Privacy Policy

1. Introduction

mas138 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website at mas138.cam, register an account, or use our online gaming services including sports betting (such as bandar bola or football bookmaker services), live casino, and slot games.

By accessing or using mas138 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this policy, please do not use our platform.

This Privacy Policy should be read in conjunction with our Terms and Conditions and is incorporated into them by reference. This policy applies to all users and visitors to the mas138 platform, including residents of Indonesia and other jurisdictions where our services are legally accessible.

2. Information We Collect

mas138 collects various types of information to provide, maintain, and improve our services, comply with legal obligations, and enhance your gaming experience. The categories of information we collect include:

2.1 Personal Identification Information

When you register an account with mas138, we collect the following personal details:

• Full Name: As it appears on your government-issued identification document (KTP, passport, or driver's license).
• Date of Birth: To verify you are at least 21 years of age, as required by Indonesian law and our Terms and Conditions.
• Gender: For account personalization and responsible gaming monitoring.
• Residential Address: Including street address, city, province, and postal code in Indonesia.
• Email Address: For account verification, communication, and important platform updates.
• Mobile Phone Number: For account security, two-factor authentication (2FA), and customer support communication.
• Username and Password: Your chosen login credentials for accessing your mas138 account.

2.2 Financial and Payment Information

To process deposits and withdrawals, we collect payment-related information including:

• Bank Account Details: Bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), account holder name, and account number for Indonesian Rupiah (IDR) transactions.
• E-Wallet Information: Account details for OVO, DANA, GoPay, ShopeePay, or LinkAja if used for deposits or withdrawals.
• Transaction History: Records of all deposits, withdrawals, bets, wins, losses, and bonus activity for accounting, tax reporting, and dispute resolution purposes.
• Payment Method Verification Documents: Bank statements or screenshots confirming ownership of the payment method used.

Please note: mas138 does not store full credit card numbers or CVV codes. Card payment processing (if available) is handled by certified third-party payment processors compliant with PCI DSS (Payment Card Industry Data Security Standard).

2.3 Identity Verification Documents (KYC)

As part of our Know Your Customer (KYC) and anti-money laundering (AML) compliance, we collect copies of the following documents:

• Government-Issued Photo ID: KTP (Kartu Tanda Penduduk), Indonesian passport, or driver's license showing your photo, full name, date of birth, and ID number.
• Proof of Address: Recent utility bill (electricity, water, internet), bank statement, or government correspondence dated within the last 3 months.
• Selfie Verification Photo: A photograph of you holding your ID document next to your face for identity confirmation.

These documents are encrypted and stored securely. Access is restricted to authorized compliance and security personnel only.

2.4 Gaming Activity and Usage Data

To improve our services, personalize your experience, and monitor for responsible gaming concerns, we automatically collect:

• Gameplay Records: All bets placed, games played, bet amounts, outcomes, timestamps, and winnings across sports betting (BRI Liga 1, EPL, La Liga, Champions League), live casino (Evolution Gaming, Pragmatic Play Live), and slot games (Pragmatic Play, PG Soft, Habanero).
• Session Information: Login/logout times, session duration, pages visited, and features used.
• Device Information: Device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution.
• IP Address and Location Data: Your Internet Protocol (IP) address and approximate geographic location (city, region) derived from it, used for fraud prevention and compliance with geographic restrictions.
• Cookies and Tracking Technologies: See Section 7 below for details on our cookie usage.

2.5 Communications and Support Interactions

When you contact mas138 customer support via live chat, email, WhatsApp, or in-app messaging, we record:

• The content of your messages, questions, and complaints.
• Support agent responses and resolution notes.
• Timestamps and communication channel used.

These records help us improve service quality, train support staff, and resolve disputes. Live chat transcripts may be retained for quality assurance and compliance purposes.

3. How We Use Your Information

mas138 uses the collected information for the following legitimate business purposes:

3.1 Account Management and Service Provision

• Creating, maintaining, and authenticating your mas138 account.
• Processing deposits, withdrawals, and bet placements.
• Verifying your identity, age (21+), and eligibility to use our services.
• Delivering sports betting odds, live casino streams, and slot game content.
• Calculating and crediting winnings, bonuses, and promotional offers.

3.2 Legal and Regulatory Compliance

• Complying with KYC (Know Your Customer) and AML (Anti-Money Laundering) regulations.
• Verifying you are not on any self-exclusion, fraud, or restricted lists.
• Responding to legal requests, court orders, or investigations by law enforcement or regulatory authorities.
• Maintaining records for tax reporting and financial auditing purposes.
• Preventing fraud, money laundering, underage gambling, and other illegal activities.

3.3 Security and Fraud Prevention

• Monitoring account activity for suspicious patterns, collusion, bonus abuse, or unauthorized access.
• Detecting and preventing technical attacks (DDoS, hacking attempts, SQL injection, etc.).
• Verifying that deposits and withdrawals originate from accounts in your own name (no third-party payments).
• Investigating disputes, chargebacks, or claims of unauthorized transactions.

3.4 Customer Support and Communication

• Responding to your inquiries via live chat, email, WhatsApp, or in-app messaging.
• Sending transactional emails (account verification, deposit confirmations, withdrawal approvals, KYC status updates).
• Notifying you of important platform changes, maintenance schedules, or security alerts.
• Providing multilingual support in Indonesian and English.

3.5 Marketing and Promotions (With Consent)

If you opt in to marketing communications, we may use your email or phone number to send:

• Promotional offers, bonuses, cashback, and VIP program benefits.
• Announcements about new games, features, or sports events (BRI Liga 1 finals, Champions League matches, World Cup betting markets).
• Personalized recommendations based on your gaming preferences.

You can opt out at any time by clicking the "unsubscribe" link in any marketing email or adjusting your preferences in your account settings. Transactional and account-related communications cannot be opted out of, as they are essential to our service.

3.6 Platform Improvement and Analytics

• Analyzing user behavior to improve website design, navigation, and game selection.
• Conducting A/B testing on features, promotions, and user interfaces.
• Generating aggregated, anonymized statistics for internal business intelligence (e.g., "30% of players prefer EPL over La Liga betting").
• Identifying and fixing technical bugs, performance issues, or compatibility problems.

3.7 Responsible Gaming Monitoring

• Detecting patterns of potentially problematic gambling behavior (excessive losses, long session times, frequent limit increases).
• Enforcing deposit limits, loss limits, and self-exclusion requests you have set.
• Providing reality check notifications and time-out reminders.
• Contacting players who may benefit from responsible gaming resources or support.

4. How We Share Your Information

mas138 does not sell your personal information to third parties for marketing purposes. However, we may share your data in the following limited circumstances:

4.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist us in operating the mas138 platform:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay), and payment gateways that process deposits and withdrawals.
• Game Providers: Evolution Gaming, Pragmatic Play, PG Soft, Habanero, Microgaming, NetEnt, and other licensed game studios that deliver live casino and slot content.
• KYC and Fraud Prevention Services: Identity verification services that confirm document authenticity and screen against fraud databases.
• Cloud Hosting Providers: Secure server infrastructure providers that host our platform and databases.
• Analytics Services: Tools like Google Analytics (with IP anonymization) that help us understand traffic patterns and user behavior in aggregated, non-identifiable form.
• Customer Support Tools: Live chat software and ticketing systems used by our support team.

All third-party providers are contractually bound to strict data protection obligations and may only use your information for the specific services they provide to mas138.

4.2 Legal and Regulatory Authorities

We may disclose your personal information if required by law or in response to valid legal requests, including:

• Court orders, subpoenas, or warrants issued by competent authorities.
• Requests from Indonesian law enforcement agencies investigating suspected illegal activity.
• Regulatory audits by gaming licensing authorities.
• Legal proceedings where mas138 is a party (e.g., disputes, fraud investigations).
• Cooperation with financial crime units on money laundering or terrorism financing investigations.

4.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity or successor company. You will be notified via email and/or prominent notice on our website of any change in ownership or control of your personal data.

4.4 With Your Consent

We may share your information with third parties if you give us explicit consent to do so (e.g., opting into a co-branded promotion with a partner brand).

5. Data Retention

mas138 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal, regulatory, and business requirements:

• Active Accounts: Personal and transaction data is retained for the duration of your active account plus any applicable legal retention periods.
• Closed Accounts: After voluntary account closure, we retain core identity, transaction, and KYC records for a minimum of 5 years to comply with anti-money laundering regulations, tax laws, and potential dispute resolution.
• KYC Documents: Identity verification documents (ID scans, proof of address) are retained for at least 5 years after the last transaction or account closure, as required by regulatory authorities.
• Transaction Records: Financial records (deposits, withdrawals, bets, wins) are retained for 7 years for tax and accounting purposes.
• Support Communications: Live chat transcripts and email correspondence are typically retained for 2 years for quality assurance and dispute resolution.
• Marketing Data: If you unsubscribe from marketing communications, your email is moved to a suppression list (retained indefinitely to honor your opt-out preference) but no further marketing is sent.

After the retention period expires, personal data is securely deleted or anonymized to prevent identification. Anonymized or aggregated data (stripped of personally identifiable details) may be retained indefinitely for statistical analysis and business intelligence.

6. Data Security Measures

mas138 implements industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology. Look for the padlock icon in your browser address bar.
• Secure Data Centers: Personal information is stored on secure servers in data centers with physical security (24/7 surveillance, access control, fire suppression) and environmental controls.
• Access Controls: Only authorized personnel (compliance officers, senior management, support supervisors) have access to personal data, and access is logged and audited.
• Password Protection: Your account password is hashed using strong cryptographic algorithms (bcrypt or Argon2) and is never stored in plain text.
• Two-Factor Authentication (2FA): Optional 2FA via SMS or authenticator apps adds an extra layer of security to your account.
• Regular Security Audits: Our platform undergoes periodic penetration testing and vulnerability assessments by independent security firms.
• Fraud Detection Systems: Automated systems monitor for suspicious login attempts, betting patterns, and account takeover attempts.
• Employee Training: All mas138 staff undergo data protection and security awareness training.

While we strive to protect your data, no internet transmission or electronic storage method is 100% secure. You are responsible for maintaining the confidentiality of your username and password. Do not share your login credentials with anyone.

7. Cookies and Tracking Technologies

mas138 uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content. A cookie is a small text file stored on your device by your web browser.

7.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for login, account authentication, and core platform functionality. Cannot be disabled.	Session (deleted when you close your browser) or up to 30 days
Preference Cookies	Remember your language preference, time zone (WIB), and display settings.	Up to 1 year
Analytics Cookies	Track page views, session duration, and traffic sources (Google Analytics with IP anonymization).	Up to 2 years
Marketing Cookies	Track ad campaign performance and display personalized promotions. Only set with your consent.	Up to 1 year

7.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when a site attempts to set one. Note that disabling essential cookies may prevent you from accessing certain features of mas138 (e.g., staying logged in, processing deposits).

To manage cookies in popular browsers:

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
• Safari (iOS/macOS): Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Cookies and site permissions

8. Your Privacy Rights

As a mas138 user, you have the following rights regarding your personal data:

8.1 Right to Access

You can request a copy of all personal information we hold about you. This includes account details, transaction history, KYC documents, and gaming activity records. Contact [email protected] to request a data export in machine-readable format (typically CSV or JSON).

8.2 Right to Rectification

If any personal information we hold is inaccurate or incomplete, you can update it via your account settings or by contacting customer support. Changes to critical identity information (name, date of birth) may require re-verification.

8.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data, subject to legal retention requirements. We must retain certain records (KYC documents, transaction history) for 5-7 years to comply with anti-money laundering laws and tax regulations. After this period, data is permanently deleted.

8.4 Right to Restrict Processing

You can request that we limit how we use your data (e.g., keep records but not use them for marketing). This may affect your ability to use certain platform features.

8.5 Right to Data Portability

You can receive your personal data in a structured, commonly used, machine-readable format and transmit it to another service provider.

8.6 Right to Object

You can object to processing of your personal data for marketing purposes at any time. Opt-out links are provided in all promotional emails.

8.7 Right to Withdraw Consent

If processing is based on your consent (e.g., marketing communications), you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at:

• Email: [email protected] (subject line: "Privacy Rights Request")
• Live Chat: Available 24/7 on the mas138 website
• WhatsApp: +62 812-3456-7890

We will respond to your request within 30 days. Identity verification may be required before we can fulfill certain requests.

9. Children's Privacy

mas138 services are strictly for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21. Our KYC verification process requires government-issued ID to confirm age eligibility.

If we discover that we have inadvertently collected information from someone under 21, we will immediately delete that data and permanently close the account. If you believe a minor has accessed mas138, please contact us immediately at [email protected].

10. International Data Transfers

mas138 primarily serves Indonesian players, and your data is stored on secure servers within or near Indonesia to minimize latency and ensure fast platform performance. However, some third-party service providers (payment processors, game studios, cloud hosting) may process data in other jurisdictions.

When personal data is transferred outside Indonesia, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by data protection authorities.
• Transfers to countries recognized as providing adequate data protection standards.
• Binding corporate rules for multinational service providers.

All international data transfers comply with applicable Indonesian data protection laws and international best practices.

11. Third-Party Links

The mas138 website may contain links to third-party websites, services, or payment processors (e.g., bank websites for deposits). We are not responsible for the privacy practices of these external sites. When you leave mas138.cam, we encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

mas138 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated via:

• Email notification to your registered email address.
• Prominent notice on the mas138 homepage or login screen.
• Updated "Last Updated" date at the top of this policy.

Continued use of the platform after changes are posted constitutes acceptance of the updated Privacy Policy. We recommend reviewing this page periodically to stay informed of our data practices.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or how mas138 handles your personal information, please contact our Data Protection Officer:

• Email: [email protected] (subject line: "Privacy Inquiry")
• Live Chat: Available 24/7 via the mas138 website
• WhatsApp: +62 812-3456-7890 (available 24/7)

Our Indonesian-speaking support team is available around the clock to assist with privacy-related questions, data access requests, account concerns, and responsible gaming inquiries.