ibox 138 Privacy Policy
This page describes what we collect when you use ibox 138 and how we keep that data protected. We collect personal information only to verify your identity, process your payments, and provide customer support. Our commitment is to handle your data transparently, securely, and in compliance with applicable privacy regulations.
When you open an account on ibox 138, we ask for your email, name, date of birth, and identity documents (passport or national ID). We use this information to verify your identity, prevent fraud, and comply with legal requirements. We do not sell your data to third parties. We share information only with payment processors, identity verification services, and other providers necessary to operate our platform.
This policy explains what data we collect, how we use it, who we share it with, and what rights you have. If you have questions about your privacy on ibox 138, our support team is available during business hours to help.
What Data We Collect
We collect personal information in several categories. Account information includes your email, username, password (encrypted), full name, date of birth, phone number, and residential address. Identity documents include scans of your passport or national ID, which we use for KYC (Know Your Customer) verification. Payment information includes your chosen payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account details), but we do not store full card numbers—instead, we use tokenised payment links.
Gameplay and transaction data includes your slot game history, live casino sessions, sportsbook markets you've viewed, deposits, withdrawals, and account balance. Device and access data includes your IP address, browser type, device type, and login timestamps. We collect this data to detect fraud, prevent account takeovers, and improve platform security. We do not collect your location data unless you explicitly permit it.
How We Use Your Data
We use your data for specific, legitimate purposes. Account verification: We verify your identity using your documents to comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations. Payment processing: We share your payment details with payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) to process deposits and withdrawals. Fraud prevention: We analyse your login patterns, transaction history, and device data to detect suspicious activity and protect your account.
Customer support: We use your account information to respond to your questions, handle withdrawal requests, and resolve technical issues. Legal compliance: We retain your data to comply with financial regulations, tax requirements, and legal investigations if required by authorities. Platform improvement: We analyse aggregated, anonymised data to improve game performance, payment flows, and user experience.
We do not use your data for marketing purposes without your explicit consent. We do not sell your personal information to third parties. We do not share your data with advertisers or data brokers.
Third-Party Data Processors
We work with third-party service providers to operate ibox 138. Payment processors (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) receive your payment details to process transactions. Identity verification services receive your documents to verify your identity and check against fraud databases. Cloud hosting providers store our servers and databases; our servers may sit outside your jurisdiction, but all data is encrypted in transit and at rest.
We require all third-party processors to sign data-processing agreements that commit them to protecting your data with the same security standards we use. We do not permit them to use your data for their own purposes. If you have concerns about a specific processor, contact our support team during business hours.
Data Security and Encryption
We protect your data using industry-standard encryption and security practices. All data transmitted between your device and ibox 138 is encrypted using TLS (Transport Layer Security). Your password is encrypted using strong hashing algorithms and is never stored in plain text. Payment card details are not stored directly; instead, we use tokenised payment links that allow us to process transactions without holding sensitive card data.
We recommend enabling two-factor authentication (2FA) on your account for additional security. 2FA requires a verification code from your phone when you log in or request a withdrawal, making it much harder for someone else to access your account. If you forget your password, our support team can guide you through a secure reset process that verifies your identity before allowing a new password.
How Long We Keep Your Data
We retain your data for as long as necessary to provide our service and comply with legal requirements. Account information is kept for the duration of your account and for a period after account closure to comply with financial regulations. Transaction records are retained for at least five years to comply with tax and anti-money-laundering requirements. Identity documents are retained for the duration of your account and a period after closure for fraud prevention and legal compliance.
If you request account deletion, we will remove your personal data from active systems, but we may retain anonymised or aggregated data for statistical purposes. We may also retain data if required by law or if there are outstanding disputes or investigations.
Your data rights
- You have the right to access your personal data and request a copy
- You have the right to correct inaccurate or incomplete data
- You have the right to request deletion of your data (subject to legal retention requirements)
- You have the right to object to certain uses of your data
- You have the right to data portability (receiving your data in a structured format)
Cookies and Tracking Technologies
ibox 138 uses cookies to improve your experience and maintain your login session. Session cookies are temporary and expire when you close your browser; they allow us to keep you logged in while you use the platform. Preference cookies remember your settings, such as language and theme preferences. Analytics cookies help us understand how users interact with ibox 138, which features are popular, and where we can improve.
We do not use cookies to track you across other websites. You can disable cookies in your browser settings, but this may affect your ability to use ibox 138 fully. We do not use third-party tracking pixels or beacons to monitor your activity outside our platform.
Contact Us About Privacy
If you have questions about how we handle your data, want to exercise your data rights, or have concerns about your privacy on ibox 138, contact our support team. You can reach us through the contact options on our FAQ pageOur team is available during standard business hours to respond to privacy inquiries.
If you believe we have mishandled your data or violated your privacy rights, you have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so we can address your concerns directly.
Policy Updates
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or by posting a notice on ibox 138. Your continued use of the platform after such changes constitutes your acceptance of the updated policy.
This policy was last updated in 2024. We review it regularly to ensure it remains accurate and compliant with applicable privacy laws. If you have questions about recent updates, our support team can explain the changes during business hours.
Jurisdiction and Compliance
ibox 138 operates in jurisdictions where our services are legally permitted. Our privacy practices comply with applicable data protection regulations in those jurisdictions. We do not offer our services in jurisdictions where online gaming is prohibited. Users are responsible for verifying that access and use comply with their own jurisdiction's law.
Whether you're in Jakarta, Surabaya, Bandung, Medan, or Semarang, we handle your data with the same security standards and transparency. Our commitment to privacy remains consistent across all supported regions. If you have questions about how our privacy policy applies to your jurisdiction, contact our support team.