ipo135 Privacy Policy — How We Handle Your Data

ipo135 ("we," "us," or "the Platform") is committed to protecting the privacy and personal data of everyone who uses our online betting and casino services at https://ipo135.net. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal information relating to members and visitors to the ipo135 platform.

This policy is written in accordance with internationally recognized data protection principles, including those reflected in the General Data Protection Regulation (GDPR) as a benchmark standard, and is designed to be fully transparent about how ipo135 handles the personal data of its Indonesian and international members.

By registering for an ipo135 account, making a deposit, or otherwise using any ipo135 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly — including name, email address, phone number, government ID number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means ipo135, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of ipo135 under a data processing agreement — such as payment processors, KYC verification providers, and analytics platforms.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity and document verification process required under applicable anti-money laundering frameworks.

ipo135 collects the following categories of personal data in connection with account registration, platform use, and regulatory compliance:

ipo135 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where a member voluntarily discloses such information in the context of a responsible gaming self-assessment or support interaction.

ipo135 collects personal data through the following channels:

4.1 Directly from You

• When you complete the account registration form on the ipo135 platform;
• When you submit documents for KYC verification;
• When you make a deposit or withdrawal and provide payment account details;
• When you contact ipo135 support via live chat, email, or WhatsApp;
• When you participate in a promotion or complete a responsible gaming self-assessment.

4.2 Automatically Through Platform Use

• Technical data including IP address, device identifiers, browser fingerprint, and session logs are collected automatically when you access the ipo135 platform;
• Transaction and gaming activity data are generated automatically when you place bets, play casino games, or conduct financial transactions on the platform;
• Cookie data is collected through your browser in accordance with Section 10 of this policy.

4.3 From Third Parties

• KYC and identity verification providers may supply ipo135 with the results of document authentication and identity checks;
• Payment processors may share transaction confirmation data and fraud screening results with ipo135 as part of payment processing workflows;
• Fraud prevention and AML screening databases may be consulted to verify member information against sanctions lists and known fraud records.

ipo135 processes your personal data only for specified, explicit, and legitimate purposes. The legal basis for each primary processing activity is set out below:

• Contract performance: Processing your account registration details, payment data, and gaming activity records is necessary to deliver the services you have contracted with ipo135 to receive.
• Legal obligation: Processing KYC documents, transaction records, and identity data is required to comply with our anti-money laundering, counter-terrorism financing, and responsible gaming regulatory obligations.
• Legitimate interests: Processing technical and behavioral data for fraud detection, platform security, and service improvement serves the legitimate interests of ipo135 and its members, where those interests are not overridden by your privacy rights.
• Consent: Where ipo135 sends you marketing communications or uses non-essential analytics cookies, this processing is based on your consent, which you may withdraw at any time by contacting support or adjusting your cookie preferences.

ipo135 does not use your personal data for automated decision-making that produces legal or similarly significant effects, except in the context of standard fraud screening processes where suspicious account activity triggers a hold for manual human review.

ipo135 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data is shared only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors and banking partners: BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and cryptocurrency payment processors receive the financial data required to process your deposits and withdrawals. These providers are subject to their own privacy and security standards.
• KYC and identity verification providers: Specialist identity verification services receive the documents you submit for KYC purposes in order to authenticate their validity and confirm your identity. These providers operate under strict data processing agreements with ipo135.
• Game studio providers: Evolution Gaming, Pragmatic Play, Pocket Games Soft, NetEnt, Microgaming, and other licensed game providers may receive technical session data necessary to deliver their games and settle results. No personally identifiable data beyond session tokens is shared with game providers.
• Regulatory and law enforcement authorities: ipo135 will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction — including in the context of AML reporting obligations.
• Professional advisors: Legal, accounting, and audit professionals retained by ipo135 may access personal data on a strictly confidential basis in the course of providing professional services to the platform.

As an internationally licensed platform serving members primarily in Indonesia, ipo135 may transfer your personal data to servers and service providers located outside Indonesia. Where such transfers occur, ipo135 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable data protection law.

Safeguards for international transfers may include contractual clauses that bind the recipient to maintain appropriate data protection standards, reliance on recipients located in jurisdictions recognized as providing adequate data protection, or other legally recognized transfer mechanisms. If you would like more information about the specific safeguards applied to transfers of your personal data, please contact support at [email protected].

ipo135 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the ipo135 platform;
• Encryption at rest for all databases containing personal and financial data;
• Role-based access controls ensuring that employee access to personal data is limited to what is strictly necessary for their job function;
• Full audit logging of all access to personal data and administrative system actions;
• Regular security assessments and penetration testing of platform infrastructure;
• Multi-factor authentication required for all internal administrative access to member data systems.

Notwithstanding these measures, no system connected to the internet can be guaranteed to be completely secure. ipo135 encourages all members to use strong, unique passwords for their ipo135 accounts and to enable any available account security features. If you suspect that your account has been compromised, contact ipo135 support immediately via live chat.

ipo135 retains your personal data for as long as your account remains active and for a minimum period after account closure as required by applicable law and our regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, in accordance with anti-money laundering regulatory requirements.
• Transaction and gaming records: Retained for a minimum of five (5) years following the date of each transaction, as required for regulatory reporting and dispute resolution purposes.
• KYC documents: Retained for a minimum of five (5) years following the completion of the KYC verification process, or longer where required by applicable law.
• Support correspondence: Retained for a minimum of two (2) years following the resolution of the relevant support interaction, to support quality assurance and dispute resolution.
• Technical and analytics data: Retained for a maximum of twenty-four (24) months from collection, after which it is anonymized or deleted.

At the end of the applicable retention period, personal data is securely deleted or anonymized. Where data has been anonymized (such that it can no longer be used to identify you), it may be retained for analytical and statistical purposes without limit.

ipo135 uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyze aggregate usage patterns. The cookies used by ipo135 fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the ipo135 platform to function correctly — they maintain your login session, remember your language preferences, and enable secure financial transactions. These cookies cannot be disabled without affecting core platform functionality.
• Analytics cookies: ipo135 uses anonymized analytics data to understand how members navigate the platform, which pages are most visited, and where technical issues may be occurring. This data is aggregated and does not identify individual users.
• Functional cookies: These cookies remember your preferences (such as display settings and preferred payment method) to improve your experience on return visits.

ipo135 does not use third-party advertising or retargeting cookies. No data collected through ipo135 cookies is shared with external advertising networks or used to serve targeted advertisements on other websites.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ipo135 platform.

Subject to applicable law and our regulatory obligations, you hold the following rights in relation to the personal data that ipo135 holds about you. To exercise any of these rights, please contact our support team via live chat or at [email protected].

ipo135 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, with written notification to you explaining the reason for the extension. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive.

The ipo135 platform is strictly intended for adults aged 21 and over. ipo135 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If ipo135 becomes aware that personal data has been collected from an individual under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any deposits will be returned to the originating payment account.

If you believe that an individual under the age of 21 has registered for an ipo135 account, please contact us immediately at [email protected] so that we can take prompt action.

The ipo135 platform may contain references to third-party services — such as payment processors, game studio providers, or licensed sports data providers — whose privacy practices are independent of ipo135. This Privacy Policy applies solely to personal data processed by ipo135 and does not cover the data practices of any third-party service. ipo135 accepts no responsibility for the privacy practices of third parties and encourages members to review the privacy policies of any third-party service they interact with.

ipo135 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered members via a notice on the ipo135 website and, where feasible, by email to the address registered on your account, with a minimum of seven (7) days' notice before changes take effect.

The date of the most recent revision is always displayed at the top of this page. Continued use of the ipo135 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the platform and contact support to close your account.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data ipo135 holds about you, please contact the ipo135 Data Support team through any of the following channels:

• Live Chat: Available 24/7 directly through the ipo135 website. Indonesian-speaking agents are available at all times.
• Email: [email protected] — use the subject line "Privacy Request" for data rights inquiries. Response within 24 hours (WIB).
• WhatsApp: +62 811 0135 135 (plain text — not a clickable link). Available during support hours.

ipo135 aims to resolve all privacy inquiries promptly, courteously, and in full compliance with applicable data protection standards. If you are not satisfied with our response to a privacy inquiry, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.