Last Updated: January 2026 | Effective Date: January 1, 2026
1. Introduction and Commitment
At ril138, we recognize that your privacy and the security of your personal information are of paramount importance. This Privacy Policy explains in detail how we collect, use, store, share, and protect your personal data when you access and use our online gaming platform. By registering an account or using ril138 services, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy. We are committed to maintaining the highest standards of data protection and transparency in accordance with applicable privacy laws and international best practices governing online gaming platforms serving Indonesian players.
ril138 operates with the principle of data minimization—we collect only the information necessary to provide, secure, and improve our services. We do not sell, rent, or trade your personal information to third parties for marketing purposes. All data processing activities are conducted with appropriate technical and organizational security measures to prevent unauthorized access, disclosure, alteration, or destruction. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your overall use of the ril138 platform.
2. Information We Collect
2.1 Information You Provide Directly
When you register for a ril138 account, you voluntarily provide personal information including:
- Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (Indonesian KTP number or passport number).
- Contact Information: Email address, mobile phone number, residential address (street address, city, province, postal code).
- Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery.
- Payment Information: Bank account details (bank name, account number, account holder name), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay account names and phone numbers), and transaction history.
- Verification Documents: Copies of government-issued photo ID (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs for facial verification, and proof of payment method ownership.
- Communication Data: Contents of emails, live chat messages, WhatsApp conversations, and phone calls with our customer support team (recorded for quality assurance and training purposes).
2.2 Information Collected Automatically
When you access ril138, we automatically collect technical and usage data including:
- Device Information: Device type (smartphone, tablet, desktop computer), operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
- Connection Data: IP address, geolocation data (country, region, city based on IP address), internet service provider, connection timestamp, and session duration.
- Usage Data: Pages viewed, games played, bet amounts, win/loss records, deposit and withdrawal history, bonus claims, time spent on platform, navigation paths, and clickstream data.
- Cookie and Tracking Data: Information collected through cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform performance, and deliver personalized content.
2.3 Information from Third Parties
We may receive information about you from third-party sources including:
- Payment Processors: Transaction confirmation, payment method verification, and fraud detection data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay).
- Identity Verification Services: Age verification, identity authentication, and fraud prevention data from KYC service providers.
- Game Providers: Game session data, betting behavior, and win/loss records from third-party game developers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.).
- Marketing Partners: Referral source information and affiliate tracking data (only if you accessed ril138 through an affiliate link).
3. How We Use Your Information
ril138 processes your personal data for the following legitimate purposes:
- Account Management: Creating and maintaining your gaming account, authenticating your identity, processing login requests, and managing account settings and preferences.
- Service Delivery: Providing access to casino games, sports betting markets, lottery draws, and all other gaming services offered on the ril138 platform.
- Payment Processing: Processing deposits, withdrawals, and bonus credits; reconciling payment transactions; preventing payment fraud; and maintaining accurate financial records.
- Regulatory Compliance: Verifying your age, identity, and residency to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and responsible gaming laws.
- Security and Fraud Prevention: Detecting and preventing fraudulent activity, unauthorized access, multiple account creation, bonus abuse, collusion, and other violations of our Terms and Conditions.
- Customer Support: Responding to your inquiries, resolving technical issues, investigating complaints, and providing assistance through live chat, email, and WhatsApp.
- Responsible Gaming: Monitoring gameplay patterns to identify potentially problematic gambling behavior, enforcing deposit limits and self-exclusion requests, and providing access to responsible gaming tools.
- Marketing and Communications: Sending promotional offers, bonus notifications, platform updates, and service announcements via email, SMS, or push notifications (you may opt out of marketing communications at any time).
- Platform Improvement: Analyzing usage data to optimize platform performance, improve user experience, develop new features, and enhance game selection based on player preferences.
- Legal Obligations: Responding to legal requests, court orders, or regulatory inquiries; protecting our legal rights; and enforcing our Terms and Conditions.
4. Legal Basis for Data Processing
ril138 processes your personal data based on the following legal grounds:
- Contractual Necessity: Processing is necessary to fulfill our contractual obligations under the Terms and Conditions, including providing gaming services, processing payments, and maintaining your account.
- Legal Compliance: Processing is required to comply with applicable laws, regulations, and legal obligations, including AML/KYC requirements, age verification, tax reporting, and response to legal requests.
- Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, security monitoring, platform optimization, and direct marketing (balanced against your privacy rights).
- Consent: Where required by law, we obtain your explicit consent before processing certain categories of data, such as marketing communications and optional data collection.
5. Data Sharing and Disclosure
5.1 Third-Party Service Providers
We share your personal information with trusted third-party service providers who assist us in operating the ril138 platform, including:
- Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) for processing deposits and withdrawals.
- Game Providers: Licensed game developers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, Pocket Games Soft, Play'n GO, Habanero, Red Tiger, Yggdrasil, BTG) who provide casino games and sports betting platforms.
- KYC/AML Services: Identity verification providers who authenticate government-issued documents and perform age verification checks.
- Cloud Hosting Providers: Secure data centers that host our platform infrastructure and store encrypted backups of user data.
- Customer Support Tools: Live chat software, email services, and CRM systems used to manage customer inquiries and support tickets.
- Analytics Providers: Tools that help us understand platform usage, optimize performance, and improve user experience.
All third-party service providers are contractually bound to protect your data, use it only for specified purposes, and comply with applicable data protection laws. We conduct due diligence to ensure our partners maintain adequate security measures.
5.2 Legal and Regulatory Disclosure
We may disclose your personal information when required by law or when we believe disclosure is necessary to:
- Comply with court orders, subpoenas, search warrants, or other legal processes.
- Respond to requests from government authorities, regulatory bodies, or law enforcement agencies.
- Enforce our Terms and Conditions and investigate suspected violations.
- Protect the rights, property, or safety of ril138, our users, or the public.
- Prevent or investigate fraud, security breaches, or illegal activities.
5.3 Business Transfers
In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our platform before your data is transferred and becomes subject to a different Privacy Policy.
6. Data Security Measures
ril138 employs industry-standard technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:
- Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption. Passwords are hashed using bcrypt or similar strong cryptographic algorithms.
- Secure Infrastructure: Our platform is hosted on secure servers with firewall protection, intrusion detection systems, and regular security audits.
- Access Controls: Strict access controls ensure that only authorized personnel can access personal data, and access is limited to what is necessary to perform their job functions.
- Regular Security Testing: We conduct penetration testing, vulnerability assessments, and security audits to identify and remediate potential weaknesses.
- Data Backup and Recovery: Encrypted backups are maintained to ensure data can be recovered in the event of a disaster or system failure.
- Employee Training: All staff receive data protection training and are bound by confidentiality obligations.
Despite our best efforts, no security system is completely impenetrable. If you suspect any unauthorized access to your account, please contact our customer support team immediately.
7. Data Retention
ril138 retains your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy and comply with legal obligations:
- Active Accounts: Personal data for active accounts is retained indefinitely as long as your account remains open and you continue using our services.
- Closed Accounts: After voluntary account closure, we retain personal data for 5 years to comply with financial record-keeping, AML/KYC obligations, and potential legal disputes.
- Marketing Data: If you opt out of marketing communications, your contact information is retained on a suppression list to ensure we do not contact you again.
- Transaction Records: Financial transaction records (deposits, withdrawals, bets, wins, losses) are retained for 7 years to comply with tax and regulatory requirements.
- Legal Holds: Data subject to ongoing investigations, legal proceedings, or regulatory inquiries is retained until the matter is resolved.
After the retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with you.
8. Your Privacy Rights
Under applicable data protection laws, you have the following rights regarding your personal information:
- Right to Access: You may request a copy of the personal data we hold about you, including information about how it is processed and shared.
- Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings.
- Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements and legitimate business interests (e.g., preventing fraud).
- Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances, such as when you dispute its accuracy.
- Right to Data Portability: You may request a copy of your data in a structured, machine-readable format for transfer to another service provider.
- Right to Object: You may object to processing based on legitimate interests, including direct marketing communications.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time (though this does not affect the lawfulness of prior processing).
To exercise any of these rights, please contact our customer support team at [email protected]. We will respond to your request within 30 days. You may also lodge a complaint with your local data protection authority if you believe your rights have been violated.
9. Cookies and Tracking Technologies
ril138 uses cookies and similar tracking technologies to enhance your experience and improve platform functionality:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Enable core functionality like account login, session management, and security features. Cannot be disabled. | Session / Persistent |
| Performance Cookies | Collect anonymous usage data to help us understand how visitors interact with the platform and identify areas for improvement. | Persistent (1-2 years) |
| Functionality Cookies | Remember your preferences (language, currency, game favorites) to provide a personalized experience. | Persistent (1-2 years) |
| Marketing Cookies | Track your activity across websites to deliver relevant ads and measure campaign effectiveness. Can be disabled via cookie settings. | Persistent (up to 2 years) |
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality and your user experience.
10. Children's Privacy
ril138 services are strictly intended for individuals aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that a user is under 21, we will immediately suspend the account, cancel all transactions, and delete all associated personal data. Parents or guardians who believe their child has provided personal information to ril138 should contact us immediately at [email protected].
11. International Data Transfers
ril138 primarily serves Indonesian players, and your personal data is stored on servers located in secure data centers. However, some of our third-party service providers (such as game developers and cloud hosting providers) may be located outside Indonesia. When we transfer data internationally, we ensure that adequate safeguards are in place, including:
- Standard contractual clauses approved by data protection authorities.
- Data processing agreements with third-party providers requiring equivalent data protection standards.
- Technical measures such as encryption during transit and at rest.
12. Changes to This Privacy Policy
ril138 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through:
- Prominent notice on the homepage and login screen.
- Email notification to registered users.
- Updated "Last Updated" date at the top of this document.
Your continued use of ril138 after policy changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.
13. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact ril138:
- Email: [email protected]
- Live Chat: Available 24/7 through the platform
- WhatsApp: Contact via live chat for WhatsApp support details
Our customer support team is trained to handle privacy inquiries and will respond to your request within 30 days. For urgent security matters (such as suspected account compromise), please use live chat for immediate assistance.
By using ril138 services, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.
256-Bit SSL Encryption
Bank-grade encryption protects all data transmitted between your device and our servers, ensuring your information remains confidential.
No Third-Party Sales
We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data stays with ril138.
Data Minimization
We collect only the information necessary to provide services, comply with regulations, and protect your account security.
Secure Storage
Your data is stored on encrypted servers with strict access controls, regular backups, and comprehensive disaster recovery protocols.
Your Rights
Access, correct, delete, or export your personal data at any time. You have full control over your information.
Regulatory Compliance
Our data practices comply with applicable privacy laws, AML/KYC regulations, and international data protection standards.
Explore More About ril138
Learn about our terms, responsible gaming commitment, and get answers to common questions.