ipo138 is committed to protecting the personal data of all players. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you hold over your data as a user of our platform.
All personal data stored on secured, access-controlled servers with SSL encryption.
Your personal information is never sold or shared with unauthorised third parties.
Identity data is collected solely for age/fraud verification and regulatory compliance.
Access, correct, or request deletion of your personal data at any time via support.
We use cookies to improve your experience. You can manage preferences in your browser.
This policy may be updated. Continued use of ipo138 constitutes acceptance.
This Privacy Policy ("Policy") describes how ipo138 ("ipo138", "we", "us", "our") collects, uses, stores, shares, and protects personal data in connection with the online gambling platform accessible at https://ipo138.click (the "Platform").
We are committed to handling your personal data with the highest standards of care, transparency, and security. This Policy applies to all users of the Platform, including registered account holders, visitors who browse without registering, and individuals who contact our support team.
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the terms of this Policy, you should discontinue use of the Platform immediately.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling policy, which are incorporated by reference. Together, these documents constitute the full framework governing your relationship with ipo138.
For the purposes of this Policy, the following definitions apply:
ipo138 acts as the Data Controller in respect of Personal Data collected through the Platform. As Data Controller, ipo138 determines the purposes and means by which your Personal Data is processed.
For all data protection enquiries, including requests to exercise your rights under this Policy, you may contact our support team via:
We serve players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and nationwide. Our data infrastructure is designed to support the specific requirements of the Malaysian player market.
ipo138 collects Personal Data through several channels: directly from you during registration and platform use, automatically through cookies and tracking technologies, and in limited circumstances from third-party service providers (such as KYC and payment processors). The categories of data collected are outlined below.
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, MyKad / passport number, selfie image | Provided by you during KYC verification |
| Contact Data | Email address, mobile phone number, residential address | Provided by you during registration or account update |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), transaction history | Provided by you when making deposits or withdrawals |
| Account & Usage Data | Username, login timestamps, betting history, game sessions, bonus usage, wagering records | Generated automatically through your Platform activity |
| Technical Data | IP address, browser type and version, device type, operating system, session duration | Collected automatically via cookies and server logs |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Generated when you contact our support team |
Special Category Data: ipo138 does not intentionally collect special category data such as health information, racial or ethnic origin, political opinions, or religious beliefs. If such data is inadvertently included in communications you send us, it will be treated with the utmost confidentiality and deleted where not required for a legitimate purpose.
ipo138 processes your Personal Data only where we have a lawful basis to do so. The primary legal bases under which we operate are:
ipo138 uses your Personal Data for the following purposes, each grounded in an appropriate legal basis as described in Section 5:
ipo138 does not sell, rent, or trade your Personal Data to any third party. We share your data only in the following limited and controlled circumstances:
We do not share your data with advertisers. ipo138 does not engage in the sale of user data for advertising profiling or behavioural marketing purposes. Any marketing communications fromipo138 are based solely on your existing relationship with us and your express consent where required.
ipo138 takes the security of your financial data with the utmost seriousness. All payment transactions are processed over encrypted HTTPS connections using industry-standard 256-bit SSL/TLS encryption. Payment card data where applicable is handled in accordance with applicable payment security standards.
Financial data linked to your Account — including transaction history, deposit and withdrawal records, and e-wallet identifiers — is stored on secured, access-controlled servers. Access to financial records is restricted to authorised ipo138 personnel and relevant payment processing partners on a strict need-to-know basis.
You are responsible for ensuring that the payment methods you register on the Platform are in your own name.ipo138 will verify the ownership of payment methods as part of the KYC process, and third-party payment methods will be rejected.
Cryptocurrency transaction data (BTC, ETH, USDT, LTC) is processed via blockchain networks, which are by nature publicly visible. ipo138 records your wallet address and transaction identifiers for KYC, AML compliance, and withdrawal processing purposes only.
ipo138 uses cookies and similar tracking technologies to operate improve the Platform. Cookies are small text files placed on your device when you visit the Platform. They enable us to recognise your browser, maintain your session, and personalise your experience.
The following categories of cookies are used:
You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is placed. Disabling essential cookies will impair core Platform functionality. Disabling analytics and preference cookies will not prevent you from using the Platform but may degrade certain personalised features.
ipo138 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including meeting legal, regulatory, and contractual obligations.
Indicative retention periods:
Upon expiry of the applicable retention period, your data will be securely deleted or anonymised in accordance with our internal data disposal procedures.
To deliver our services, ipo138 may transfer certain categories of your Personal Data to countries outside Malaysia, including to servers and service providers located in other jurisdictions. Where such transfers occur, ipo138 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within Malaysia.
Safeguards employed for international transfers may include contractual data processing agreements that obligate the recipient to handle data in accordance with applicable data protection standards, or the use of service providers whose operations are subject to internationally recognised security certifications.
If you require further information about the specific safeguards applied to any international data transfer involving your Personal Data, please contact our support team via live chat or the email address provided in Section 16.
As a Data Subject, you hold the following rights in respect of your Personal Data held by ipo138. To exercise any of these rights, please contact our support team as described in Section 16. We will respond to valid requests within a reasonable timeframe, typically within 30 calendar days.
Exercise of certain rights — particularly erasure — may not be possible while your Account is active or while ipo138 is subject to ongoing legal or regulatory obligations to retain your data. We will explain the reasons for any limitation when responding to your request.
ipo138 strictly prohibits use of the Platform by any person under the age of 21 years. The Platform is designed exclusively for adult users, and we take our responsibilities regarding underage protection extremely seriously.
ipo138 does not knowingly collect Personal Data from persons under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the associated Account, including returning any funds held subject to verification and applicable terms.
If you are a parent or guardian and believe that a minor under your care has registered an Account on ipo138, please contact our support team immediately via live chat so that we can take appropriate action promptly.
The Platform may reference or display information relating to third-party services, including payment providers such as Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, and FPX. Where interaction with these services occurs, you will be subject to those providers' own terms of service and privacy policies, which are independent of this Policy.
ipo138 is not responsible for the privacy practices, security measures, or content of any third-party service. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of ipo138.
ipo138 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of our business. The most current version will always be published on this page, with the "Last Updated" date revised accordingly.
Where changes are material — for example, affecting the purposes for which we process your data or the categories of third parties with whom we share it — we will endeavour to provide reasonable advance notice via the Platform or by email to your registered address.
Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to a material change, you should contact our support team to discuss your options, including the closure of your Account.
For all privacy-related enquiries, requests to exercise your data subject rights, or concerns about howipo138 handles your Personal Data, please contact us through the following channels:
Please clearly identify your request (e.g., "Data Subject Access Request" or "Request to Delete Personal Data") in your message. We aim to acknowledge all formal data subject requests within 5 business days and to resolve them within 30 calendar days of receipt.
For further information about your rights and ipo138's obligations, please also review our Terms & Conditions and our Responsible Gambling policy.
Our support team is available around the clock to address data privacy concerns, account queries, or anything else you need. Visit the homepage to exploreipo138 or check our FAQ for quick answers. For players aged 21 and above only.
21+ Gambling involves risk. Please play responsibly and within your means.