Privacy Policy

1. Introduction

bok138 ("we", "us", "our", "the Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect the personal data you provide when you register an account, use our services, or interact with our website at https://bok138.cam (the "Platform").

This Privacy Policy applies to all users of bok138 services, including Indonesian residents and international players. By creating an account or using any service provided by bok138, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you must immediately cease using the Platform and contact us to close your account.

We recognize that privacy is a fundamental right, and we are committed to transparency about our data practices. This Privacy Policy is designed to comply with international data protection standards and applicable Indonesian privacy regulations. We implement industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

2. Information We Collect

bok138 collects various types of personal information to provide, maintain, and improve our services, verify your identity, process transactions, and comply with legal and regulatory requirements. The information we collect includes:

2.1 Information You Provide Directly

When you register an account with bok138, you voluntarily provide the following information:

• Personal Identification Information: Full legal name, date of birth, gender, nationality, place of birth
• Contact Information: Email address, mobile phone number, residential address (street address, city, province, postal code)
• Account Credentials: Username, password, security questions and answers
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account details), payment card information (for card deposits, if applicable)
• Identity Verification Documents: Government-issued identification (Indonesian KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs holding identification documents (for enhanced verification)
• Communication Records: Content of messages you send through customer support channels (live chat, email, WhatsApp), feedback and survey responses, complaint details

2.2 Information We Collect Automatically

When you access or use the bok138 Platform, we automatically collect certain information about your device and usage patterns:

• Device Information: IP address, device type and model, operating system and version, browser type and version, device identifiers (IMEI, MAC address), screen resolution, mobile network information
• Usage Data: Pages visited, features used, time spent on pages, click patterns, navigation paths, referring URLs, games played, bets placed, deposit and withdrawal history, login times and frequency, session duration
• Location Data: Approximate geographic location based on IP address (city/region level), precise location data if you grant permission on mobile devices
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixel tags, local storage objects (for detailed information, see Section 8: Cookies and Tracking Technologies)

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Identity Verification Services: Results from third-party KYC and anti-fraud verification services
• Fraud Prevention Databases: Information from gambling industry fraud databases and self-exclusion registers
• Publicly Available Sources: Information from public records and databases to verify identity and prevent fraud

3. How We Use Your Information

bok138 uses your personal information for the following purposes:

3.1 Account Management and Service Provision

• Create and manage your bok138 account
• Verify your identity, age (21+ requirement), and address
• Process deposits, withdrawals, and other financial transactions
• Provide access to sports betting, casino games, and specialty games (togel, sabung ayam, slots)
• Maintain accurate transaction records and account balance information
• Process and fulfill bonus claims and promotional offers
• Provide customer support and respond to inquiries

3.2 Legal and Regulatory Compliance

• Comply with Know Your Customer (KYC) and anti-money laundering (AML) regulations
• Verify that you are at least 21 years of age and legally eligible to gamble
• Prevent underage gambling and self-excluded individuals from accessing the Platform
• Detect and prevent fraud, cheating, collusion, money laundering, and other illegal activities
• Respond to legal requests, court orders, and regulatory inquiries
• Maintain records required by gaming licenses and regulatory authorities
• Report suspicious transactions as required by law

3.3 Security and Fraud Prevention

• Monitor account activity for unusual patterns or suspicious behavior
• Detect and prevent unauthorized account access, multi-accounting, and bonus abuse
• Protect against hacking, phishing, and other cyber threats
• Investigate potential terms violations and rule breaches
• Verify the authenticity of documents submitted for KYC verification

3.4 Platform Improvement and Analytics

• Analyze usage patterns to improve website functionality and user experience
• Test new features and optimize existing features
• Understand player preferences to enhance game offerings
• Generate anonymized and aggregated statistics for internal business analysis
• Troubleshoot technical issues and improve system performance

3.5 Marketing and Communications

• Send promotional offers, bonuses, and special event announcements (with your consent)
• Provide personalized recommendations based on your gaming preferences
• Send important account notifications, security alerts, and service updates
• Conduct customer satisfaction surveys and request feedback
• You may opt out of marketing communications at any time by contacting [email protected] or using unsubscribe links in emails

3.6 Responsible Gaming

• Monitor betting patterns that may indicate problem gambling behavior
• Enforce deposit limits, loss limits, and session time limits you set
• Process self-exclusion and cool-off period requests
• Provide support and resources for responsible gaming

4. Legal Basis for Processing Your Data

bok138 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to provide betting and gaming services to you as outlined in our Terms and Conditions
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC/AML requirements, age verification, gaming license conditions, and tax reporting obligations
• Legitimate Interests: Processing is necessary for our legitimate business interests in preventing fraud, ensuring platform security, improving our services, and conducting business analytics, provided these interests do not override your fundamental rights and freedoms
• Consent: For certain activities like marketing communications and optional data collection, we rely on your explicit consent, which you may withdraw at any time

5. How We Share Your Information

bok138 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals
• Identity Verification Services: Third-party KYC and age verification providers to confirm your identity and compliance with legal requirements
• Game Providers: Licensed software providers who supply casino games, slots, live dealer games, and specialty games to the Platform
• Customer Support Tools: Third-party platforms for live chat, email management, and ticketing systems
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers that host our Platform and store data
• Analytics Providers: Services that help us understand usage patterns and improve the Platform (data is typically anonymized)

5.2 Legal and Regulatory Authorities

• Gaming regulators and licensing authorities that oversee our operations
• Law enforcement agencies in response to legal requests, subpoenas, or court orders
• Tax authorities as required by Indonesian tax law
• Financial intelligence units for suspicious transaction reporting (AML compliance)

5.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. You will be notified of any such change via email or prominent notice on the Platform.

5.4 With Your Consent

We may share your information with other third parties when you provide explicit consent for specific purposes not covered by this Privacy Policy.

6. Data Security Measures

bok138 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

6.1 Technical Security

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS encryption
• Data Encryption at Rest: Sensitive personal data and financial information stored in our databases is encrypted using AES-256 encryption
• Secure Payment Processing: Payment data is processed through PCI DSS compliant payment gateways; bok138 does not store full payment card details on our servers
• Firewalls and Intrusion Detection: Multi-layered firewall protection and real-time intrusion detection systems monitor and block suspicious activity
• Regular Security Audits: Independent third-party security firms conduct regular penetration testing and vulnerability assessments
• Secure Authentication: Password requirements include minimum length, complexity, and hashing using bcrypt or similar algorithms

6.2 Organizational Security

• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal data on a need-to-know basis
• Employee Training: All employees with access to personal data receive regular privacy and security training
• Confidentiality Agreements: Employees and contractors are bound by confidentiality agreements and non-disclosure obligations
• Data Minimization: We collect and retain only the personal data necessary for the purposes outlined in this Privacy Policy
• Incident Response Plan: We maintain a comprehensive data breach response plan to quickly detect, contain, and remediate security incidents

6.3 Your Role in Security

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication if available
• Log out after each session, especially on shared devices
• Do not access your account over unsecured public Wi-Fi networks
• Report any suspicious activity or unauthorized access immediately to [email protected]
• Be cautious of phishing emails or fake websites impersonating bok138

7. Data Retention

bok138 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.

Data Category	Retention Period
Account Information (name, email, phone)	Duration of account + 7 years after closure
Transaction Records (deposits, withdrawals, bets)	7 years (regulatory requirement)
Identity Verification Documents (KTP, passport)	7 years after account closure (AML compliance)
Customer Support Communications	3 years
Marketing Communications (if consent given)	Until consent withdrawn + 1 year
Usage Data and Analytics	Anonymized after 2 years; retained indefinitely

After the retention period expires, we securely delete or anonymize your personal data. Anonymized data (data that can no longer identify you) may be retained indefinitely for statistical and business analysis purposes.

8. Cookies and Tracking Technologies

bok138 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They help websites remember your preferences, maintain login sessions, and collect usage data.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly (e.g., maintaining your login session, processing transactions). These cannot be disabled without impairing site functionality.
• Performance Cookies: Collect anonymous data on how visitors use the Platform (e.g., pages visited, time spent). Used to improve site performance and user experience.
• Functionality Cookies: Remember your preferences (e.g., language selection, display settings) to provide a more personalized experience.
• Marketing Cookies: Track your browsing activity to deliver relevant promotional offers and measure campaign effectiveness. These cookies are only set with your consent.

8.3 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to block cookies or receive notifications when cookies are being set. However, disabling essential cookies may impair your ability to use certain features of the Platform. Instructions for managing cookies in popular browsers:

• Google Chrome: Settings > Privacy and Security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Cookies and website data
• Microsoft Edge: Settings > Privacy, search, and services > Cookies and site permissions

9. Your Privacy Rights

You have certain rights regarding your personal information. To exercise any of these rights, contact us at [email protected] with your account details and a description of your request.

9.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings, or contact support for assistance.

9.3 Right to Deletion

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. However, we may retain certain data to comply with legal obligations (e.g., transaction records for 7 years as required by law).

9.4 Right to Restrict Processing

You have the right to request that we limit how we use your personal information in certain situations, such as while we verify the accuracy of disputed data.

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider where technically feasible.

9.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications at any time.

9.7 Right to Withdraw Consent

Where we rely on your consent to process personal data (e.g., marketing communications), you have the right to withdraw consent at any time. This does not affect the lawfulness of processing before consent was withdrawn.

9.8 Response Timeline

We will respond to all rights requests within 30 days. If we need additional time (up to 60 days in complex cases), we will notify you and explain the reason for the delay.

10. International Data Transfers

bok138 primarily serves Indonesian players, but our Platform infrastructure may involve data transfers to countries outside Indonesia. When we transfer your personal data internationally, we ensure appropriate safeguards are in place:

• Data processing agreements with third-party providers that include standard contractual clauses approved by data protection authorities
• Selection of service providers located in jurisdictions with adequate data protection laws
• Implementation of additional technical and organizational security measures for international transfers

By using bok138, you acknowledge and consent to such international data transfers as necessary to provide our services.

11. Children's Privacy

bok138 strictly prohibits underage gambling. Our services are available only to individuals who are at least 21 years of age. We do not knowingly collect personal information from anyone under 21. If we become aware that we have inadvertently collected data from someone under 21, we will immediately delete that information and permanently close the account. If you believe we have collected information from an underage individual, please contact us immediately at [email protected].

12. Third-Party Websites

The bok138 Platform may contain links to third-party websites, such as game providers or payment processors. This Privacy Policy applies only to bok138. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

bok138 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. The "Last Updated" date at the top of this document indicates when the Privacy Policy was most recently revised. Material changes will be communicated via email or prominent notice on the Platform. Your continued use of bok138 after changes are posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

14. Contact Us and Data Protection Officer

If you have questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact us:

• Email: [email protected] (mark subject line "Privacy Inquiry")
• Live Chat: Available 24/7 on the website
• WhatsApp: +62 812-3456-7890 (text support, 08:00-23:00 WIB)

For data protection and privacy-specific concerns, you may also contact our Data Protection Officer at [email protected]. We will investigate your concern and respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.