Privacy Policy

1. Information We Collect

apo388 collects several categories of personal information to provide, maintain, and improve our gaming services, ensure security, comply with legal obligations, and enhance your user experience. The types of information we collect include:

2. How We Collect Information

apo388 collects personal information through various methods:

2.1 Information You Provide Directly

• Account Registration: When you create an account, you voluntarily provide personal identification information including name, date of birth, address, email, and phone number.
• Identity Verification: When you submit KYC documents (ID cards, proof of address, payment verification) to verify your identity and comply with anti-money laundering regulations.
• Payment Transactions: When you make deposits or request withdrawals, you provide payment method details and authorize financial transactions.
• Customer Support: When you contact our support team, you provide information about your inquiry, account issues, or feedback.
• Marketing Preferences: When you opt in to receive promotional emails, SMS messages, or notifications about bonuses and special offers.

2.2 Information Collected Automatically

• Gaming Platform Usage: Our systems automatically log your gaming activity, betting history, game selections, win/loss records, and session durations.
• Website Analytics: We use cookies and analytics tools to track how you navigate our website, which pages you visit, how long you stay, and which features you use.
• Technical Logs: Our servers automatically record technical information including IP addresses, device types, browser information, access times, and referring URLs.
• Security Monitoring: We monitor account activity for unusual patterns that may indicate fraud, collusion, bonus abuse, or security breaches.

2.3 Information from Third Parties

• Payment Processors: We receive transaction confirmation data from Indonesian banks and e-wallet providers when you make deposits or withdrawals.
• Identity Verification Services: We may use third-party services to verify the authenticity of submitted identification documents and detect fraud.
• Game Providers: Our licensed game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) share game result data and play statistics.

3. How We Use Your Information

apo388 uses your personal information for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Create, maintain, and manage your gaming account
• Process deposits, withdrawals, and financial transactions
• Enable gameplay on casino games, sports betting, togel lottery, and other gaming products
• Calculate and credit winnings, bonuses, and rewards to your account
• Maintain accurate transaction records and account balances
• Provide customer support and respond to your inquiries
• Administer your VIP loyalty program membership and tier benefits

3.2 Security and Fraud Prevention

• Verify your identity and age to ensure you are 21 years or older
• Detect and prevent fraudulent activity, money laundering, and payment fraud
• Identify duplicate accounts, bonus abuse, and collusion between players
• Monitor for unusual betting patterns or suspicious account behavior
• Protect against unauthorized account access and data breaches
• Investigate disputes, complaints, and potential violations of our Terms and Conditions

3.3 Legal and Regulatory Compliance

• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Fulfill our obligations under international licensing requirements
• Respond to legal requests from law enforcement or regulatory authorities
• Maintain records as required by gaming regulations and financial laws
• Enforce our Terms and Conditions and protect our legal rights

3.4 Marketing and Communication

• Send promotional emails about bonuses, tournaments, and special offers (with your consent)
• Deliver SMS notifications about deposit confirmations, withdrawal updates, and account activity
• Personalize marketing content based on your gaming preferences and activity
• Conduct surveys and gather feedback to improve our services
• Notify you of important platform updates, maintenance schedules, or policy changes

3.5 Platform Improvement and Analytics

• Analyze usage patterns to understand player preferences and improve user experience
• Test new features, games, and platform enhancements
• Optimize website performance, loading speeds, and mobile responsiveness
• Develop new gaming products and services tailored to Indonesian players
• Generate aggregated, anonymized statistics for business intelligence

4. Information Sharing and Disclosure

apo388 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients under specific circumstances:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallet providers (OVO, DANA, GoPay, etc.) receive necessary financial information to process your deposits and withdrawals.
• Game Providers: Licensed software providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) receive your account ID and gaming activity to deliver their games and calculate results.
• Identity Verification Services: Third-party KYC providers may receive your identification documents to verify authenticity and detect fraud.
• Cloud Hosting Providers: Secure data centers where we host our platform and store encrypted data backups.
• Customer Support Tools: Live chat software providers that help us deliver customer support services.

4.2 Legal and Regulatory Authorities

We may disclose your information to government agencies, law enforcement, or regulatory bodies when:

• Required by law, court order, subpoena, or legal process
• Necessary to investigate suspected illegal activity, fraud, or money laundering
• Needed to comply with anti-money laundering (AML) reporting obligations
• Requested by our licensing authority as part of regulatory oversight
• Required to protect our legal rights, property, or the safety of our users

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity. We will notify you via email or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

4.4 Consent-Based Sharing

We may share your information with other third parties if you provide explicit consent at the time of collection or subsequently authorize such sharing.

5. Data Security Measures

apo388 implements industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

5.1 Technical Security

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same encryption standard used by banks.
• Secure Servers: Our servers are hosted in secure data centers with physical security controls including 24/7 surveillance, biometric access controls, and environmental monitoring.
• Firewall Protection: Multi-layered firewalls protect our network infrastructure from external attacks and unauthorized access attempts.
• Data Encryption at Rest: Sensitive data stored in our databases (including passwords and financial information) is encrypted using AES-256 encryption.
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments on our platform quarterly.

5.2 Operational Security

• Access Controls: Employee access to personal data is restricted on a need-to-know basis and governed by role-based permissions.
• Two-Factor Authentication: Optional 2FA for user accounts adds an extra layer of protection beyond passwords.
• Password Security: Passwords are hashed using bcrypt with salt, making them unreadable even to our own staff.
• Activity Monitoring: Automated systems monitor for suspicious account activity, unusual login locations, and potential security breaches.
• Employee Training: All staff members receive regular training on data protection, privacy best practices, and security protocols.

5.3 Your Security Responsibilities

While we implement robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password and never share it with others
• Enable two-factor authentication if available
• Log out after each gaming session, especially on shared devices
• Do not access your account over public Wi-Fi networks without a VPN
• Report suspicious activity or unauthorized access immediately to our support team
• Keep your email account secure, as it is the recovery method for your gaming account

6. Data Retention and Storage

apo388 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

6.1 Active Accounts

For active accounts, we retain all personal information, transaction history, and gaming records for the duration of your account's existence. This data is necessary to provide ongoing services, maintain accurate financial records, and ensure regulatory compliance.

6.2 Closed Accounts

When you close your account, we retain certain information for legal and regulatory compliance:

• Financial Records: Transaction history, deposit/withdrawal records, and account balances are retained for 7 years to comply with financial recordkeeping regulations and tax laws.
• Identity Verification Documents: KYC documents are retained for 5 years as required by anti-money laundering regulations.
• Gaming History: Game logs and betting records are retained for 5 years for dispute resolution and regulatory audit purposes.
• Communication Records: Customer support interactions are retained for 3 years for quality assurance and dispute resolution.

6.3 Marketing Data

If you opt out of marketing communications, we will retain your email address on a suppression list indefinitely to ensure we do not accidentally contact you again. This is a legal requirement under anti-spam regulations.

6.4 Data Deletion

After the applicable retention period expires, we securely delete or anonymize your personal information. Deletion is performed using industry-standard data wiping methods that make recovery impossible. Anonymized data that cannot be linked back to you may be retained indefinitely for statistical and analytical purposes.

7. Your Privacy Rights

As a user of apo388, you have the following privacy rights regarding your personal information:

7.1 Right of Access

You have the right to request a copy of all personal information we hold about you. To exercise this right, contact our support team with your account details. We will provide a comprehensive report within 30 days of your request.

7.2 Right to Rectification

You may request correction of inaccurate or incomplete personal information. You can update some information directly through your account settings. For changes requiring verification (name, date of birth, address), contact customer support with supporting documentation.

7.3 Right to Erasure

You may request deletion of your personal information, subject to our legal retention obligations. If we are required by law to retain certain data (financial records, KYC documents), we cannot honor a deletion request for that specific data until the mandatory retention period expires.

7.4 Right to Restrict Processing

You may request that we limit how we use your personal information in certain circumstances, such as while disputing data accuracy or during an investigation. Note that restricting processing may limit your ability to use certain platform features.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format. We can provide your data in CSV or JSON format upon request.

7.6 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time. Click the "unsubscribe" link in any marketing email or contact support to opt out of promotional communications. You cannot object to processing necessary for service delivery or legal compliance.

7.7 Right to Withdraw Consent

Where we process your data based on consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] with your full name, account username, and specific request. We may require identity verification before processing your request to ensure data security. We will respond within 30 days of receiving a valid request.

8. Cookies and Tracking Technologies

apo388 uses cookies and similar tracking technologies to enhance your experience on our platform:

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize your device, remember your preferences, and improve platform functionality.

8.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality including login sessions, account access, and security features. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options.
• Analytics Cookies: Help us understand how users interact with our platform by tracking page views, time spent on site, and navigation patterns. We use this data to improve user experience.
• Advertising Cookies: Track your activity to deliver personalized promotional offers based on your gaming preferences and history.

8.3 Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to block all cookies, accept only first-party cookies, or delete cookies after each session. Note that blocking essential cookies may prevent you from accessing certain platform features or logging into your account.

9. International Data Transfers

While apo388 primarily serves Indonesian users, some of your personal information may be transferred to and processed in countries outside Indonesia where our service providers are located. These may include countries with different data protection laws than Indonesia.

When we transfer data internationally, we implement appropriate safeguards including:

• Standard contractual clauses approved by data protection authorities
• Ensuring recipient companies maintain adequate data protection standards
• Encrypting data during transmission and storage
• Limiting data transfers to only what is necessary for service delivery

10. Children's Privacy

apo388 services are intended exclusively for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete that information and close the associated account.

If you are a parent or guardian and believe your child has provided personal information to apo388, please contact us immediately at [email protected] so we can take appropriate action.

11. Changes to This Privacy Policy

apo388 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Updating the "Last Updated" date at the top of this page
• Sending an email notification to your registered email address
• Displaying a prominent notice on our website homepage
• Requiring acceptance of updated terms before continued platform use (for significant changes)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of apo388 services after changes are posted constitutes your acceptance of the updated Privacy Policy.

12. Contact Us About Privacy

If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact our Data Protection Team:

Our customer support team speaks both Indonesian and English and is trained to handle privacy-related questions professionally and confidentially.