacy preferences directly in your account...
REVIEW SIGNALS

Why Your Privacy Matters to Us

Encryption Standard

All data in transit and at rest uses industry-standard TLS 1.2+ encryption. Your QRIS, DANA, OVO and GoPay transactions are never stored unencrypted on our servers.

No Third-Party Sales

We do not sell, rent or share your personal information with marketing firms, data brokers or unaffiliated advertisers. Your account stays yours.

Regular Audits

Our security team conducts quarterly privacy audits and penetration tests. We log all data access and flag unusual account activity in real time.

Payment Compliance

We comply with PCI DSS standards for DANA, OVO, GoPay and QRIS processing. Payment gateways are certified and regularly validated by third-party auditors.

Data Retention Policy

Account data is retained for the duration of your membership plus 12 months. After that, we delete or anonymize your information unless local law requires longer retention.

Transparency Reports

We publish annual transparency reports detailing government data requests and our response rate. You can request your own data export anytime from account settings.

Privacy Across top138

Live Casino Tables
Your table history, chat logs and session data are encrypted and tied to your account. We do not share table footage or your gameplay with other players.
Slot Lobbies
Slot play history is private to your account. Spin results and feature triggers are logged for payout verification but never broadcast or shared publicly.
Sportsbook Markets
Your betting slip, odds history and settlement records are encrypted. We do not sell your betting patterns to third-party analytics firms or sports data vendors.
Payment Methods
DANA, OVO, GoPay and QRIS payment details are tokenized after first use. We never store full card or wallet numbers on our servers; payment gateways handle all sensitive data.
Account Security
Two-factor authentication is available for all accounts. Login attempts, IP changes and withdrawal requests trigger security alerts sent to your registered phone or email.
Promotional Data
We use your account activity to show you relevant promotions, but only within top138. You can opt out of marketing emails anytime from your account preferences.
Dispute Resolution
If you dispute a transaction or payout, we review encrypted logs of your session. Your privacy is maintained throughout the dispute process; we do not share details with external parties.
QUICK SIGNAL

What This Policy Covers

Account Registration When you open an account, we collect your name, email...
Gameplay Tracking We log your session times, game selections, bet amounts and...
Payment Processing DANA, OVO, GoPay and QRIS transactions are processed through certified...
Device & Location We record your device type, browser and approximate location (country/region...
Communication Records Live chat conversations, support emails and in-game messages are retained...
Cookies & Analytics We use session cookies to keep you logged in and...

Privacy Policy Questions

Yes. Log into your account, go to Settings > Privacy, and click 'Request Data Export'. We'll email you a complete file of your account information, transaction history and gameplay logs within 7 business days.

We store payment tokens (not full card or wallet numbers) for as long as your account is active. After you close your account, payment records are deleted within 30 days unless we're required to retain them for regulatory compliance.

No. We send only the minimum required information to process your transaction — your account ID and amount. Payment providers never receive your full account history, gameplay data or personal details beyond what's needed for the payment.

Your account data is anonymized within 30 days of closure. We retain encrypted transaction records for 12 months for dispute resolution and regulatory compliance, then delete them permanently.

We use TLS 1.2+ encryption, monitor for suspicious login attempts and offer two-factor authentication. If we detect unusual activity, we send you an alert and may temporarily lock your account for security.

Yes. Every marketing email includes an unsubscribe link. You can also manage preferences in your account settings under 'Communications'. We'll stop sending promotional emails within 24 hours.

Email our data protection team at [email protected] or use the live chat during support hours. For formal data requests or complaints, you can also reach our compliance officer through your account settings.