Reference

Privacy Policy at hero138 login

When you open an account and deposit via DANA, OVO, GoPay or QRIS, we keep your information secure and use it only to run your account, process withdrawals…

Account security verified at loginPayment data encrypted end-to-endYour contact preferences respectedData retention rules transparent
hero138 login Privacy Policy at hero138 login
QUESTIONS ABOUT YOUR DATA

How to Contact Us About Privacy

Team online

Email Support

Reach our privacy team at [email protected] with any question about your data. We respond within 24 hours on weekdays. Include your account email so we can verify your identity before sharing details.

Account Settings

Access your privacy choices directly in your account dashboard under Settings > Privacy. You can review what data we hold, adjust contact preferences, and request a data download from this menu.

Live Chat

Our live chat team (available 09:00–21:00 Jakarta time, seven days a week) can answer privacy questions immediately. Select the privacy or account security topic when you open a chat.

DATA PROTECTION STANDARDS

Security and Data Retention

Encryption

All deposits via DANA, OVO, GoPay and QRIS and withdrawals are transmitted over secure, encrypted channels. Your account password is hashed server-side; we never store it in plain text.

Retention Period

We keep your account data as long as your account is open. After you close your account, we retain records for six years to meet tax and legal requirements, then delete them securely.

Cookies and Tracking

Our site uses session cookies to keep you logged in and functional cookies to remember your language and table preferences. We do not use tracking cookies for third-party advertising. You can disable cookies in your browser; this may limit some features.

Access Requests

You have the right to request a copy of the personal data we hold about you. Email [email protected] with 'Data Request' in the subject line. We'll deliver your data within 14 days.

Correction and Deletion

If your name, email or phone number is incorrect, update it in your account settings immediately. To request data deletion where local law permits, contact [email protected]. Some records must be kept for compliance.

Third-Party Processors

We use third-party processors for payment clearing (DANA, OVO, GoPay, QRIS networks), hosting and customer support. All are bound by confidentiality. We do not share your data with marketers or data brokers.

Privacy Policy FAQ

Your bank details (for DANA, OVO, GoPay or QRIS withdrawal) are required to verify your identity and process payouts. We use them only for settlement; they are never shared with game studios or third parties outside the payment network.

Yes, where local law permits. Contact [email protected] with 'Data Deletion Request' in the subject line. We'll delete your account data after six years retention for tax compliance. Some information may need to stay longer to meet legal obligations.

We retain account records for six years after closure to comply with Indonesian tax and regulatory requirements, then securely delete them. Payment transaction records depend on local law; we do not hold them longer than required.

No. We never sell, rent or trade your personal data. We use your email only to send account updates, withdrawal confirmations, and maintenance notices. You can turn off non-essential emails in your account settings anytime.

Email [email protected] immediately with 'Security Issue' in the subject. We will freeze your account, verify your identity, and send you step-by-step account recovery instructions within two hours during business hours (09:00–21:00 Jakarta time).

We use session and functional cookies (language, table preferences, login state). We do not use tracking pixels or third-party analytics that identify you across other sites. You can manage or disable cookies in your browser settings.

We record your IP address, browser type, operating system and device model to detect suspicious login attempts and improve compatibility. This data is encrypted and used only for account security and site improvement; it is not shared with advertisers.