anda138 Platform Privacy Notice

This page describes what we collect when you use anda138 and how we keep that data protected. We take your privacy seriously and operate under data-protection principles designed to prevent misuse, unauthorised access, and unnecessary collection. Every time you create an account, deposit via DANA or e-wallet, verify your identity, or place a stake on Liga 1 or a live-dealer table, we collect certain information—this policy explains what that information is, why we need it, and how long we hold it.

We at anda138 do not sell your data to third parties for marketing purposes. We do not track your behaviour outside anda138 or profile you for targeted advertising. The data we collect is used solely to operate the platform, comply with legal obligations (anti-money-laundering and know-your-customer requirements), process your withdrawals, and improve our service. Your data is encrypted and stored on secure servers accessible only to authorised anda138 staff and approved processors.

As an online gaming platform serving users in Jakarta, Surabaya, Bandung, and Medan, we comply with data-protection principles applicable in supported jurisdictions. If you have questions about this policy or wish to exercise your privacy rights, contact our data team at the address provided at the end of this page.

Data We Collect on anda138

When you create an anda138 account, we collect your full name, date of birth, email address, phone number, and country of residence. We use this information to set up your account, send you transaction receipts, and notify you of service changes. Your email and phone are also used for account recovery if you forget your password or need to re-authenticate during withdrawal requests.

We collect payment information when you deposit. If you use DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), we record the transaction amount, timestamp, and method. We do not store your payment card details or mobile wallet credentials on our servers—all payment processing happens through PCI-compliant third-party gateways. We retain payment records for seven years to comply with financial-regulation requirements in supported jurisdictions.

Account verification requires identity documents. We ask for a government-issued photo ID (e.g., passport, KTP) and proof of address (utility bill, bank statement). These documents are uploaded to our secure server and are seen only by our compliance team during verification. Once verification is complete, we store a hashed reference to your verified identity but do not retain the original images longer than required by law.

How We Use Your Data on anda138

We use your account details to deliver the anda138 service: managing your wallet, processing deposits and withdrawals, settling bets on sportsbook markets (Piala AFF, Champions League, Premier League, MotoGP, badminton) and esports (Mobile Legends, Free Fire, PUBG Mobile), and powering live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger) and slots (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways). We also use your data to:

We do not use your personal data for marketing to third parties. We do not sell or rent your email address, phone number, or identity documents to external companies. Any communication you receive from anda138 is sent only by our own team or approved processors.

Your data is encrypted, stored securely, and accessed only by authorised anda138 staff or trusted payment and compliance processors.

anda138 privacy team

Third-Party Processors and Jurisdiction

We work with third-party processors to deliver anda138 services. Payment gateways (for mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank transfers) are PCI-compliant and store only transaction references, never your full payment credentials. Live-dealer video streams come from licensed multi-camera studios operated by third-party providers under data-protection agreements. Esports data and official match results are sourced from tournament organisers (e.g., MPL for Mobile Legends). All processors are contractually obligated to protect your data and not use it for purposes beyond what we have authorised.

Our anda138 servers are located outside some user jurisdictions but comply with data-protection standards applicable in supported regions. If your jurisdiction has specific data-residency requirements, contact our compliance team to confirm how we meet those standards.

Your Rights and Data Deletion

We give you the right to request a copy of your personal data, correct inaccuracies, and request deletion of unnecessary information (subject to legal-retention obligations). To exercise these rights, contact our data team at [email protected] with your account email and details of your request.

If you close your anda138 account, we retain your data for seven years to comply with anti-money-laundering regulations. After that period, we delete or anonymise your personal information. If you request data deletion before the seven-year period ends, we will anonymise your information instead of deleting it, to maintain compliance and audit trail integrity.

Note: Some data cannot be deleted while your account is active or pending a withdrawal. If withdrawal is in progress, we retain payment and account data until the transaction settles.

Cookies and Tracking

We use essential cookies on the anda138 app to maintain your login session and remember your preferences (e.g., notification settings, preferred language, default sportsbook view). These cookies do not track your behaviour across other websites or apps. If you disable cookies in your mobile browser, some anda138 features may not work correctly.

We do not use analytics cookies that profile you for targeted advertising. We do not integrate third-party trackers (Google Analytics, Facebook Pixel, etc.) into the anda138 app. We may collect anonymised, aggregate metrics (e.g., total users, average session length) to improve platform stability and user experience, but these metrics cannot identify you personally.

Data Retention and Security

We retain your account information for the duration of your anda138 membership and for seven years after closure to comply with financial-regulation and anti-money-laundering laws. Payment records and transaction history are retained for the same period. Identity-verification documents (ID, proof of address) are retained only as long as needed to complete verification, then securely deleted unless law requires us to retain them.

Our data security includes SSL/TLS encryption in transit, encrypted storage at rest, restricted staff access, regular security audits, and incident-response procedures. We conduct annual penetration testing and maintain cyber-insurance to cover potential data breaches. If a breach occurs that compromises your personal data, we will notify you within 72 hours and provide information on steps we took to contain it.

Changes to This Privacy Policy

We may update this policy at any time by posting a revised version in the app and notifying you via email or push notification. Continued use of anda138 after an update constitutes your acceptance of the revised policy. Major changes (e.g., changes to how we use or share your data) will be communicated with 30 days' notice.

Our commitment to data protection remains unchanged: we will never sell your personal information, and we will always use your data only for purposes necessary to operate anda138 in compliance with applicable law. Thank you for trusting anda138 with your personal information.

Contact our data team: [email protected]

↑