Privacy Policy

1. Introduction

This Privacy Policy describes how ipo38 ("we," "us," "our") collects, uses, stores, and protects the personal information of users ("you," "your") who access our website at https://ipo38.cam and use our online sports betting, live casino, slot games, and togel (Indonesian lottery game) services.

By creating an account or using ipo38 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, you must immediately cease using our platform.

ipo38 operates as an internationally licensed online gaming platform serving customers in Indonesia and other permitted jurisdictions. We are committed to protecting your privacy in accordance with applicable data protection laws and industry best practices.

2. Data We Collect

ipo38 collects various types of personal information to provide, maintain, and improve our services. The categories of data we collect include:

2.1 Information You Provide Directly

When you register an account, verify your identity, or use our services, you provide us with the following information:

• Account Registration Data: Full name, date of birth, email address, mobile phone number, residential address, username, password, and security questions
• Identity Verification Data (KYC): Government-issued ID (KTP, passport, driver's license), proof of address documents, selfie photographs, signature
• Payment Information: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata), e-wallet information (OVO, DANA, GoPay, ShopeePay), transaction history, deposit and withdrawal records
• Communication Data: Messages sent to customer support, live chat transcripts, email correspondence, feedback and survey responses
• Marketing Preferences: Communication preferences, promotional opt-in/opt-out choices

2.2 Information Collected Automatically

When you access ipo38, we automatically collect certain technical and usage information:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, language settings, time zone
• Usage Data: Pages visited, games played, bet history, session duration, clickstream data, referral source, search queries within the platform
• Location Data: Approximate geographic location derived from IP address (city/region level, not precise GPS coordinates)
• Cookies & Similar Technologies: Session cookies, persistent cookies, web beacons, pixel tags, and local storage data (see Section 6 for details)

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment processors and banks to verify transactions and prevent fraud
• Identity verification services to confirm your identity and age
• Marketing partners and affiliate networks (if you were referred to ipo38)
• Game providers and sportsbook data suppliers to track game results and betting outcomes

3. How We Use Your Data

ipo38 uses your personal information for the following purposes:

3.1 Service Provision & Account Management

• Create and manage your ipo38 account
• Process deposits, withdrawals, and other financial transactions
• Verify your identity and age (21+ requirement) to comply with legal obligations
• Provide customer support and respond to your inquiries
• Process bets, settle winnings, and maintain accurate transaction records
• Enable access to sports betting, live casino, slots, and togel games

3.2 Security & Fraud Prevention

• Detect and prevent fraudulent activity, money laundering, and bonus abuse
• Monitor account activity for suspicious patterns or unauthorized access
• Enforce our Terms & Conditions and protect the integrity of our platform
• Comply with anti-money laundering (AML) and know-your-customer (KYC) regulations
• Investigate disputes, resolve complaints, and protect our legal rights

3.3 Platform Improvement & Analytics

• Analyze usage patterns to improve website performance and user experience
• Conduct research and development for new games and features
• Personalize content, game recommendations, and promotional offers based on your preferences
• Test new features and optimize platform functionality
• Generate anonymized statistical reports and business intelligence

3.4 Marketing & Communications

• Send promotional emails about bonuses, tournaments, and special offers (with your consent)
• Notify you about platform updates, new games, and important account information
• Conduct surveys and request feedback to improve our services
• Display targeted advertisements based on your interests and activity (you can opt out)

3.5 Legal & Regulatory Compliance

• Comply with licensing requirements and regulatory obligations
• Respond to legal requests from government authorities, law enforcement, or courts
• Enforce responsible gaming policies and self-exclusion requests
• Maintain records required by gambling regulations and tax authorities

4. Data Sharing & Disclosure

ipo38 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for the purposes described in this policy:

4.1 Service Providers

We share data with trusted third-party service providers who perform functions on our behalf, including:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals
• Game Providers: Software studios and live casino operators to deliver gaming content and track game results
• Identity Verification Services: Third-party KYC providers to verify your identity and age
• Cloud Hosting & IT Infrastructure: Cloud storage providers and server hosts to store data securely
• Customer Support Tools: Live chat software and help desk platforms to assist with inquiries
• Marketing & Analytics: Email service providers, SMS gateways, and analytics platforms to communicate with you and analyze usage

All service providers are contractually bound to protect your data and use it only for specified purposes. They are prohibited from using your information for their own marketing or other purposes.

4.2 Legal & Regulatory Authorities

We may disclose your information to government agencies, law enforcement, or regulatory bodies when required by law or when necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Investigate or prevent illegal activity, fraud, or violations of our Terms & Conditions
• Protect the rights, property, or safety of ipo38, our users, or the public
• Respond to licensing audits or regulatory investigations

4.3 Business Transfers

If ipo38 is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email or platform notice before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with other third parties when you provide explicit consent, such as when you authorize sharing data with a specific partner or participate in a co-branded promotion.

5. Data Security

ipo38 takes data security seriously and implements robust technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same standard used by banks
• Secure Storage: Personal data is stored on encrypted servers in secure data centers with restricted physical access
• Firewalls & Intrusion Detection: Network-level firewalls and intrusion detection systems monitor and block malicious traffic
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access sensitive data, and all access is logged and audited
• Password Protection: User passwords are hashed and salted using industry-standard algorithms (bcrypt/Argon2) and never stored in plain text

5.2 Organizational Security Measures

• Regular security audits and penetration testing by independent third parties
• Employee training on data protection and confidentiality obligations
• Mandatory background checks for staff with access to sensitive data
• Incident response procedures to detect and respond to data breaches quickly
• Regular backups and disaster recovery plans to prevent data loss

5.3 Your Security Responsibilities

While we implement strong security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication (2FA) if available
• Log out after each session, especially on shared or public devices
• Keep your email account secure (password resets are sent to your registered email)
• Report suspicious activity or unauthorized access immediately

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you promptly in accordance with applicable laws.

6. Cookies & Tracking Technologies

ipo38 uses cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly (e.g., maintaining your login session, processing payments). These cannot be disabled without affecting functionality.
• Performance Cookies: Collect anonymous data about how you use our website (e.g., pages visited, time spent, error messages) to help us improve performance.
• Functionality Cookies: Remember your preferences (e.g., language, time zone) to provide a more personalized experience.
• Advertising Cookies: Track your browsing activity to display relevant ads on ipo38 and third-party websites. You can opt out of personalized advertising.

6.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to:

• View and delete individual cookies stored on your device
• Block all cookies or only third-party cookies
• Clear all cookies when you close your browser
• Receive a warning before cookies are stored

Please note that disabling cookies may affect your ability to use certain features of ipo38. Essential cookies are necessary for core functionality and cannot be disabled while using our services.

6.3 Third-Party Tracking

ipo38 uses third-party analytics services (e.g., Google Analytics) to understand user behavior and improve our platform. These services may collect data across multiple websites and over time. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

7. Your Rights

As a user of ipo38, you have certain rights regarding your personal data. We are committed to honoring these rights in accordance with applicable data protection laws.

7.1 Right to Access

You have the right to request a copy of the personal data we hold about you. This includes account information, transaction history, and communication records. You can request access by contacting customer support.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information (email, phone number, address) directly through your account settings or by contacting support.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for its original purpose or you withdraw consent. However, we may retain certain data if required by law (e.g., for regulatory compliance, fraud prevention, or dispute resolution).

7.4 Right to Restrict Processing

You can request that we limit how we use your data in certain situations, such as while a dispute about accuracy is being resolved or if you object to processing based on legitimate interests.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g., CSV or JSON file) and to transmit it to another service provider.

7.6 Right to Object

You may object to processing of your data for marketing purposes at any time by clicking "unsubscribe" in promotional emails or updating your communication preferences in account settings. You may also object to processing based on legitimate interests by contacting us.

7.7 Right to Withdraw Consent

Where we rely on your consent to process data (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] or through live chat. We will respond to your request within 30 days. We may require identity verification to prevent unauthorized access to your data.

8. Data Retention

ipo38 retains your personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce our policies.

8.1 Active Account Data

While your account is active, we retain all account information, transaction history, and communication records to provide ongoing service and support.

8.2 Closed Account Data

After you close your account, we retain certain data for the following periods:

• Financial Records: 7 years (required by anti-money laundering regulations)
• Identity Verification Documents: 7 years (required by KYC regulations)
• Transaction History: 7 years (required for tax and audit purposes)
• Communication Records: 3 years (for dispute resolution and customer service improvement)
• Marketing Data: Deleted immediately upon opt-out or account closure (unless needed for legal claims)

8.3 Anonymized Data

After the retention period, we may anonymize your data by removing all personally identifiable information. Anonymized data cannot be linked back to you and may be retained indefinitely for statistical analysis and research purposes.

8.4 Legal Holds

If your account is subject to an ongoing investigation, dispute, or legal proceeding, we will retain relevant data until the matter is resolved, even if it exceeds standard retention periods.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 on our website (click the chat icon in the bottom-right corner)
• WhatsApp: +62 812-3456-7890 (08:00 - 23:00 WIB daily)

For specific privacy-related inquiries, please include "Privacy Request" in the subject line of your email. We will respond within 30 days.

9.1 Changes to This Privacy Policy

ipo38 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated via email or a prominent notice on our platform at least 30 days before taking effect.

Your continued use of ipo38 services after the updated Privacy Policy becomes effective constitutes acceptance of the changes. We encourage you to review this page periodically to stay informed about how we protect your data.

This Privacy Policy was last updated on January 15, 2026. Previous versions are available upon request.