Privacy Policy mitra138 –
Your Personal Data Protection

1Information We Collect

Mitra138 collects your personal data through several means — either directly from you, automatically as you use the platform, or occasionally from legitimate third-party sources. We only collect information that is genuinely necessary to provide a secure and efficient service.

Data Category	Examples of Information	How It Is Collected
Identity Data	Full name, date of birth, identification card number	Registration form, KYC verification
Contact Data	Email address, phone number	Account registration
Financial Data	Bank account details, transaction records	Deposits, withdrawals, verification
Technical Data	IP address, device type, web browser	Automated System Logs
Usage Data	Game records, wagering history, login timestamps	Platform activity
Communication Data	Live chat records, support email	Interactions with the support team

We do not collect sensitive data categories such as medical data, political views, or religious beliefs. Credit or debit card information is not stored on mitra138 servers — it is processed directly through certified payment gateways compliant with PCI DSS standards.

2How We Use Your Personal Data

The personal data we collect is used for clear and legitimate purposes. mitra138 does not use your data for any purpose you would not expect or have not consented to. The following are the primary purposes of data use:

• Account Management: Creating, verifying, and maintaining your member account, including required KYC processes.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Service Provision: Ensuring all games, betting, and platform features function properly for you.
• Customer Support: Responding to inquiries, resolving complaints, and providing necessary technical support.
• Security & Fraud Prevention: Detecting and preventing any fraudulent activity, money laundering, or unauthorized access.
• Legal Compliance: Meeting legal and regulatory obligations, including AML (Anti-Money Laundering) requirements.
• Platform Improvement: Analyzing usage patterns to enhance the overall user experience.
• Service Communications: Sending important notifications related to accounts, transactions, and policy changes.

3Legal Basis for Data Processing

Mitra138 processes your personal data on valid legal grounds. Depending on the purpose of processing, the bases we rely on are:

• Contract Performance: Processing required to fulfill the agreement between you and mitra138, including account management and transaction processing.
• Legal Obligation: Processing required to comply with applicable laws, including KYC and AML requirements.
• Legitimate Interest: Processing for security, fraud prevention, and service improvement purposes that does not affect your fundamental rights.
• Consent: For marketing communications and any processing that requires your explicit consent.

4Data Sharing & Disclosure

Mitra138 takes your privacy seriously. We do not sell or trade your personal data to any party. However, in limited situations and for legitimate purposes, your data may be shared with the following parties:

• Payment Service Providers: To securely process your deposits and withdrawals. They are bound by strict confidentiality agreements.
• Game Software Providers: To provide the games you play. Only the minimum required data is shared.
• Relevant Authorities: When required by law, court order, or a request from a legitimate law enforcement agency.
• Technical Service Providers: Such as hosting providers and cybersecurity services that help us operate the platform securely.

All third parties working with mitra138 are required to comply with strict data protection standards and are not permitted to use your data for their own purposes.

5Data Retention Period

Mitra138 does not retain your personal data longer than necessary. Retention periods depend on the type of data and the purpose of processing:

• Active Account Data: Retained for the duration your account remains active, plus the minimum retention period required by law.
• Financial Transaction Records: Retained for 7 years as required by applicable financial and AML regulations.
• Support Communication Logs: Retained for 3 years after the last interaction for reference and dispute resolution purposes.
• Technical Data & System Logs: Retained for 12 months for security and technical troubleshooting purposes.

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be personally linked to you.

6Data Security – Our Protection Measures

Mitra138 continually invests in cybersecurity infrastructure to keep your personal data safe. Key security measures we implement include:

• Data encryption in transit using the latest TLS 1.3 protocol.
• Data encryption at rest using AES-256.
• Role-based access control (RBAC) — staff can only access the data they need to perform their duties.
• Continuous 24/7 security monitoring with intrusion detection systems (IDS/IPS).
• Regular security audits by independent parties to identify and address vulnerabilities.
• Two-factor authentication (2FA) for all staff access to data management systems.

7Cookie Policy

Mitra138 uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better experience for you. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Analytics Cookies: Helping us understand how users interact with the platform for improvement purposes. Data is collected in aggregate and anonymously.
• Preference Cookies: Storing your personal settings such as preferred language and display preferences for ease of use.
• Security Cookies: Used to detect and prevent fraudulent activity and to protect the integrity of your session.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the mitra138 platform.

8International Data Transfers

In operating a global platform, your personal data may be transferred to and stored on servers located outside your country. mitra138 ensures that any such data transfers are carried out with adequate safeguards:

• Use of approved standard contractual clauses for cross-border data transfers.
• Transfers only to countries or organizations with equivalent or higher data protection standards.
• Data protection impact assessments (DPIA) are conducted before large-scale data transfers.

9Children's Privacy

The mitra138 platform is exclusively for users aged 18 years and above. We do not intentionally collect or process personal data of minors. Should we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the account in question.

Parents or guardians who believe their child has registered on our platform are urged to contact our support team immediately so that appropriate action can be taken without delay.

10Privacy Policy Amendments

Mitra138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When material changes occur, we will:

• Displaying a clear notice on the mitra138 homepage at least 14 days before changes take effect.
• Sending notifications to a member's registered email address for significant changes.
• Updating the "Last Updated" date at the top of this document.

Continued use of the mitra138 platform after amendments take effect is considered acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay up to date.