Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by api88 through our website, mobile applications, customer support channels, and any other services we provide (collectively referred to as "Services"). This policy covers data collected from residents of Indonesia who register accounts and use api88 for online betting and gaming activities. We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any updates will be posted on this page with a revised "Last Updated" date, and we encourage you to review this policy periodically.

api88 acts as the data controller for the personal information we collect and process. This means we determine the purposes for which your data is used and how it is processed. As data controller, we are responsible for ensuring that your personal information is handled lawfully, fairly, and transparently in accordance with applicable data protection regulations.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account with api88, we collect the following personal information that you provide directly:

• Identity Information: Full legal name, date of birth, nationality, and government-issued identification number (KTP or passport number)
• Contact Information: Email address, mobile phone number, residential address (street address, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay account identifiers), payment transaction history
• Verification Documents: Copies of identity documents (KTP, passport), proof of address documents (utility bills, bank statements), selfie photographs for identity verification
• Communication Records: Content of messages sent to customer support via live chat, email, or WhatsApp, including any attachments or screenshots you provide

2.2 Information Collected Automatically

When you use api88 services, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device identifiers
• Connection Information: IP address, internet service provider, connection speed, geographic location (derived from IP address)
• Usage Data: Pages visited, features used, time spent on platform, click patterns, search queries, game preferences, betting patterns
• Transaction Data: Deposit amounts and methods, withdrawal requests and methods, bet history (sport/game, stake amount, odds, outcome), bonus claims and usage
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track user activity and preferences. See Section 9 for detailed information about cookies.

2.3 Information from Third Parties

In some cases, we receive information about you from third-party sources:

• Payment Processors: Transaction confirmation data from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers
• Identity Verification Services: Verification results from third-party KYC service providers
• Marketing Partners: If you found api88 through an affiliate or marketing campaign, we may receive referral information
• Public Databases: Information from public records or databases used to verify identity and prevent fraud

3. How We Use Your Information

api88 uses the personal information we collect for the following purposes:

We will only use your personal information for the purposes stated in this Privacy Policy or as otherwise disclosed to you at the time of collection. If we need to use your information for a new purpose not covered here, we will notify you and, where required by law, obtain your consent.

4. Data Sharing and Disclosure

4.1 Third Parties We Share Data With

api88 may share your personal information with the following categories of third parties:

• Payment Service Providers: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals
• Game and Platform Providers: Third-party software providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt) whose games and platforms you access through api88
• Identity Verification Services: KYC service providers who verify your identity documents and perform anti-fraud checks
• Customer Support Tools: Live chat platforms and help desk software used to manage customer inquiries
• Analytics and Marketing Services: Analytics platforms that help us understand user behavior and marketing effectiveness (data is typically anonymized or pseudonymized)
• Legal and Regulatory Authorities: Government agencies, regulators, and law enforcement when required by law or to protect our legal rights

4.2 Data Protection Standards for Third Parties

We require all third parties with whom we share personal information to maintain appropriate security measures and to process data only as instructed by api88. We conduct due diligence on third-party service providers to ensure they meet our data protection standards. Third parties are contractually prohibited from using your personal information for their own purposes or disclosing it to others without our authorization.

4.3 Business Transfers

In the event that api88 undergoes a business transition such as a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor organization. We will notify you via email and/or prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

api88 implements comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS encryption
• Secure Storage: Personal information is stored on secure servers protected by firewalls, intrusion detection systems, and access controls
• Access Restrictions: Only authorized api88 personnel with legitimate business needs can access personal data, and access is logged and monitored
• Password Protection: User passwords are hashed using strong cryptographic algorithms and are never stored in plain text
• Regular Security Audits: We conduct regular security assessments and penetration testing to identify and address vulnerabilities
• Employee Training: All api88 staff receive training on data protection principles and security best practices
• Incident Response: We maintain a data breach response plan to quickly address and mitigate any security incidents

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we commit to taking all reasonable steps to protect your information and to notify you promptly in the event of any security breach affecting your personal data.

6. Data Retention

api88 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal and regulatory obligations:

• Active Accounts: Personal information is retained for the duration your account remains active and operational
• Closed Accounts: After account closure, we retain personal data for a minimum of five (5) years as required by gaming regulations and anti-money laundering laws
• Financial Records: Transaction records, betting history, and financial data are retained for seven (7) years for tax and auditing purposes
• Marketing Data: If you opt out of marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not contact you again
• Legal Claims: Data may be retained longer if required to establish, exercise, or defend legal claims

Once the retention period expires and there is no legal basis for continued storage, we securely delete or anonymize your personal information so that it can no longer be associated with you.

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: You can request a copy of the personal information we hold about you
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal information
• Right to Erasure: You can request deletion of your personal information in certain circumstances (subject to legal retention obligations)
• Right to Restrict Processing: You can request that we limit how we use your personal information
• Right to Data Portability: You can request a copy of your personal information in a structured, machine-readable format
• Right to Object: You can object to our processing of your personal information for certain purposes, including marketing
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within thirty (30) days. You also have the right to lodge a complaint with a data protection supervisory authority if you believe we have not handled your personal information appropriately.

8. Marketing Communications and Opt-Out

api88 may send you promotional emails, SMS messages, and push notifications about bonuses, special offers, and updates to our services. You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Adjusting your communication preferences in your account settings
• Replying "STOP" to SMS marketing messages
• Contacting customer support at [email protected]

Please note that even if you opt out of marketing communications, we will still send you essential service-related communications such as account verification emails, transaction confirmations, security alerts, and important policy updates. These transactional messages are necessary for account operation and cannot be opted out of while maintaining an active account.

9. Cookies and Tracking Technologies

api88 uses cookies, web beacons, and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use our services.

Types of Cookies We Use:

• Essential Cookies: Required for basic platform functionality including login, session management, and security. These cannot be disabled.
• Performance Cookies: Collect anonymous usage statistics to help us improve platform performance and user experience
• Functionality Cookies: Remember your preferences (language, timezone, display settings) to personalize your experience
• Advertising Cookies: Used to deliver relevant promotional content and measure marketing campaign effectiveness

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may prevent you from using certain features of the api88 platform. For more information about cookies and how to manage them, visit your browser's help documentation.

10. Children's Privacy

api88 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the legal gambling age. If you are under 21, you must not register an account or use our services. If we discover that we have inadvertently collected personal information from a minor, we will promptly delete that information and close the associated account. Parents or guardians who believe their child has provided personal information to api88 should contact us immediately at [email protected].

11. International Data Transfers

api88 primarily operates within Indonesia and stores user data on servers located in secure data centers. However, some of our service providers may process data outside of Indonesia. When we transfer personal information internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include standard contractual clauses approved by relevant authorities or verification that the recipient jurisdiction provides adequate data protection standards.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make significant changes, we will notify you by email (to the address associated with your account) and/or by posting a prominent notice on our website at least thirty (30) days before the changes take effect. Your continued use of api88 services after changes become effective constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your personal information.

13. Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

• Data Protection Officer: [email protected]
• General Customer Support: [email protected]
• Live Chat: Available 24/7 on our website
• WhatsApp Support: +62 812 3456 7890

We aim to respond to all privacy-related inquiries within thirty (30) days. For urgent security or data breach concerns, please mark your communication as "URGENT" and we will prioritize your request.