Privacy Policy

1. Introduction and Scope

nos138 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect the personal data of users who access our online gambling platform at nos138.cam (the "Platform") or use any of our services including sports betting, live casino games, slot machines, togel (Indonesian lottery-style games), sabung ayam (live cockfighting streams), and other betting products.

This Privacy Policy applies to all users of the nos138 Platform, regardless of how you access our services (desktop browser, mobile browser, or any future application). By creating an account, depositing funds, placing bets, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

nos138 operates as an internationally licensed offshore gambling platform serving the Indonesian market. We process personal data in accordance with international data protection standards and the regulations applicable to our licensing jurisdiction. We recognize that different jurisdictions have varying privacy laws, and we strive to meet or exceed the requirements of the most stringent applicable regulations.

2. Information We Collect

nos138 collects various types of personal information to provide, maintain, and improve our services, ensure platform security, comply with legal obligations, and deliver personalized user experiences. The categories of information we collect include:

2.1 Information You Provide Directly

When you register an account on nos138 or interact with our services, you voluntarily provide the following information:

• Account Registration Data: Full legal name, date of birth, email address, phone number (mobile number for SMS verification and WhatsApp support), residential address (street, city, postal code, country), username, password, and security questions/answers.
• Identity Verification (KYC) Documents: Copies of government-issued identification such as Indonesian National ID (KTP), passport, or driver's license (SIM); proof of address documents (utility bills, bank statements, or government correspondence dated within the last three months); and selfie photographs holding your ID for facial verification.
• Payment Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers or phone numbers), and transaction history including deposit and withdrawal records. We do not store full credit/debit card numbers; card payments are processed through PCI-DSS compliant third-party payment processors.
• Communication Records: Contents of your communications with nos138 customer support via live chat, email, WhatsApp, or any other support channel; feedback, complaints, and survey responses; and any documentation you provide to support inquiries or disputes.

2.2 Information We Collect Automatically

When you access and use the nos138 Platform, we automatically collect certain technical and usage information:

• Device and Technical Data: IP address, device type and model, operating system and version, browser type and version, screen resolution, device identifiers (MAC address, IMEI), mobile network information, and time zone settings.
• Usage and Behavioral Data: Pages visited, features accessed, time spent on each page, click patterns, bet history (games played, bet amounts, bet types, outcomes), login and logout times, session duration, referral source (how you arrived at nos138), and navigation paths through the Platform.
• Location Data: Approximate geographic location derived from IP address or, with your explicit permission, precise GPS location data from mobile devices. Location data helps us verify compliance with geographic restrictions and comply with licensing requirements.
• Cookies and Similar Technologies: We use cookies, web beacons, pixel tags, and similar tracking technologies to recognize your device, remember your preferences, analyze usage patterns, deliver personalized content, and measure advertising effectiveness. See Section 9 for detailed information on our cookie practices.

2.3 Information from Third Parties

In certain circumstances, we may receive information about you from external sources:

• Payment Processors: Transaction status, payment confirmation, and fraud risk assessments from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Age verification, identity authentication, and anti-fraud checks from third-party KYC/AML service providers that cross-reference your information against public databases, sanctions lists, and watchlists.
• Game Providers: Gameplay data, win/loss records, and fraud detection signals from third-party game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, Pocket Games Soft, etc.) that power the casino games and slots on our Platform.
• Affiliate Partners: Referral information if you accessed nos138 through an affiliate link or promotional campaign, allowing us to credit the referring partner and evaluate marketing effectiveness.

3. How We Use Your Information

nos138 uses the personal information we collect for the following specific purposes:

3.1 Providing and Managing Services

• Create, maintain, and authenticate your user account.
• Process deposits, withdrawals, and other financial transactions securely and efficiently.
• Enable you to place bets on sports events, play casino games, participate in togel draws, view sabung ayam live streams, and access all other nos138 betting products.
• Calculate bet outcomes, credit winnings to your account, and maintain accurate transaction records.
• Display your account balance, betting history, and transaction logs in real-time.
• Provide customer support and respond to your inquiries, complaints, and requests.

3.2 Compliance and Security

• Verify your identity, age (21+ requirement), and residential address to comply with international gaming regulations and Indonesian market requirements.
• Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks to prevent fraud, money laundering, terrorist financing, and other illicit activities.
• Detect and prevent unauthorized account access, collusion, bonus abuse, match-fixing, and other forms of cheating or fraudulent behavior.
• Monitor betting patterns and gameplay for anomalies that may indicate problem gambling, requiring intervention under our Responsible Gaming obligations.
• Comply with legal and regulatory obligations including record-keeping requirements, tax reporting (where applicable), and cooperation with law enforcement or regulatory investigations.
• Enforce our Terms & Conditions and resolve disputes between nos138 and users or between users.

3.3 Communication and Marketing

• Send transactional communications including account registration confirmations, deposit/withdrawal receipts, password reset emails, and security alerts.
• Notify you of important changes to our services, terms, policies, or platform features.
• Send promotional communications about bonuses, special offers, new games, tournaments, and other marketing content (subject to your marketing preferences; you can opt out at any time via account settings or unsubscribe links in emails).
• Conduct customer satisfaction surveys and gather feedback to improve our services.

3.4 Platform Improvement and Personalization

• Analyze usage patterns, betting trends, and player preferences to improve platform functionality, optimize user experience, and develop new features.
• Personalize content, game recommendations, and promotional offers based on your betting history, game preferences, and demographic information.
• Perform A/B testing and other experiments to evaluate the effectiveness of new features, designs, and promotional strategies.
• Generate aggregated, anonymized analytics reports for internal business intelligence and strategic planning purposes.

3.5 Responsible Gaming

• Monitor your account activity for signs of problem gambling behavior and provide proactive interventions when necessary.
• Implement and enforce deposit limits, loss limits, session time limits, and self-exclusion requests you set in your account.
• Provide access to responsible gaming tools, educational resources, and links to professional gambling support organizations.

4. Legal Basis for Processing

nos138 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions) and provide the gambling services you request. Without processing your personal data, we cannot create your account, process transactions, or enable you to place bets.
• Legal Obligation: Processing is required to comply with legal and regulatory obligations imposed by our licensing jurisdiction, including KYC/AML requirements, age verification, record-keeping mandates, and cooperation with regulatory or law enforcement authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, service improvement, marketing effectiveness analysis, and customer relationship management. We balance these interests against your privacy rights and do not use your data in ways you would not reasonably expect.
• Consent: For certain processing activities (such as marketing communications, cookies beyond essential ones, and precise location tracking), we rely on your explicit consent, which you can withdraw at any time through your account settings or by contacting support.

5. Data Sharing and Disclosure

nos138 does not sell your personal information to third parties for marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality and security obligations:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC/AML services that verify your identity, age, and address against public databases and sanctions lists.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, Pocket Games Soft, and other licensed game studios that power the casino games, live dealer tables, and slots on nos138.
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers that store and process data on our behalf under strict data protection agreements.
• Customer Support Tools: Live chat platforms, helpdesk software, and communication systems used to deliver customer support services.
• Marketing and Analytics Platforms: Email marketing services, SMS providers, analytics tools (Google Analytics or similar, configured to anonymize IP addresses), and advertising networks to deliver and measure marketing campaigns.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, regulators, law enforcement, courts, or other authorities when:

• Required by law, regulation, legal process, or court order.
• Necessary to investigate or prevent fraud, money laundering, terrorist financing, or other illegal activities.
• Requested by our licensing authority as part of regulatory oversight or compliance audits.
• Necessary to protect the safety, rights, or property of nos138, our users, or the public.

5.3 Business Transfers

If nos138 undergoes a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring or successor entity as part of the transaction. We will notify you of any such change in ownership and provide you with choices regarding your data if required by law.

5.4 With Your Consent

We may share your information with additional third parties when you provide explicit consent for specific purposes not covered by this policy.

6. Data Security and Protection

nos138 employs industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and nos138 servers is encrypted using 256-bit SSL/TLS encryption. Sensitive data stored in our databases (passwords, payment information) is encrypted at rest using strong cryptographic algorithms.
• Access Controls: Strict access controls limit employee and contractor access to personal data on a need-to-know basis. All personnel with access to personal data are bound by confidentiality obligations.
• Secure Infrastructure: Our servers are hosted in tier-3 data centers with 24/7 physical security, redundant power and network systems, and advanced intrusion detection and prevention systems.
• Regular Audits: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses in our systems.
• Incident Response: We maintain an incident response plan to quickly detect, contain, and remediate security breaches. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable legal requirements.
• Two-Factor Authentication (2FA): We offer optional 2FA for account login to add an extra layer of security beyond passwords.

Despite these safeguards, no internet-based system is entirely secure. You acknowledge that data transmission over the internet and data storage systems carry inherent risks, and nos138 cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for any activity under your account.

7. Data Retention

nos138 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained for the duration of your active account and for 5 years after account closure to comply with regulatory record-keeping requirements.
• Transaction Records: Financial transaction data (deposits, withdrawals, bets, winnings) is retained for 7 years after the transaction date to comply with tax and financial regulations.
• KYC/AML Documents: Identity verification documents are retained for 5 years after account closure or the last transaction, whichever is later, as required by anti-money laundering regulations.
• Communication Records: Customer support communications are retained for 3 years to maintain service quality records and resolve disputes.
• Marketing Data: If you opt out of marketing communications, we retain a minimal record of your opt-out preference indefinitely to ensure we do not contact you again.
• Anonymized Data: We may retain anonymized, aggregated data (which cannot identify you personally) indefinitely for analytics and business intelligence purposes.

At the end of the retention period, personal data is securely deleted or anonymized in accordance with our data destruction procedures.

8. Your Privacy Rights

Depending on your jurisdiction and applicable data protection laws, you may have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal data we hold about you, including details on how we use it and with whom we share it.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update most account information directly through your account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected. Note that we may be required to retain certain data to comply with legal obligations or to establish, exercise, or defend legal claims.
• Right to Restrict Processing: You may request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications at any time via account settings or unsubscribe links.
• Right to Withdraw Consent: If we process your data based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: You may file a complaint with a data protection authority in your jurisdiction if you believe we have violated your privacy rights.

To exercise any of these rights, please contact us at [email protected] (display only — not a clickable link) with "Privacy Rights Request" in the subject line. We will respond to your request within 30 days and may require identity verification to prevent unauthorized disclosure of personal data.

9. Cookies and Tracking Technologies

nos138 uses cookies, web beacons, pixel tags, and similar technologies to enhance user experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you across sessions.

9.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly. These cookies enable core features such as user authentication, session management, and secure payment processing. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous usage data (pages visited, time on site, error messages) to help us understand how users interact with our Platform and identify areas for improvement.
• Functional Cookies: Remember your preferences (language, currency, layout settings) to provide a personalized experience across sessions.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. These cookies may be set by third-party advertising networks.

9.2 Managing Cookies

Most browsers allow you to control cookies through settings. You can set your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is set. Note that disabling essential cookies may impair Platform functionality, and you may not be able to use certain features.

To opt out of third-party marketing cookies, you can visit industry opt-out platforms such as the Network Advertising Initiative (NAI) or the Digital Advertising Alliance (DAA).

10. International Data Transfers

nos138 operates internationally and may transfer your personal data to countries outside Indonesia, including to our servers located in offshore jurisdictions and to third-party service providers located worldwide. These countries may have data protection laws that differ from Indonesian law.

When we transfer data internationally, we ensure adequate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by data protection authorities.
• Ensuring the recipient country provides an adequate level of data protection as determined by relevant authorities.
• Binding Corporate Rules (BCRs) within our corporate group, where applicable.
• Your explicit consent for the transfer when required by law.

By using nos138 services, you acknowledge and consent to the international transfer of your personal data as described in this policy.

11. Children's Privacy

nos138 does not knowingly collect or solicit personal information from individuals under 21 years of age. Our services are intended solely for adults aged 21 and older, in compliance with Indonesian gambling age restrictions and international gaming standards.

If we discover that we have inadvertently collected personal information from a person under 21, we will delete that information immediately and close any associated account. If you believe we have collected data from a minor, please contact us at [email protected] (display only) so we can take appropriate action.

Parents and guardians are encouraged to monitor their children's online activities and use parental control tools to prevent minors from accessing gambling websites.

12. Changes to This Policy

nos138 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or for other operational reasons. We will post the updated policy on this page with a revised "Last Updated" date at the top.

If we make material changes that significantly affect how we process your personal data, we will notify you via email to your registered email address or through a prominent notice on the Platform prior to the changes taking effect.

Your continued use of nos138 services after changes have been posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how nos138 handles your personal data, please contact us using the following methods:

• Email: [email protected] (display only — not a clickable link)
• Live Chat: Available 24/7 on the nos138 website
• WhatsApp: +62-812-3456-7890 (display only — not a clickable link)

For privacy-specific inquiries, please include "Privacy Inquiry" in the subject line of your email. For formal data subject rights requests (access, deletion, rectification), please include "Privacy Rights Request" in the subject line along with your full name, registered email address, and account username for verification purposes.

Our customer support team speaks fluent Indonesian (Bahasa Indonesia) and English and will respond to your inquiry within 5 business days. For complex privacy requests, we may require up to 30 days to provide a complete response.