Your privacy matters to dis138. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your information. Please read it carefully before using our platform.
Last Updated: 1 January 2026Summary: dis138 collects only the data necessary to operate a safe, compliant, and enjoyable betting platform. We do not sell your personal data to third parties. You have the right to access, correct, and request deletion of your personal information at any time by contacting our support team.
dis138 ("we", "us", "our") operates the online gaming and sports betting platform accessible at https://dis138.cam (the "Platform"). This Privacy Policy describes how dis138 collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Member") who access or use the Platform.
This policy is intended to be read alongside our Terms & Conditions. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices, you must not use dis138.
dis138 is committed to data protection principles aligned with internationally recognized frameworks, including transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. We apply these principles to all personal data we handle, regardless of the channel through which it was collected.
dis138 collects the following categories of personal data from Members and Platform visitors:
dis138 collects personal data through the following channels:
dis138 uses your personal data exclusively for the purposes listed below. We do not use your data for any purpose incompatible with the reason for which it was originally collected.
| Purpose | Data Categories Used |
|---|---|
| Account registration & management | Identity & contact data, KYC data |
| Identity & age verification (KYC) | KYC data, identity & contact data |
| Processing deposits & withdrawals | Financial data, identity data |
| Providing betting & gaming services | Gaming activity data, financial data |
| Fraud prevention & AML compliance | All categories, technical data |
| Customer support | Communications data, identity data, gaming activity data |
| Responsible gaming monitoring | Gaming activity data, financial data |
| Platform security & abuse prevention | Technical & usage data, identity data |
| Promotional communications (with consent) | Identity & contact data, gaming activity data |
| Analytics & platform improvement | Technical & usage data (aggregated/anonymized) |
Where we send you promotional communications (bonus offers, seasonal promotions — e.g., Idul Fitri cashback, Ramadhan reload offers), we will only do so with your prior consent. You may withdraw consent at any time by contacting our support team.
dis138 processes your personal data on the following legal grounds:
We do not sell your personal data. dis138 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes under any circumstances.
dis138 shares personal data only with the following categories of recipients, strictly for the purposes described in Section 4:
All third-party service providers who process personal data on our behalf are bound by written data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to dis138.
dis138 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required to meet our legal and regulatory obligations. The general retention periods we apply are as follows:
| Data Category | Retention Period |
|---|---|
| Account & identity data | Duration of account, plus 5 years after account closure |
| KYC verification documents | Duration of account, plus 5 years after account closure |
| Transaction & financial records | 7 years from the date of transaction (AML requirement) |
| Betting & gaming activity logs | 5 years from the date of activity |
| Support communications | 3 years from the date of the last communication |
| Technical & server logs | 12 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn, plus 3 years thereafter |
Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized so that it can no longer be associated with any individual. Where data must be retained for a legal obligation despite a Member's deletion request, we will inform the Member accordingly.
dis138 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to improve your user experience, and to analyze Platform usage. A cookie is a small text file placed on your device when you visit the Platform.
You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use core Platform features, including logging in and placing bets. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.
dis138 does not use cookies to collect sensitive personal data such as financial information or government identity numbers.
dis138 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
Your Responsibility: While we implement robust security measures on our side, you are also responsible for keeping your account credentials confidential. Never share your password with anyone — dis138 support staff will never ask for your password. If you suspect your account has been compromised, contact us immediately at [email protected].
dis138 recognizes and respects the data rights of all Members. You may exercise any of the following rights by contacting our support team at [email protected]:
Request a copy of all personal data we hold about you, along with information on how it is being used.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Request that we restrict processing of your data in certain circumstances, such as while a dispute regarding accuracy is resolved.
Request a machine-readable copy of the personal data you have provided to us directly, where technically feasible.
Object to processing carried out on the basis of our legitimate interests, including direct marketing communications.
We will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for responding to rights requests unless a request is manifestly unfounded, excessive, or repetitive.
To verify your identity before processing a rights request, we may ask you to confirm certain account details or provide a copy of your identity document. This is to protect your data from being disclosed to unauthorized parties.
21+ Only: dis138 is strictly an adults-only platform. We do not knowingly collect, store, or process the personal data of individuals under the age of 21. All prospective Members must confirm they are at least 21 years of age at the point of registration.
If dis138 discovers or is notified that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, delete all related personal data, and, where applicable, return any funds to the source account after verifying the identity of the account holder's legal guardian.
Parents and guardians who believe a minor may have registered on dis138 without authorization are encouraged to contact us immediately at [email protected] so that we can take swift action.
dis138 operates as an internationally licensed platform and may process or store certain categories of personal data on servers located outside Indonesia. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to that in your home country, dis138 ensures that appropriate safeguards are in place prior to any such transfer.
These safeguards may include contractual clauses that bind the receiving party to data protection standards consistent with this Privacy Policy, or reliance on recognized frameworks for international data transfers. Specific details of the safeguards applicable to any given transfer are available upon request by contacting [email protected].
The dis138 Platform may contain references to third-party services, including game studio content provided by Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft. While we take care to partner only with reputable providers, dis138 does not control the privacy practices of these third parties and is not responsible for their data handling.
We encourage you to review the privacy policies of any third-party service you interact with. dis138's Privacy Policy applies only to data collected directly through the dis138 Platform and via our own support channels.
dis138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify active Members via email to the address registered on their account, and by displaying a prominent notice on the Platform for at least 14 days following the update.
The "Last Updated" date at the top of this page will be revised whenever changes are made. Your continued use of the Platform following notification of changes constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you should cease using the Platform and request account closure.
The current version of this Privacy Policy is always accessible at https://dis138.cam/privacy-policy. We recommend reviewing this page periodically to stay informed of how we protect your data.
If you have questions, concerns, or requests relating to this Privacy Policy or the way dis138 handles your personal data, please reach out to our Data Protection team through the following channel:
Privacy & Data Protection: [email protected] — Please use the subject line "Privacy Request" or "Data Rights Request" to ensure your message is routed to the appropriate team. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 calendar days.
For general account support, deposit or withdrawal assistance, or responsible gaming queries, our full customer support team is available 24/7 via live chat on the Platform or by email. Our Indonesian-speaking support agents are on hand around the clock, including during Indonesian public holidays such as Idul Fitri, Idul Adha, and Independence Day (17 August).
At dis138, protecting your personal data is not a box-ticking exercise — it is a core part of how we operate. Here is what that commitment looks like in practice.
Every byte of data transmitted between your device and dis138 is protected by bank-grade 256-bit SSL/TLS encryption. Your personal and financial information is never sent in plain text.
dis138 does not sell, rent, or trade your personal information to any third party for commercial gain. Your data is used solely to operate and improve your experience on our platform.
We explain exactly what identity documents we collect, why we need them, how long we retain them, and who has access. KYC compliance protects you as much as it protects the platform.
Access, correct, restrict, or request deletion of your personal data at any time. We honour all valid data rights requests within 30 days and will never charge you for exercising your rights.
We publish exactly how long we keep each category of data, from 12-month server logs to 7-year transaction records required under international AML regulations — no vague "as long as necessary" clauses.
Our Indonesian-speaking support team handles data rights requests, privacy complaints, and KYC queries 24/7. Reach us at [email protected] with any data-related concern — we respond within 48 hours.
Our support team is available around the clock to answer any questions about how dis138 handles your personal data. You can also review our Terms & Conditions or explore our FAQ for further guidance.