Reference

How we protect your account information

Your deposits through DANA, OVO, GoPay and QRIS, along with your account details, sit behind encryption we keep current and audited.

Encrypted account accessLocal payment data securityIndonesia-region compliance
Explore Lobby Read FAQ
ombak138 How we protect your account information
CONTACT US ANYTIME

Reach our privacy team

Questions about what we hold on file, how to correct your details, or requests to review your data?

In-App Chat Open the menu in your ombak138 lobby, select Support, then Privacy Request. Our team replies within 24 hours on weekdays and flags urgent matters immediately.
Email Support Send a message to our privacy inbox with your account email and a description of your request. We confirm receipt within one business day and provide a case reference number.
Phone Line Call our Indonesia support hotline during office hours. Have your account number and registered phone number ready so we can pull your file securely.
HOW WE HANDLE YOUR TRUST

Account security and data rights

Encryption protects every transfer between your device and our servers, whether you deposit via DANA on mobile or switch to live tables on desktop.

Encryption Standard

All data in transit uses TLS 1.3 or higher. Stored payment information stays isolated in a separate secure vault that our live-casino team cannot access directly.

Cookie & Tracking

We use session cookies to keep you logged in and analytics cookies to see which games players open first. You can disable third-party cookies in your browser without breaking your account.

Account Recovery

Forgot your password? We verify your phone number or registered email, send a one-time reset link, and require a new password. Two-factor codes are never reused.

Data Deletion Request

You can ask us to delete non-transaction data — but we keep your withdrawal and deposit records for seven years to meet regulatory obligation where local law permits.

Third-Party Sharing

We share deposit and withdrawal data with your payment provider (DANA, OVO, GoPay or QRIS issuer) only to complete your transaction. No cross-selling or data brokers.

Breach Response

If we detect unauthorised access to your account, we lock it immediately, contact you via your registered phone and email, and guide you through password reset and account review.

Your data rights explained

Read answers to questions we hear most from players about how we use your information, how long we keep it, and what rights you have to access or change it.

Your account login credentials are deactivated immediately, but we retain transaction records, deposit proof and withdrawal history for seven years to comply with local regulatory requirement. You can request a data export before closing. Once closed, you cannot reopen that account with the same email or phone number for 90 days.

Yes. Log into your account, go to Settings > Personal Details, and change email or phone. Name updates require identity verification — upload an updated ID photo, and our team confirms the change within 48 hours. Your account stays active during verification.

We do not store your full payment method details. When you deposit, we send an encrypted payment token to your provider (DANA, OVO, GoPay or QRIS), which processes the transaction. We keep only the last four digits and transaction reference for your withdrawal history.

Only our support team (when you contact us), our fraud team (when verifying a withdrawal), and our compliance officer (for regulatory audit) can access your full file. Game-studio partners see only that you played their game, not your account details or deposit amounts.

We retain login records for 12 months and device fingerprints (device type, browser, IP location) for 90 days. This helps us spot suspicious activity and help you recognise devices if someone tries to access your account without permission.

Submit a Data Subject Request through in-app chat or email. We compile your account details, transaction history, payment records, and communication logs into a secure file and send it to your registered email within 14 days. No fee charged.

No. We do not sell, rent or trade your personal data. We share information only with your payment provider to complete deposits and withdrawals, and with local authorities where local law requires disclosure of account activity.

Related Pages

ombak138 Indonesia FAQ ombak138 Casino Register ombak138 Login