At jp138, protecting the personal data of every member is a core operational commitment, not a compliance formality. This Privacy Policy sets out clearly what information we collect, why we collect it, how we use it, who we share it with, and what rights you have over your own data. Please read this document in full before registering or using the jp138 platform.
All data transmitted between your device and the jp138 platform is protected by industry-standard 256-bit SSL encryption, ensuring that your personal and financial information cannot be intercepted in transit.
jp138 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely for the purposes described in this Privacy Policy.
jp138 collects only the information that is strictly necessary to operate your account, process your transactions, comply with our international gaming license obligations, and keep the platform secure.
As a jp138 member, you have the right to access, correct, and request deletion of your personal data at any time. Our support team will process all data-rights requests within 30 days of receipt.
This Privacy Policy applies to all personal data collected by jp138 in connection with the jp138 website (https://jp138.vu), the jp138 mobile-optimized platform, and any related services offered to members, including sportsbook betting, live casino, slot games, and togel (Indonesia's traditional numbers lottery) products. By registering an account on jp138, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
The following definitions apply throughout this Privacy Policy unless the context indicates otherwise:
| Term | Meaning |
|---|---|
| "jp138" / "We" / "Us" | The jp138 online betting platform operated at https://jp138.vu, including its parent company, affiliates, and authorized data processors acting on its behalf. |
| "Member" / "You" | Any individual who has registered an account on jp138 and whose registration has been accepted by jp138. |
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, including name, email address, date of birth, IP address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof. |
| "Data Controller" | jp138, which determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third party that processes Personal Data on behalf of jp138 under a written data-processing agreement, such as a payment gateway or KYC verification provider. |
| "KYC" | Know Your Customer — the identity and age verification process jp138 uses to confirm member eligibility before processing withdrawals or upon request at any time. |
| "Cookies" | Small text files placed on your device by the jp138 platform to recognize returning visitors, maintain session state, and collect aggregate usage analytics. |
jp138 collects Personal Data across several categories. The specific data points collected depend on how you interact with the platform:
jp138 collects Personal Data through the following channels:
When you initiate a deposit or withdrawal through an Indonesian bank (such as BCA, BRI, BNI, or Mandiri) or an e-wallet (such as OVO, DANA, GoPay, ShopeePay, or LinkAja), jp138 receives only the transaction confirmation and account reference from the payment provider. jp138 does not store your full bank login credentials or e-wallet passwords.
jp138 processes your Personal Data for the following specific and legitimate purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity & Contact Data, KYC & Verification Data |
| Processing deposits and withdrawals in IDR | Financial & Transaction Data, Identity Data |
| Verifying member age (21+ requirement) and identity | KYC & Verification Data, Identity Data |
| Fraud prevention and anti-money laundering compliance | All categories where relevant |
| Delivering customer support and resolving complaints | Identity Data, Communications Data, Transaction Data |
| Responsible gaming monitoring and intervention | Usage Data, Transaction Data, Identity Data |
| Platform security and technical maintenance | Technical & Usage Data |
| Sending transactional and account communications | Identity & Contact Data |
| Sending promotional offers (where opted in) | Identity & Contact Data, Usage Data |
| Complying with international gaming license obligations | All categories where required by regulators |
jp138 processes your Personal Data on one or more of the following legal bases:
jp138 does not sell your Personal Data. We share your data only in the following limited and controlled circumstances:
jp138 engages third-party Data Processors under written agreements to perform specific services on our behalf. These include payment gateway providers that facilitate IDR bank transfers and e-wallet transactions, KYC and identity verification platforms, cloud hosting and infrastructure providers, and customer support technology vendors. Each Data Processor is contractually required to process your data only for the specified purpose and to maintain security standards no less rigorous than those applied by jp138 itself.
Where jp138 offers games provided by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — a limited dataset (typically a session token and anonymized player identifier) is shared with the relevant studio's platform to enable game delivery and fair-result verification. No personally identifiable information beyond what is strictly necessary for game delivery is disclosed to game studios.
jp138 may disclose Personal Data to competent authorities — including regulators, law enforcement agencies, and licensing bodies — where required by its international gaming license conditions, applicable law, or a valid legal order. jp138 will notify the affected member of any such disclosure where permitted to do so by law.
In the event of a merger, acquisition, or sale of all or substantially all of jp138's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. jp138 will notify affected members of any such transfer and the new entity's privacy practices via the platform or registered email address before the transfer takes effect.
jp138 strictly prohibits the sale or rental of member Personal Data to advertising networks, data brokers, lead-generation companies, or any third party for commercial marketing purposes. If you receive unsolicited marketing claiming to originate from jp138, please report it to [email protected] immediately.
jp138 retains Personal Data only for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law or our international gaming license conditions. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of account plus 5 years following permanent account closure |
| Financial & Transaction Records | 7 years from the date of each transaction (AML compliance requirement) |
| KYC Documents | Duration of account plus 5 years following permanent account closure |
| Customer Support Communications | 3 years from the date of the last communication in each support thread |
| Technical & Usage Logs | 13 months from the date of collection (rolling basis) |
| Cookie & Session Data | As specified in Section 9; session cookies expire upon browser close |
| Self-Exclusion Records | Permanent (to prevent circumvention of exclusion orders) |
Upon expiry of the applicable retention period, jp138 will securely delete or irreversibly anonymize your Personal Data so that it can no longer be attributed to you as an identifiable individual.
jp138 implements a layered security architecture to protect your Personal Data against unauthorized access, accidental loss, alteration, and unlawful destruction. Our core technical and organizational security measures include:
While jp138 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. Members are responsible for maintaining the confidentiality of their own login credentials and should never share their jp138 username or password with any third party.
jp138 uses Cookies and similar technologies (including local storage objects and session tokens) to operate the platform effectively, remember your preferences, maintain your login session, and understand how members use the site so we can improve it.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your logged-in session, prevent cross-site request forgery (CSRF), and enable core platform functionality. Cannot be disabled without breaking the platform. | Session (expires on browser close) |
| Functional | Remember your language preferences, display settings, and recently played games to improve your experience on return visits. | Up to 12 months |
| Analytics | Collect anonymized data on page visits, feature usage, and navigation paths to help jp138 optimize platform design and performance. Data is aggregated and not linked to individual member identities. | Up to 13 months |
You may control or disable non-essential Cookies through your browser settings. Please note that disabling Strictly Necessary cookies will prevent you from logging in to your jp138 account and accessing the platform. Instructions for managing cookies in the most common browsers are available from your browser provider's help documentation.
As a jp138 member, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact jp138 support at the email address listed in Section 14. jp138 will respond to all valid requests within 30 days.
Request a copy of all Personal Data jp138 holds about you, along with information about how it is used.
Request correction of inaccurate or incomplete Personal Data held in your jp138 account profile.
Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to jp138's legal retention obligations.
Request that jp138 restricts processing of your data while a rectification or erasure request is being assessed.
Request a machine-readable copy of Personal Data you have provided to jp138, for transfer to another service provider.
Object to jp138 processing your Personal Data for direct marketing purposes or on the basis of legitimate interests. Objections to direct marketing are always honored immediately.
To protect your privacy, jp138 will ask you to verify your identity before processing any data-rights request. This prevents unauthorized individuals from obtaining or deleting another person's data. We may ask you to confirm your registered email address, answer security questions, or provide a copy of your identification document.
The jp138 platform is strictly intended for adults aged 21 and over. jp138 does not knowingly collect Personal Data from individuals under the age of 21. If jp138 discovers or is notified that a member is under 21, the account will be immediately suspended, all funds returned (net of any applicable processing fees) following identity verification of the refund destination, and all associated Personal Data deleted from jp138's systems within 30 days of discovery, except where retention is required by law.
If you believe that jp138 has inadvertently collected data from a minor, please contact our support team immediately at the email address provided in Section 14 so that we can take prompt corrective action.
As an internationally licensed platform serving Indonesian members, jp138 may transfer your Personal Data to servers and service providers located outside Indonesia. When such transfers occur, jp138 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require the recipient to apply data-protection standards equivalent to those described in this Privacy Policy.
jp138's primary data infrastructure is hosted on servers maintained in a jurisdiction subject to rigorous data-protection standards. All cross-border data transfers involving Personal Data of Indonesian members are conducted in compliance with jp138's international gaming license requirements.
jp138 reviews this Privacy Policy periodically and may update it to reflect changes in our data-processing practices, legal obligations, or platform features. When material changes are made, jp138 will notify registered members via the platform or by email to your registered address at least 14 days before the updated policy takes effect.
The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the jp138 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you may request account closure in accordance with the jp138 Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise your data-subject rights, or want to report a privacy concern, please contact the jp138 Data Protection team using the details below. All privacy-related correspondence will be acknowledged within 48 hours and fully resolved within 30 days.
jp138 Data Protection & Privacy Team
Email: [email protected]
Subject line for data requests: "Data Rights Request – [Your Registered Email]"
Subject line for privacy concerns: "Privacy Concern – [Brief Description]"
Support is available 24 hours a day, 7 days a week. For data-rights requests requiring identity verification, please allow up to 30 days for full resolution following successful identity confirmation. All communications are handled in English by jp138's native Indonesian-speaking support and compliance team.
This Privacy Policy was last reviewed and updated on 1 January 2026. It should be read alongside jp138's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall Member Agreement.
We take privacy seriously so you can focus on what matters — enjoying the games. Ready to play? Log in to your account or explore our full range of betting products.
Sign In to jp138 Explore Casino View FAQ