Your Privacy at atm138
We built atm138 around your trust. This privacy policy spells out exactly how we collect, hold and protect your account information—from your first login through every QRIS, DANA...
What We Collect and Why
When you open your account at atm138, we collect your name, contact details and payment information to verify your identity and process deposits via QRIS, DANA, OVO and GoPay. We track your gameplay and betting history solely to maintain account integrity, detect fraud and deliver the correct payouts. Your location is recorded for compliance with Indonesian regional gaming law. We do not
sell your data to third parties. All personal information is held on secure servers with encryption. You retain the right to request access, correction or deletion of your account information in line with local data protection standards.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Questions About Your Privacy
Privacy Standards Behind atm138
SSL Encryption
Every transaction—QRIS, DANA, OVO, GoPay—travels through bank-grade SSL encryption. Your payment details never touch unencrypted channels. Verified on every page load.
PCI Compliance
We maintain Payment Card Industry Data Security Standard compliance to ensure card and e-wallet data is handled with the highest industry protocols and regular audits.
Regular Audits
Our security infrastructure is tested quarterly by independent firms. Vulnerability scans and penetration testing confirm our defenses stay ahead of emerging threats.
Data Minimisation
We collect only the information needed to verify your identity, process QRIS/DANA/OVO/GoPay payments and fulfill legal obligations. No surplus data harvesting.
Access Controls
Your account data is accessible only to authorised atm138 staff on a need-to-know basis. Two-factor authentication protects your login from unauthorised entry.
Incident Response
If a breach occurs, we notify affected users within 48 hours and cooperate with Indonesian regulators. A dedicated response team isolates and investigates all security events.