Official Data Protection

Privacy Policy ipo138 — Your Information Security Is Our Priority

Ipo138 takes seriously our responsibility to protect the privacy and personal data of every member. This document clearly explains how we collect, use, store, and protect your information as a user of the ipo138 platform.

Updated: 1 January 2026
Our Privacy Commitment
256-bit SSL encryption for all data
Data is not sold to third parties
Controlled and restricted data access
Member rights to access and delete data
24-hour security monitoring

Ipo138's Six Core Privacy Protection Principles

We build trust through concrete action. Here are the six key ways ipo138 ensures your personal data privacy and security is always protected.

End-to-End Data Encryption

All data transmitted between your device and ipo138 servers is protected using 256-bit SSL encryption. Sensitive information such as banking details and passwords is never stored in plain text.

Strict Access Control

Only specifically authorised ipo138 staff may access member personal data, and only when required for support or compliance purposes. All access is logged and audited on a regular basis.

Secure Data Storage

Member personal data is stored on servers protected by a multi-layered security system, including firewalls, intrusion detection systems, and regular backups to ensure data continuity.

No Data Selling

Ipo138 does not sell, rent, or share members' personal data with any third party for marketing or commercial purposes without your explicit consent. Your privacy is not our commodity.

KYC Identity Verification

The ipo138 KYC (Know Your Customer) process is designed to protect members' identities from unauthorized use. Documents collected during KYC are processed securely and not shared except to meet legitimate compliance requirements.

Regular Security Audits

The ipo138 internal security team conducts regular audits and penetration testing to identify and close any system vulnerabilities before they can be exploited by unauthorised parties.


1

Introduction & Scope of the Privacy Policy

Ipo138 deeply values the trust you place in us when choosing our platform as your online entertainment destination. This Privacy Policy covers all aspects of the collection, processing, storage, and protection of personal data for members using the ipo138 platform via the official website ipo138.vu or our mobile app.

This document is written in clear, easy-to-understand language so you know exactly what happens with your personal information. We believe transparency is the foundation of a strong trust relationship between ipo138 and each of our members.

Note: This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy ipo138. Together, these three documents form the comprehensive agreement framework between you and ipo138.

By registering an ipo138 account, using our services, or browsing ipo138.vu, you are deemed to have read, understood, and agreed to all terms stated in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

2

Types of Information We Collect

Ipo138 collects information from you through various means as you use our platform. This information falls into several main categories:

Data Category Example Information Collection Method
Identity Data Full name, date of birth, identity card number, passport Registration form, KYC process
Contact Data Email address, phone number, mailing address Account registration, profile updates
Financial Data Bank name, account number (partial), transaction records Deposits, withdrawals, payment verification
Usage Data Betting history, games played, session duration Automated system logs
Technical Data IP address, device type, web browser, operating system Cookies, server logs
Communication Data LiveChat records, support emails, complaints Interactions with the support team
ipo138 do not store your full credit/debit card number. All payment transactions are processed through certified payment processors compliant with PCI DSS standards, and we only receive transaction confirmations without storing complete card data.

Some information is collected automatically when you browse the ipo138 platform, including details about how you interact with our website and app. This helps us improve the user experience and identify any technical issues more quickly.

3

How We Use Your Information

The personal data we collect is used responsibly for legitimate purposes only. Below is a detailed description of each intended use:

  • Account Management: Create, verify, and maintain your member account, process deposits and withdrawals, and confirm your identity through the KYC process.
  • Service Provision: Gives you access to all games and features available on the ipo138 platform, including slots, live casino, and sports betting.
  • Security & Fraud Prevention: Detect and investigate suspicious activity, prevent money laundering, and uphold the integrity of the platform for all members.
  • Legal Compliance: Fulfil applicable legal and regulatory obligations, including financial reporting requirements and AML (Anti-Money Laundering) compliance.
  • Customer Support: Handle your enquiries, complaints, and support requests efficiently and effectively.
  • Product Improvement: Analyse platform usage patterns to improve the gaming experience, identify technical bugs, and develop more useful new features.
  • Marketing Communications: Send information about promotions, bonus offers, and platform updates — only if you have consented to receive them.
Marketing: You may withdraw consent to receive marketing communications at any time via your account settings or by contacting our support team. Withdrawing this consent will not affect your ability to use ipo138 services.
4

Information Sharing & Disclosure

Ipo138 maintains a strict policy regarding the sharing of members' personal data. We do not sell, rent, or disclose your personal information to third parties for commercial purposes. However, there are limited situations where data sharing becomes necessary:

  • Authorised Service Providers: We share only the necessary information with service providers such as payment processors, gaming software providers, and cloud infrastructure providers — all subject to strict confidentiality agreements.
  • Legal Compliance: When required by court order, regulatory authority directive, or lawful enforcement authority, ipo138 will disclose only the minimum information necessary.
  • Business Transfers: In the event of a company merger, acquisition, or asset transfer, member data may be transferred as part of the business assets, with the receiving party bound by the same privacy obligations.
  • Legitimate Interest Protection: In emergency cases to protect the safety, rights, or property of ipo138 or other users from a clear and serious threat.
Important: All third parties that receive personal data of ipo138 members are required to comply with privacy and data security policies equivalent to or higher than ipo138's standards. We have zero tolerance on this matter.
5

Cookies, Tracking & Similar Technologies

The ipo138 platform uses cookies and similar tracking technologies to enhance the user experience, analyse website traffic, and ensure the platform runs smoothly. Cookies are small text files stored on your device when you visit the ipo138 website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled without affecting your ability to use the platform.
  • Performance Cookies: Collect information on how visitors use our website to help us improve performance and navigation.
  • Functional Cookies: Remember your preferences and settings such as language, region, and display preferences to deliver a more personalised experience.
  • Analytics Cookies: Used by our internal analytics tools to understand usage patterns and identify areas requiring improvement.

You can manage cookie settings through your web browser at any time. Please note that disabling certain cookies may affect specific features on the ipo138 platform. For guidance on managing cookies in popular browsers, please refer to your browser's help documentation.

6

Data Storage, Transfer & Security

Your personal data is stored in secure data centres with strict physical and digital security controls. ipo138 employs multiple layers of technical protection to keep your data safe at all times:

  • In-transit data encryption using TLS 1.3 protocol.
  • At-rest data encryption using AES-256.
  • Active 24-hour intrusion detection and prevention system (IDS/IPS).
  • Daily automatic data backups with periodic recovery testing.
  • Continuous security monitoring by an in-house cybersecurity team.

Data Retention Period: ipo138 retains members' personal data for as long as your account is active and for the required period following account closure to meet legal obligations, typically between 5 to 7 years depending on the type of data and applicable regulatory requirements.

International Data Transfers: In some circumstances, your data may be processed outside Malaysia by our service providers. When this occurs, we ensure such transfers are protected by adequate safeguard mechanisms, including internationally recognised standard contractual clauses.
7

Your Rights Regarding Personal Data

As an ipo138 member, you have certain rights regarding the personal data we hold about you. ipo138 fully respects and facilitates the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request that we correct any inaccurate or incomplete personal data.

Right to Erasure

You may request the deletion of your personal data, subject to legal retention obligations.

Right to Restriction

You may request that we restrict the processing of your data under certain permitted circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, contact the ipo138 support team via LiveChat or email at [email protected]. We will process your request within 30 days of receipt.
8

Child Data Protection

Ipo138 is a platform restricted to users of legal age 18 years and above only. We do not intentionally collect, process, or store personal data from individuals under the age of 18.

If we find that we have inadvertently collected data from underage individuals, we will take immediate action to delete that data and close the associated account. Parents or guardians who become aware that their child has registered an account at ipo138 are requested to contact us immediately.

Minor Protection: ipo138 uses an age verification system during registration and throughout the KYC process. Any account suspected of belonging to an underage individual will be immediately suspended pending investigation and further verification.
9

Links to Third-Party Websites

The ipo138 platform may contain links or integrations with third-party services such as game providers, payment processors, and digital wallet providers. When you click those links or use third-party services integrated with our platform, you may be leaving the controlled environment of ipo138.

The ipo138 Privacy Policy does not apply to third-party websites or services. ipo138 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of every third-party website or service you use.

Game providers integrated with ipo138 have limited access only to the data required to deliver their gaming services, and all such providers are required to comply with the security and privacy standards set by ipo138.

10

Privacy Policy Amendments & Updates

Ipo138 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, applicable legal or regulatory requirements, or technological developments that affect how we handle data.

When significant amendments occur, ipo138 will notify members via:

  • In-account notifications upon login.
  • Email to the address registered in your account.
  • Clearly stated on the ipo138 homepage.

Minor amendments that do not affect your fundamental rights may be updated without specific notice. The latest update date is always displayed at the top of this page. Continued use of the ipo138 platform after any amendments constitutes acceptance of the revised terms.

11

Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact the ipo138 team, who are ready to assist:

  • LiveChat: Available 24/7 directly from the ipo138 platform — the fastest way to get an immediate response.
  • Email: [email protected] — for written inquiries requiring reference and record-keeping.
  • Help Center: Visit FAQ page us for answers to frequently asked questions about privacy and account security.

For formal privacy-related complaints, please send an email with the subject "Privacy Complaint" along with your account number and a detailed description of the issue. We are committed to responding to all privacy inquiries within 5 business days.

Response Time: LiveChat enquiries are answered within minutes. Email enquiries are responded to within 24–48 business hours. Formal complaints are processed within 14 business days from the date of receipt.

Safe & Trusted Platform

Your Privacy Protected. Your Game Secured.

Create your ipo138 account today and enjoy a gaming experience in a safe, transparent environment trusted by hundreds of thousands of members across Malaysia.

SSL 256-bit
Encrypted Data
Secure KYC
24/7 Support

Bahasa Melayu