abo138 Platform Privacy Notice

This page describes what we collect when you use abo138 and how we keep that data protected. We treat your personal information with care — we collect only what we need to operate our platform, comply with law, and protect your account. Your data is encrypted, stored securely, and never shared with third parties except as legally required.

When you create an account on abo138, deposit funds via DANA, e-wallet, mobile banking, local payment, or other methods, or wager on football, live casino, or slots, you provide us with information. We use that information to verify your identity, process your transactions, calculate your tier status and cashback, and communicate with you about your account. This privacy notice explains our practices in detail.

We operate in multiple jurisdictions where local privacy law may apply to our handling of your data. If you are in a jurisdiction with specific data-protection requirements, those requirements apply to us. You always have the right to request what data we hold about you and, in some cases, to request deletion or correction of your information.

What Data We Collect on abo138

We collect information in several categories. First, account registration data: your name, email address, date of birth, phone number, and residential address. We request this information to create your abo138 account and verify your identity.

Second, identity verification data: a copy of your government-issued ID (KTP or passport) and a selfie holding your ID. We use this to comply with know-your-customer (KYC) regulations and prevent fraud. This data is handled by our verification processor, which is contractually bound to protect it and delete it after verification is complete.

Third, payment and transaction data: records of your deposits, withdrawals, wagers, and winnings. We retain this data for accounting, tax compliance, and dispute resolution. When you deposit via DANA, e-wallet, mobile banking, or local payment, those payment processors also retain records of the transaction.

Fourth, account activity data: your login history, wagers placed, games played, tier status, cashback earned, and referral history. We use this to calculate your weekly cashback, track your tier progression, and detect suspicious patterns.

Fifth, communication data: emails you send to our support team, in-app messages, and feedback you provide. We use these to respond to your inquiries and improve our service.

Account data
Name, email, date of birth, phone, address — collected at registration.
Identity data
ID copy and selfie — collected during verification and deleted after confirmation.
Transaction data
Deposits, withdrawals, wagers, winnings — retained for compliance and audit.
Activity data
Login history, wagers, tier status, cashback — used for account management and promotion eligibility.

How We Use Your Data

We use the data we collect for these purposes: First, account administration — creating your account, verifying your identity, resetting your password, and managing your profile. Second, transaction processing — accepting your deposits via online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, and processing your withdrawals. Third, promotional eligibility — calculating your weekly cashback, tracking your tier progression, determining your referral bonus eligibility, and informing you of seasonal promotions around Liga 1, Piala Indonesia, and Piala AFF tournaments.

Fourth, legal compliance — fulfilling anti-money-laundering (AML) and tax-reporting obligations. We may be required by law to disclose your information to regulatory authorities. Fifth, fraud prevention — monitoring for suspicious account activity, unauthorized access, and payment anomalies. Sixth, customer support — responding to your inquiries about your account, wagers, or promotions. Seventh, communication — sending you account notifications, promotion announcements, and service updates via email or in-app messages.

Data retention: We retain your account data indefinitely while your account is active. After account closure, we retain transaction records and identity data for the retention period required by law (typically 5–7 years for financial records). Identity verification documents are deleted within 30 days of successful verification.

Third Parties and Data Processors

We do not sell your data. However, we share data with service providers who process it on our behalf under strict confidentiality agreements. These include: payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank partners online payment, e-wallet, mobile banking, local payment) who process your deposits and withdrawals; identity verification providers who confirm your KYC documents; email service providers who send our communications; and cloud hosting providers who store our databases.

These processors are contractually prohibited from using your data for any purpose other than providing their service to abo138. We verify that all processors maintain security standards at least equivalent to our own. If we change processors, we will update this policy.

We may disclose your data if required by law — for example, if a court orders us to provide customer records, or if a regulatory authority investigates potential money laundering. We will comply with such requests to the extent required by law.

Your Rights and Requests

Depending on your jurisdiction, you may have certain rights regarding your data. In many jurisdictions, you have the right to request access to the data we hold about you. You can do this by contacting our support team; we will provide you with a summary of your account data. You may also have the right to request correction of inaccurate data, deletion of data we no longer need, or a portable copy of your data in a standard format.

To exercise any of these rights, email our support team with your request. We will respond within 30 days. If your request requires us to verify your identity, we may ask for additional information. Note that we cannot delete transaction records or identity data retained for legal compliance — we can only mark them as inactive or redact personal identifiers where permitted by law.

Cookies and Tracking Technology

We use cookies to operate abo138. Session cookies store your login state and remember your preferences while you are active; these expire when you close your browser. Persistent cookies remember your language preference and other settings; these remain for several months to avoid re-entering preferences. We do not use cookies for advertising or third-party tracking.

Your browser allows you to block or delete cookies. If you do, certain abo138 features may not work properly — for example, you may be logged out frequently, or your account preferences may not persist. We do not respond to "do-not-track" browser signals, but you can always disable cookies in your browser settings.

Secure Data Handling

We protect your data using encryption, firewalls, and access controls. All data transmitted between your device and abo138 is encrypted using SSL (Secure Sockets Layer). Your password is never stored in plain text — we hash and salt it cryptographically. Our servers are located in secure data centers with physical security and redundant backups. Access to your data is limited to employees and contractors with a business need to know.

However, no security system is perfect. If we discover a data breach affecting your personal information, we will notify you and relevant authorities as required by law. We maintain cyber insurance to mitigate the financial impact of a breach.

International Data Transfers

Our servers may sit outside your jurisdiction. When you use abo138 from Indonesia, your data may be transferred to and stored on servers in other countries. By using abo138, you consent to such transfers. We take steps to ensure data protection regardless of server location — for example, through encryption and contractual guarantees with our hosting providers.

Contact and Data Protection Officer

If you have questions about this privacy notice or wish to exercise your data rights, contact our support team via email. We respond to all data-protection inquiries within 30 days. If you are unsatisfied with our response, you may escalate your complaint to the relevant data-protection authority in your jurisdiction.

This privacy notice is effective immediately and applies to all abo138 users. We may update this notice from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via email or by posting a notice on our platform.