Privacy Policy

1. Introduction

This Privacy Policy describes how bio138 ("we," "us," or "our") collects, uses, discloses, and protects the personal information of users ("you" or "your") who access and use our online gaming platform at https://bio138.cam. By creating an account, depositing funds, or using any of our services, you acknowledge that you have read, understood, and agree to the collection and use of your information in accordance with this Privacy Policy.

bio138 operates as an online gaming platform serving the Indonesian market, offering sports betting, casino games, live dealer entertainment, and lottery products including togel (traditional Indonesian lottery games). We recognize that trust is fundamental to the relationship between bio138 and our players. Protecting your personal data and financial information is not just a legal obligation — it is a core value that guides our operations and technology investments.

This Privacy Policy complies with applicable data protection regulations and international privacy standards. We are committed to transparency in our data practices and empowering you with control over your personal information. If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact our Data Protection Officer at [email protected].

2. Information We Collect

bio138 collects various categories of personal information to provide, maintain, and improve our services, comply with legal obligations, prevent fraud, and enhance your gaming experience. The information we collect falls into the following categories:

2.1 Account Registration Information

When you create a bio138 account, we collect the following mandatory information:

• Personal Identification: Full legal name (as it appears on your Indonesian identity card or KTP), date of birth, gender, and nationality
• Contact Information: Email address, mobile phone number, residential address including city and postal code
• Account Credentials: Username and encrypted password (we do not store passwords in plain text)
• Preferred Language and Currency: Language preference for customer support and currency selection for transactions

2.2 Identity Verification (KYC) Documents

To comply with anti-money laundering regulations and prevent underage gambling, bio138 collects identity verification documents including:

• Scanned or photographed copy of your Indonesian identity card (KTP) showing both front and back sides
• Proof of address documents such as utility bills, bank statements, or government correspondence issued within the last 3 months
• Selfie photograph holding your KTP next to your face for facial verification purposes
• Additional identification documents may be requested for enhanced due diligence on high-value transactions

2.3 Financial and Transaction Data

bio138 collects and processes financial information to facilitate deposits, withdrawals, and maintain accurate account records:

• Payment Method Details: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and cardholder names
• Transaction History: Dates, amounts, and methods for all deposits, withdrawals, transfers, and adjustments
• Betting History: Complete records of all wagers placed, including bet types, stakes, odds, outcomes, and timestamps
• Bonus and Promotion Usage: Records of claimed bonuses, wagering progress, and promotion participation
• Account Balance Information: Real-time account balances, pending withdrawals, and locked bonus funds

2.4 Technical and Usage Data

When you access bio138, we automatically collect technical information to optimize platform performance, enhance security, and improve user experience:

• Device Information: Device type, operating system, browser type and version, screen resolution, and mobile device identifiers
• IP Address and Geolocation: Your IP address and approximate geographic location (city level) to comply with jurisdictional restrictions and prevent fraud
• Cookies and Tracking Technologies: Session cookies, preference cookies, and analytics cookies (see our Cookie Policy for details)
• Usage Patterns: Pages visited, games played, time spent on platform, navigation paths, and feature interactions
• Log Files: Server logs recording access times, error messages, and system events for security and troubleshooting purposes

2.5 Communications and Support Interactions

We retain records of all communications between you and bio138 for quality assurance and dispute resolution:

• Live chat transcripts with customer support agents
• Email correspondence including support tickets and promotional communications
• WhatsApp messages sent to our support channels
• Telephone call recordings (where permitted by law and with your consent)
• Feedback, complaints, and survey responses

3. How We Use Your Information

bio138 processes your personal information for the following legitimate purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your gaming account
• Authenticating your identity during login and sensitive transactions
• Processing deposits, withdrawals, and internal transfers
• Providing access to sports betting, casino games, and lottery products
• Calculating and crediting winnings, bonuses, and promotional rewards
• Maintaining accurate transaction histories and account statements

3.2 Legal Compliance and Fraud Prevention

• Verifying your age to enforce the 21+ age restriction required in Indonesia
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Detecting and preventing fraudulent activities, money laundering, and bonus abuse
• Complying with legal obligations, court orders, and regulatory requests
• Enforcing our Terms and Conditions and investigating violations
• Maintaining records required by gaming regulations and financial compliance standards

3.3 Customer Support and Communication

• Responding to your inquiries via live chat, email, WhatsApp, and telephone
• Providing technical support and troubleshooting assistance
• Notifying you of account activities, withdrawals, and security alerts
• Sending service announcements, platform updates, and policy changes
• Delivering responsible gaming notifications and self-exclusion reminders

3.4 Marketing and Promotions (With Your Consent)

Subject to your marketing preferences and applicable consent requirements, we may use your information to:

• Send promotional offers, bonus announcements, and special tournament invitations
• Personalize marketing content based on your gaming preferences and history
• Conduct market research and gather feedback on our services
• Invite you to participate in VIP programs and exclusive events

You can opt out of marketing communications at any time by adjusting your account preferences or clicking the unsubscribe link in promotional emails.

3.5 Platform Improvement and Analytics

• Analyzing user behavior to optimize website performance and user experience
• Identifying popular games and betting markets to enhance our product offerings
• Testing new features and conducting A/B testing on platform designs
• Generating anonymized statistics and aggregate reports for business intelligence
• Monitoring system security and detecting technical issues

4. Data Sharing and Disclosure

bio138 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under specific circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to support our operations, including:

• Payment Processors: Banks and payment gateways that facilitate deposits and withdrawals through BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other payment methods
• Game Providers: Software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and others who deliver casino games and live dealer entertainment
• Identity Verification Services: KYC/AML compliance providers that verify your identity and screen against sanctions lists
• Customer Support Platforms: Live chat, email management, and CRM systems used to deliver customer service
• Cloud Hosting and Data Storage: Infrastructure providers that securely host our platform and databases
• Analytics and Marketing Tools: Services that help us analyze usage patterns and deliver targeted communications

All service providers are contractually obligated to protect your data and use it only for the specific purposes for which it was disclosed. They are prohibited from selling or using your information for their own purposes.

4.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement agencies, or regulatory bodies when required by law or when we have a good-faith belief that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory investigations
• Enforce our Terms and Conditions or other agreements
• Protect the rights, property, or safety of bio138, our users, or the public
• Detect, prevent, or address fraud, security issues, or technical problems
• Respond to claims that content or activity violates the rights of third parties

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy involving bio138, your personal information may be transferred to the successor entity. We will notify you via email and prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

bio138 implements industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your device and bio138 servers is encrypted using 256-bit SSL (Secure Socket Layer) technology
• Database Encryption: Sensitive personal information and financial data are encrypted at rest in our secure databases
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal data on a need-to-know basis
• Firewall Protection: Multi-layer firewalls protect our infrastructure from external threats and cyberattacks
• Regular Security Audits: Independent security firms conduct periodic penetration testing and vulnerability assessments
• Secure Password Storage: All passwords are hashed using bcrypt or similar cryptographic algorithms — we never store plain-text passwords
• Fraud Detection Systems: Real-time monitoring and machine learning algorithms detect suspicious activities and prevent fraud
• Employee Training: All bio138 staff receive regular training on data protection, privacy regulations, and security best practices

While we implement robust security measures, no method of internet transmission or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect unauthorized access to your account.

6. Data Retention

bio138 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, accounting, or reporting requirements. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your active account and for a period of 5 years after account closure (as required by anti-money laundering regulations)
• Transaction Records: Financial transaction histories are retained for a minimum of 7 years to comply with tax and accounting regulations
• Identity Documents: KYC verification documents are retained for 5 years after your last transaction
• Communications: Customer support transcripts and correspondence are retained for 3 years for quality assurance and dispute resolution
• Marketing Preferences: Opt-out requests are retained indefinitely to honor your preferences

After the applicable retention period expires, personal information is securely deleted or anonymized so that it can no longer be associated with you as an individual.

7. Your Privacy Rights

As a bio138 user, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can access most of your account information directly through your bio138 account dashboard. For additional information or a comprehensive data export, please contact [email protected].

7.2 Right to Rectification

If you believe any personal information we hold about you is inaccurate or incomplete, you can update most details directly in your account settings. For changes to verified information (name, date of birth, address), please contact customer support with supporting documentation.

7.3 Right to Erasure

You may request deletion of your personal information under certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected. Note that we may be legally required to retain certain information (transaction records, KYC documents) for regulatory compliance even after account closure.

7.4 Right to Restrict Processing

You can request that we limit how we use your personal information in certain situations, such as while we verify the accuracy of disputed information or evaluate your objection to processing.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit this data to another service provider where technically feasible.

7.6 Right to Object

You can object to the processing of your personal information for direct marketing purposes at any time. You can also object to processing based on legitimate interests by contacting us with your specific concerns.

7.7 Right to Withdraw Consent

Where we process your personal information based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please submit a written request to [email protected]. We will respond to your request within 30 days. Some requests may require identity verification to prevent unauthorized access to your information.

8. Cookies and Tracking Technologies

bio138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze platform usage. We use the following types of cookies:

• Essential Cookies: Required for the platform to function properly (login authentication, session management, security features). These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, username, and display options
• Analytics Cookies: Collect anonymized information about how you use bio138 to help us improve the platform
• Marketing Cookies: Track your activity to deliver personalized promotions and measure campaign effectiveness (requires consent)

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit your ability to use some features of the bio138 platform.

9. Children's Privacy

bio138 services are strictly intended for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected information from a person under the legal gambling age, we will immediately delete that information and permanently close the associated account without refund. Parents or guardians who believe their child has provided information to bio138 should contact us immediately at [email protected].

10. International Data Transfers

While bio138 primarily serves the Indonesian market, some of our service providers and technology partners are located outside Indonesia. When we transfer your personal information internationally, we ensure appropriate safeguards are in place, including standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms to protect your data.

11. Changes to This Privacy Policy

bio138 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by posting the updated policy on our website with a revised "Last Updated" date and, where appropriate, by sending email notifications to registered users. Your continued use of bio138 services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

12. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or bio138's data handling practices, please contact our Data Protection team:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Response Time: We aim to respond to all privacy-related inquiries within 5 business days

For urgent data security concerns (suspected data breach, unauthorized account access), please contact us immediately via live chat or mark your email as "URGENT - Security Issue" for priority handling.