Data Protection
boy138 is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data when you use our platform.
Your Privacy Matters
boy138 operates under strict data protection principles. We collect only the personal information necessary to provide you with a secure, compliant, and personalized betting experience. We do not sell, lease, or share your data with third-party marketers. All data is protected with industry-standard encryption and stored on secure servers.
This Privacy Policy (the "Policy") describes how boy138 (the "Platform", "Company", "we", "us", or "our") collects, uses, processes, stores, and protects the personal data of users (the "User", "Player", or "you") who access and use our online betting and casino platform located at https://boy138.cam and associated domains.
By registering for an Account on boy138, accessing our website, or using any of our services, you acknowledge that you have read, understood, and agree to the collection and use of your personal information as described in this Policy. If you do not agree with the terms of this Policy, you must immediately cease using the Platform and refrain from creating an Account.
boy138 operates as an internationally licensed offshore betting platform serving Indonesian players. This Policy is designed to comply with international data protection standards and best practices. Where local Indonesian data protection regulations apply, boy138 will make reasonable efforts to comply with such regulations to the extent they are compatible with our international licensing obligations.
The data controller responsible for your personal information is boy138. If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, you may contact us through the following channels:
Our Indonesian-speaking customer support team is available around the clock to assist with privacy inquiries, data access requests, and account-related concerns.
boy138 collects several categories of personal data to provide, operate, and improve our services. The information we collect falls into the following categories:
When you create an Account with boy138, you are required to provide the following personal information:
To comply with anti-money laundering (AML) regulations, prevent fraud, and ensure Account security, boy138 requires all Players to complete a Know Your Customer (KYC) verification process before processing their first withdrawal. During KYC verification, you will be asked to upload scanned or photographed copies of the following documents:
All KYC documents are securely stored and accessed only by authorized boy138 compliance personnel for verification purposes.
When you make a deposit or request a withdrawal, boy138 collects payment and transaction information, including:
boy138 does not store full credit or debit card numbers, CVV codes, or card PINs. All payment processing is conducted through secure, PCI-DSS-compliant third-party payment gateways.
boy138 collects data related to your use of our gaming products and services, including:
This data is used to personalize your experience, recommend relevant games and promotions, detect suspicious activity, and comply with responsible gaming obligations.
When you access boy138, we automatically collect technical information about your device and how you interact with the Platform, including:
When you contact boy138 customer support via live chat, email, WhatsApp, or in-app messaging, we collect and store the content of your communications, including:
These records are retained to provide quality customer service, resolve disputes, and improve our support processes.
boy138 uses the personal data we collect for the following purposes:
You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in promotional emails, adjusting your notification settings in your Account dashboard, or contacting customer support. Opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, or important account alerts.
For users located in the European Union or European Economic Area, boy138 processes personal data on the following legal bases:
boy138 does not sell, lease, or rent your personal information to third parties for their own marketing purposes. However, we may share your data with the following categories of third parties under strict confidentiality and security obligations:
boy138 may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or government authorities when required by law or when we have a good-faith belief that such disclosure is necessary to:
In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy involving boy138, your personal information may be transferred to the acquiring or successor entity. You will be notified via email and/or a prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.
boy138 implements industry-standard technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:
While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. boy138 cannot guarantee absolute security, and you use the Platform at your own risk. You are responsible for maintaining the confidentiality of your Account password and for any activity that occurs under your Account.
boy138 retains your personal data for as long as necessary to fulfill the purposes outlined in this Policy and to comply with legal, regulatory, and contractual obligations. Specific retention periods include:
| Data Category | Retention Period |
|---|---|
| Account registration information | Duration of Account + 7 years after closure (AML compliance) |
| KYC verification documents | Duration of Account + 7 years after closure (AML compliance) |
| Payment and transaction records | 7 years from date of transaction (financial record-keeping requirements) |
| Betting and gaming activity logs | 5 years from date of activity (regulatory compliance and dispute resolution) |
| Marketing communications (if consent withdrawn) | Deleted within 30 days of opt-out request |
| Customer support chat transcripts | 3 years from date of interaction (quality assurance and training) |
| Technical logs (IP address, device data) | 2 years from date of collection (security monitoring and fraud prevention) |
After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with you as an individual.
Depending on your jurisdiction, you may have the following rights regarding your personal data. boy138 will honor these rights to the extent required by applicable law:
You have the right to request a copy of the personal data boy138 holds about you. To exercise this right, contact our support team at [email protected] with the subject line "Data Access Request". We will provide a copy of your data in a structured, commonly used, and machine-readable format within 30 days of receiving your request.
If you believe any personal information we hold about you is inaccurate or incomplete, you may request that we correct or update it. You can update most Account information directly via your Account dashboard. For changes to sensitive information (name, date of birth), contact customer support with supporting documentation.
You may request that boy138 delete your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. However, this right is not absolute. We may be required to retain certain data to comply with legal obligations (e.g., AML record-keeping requirements) or to establish, exercise, or defend legal claims.
You may request that boy138 restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data or when you have objected to processing based on legitimate interests. During the restriction period, we may store your data but not use it for other purposes without your consent.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider. This right applies only to data you provided to boy138 based on consent or contract.
You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests. If you object, boy138 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests or when processing is necessary for legal claims.
Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
If you believe boy138 has violated your data protection rights, you have the right to lodge a complaint with your local data protection authority. In Indonesia, you may contact Kominfo (Ministry of Communication and Information Technology). For EU/EEA residents, you may contact your national supervisory authority.
boy138 uses cookies, web beacons, and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that allow us to recognize you on subsequent visits, remember your preferences, and analyze site usage.
Most web browsers allow you to control cookies through browser settings. You can set your browser to block all cookies, accept only first-party cookies, or delete cookies after each session. However, blocking essential cookies may prevent you from using certain features of boy138. For more information on managing cookies, consult your browser's help documentation.
The boy138 platform may contain links to third-party websites, such as game providers, payment processors, or sports data feeds. boy138 is not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party services you access through our Platform. This Privacy Policy applies solely to information collected by boy138.
boy138 is strictly intended for adults aged 21 years and older. We do not knowingly collect, use, or store personal data from individuals under 21. If we become aware that an Account has been created by a person under 21, we will immediately close the Account, delete all associated data, and return any deposited funds. If you believe a minor has provided personal information to boy138, please contact us immediately at [email protected].
boy138 operates as an internationally licensed platform. Your personal data may be transferred to, stored, and processed in countries outside your country of residence, including jurisdictions that may not offer the same level of data protection as Indonesia. When we transfer data internationally, we implement appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy and applicable laws. These safeguards may include:
boy138 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:
Your continued use of boy138 after the updated Policy takes effect constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how we protect your data.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact the boy138 Data Protection Team:
We aim to respond to all privacy inquiries within 48 hours during business days and within 72 hours during Indonesian public holidays (including Idul Fitri, Ramadhan, Nyepi, and Indonesian Independence Day).
Your Data, Your Control
boy138 believes that you should have control over your personal information. If you have any concerns about how we handle your data, or if you wish to exercise any of your data protection rights (access, rectification, erasure, portability, objection), please reach out to us. We are here to help and committed to transparency in all our data practices.
Last Updated: January 2026
Data Protection Principles
boy138 adheres to strict data protection principles designed to safeguard your personal information and give you control over how it is used.
Every data transmission between your device and boy138 servers is encrypted using industry-standard SSL/TLS protocols. Your personal and financial information is never transmitted in plain text.
boy138 does not sell, lease, or rent your personal data to third-party marketers or data brokers. Your information is used solely to provide you with betting and casino services.
Access to your personal data is restricted to authorized boy138 personnel who require it to perform their job functions. All staff members are bound by confidentiality agreements and receive data protection training.
When the legal retention period expires, your data is securely deleted or anonymized using industry-standard methods to ensure it cannot be recovered or linked back to you.
boy138 conducts mandatory identity verification (KYC) to prevent fraud, underage gambling, and money laundering. Your documents are reviewed by trained compliance officers and stored securely.
boy138 provides clear, readable privacy documentation. You always know what data we collect, why we collect it, how we use it, and who we share it with. No hidden clauses, no fine print traps.
If you have any concerns about how boy138 handles your personal information or wish to exercise your data protection rights, our support team is here to help.
SSL Encrypted | Internationally Licensed | 21+ Only | Provably Fair