🔒 Official Privacy Policy

Privacy Policy IPO138 – Our Commitment to Your Data Security

Ipo138 takes the privacy of every member seriously. This document transparently explains how we collect, use, store, and protect your personal information as a user of our platform.

Updated: 1 January 2026
PDPA Compliant
🔐 256-bit SSL Encryption
🛡️ 100% Data Protected
🚫 0 Third-Party Data Sales
24/7 Security Monitoring

Method IPO138 Protecting Your Data

Your privacy is not merely a legal obligation for us — it is the foundation of trust that builds a lasting relationship between ipo138 and every registered member.

256-bit SSL Encryption

All data transmitted between your device and ipo138 servers is encrypted using 256-bit SSL technology — the same level of encryption used by leading banking institutions in Malaysia. No one can intercept or read your information while in transit.

Secure & Segregated Servers

Members' personal data is stored on dedicated servers protected by multi-layered access controls. Only authorised personnel may access sensitive information, and all access is logged and monitored in real time around the clock.

No Data Selling

Ipo138 has never and will never sell, rent, or trade members' personal data to any third party for marketing purposes. Your data belongs entirely to you, and we use it only for purposes to which you have given explicit consent.

Full Control in Your Hands

As an ipo138 member, you have the full right to access, update, amend, or request deletion of your personal data at any time. The request process is straightforward, and we are committed to processing every request within the timeframe required by law.

Malaysia PDPA Compliance

The ipo138 Privacy Policy is designed in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure every aspect of data collection and processing meets the legal requirements in force in this country.

Periodic Review & Updates

This Privacy Policy is reviewed and updated periodically to ensure it reflects current practices and meets new legal requirements. Members will be notified of any material amendments via email or in-platform notification.

Scope of This Policy
This Privacy Policy applies to all information collected through the ipo138.pro website, the ipo138 mobile app, and all official ipo138 communication channels. By using our services, you agree to the practices described in this policy.

1. Personal Information We Collect

Ipo138 collects your personal information through various means as you interact with our platform. We only collect data that is genuinely necessary to provide you with a quality and secure service.

1.1 Information You Provide Directly

When you register an account, make a transaction, or contact our support team, you may provide the following information:

  • Identity Information: Full name, date of birth, MyKad or passport number
  • Contact Information: Email address, mobile number, residential address
  • Financial Information: Bank account number, digital wallet details for deposit and withdrawal purposes
  • Security Information: Password (stored in unreadable hashed form), security questions
  • Verification Documents: MyKad copy, bank statement, or other documents for the KYC process

1.2 Information Collected Automatically

While you use the ipo138 platform, we automatically collect certain technical information that helps us improve your experience and ensure account security:

  • IP address and network information
  • Device type, operating system, and web browser version
  • Session activity data including pages visited and time spent
  • Geolocation information (city/state level only)
  • Login data including date, time, and access location
Data Category Data Examples Primary Purpose
Identity Name, date of birth, MyKad Account verification & KYC
Contact Email, phone, address Communication & notifications
Financial Bank accounts, digital wallets Deposit & withdrawal processing
Technical IP, device, browser Security & fraud detection
Games Betting history, wins Compliance & responsible gaming

2. How We Use Your Data

Ipo138 uses the personal data collected solely for lawful and stated purposes. We will not use your data for any other purpose without first obtaining your consent.

The primary purposes for data use are as follows:

  • Account Management: Creating, verifying, and managing your member account
  • Transaction Processing: Handling all deposits, withdrawals, and financial activities securely and accurately
  • Identity Verification: Ensuring compliance with KYC requirements and anti-money laundering laws
  • Platform Security: Detecting and preventing fraud, hacking, and illegal activities
  • Customer Support: Providing accurate and effective assistance when you contact us
  • Product Improvement: Understanding usage patterns to improve features and user experience
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling
  • Marketing (with consent): Sending you relevant promotional offers and product information
Legal Basis for Data Processing
ipo138 processes your personal data on the following bases: (1) contract performance — to provide the services you request; (2) legal obligation — compliance with PDPA, AML, and other regulations; (3) legitimate interests — platform security and fraud prevention; and (4) consent — for optional marketing communications.

3. Sharing Information with Third Parties

Ipo138 does not sell or rent your personal data to any party. However, in limited situations, we may share your information with the following parties solely to enable us to provide services to you:

3.1 Trusted Service Providers

We work with third-party service providers who help us operate the platform, including payment processors, identity verification service providers, and cloud infrastructure providers. All these providers are bound by strict confidentiality agreements and may only use your data for purposes specified by ipo138.

3.2 Legal Requirements

Ipo138 may disclose personal information when required by law, court order, or a legitimate request from Malaysian government authorities. In all such cases, we will endeavour to notify you in advance unless prohibited by law.

3.3 Business Transfers

In the event of any merger, acquisition, or sale of ipo138 assets, members' personal data may be transferred as part of that transaction. You will be given notice before your data becomes subject to a different privacy policy.

4. Data Security Measures

The security of your personal data is ipo138's highest priority. We have implemented multiple layers of technical and organisational protection to keep your data safe at all times:

  • Encryption in Transit: All communications between you and the ipo138 platform are protected with TLS 1.3 protocol and 256-bit SSL encryption.
  • Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using industry-standard encryption algorithms
  • Multi-Layer Access Control: A role-based access control (RBAC) system ensures only authorised personnel can access specific data.
  • Two-Factor Authentication: All ipo138 internal systems are protected with two-factor authentication (2FA).
  • Regular Security Audits: Our platform undergoes regular penetration testing and security audits conducted by independent third parties.
  • 24/7 Monitoring: Our security team continuously monitors systems to detect any suspicious activity
Security Incident Response
In the event of a data breach affecting your personal information, ipo138 is committed to notifying you within 72 hours of becoming aware of the incident, in line with international best practices for data protection. We will also take immediate steps to mitigate the impact and prevent recurrence.

5. Cookies and Tracking Technologies

Ipo138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting anonymous information about how you use the platform to help us improve our services.
  • Functionality Cookies: Remembering your preferences such as language and display settings to provide a more personalised experience.
  • Analytics Cookies: Helping us understand usage patterns and continuously improve platform features.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality and user experience of the ipo138 platform.

6. Data Retention Period and Deletion

Ipo138 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable Malaysian law. The following are general data retention period guidelines:

  • Active Account Data: Retained for the duration your account is active and for 7 years after account closure to fulfil legal obligations
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and AML legislative requirements
  • Activity Log: Retained for 90 days for troubleshooting and security purposes
  • Support Communication: Retained for 2 years from the date of last interaction
  • Marketing Data: Deleted immediately upon withdrawal of your consent

7. Your Rights Regarding Personal Data

As an ipo138 member and data subject under Malaysia's PDPA, you have the following rights, which you may exercise at any time:

Right of Access

Request a copy of all personal data we hold about you in a readable format.

Right to Rectification

Update or correct any personal information that is inaccurate or outdated.

Right to Erasure

Request deletion of your personal data subject to our legal obligations.

Right to Object

Object to the processing of your data for direct marketing purposes or certain legitimate interests.

Right to Data Portability

Receive your data in a structured, reusable format for portability.

Right to Restrict Processing

Request that we restrict how we use your data under certain circumstances.

To exercise any of the above rights, please contact our data protection team by email at [email protected] or via the in-platform live chat. We will process your request within 30 days of receipt.

8. Protection of Children's Data

The ipo138 platform is exclusively for individuals aged 18 years and above. We do not intentionally collect, store, or process any personal information from children or individuals under the age of 18.

If we discover that personal data of an individual under 18 years of age has been collected inadvertently, we will take immediate steps to delete that information and close the associated account. If you believe your child has registered on our platform, please contact us immediately.

9. Links to Third-Party Websites

The ipo138 platform may contain links to third-party websites or services in certain contexts, such as payment providers. The ipo138 Privacy Policy does not apply to those third-party websites, and we are not responsible for their privacy practices.

We encourage you to read the privacy policy of every website you visit outside the ipo138 platform. The presence of links to other websites does not mean that ipo138 endorses or validates the content or privacy practices of those websites.

10. Amendments to This Privacy Policy

Ipo138 reserves the right to amend this Privacy Policy at any time. All amendments will take effect immediately upon being uploaded to ipo138.pro. The "Updated" date at the top of this document will always reflect the date of the most recent amendment.

For significant amendments that affect your privacy rights, ipo138 will notify you at least 14 days before those changes take effect, via email notification or an in-platform notice. Continued use of ipo138 services after the effective date constitutes your acceptance of the updated policy.

11. Contact Our Data Protection Officer

Ipo138 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with data protection laws and handling privacy-related enquiries from members.

You can reach us through the following channels:

We are committed to responding to all privacy-related inquiries within 5 business days. For more complex issues, we will provide a realistic resolution timeframe and keep you updated regularly.

🚀 Join IPO138 with Confidence

Your Data Is Secure. Your Experience, Guaranteed.

With our high-standard data protection and unwavering commitment to your privacy, ipo138 is a gaming platform you can trust completely. Register today and enjoy a safe and enjoyable gaming experience.

256-bit SSL Encryption PDPA Compliant No Data Selling 24/7 Privacy Support
Bahasa Melayu