Privacy Policy

Buy138 Privacy Policy – Our Commitment to Protecting Every Member's Data and Privacy

At buy138, your privacy is not just a regulatory obligation — it is a core value we uphold every day. This page clearly and transparently explains how we collect, use, store, and protect the personal information of every member who entrusts their data to us.

Last updated: January 1, 2026

The Six Pillars of buy138 Privacy Protection

These are the concrete standards we apply to keep every member's data secure.

Military-Grade Data Encryption

All data transmitted between your device and buy138 servers is encrypted using 256-bit SSL/TLS protocol — the same standard used by banks and international financial institutions to protect sensitive transactions.

Secure and Isolated Data Storage

Members' personal data is stored on physically and digitally secured servers, accessible only to authorized personnel. A data separation system ensures that financial and identity information cannot be accessed simultaneously from a single point.

Data Is Not Sold to Third Parties

Buy138 stands by this commitment: we never sell, rent, or share members' personal data with third parties for any commercial purpose. Your data is used solely for the operational needs of buy138 services.

You Are in Control of Your Data

As a buy138 member, you have full rights to access, update, or request deletion of your personal data. Simply contact our support team — the process is straightforward and requires no complicated procedures.

Real-Time Suspicious Activity Monitoring

The buy138 security system actively monitors account activity patterns in real time. If unusual or suspicious access is detected, the system will immediately block the session and send a notification to the account holder.

Regular Security Audits by Independent Parties

The buy138 security and data management system is periodically audited by independent cybersecurity certification bodies. Audit results are used to continuously raise the data protection standards we apply.

1. Scope of This Privacy Policy

This Privacy Policy applies to all services operated by buy138, including the web platform at buy138.vu, mobile apps for Android and iOS, and all official communication channels used to interact with members.

By registering and using buy138's services, you confirm that you have read, understood, and agreed to the data collection and usage practices described in this document. This policy also applies to visitors who access the platform without creating an account, albeit with a more limited data scope.

This Privacy Policy is an integral part of buy138's Terms and Conditions. In the event of any conflict between this document and other documents, this Privacy Policy shall prevail with respect to personal data protection.


2. Personal Data We Collect

Buy138 collects members' personal data through various interactions with the platform. Below is a detailed breakdown of the types of data we collect and how it is gathered:

Data you provide directly:

  • Registration information: full name, date of birth, email address, and active phone number.
  • Identity verification documents (KYC): a photo of a valid national ID, driver's license, or passport.
  • Bank account or e-wallet details used for deposit and withdrawal transactions.
  • Account preferences and notification settings that you configure yourself.
  • Messages and communication history with the buy138 support team.

Data collected automatically when you use the platform:

  • The IP address of the device used to access buy138.
  • Device type, operating system, browser version, and screen resolution.
  • Platform activity history: games played, session duration, and betting history.
  • Financial transaction history including deposits, withdrawals, and bonus claims.
  • Technical log data such as access times, pages visited, and errors encountered.
  • Approximate location data based on IP address (not GPS or precise location).

buy138 does not collect sensitive data such as biometric data, health information, or religious/political beliefs under any circumstances.


3. How We Use Members' Personal Data

Data collected by buy138 is used solely for purposes relevant to platform operations and service quality improvement. Here are the specific uses:

  • Processing account registration, identity verification, and login authentication securely.
  • Processing deposit and withdrawal transactions to registered payment methods.
  • Ensuring compliance with minimum age requirements and anti-money laundering regulations.
  • Sending important notifications related to your account, transactions, and relevant promotions.
  • Providing personalized and responsive customer support based on interaction history.
  • Detecting and preventing fraudulent activity, system manipulation, or platform abuse.
  • Analyzing usage patterns anonymously to improve platform performance and features.
  • Fulfilling reporting obligations to relevant authorities in accordance with applicable law.

Buy138 does not use members' personal data for any purpose beyond those listed above. Use of data for new purposes not mentioned here will require an update to this policy along with notification to members.


4. Legal Basis for Data Processing

Buy138 processes members' personal data on the basis of one or more of the following legal grounds, in accordance with applicable data protection regulations:

  • Contract performance – data processing is necessary to deliver the services you request, including account creation, transactions, and customer support.
  • Legal obligation – buy138 is required to process certain data to comply with anti-money laundering regulations, age verification, and reporting to the relevant authorities.
  • Legitimate interests – data processing to prevent fraud, enhance system security, and analyze platform performance is carried out based on legitimate interests that do not infringe on your rights.
  • Consent – for marketing communications and delivery of personalized promotional offers, buy138 relies on your explicit consent, which may be withdrawn at any time.

5. Sharing Data with Third Parties

Our position is firm: members' personal data is never sold, rented, or traded to any third party. However, in the course of operating our services, buy138 needs to share strictly limited data with the following categories of partners:

  • Payment service providers – data required to process financial transactions is provided to payment gateways and related banks with full encryption.
  • Game providers – encrypted account identifiers are passed to game provider systems to enable seamless gameplay within a single integrated platform.
  • Technical infrastructure services – the server and cloud service providers we use have limited access to technical data for operational purposes only, bound by strict confidentiality agreements.
  • Legal authority – data may be shared with government agencies or law enforcement if required by applicable laws and regulations.

All third-party partners working with buy138 have signed data processing agreements obligating them to maintain confidentiality and use data only for agreed purposes.


6. Data Storage Security

Member data security is buy138's top technical priority. We implement a multi-layered set of security measures designed to protect data from unauthorized access, breaches, or misuse:

  • 256-bit SSL/TLS encryption for all data transmissions between user devices and buy138 servers.
  • At-rest data encryption for all sensitive information stored in our databases.
  • A multi-layered firewall and intrusion detection system monitoring network traffic 24 hours a day.
  • Role-based access control policy — only staff with specific authorization may access certain types of data.
  • Complete audit trail logging for all access and modifications to sensitive data.
  • A structured incident response procedure to handle potential data breaches quickly and transparently.

That said, no security system can guarantee 100% absolute protection. Members are therefore also asked to play an active role in keeping their own login credentials secure.


7. Data Retention and Deletion

Buy138 retains members' personal data for as long as the account remains active or as long as necessary to fulfill legal obligations, resolve disputes, and enforce applicable agreements.

  • Identity and transaction data are retained for a minimum of 5 years after account closure, in accordance with anti-money laundering regulations applicable in our operating jurisdiction.
  • Game activity history and session logs are retained for 2 years after the last session for audit and dispute resolution purposes.
  • Communication data with our support team is retained for 3 years for service quality and case reference purposes.
  • Once the retention period expires, data will be permanently deleted or anonymized so it can no longer be linked to your identity.

Members who close their account and wish to request early data deletion may submit a request through the buy138 support team. Requests will be processed in accordance with applicable legal retention obligations.


8. Cookies and Tracking Technologies

Buy138 uses cookies and similar technologies to enhance the user experience on the platform. Below are the types of cookies used and their purposes:

Cookie Type Purpose Can Be Disabled
Essential Cookies Required for basic platform functions such as login sessions and security No (opt-in required)
Functional Cookies Remembering your preferences such as language, theme, and display settings. Yes
Analytical Cookies Collecting anonymous data on platform usage to improve our services. Yes
Security Cookies Detecting suspicious activity and preventing unauthorized account access. No (opt-in required)

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect overall platform functionality, including the ability to log in to your account.


9. Members' Rights Over Personal Data

As the owner of your personal data, you have the following rights, which you may exercise at any time at no cost:

Right of Access

Requesting a copy of the personal data we hold about you in a human-readable format.

Right to Rectification

Updating or correcting personal data that is inaccurate or no longer relevant.

Right to Erasure

Requesting deletion of personal data, subject to applicable legal retention obligations.

Right to Restriction

Requesting restriction of data processing in certain situations pending verification or dispute resolution.

Right to Portability

Receiving the data you have provided in a structured, machine-readable format.

Right to Object

Objecting to data processing for direct marketing purposes at any time without penalty.

To exercise any of the rights above, simply contact the buy138 support team via live chat. Requests will be processed within a maximum of 30 business days after your identity has been verified.


10. Changes to the Privacy Policy

Buy138 reserves the right to update this Privacy Policy at any time to reflect changes in regulations, industry practices, or platform service developments. The "last updated" date at the top of this page will always reflect the latest version in effect.

For changes that significantly affect the way we handle personal data, we will notify members via their registered email or in-platform notification at least 14 days before the changes take effect. Continued use of buy138 services after the changes take effect will be considered acceptance of the updated policy.

We recommend reviewing this page periodically, at least once every three months, to ensure you always understand how we manage your personal data.


11. How to Contact buy138 About Privacy

If you have any questions, objections, or requests regarding this Privacy Policy or the management of your personal data at buy138, our team is ready to assist through the following channels:

  • Live Chat: Available directly on the buy138 platform, 24 hours a day, 7 days a week for the fastest response.
  • Email: [email protected] — for formal personal data requests, please include your full name and account number to expedite the verification process.
  • When submitting a data rights request (access, correction, or deletion), please ensure you have completed the identity verification process first to protect the security of your data.

Buy138 is committed to responding to all privacy-related inquiries within a maximum of 5 business days for general questions, and 30 business days for formal data rights requests.

Your Data Is Protected. Now Let's Play.

Buy138 builds trust through transparency and concrete action. You now know how we protect your personal data — join us and enjoy thousands of game options on a platform that is safe, fair, and trustworthy.

Bahasa Indonesia