Your privacy matters to kuy138. This Policy explains precisely what personal data we collect when you use our platform, why we collect it, how we store and protect it, and the rights you hold over that data — including the right to access, correct, and request deletion of your information.
We believe transparency is the foundation of trust. Here is a plain-language summary of our core privacy commitments before you read the full legal text below.
All personal data transmitted between your device and kuy138 servers is protected by 256-bit SSL/TLS encryption. Stored data is encrypted at rest using industry-standard AES-256 protocols. Your payment details — BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay — are never stored in plain text on our systems.
kuy138 does not sell, rent, lease, or trade your personal information to third-party advertisers or data brokers under any circumstances. Data shared with our service providers is governed by strict contractual data-processing agreements that prohibit secondary use of your information.
You have the right to access your data, correct inaccuracies, request deletion, object to certain processing, and withdraw consent at any time. kuy138 responds to all verified data subject requests within 30 calendar days of receipt, in line with internationally recognised privacy standards.
We operate on a data minimisation principle — we collect only the information genuinely necessary to provide you with a secure, personalised betting experience on kuy138, to comply with our Know Your Customer (KYC) obligations, and to prevent fraud and money laundering.
kuy138 retains personal data only for as long as necessary to fulfil the purposes for which it was collected. Account data is held for a minimum of five years post-account closure to satisfy AML regulatory requirements, after which it is securely deleted or anonymised.
kuy138 uses cookies and similar tracking technologies solely to keep you logged in, remember your preferences, and analyse aggregate Platform usage. We do not deploy third-party advertising cookies. You can manage cookie preferences through your browser settings at any time.
A simplified overview of how personal data moves from collection to secure storage — with your rights available at every stage.
Name, email, date of birth, address collected at sign-up
Identity docs verified via our secure KYC partner
Data stored AES-256 encrypted on secured servers
Data used only for stated purposes; never sold
As a kuy138 member, you have meaningful control over your personal data. The following rights are available to all registered Users.
Request a copy of all personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request deletion of your data, subject to legal retention requirements.
Limit how we use your data while a dispute is being resolved.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
Withdraw marketing consent at any time without penalty.
Request human review of any automated decision that materially affects you.
To exercise any of the above rights, contact us at [email protected] (plain text — not a clickable link). We will respond within 30 calendar days.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
2.1 This Privacy Policy describes how kuy138 collects, uses, stores, shares, and protects Personal Data obtained from Users of the Platform. It also explains the rights available to you as a Data Subject and how to exercise those rights.
2.2 This Policy applies to all Personal Data processed by kuy138 in connection with your use of the Platform, regardless of whether you access it from Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, or any other location in Indonesia or elsewhere.
2.3 This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference and together form the complete framework governing your relationship with kuy138.
2.4 By registering an Account, making a deposit, or otherwise using the Platform, you acknowledge that you have read this Privacy Policy and understand how your Personal Data will be processed. If you do not accept the terms of this Policy, you must discontinue your use of the Platform immediately.
When you open a kuy138 Account, we collect the information you provide directly, including:
To comply with anti-money laundering (AML) obligations and verify your age and identity, we collect:
When you deposit or withdraw funds, we record:
We maintain a full record of your activity on the Platform, including:
Automatically collected when you access the Platform:
If you contact kuy138 support via live chat or email, we retain:
kuy138 collects Personal Data through the following channels:
| Collection Channel | Data Collected |
|---|---|
| Account Registration Form | Name, email, date of birth, address, password |
| KYC Verification Portal | ID documents, selfie images, address proof |
| Deposit & Withdrawal Flows | Payment method details, transaction records |
| Platform Usage (Automatic) | IP address, device data, betting history, session logs |
| Customer Support Interactions | Chat transcripts, email correspondence, ticket records |
| Cookies & Tracking Technologies | Session tokens, preference cookies, analytics data |
| Third-Party KYC / Payment Providers | Verified identity status, fraud risk signals, payment status |
5.1 kuy138 processes your Personal Data only where we have a valid legal basis to do so. The table below sets out each processing purpose and the corresponding legal basis:
| Processing Purpose | Legal Basis |
|---|---|
| Creating and managing your Account | Contract performance |
| Processing deposits and withdrawals | Contract performance |
| Identity verification (KYC) and age checks | Legal obligation (AML / responsible gaming regulations) |
| Fraud prevention and security monitoring | Legitimate interests |
| Responsible gaming tool management | Legal obligation / legitimate interests |
| Customer support and dispute resolution | Contract performance / legitimate interests |
| Sending transactional notifications | Contract performance |
| Sending promotional communications | Consent (opt-in required) |
| Platform analytics and improvement | Legitimate interests |
| Regulatory reporting and record-keeping | Legal obligation |
5.2 Where processing is based on your consent — such as receiving promotional emails or SMS notifications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawing marketing consent does not affect your ability to use the Platform.
6.1 kuy138 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes under any circumstances.
6.2 We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to binding data protection obligations:
6.3 All third-party Data Processors engaged by kuy138 are required to sign data processing agreements that prohibit them from using your Personal Data for any purpose other than the specific service they provide to kuy138, and that require them to implement security standards at least as protective as those employed by kuy138 itself.
7.1 kuy138 operates globally and your Personal Data may be transferred to, stored on, and processed on servers located outside of Indonesia. In particular, our platform infrastructure and some of our Data Processors are based in jurisdictions that may not have data protection laws equivalent to those in Indonesia.
7.2 Where Personal Data is transferred internationally, kuy138 ensures that appropriate safeguards are in place, which may include:
7.3 By using the Platform, you acknowledge and accept that your Personal Data may be transferred internationally as described in this Section. If you have questions about the specific safeguards applicable to a particular transfer, please contact our Data Protection Officer at the address in Section 16.
8.1 kuy138 retains Personal Data for as long as is necessary to fulfil the purposes described in this Privacy Policy, and no longer. The following retention periods apply as a general guide:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML / regulatory compliance |
| KYC documents | Duration of account + 5 years post-closure | AML legal obligation |
| Financial transaction records | 7 years from transaction date | Financial regulatory obligation |
| Betting and gaming history | Duration of account + 2 years post-closure | Dispute resolution / responsible gaming |
| Customer support records | 3 years from last interaction | Dispute resolution / quality assurance |
| Marketing consent records | Until consent withdrawn + 1 year | Proof of consent / legal compliance |
| Technical / device / log data | 13 months from collection | Security monitoring / analytics |
8.2 Upon expiry of the applicable retention period, Personal Data is either securely deleted using methods that render it unrecoverable, or anonymised so that it can no longer be linked to any identifiable individual.
9.1 kuy138 uses cookies and similar technologies (such as pixel tags and local storage) to provide, secure, and improve the Platform. The following types of cookies are used:
9.2 You can manage cookie settings through your browser's preferences panel. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including logging into your Account.
9.3 kuy138 does not deploy third-party advertising cookies or participate in behavioural advertising networks. No cookie data collected by kuy138 is shared with advertisers.
10.1 The kuy138 Platform is strictly for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21.
10.2 If kuy138 discovers or is notified that it has inadvertently collected Personal Data from a person under the age of 21, we will immediately close the associated Account, forfeit any balances held therein in accordance with our Terms & Conditions, and permanently delete all Personal Data associated with that Account within 30 days of discovery.
10.3 If you are a parent or guardian and believe that your child has registered an Account on kuy138, please contact us immediately at the contact details provided in Section 16 so that we can take prompt action.
11.1 kuy138 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
11.2 While kuy138 employs industry-standard security measures, no online platform can guarantee absolute security. You play an important role in protecting your Account by using a strong, unique password, enabling 2FA, and keeping your login credentials confidential.
12.1 As a Data Subject, you have the following rights in respect of your Personal Data held by kuy138. These rights may be subject to certain limitations where legal obligations require us to retain or continue processing data.
12.2 To exercise any of the above rights, please submit a written request to our Data Protection Officer using the contact details in Section 16. We will respond within 30 calendar days of receiving a valid, verified request. We may ask you to verify your identity before processing a data subject request to prevent unauthorised disclosure.
13.1 kuy138 may send you the following types of communications:
13.2 You can opt out of promotional communications at any time by:
13.3 Opting out of promotional communications will not affect your receipt of transactional notifications, which are essential to the management of your Account.
14.1 The Platform may contain references to third-party game studios and service providers whose products are accessible through kuy138. These include studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. While kuy138 has contractual data protection arrangements with these studios, their own privacy practices are governed by their respective privacy policies.
14.2 kuy138 is not responsible for the privacy practices of any third-party service whose content appears within the Platform under a licensing arrangement. When you interact with a live casino table powered by Evolution Gaming, for example, that studio's servers may receive your session identifier and in-game actions in order to deliver the gaming experience.
14.3 The Platform does not contain links to external third-party websites for commercial or advertising purposes. All navigation on the Platform remains within the kuy138 domain.
15.1 kuy138 reserves the right to update or amend this Privacy Policy at any time. The effective date at the top of this page reflects when the current version entered into force.
15.2 Where amendments are material — meaning they significantly affect your rights or how your Personal Data is processed — kuy138 will notify registered Users via email to their registered address at least seven (7) calendar days before the changes take effect, and will display a prominent notice on the Platform.
15.3 Non-material amendments (such as typographical corrections or clarifications that do not alter the substance of the Policy) may take effect immediately upon publication without advance notice.
15.4 Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you must cease using the Platform and may request Account closure through our support team.
16.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which kuy138 processes your Personal Data, please contact our Data Protection Officer (DPO) through the following channel:
16.2 If you are not satisfied with kuy138's response to a privacy concern, you have the right to escalate your complaint to the relevant independent data protection or supervisory authority in your jurisdiction. Our DPO will provide guidance on the appropriate escalation channel upon request.
16.3 For responsible gaming concerns that intersect with data protection — such as requesting deletion of your Account as part of a self-exclusion decision — please refer to our Responsible Gaming page for priority escalation guidance, or raise your request directly with our DPO using the contact details above.
Our support team and Data Protection Officer are available around the clock to address any privacy concerns. You can also explore our FAQ for quick answers, review our Terms & Conditions, or visit our Responsible Gaming page.