andara138Privacy Policy
This page describes what we collect when you use andara138 and how we keep that data protected. We take your privacy seriously—your personal information is encrypted, stored securely, and shared only with payment processors and regulators when legally required. We do not sell your data to marketers or use it for purposes unrelated to your account and bets.
When you open an account at andara138, you provide us with your name, national ID number, email, phone number, date of birth, and address. We also collect information about your betting activity—which matches you view, which bets you place, your win-loss history, and your withdrawal patterns. This data helps us verify your identity, process your payments via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, detect fraud, and improve your experience on our platform.
Our privacy practices comply with Indonesian data protection standards. You have rights over your data—you can request a copy of what we hold, correct inaccurate information, or ask us to delete your account. This policy outlines those rights and explains our practices in plain language.
What Data We Collect on andara138
We collect several categories of information when you use andara138. First, we collect identity data: your full legal name, national ID number (KTP / SIM / passport), date of birth, and residential address. We request a photograph of your ID and a recent selfie to verify that the person opening the account is you.
Second, we collect contact information: email address and phone number. We use these to send you account notifications, deposit confirmations, withdrawal updates, and security alerts. You can manage email preferences in your account settings.
Third, we collect activity data: which football matches, Liga 1 fixtures, Piala Indonesia, Piala AFF, Champions League, or other markets you view; which bets you place and the amounts; your win-loss records; your account balance over time; and your login history. We also log your device type, browser, and IP address to detect account takeovers and fraud.
Fourth, we collect payment data: details of your deposits and withdrawals, including which payment method you used (DANA, e-wallet, mobile banking, etc.), transaction amounts, and timestamps. We do not store your full bank account number or payment card details—we store only a tokenised reference that allows us to process future transactions securely.
How We Use Your Data on andara138
We use your data for six main purposes. First, we verify your identity and prevent fraud. Your ID, selfie, and address proof confirm you are who you claim to be. Your betting patterns help us detect suspicious activity—unusual bet sizes, rapid deposits and withdrawals, or activity from multiple IP addresses—that may indicate account takeover or money-laundering.
Second, we process your payments. Your payment method information allows us to accept deposits and send withdrawals. Our payment processors (the banks and wallet providers behind local payment, online payment, e-wallet, etc.) receive only the minimal data needed to complete each transaction.
Third, we settle your bets. We use your betting records to determine whether your bets won or lost and credit or deduct your account balance accordingly. We keep this history so you can review your account activity anytime.
Fourth, we comply with law. We may be required by Indonesian authorities to provide customer information, transaction records, or account details to prevent money-laundering or investigate financial crimes. We will not disclose more than legally required.
Fifth, we improve andara138. We analyse betting patterns (in aggregate, not individually) to understand which football leagues, live-dealer games, or slots are most popular, so we can improve our offerings and add features users want.
Sixth, we communicate with you. We send emails about deposit confirmations, withdrawal status, account security alerts, and new features. You can opt out of marketing emails but cannot opt out of transactional emails (confirmations, alerts) without closing your account.
We use your data only for account management, fraud prevention, and regulatory compliance—never for marketing to third parties or tracking outside andara138.
Who We Share Your Data With
We share your data with three categories of recipients. First, we share with payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment operators, and banks (online payment, e-wallet, mobile banking, local payment) when you deposit or withdraw. These providers receive only the data necessary to process your transaction.
Second, we share with law enforcement and regulators when legally required. If Indonesian authorities request your account information as part of a money-laundering investigation or financial crime inquiry, we will comply with a lawful court order or regulatory demand.
Third, we may share with service providers who help us operate andara138—for example, cloud hosting providers who store our servers, cybersecurity firms who test our systems for vulnerabilities, or data-backup companies who help us recover from system failures. These service providers are bound by confidentiality agreements and may not use your data for any other purpose.
We do not sell your data to advertisers, marketing firms, or data brokers. We do not share your email, phone, or betting history with any third party for commercial purposes.
Data Storage and Security on andara138
We encrypt all data in transit using TLS 1.2+. When you log in or submit sensitive information (ID photos, payment details), that data is encrypted before it leaves your device and decrypted only on our secure servers.
Our servers may be located outside Indonesia—for example, in data centres in Singapore or Europe. Regardless of physical location, we apply the same encryption and access controls to protect your data. Your data is not accessible to anyone without encryption keys, which are stored separately and accessible only to our security team.
We retain your data for as long as you maintain your account, plus seven years after account closure for regulatory compliance (Indonesian anti-money-laundering rules require this). After seven years, we securely delete your personal data. You can request early deletion by contacting our support team, though we may retain anonymised or aggregated data (e.g., "number of football bets placed in Jakarta" without names) for statistical purposes.
Your password is hashed using industry-standard algorithms—we never store it in plain text. If you forget your password, you reset it via email link; we do not send you your password because even we cannot read it from our systems.
Your Rights Regarding Your Data on andara138
You have the following rights over your data on andara138:
- Right to access: You can request a copy of all personal data we hold about you. Contact our support team and we'll provide a downloadable file within 14 days.
- Right to correction: If any of your data is inaccurate (e.g., wrong address), you can update it in your account settings or request our help.
- Right to deletion: You can request deletion of your account and all associated data. We'll delete it within 30 days, except data we're legally required to retain.
- Right to data portability: You can request your data in a standard format (e.g., CSV) so you can transfer it to another service.
- Right to object: You can object to marketing emails or certain uses of your data. We'll honour your request within seven days.
Cookies and Tracking on andara138
We use cookies on andara138 to keep you logged in, remember your preferences, and track your session for security. These are essential cookies—without them, you couldn't stay logged in or place bets. We do not use tracking cookies to follow you across other websites.
Our mobile app does not use cookies in the traditional sense but stores session tokens on your device to keep you logged in. You can log out anytime from your account settings, which deletes the session token.
We do not use third-party analytics cookies that track your behaviour for marketing purposes. We use only first-party analytics to understand which pages and features are most used on andara138, so we can improve them.
Data Protection During Major Events on andara138
During high-volume betting periods—Liga 1 season, Piala Indonesia, Piala AFF tournaments, or Champions League finals—we process more deposits and withdrawals than usual. During these periods, your data may be accessed by more team members to process payments quickly. We maintain the same encryption and access controls regardless of volume.
If you're concerned about data privacy during holidays like Idul Fitri, Idul Adha, or Imlek when our support team operates on reduced schedules, you can contact us via email and we'll respond within one business day after the holiday ends.
International Data Transfers
If our servers are located outside Indonesia, your data may cross international borders. We ensure that any international transfer complies with data protection standards and that all data remains encrypted and protected regardless of server location.
Contacting Us About Your Data
If you have questions about how we handle your data, wish to exercise your privacy rights, or want to report a data breach, contact our support team:
- Email: [email protected] (for formal data requests)
- In-app chat: available during business hours
We will respond to data access requests within 14 days and to deletion requests within 30 days. If you believe we've mishandled your data, you also have the right to file a complaint with Indonesian data protection authorities.
Changes to This Privacy Policy
We may update this policy from time to time. If we make material changes—for example, if we begin sharing data with new third parties or change how long we retain data—we'll notify you via email and in-app notification at least 14 days before the change takes effect. Your continued use of andara138 after that date constitutes acceptance. If you do not accept the changes, you can close your account and request deletion of your data.