Official ipo138 Documents

Privacy Policy IPO138 – Malaysia Member Personal Data Protection

Ipo138 takes the protection of every member's personal data seriously. This Privacy Policy transparently explains how we collect, use, store, and protect your information – all subject to Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026
256-bit SSL
Full encryption
PDPA 2010
Full compliance
Separate Account
Secure funds
Secure KYC
Protected Identity

Six Ways ipo138 Protects Your Data

Member privacy is more than a legal obligation for ipo138 – it is a genuine commitment reflected at every layer of our platform infrastructure.

256-bit SSL Encryption

All data transmitted between your device and ipo138 servers is protected with 256-bit SSL encryption. No one can intercept or read your data in transit.

Secure Data Storage

Member personal data is stored on servers protected by multi-layered access controls. Only authorised personnel may access sensitive data under specific circumstances.

Integrated KYC Verification

The Know Your Customer (KYC) process at ipo138 is conducted entirely through encrypted channels. Your identity documents are never stored in a readable format without authorisation.

No Sharing Without Consent

Ipo138 does not sell, rent, or share member personal data with third parties for marketing purposes. Data is only shared when required by law or to process your transactions.

PDPA 2010 Compliance

All data handling practices at ipo138 fully comply with Malaysia's Personal Data Protection Act 2010. We stay current with the latest legislative amendments to ensure ongoing protection.

Mobile App Security

The ipo138 mobile app uses two-factor authentication and local data encryption. Login sessions expire automatically after a period of inactivity to prevent unauthorised access.

Important Note: By registering or continuing to use the ipo138 platform, you agree to the collection and use of your personal information as described in this Privacy Policy. Please read this document carefully before providing any personal information.

1 Information We Collect

Ipo138 collects various types of information from members to enable the platform to operate safely and efficiently. This data collection is necessary to deliver the best gaming experience while ensuring compliance with Malaysian legal requirements.

Data Category Example Information Primary Purpose
Identity Full name, date of birth, MyKad / passport number KYC verification, legal compliance
Contact Phone number, email address Account communications, customer support
Finance Bank account number, e-wallet, transaction records Deposit and withdrawal processing
Technical IP address, device type, web browser, activity logs Security, fraud prevention
Usage Game history, wagering activity, login timestamps Platform improvement, support

We do not collect information beyond what is necessary for the stated purpose. Any information collected is proportionate to the service requirements provided to you.

2 How We Use Your Data

Personal information you provide to ipo138 is used responsibly for clear and legitimate purposes. We do not use your data for purposes unrelated to the platform's services.

  • Account management: Create, verify and maintain your member account
  • Transaction processing: Manage all deposits, withdrawals and financial transactions
  • Fraud prevention: Detect and investigate suspicious activity
  • Customer support: Handle enquiries, complaints and support requests
  • Legal compliance: Meet reporting obligations to relevant authorities
  • Platform improvement: Analyse usage patterns to improve user experience
  • Service communications: Send important notifications related to your account and transactions

Marketing Preferences: If you no longer wish to receive promotional communications from ipo138, you may withdraw your consent at any time through your account settings or by contacting our support team.

3 Legal Basis for Data Processing

Ipo138 processes member personal data on a solid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). Every data processing activity has a clear legal justification.

  • Contract performance: Processing necessary to fulfil the service agreement between you and ipo138
  • Legal obligation: Processing required by Malaysian law, including anti-money laundering (AML) requirements
  • Legitimate interests: Processing for fraud prevention and platform security purposes
  • Consent: Processing for marketing communications based on explicit consent provided by you

If you would like to know more about the specific legal basis we use to process your data, please contact the ipo138 privacy team via the platform's live chat.

4 Data Sharing & Disclosure

Ipo138 does not sell or rent member personal data to any third party for marketing purposes. However, there are limited situations where we may need to share certain information.

  • Payment service providers: Transaction data required to process your MYR deposits and withdrawals
  • KYC service providers: Identity information for verification purposes, governed by strict confidentiality agreements
  • Regulatory authorities: Information required by Malaysian law or court order
  • Cybersecurity team: Technical data limited to addressing active security threats

Note: All third parties that receive ipo138 member data are bound by strict data protection agreements and are only permitted to use that data for the stated purpose. We do not transfer data across borders without adequate safeguards.

5 Cookies & Tracking Technologies

The ipo138 website and mobile app use cookies and similar tracking technologies to enhance user experience and platform security. Below are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
  • Performance Cookies: Collects information about how you use the platform to help us improve our services.
  • Functional Cookies: Save your preferences such as language, display settings and login details for your convenience.
  • Analytics Cookies: Helps us understand aggregated, non-personal usage patterns for platform improvement.

You can manage cookie settings through your web browser at any time. However, disabling certain cookies may affect platform functionality. The ipo138 mobile app uses equivalent device identifiers that can be managed through your phone's privacy settings.

6 Data Security

Ipo138 implements comprehensive technical and organisational security measures to protect member personal data from unauthorised access, loss, destruction, or accidental disclosure.

  • Data encryption in transit: 256-bit SSL/TLS encryption for all communications between your device and our servers
  • Data encryption at rest: Sensitive data is encrypted in the database using AES-256 standards
  • Strict access controls: Principle of least privilege – staff only access data required for their specific duties
  • Continuous monitoring: Active intrusion detection system monitors suspicious activity 24/7
  • Regular security audits: Penetration testing and independent security audits are conducted on a regular basis
  • Two-factor authentication: Available for all member accounts as an added layer of security

While ipo138 takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. You also play an important role by keeping your account password safe and not sharing your login credentials with anyone.

7 Data Retention Period

Ipo138 retains member personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law.

  • Active account data: Retained for as long as your account remains active on the ipo138 platform
  • KYC and transaction data: Retained for a minimum of 7 years after account closure in accordance with AML legal requirements
  • Communication logs: Retained for 2 years for customer support and complaint investigation purposes
  • Technical data: System and security logs are retained for 12 months before being securely deleted
  • Marketing data: Retained until you withdraw consent or close your account

When data is no longer needed, ipo138 ensures it is deleted or anonymised securely using industry-standard methods. You may request the deletion of specific data subject to applicable legal obligations.

8 Your Rights as a Member

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding your personal data held by ipo138. We respect and facilitate the exercise of these rights.

Right of Access

Request a copy of the personal data we hold about you at any time.

Right to Rectification

Request correction of inaccurate or incomplete data in your account.

Right to Erasure

Request deletion of your personal data, subject to legal obligations.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Portability

Receive a copy of your data in a structured, machine-readable format.

Right to Restriction

Request restriction of your data processing under certain circumstances provided by law.

To exercise any of the above rights, contact the ipo138 privacy team via live chat on the platform or mobile app. We will process your request within 30 business days.

9 Children's Data

The ipo138 platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

Important Notice: If we find that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question. Parents or guardians who discover that their child has registered an account at ipo138 should contact us immediately.

10 Privacy Policy Amendments

Ipo138 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform improvements. All amendments will be published on this page with a clear effective date.

For material amendments that significantly affect your privacy rights, ipo138 will provide clear advance notice via your registered email or an in-platform notification at least 14 days before the changes take effect.

Continued use of the ipo138 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. The date of the latest update is always stated at the top of this document for your reference.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ipo138 handles your personal data, our team is ready to assist.

  • Live Chat: Available 24/7 on the ipo138 web platform and mobile app
  • Support Email: [email protected] (reply within 1 business day)
  • FAQ Page: Visit the FAQ section for answers to frequently asked questions about privacy

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the provisions of PDPA 2010.

ipo138 is committed to responding to all privacy-related enquiries within 3 business days and resolving formal complaints within 30 business days.

Your Data Is Safe with ipo138 – Register with Confidence

With 256-bit SSL encryption, full PDPA 2010 compliance, and a transparent privacy policy, ipo138 is a platform you can trust completely. Start your gaming journey today.

256-bit SSL Encryption PDPA 2010 Compliance Protected KYC 24/7 Support
Bahasa Melayu