winstar138Privacy Policy
This page describes what we collect when you use winstar138 and how we keep that data protected. We take data security seriously — every piece of personal information you provide is encrypted, stored securely, and never shared with third parties without your consent or legal requirement. Our privacy practices comply with Indonesian data protection standards and international best practices for gaming platforms.
We collect information only to verify your identity, process payments, deliver our services, and comply with regulatory obligations. We do not use your data for marketing purposes unless you explicitly opt in. You have the right to request a copy of your data or ask us to delete it after your account closes, subject to legal retention requirements.
Our data collection spans your KYC verification, deposit and withdrawal transactions through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank virtual accounts, and your gameplay history. This page explains each category and your rights.
Data we collect when you access winstar138
When you open a winstar138 account, we collect your email address, phone number, and government-issued ID (national ID, passport, or driver's license number and photo). We use this information to verify your identity through our KYC process and prevent fraud. This verification typically takes 1–2 business hours. We encrypt your ID photo and store it on our secure servers using TLS 1.3 encryption.
Once verified, we collect your payment method information — the bank account, DANA wallet ID, e-wallet phone number, or mobile banking credentials you link to your account. We do not store your full card numbers or payment credentials; instead, our payment processor (your bank or e-wallet provider) stores these and sends us only a token confirming the payment was authorized. This token allows us to process future transactions without re-requesting your sensitive details.
Device and location data
We collect your IP address, device type (Android, iOS, desktop), and approximate geographic location (city level, e.g., Jakarta, Surabaya) to deliver our service, detect fraud, and ensure you are accessing from a supported jurisdiction. We do not track your precise location or movements.
Gameplay and transaction history on winstar138
We record every game you play, every bet you place, and every withdrawal you request. This history includes the date, time, game type (Liga 1 sportsbook, live roulette, Aviator slot, etc.), stake amount, result, and final balance. We use this data to settle disputes, detect problem gambling patterns, and comply with anti-money-laundering regulations. Your gameplay history is stored indefinitely and accessible to you through your account dashboard.
We also log your account login activity — date, time, device type, and IP address of each login. This helps us detect unauthorized access and notify you if we spot suspicious activity. If someone attempts to log in to your account from an unusual location or device, we send you an SMS alert immediately.
Cookies and browser data on your winstar138 session
We use cookies to maintain your login session, remember your language preference, and track your navigation within winstar138. Our cookies store a session token (a random string that identifies your current login); we do not store your password or payment details in cookies. Third-party analytics services (such as Google Analytics) may place cookies on your device to measure traffic patterns — you can disable these cookies in your browser settings without losing access to winstar138.
-
1
Personal identification dataCategory
Email, phone, name, ID number and photo. Encrypted and stored securely; never shared with third parties.
-
2
Payment method tokensCategory
Stored by your payment provider (local payment, online payment, e-wallet, etc.); we hold only a token enabling transactions, not the raw credentials.
-
3
Gameplay and transaction logsCategory
Every bet, game result, and withdrawal request recorded with timestamps. Stored indefinitely for dispute resolution and regulatory compliance.
How we protect your data and your rights on winstar138
Our servers are housed in data centers outside Indonesia (typically in the UK or Singapore). We encrypt all data in transit using TLS 1.3 and at rest using AES-256 encryption. Our databases are isolated from the public internet and accessible only to authorized staff via secure VPN connections. We perform annual security audits by independent third-party firms and maintain redundant backups in case of hardware failure.
We retain your personal data (email, phone, ID) for as long as your account is active. After you close your account, we keep your data for seven years to comply with Indonesian financial regulations, then delete it. Your gameplay and transaction history is preserved indefinitely for dispute resolution and regulatory investigation purposes.
Your data access and deletion rights on winstar138
You have the right to request a copy of all personal data we hold about you. Submit a "Data access request" through your account settings, and we will provide a downloadable file within 30 days. You also have the right to request deletion of your personal data after you close your account — use the "Data deletion request" form in account settings. We delete personal information (email, phone, ID) within 30 days, though we retain transaction records as required by law.
If you believe we have misused your data or violated this privacy policy, contact our support team via in-app chat, email, or SMS. We investigate all complaints and respond within 10 business days. If you are unsatisfied with our response, you have the right to escalate your complaint to Indonesia's data protection authority.
Third-party processors and payment partners
We share your data with third parties only when necessary to provide our services. Our payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet gateways, and your banks) receive your payment instruction and confirmation data but do not receive your full gameplay history or winstar138 account balance. Our hosting provider (the data center operator) sees your encrypted data but holds no encryption keys and cannot decrypt it. Our support team can access your account information to assist you, but they are bound by confidentiality agreements and cannot disclose your data to anyone outside winstar138.
We do not sell your data to marketing companies or data brokers. We do not use your data to create behavioral profiles for third-party advertising. If you opt in to our newsletter (promotional emails about new games, tournaments, or feature releases), we send you emails but do not share your email address with third parties.
Updates to this privacy policy
We may update this policy at any time. Material changes are communicated via email and in-app notification at least 14 days before taking effect. Continued use of winstar138 after the effective date constitutes acceptance of the updated policy. If you do not agree with the updated policy, you may close your account before the effective date.