This Privacy Policy explains what personal data rt138 collects from its users, how that data is used, who it may be shared with, and what rights you hold over your information. We are committed to handling your data with transparency and care.
rt138 operates the online sports betting and casino platform accessible at https://rt138.cam, including any associated subdomains and mobile-optimised versions of the site. In the context of this Privacy Policy, "rt138", "we", "us", and "our" refer collectively to rt138 and its affiliated entities responsible for the collection and processing of personal data submitted through or generated by use of the platform.
rt138 is the data controller in respect of all personal data processed under this policy. Our platform is designed and operated for adult players primarily based in Indonesia, and our data practices reflect both our international licensing obligations and the privacy expectations of users in the Indonesian market. All deposit and withdrawal transactions are conducted in Indonesian Rupiah (IDR) through locally familiar payment channels including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
For all data-related enquiries, including requests to exercise your rights as described in Section 10, please contact us at the details provided in Section 15.
rt138 collects personal data that is necessary to provide a safe, compliant, and high-quality gambling service. The categories of data we collect are set out in the table below:
| Data Category | Specific Data Points | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP, passport, or equivalent), selfie photograph | Required |
| Contact Data | Email address, mobile phone number, residential address (city, province, postal code) | Required |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts and history in IDR | Required |
| Account Data | Username, hashed password, account creation timestamp, account status, deposit and withdrawal history, bonus claims, wagering history, self-exclusion or limit settings | Required |
| Technical Data | IP address, device type and identifier, browser type and version, operating system, screen resolution, session timestamps, cookies and local storage identifiers | Automatic |
| Behavioural Data | Pages visited, games played (including slot titles, live dealer sessions, togel (Indonesia's traditional numbers lottery) market participation), bet types and stakes placed, time spent per session, feature usage patterns | Automatic |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, any documents voluntarily submitted to the KYC team | If Applicable |
| Marketing Preferences | Opted-in promotional channel preferences (email, SMS, in-platform notifications), opted-out records, communication history | Optional |
The majority of personal data rt138 holds is provided directly by you during the course of your relationship with the platform. This includes data submitted when you:
When you visit the rt138 website or use the platform, certain technical and behavioural data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, session durations, and a record of all pages and games accessed during each visit. For full details of how cookies are used, see Section 7.
rt138 may receive supplementary data about you from trusted third-party sources where permitted by applicable law. This includes:
rt138 processes your personal data only for defined, transparent purposes. The table below maps each processing purpose to the relevant data categories and the legal basis under which it is carried out (see Section 5 for a full explanation of legal bases).
| Processing Purpose | Data Used |
|---|---|
| Account Creation & Management | Identity Data, Contact Data, Account Data |
| Age & Identity Verification (KYC) | Identity Data, Financial Data, Communications Data |
| Processing Deposits & Withdrawals in IDR | Financial Data, Identity Data, Account Data |
| Delivering Sports Betting, Casino, and Togel Services | Account Data, Behavioural Data, Technical Data |
| Fraud Detection & Prevention | Technical Data, Behavioural Data, Financial Data, Identity Data |
| Anti-Money Laundering (AML) Compliance | Financial Data, Identity Data, Transaction History |
| Customer Support & Dispute Resolution | Communications Data, Account Data, Financial Data |
| Responsible Gaming Monitoring & Intervention | Behavioural Data, Account Data |
| Promotional Communications (with consent) | Contact Data, Marketing Preferences, Behavioural Data |
| Platform Analytics & Product Improvement | Technical Data, Behavioural Data (aggregated/anonymised) |
| Legal Obligation Compliance | All categories as required by applicable law or regulatory authority |
rt138 processes personal data only where a valid legal basis exists. The following legal bases apply to the processing activities described in this policy:
rt138 does not share your personal data with third parties except in the following specific circumstances:
rt138 engages a limited number of carefully vetted third-party service providers who process data on our behalf as data processors. These include payment gateway operators for local Indonesian bank transfers and e-wallet transactions, game studio content delivery platforms (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe), identity verification and KYC service providers, fraud screening and AML compliance vendors, and customer support platform operators. All such processors are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to rt138.
rt138 may be required to disclose personal data to competent authorities — including international licensing regulators, financial intelligence units, tax authorities, or law enforcement agencies — where required by applicable law, court order, or lawful regulatory demand. rt138 will endeavour to notify affected users of such requests where legally permitted to do so.
In the event of a merger, acquisition, asset sale, or corporate restructuring involving rt138, your personal data may be transferred to the acquiring or succeeding entity as part of the transferred business assets. You will be notified by email of any such transfer and of any material changes to the applicable privacy policy before the transfer takes effect.
rt138 uses cookies and similar tracking technologies to operate the platform, remember your preferences, prevent fraud, and improve performance. A cookie is a small text file stored on your device by your browser. The following categories of cookies are used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Session Cookies | Maintain your logged-in session, enforce security tokens, and preserve your active bet slip state across page navigations. | Session (deleted on browser close) |
| Security Cookies | Detect and prevent CSRF (cross-site request forgery) attacks and suspicious session hijacking attempts. | Session |
| Preference Cookies | Remember your display preferences such as time zone (WIB/WITA), odds format, and language settings. | 12 months |
| Performance Cookies | Collect aggregated, anonymised data on page performance, load times, error rates, and feature usage to help rt138 identify and fix platform issues. | 24 months |
| Attribution Cookies | Identify the traffic source of your visit (organic search, referral) to help rt138 measure the effectiveness of its content and understand how users discover the platform. | 30 days |
Essential and security cookies are strictly necessary for the platform to function and cannot be disabled. Functional and analytics cookies may be managed through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block or delete cookies via the Privacy or Security section of their settings menu. Note that disabling functional cookies may affect your platform experience, including requiring you to re-enter preferences on each visit.
rt138 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, and licensing obligations. The retention periods below represent our standard practice; longer retention may apply where required by law or where data is relevant to an ongoing dispute, investigation, or legal proceeding.
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & KYC Documents | 5 years from account closure | AML regulatory compliance and potential audit requirements |
| Financial Transaction Records | 5 years from transaction date | Financial record-keeping, AML compliance, and dispute resolution |
| Account & Betting History | 3 years from account closure | Dispute resolution, responsible gaming monitoring, and fraud prevention |
| Communications & Support Records | 2 years from last interaction | Dispute resolution and service quality improvement |
| Technical / Log Data | 12 months from collection | Platform security monitoring and fraud investigation |
| Marketing Preferences | Until consent is withdrawn plus 12 months | Evidence of consent and opt-out compliance |
When data is no longer required and no legal obligation mandates its continued retention, rt138 will securely delete or anonymise it using industry-standard data destruction procedures.
rt138 implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our core security measures include:
As a data subject, you hold the following rights over your personal data held by rt138. These rights may be exercised at any time by submitting a written Data Subject Request (DSR) to support@rt138.cam with the subject line "Data Subject Request — [Your Account Username]".
Request a copy of all personal data rt138 holds about you, along with details of how it is used and with whom it is shared.
Request correction of inaccurate or incomplete personal data held in your rt138 account without undue delay.
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations.
Request that rt138 restrict processing of your data in specific circumstances, such as while a rectification request is being resolved.
Request a copy of your personal data in a structured, commonly used, machine-readable format that you may transfer to another service provider.
Object to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming purposes.
Withdraw any previously granted consent — particularly for marketing communications — at any time with immediate effect on future processing.
Lodge a complaint with the relevant data protection supervisory authority in your jurisdiction if you believe rt138 has not handled your data lawfully.
rt138 will respond to all valid Data Subject Requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further 30 days, in which case rt138 will notify you of the extension and the reasons for it before the initial 30-day deadline expires. There is no charge for submitting a DSR unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
As an internationally licensed platform serving users primarily in Indonesia, rt138 may transfer personal data to servers, processors, or affiliated entities located outside of Indonesia. Such transfers may occur in connection with cloud hosting infrastructure, KYC verification services, game content delivery networks, or customer support platform operations.
Whenever personal data is transferred outside Indonesia to a jurisdiction that does not provide an equivalent level of data protection, rt138 ensures that appropriate safeguards are in place, including:
By using the rt138 platform, you acknowledge and consent to the transfer of your personal data to the jurisdictions described above, subject to the safeguards outlined in this section.
rt138 is strictly an adults-only platform. Access to all gambling services — including sports betting on BRI Liga 1 and international leagues, casino games, and togel markets — is permitted only to users who are 21 years of age or older. This age threshold applies to all users accessing the platform from Indonesia.
rt138 does not knowingly collect personal data from individuals under the age of 21. All accounts are subject to mandatory age verification as part of the KYC process before any withdrawal can be processed. Where rt138 has reasonable grounds to believe that a registered account belongs to a person under 21, the account will be immediately suspended pending identity verification, and any funds held in the account will be frozen until the matter is resolved.
Parents and guardians are encouraged to use parental control tools and internet filtering software to prevent access to online gambling platforms by minors in their household. rt138 supports and endorses responsible family-level internet safety practices.
The rt138 platform integrates content and services from third-party providers in order to deliver a full-featured gaming experience. These providers include game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe, as well as payment processors and identity verification vendors. Each of these providers operates under its own privacy policy and data processing terms.
When you interact with third-party game content embedded within the rt138 platform, that provider's software may independently collect technical data such as your IP address, device type, and session metadata for the purposes of game functionality, fairness auditing, and fraud prevention. rt138 does not control the data practices of third-party game studios and encourages you to review the privacy policies of individual providers where relevant.
rt138's website does not contain outbound links to external third-party websites. Any reference to payment brands (BCA, BRI, OVO, DANA, GoPay, and others) or game studios is for informational purposes only and does not constitute a referral or endorsement of those entities' data practices.
rt138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory requirements. All updates will be published on this page with a revised "Last Updated" date at the top of the document.
Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — rt138 will provide advance notice via email to your registered address at least 14 days before the changes take effect. Your continued use of the rt138 platform after the effective date of any revised policy constitutes your acceptance of the updated terms.
We recommend bookmarking this page and checking it periodically. If you disagree with any material change to this policy, you have the right to close your account and request deletion of your data (subject to the retention periods described in Section 8) before the revised policy takes effect.
For all privacy-related enquiries, Data Subject Requests, or concerns about how rt138 handles your personal data, please use the contact details below. All privacy correspondence is handled by rt138's Data Protection team and will receive a substantive response within the timeframes stated in this policy.
| Contact Method | Details | Response Time |
|---|---|---|
| Email (Privacy) | support@rt138.cam — Subject: "Privacy Request — [Your Account Username]" | Within 30 days |
| Live Chat | Available 24/7 via the rt138 platform Live Chat widget. Agents can log privacy requests and escalate to the Data Protection team. | Acknowledgement within 1 hour; resolution within 30 days |
| Formal DSR | Submit via email with subject line "Data Subject Request — [Account Username]". Include a copy of your government-issued ID for identity verification purposes. | Within 30 days (extensible to 60 days for complex requests) |
Beyond the legal text, these are the concrete measures and principles that define how rt138 treats your personal data every day.
Every byte of data exchanged between you and rt138 is protected by TLS 1.3 with 256-bit SSL encryption — the same standard used by global financial institutions. Your login, payment details, and personal information are never transmitted in plain text.
rt138 has never sold, rented, or traded player data to third-party advertisers or data brokers, and we never will. Your personal information exists solely to power your gaming experience, not to generate advertising revenue for anyone.
rt138 collects only the data strictly necessary to operate your account, process IDR transactions via local Indonesian banks and e-wallets, and meet regulatory obligations. We do not collect data speculatively or hold it beyond defined retention periods.
Every Data Subject Request — whether for access, rectification, erasure, or portability — receives a substantive written response within 30 calendar days. No bureaucratic delays, no ignored requests. Your data rights are treated as operational commitments.
All accounts undergo mandatory KYC verification confirming that the holder is 21 years of age or older before any withdrawal is processed. Any account suspected of belonging to a minor is immediately suspended and referred to our compliance team.
The rt138 platform undergoes regular independent penetration testing and security assessments. Identified vulnerabilities are remediated on a priority basis. Our Provably Fair gaming infrastructure is audited by third-party certification bodies.
Now that you've reviewed how rt138 handles your personal data, explore our other platform documentation or head back to the homepage.