Privacy Policy

1. Introduction

mag138 ("we," "us," "our") operates an online betting platform serving users primarily located in Indonesia. We recognize that privacy is a fundamental right, and we are committed to handling your personal information with the highest standards of care, transparency, and security. This Privacy Policy describes our practices concerning the collection, use, disclosure, and protection of personal data in compliance with international data protection standards and applicable Indonesian regulations.

By registering an account, accessing our website, or using mag138 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein. If you do not agree with this policy, please do not use our platform.

2. What Information We Collect

mag138 collects various types of personal and non-personal information to provide, maintain, and improve our services. The categories of data we collect include:

2.1. Personal Identification Information

• Full Name: Your legal name as it appears on government-issued identification documents.
• Date of Birth: Required to verify you meet the minimum age requirement (21 years or older).
• Email Address: Used for account communication, notifications, and password recovery.
• Mobile Phone Number: Used for account security (two-factor authentication), customer support, and promotional communications (with your consent).
• Residential Address: Your physical address in Indonesia, required for KYC (Know Your Customer) verification and compliance purposes.
• Government-Issued ID: Scanned copies of your KTP (Indonesian National Identity Card), passport, or driver's license for age and identity verification.

2.2. Financial Information

• Bank Account Details: Bank name, account number, and account holder name for processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, and other supported banks.
• E-Wallet Information: Account details for OVO, DANA, GoPay, ShopeePay, LinkAja, or other e-wallet services used for transactions.
• Transaction History: Records of all deposits, withdrawals, bets placed, winnings, bonuses claimed, and account balance changes.
• Payment Card Information: If applicable, card details for deposit methods (processed securely through third-party payment gateways; mag138 does not store full card numbers).

2.3. Account and Usage Data

• Account Credentials: Username, password (stored in encrypted form), security questions, and two-factor authentication settings.
• Betting Activity: Records of all wagers placed, including bet type (sports, casino, slots, togel, sabung ayam), stake amounts, odds, outcomes, timestamps, and associated game sessions.
• Login and Session Data: IP addresses, device identifiers, browser type and version, operating system, screen resolution, language preferences, login timestamps, and session duration.
• Communication Records: Transcripts of live chat conversations, email correspondence, WhatsApp messages, and phone call recordings with customer support (for quality assurance and dispute resolution).

2.4. Technical and Behavioral Data

• Cookies and Tracking Technologies: Data collected via cookies, web beacons, and similar technologies to enhance user experience, analyze traffic patterns, and deliver personalized content. See Section 8 for details.
• Geolocation Data: Approximate geographic location derived from IP address to verify jurisdiction, prevent fraud, and ensure compliance with regional restrictions.
• Device and Browser Fingerprinting: Technical data used to detect multi-accounting, fraud, and unauthorized access attempts.

3. How We Collect Your Information

mag138 collects personal data through the following methods:

• Direct Provision: Information you voluntarily provide during account registration, KYC verification, deposit and withdrawal requests, customer support interactions, and promotional opt-ins.
• Automated Collection: Data automatically gathered through cookies, server logs, analytics tools, and tracking technologies when you access or interact with our platform.
• Third-Party Sources: Information obtained from payment processors, identity verification services, fraud detection agencies, and publicly available sources (e.g., sanctions lists, politically exposed persons databases) to fulfill our legal and regulatory obligations.
• Customer Support: Data you provide when contacting our support team via live chat, email, WhatsApp, or phone.

4. How We Use Your Information

mag138 processes your personal data for the following purposes:

4.1. Service Provision and Account Management

• Create, maintain, and manage your betting account.
• Process deposits, withdrawals, and financial transactions.
• Enable you to place bets, participate in games, and access platform features.
• Provide customer support and respond to inquiries.
• Send transactional notifications (deposit confirmations, withdrawal updates, bet settlements).

4.2. Legal and Regulatory Compliance

• Verify your age (21+ requirement) and identity through KYC procedures.
• Comply with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations.
• Detect and prevent fraud, account takeover, multi-accounting, and other prohibited activities.
• Respond to legal requests, court orders, and government inquiries.
• Maintain records for auditing, dispute resolution, and regulatory reporting.

4.3. Platform Security and Integrity

• Monitor for suspicious activity, cheating, collusion, and terms violations.
• Implement security measures to protect against unauthorized access, hacking, and data breaches.
• Conduct risk assessments and forensic investigations when fraud or security incidents occur.

4.4. Marketing and Personalization (With Consent)

• Send promotional emails, SMS messages, or push notifications about bonuses, new games, and special offers (you may opt out at any time).
• Personalize content, recommendations, and advertising based on your betting preferences and activity history.
• Conduct surveys, feedback requests, and user experience research to improve our services.

4.5. Analytics and Platform Improvement

• Analyze usage patterns, traffic sources, and user behavior to optimize platform performance and design.
• Test new features, games, and promotions to enhance user experience.
• Generate aggregated, anonymized reports for business intelligence (data used in this manner cannot identify individual users).

5. Data Sharing and Third Parties

mag138 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with the following categories of recipients under specific circumstances:

5.1. Service Providers and Business Partners

• Payment Processors: Banks, e-wallet providers, and payment gateways that facilitate deposits and withdrawals.
• KYC and Identity Verification Services: Third-party vendors that perform document verification, age checks, and fraud screening.
• Game Providers: Software studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.) that supply casino games, slots, and live dealer tables. These providers may collect session data to ensure game integrity.
• Cloud Hosting and IT Infrastructure: Providers that host our servers, databases, and backup systems.
• Customer Support Tools: Live chat software, ticketing systems, and CRM platforms used to manage customer interactions.
• Analytics and Advertising Partners: Tools like Google Analytics, Facebook Pixel, and affiliate tracking platforms (all data shared is subject to strict confidentiality agreements).

5.2. Legal and Regulatory Authorities

We may disclose your information to law enforcement agencies, courts, regulatory bodies, or government authorities when required by law, legal process, or to protect the rights, property, and safety of mag138, our users, or the public.

5.3. Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified via email or prominent notice on our platform before any such transfer occurs.

6. Data Security Measures

mag138 implements industry-standard technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Passwords are hashed using bcrypt or equivalent strong cryptographic algorithms and are never stored in plain text.
• Secure Data Storage: Personal and financial data is stored on secure, access-controlled servers located in jurisdictions with robust data protection laws. Backup copies are encrypted and stored separately.
• Access Controls: Only authorized mag138 personnel with a legitimate business need can access personal data. All access is logged, monitored, and subject to periodic review.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and DDoS mitigation services.
• Regular Security Audits: We conduct regular vulnerability assessments, penetration testing, and third-party security audits to identify and remediate potential weaknesses.
• Employee Training: All mag138 staff members undergo mandatory data protection and security training to ensure compliance with privacy policies and best practices.

Despite these measures, no method of data transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and promptly notifying us of any suspected unauthorized access.

7. Data Retention and Deletion

mag138 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal data is retained for the duration of your account's active status and for a minimum of 5 years after account closure to comply with AML/CTF regulations and to resolve potential disputes.
• Transaction Records: Financial transaction data is retained for at least 7 years as required by international financial compliance standards.
• KYC Documents: Identity verification documents are retained for 5 years following account closure or as required by applicable law.
• Marketing Data: If you opt out of marketing communications, we will retain a record of your opt-out preference indefinitely to ensure we do not contact you again.

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer identify you. You may request deletion of your account and associated data by contacting our Data Protection Officer at [email protected], subject to our legal retention obligations.

8. Cookies and Tracking Technologies

mag138 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits. Types of cookies we use include:

• Essential Cookies: Required for core platform functionality, such as maintaining your login session and processing transactions. These cookies cannot be disabled without impairing platform usability.
• Performance and Analytics Cookies: Collect anonymous data on how users interact with our platform (pages visited, time spent, navigation paths) to help us improve performance and design. Examples: Google Analytics, Hotjar.
• Functionality Cookies: Remember your preferences (language, currency, game favorites) to provide a personalized experience.
• Advertising and Targeting Cookies: Track your activity across websites to deliver relevant ads and measure campaign effectiveness. Examples: Facebook Pixel, affiliate tracking cookies.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using mag138, but some features may be less personalized or functional. For more information on managing cookies, visit www.allaboutcookies.org (external resource; mag138 is not responsible for third-party content).

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following privacy rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data (subject to legal retention obligations).
• Right to Restriction: Request that we limit the processing of your data under certain circumstances.
• Right to Data Portability: Request a machine-readable copy of your data for transfer to another service provider.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent for processing activities that require your explicit consent (e.g., marketing communications).

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your full name, registered email address, and a description of your request. We will respond within 30 days.

10. Children's Privacy

mag138 is strictly for users aged 21 years or older. We do not knowingly collect, process, or solicit personal information from individuals under the age of 21. If we become aware that a minor has registered an account or provided personal data, we will immediately close the account, delete all associated data, and refund any remaining balance to the payment source.

If you believe a minor has accessed mag138 services, please contact us immediately at [email protected] so we can take appropriate action.

11. International Data Transfers

mag138 operates internationally, and your personal data may be transferred to, stored, and processed in jurisdictions outside Indonesia, including countries that may not have data protection laws equivalent to those in your home country. When transferring data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities.
• Binding Corporate Rules (BCRs) for intra-group transfers.
• Reliance on adequacy decisions recognizing equivalent data protection standards.

By using mag138, you consent to the transfer of your personal data to countries outside Indonesia as necessary to provide our services.

12. Changes to This Policy

mag138 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting a prominent notice on our homepage.
• Sending an email notification to your registered email address.
• Displaying an in-platform alert upon your next login.

The "Effective Date" at the top of this policy indicates when the current version was last updated. Your continued use of mag138 after changes are posted constitutes acceptance of the revised policy. We encourage you to review this page periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 on the mag138 platform
• WhatsApp: Contact support for the current WhatsApp support number

We are committed to resolving privacy concerns promptly and transparently. All inquiries will be acknowledged within 48 hours and resolved within 30 days.