Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "omg138", "We", "Us", "Our" — the operator of the omg138 Platform at https://omg138.cam.
• "You", "User", "Player" — any natural person who accesses, registers on, or interacts with the omg138 Platform.
• "Platform" — the omg138 website at https://omg138.cam and any associated mobile interfaces or applications.
• "Personal Data" — any information that identifies or can be used to identify you as an individual, including your name, national identification number, bank account details, email address, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" — Know Your Customer: the identity verification process required by omg138 before processing withdrawals or granting full account privileges.
• "Cookies" — small text files stored on your browser or device by the omg138 Platform for session management, analytics, and personalization purposes.
• "Third-Party Service Provider" — any external organization engaged by omg138 to perform functions on its behalf, such as payment processing, fraud detection, or technical infrastructure.

omg138 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, omg138 determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

For all privacy-related inquiries, data access requests, or complaints, please contact us using the details provided in Section 16 of this Policy.

omg138 collects the following categories of Personal Data from users of the Platform:

omg138 collects Personal Data through the following channels and mechanisms:

• Account Registration: Information you provide directly when creating your omg138 account, including your name, date of birth, email address, and Indonesian contact details.
• KYC Verification: Documents you submit to complete identity verification, including copies of your KTP and any supplementary address or financial documentation requested.
• Deposits and Withdrawals: Financial information provided or automatically captured during transaction processing, including bank account details and transaction confirmation data received from payment processors.
• Platform Interaction: Technical and usage data automatically captured when you browse, log in, or interact with the omg138 Platform, including via cookies, session logs, and server records.
• Customer Support: Any information you voluntarily share when contacting the omg138 support team via live chat, email, or WhatsApp.
• Third-Party Sources: Identity verification and fraud-screening data received from licensed KYC service providers and financial institution partners, used solely to verify the accuracy of the information you have provided.

omg138 processes your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining, and administering your omg138 account, including processing your registration, managing your account balance, and applying responsible gaming limits you have set.
• Payment Processing: Facilitating deposits and withdrawals through Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification (KYC): Verifying your identity and age to ensure you meet the eligibility requirements — specifically that you are at least 21 years of age and a resident of Indonesia — prior to processing withdrawals or granting full account access.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeovers, and other forms of abuse on the Platform.
• Regulatory Compliance: Meeting our legal obligations under applicable international licensing conditions, anti-money laundering (AML) frameworks, and know-your-customer (KYC) regulations.
• Customer Support: Responding to your inquiries, resolving disputes, and maintaining records of support interactions for quality assurance and compliance purposes.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behavior and administering self-exclusion, cooling-off, and deposit limit tools at your request.
• Platform Improvement: Analyzing aggregated usage data to improve the usability, performance, and content offering of the omg138 Platform.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time by contacting our support team.

omg138 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and omg138, including account creation, transaction processing, and the delivery of betting and gaming services.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC verification, AML monitoring, and record-keeping mandated by our operating license conditions.
• Legitimate Interests: Processing carried out in pursuit of omg138's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

omg138 does not sell, rent, or trade your Personal Data. We share your data only in the following limited and controlled circumstances:

• Payment Processors: Your financial data is shared with Indonesian payment partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to facilitate the processing of your deposits and withdrawals. These partners are bound by their own privacy and security obligations.
• KYC & Identity Verification Providers: Where omg138 engages licensed third-party KYC services to assist with identity verification, your submitted identity documents and KTP details may be shared with such providers under strict data processing agreements.
• Fraud Prevention & Security Services: Anonymized or pseudonymized technical data (such as IP addresses and device fingerprints) may be shared with security technology providers for the purpose of detecting and preventing fraud and unauthorized access.
• Game Software Providers: Aggregated, non-personally-identifiable game activity data may be shared with licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) for the purpose of RNG certification, RTP reporting, and dispute resolution.
• Legal & Regulatory Authorities: omg138 will disclose Personal Data to competent governmental, regulatory, or law enforcement authorities where required by law, a court order, or a binding regulatory direction. We will notify you of any such disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your Personal Data may be transferred to a successor entity, subject to equivalent privacy protections being maintained. You will be notified of any such change.

omg138 retains your Personal Data for as long as necessary to fulfill the purposes for which it was collected, subject to the minimum retention periods required by our legal and regulatory obligations.

Upon expiry of the applicable retention period, omg138 will securely delete or irreversibly anonymize your Personal Data. Where data is anonymized, it may be retained indefinitely for statistical and analytical purposes without identifying you as an individual.

omg138 uses cookies and similar tracking technologies to maintain the functionality of the Platform, improve user experience, and monitor Platform security. By continuing to use the omg138 Platform, you consent to our use of cookies as described in this section.

Types of cookies used by omg138:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in during your visit and security tokens that protect your account. These cookies cannot be disabled without impacting your ability to use the Platform.
• Functional Cookies: Store your preferences such as language settings, odds format (decimal/fraction/HK), and responsible gaming notification frequency. These enhance your experience but are not strictly essential.
• Analytics Cookies: Collect anonymized data about how users navigate the Platform — such as which pages are visited most often and where users encounter errors — to help omg138 improve site performance. This data is aggregated and does not identify individual users.
• Security Cookies: Used for fraud detection, bot identification, and account takeover prevention. These cookies help omg138 identify suspicious login patterns and unusual transaction behavior.

omg138 employs a layered approach to data security, combining technical, administrative, and organizational controls to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction.

Technical security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and omg138 servers.
• AES-256 encryption for Personal Data and financial records stored in our databases.
• Firewall protection and intrusion detection systems monitoring all server traffic in real time.
• Two-factor authentication (2FA) available for all player accounts and mandatory for all administrative access.
• Regular penetration testing and security audits conducted by independent cybersecurity specialists.
• Tokenization of sensitive financial data (bank account and e-wallet identifiers) so that raw financial details are never stored in plain text.

Organizational security measures include:

• Strict role-based access control ensuring staff can only access Personal Data relevant to their specific job function.
• Regular mandatory data protection and security training for all omg138 employees with access to Personal Data.
• Incident response procedures in place to detect, contain, and notify affected users of any confirmed data breach within a reasonable timeframe.

As a user of the omg138 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our privacy team using the details in Section 16.

• Right of Access: You may request a copy of all Personal Data held by omg138 about you, together with information about how it is being processed. We will respond to access requests within 30 days.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held about you. Where the correction relates to KYC-verified data (such as your name or date of birth), additional documentation may be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 8. We cannot delete data we are legally required to retain.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to Data Portability: You may request a copy of the Personal Data you have provided to omg138 in a structured, machine-readable format (such as CSV) for the purpose of transferring it to another service provider.
• Right to Object: You may object to the processing of your Personal Data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, though omg138 may be able to demonstrate overriding grounds.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

omg138 will respond to all verified data rights requests within 30 calendar days. In complex cases, we may extend this period by up to 60 additional days, with notice provided to you within the initial 30-day window.

omg138 employs mandatory age verification during the registration process and requires KYC documentation confirming date of birth before any withdrawal is processed. Parents and guardians who believe their child has registered on the Platform are urged to contact our support team immediately so the account can be closed and data removed.

omg138 operates globally and your Personal Data may be stored or processed in countries outside Indonesia. When Personal Data is transferred internationally, omg138 ensures that adequate safeguards are in place to maintain the equivalent level of protection as described in this Privacy Policy, including:

• Contractual data processing agreements with all third-party service providers containing data protection obligations equivalent to or exceeding applicable Indonesian data protection standards.
• Transfer to countries or jurisdictions that maintain recognized data protection frameworks providing adequate protection for Personal Data.
• Binding corporate rules or standard contractual clauses where applicable.

By using the omg138 Platform and providing your Personal Data, you acknowledge and consent to the international transfer of your data as described above.

The omg138 Platform may reference or integrate third-party services such as licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming), payment gateways, or analytics tools. These third parties operate under their own privacy policies and data practices, which are independent of omg138.

omg138 is not responsible for the privacy practices or data handling of any third-party service provider beyond the contractual obligations we impose on them as described in Section 7 of this Policy. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

omg138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered users by email or via a prominent notice on the Platform at least 7 days before the changes take effect.

The effective date displayed at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the omg138 Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you do not agree with any amendment to this Privacy Policy, you should discontinue use of the Platform and contact support to request account closure and data deletion in accordance with your rights under Section 11.

For all privacy-related inquiries, data rights requests, or complaints regarding omg138's handling of your Personal Data, please contact our privacy team through the following channels:

If you are dissatisfied with omg138's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or seek independent legal advice in your jurisdiction.

This Privacy Policy was last reviewed and updated on 01 January 2026. Version 2.0 supersedes all previous versions of the omg138 Privacy Policy.