cuy138 Privacy Policy

This page describes what we collect when you use cuy138 and how we keep that data protected. We take privacy seriously — your personal information is processed only for account verification, payment settlement, regulatory compliance, and service improvement. We do not sell your data to third parties, and we do not use it for purposes beyond those outlined here.

Our privacy practices apply to all players who access cuy138 from supported jurisdictions. If you have questions about how we handle your data, this policy provides transparency on collection, use, storage, retention, and your rights. We are committed to complying with applicable data-protection law in every jurisdiction where we operate.

Please read this policy carefully. By creating a cuy138 account, you acknowledge that you understand and accept our data practices as described below.

What we collect on cuy138

We collect personal data during account registration, Know Your Customer (KYC) verification, and ongoing use of cuy138. Our standard registration process collects your name, email address, phone number, and date of birth. We use this information to set up your account and maintain contact with you.

Before your first withdrawal, we conduct KYC verification, which requires additional data: a scanned government-issued ID (such as KTP or passport), proof of residence (utility bill or bank statement), and sometimes a selfie holding your ID for facial-verification purposes. We collect this data to comply with anti-money-laundering (AML) and counter-terrorism-financing (CTF) obligations, and to prevent fraud.

We also collect technical data such as your IP address, device type, browser information, and timestamp of each login. This data helps us detect fraudulent access, prevent account takeovers, and improve our platform performance.

How we use your data on cuy138

We use your personal data for the following purposes:

• Account administration: We use your email, phone, and name to set up and manage your account, reset passwords, and communicate important account notices.
• Payment processing: We use payment data to process your deposits via mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment and to settle withdrawals to your chosen method.
• KYC and regulatory compliance: We use your ID, proof of residence, and facial verification data to confirm your identity and eligibility, and to comply with AML and CTF regulations.
• Fraud prevention: We use your IP address, device information, and login patterns to detect suspicious activity, prevent account compromise, and protect your balance.
• Game administration: We log your gameplay, wager history, and tournament scores to calculate payouts, settle disputes, and maintain accurate ledgers.
• Service improvement: We analyse aggregate usage data (not linked to individuals) to improve game performance, optimize our platform, and enhance user experience across Jakarta, Surabaya, Bandung, Medan, and Semarang.
• Legal and regulatory: We retain data to comply with applicable law, respond to regulatory requests, and defend against disputes.

We do not use your data for marketing emails or phone calls unless you explicitly opt in. We do not sell your data to third parties such as data brokers, advertisers, or analytics firms outside our operational needs.

Your data belongs to you. We hold it in trust, process it transparently, and protect it according to industry standards.

Data storage and security on cuy138

We store your cuy138 data on secure servers operated by trusted hosting providers. Our servers may be located outside your jurisdiction to ensure redundancy and uptime. We encrypt data in transit using TLS (Transport Layer Security) protocols and at rest using AES-256 encryption. Access to personal data is restricted to cuy138 staff who need it for their job functions, and all staff sign confidentiality agreements.

We conduct regular security audits and penetration testing to identify and fix vulnerabilities. If a data breach occurs, we notify affected users and relevant authorities as required by applicable law, typically within 72 hours of discovery.

We do not guarantee absolute security — no online system is immune to attack. However, we maintain industry-standard practices and respond to incidents according to documented protocols.

How long we keep your data on cuy138

We retain personal data for as long as your cuy138 account is active, plus an additional period required by law. Typically, this means we retain data for 5–7 years after account closure to comply with financial-services and tax regulations. We delete or anonymise data that no longer serves a business or legal purpose.

Gameplay logs and transaction history are retained for the full retention period so you can audit your own activity. We do not delete historical data upon request unless deletion is required by applicable law (e.g. a formal data-subject access request in a jurisdiction with data-protection rights).

Third-party data processors on cuy138

We use third-party service providers to operate cuy138 effectively. These include payment processors (to handle DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet transactions), hosting providers (to store data securely), and compliance vendors (to verify identity and detect fraud). We have data-processing agreements with each third party, requiring them to process data only as instructed by us and to maintain security standards equivalent to our own.

We do not permit third parties to use your data for their own purposes. Payment processors may retain transaction data as required by their regulators, but they do not use your personal information for marketing or other unrelated purposes.

Your rights regarding your data on cuy138

Depending on your jurisdiction, you may have the following rights:

• Right to access: You can request a copy of all personal data we hold about you. We typically provide this within 14 days.
• Right to correction: If your data is inaccurate, you can request that we correct it (e.g. if your registered name is misspelled).
• Right to deletion: In some jurisdictions, you can request deletion of your data, provided this does not conflict with legal retention obligations or an ongoing dispute.
• Right to portability: You can request a machine-readable copy of your data in a standard format.
• Right to restrict processing: You can ask us to limit how we use your data while we investigate a concern you have raised.
• Right to object: You can object to certain uses of your data, such as processing for direct marketing or profiling.

To exercise any of these rights, contact our support team via email or in-app form. We respond within 14–30 days depending on the complexity of your request. We may need to verify your identity before complying with your request.

International data transfers on cuy138

Your data on cuy138 may be transferred to, stored in, and processed in countries outside your own jurisdiction, including countries that may not have data-protection laws equivalent to your own. By using cuy138, you consent to this international transfer. We implement appropriate safeguards (such as standard contractual clauses) to ensure your data is protected during transfer and at rest in any location.

Contact and policy updates on cuy138

If you have questions about our privacy practices or want to exercise your data rights, contact our support team via email or in-app chat. We respond to privacy inquiries within 2–3 business days. For urgent data-protection concerns, mark your inquiry as "Privacy — Urgent" and we will prioritise it.

We may update this privacy policy periodically to reflect operational changes or evolving law. We notify you of material changes by email at least 14 days before they take effect. Your continued use of cuy138 after an update constitutes acceptance of the new policy. If you disagree with a change, you may request account closure and withdrawal of your balance.

This privacy policy is governed by the law of the jurisdiction in which cuy138 is licensed to operate. For inquiries related to a specific jurisdiction's data-protection law, consult local legal counsel.