Your privacy matters. This policy explains what personal data we collect, how we use it, who we share it with, and the rights you hold over your information as an ipo138 player.
ipo138 ("we," "us," "our") operates the online betting platform accessible at https://ipo138.cam. We are committed to protecting the privacy and personal data of every player who registers with, deposits on, or otherwise interacts with our platform. This Privacy Policy describes in plain language how we collect, use, disclose, and safeguard your information.
This policy applies to all users of the ipo138 platform, including residents of Indonesia who access our services via desktop browser, mobile browser, or any other means. By creating an account or continuing to use our services, you confirm that you have read and understood this Privacy Policy and that you consent to the practices described herein.
If you do not agree to this Privacy Policy, please do not register an account or continue using our platform. You may also exercise your data rights at any time as outlined in Section 11 of this document.
We collect only the information necessary to provide, secure, and continuously improve our services. The categories of personal data we collect from ipo138 players include:
We collect personal data through the following mechanisms:
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, email, phone, DOB | Account creation & age verification |
| KYC / Identity Data | KTP copy, selfie, proof of address | Regulatory compliance & fraud prevention |
| Financial Data | Bank account, e-wallet ID, transactions | Payment processing & AML compliance |
| Technical / Usage Data | IP address, device type, session logs | Security, analytics & platform improvement |
| Communications Data | Chat transcripts, emails | Support quality & dispute resolution |
ipo138 processes your personal data for the following purposes:
We process your personal data on the following legal grounds:
ipo138 does not sell, rent, or trade your personal data to third parties for marketing purposes. We share your data only in the following limited circumstances:
We engage trusted third-party processors to help deliver our services. These include payment gateway operators (to process your BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay transactions), KYC verification providers, cloud infrastructure hosts, and customer support software providers. All processors are bound by strict data processing agreements and may not use your data for any purpose beyond the specific service they provide.
We may disclose your data to relevant authorities where required by law, court order, or regulatory obligation—for example, in connection with anti-money laundering investigations or to comply with subpoenas from authorized bodies.
In cases of suspected fraud, identity theft, or other security incidents, we may share data with specialist fraud-prevention organizations to protect both our players and our platform.
In the event of a merger, acquisition, or transfer of business assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer and ensure that your data remains protected under terms no less restrictive than this Privacy Policy.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Our standard retention periods are as follows:
When your data is no longer required, we securely delete or anonymize it so that it can no longer be linked to you as an individual.
ipo138 uses cookies and similar tracking technologies to deliver a seamless and personalized experience on our platform. A cookie is a small text file stored on your device when you visit our site.
You may control and delete cookies through your browser settings. Please note that disabling essential cookies will affect the functionality of the ipo138 platform and may prevent you from logging in or placing bets. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.
Protecting your personal data is a core operational priority at ipo138. We implement a comprehensive set of technical and organizational security measures, including:
Despite our best efforts, no system is entirely immune to breach. In the unlikely event of a data security incident that poses a significant risk to your rights, we will notify affected players promptly and take all necessary steps to mitigate harm.
As an ipo138 player, you hold meaningful rights over your personal data. We are committed to honoring these rights promptly and without unnecessary barriers:
You have the right to request a copy of the personal data we hold about you, along with information about how it is being used. We will provide this within 30 days of a verified request.
If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. You may update certain account details directly through your account dashboard, or contact support for assistance.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. Note that certain data must be retained to comply with legal obligations (e.g., AML regulations) and cannot be erased on request.
You may request that we restrict the processing of your data in certain circumstances—for example, while you contest the accuracy of your data or while a complaint is under investigation.
Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on our legitimate interests. You may also withdraw consent for marketing communications at any time by contacting our support team.
To exercise any of the rights above, please contact our Data Protection team at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.
The ipo138 platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the registration and KYC process, and we use both self-declaration and document-based verification to confirm that all players meet the minimum age requirement.
If we discover that a player has provided false information about their age, or that personal data has been collected from a person under 21, we will immediately suspend the relevant account, void all associated bets and winnings, and delete the minor's personal data from our systems. Parents or guardians who believe their child has registered on our platform should contact us immediately at [email protected].
As an internationally operated platform, ipo138 may transfer your personal data to servers or processors located outside Indonesia. Wherever such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to this Privacy Policy. Safeguards may include standard contractual clauses, processor agreements, or equivalent mechanisms recognized under applicable data protection frameworks.
All data transfers involving Indonesian player information are handled with particular care given the sensitivity of financial and identity data. We do not transfer personal data to jurisdictions that do not offer adequate levels of data protection without implementing supplementary protective measures.
We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or operational requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you directly via email or an in-platform notification.
We encourage you to review this policy periodically to remain informed about how ipo138 protects your personal data. Your continued use of the platform after changes have been posted constitutes your acknowledgment of the updated policy.
If you have questions, concerns, or requests relating to this Privacy Policy or the way ipo138 handles your personal data, please reach out to our team through any of the following channels:
Our Indonesian-speaking support agents are available around the clock (WIB, WITA, and WIT time zones) and will direct data protection inquiries to the appropriate team. We aim to acknowledge all privacy-related requests within 2 business days and resolve them within 30 calendar days.
Six pillars of data privacy that every ipo138 player benefits from, every day.
Every byte of data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Your credentials, financial details, and personal information are never exposed in transit.
Our identity verification process ensures that only eligible adults (21+) can access the platform. KTP documents and selfies are verified against authoritative sources, protecting the entire player community.
We never sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used exclusively to operate, secure, and improve the ipo138 platform.
Access to player data is restricted on a strict need-to-know basis. Regular audits verify that only authorized personnel can view sensitive information, and all access events are logged.
Independent security specialists conduct regular penetration testing and vulnerability assessments of our infrastructure to identify and remediate risks before they can be exploited.
Access, correct, export, or delete your personal data at any time. Withdraw marketing consent with a single message. Our team responds to all data rights requests within 30 days—no friction, no delay.
Our support team is ready to help with any data protection inquiry or account concern.