Privacy Policy api88 — Protection of Your Personal Data & Information Security

Api88 ("we", "our platform") is fully committed to protecting the privacy and security of the personal information of all members using the api88.im platform. This Privacy Policy sets out transparently how we collect, use, disclose, store, and safeguard your personal information.

This Privacy Policy applies to all services offered through api88.im, including online casino games, Sports Betting, table games, the VIP programme, promotions, and all related communications. It also covers information collected across all digital channels, including the website and communications via email or Live Chat.

We operate in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related regulations. We take this responsibility seriously — data protection is not merely a legal obligation to us, but a core part of our commitment to earning your trust.

Api88 collects various types of information depending on how you interact with our platform. The following are the main categories of information collected:

We also collect information you voluntarily provide, such as feedback, game reviews, and responses to customer satisfaction surveys. All such information is used solely to improve your experience on the api88 platform.

Information collected by api88 is used for legitimate, limited purposes as follows:

• Account Management: To create, verify, and manage your account on the api88 platform, including the KYC (Know Your Customer) process required under anti-money laundering regulations.
• Transaction Processing: To process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks), and to manage fund withdrawals to your account.
• Gaming Services Provision: To give you full access to all games on the platform, including Live Casino, slots, table games, Sports Betting for the EPL, Malaysia Super League, cricket, and e-sports.
• Security & Fraud Prevention: To detect and prevent suspicious activity, fraud, money laundering, or security breaches that could compromise your account or the platform.
• VIP Programme & Promotions: To manage your VIP programme eligibility, calculate cashback and rewards, and ensure Welcome Bonuses and other promotions are awarded to qualifying members.
• Service Communications: To send you important notifications relating to your account, security, transactions, and changes to our terms. These are not marketing communications and cannot be unsubscribed from.
• Marketing (With Consent): Where you have given your consent, we may send you information about the latest promotions, new bonuses, and exclusive api88 offers via email or notifications.
• Analytics & Improvement: To understand how players use the platform, identify technical issues, and continuously improve the overall user experience.
• Legal Compliance: To comply with all applicable legal and regulatory obligations, including directives from competent authorities.

Api88 takes the protection of your data extremely seriously. We have implemented multiple layers of technical and procedural security to keep your information safe at all times:

• Encryption in Transit: All data transmitted between your device and api88's servers is protected with 256-bit TLS/SSL encryption. This means that even if someone were to intercept your connection, they would be unable to read its contents.
• Storage Encryption: Sensitive data stored in our databases — including financial information and identity documents — is encrypted using the latest industry-standard security algorithms.
• Strict Access Controls: Only authorised api88 staff with a legitimate operational need may access members' personal data. All access is protected by two-factor authentication (2FA) and recorded in an audit log.
• Secure Servers: Your data is stored in internationally certified data centres equipped with 24/7 physical security controls, uninterrupted power supply systems, and tested disaster recovery procedures.
• Regular Security Audits: api88 conducts internal security audits every 72 hours and independent penetration tests every quarter to identify and address any vulnerabilities.
• Retention Period: Active account data is retained for as long as your account remains active. Following account closure, financial and transaction data is kept for 7 years in accordance with Malaysian legal requirements. All other data is deleted within 90 days.

Api88 does not sell or rent your personal information to any party. However, we may share limited information in the following circumstances:

• Payment Service Providers: Information required to process transactions is shared with the payment gateways we use, including DuitNow, FPX, and digital wallet processors. All these providers maintain their own privacy policies and are held to strict security standards.
• Game Software Providers: Minimum information required to verify gaming eligibility may be shared with software providers such as Evolution Gaming, SA Gaming, or Pragmatic Play solely for game session management purposes.
• Lawful Authorities: api88 will disclose personal information to the relevant authorities (such as the police or regulatory bodies) when required by law or a valid court order.
• Fraud Prevention: Information may be shared with anti-fraud entities or recognised industry security organisations to detect and prevent illegal activity affecting the platform.
• Business Transfer: In the event of any merger, acquisition, or transfer of api88's business assets, user information may be transferred to the new entity. Members will be notified in advance of any such transfer.

In all instances of data sharing, api88 ensures that the receiving party has appropriate protections in place and uses the data solely for the agreed purposes.

Api88 uses cookies and similar technologies to enhance your experience on the platform. The following are the types of cookies we use:

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect certain platform functions. For analytics and preference cookies, you may opt out without impacting your gaming experience.

As a user of the api88 platform residing in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA):

To exercise any of the above rights, please contact our privacy team at support@api88.im with the email subject line "Privacy Request — [Right Being Requested]". We will acknowledge receipt of your request within 48 hours and resolve it within the stipulated timeframe.

Api88 is a platform strictly for adults aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.

Should we discover that we have inadvertently collected data from a person under the age of 18, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian and believe your child has registered on our platform without authorisation, please contact us immediately at support@api88.im with the relevant supporting evidence. We will respond within 24 hours.

The api88 platform may contain links to third-party websites or services, such as game software provider sites or relevant sports organisations. This Privacy Policy applies solely to the api88 platform.

Api88 is not responsible for the privacy practices or content of any third-party websites you visit through links on our platform. We encourage you to read the privacy policy of every website you visit.

If you use third-party services such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or Maybank2u for payments on api88, any information you provide to those providers is governed by their own respective privacy policies.

Api88 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. We are committed to informing you of any material changes.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page
• Sending notifications to your registered email address
• Displaying a prominent notice on the platform's homepage for a minimum of 14 days
• In the event of highly material changes, we may seek your consent again before proceeding with data processing.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Privacy Officer: