Privacy Policy

ap288 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect information about you when you access or use our website located at https://ap288.cam, mobile applications, and related services (collectively, the "Platform"). This policy applies to all users, including residents of Indonesia and other jurisdictions where our services are available.

By creating an account, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, you must immediately discontinue use of the Platform and close your account.

1. Information We Collect

1.1 Information You Provide Directly

When you register for an ap288 account, make deposits or withdrawals, participate in promotions, or contact customer support, you directly provide us with personal information including:

• Account Registration Data: Full legal name, date of birth, email address, phone number, residential address, username, and password.
• Identity Verification Documents: Government-issued identification (Indonesian KTP/National Identity Card, passport, or driver's license), proof of address documents (utility bills, bank statements), and selfie photographs for KYC (Know Your Customer) compliance.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay account identifiers), payment card information (processed securely through third-party payment processors), transaction history, deposit and withdrawal records.
• Communications: Any information you provide when contacting our customer support team via live chat, WhatsApp, email, or other communication channels, including chat transcripts, email correspondence, and support tickets.
• Marketing Preferences: Your communication preferences, subscription choices, and consent records for promotional materials.

1.2 Information Collected Automatically

When you access or use the ap288 Platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, UDID, advertising ID), mobile network information.
• Usage Data: Pages visited, features used, time spent on pages, referring/exit pages, click patterns, games played, bets placed, winnings and losses, session duration, frequency of use.
• Location Data: IP address, approximate geographic location derived from IP address, timezone settings.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies. See our Cookie Policy section below for details.
• Log Data: Server logs including access times, error logs, crash reports, and other diagnostic information.

1.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction confirmation, payment status, and fraud detection information from banks, e-wallet providers, and payment gateways.
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from third-party verification providers.
• Sports Data Providers: Official sports results, odds information, and match statistics for sports betting services.
• Game Providers: Game session data, RNG results, and technical performance information from our licensed game providers including Pragmatic Play, Evolution Gaming, Microgaming, and others.

2. How We Use Your Information

ap288 uses your personal information for the following purposes:

3. How We Share Your Information

ap288 does not sell your personal information to third parties. However, we may share your information with trusted third parties in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Payment Processors: Banks, e-wallet providers, payment gateways processing deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and international payment processors).
• Identity Verification Providers: Third-party KYC and AML compliance services that verify your identity and assess fraud risk.
• Cloud Infrastructure Providers: Hosting services, database management, content delivery networks (CDNs) storing and transmitting Platform data.
• Customer Support Tools: Live chat platforms, email services, helpdesk software enabling customer support communications.
• Analytics Providers: Services analyzing usage patterns and Platform performance to improve user experience.
• Game Providers: Licensed gaming studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) providing casino games, live dealer services, and sports betting products.

All service providers are contractually obligated to maintain confidentiality and use your information solely for the purposes for which we engage them.

3.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, regulatory bodies, law enforcement agencies, or courts when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requirements
• Enforce our Terms and Conditions or other agreements
• Protect our rights, property, or safety, or the rights, property, or safety of our users or others
• Investigate suspected fraud, money laundering, or other illegal activities
• Respond to claims that any content violates the rights of third parties

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email or prominent notice on the Platform before your information becomes subject to a different privacy policy.

4. Data Security

ap288 takes data security seriously and implements industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS (Secure Socket Layer/Transport Layer Security) encryption. Sensitive data at rest is encrypted using AES-256 encryption standards.
• Access Controls: Personal information is accessible only to authorized personnel on a need-to-know basis. Employees and contractors are bound by strict confidentiality agreements.
• Secure Authentication: Multi-factor authentication, password hashing with industry-standard algorithms (bcrypt), and session management protocols protect account access.
• Network Security: Firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and regular security audits protect our infrastructure.
• Payment Security: Payment card information is processed through PCI-DSS compliant payment processors. We do not store complete card numbers on our servers.
• Regular Security Assessments: Periodic penetration testing, vulnerability assessments, and third-party security audits ensure ongoing security effectiveness.
• Incident Response: Established protocols for detecting, responding to, and notifying users of security breaches.

Despite these measures, no method of transmission or electronic storage is completely secure. While we strive to protect your information using commercially reasonable means, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us of any unauthorized account access.

5. Data Retention

ap288 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on data type and purpose:

• Account Information: Retained for the duration of your active account plus seven (7) years after account closure to comply with legal, regulatory, and tax obligations.
• Transaction Records: Retained for seven (7) years after the transaction date to comply with financial record-keeping requirements and anti-money laundering regulations.
• Identity Verification Documents: Retained for seven (7) years after account closure to comply with KYC and AML regulatory requirements.
• Marketing Communications: Retained until you withdraw consent or unsubscribe from marketing communications.
• Technical Logs and Analytics: Typically retained for twelve (12) months unless required for security investigations, fraud detection, or legal purposes.
• Customer Support Records: Retained for three (3) years after the last interaction for quality assurance and dispute resolution purposes.

After retention periods expire, we securely delete or anonymize your personal information in accordance with industry best practices and applicable data protection laws.

6. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. While ap288 operates internationally, we respect data protection principles and provide the following rights to all users:

• Right to Access: You may request access to the personal information we hold about you, including details about how we collect, use, and share your data.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information. You can update most account information directly through your account settings.
• Right to Erasure: You may request deletion of your personal information, subject to our legal obligations to retain certain data for regulatory compliance, fraud prevention, and dispute resolution.
• Right to Restrict Processing: You may request limitation of how we process your personal information in certain circumstances.
• Right to Data Portability: You may request a copy of your personal information in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal information for direct marketing purposes or based on legitimate interests.
• Right to Withdraw Consent: Where we rely on consent as the legal basis for processing, you may withdraw consent at any time. This does not affect the lawfulness of processing before consent withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request". We will respond to your request within thirty (30) days. We may request additional information to verify your identity before processing your request.

7. Cookies and Tracking Technologies

The ap288 Platform uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance user experience, analyze Platform usage, and deliver personalized content. Cookies are small text files stored on your device when you visit our Platform.

We use the following types of cookies:

• Essential Cookies: Necessary for basic Platform functionality including account authentication, session management, and security features. These cannot be disabled without significantly impairing Platform functionality.
• Performance Cookies: Collect information about how you use the Platform, including pages visited, errors encountered, and loading times. This helps us improve Platform performance.
• Functional Cookies: Remember your preferences and choices (language settings, display preferences, game favorites) to personalize your experience.
• Advertising Cookies: Track your browsing activity to deliver targeted advertisements and measure marketing campaign effectiveness (only with your consent).

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may prevent you from accessing certain Platform features. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

8. International Data Transfers

ap288 operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. These countries may have data protection laws different from those in Indonesia. When we transfer your information internationally, we implement appropriate safeguards including:

• Standard contractual clauses approved by data protection authorities
• Ensuring third-party service providers maintain adequate data protection standards
• Encryption of data in transit and at rest
• Limiting data transfers to what is necessary for service provision

By using the ap288 Platform, you acknowledge and consent to the international transfer of your personal information as described in this Privacy Policy.

9. Children's Privacy

The ap288 Platform is not intended for individuals under the age of twenty-one (21). We do not knowingly collect personal information from anyone under the legal gambling age. If we discover that we have inadvertently collected information from an individual under 21, we will immediately delete such information and close the associated account. Parents or guardians who believe we have collected information from a minor should contact us immediately at [email protected].

10. Changes to This Privacy Policy

ap288 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on this page with a revised "Last Updated" date. For significant changes that materially affect your rights, we may provide additional notice via email or prominent Platform notification.

Your continued use of the Platform after Privacy Policy changes become effective constitutes acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us:

For urgent security or privacy concerns, please contact us immediately through our 24/7 live chat support available on the Platform.