flexi138 Casino & Sportsbook Data Care

This page describes what we collect when you use flexi138 and how we keep that data protected. We treat your personal information as a core part of account security and regulatory compliance.

When you open an account, deposit funds, verify your identity, or use our live-dealer tables, slots, sportsbook, or esports markets, we collect and store data. We explain below what data we gather, where it sits, who can access it, and how long we keep it. We also outline your rights as a flexi138 account holder and how to contact us with privacy concerns.

Our services are available only where local law permits. This privacy policy complements our Terms & Conditionsboth documents are binding when you use our platform.

What data we collect at flexi138

We collect data at multiple points. During account registration, we ask for your email address, a secure password, and your full legal name. We do not publish or share your password; we hash and encrypt it on our servers.

Before your first withdrawal, we require identity verification. We collect your government-issued ID number (such as KTP), date of birth, residential address, and phone number. We may also request proof of address (utility bill, bank statement) to confirm your location. During this Know Your Customer (KYC) process, we may ask for additional documents or clarifications to ensure compliance with anti-money-laundering rules.

Account data: Email, password hash, username, language preference, two-factor authentication status.
KYC data: ID number, date of birth, address, phone number, proof-of-address scans, verification status.
Payment data: Deposit and withdrawal history, payment method tokens (not full card / account details), transaction amounts and timestamps.
Activity data: Live-table sessions, game bets, slots play, sportsbook selections, esports market participation, login times, device type.

When you use our platform, we log your IP address, browser type, device model, operating system, and approximate location (inferred from IP). We use this data to detect fraud, enforce account security, and comply with jurisdiction restrictions. We also keep records of all transactions—deposits, withdrawals, game settlements—with amounts, methods, and timestamps.

How we use your data at flexi138

We use personal data for core operational purposes: account creation, login verification, payment processing, KYC compliance, dispute resolution, and fraud detection. We do not sell your data to third parties for marketing. We do not use your data to build profiles for sale to advertisers or data brokers.

We may share data with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet operators, mobile banking, local payment, online payment, e-wallet) to enable deposits and withdrawals. These processors are bound by their own privacy policies and contractual confidentiality obligations. We may also disclose data to government authorities, regulators, or law-enforcement agencies if legally required.

We encrypt sensitive data, limit access to authorised staff, and keep your account ledger auditable only to you.

flexi138 data team

Our flexi138 data storage and location

We store account data on encrypted servers. Our servers may be located outside your jurisdiction; data transmission may cross international borders. By using flexi138, you acknowledge and accept this data transfer. We apply industry-standard encryption (TLS for transmission, AES for storage) to protect data while in transit and at rest.

We keep personal data for as long as your account is active. If you close your account, we retain data for seven years to comply with anti-money-laundering and tax record-keeping requirements, unless you request deletion and we have no legal obligation to retain. After the retention period, we delete or anonymise your data.

Our flexi138 cookies and tracking

We use cookies to maintain your session, remember language preference, and track user behaviour on our platform. Session cookies expire when you log out. Preference cookies persist for one year. We do not use third-party cookies or analytics trackers that collect data across unrelated websites.

You may disable cookies in your browser settings, but doing so will prevent login and some platform features from functioning. We do not track you across external websites or sell tracking data to ad networks.

Your rights on flexi138

You have the right to access your personal data. You can view your account profile, transaction history, and KYC documents through the account dashboard. You have the right to correct inaccurate data; you can update your email, phone number, and address through account settings. For changes to your ID number or date of birth, contact our support team.

You have the right to request deletion of your personal data, subject to legal retention requirements. If you request deletion and we have no legal obligation to retain your data, we will delete or anonymise it within 30 days. You have the right to data portability; you can request that we provide your account transaction history in a standard format.

Contact our support team with your account email and request type (access, correction, deletion, or portability).
We verify your identity and account status before responding to any data request.
We respond within 30 days with your requested data or confirmation of action taken.
Deletion requests are subject to legal retention obligations; we notify you of any data we must retain by law.

Our flexi138 local context and regional considerations

Our platform serves users across different regions. Users in Jakarta, Surabaya, Bandung, Medan, and Semarang may have different data protection rights depending on local law. We comply with applicable privacy regulations in supported jurisdictions. If you are located in a jurisdiction with specific data protection laws (such as GDPR-equivalent rules), we apply those protections to your account.

During high-traffic periods such as Liga 1 finals, Piala AFF, or holidays like Idul Fitri, Idul Adha, Imlek, and Nyepi, our data-processing systems may experience slightly slower response times due to volume. This does not affect the security of your data; it may affect response times to data-access requests. We aim to respond to all requests within 30 days but may extend that timeline if high volume occurs during these periods.

Our flexi138 general data practices

We do not use automated decision-making (such as algorithms) to determine eligibility, account limits, or withdrawal approval. All account decisions are subject to human review by our compliance team. We do not profile users based on behaviour or create shadow profiles for internal scoring.

We conduct periodic security audits and penetration testing to identify and remediate vulnerabilities. We maintain incident-response procedures; if a data breach occurs, we notify affected users and relevant authorities as required by law within 48 hours of discovery.

We do not use your data for direct marketing without your consent. We may send account notifications (login alerts, transaction confirmations, withdrawal status) because these are essential to account security. We do not send promotional emails, newsletters, or marketing messages unless you opt in through your account preferences.

We reserve the right to amend this privacy policy at any time. Changes will be posted on this page, and we will notify active users via email if material changes occur. Your continued use of flexi138 after changes take effect constitutes acceptance of the updated policy.

Legal and Jurisdiction Information

Service availability

flexi138 provides online gaming and sportsbook services only in jurisdictions where such activities are permitted under applicable local law. We do not target, market to, or knowingly serve users in jurisdictions where online gaming is prohibited or restricted. Service availability depends entirely on compliance with local regulations in each territory. We maintain geolocation checks and payment-processor controls to enforce jurisdiction restrictions. Users in unsupported regions should not attempt to create an account; doing so may violate local law and may result in account termination and fund forfeiture. We do not represent that our services are legal everywhere, and we make no claims about legal status in specific countries or territories. The legality of online gaming varies widely across jurisdictions. Users remain solely responsible for verifying whether access and use are permitted in their location. Payment processors and banking partners also enforce their own compliance checks, which may further restrict service availability. We regularly review and update our jurisdiction policies to reflect changes in international gaming regulations. If you are accessing our services from a region where online gaming is prohibited or restricted, you do so at your own legal risk, and we disclaim all liability for legal consequences you may face. Our terms of service explicitly reserve the right to suspend or terminate service in any jurisdiction where legal, regulatory, or commercial circumstances require such action.

Account eligibility

Account creation and use of flexi138 are subject to eligibility requirements established by applicable law in your jurisdiction. While we do not display age-restriction badges or account controls tooling in our policy documents, users must comply with the minimum age and legal eligibility criteria set by the laws of their location. Most jurisdictions that permit online gaming impose a minimum age requirement, commonly 21 years or the age of legal adulthood in that territory. Users must truthfully represent their age and identity during account registration. Providing false information about age, identity, or eligibility constitutes a material breach of our terms and may result in immediate account suspension, termination, and fund forfeiture. We employ automated age-verification tools and manual account review to prevent underage access, but we rely partly on users' honest representation. We reserve the right to request additional documentation or third-party identity verification at any time. If you discover that you are ineligible to use flexi138 under your local law, you must immediately contact our support team and cease use of your account. Continued use by an ineligible user may expose you to legal liability, and we disclaim all responsibility for such violations. Different jurisdictions have different eligibility standards; you are solely responsible for confirming that you meet all applicable requirements before opening an account.

Local-law responsibility

Users of flexi138 are solely and exclusively responsible for understanding and complying with the laws of their own jurisdiction. Online gaming, casino play, sportsbook betting, and related activities are subject to varying regulations across countries, provinces, states, and local authorities. Some jurisdictions permit these activities under specific licensing frameworks; others prohibit them entirely. flexi138 does not provide legal advice, and our use of terms like "available in supported jurisdictions" does not constitute confirmation that our services are legal in your location. You must independently verify, through your own research or consultation with a qualified attorney, whether use of flexi138 complies with the laws applicable in your territory. The fact that you can technically access our services does not mean it is legal for you to use them; geolocation checks and account verification are enforcement tools, not legal authorisation. You assume all legal risk and responsibility associated with your access to and use of flexi138. If local law changes or if you relocate to a jurisdiction where online gaming is prohibited, you must immediately cease use of your account. Penalties for illegal gaming, violation of local regulations, and any other legal consequences are the sole responsibility of the user and are enforced by local authorities, not by flexi138. We reserve the right to suspend or terminate your account without liability if we determine, in our sole discretion, that your jurisdiction of access is not supported.

Data and privacy scope

flexi138 collects personal data necessary to operate accounts, process deposits and withdrawals, and comply with legal, anti-money-laundering (AML), and know-your-customer (KYC) requirements. Data collected includes your name, date of birth, government-issued ID number (such as KTP), residential address, phone number, email address, and banking or payment-method information. This data is collected during account registration and is mandatory before your first withdrawal. KYC verification is a legal requirement in most jurisdictions and is conducted to confirm your identity, prevent fraud, and comply with international AML standards. The data you provide is encrypted and stored on secure servers. It is not shared with third parties except as required by law (such as regulatory requests or law-enforcement inquiries) or as necessary to process payments (payment gateways, banking partners). Our standard security practices practices and data-handling policies are detailed in our Privacy Policywhich you should review carefully before creating an account. We retain your personal data for as long as your account is active and for a retention period thereafter as required by law for compliance, dispute resolution, and record-keeping. If you close your account, you may request data deletion, subject to applicable legal retention requirements. Data breaches or unauthorised access are addressed according to our incident-response procedures, and you will be notified of any security events that affect your personal information, as required by applicable privacy law. You have the right to access, correct, and request deletion of your personal data, subject to legal constraints and our legitimate business needs.

Contact for legal inquiries

If you have privacy questions, data subject requests, or compliance concerns regarding how flexi138 handles your personal data, you can contact our support team through the account Help section or via the contact email listed in our Legal NoticeOur support team handles general privacy inquiries during standard business hours (Monday–Friday, standard Southeast Asian time). Response times for general questions are typically one to two business days. For formal data subject access requests (requests for a copy of your personal data), deletion requests, or other privacy-related requests under applicable law, you can send detailed correspondence to our data protection team. We maintain a formal process for handling Subject Access Requests, deletion requests, data-portability requests, and privacy complaints. All formal privacy requests are logged, reviewed by our data protection team, and responded to according to applicable legal timelines (generally 30 days, extendable to 60 days if complex). We do not provide legal advice regarding your privacy rights; for jurisdiction-specific legal guidance, we recommend consulting a qualified attorney licensed in your territory. If you believe flexi138 is handling your data in violation of applicable privacy law, you should contact your local data protection authority or privacy regulator. Users in unsupported jurisdictions should not contact flexi138 expecting us to confirm data handling compliance; instead, verify the legal status of online gaming in your location through official government channels.