Privacy Policy

1. Introduction

api888 ("we", "us", "our") is committed to protecting the privacy and security of every member who uses our online betting and casino platform at api888.cam. This Privacy Policy applies to all personal data collected through the api888 website, mobile interfaces, customer support channels, and any other touchpoint where you interact with our brand.

We operate with a privacy-by-design philosophy — meaning that data minimization, purpose limitation, and security controls are built into our systems from the ground up, not added as an afterthought. This policy is written in plain, professional English so that all members, regardless of technical background, can clearly understand how their information is handled.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between you and api888. Together, these documents form the complete framework governing your membership and use of our Services.

2. Definitions

3. Data We Collect

api888 collects personal data in the following categories, limited to what is necessary for the stated processing purposes:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (for age verification — you must be 21 or older).
• Indonesian National Identity Card number (NIK from KTP), passport number, or driver's license number (SIM) where applicable.
• Username and encrypted password.
• Selfie or photograph submitted for biometric identity confirmation during KYC.

3.2 Contact Data

• Email address (primary communication and account verification channel).
• Indonesian mobile phone number (for SMS verification and two-factor authentication).
• Residential address (required for KYC and AML compliance).

3.3 Financial Data

• Bank account details: account holder name, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI), and account number — used exclusively for deposit and withdrawal processing.
• E-wallet identifiers: OVO, DANA, GoPay, ShopeePay, or LinkAja registered phone numbers or account IDs.
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method references.
• Source of funds documentation submitted for AML compliance on high-value accounts.

3.4 Usage & Behavioral Data

• Betting and gaming history: games played, wager amounts, outcomes, bonus usage, and session durations.
• Login timestamps, IP addresses, and geolocation data at the time of login.
• Device information: device type, operating system, browser version, and unique device identifiers.
• Pages visited, features accessed, and interaction patterns within the platform.

3.5 Communication Data

• Records of live chat conversations, email correspondence, and support tickets submitted to api888 customer service.
• Survey responses, feedback submissions, and promotional opt-in preferences.

4. How We Collect Data

api888 collects personal data through the following channels:

• Direct submission: Data you actively provide during registration, KYC verification, deposit/withdrawal forms, and customer support interactions.
• Automated collection: Data gathered automatically when you browse or interact with the platform, including via cookies, session tokens, and server logs.
• Third-party verification providers: Identity verification data returned by our KYC and AML service partners when cross-referencing your submitted documents against authoritative databases.
• Payment processors: Transaction status and confirmation data returned by BCA, BRI, BNI, Mandiri, and e-wallet providers following your deposit or withdrawal request.
• Device and network data: Automatically collected technical information from your device and internet connection at the time of platform access.

5. Purposes of Processing

api888 processes your personal data only for the following defined and legitimate purposes:

6. Legal Basis for Processing

api888 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to fulfill our contractual obligations to you as a registered member — including account management, deposit and withdrawal processing, and service delivery.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, identity verification mandates, and financial record-keeping obligations.
• Legitimate interests: Processing carried out for api888's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and analytics — provided these interests do not override your fundamental privacy rights.
• Consent: Processing for purposes such as sending promotional communications and personalized offers, where we rely on your explicit opt-in consent. You may withdraw this consent at any time by contacting our support team or updating your communication preferences within your account settings.

7. Data Sharing & Disclosure

api888 does not sell, rent, or commercially trade your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

7.1 Service Providers

We engage carefully selected third-party data processors who act under strict contractual data processing agreements. These include identity verification and KYC providers, payment processors (including banking APIs connected to BCA, BRI, BNI, Mandiri, and major e-wallet networks), cloud infrastructure providers, fraud detection services, and customer support tooling vendors. All processors are required to handle your data solely for the purposes instructed by api888 and to maintain security standards equivalent to our own.

7.2 Game Studios

Where necessary for game functionality, limited session data may be shared with certified third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. This data is restricted to what is technically required for game delivery and is not used by these studios for independent marketing purposes.

7.3 Legal & Regulatory Disclosure

api888 may disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory direction. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify the affected member promptly.

7.4 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets involving api888, personal data held by api888 may be transferred to the acquiring entity as part of that transaction. We will notify affected members via email prior to any such transfer and will ensure the receiving entity adheres to privacy standards at least equivalent to those described in this policy.

7.5 No Sale of Data

api888 will never sell your personal data to advertisers, data brokers, or any third party for commercial gain. This commitment is unconditional and applies regardless of the nature of the data or the requesting party.

8. Cookies & Tracking Technologies

api888 uses cookies and similar tracking technologies to operate the platform effectively, enhance your user experience, and support our security and analytics functions. The following categories of cookies are in use:

8.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They manage your login session, maintain account security tokens, enforce geographic access controls, and support basic platform operations. These cookies cannot be disabled without rendering core platform features non-functional.

8.2 Functional Cookies

Functional cookies remember your preferences — such as language settings, display configurations, and notification preferences — so that you do not need to re-enter them on each visit. Disabling these cookies may result in a reduced or less personalized platform experience.

8.3 Analytics Cookies

We use analytics cookies to understand how members navigate and interact with the platform, which features generate the most engagement, and where technical performance improvements are needed. This data is aggregated and anonymized wherever possible. api888 does not use analytics data to build individual behavioral profiles for marketing purposes without your explicit consent.

8.4 Security Cookies

Security cookies support our fraud detection systems by helping us identify unusual login patterns, device anomalies, and suspicious behavioral signals that may indicate unauthorized account access. These cookies operate in the background and are not used for any purpose other than protecting your account and the integrity of the platform.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of your api888 account. Continued use of the platform following your first visit constitutes acknowledgment of our cookie practices as described in this section.

9. Data Retention

api888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guidelines:

• Active account data: Retained for the duration of your active membership and for a period of 5 years following account closure, in compliance with AML record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of 5 years from the date of the transaction, in line with standard financial compliance obligations.
• KYC documentation: Identity documents and verification records are retained for 5 years following the end of the member relationship, unless a longer retention period is mandated by applicable law.
• Customer support records: Support interaction logs are retained for 2 years following the closure of the relevant support case, unless subject to ongoing legal proceedings.
• Marketing data: Retained until you withdraw consent, at which point it is deleted or fully anonymized within 30 days of the withdrawal request.
• Behavioral and analytics data: Aggregated and anonymized analytics data may be retained indefinitely. Individual-level behavioral data is deleted or anonymized within 12 months of account closure.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with any identifiable individual.

10. Data Security

api888 maintains a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the api888 platform.
• Encryption at rest for all sensitive personal and financial data stored on api888 servers.
• Role-based access controls ensuring that internal staff access to member data is limited strictly to those with a demonstrable operational need.
• Regular penetration testing and third-party security audits conducted at least annually to identify and remediate vulnerabilities.
• Two-factor authentication (2FA) available to all members and enforced for all api888 administrative users.
• Real-time intrusion detection systems monitoring for unauthorized access attempts, data exfiltration patterns, and anomalous platform behavior.
• Secure data center infrastructure with physical access controls, redundant storage, and disaster recovery capabilities.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, api888 will notify affected members without undue delay and will take all reasonable steps to contain, investigate, and remediate the breach.

11. Your Rights

As a member of api888 and as an individual whose personal data we process, you hold the following rights with respect to your information. You may exercise any of these rights by contacting our support team at the details provided in Section 16:

api888 will respond to all verified rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, with notice provided to you explaining the reason for the extension. We may need to verify your identity before processing a rights request to prevent unauthorized disclosure of another person's data.

12. Minors & Age Restriction

api888 strictly prohibits use of the platform by any individual under the age of 21. We do not knowingly collect, process, or retain personal data belonging to minors. Age verification is a mandatory step in the registration and KYC process for all members.

If api888 discovers that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the associated account, delete all related personal data, and reverse any financial transactions associated with that account in accordance with our Terms & Conditions.

If you believe that a minor has registered on the api888 platform or that their data is being processed by us, please contact our support team immediately so that we can investigate and take appropriate action without delay.

13. Third-Party Services

The api888 platform integrates with a number of third-party services to deliver its full feature set. These include certified game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), payment gateway providers connected to Indonesian banking networks (BCA, BRI, BNI, Mandiri), e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja), and identity verification specialists.

Each third-party service provider operates under its own privacy policy and data handling practices, which are independent of this Privacy Policy. api888 performs due diligence assessments on all third-party providers before engagement and contractually requires them to maintain data protection standards consistent with our own. However, api888 cannot accept liability for the independent privacy practices of third-party providers.

api888 does not embed third-party social media tracking pixels, advertising networks, or data brokerage tools on the platform. The only third-party data flows are those directly necessary for service delivery as described in this policy.

14. International Data Transfers

api888 primarily processes member data on servers located within the Asia-Pacific region. In some cases, data may be transferred to or accessible from locations outside Indonesia — for example, where a third-party service provider operates infrastructure in another country. In all such cases, api888 ensures that appropriate safeguards are in place to protect the transferred data, including contractual data processing agreements that impose obligations equivalent to the protections afforded by this Privacy Policy.

By registering on api888 and providing your personal data, you acknowledge and consent to the possibility that your data may be processed in jurisdictions outside Indonesia, subject to the safeguards described in this section.

15. Policy Amendments

api888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. All amendments will be published on this page with an updated "Last Updated" date. Where changes are material — meaning they significantly affect how we process your personal data or alter your rights — we will notify you via email or in-platform notification at least 14 days before the amended policy takes effect.

Your continued use of the api888 platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the amended policy, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

16. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how api888 handles your personal data, please contact our Data Protection team through the following channel:

• Email: [email protected]
• Live Chat: Available 24/7 within the api888 platform. Our privacy and data team is available to handle data rights requests during standard business hours (WIB, UTC+7), with escalation pathways available around the clock via live chat.

We will acknowledge all privacy-related inquiries within 48 hours and provide a substantive response within 30 days. If you are not satisfied with our response to a complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.

For responsible gaming concerns, self-exclusion requests, or account management questions, please also refer to our Responsible Gaming page and our FAQ for additional guidance and resources.