ibc138 is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, how long we keep it, and what rights you have as an Indonesian player on our platform.
This Privacy Policy ("Policy") applies to all personal data collected and processed by ibc138 in connection with your use of the platform at ibc138.cam and all associated services. By registering an account or otherwise using ibc138, you acknowledge that you have read, understood, and agree to the collection and processing of your personal data as described in this Policy. If you do not agree, you must not use ibc138.
Throughout this Privacy Policy, the following terms carry the meanings defined below:
ibc138 acts as the Data Controller for all Personal Data collected through the platform. As Data Controller, ibc138 is responsible for determining why and how your Personal Data is processed. All data processing activities carried out by ibc138 are governed by this Policy.
For all privacy-related inquiries, requests to exercise data rights, or complaints, the designated privacy contact is reachable at the email address stated in Section 15 of this Policy. ibc138 commits to acknowledging all privacy-related correspondence within 5 business days and providing a substantive response within 30 calendar days.
ibc138 processes Personal Data in compliance with the principles of lawfulness, fairness, and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability, consistent with internationally recognised data protection standards.
ibc138 collects the following categories of Personal Data in the course of providing its services:
ibc138 collects Personal Data through the following channels and mechanisms:
| Collection Method | Data Categories Collected |
|---|---|
| Account registration form | Identity, contact, and date-of-birth data provided directly by the Player |
| KYC document upload | Identity document scans, selfie images, and source-of-funds documentation |
| Deposit & withdrawal processing | Bank account details, e-wallet account details, crypto wallet addresses, transaction records |
| Platform usage (automatic) | IP address, device fingerprint, session logs, geolocation, browser/OS data |
| Betting & gaming activity (automatic) | Wager history, game session records, bonus usage, responsible gaming tool interactions |
| Customer support interactions | Chat transcripts, email correspondence, WhatsApp records, complaint documentation |
| Cookies & tracking technologies | Session identifiers, preference settings, analytics data, fraud-detection signals |
| Third-party KYC & AML providers | Identity verification results, PEP/sanctions screening outcomes, fraud risk scores |
ibc138 does not purchase Personal Data from data brokers or third-party marketing lists. All Personal Data we hold has been provided directly by you, generated through your use of the platform, or obtained from regulated third-party service providers acting as our Data Processors (e.g., KYC verification partners, payment gateways).
ibc138 processes your Personal Data for the following clearly defined purposes:
To create and administer your ibc138 account, verify your identity, authenticate your login sessions, manage your account balance, and communicate important account notifications including security alerts and policy updates.
To verify that you meet the minimum age requirement of 21 years and to comply with our mandatory KYC obligations. Age and identity verification is a legal and regulatory requirement that cannot be waived. ibc138 processes identity document data solely for verification purposes and does not retain document images beyond the minimum period required by applicable AML regulations.
To facilitate deposits via Indonesian bank transfers (BCA, BRI, BNI, Mandiri, and others), e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), cards (Visa, Mastercard), and cryptocurrency (USDT), and to process withdrawal requests to your verified payment method. Financial data is processed under strict security controls and is never stored in plain text.
To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other financial crimes. This includes automated monitoring of transaction patterns, device fingerprinting, IP analysis, and screening against international PEP (Politically Exposed Persons) and sanctions lists. ibc138 is legally obligated to report suspicious activity to relevant authorities where required by its licensing regulations.
To monitor gaming behaviour patterns that may indicate problematic gambling, to deliver responsible gaming interventions where appropriate (e.g., reality-check popups, voluntary limit confirmations), and to process and enforce self-exclusion requests submitted by Players.
To respond to your queries, complaints, and disputes through our 24/7 support channels (live chat, WhatsApp, and email). Support records are retained to ensure continuity of service and to maintain a complete audit trail for dispute resolution.
To analyse aggregated and anonymised usage data to improve platform performance, user experience, game selection, and marketing relevance. Analytics processing uses pseudonymised or aggregated data wherever possible and does not involve profiling for purposes unrelated to the platform's core gambling services.
To comply with applicable laws, regulations, and court orders, including international AML directives, licensing authority requirements, and any lawful requests from competent governmental or law enforcement authorities. ibc138 will only disclose Personal Data to authorities when legally compelled to do so.
ibc138 relies on the following legal bases for processing Personal Data, consistent with internationally recognised data protection principles:
ibc138 does not sell, rent, or commercially exploit your Personal Data to third parties. We share Personal Data only in the following limited and controlled circumstances:
ibc138 engages trusted third-party Data Processors who handle Personal Data strictly on our behalf and under binding data processing agreements. These include:
ibc138 integrates with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers receive limited session data (e.g., player session tokens, stake amounts) necessary to deliver game functionality. Game providers are contractually prohibited from using this data for any purpose other than game delivery and technical support.
ibc138 may disclose Personal Data to governmental bodies, law enforcement agencies, or ibc138's licensing authority where required by law, court order, or regulatory instruction. ibc138 will endeavour to notify affected Players of any such disclosure where legally permitted to do so.
In the event of a merger, acquisition, or sale of ibc138's business assets, Personal Data held at the time of the transaction may be transferred to the acquiring entity as part of that business transfer. Affected Players will be notified via email prior to any such transfer, with the option to close their account if they do not wish their data to be transferred.
ibc138 operates internationally and your Personal Data may be stored on servers located outside Indonesia. Where Personal Data is transferred to countries that do not provide a level of data protection equivalent to international standards, ibc138 ensures appropriate safeguards are in place, including:
By using ibc138 from Indonesia or any other jurisdiction, you acknowledge that your Personal Data may be processed in countries outside your country of residence, subject to these safeguards.
ibc138 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply as standard:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years after closure | AML regulatory requirement; dispute resolution |
| KYC documents | 5 years after account closure | International AML compliance standard |
| Transaction & financial records | 7 years after each transaction | Financial record-keeping obligations |
| Betting & gaming history | 5 years after account closure | Dispute resolution; regulatory audit trail |
| Customer support records | 3 years after last interaction | Complaint history; dispute resolution |
| Technical & device logs | 12 months on a rolling basis | Fraud detection; security monitoring |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of lawful basis for marketing |
| Self-exclusion records | Minimum 7 years after exclusion period ends | Responsible gaming compliance; re-registration prevention |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where anonymisation is used, the resulting data may be retained indefinitely for statistical and analytical purposes as it no longer constitutes Personal Data.
Cookies are small text files stored on your device when you access ibc138. They enable the platform to recognise your device across visits, maintain your logged-in session, remember your preferences, and collect analytics data to improve the platform experience.
You may manage non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary or fraud detection cookies may prevent you from using ibc138 fully or at all. ibc138 does not currently support a granular cookie preference centre — cookie consent for non-essential cookies is managed via your browser-level settings.
ibc138 does not use third-party advertising or retargeting cookies. We do not participate in cross-site behavioural advertising networks. The cookies deployed by ibc138 are used exclusively for platform functionality, security, and first-party analytics.
ibc138 employs a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. Our security framework includes:
While ibc138 implements robust security controls, no internet-based system can guarantee absolute security. You are encouraged to use a strong, unique password for your ibc138 account and to enable two-factor authentication where available.
As a Player on ibc138, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered account email address for verification purposes.
Send your data rights requests or privacy concerns to:
[email protected]
Response within 30 calendar days.
You have the right to request a copy of all Personal Data ibc138 holds about you. We will provide this in a structured, machine-readable format within 30 days of a verified request.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. Identity and KYC data corrections may require re-submission of supporting documents.
You may request deletion of your Personal Data where it is no longer necessary for the purpose collected. This right is subject to our legal retention obligations — AML and KYC data cannot be deleted during mandatory retention periods.
You may request that ibc138 restrict processing of your Personal Data to storage only (pausing active use) while a dispute or rectification request is under review.
Where processing is based on your consent or contract performance, you may request your Personal Data in a portable format (JSON or CSV) for transfer to another service provider.
You may object to processing carried out on the basis of ibc138's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests or rights.
ibc138 does not knowingly collect Personal Data from individuals under the age of 21. Our platform is strictly restricted to adults aged 21 and over, and we enforce this through mandatory KYC age verification at the point of withdrawal. If ibc138 becomes aware that Personal Data has been collected from a person under the age of 21, that account will be immediately suspended, all funds forfeited, and all Personal Data associated with the account deleted as soon as legally permissible.
If you believe a minor has created an account on ibc138, please contact us immediately at [email protected] so that we can take prompt corrective action.
ibc138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. Material changes — defined as changes that significantly affect your rights or how your Personal Data is used — will be communicated to registered Players by email at least 14 calendar days before the change takes effect.
Minor updates (such as clarifications of existing practices, corrections to typographical errors, or improvements to readability without substantive change) may be made without prior notification. The "Last Updated" date at the top of this page always reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how ibc138 protects your data.
Your continued use of ibc138 following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must close your account and withdraw any remaining balance before the effective date.
For any questions, concerns, or requests relating to this Privacy Policy or ibc138's handling of your Personal Data, please contact our privacy team using the details below. All correspondence regarding data privacy must include your registered account email address and a clear description of your request or concern to enable us to respond accurately and efficiently.
If you are not satisfied with ibc138's handling of your privacy complaint, you have the right to escalate your complaint to the independent dispute resolution body designated by ibc138's licensing authority, or to seek independent legal advice regarding your data protection rights under the laws applicable in your jurisdiction.
ibc138 is committed to resolving all privacy complaints fairly and transparently. We take every data rights request seriously and will never penalise a Player for exercising their legitimate privacy rights under this Policy.
Our data protection commitments go beyond legal compliance — we build privacy into every layer of the ibc138 platform from the ground up.
All data transmitted between your device and ibc138 servers is protected by TLS 1.3. Sensitive data stored at rest — including financial account details and identity document references — is encrypted with AES-256.
ibc138 never sells, rents, or shares your Personal Data with third-party marketing companies or data brokers. Your information is used exclusively to operate and improve your ibc138 experience.
Role-based access controls ensure that only authorised ibc138 personnel can access your Personal Data, and only to the extent required by their specific operational role. All access is logged and audited.
ibc138 retains your Personal Data only for as long as legally required or operationally necessary. Once the applicable retention period expires, data is securely deleted or irreversibly anonymised.
In the event of a security incident affecting your Personal Data, ibc138 commits to notifying affected Players within 72 hours of becoming aware of the breach — well within internationally recognised response standards.
Access, rectify, export, or request deletion of your data at any time. ibc138 responds to all verified data rights requests within 30 calendar days — no unnecessary obstacles, no fee for standard requests.
Our support team is available 24/7 to address any privacy concerns. You can also review our full Terms & Conditions or visit our FAQ for quick answers about how ibc138 handles your account and data.