Email Verification & Two-Factor Authentication
When you sign up for sikat138, we send a confirmation link to your email address. You must click that link within 24 hours to activate your account. This step verifies that you own the email you provided and prevents duplicate or typo-based account creation.
After email confirmation, your account is live and you can deposit funds, browse our slot lineup (Mahjong Ways, Gates of Olympus, Sweet Bonanza, Aviator, Fortune Tiger), view live-dealer tables, and check sportsbook odds on Liga 1, Piala AFF, and international football. However, we recommend enabling two-factor authentication (2FA) for an extra layer of protection.
Two-factor authentication requires a second code each time you log in—either a time-based code from an authenticator app or a code sent to your phone. If someone obtains your password, they cannot access your account without that second code. You enable 2FA in your account settings under Security.
Identity Verification & KYC
Know Your Customer (KYC) verification is a standard requirement across regional payment networks. When you request a withdrawal on sikat138, our compliance team reviews your documents to confirm that the account holder matches the payment method you selected. This is not optional—it protects you from fraud and ensures your funds reach the correct person.
You upload your documents during registration or when you first withdraw. We accept a national ID, passport, or driver's licence. We also may ask for a recent utility bill or bank statement to confirm your address. The process takes minutes: scan or photograph your documents, upload them through our secure form, and our team reviews them within standard business hours.
Once your documents are approved, you can withdraw to any of our supported payment channels: DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer (mobile banking, local payment, online payment, e-wallet). If you play during Idul Fitri, Idul Adha, or other regional holidays, holiday schedules may affect processing times, but the withdrawal itself is routed through the same secure channel.
We never ask for your password, PIN, or OTP (one-time password) via email or chat. If someone claiming to be from sikat138 requests these, it is a phishing attempt. Report it to our support team immediately.
Password Recovery & Account Lockouts
If you forget your sikat138 password, click the "Forgot Password?" link on the login page. We send a reset link to your registered email. The link expires after 24 hours, so check your inbox (and spam folder) promptly. Click the link, create a new password, and log in again.
Your new password must be at least 8 characters long, include uppercase and lowercase letters, and contain at least one number. We recommend a unique password—not one you use for other sites—so that if another service is compromised, your sikat138 account remains protected.
If you attempt to log in with the wrong password five times in a row, your account locks for subject to verification as a security measure. This prevents automated attacks. After subject to verification, you can try again. If you are locked out and cannot reset your password, contact our support team via live chat or email. They will verify your identity using your email address and registered documents, then unlock your account.
-
1
Receive reset emailStep 1
Click "Forgot Password?" and enter your email address. We send a reset link within a few minutes.
-
2
Click the reset linkStep 2
The link takes you to a page where you create a new password. The link is active for 24 hours.
-
3
Set your new passwordStep 3
Enter your new password twice to confirm. Your password must be at least 8 characters.
-
4
Log in with your new passwordStep 4
Return to the login page, enter your email and new password, and access your account.
Deposit & Withdrawal Security
Every deposit and withdrawal on sikat138 flows through encrypted payment gateways. When you select your payment method (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, or local payment), your connection to the payment processor is secured with SSL encryption. Your card or bank details never appear on our servers—the payment processor handles them directly.
Withdrawals require identity verification, as mentioned earlier. Once approved, we route your funds to the same account you funded from. If you deposited via online payment, your withdrawal goes back to your e-wallet wallet. If you used mobile banking, it returns to your local payment account. This matching policy prevents funds from being diverted to a third-party account.
Processing times vary by payment method and bank, but we process withdrawal requests immediately after your documents are verified. Some banks may hold transfers for an additional day due to their own security checks. We have no control over those delays, but we monitor each withdrawal and flag any unusual patterns to our compliance team.
Session & Device Security
When you log in to sikat138, we create a secure session linked to your device and browser. Each session has a unique token that encrypts your connection. If you leave your account open and idle for subject to verification, we automatically log you out to prevent unauthorised access if someone gains physical access to your device.
If you log in from a new city or country—for example, if you travel to Medan or Surabaya and use a different internet connection—we may send you an email asking you to confirm that login was authorised. This alert gives you a chance to flag suspicious activity. If you did not initiate that login, respond to the email alert and we will investigate.
On public or shared devices (libraries, internet cafés, work computers), always log out explicitly when you finish playing slots like Mahjong Ways or checking live-dealer tables. Do not rely on the auto-logout timer. Clear your browser cache and cookies after logging out on a shared device, so no cached data remains.

Account Issues & Support
If you believe your account has been compromised, or if you notice transactions you did not make, contact our support team immediately via live chat or email. We are available during business hours and can freeze your account within minutes to prevent further unauthorised activity.
Our support team can reset your password, review your transaction history, and help you regain control of your account. We keep detailed logs of every login, deposit, withdrawal, and wager on our sportsbook (Liga 1, Piala AFF), live-dealer tables (blackjack, roulette, Dragon Tiger), and slots (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways). If a withdrawal was made without your consent, we flag it for investigation and escalate to our fraud team.
We never ask for your password in support messages. If you receive an email claiming to be from sikat138 asking for your password, OTP, or PIN, ignore it and report it to our team. Phishing attacks are common in the gaming industry, and we train our support staff to never request sensitive credentials.
