Privacy Policy api888
— Your Personal Data Protection

1 Information We Collect

Api888 collects several categories of information to ensure our platform operates safely, fairly, and efficiently. The information we collect falls into two main types:

Information You Provide Directly:

• Account registration information — full name, date of birth, phone number, email address, and password.
• Identity verification documents (KYC) — copies of your national ID, passport, or driving licence.
• Proof of address — a utility bill or bank statement no older than three months.
• Payment method information — bank account number, account holder name, and e-wallet details.
• Information provided when contacting our customer support team.

Automatically Collected Information:

• IP address and location data (city, state, country) based on your IP.
• Device type, operating system, web browser, and application version in use.
• Platform activity log — games played, bets placed, session duration, and transaction records.
• Cookie data and similar tracking technologies to enhance the user experience.

2 Data Usage Purpose

Api888 uses your personal data solely for legitimate purposes directly related to the provision of our services. Below is a summary of how your data is used:

Api888 will not use your data for any purpose other than those stated above without first informing you and, where necessary, obtaining fresh consent from you.

3 Data Sharing with Third Parties

Api888 takes a careful approach to data sharing. We do not sell your personal data to any party for commercial purposes. However, there are limited situations where we may need to share your information with carefully selected third parties:

• Payment service providers — to securely process deposits and withdrawals. They receive only the information required for the relevant transaction.
• Gaming platform providers — third-party gaming companies that offer their games through api888 may receive the game data necessary for technical functionality.
• Regulatory authorities — when required by Malaysian law or a directive from a legitimate regulatory authority.
• Technical service providers — companies that assist us with technical operations such as server hosting, data analytics, and cybersecurity support, subject to strict confidentiality agreements.

Every third party working with api888 is required to comply with data protection standards as stringent as our own. Legally binding data processing agreements are signed with all partners who handle your data.

4 Cookies and Tracking Technologies

Api888 uses cookies and similar technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and provide a more personalized experience.

We use four categories of cookies:

• Essential Cookies: Required for core platform functions such as login, session security, and transaction processing. These cookies cannot be disabled.
• Performance Cookies: Help us understand how visitors use our platform, including the most frequently visited pages and time spent. This information is collected anonymously.
• Functional Cookies: Allow the platform to remember your preferences such as language and display settings for a better experience.
• Marketing Cookies: Used with your consent to display relevant promotions based on your interests. You may decline these cookies without affecting the platform's core functionality.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect platform functionality.

5 Data Retention Period

Api888 retains your personal data only for as long as necessary for the stated purposes or as required by law. The following are our general data retention guidelines:

• Active account data — retained for the duration your account is active, plus 5 years after account closure to meet financial record requirements.
• KYC documents — retained for a minimum of 6 years in accordance with Anti-Money Laundering (AML) regulatory compliance requirements.
• Transaction records — retained for 7 years in accordance with Malaysia's tax and financial legal requirements.
• Customer support communication log — retained for 2 years for reference and dispute resolution purposes.
• Cookie data — retention period depends on cookie type, ranging from the current session only up to a maximum of 2 years.

Once data is no longer needed, api888 will delete or anonymise it following secure and irreversible procedures.

6 Data Security and Protection Measures

Api888 continually invests in the latest security infrastructure to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Key security measures we employ include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
• Data-at-rest encryption for all sensitive information in our databases.
• Role-Based Access Control — only authorised personnel may access data relevant to their duties.
• 24/7 security monitoring by our dedicated cybersecurity team.
• Regular penetration testing conducted by independent third parties.
• A fully documented and thoroughly tested security incident response protocol.

While we take all reasonable steps to protect your data, no system in the world can be guaranteed 100% secure. In the event of a data security breach that may affect your rights, we are committed to notifying you within 72 hours of detecting the incident.

7 Your Rights Regarding Personal Data

As an api888 member and as an individual protected under Malaysia's data protection laws, you have the following rights regarding your personal information:

To exercise any of the rights above, you may contact our Data Protection Officer by email at [email protected]. We will process your request within 14 business days. For more complex cases, we may require up to 30 days with prior notice.

8 Children's Privacy

Api888 is a platform strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Should we discover that information from a minor has been collected inadvertently, we will take immediate action to delete that information and close the relevant account.

If you are a parent or guardian who believes your child under the age of majority has registered or provided personal information to api888, please contact our support team immediately so we can take the appropriate action.

9 Amendments to the Privacy Policy

Api888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technical requirements, or applicable laws. Whenever a material amendment is made, we will:

• Displaying a clear notice on our platform's home page at least 7 days before the changes take effect.
• Sending notification emails to all registered members informing them of key changes.
• Updating the "Last Updated" date at the top of this document.

Your continued use of the api888 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this document periodically.

10 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact the api888 Data Protection Officer (DPO) through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the api888 platform
• Response Time: Within 2 business days for general enquiries; 14 days for formal data rights requests

We are committed to addressing every enquiry seriously and within a reasonable timeframe. Your satisfaction and your trust in how we handle your personal data are our top priorities.