super138 Platform Privacy Notice

This page describes what we collect when you use super138 and how we keep that data protected. We gather personal information to operate our sportsbook and casino — covering football markets (Liga 1, Piala AFF, Champions League), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), slot games, and esports. We also collect payment details to process deposits and withdrawals through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet.

Our privacy practice is designed to be transparent and compliant with data-protection principles. We do not sell your personal data to third parties. We share it only with payment processors, compliance partners, and where required by law. Your rights include the ability to access, correct, or request deletion of your data subject to legal retention requirements.

If you have questions about how we handle your information, contact our support team through the Help section on super138.

What we collect on super138

We collect personal data in two categories: account information and transaction data. Account information includes your name, email address, phone number, date of birth, and photo ID (KTP, passport, or driver's licence). We gather this during registration and verification to confirm your identity and comply with Indonesian payment regulations.

Transaction data covers deposits, withdrawals, bets, and game activity. We record when you deposit via DANA or e-wallet, how much you wagered on Liga 1 matches or live-dealer tables, your winning and losing outcomes, and when you request a withdrawal. We also log your device type (mobile or desktop), browser information, and IP address to detect fraud and analyse platform usage.

We do not collect sensitive data such as your national identification number beyond verification upload, your health status, or your political affiliation. We do not use cookies to track your browsing across third-party websites.

Verification uploads: When you upload your ID to super138, we store it encrypted and delete it after verification is complete, typically within 24 hours. We retain only the verification status (approved or rejected) in your account record.

How we use your data on super138

We use your personal data to operate super138: creating your account, processing deposits and withdrawals, settling bets, preventing fraud, and providing customer support. When you contact our Help team during a Liga 1 fixture or request a withdrawal, we use your email and transaction history to respond quickly and accurately.

We use transaction data to comply with Indonesian payment regulations and anti-money-laundering rules. We analyse your betting patterns — for example, whether you frequently place large bets on Piala AFF matches — to detect unusual activity that might indicate account compromise or regulatory violation.

We do not use your data for marketing outside super138. We do not send unsolicited emails promoting new games or bonuses. We do not share your contact details with third parties for their promotional purposes.

Data sharing and third-party processors

We share your data with third parties only in specific circumstances. Our payment processors (mobile banking, local payment, online payment operators) receive your deposit and withdrawal details to settle transactions. Our live-dealer partners receive your login session data to stream games securely. Our compliance and fraud-prevention vendor analyses your transaction patterns to identify risk.

We do not sell your data. We do not rent your email list to marketers. We share your information with third parties only under confidentiality agreements that require them to protect your data as we do.

We may disclose your data if required by law — for example, if a court orders it or if Indonesian financial authorities request information for a regulatory investigation. In such cases, we will notify you unless legally prohibited from doing so.

Your rights regarding data on super138

You have the right to access, correct, or request deletion of your personal data. To exercise these rights, contact our support team with your request and account details. We will confirm receipt and respond within five business days.

You can request access to all data we hold about you. We will provide it in a structured format. You can ask us to correct inaccurate information — for example, if your registered phone number is outdated. You can request deletion of your data, subject to legal retention requirements (we may need to keep transaction records for compliance).

Data retention: We retain account information for as long as your account is active. After you close your account, we keep transaction records for five years to comply with Indonesian financial regulations.

Cookies and tracking on super138

We use cookies to keep you logged in on super138 and to remember your game preferences (for example, whether you prefer the desktop or mobile view). Cookies are small files stored on your device. Your session cookie expires after subject to verification of inactivity, which protects your account if you step away from your computer.

We do not use tracking cookies that follow you across third-party websites. We do not use analytics cookies to build profiles of your interests outside super138. We use cookies only within the super138 platform to improve your experience.

You can disable cookies in your browser settings, but doing so may prevent super138 from functioning correctly — for example, you may not be able to stay logged in.

Data security on super138

We protect your data using industry-standard encryption (TLS/SSL) for all communication between your device and our servers. Your password is encrypted and salted — we do not store it in plain text. Your account balance and betting history are stored in encrypted databases. Our servers are located in secure data centres with physical access controls and automated backup systems.

We conduct regular security audits and penetration tests to identify vulnerabilities. If we discover a security breach affecting your data, we will notify you within 30 days and explain what was exposed and what steps we have taken to remediate it.

No security system is perfect. We cannot guarantee that your data will never be compromised. If you suspect your account has been breached — for example, if you notice unauthorised bets or withdrawals — contact super138 support immediately.

Data location and international transfers

Our servers may sit outside Indonesia. When you use super138 from Jakarta, Surabaya, Bandung, or Medan, your data is transmitted to our hosting provider, which may be located in another country. By using super138, you consent to this international transfer. We ensure that data transferred outside Indonesia is protected under equivalent security standards.

Changes to this privacy notice

We may update this privacy notice from time to time. When we make material changes (such as new data-sharing practices), we notify you via email and display a notice on super138. Your continued use of the platform after such notice constitutes acceptance of the updated policy.

Contacting us about privacy

If you have questions about how we handle your data, or if you wish to exercise your rights, contact super138 support. Provide your account email and a clear description of your request. We aim to respond within five business days. If you are not satisfied with our response, you may escalate to our data-protection officer or seek recourse through local data-protection authorities.

↑