Ipo138 takes every member's privacy seriously. This document clearly explains how we collect, use, store, and protect your personal data as a user of the ipo138 platform in Malaysia. Please read it carefully before registering or using our services.
The data protection principles we uphold across every aspect of ipo138's operations
All data transmitted between your device and ipo138's servers is protected by industry-standard 256-bit SSL encryption. This means your personal information, financial data, and account details cannot be read by any third party during transmission.
IPO138 has never and will never sell, rent, or transfer members' personal data to any third party for marketing or commercial purposes without your explicit consent. Your data belongs to you — we use it solely to operate ipo138's services.
Only ipo138 staff who require access to your data for legitimate operational purposes are permitted to do so. All internal access is logged, monitored, and subject to strict confidentiality policies. Internal violations are dealt with firmly.
Every ipo138 member has the right to request a copy of the personal data we hold, correct any inaccurate information, and request deletion of data where applicable. These requests can be submitted through ipo138 customer support at any time.
IPO138 operates in accordance with Malaysia's Personal Data Protection Act (PDPA) and relevant international standards. We conduct periodic compliance reviews to ensure our data handling practices consistently meet the latest legal requirements.
In the event of any security breach involving ipo138 member data, we are committed to notifying affected users within a reasonable timeframe and taking immediate remedial action. Transparency during critical situations is a priority for ipo138.
This Policy is to be read together with Terms & Conditions us.
This Privacy Policy describes ipo138's practices regarding the collection, use, disclosure, and protection of your personal information when you use the ipo138 platform at https://ipo138.asia. By using ipo138's services, you agree to the terms of this Privacy Policy. This Policy forms part of the overall agreement between you and ipo138 and should be read together with Terms & Conditions us.
IPO138 is an online Sports Betting and casino platform that has been operating since 2018, serving users exclusively in Malaysia. We understand that privacy is more than a legal obligation — it is the foundation of the trust you place in us when you register an account and use ipo138's services.
This Privacy Policy applies to all personal information that ipo138 collects, processes, and stores through the ipo138 website, any related mobile applications, email communications, and customer support interactions. It covers all account types — from new Silver members to long-standing Diamond VIP members.
Important Note: ipo138 operates in accordance with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA). We comply with all applicable legal requirements and undergo periodic compliance reviews to ensure our practices remain current and meet the highest data protection standards.
If you have any questions about how ipo138 handles your personal data, contact details are available at the end of this document. Our team is available to assist in Bahasa Melayu via live chat or email, 24/7.
IPO138 collects your personal data through several channels — directly when you register or interact with the platform, automatically as you use our services, and in certain cases from legitimate third parties such as Malaysian payment providers. Below is a detailed breakdown of the data ipo138 collects:
| Data Category | Sample Information | How It Is Collected |
|---|---|---|
| Identity Data | Full name, date of birth, identification card number | Registration form, account verification |
| Contact Data | Email address, mobile number, Malaysian state | Registration, profile updates |
| Financial Data | Deposit method (TNG/GrabPay/DuitNow), transaction history, account balance | Deposit & withdrawal transactions |
| Activity Data | Betting history, sports preferences, play time | Automatic platform usage |
| Technical Data | IP address, device type, browser, operating system | Server logs, cookies, analytics |
| Communication Data | Customer support records, live chat transcripts, emails | Customer service interactions |
IPO138 does not collect credit or debit card numbers directly — all payments are processed through certified Malaysian payment gateways including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks). IPO138 also does not collect biometric data, medical information, or any other category of sensitive data unless specifically required by applicable Malaysian law.
IPO138 uses your personal data only for legitimate purposes directly related to providing online betting and casino services to Malaysian users. The following are the primary purposes for which your data is used at ipo138:
IPO138 does not use your data for third-party advertising, commercial profiling for sale to advertisers, or any purpose not stated in this Privacy Policy. Should we wish to use your data for a new purpose, we will obtain your consent beforehand.
IPO138 does not sell or rent members' personal data to any party. However, in the course of service operations, ipo138 may need to share certain data with selected third parties in the following situations:
Ipo138 works with third-party service providers that assist with day-to-day operations — including Malaysian payment gateway providers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX), licensed casino game providers, cloud infrastructure providers, and analytics services. All these providers are bound by strict confidentiality agreements and may only use your data for purposes agreed upon with ipo138. They are prohibited from using your data for their own independent marketing purposes.
IPO138 may be required to disclose your personal data to the relevant Malaysian authorities when compelled to do so by law, court order, or valid legal process. This includes investigations related to fraud, money laundering, or other criminal activity. In such circumstances, ipo138 will comply with the applicable legal requirements while making every effort to protect your privacy rights to the extent permitted.
Ipo138 will not disclose your personal data to any third party beyond the scope stated above without your prior written consent. If you have questions about a specific third party we work with, please contact us at support@ipo138.asia.
Protecting the personal and financial data of ipo138 members is a core technical and operational priority. We invest continuously in security infrastructure to ensure your data is protected to the highest achievable standard. The following are the key security measures we have in place:
While ipo138 takes all reasonable precautions, no security system can guarantee 100% absolute protection. You also play an important role in safeguarding your account — make sure your password is strong, unique, and never shared with anyone.
IPO138 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law. ipo138's data retention policy is as follows:
In cases where an account is closed due to a breach of Terms & Conditions or suspected fraud, ipo138 reserves the right to retain relevant data for a longer period for the purposes of investigation and legal action if necessary.
The ipo138 platform uses cookies and similar tracking technologies to enhance the user experience, understand how the platform is being used, and maintain session security. Cookies are small text files stored on your device when you visit the ipo138 website.
You can manage or delete cookies through your internet browser settings. However, disabling essential cookies may affect how the ipo138 platform functions — for example, you may need to log in again each visit or your preferences may not be saved. For optional cookies, you can inform ipo138 of your preferences through our customer support team.
As an ipo138 member and a Malaysian citizen or resident, you have specific rights regarding your personal data that ipo138 fully respects and facilitates. Below is a summary of those rights:
You have the right to request a copy of all personal data ipo138 holds about you, in a readable format.
You have the right to request the correction of any personal data in your ipo138 account that is inaccurate or incomplete.
You may request the deletion of your personal data in certain circumstances, subject to ipo138's legal obligations.
You may request that ipo138 restrict the processing of your data under certain circumstances while a dispute is pending resolution.
You have the right to receive your personal data in a structured, reusable format under certain circumstances.
You have the right to object to the processing of your data for specific purposes, including marketing communications from ipo138.
To exercise any of the rights listed above, please contact the ipo138 support team via live chat within the platform or by emailing support@ipo138.asia. We will process your request within 14 business days and notify you of the action taken. This service is free of charge and will not affect your VIP account status.
Ipo138 services are intended for individuals aged 18 and above only and are not directed at minors or underage individuals. IPO138 does not intentionally collect personal data from anyone under the age of 18.
If you are a parent or guardian and believe that a minor in your care has registered for or used the ipo138 platform, please contact us immediately at support@ipo138.asia. Ipo138 will take prompt action to close the account in question, delete all data collected, and refund any remaining balance held in that account.
Ipo138 uses multiple mechanisms to verify user age during the registration process. If there is reason to suspect that a user may be underage, the account will be suspended immediately until satisfactory age verification is provided.
IPO138 reserves the right to amend, update, or improve this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes in how we operate our services. The most current version of the ipo138 Privacy Policy will always be available on this page, with a clear last-updated date at the top.
For material amendments — that is, changes that significantly affect how we use or protect your data — ipo138 will notify you via an in-platform notification or by email to the address registered on your account at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision about your continued use of ipo138 services.
Your continued use of the ipo138 platform after any amendments to this Privacy Policy take effect will be considered your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how ipo138 protects your privacy.
If you have any questions, concerns, or complaints regarding how ipo138 handles your personal data, or if you wish to exercise any of the privacy rights outlined in this Privacy Policy, please reach out to us through the following channels:
The ipo138 privacy team is proficient in Bahasa Melayu and will respond to all enquiries within 3 business days for email and immediately for live chat. For formal data requests (access, correction, erasure), the response time is 14 business days in accordance with legal requirements.
Ipo138 is committed to resolving any privacy concerns you may have directly and to your satisfaction. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, which oversees PDPA compliance in the country.
Your gaming activity data on ipo138 is also used to support our responsible gaming programme — including identifying risky betting patterns and enabling deposit limit, loss limit, and self-exclusion tools to function effectively. This use of data is directly in your interest as a member. More information is available on the Responsible Gaming us. ipo138's services are intended for individuals aged 18 and above only.
Answers to the most frequently asked questions about privacy and personal data at ipo138