At geo138, the protection of your personal data is a foundational commitment — not an afterthought. This Privacy Policy explains precisely what information we collect, why we collect it, how we use it, and the rights you hold over your own data.
Last Updated: 1 January 2026Six core principles that underpin every data decision geo138 makes — from the moment you register to the moment you close your account.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "geo138" / "we" / "us" / "our" | The online gaming platform operated at https://geo138.cam and all associated services and sub-domains. |
| "Player" / "you" / "your" | Any natural person who has registered a geo138 account, browses the Platform, or contacts our support team. |
| "Personal Data" | Any information that identifies or could reasonably be used to identify a natural person, including name, email address, mobile number, IP address, device identifier, and financial account details. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure, or destruction. |
| "Controller" | The entity that determines the purposes and means of processing Personal Data — in this context, geo138. |
| "Processor" | A third party that processes Personal Data on behalf of geo138 in accordance with our documented instructions. |
| "KYC" | Know Your Customer — the identity, age, and source-of-funds verification process required before withdrawals are processed. |
| "Cookies" | Small text files stored on your device by your web browser when you visit the Platform, used to remember preferences and support platform analytics. |
This Privacy Policy applies to all Personal Data collected by geo138 in connection with the operation of the Platform, including data collected via the website at https://geo138.cam, our live chat support interface, email correspondence, and any other channel through which you interact with our services.
This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy. In the event of any conflict between this Policy and the Terms & Conditions regarding the handling of your personal data, this Privacy Policy shall take precedence.
This Policy is directed primarily at players who are residents of Indonesia, though it applies to all individuals who access the geo138 platform regardless of their location. You must be at least 21 years of age 21+ to register an account and use our services.
geo138 collects the following categories of Personal Data in the course of operating the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, Indonesian National Identity Card (KTP) number or passport number, selfie photograph | During account registration and KYC verification |
| Contact Data | Email address, Indonesian mobile telephone number, city of residence (e.g., Jakarta, Surabaya, Bandung, Bali) | During account registration |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata account numbers), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history in Indonesian Rupiah (Rp) | During deposit/withdrawal processing and KYC verification |
| Technical Data | IP address, device type, browser type and version, operating system, time zone setting, screen resolution, session duration | Automatically when you access the Platform |
| Usage Data | Pages visited, game sessions, betting history, bonus claims, search queries within the Platform | Automatically during Platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | When you contact our support team |
| Marketing Preferences | Opted-in promotional channels, preferred contact times, language preference | Set by you in account settings or during registration |
We collect Personal Data through the following channels:
geo138 processes your Personal Data for the following clearly defined purposes:
geo138 processes your Personal Data on one or more of the following legal bases, depending on the specific purpose of the processing activity:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Account creation and management, transaction processing, KYC verification, customer support, game delivery — all activities necessary to perform the contract between you and geo138. |
| Legitimate Interests | Fraud detection and prevention, platform security monitoring, responsible gaming surveillance, internal analytics for platform improvement. |
| Consent | Marketing communications (email, SMS, in-platform notifications). Consent may be withdrawn at any time via your account settings without affecting the lawfulness of prior processing. |
| Legal Obligation | Retention of transaction records, identity verification documentation, and communications data as required by applicable anti-money laundering and gaming compliance standards. |
geo138 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own marketing purposes. We share Personal Data only in the following limited circumstances:
geo138 retains Personal Data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable legal, regulatory, or compliance obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of account plus 5 years post-closure | Legal obligation (AML / KYC compliance) |
| Financial Transaction Records | 7 years from transaction date | Legal obligation (financial record-keeping standards) |
| KYC Documents | Duration of account plus 5 years post-closure | Legal obligation |
| Support Communications | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Technical and Usage Data | 13 months from collection | Legitimate interests (platform analytics) |
| Marketing Preferences | Until opt-out or account closure | Consent |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.
geo138 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:
geo138 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored in your browser that allow the Platform to recognise your device across sessions, remember your preferences, and gather aggregated analytics data.
The following categories of cookies are used on the geo138 platform:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for the Platform to function — session authentication, security tokens, fraud prevention signals. Cannot be disabled. | Session / up to 24 hours |
| Functional | Remembering your language preference, display settings, and last-visited section of the Platform. | Up to 12 months |
| Analytics | Aggregated, anonymised data on page views, session duration, and feature usage — used to improve the Platform's performance and user experience. | Up to 13 months |
| Marketing / Targeting | Used only where you have opted in to receive personalised promotional communications. Records which promotions you have seen and interacted with. | Up to 90 days |
You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your account. Disabling analytics or marketing cookies will not affect your ability to use geo138's core services.
As a player on the geo138 platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team at the email address provided in Section 15. We will respond to all verified requests within 30 calendar days.
You may request a copy of the Personal Data we hold about you and information about how it is being used.
You may request correction of any inaccurate or incomplete Personal Data held in your account.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
You may request that we limit the processing of your data in certain circumstances, such as while a dispute regarding accuracy is being resolved.
You may request a structured, machine-readable export of the Personal Data you have provided to us directly.
You may object to processing based on our legitimate interests or for direct marketing purposes at any time. Marketing opt-outs take effect immediately.
Please note that some rights are subject to limitations where we have overriding legal obligations — for example, we are required by applicable regulations to retain KYC and transaction records for a minimum period regardless of an erasure request. We will always clearly explain any such limitation when responding to your request.
The geo138 platform is strictly intended for adults aged 21 years and above. 21+ We do not knowingly collect Personal Data from individuals under the age of 21.
If we become aware that Personal Data has been collected from a player who is under 21 years of age, we will immediately suspend the relevant account, void all associated wagers and bonus claims, return any deposited Real Money Funds via the original payment method where possible, and permanently delete the associated Personal Data from our systems within 30 days.
If you are a parent or guardian and believe that a minor in your care has registered a geo138 account, please contact our support team immediately at the email address in Section 15 so that we can take appropriate action without delay.
geo138 operates as an internationally oriented platform. In the course of delivering our services, your Personal Data may be transferred to and processed in countries outside of Indonesia — for example, by our cloud infrastructure providers or certified game studios.
Where such international transfers occur, geo138 takes all reasonable steps to ensure that your Personal Data receives an equivalent level of protection to that described in this Privacy Policy. This includes implementing appropriate contractual safeguards with all third-party Processors who handle your data outside of Indonesia, such as standard data protection clauses and binding data processing agreements that specify permissible uses, security requirements, and deletion obligations.
geo138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Where a material amendment is made — meaning a change that meaningfully affects your rights or our obligations — we will notify registered players via their registered email address and/or a prominent notice on the Platform at least 7 calendar days before the revised Policy takes effect.
The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed of how geo138 handles your personal information. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
For non-material amendments — such as typographical corrections or clarifications that do not affect your substantive rights — the revised Policy may take effect immediately upon publication without prior notice.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 11, or wish to raise a concern about the way geo138 handles your Personal Data, please contact our Data Protection team through the following channel:
Our support team is equipped to assist players from across Indonesia — including Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, Semarang, Makassar, Palembang, and beyond — in understanding and exercising their data protection rights.
Now that you have reviewed our Privacy Policy, explore our full Terms & Conditions, learn about our Responsible Gaming programme, or visit our FAQ for quick answers to common questions.