Privacy Policy

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Data We Collect

apk898 collects Personal Data in several categories depending on your level of interaction with the Platform. The categories below describe the full scope of data we may hold about you:

2.1 Identity & Contact Data

• Full legal name as stated on your government-issued identity document.
• Date of birth (used for age verification — you must be 21 or older).
• Residential address, including city and province (e.g., Jakarta, Surabaya, Bandung, Bali, Medan).
• Email address and phone number provided during registration.
• Copies of identity documents submitted for KYC, such as KTP (Indonesian national ID), passport, or SIM (driver's licence).

2.2 Financial Data

• Bank account details associated with your deposits and withdrawals, including account holder name and account number for BCA, BRI, BNI, Mandiri, CIMB Niaga, and other approved Indonesian banks.
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja where used as payment methods.
• Transaction history, including deposit amounts, withdrawal requests, and processing timestamps — all denominated in Indonesian Rupiah (IDR / Rp).
• Bonus and promotional credit usage records.

2.3 Account & Gaming Activity Data

• Your chosen username and encrypted password hash.
• Session login and logout timestamps.
• Betting history across all product verticals, including sports markets (BRI Liga 1, EPL, La Liga, Champions League), live casino games, slots, and togel (Indonesia's traditional numbers lottery) markets.
• Responsible gaming settings you have configured, including deposit limits, session timers, and self-exclusion status.
• Customer support interaction records, including chat transcripts and email correspondence.

2.4 Technical & Device Data

• IP address and approximate geolocation derived from it.
• Device type, operating system, and browser version.
• Unique device identifiers and session tokens.
• Pages visited on the Platform, click paths, and time spent on each section.
• Referral source (e.g., search engine query or referring URL).

How Data Is Collected

apk898 collects Personal Data through the following channels:

• Direct submission: Data you voluntarily provide when completing the registration form, submitting KYC documents, requesting a withdrawal, filling out a support request, or communicating with our team by email or live chat.
• Automated collection: Technical and device data collected automatically when you access the Platform, via server logs, session cookies, analytics scripts, and similar technologies described further in Section 7.
• Third-party sources: Identity verification data received from licensed KYC and anti-money laundering (AML) service providers to whom we have submitted your documents for validation. We may also receive fraud-risk signals from payment processors and banking partners such as BCA, BRI, BNI, and Mandiri.
• Inferred data: Analytical insights derived from your activity on the Platform, such as preferred betting markets, typical session times (referenced to WIB, UTC+7), and product engagement patterns, used to personalise your experience and improve Platform features.

Legal Basis for Processing

apk898 processes your Personal Data only where a valid legal basis exists. The principal bases on which we rely are:

How We Use Your Data

The Personal Data collected by apk898 is used for the following purposes:

• Account management: Creating and maintaining your Player Account, verifying your identity and age (21+), and authenticating your login sessions.
• Payment processing: Validating and processing deposits and withdrawal requests via your nominated Indonesian bank account or e-wallet, and maintaining accurate transaction records denominated in IDR.
• Regulatory compliance: Fulfilling KYC, AML, and sanctions-screening obligations; retaining records as required by applicable law; and cooperating with lawful requests from regulatory or law enforcement authorities.
• Responsible gaming: Monitoring betting patterns for signs of problem gambling; enforcing deposit limits, session time limits, and self-exclusion instructions; and reaching out proactively where our systems flag a concern.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining a record of support interactions for quality and audit purposes.
• Platform security: Detecting and preventing fraud, unauthorised access, multiple-account creation, and other prohibited conduct described in our Terms & Conditions.
• Service improvement: Analysing aggregated usage data to identify performance issues, improve navigation, and develop new features tailored to the preferences of our Indonesian player base.
• Marketing communications: Sending you promotional offers, bonus notifications, and seasonal campaign messages (e.g., Idul Fitri, Ramadhan specials) by email — only where you have given explicit consent and only to the extent permitted by applicable law. You may withdraw consent at any time.

Data Sharing & Disclosure

apk898 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. We share data only in the circumstances described below, and only to the minimum extent necessary:

• Payment processors and banking partners: Your financial data is shared with Indonesian payment service providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) solely for the purpose of executing your requested transaction.
• Identity verification providers: KYC document data is transmitted to licensed third-party verification services operating under binding confidentiality and data processing agreements with apk898.
• Game and technology providers: Where third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft) require session authentication, minimal technical identifiers (not full identity data) may be passed to their systems to enable gameplay.
• Fraud and security services: Anonymised or pseudonymised data may be shared with fraud-detection platforms and industry-level integrity organisations to identify suspicious activity patterns.
• Legal and regulatory authorities: We will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where we are legally compelled to do so by a valid order or statutory obligation. We will notify you of such requests where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of apk898's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such change via the Platform or by email.

Cookies & Tracking Technologies

apk898 uses cookies and similar tracking technologies to operate the Platform securely and efficiently, and to understand how users interact with our services. The types of cookies we deploy are outlined below:

You can manage or withdraw your consent to non-essential cookies through your browser settings or your account preferences panel. Please be aware that disabling functional or analytics cookies may affect your experience on the Platform.

Data Retention

apk898 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligation. The general retention principles we apply are:

• Active account data: Retained for the full duration of your account relationship with apk898, plus a minimum period of five years following account closure to meet AML and regulatory record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later, in accordance with standard financial services regulatory expectations.
• Transaction records: Deposit and withdrawal histories (denominated in IDR) are retained for a minimum of five years.
• Support correspondence: Email and chat records are retained for three years from the date of the interaction.
• Marketing consent records: Retained for three years from the date of consent or withdrawal of consent, to demonstrate compliance.
• Technical logs: Server and access logs are retained for up to 12 months and then securely deleted, unless a specific investigation requires extended retention.

When data is no longer required and there is no lawful basis for continued retention, it is securely deleted or anonymised using industry-standard procedures.

Data Security

apk898 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes, but is not limited to:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms a secure connection is active.
• Encryption at rest: Sensitive data fields — including KYC documents, payment details, and identity records — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All staff with access to sensitive data are subject to background checks and ongoing security training.
• Multi-factor authentication: Administrative access to core systems requires multi-factor authentication (MFA). We also encourage Players to use strong, unique passwords for their own accounts.
• Penetration testing & audits: Our Platform infrastructure is subject to regular independent security assessments, vulnerability scans, and penetration tests to identify and remediate weaknesses before they can be exploited.
• Incident response: In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, apk898 will notify affected players promptly and take all necessary steps to contain and remediate the breach.

Your Privacy Rights

As a user of the apk898 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 days.

Please note that some rights are subject to limitations — for example, we cannot erase data that we are legally required to retain for AML or regulatory compliance purposes. Where a request is declined, we will explain the reason clearly.

Children's Privacy

The apk898 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and, where appropriate, report the matter to the relevant authorities.

If you are a parent or guardian and believe that a minor in your care has accessed the Platform or submitted Personal Data, please contact us immediately at [email protected] so we can take swift corrective action.

Cross-Border Data Transfers

apk898 operates internationally, and your Personal Data may be processed or stored on servers located outside of Indonesia. Where such transfers occur, we ensure that an equivalent level of data protection is in place through one or more of the following mechanisms:

• Binding contractual obligations between apk898 and the receiving party (standard contractual clauses).
• Transfer only to jurisdictions that maintain data protection standards recognised as adequate for the purposes of international data transfers.
• Explicit consent, where the above mechanisms are not applicable and the transfer is necessary for the performance of a service you have specifically requested.

By using the apk898 Platform and submitting your Personal Data, you acknowledge and consent to the possibility that your data may be transferred, stored, and processed in jurisdictions outside Indonesia, subject to the safeguards described above.

Policy Amendments

apk898 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify you via a prominent notice on the Platform and, where we hold a valid email address for you, by direct email prior to the changes taking effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which apk898 handles your Personal Data, please contact our Privacy team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please use "Privacy Request – [Your Username]" to ensure your message is routed to the correct team.
• Response time: We aim to acknowledge all privacy-related requests within 48 hours (WIB, UTC+7) and to resolve them within 30 calendar days of receipt.

We take all privacy complaints seriously and will investigate each one thoroughly. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.