Privacy Policy

This Privacy Policy applies to all personal data collected by api288 through our website (api288.cam), mobile-optimized platform, customer support channels, and any related services we provide. This policy covers information collected from users who are residents of Indonesia and specifically targets Indonesian players seeking online gaming entertainment including casino games, live dealer tables, sports betting markets, and related gaming products.

api288 recognizes the importance of data privacy in the digital age and takes your trust seriously. We are committed to transparency in our data practices and providing you with meaningful control over your personal information. This policy is designed to help you understand:

• What personal information we collect and why we collect it
• How we use, process, and protect your personal data
• Your choices regarding your personal information and how to exercise your privacy rights
• How we secure your data against unauthorized access or misuse
• Our compliance with Indonesian data protection regulations and international privacy standards

By creating an account on api288, accessing our services, or providing us with your personal information, you acknowledge that you have read, understood, and agree to this Privacy Policy in its entirety. If you do not agree with any aspect of this policy, you should not use our services and must immediately cease all access to our platform.

For the purposes of applicable data protection laws, api288 acts as the "data controller" of your personal information. This means we determine the purposes and means of processing your personal data and are responsible for its protection and proper use.

Data Controller Details:

• Platform Name: api288
• Website: api288.cam
• Primary Market: Indonesia
• Contact Email: [email protected]
• Customer Support: Available 24/7 via Live Chat and WhatsApp

If you have any questions, concerns, or complaints about how we handle your personal data, or if you wish to exercise any of your privacy rights, please contact us using the information provided in Section 15 of this policy.

api288 collects various types of personal information to provide, maintain, and improve our gaming services. The categories of information we collect include:

3.1 Information You Provide Directly

When you register for an account or use our services, you voluntarily provide us with the following information:

• Account Registration Data: Full legal name, email address, mobile phone number, date of birth, residential address, preferred username, and password
• Identity Verification (KYC) Documents: Indonesian KTP (Kartu Tanda Penduduk) number, scanned copies of your KTP (front and back), selfie photograph holding your KTP for facial recognition verification, proof of address documents (utility bills, bank statements)
• Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals, e-wallet information (OVO, DANA, GoPay, ShopeePay account details), transaction history, deposit and withdrawal records
• Communication Data: Messages sent through our Live Chat, emails to customer support, WhatsApp conversations, feedback and survey responses, complaints and dispute correspondence
• Preferences and Settings: Gaming preferences, language settings, notification preferences, responsible gaming limits (deposit limits, loss limits, time-out periods)

3.2 Information Collected Automatically

When you access and use api288, we automatically collect certain technical and usage information:

• Device Information: IP address, device type and model, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID)
• Usage Data: Pages visited, features used, time spent on platform, click patterns, navigation paths, game history (games played, bets placed, winnings, losses), login/logout times, session duration
• Location Data: Approximate geographic location derived from IP address to verify Indonesian residency and comply with geo-restriction requirements
• Cookies and Similar Technologies: Session cookies, persistent cookies, local storage data, analytics tokens (see Section 10 for detailed cookie information)

3.3 Information from Third-Party Sources

In certain circumstances, we may receive information about you from external sources:

• Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay)
• Identity Verification Services: Results from third-party KYC verification providers that authenticate your Indonesian KTP and verify your identity against government databases
• Fraud Prevention Services: Risk assessment data from fraud detection and prevention partners to identify suspicious activity and protect against account takeover or payment fraud
• Marketing Partners: Referral source information if you accessed api288 through an affiliate link or promotional campaign

api288 processes your personal data for the following specific purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your user account
• Authenticating your identity when you log in
• Processing your gaming activity (placing bets, recording outcomes, calculating winnings)
• Managing your account balance and transaction history
• Providing access to games, sports betting markets, live dealer tables, and other gaming products
• Enabling communication between you and our customer support team

4.2 Payment Processing and Financial Operations

• Processing deposits through Indonesian banks and e-wallets
• Executing withdrawal requests to your registered payment methods
• Verifying payment source legitimacy to prevent third-party deposits
• Maintaining financial transaction records for accounting and audit purposes
• Detecting and preventing payment fraud, chargebacks, and unauthorized transactions

4.3 Legal Compliance and Security

• Verifying you are at least 21 years of age (mandatory age requirement for Indonesian online gaming)
• Confirming you are a legal resident of Indonesia through KYC verification
• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Preventing, detecting, and investigating fraud, collusion, bonus abuse, and other prohibited activities
• Enforcing our Terms and Conditions and other policies
• Responding to legal requests from Indonesian authorities or law enforcement agencies
• Protecting api288's legal rights and defending against claims or disputes

4.4 Platform Improvement and Analytics

• Analyzing usage patterns to understand how users interact with our platform
• Identifying technical issues, bugs, and performance bottlenecks
• Testing new features and game offerings
• Conducting market research to understand Indonesian player preferences
• Improving website navigation, user interface, and overall user experience
• Optimizing mobile performance for Indonesian network conditions

4.5 Communication and Customer Support

• Responding to your inquiries, questions, and support requests
• Sending transactional notifications (deposit confirmations, withdrawal updates, account alerts)
• Providing updates on account status, verification requirements, or policy changes
• Notifying you of bonus offers, promotions, and special events (with your consent)
• Conducting customer satisfaction surveys to improve service quality

4.6 Responsible Gaming and Player Protection

• Monitoring gameplay patterns to identify signs of problem gambling behavior
• Implementing and enforcing self-imposed deposit limits, loss limits, and session time limits
• Processing self-exclusion requests and maintaining self-exclusion registers
• Providing access to responsible gaming tools and resources
• Intervening proactively when concerning gambling patterns are detected

Under applicable data protection laws, api288 must have a valid legal basis to process your personal information. We rely on the following legal grounds:

5.1 Contractual Necessity

Most of our data processing is necessary to fulfill our contract with you (our Terms and Conditions) and deliver the gaming services you requested. We cannot provide our services without processing your account information, identity verification data, and payment details.

5.2 Legal Obligations

We are legally required to process certain personal data to comply with Indonesian regulations, including age verification (21+ requirement), KYC/AML compliance, financial record-keeping, and cooperation with law enforcement investigations.

5.3 Legitimate Interests

We process certain data based on our legitimate business interests, such as fraud prevention, platform security, customer support, and service improvement. We balance these interests against your privacy rights and only process data where our interests do not override your fundamental rights.

5.4 Consent

For certain activities like marketing communications and non-essential cookies, we obtain your explicit consent before processing. You can withdraw consent at any time through your account settings or by contacting customer support.

api288 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your data in the limited circumstances described below:

6.1 Service Providers and Business Partners

We share personal data with trusted third-party service providers who assist us in operating our platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals
• KYC Verification Providers: Identity verification services that authenticate Indonesian KTP documents and perform age checks
• Game Providers: Licensed casino game suppliers (Evolution Gaming, Pragmatic Play, etc.) who power our slots, live dealer tables, and other gaming products
• Cloud Hosting Services: Infrastructure providers who host our servers and databases
• Customer Support Tools: Live chat platforms, email services, and ticketing systems used by our support team
• Analytics Providers: Services that help us understand platform usage and user behavior
• Security and Fraud Prevention: Specialized providers that detect fraudulent activity, bots, and account abuse

All service providers are bound by strict contractual obligations to protect your data and use it only for the specific purposes we authorize. They cannot use your information for their own purposes or share it with others.

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information to governmental authorities, regulatory bodies, or law enforcement agencies when required by Indonesian law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Cooperate with law enforcement investigations into criminal activity
• Enforce our Terms and Conditions and protect our legal rights
• Protect the safety, security, or rights of api288, our users, or the public
• Detect, prevent, or respond to fraud, security breaches, or technical issues

6.3 Business Transfers

If api288 is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

6.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. For example, we might publish statistics about Indonesian player preferences, popular game categories, or peak usage times. This data sharing poses no privacy risk as it does not contain personal information.

api288 implements comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

7.1 Technical Security Controls

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using the same military-grade encryption used by financial institutions
• Encrypted Data Storage: Sensitive personal information and financial data are encrypted at rest using AES-256 encryption
• Secure Password Hashing: User passwords are hashed using industry-standard bcrypt algorithm and never stored in plain text
• Multi-Factor Authentication: Optional two-factor authentication (2FA) for enhanced account security
• Firewall Protection: Advanced firewall systems monitor and block malicious traffic attempting to access our network
• DDoS Mitigation: Distributed denial-of-service attack protection to ensure platform availability
• Regular Security Audits: Quarterly penetration testing and vulnerability assessments by independent security experts
• Intrusion Detection Systems: Real-time monitoring for suspicious activity and potential security breaches

7.2 Access Control and Authentication

• Role-based access control (RBAC) ensuring employees access only data necessary for their job functions
• Mandatory strong password policies for all staff accounts
• Regular review and revocation of access privileges
• Comprehensive audit logs tracking all data access and modifications
• Segregation of duties to prevent single points of failure or abuse

7.3 Operational Security Practices

• Mandatory security awareness training for all employees handling personal data
• Strict confidentiality agreements binding all staff members
• Secure development lifecycle practices for all software updates
• Regular security patch management and software updates
• Incident response plan with defined procedures for handling potential data breaches
• Data backup and disaster recovery systems to ensure business continuity

7.4 Physical Security

• Servers hosted in tier-3 data centers with 24/7 physical security, biometric access controls, and environmental monitoring
• Redundant power supplies and network connections to prevent downtime
• Secure disposal procedures for hardware containing personal data

Data Breach Notification: In the unlikely event of a data breach affecting your personal information, we will notify you and relevant Indonesian authorities within 72 hours as required by applicable data protection regulations. The notification will include details of the breach, potential impact, and steps we are taking to mitigate harm.

8.1 Retention Periods

api288 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by Indonesian law. Specific retention periods include:

Data Category	Retention Period	Reason
Account Information	Duration of account + 7 years after closure	Legal compliance, financial audits, dispute resolution
Transaction Records	7 years from transaction date	AML regulations, tax compliance, financial audits
KYC Documents	7 years after account closure	Legal requirements, identity verification records
Gameplay History	7 years from bet placement	Dispute resolution, regulatory compliance, RNG audits
Communication Logs	3 years from last communication	Customer support records, dispute evidence
Marketing Consent	Until withdrawn or 2 years of inactivity	Consent management, compliance with marketing laws
Self-Exclusion Records	Permanent	Responsible gaming, preventing re-registration

8.2 Data Deletion

Upon expiration of the applicable retention period, we securely delete or anonymize your personal information. Deletion methods include cryptographic erasure, data overwriting, and physical destruction of storage media. Anonymized data (data that can no longer identify you) may be retained indefinitely for statistical and research purposes.

8.3 Storage Locations

Your personal data is primarily stored on secure servers located in Indonesia and Southeast Asian data centers. Some data may be transferred to and stored in other jurisdictions where our service providers operate. All international transfers comply with applicable data protection laws and are subject to appropriate safeguards (see Section 12).

Under Indonesian data protection regulations and international privacy standards, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. You can access most of your information directly through your account dashboard. For a comprehensive data export, contact our customer support team.

9.2 Right to Rectification

If any personal information we hold is inaccurate or incomplete, you have the right to request correction. You can update most information through your account settings. For changes requiring verification (such as name or date of birth), contact customer support with supporting documentation.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected, or when you withdraw consent for processing based on consent. However, we may retain data when required by law (e.g., financial records for tax purposes) or for legitimate interests (e.g., fraud prevention).

9.4 Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations, such as while we verify the accuracy of disputed data or assess whether our legitimate interests override your privacy rights.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider without hindrance from api288.

9.6 Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes. If you object to marketing, we will cease such communications immediately. For other objections, we will assess whether we have compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where we process your data based on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal. You can manage consent preferences in your account settings.

9.8 How to Exercise Your Rights

To exercise any of these rights, contact our customer support team via:

• Live Chat (24/7 availability)
• Email: [email protected]
• WhatsApp: +62 812-3456-7890

We will respond to your request within 30 days. If we require additional time, we will notify you and explain the reason for the delay. We may request additional information to verify your identity before processing rights requests to prevent unauthorized access to your personal data.

api288 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for platform functionality, including authentication, session management, and security. These cannot be disabled without preventing basic features from working.
• Performance Cookies: Collect anonymous information about how you use our platform, which pages you visit most, and any error messages. Helps us improve platform performance and user experience.
• Functional Cookies: Remember your preferences (language, display settings) and enable personalized features. These improve convenience but are not essential.
• Analytics Cookies: Used by services like Google Analytics to understand traffic patterns, user demographics, and behavioral trends. Data is aggregated and anonymized.

10.2 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to block cookies, delete existing cookies, or receive warnings before cookies are stored. However, disabling essential cookies will prevent you from using api288 services. Disabling non-essential cookies may reduce functionality but will not prevent basic platform access.

For detailed instructions on cookie management, consult your browser's help documentation (Chrome, Firefox, Safari, Edge, etc.).

Our platform may contain links to third-party websites, services, or applications (such as payment processors, game providers, or social media platforms). api288 is not responsible for the privacy practices of these external sites. When you leave our platform, we encourage you to read the privacy policies of every site you visit. This Privacy Policy applies solely to information collected by api288.

Third-party service providers we work with have their own privacy policies and data handling practices. While we carefully select partners who meet our security and privacy standards, we cannot control how they use data they collect independently.

While api288 primarily stores data in Indonesia and Southeast Asia, some personal information may be transferred to, stored in, or processed by service providers located in other countries (such as cloud hosting providers, payment processors, or analytics services). These international transfers occur when necessary to provide our services or comply with legal obligations.

When we transfer your data internationally, we implement appropriate safeguards to protect your information, including:

• Standard contractual clauses approved by data protection authorities
• Ensuring service providers adhere to internationally recognized data protection frameworks
• Conducting privacy impact assessments for high-risk transfers
• Implementing technical measures like encryption during transit and storage

By using api288 services, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia for the purposes described in this Privacy Policy.

api288 services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal information from individuals under 21 years of age. Our age verification procedures during registration and KYC processes are designed to prevent underage access.

If we become aware that we have inadvertently collected personal information from someone under 21, we will take immediate steps to delete that information and close the associated account. If you believe a minor has provided us with personal information, please contact us immediately at [email protected].

Parents and guardians are encouraged to monitor their children's internet usage and prevent access to gambling websites. api288 supports parental control software and encourages its use to block minors from accessing our platform.

api288 reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes that significantly affect how we collect, use, or share your personal information, we will notify you through one or more of the following methods:

• Prominent notice on our website homepage
• Email notification to your registered email address
• In-platform notification upon your next login
• SMS or WhatsApp message for critical changes affecting your rights

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this page indicates when the policy was last revised. Continued use of api288 services after changes are posted constitutes acceptance of the updated Privacy Policy.

If you do not agree with any changes to this Privacy Policy, you must stop using our services and may request account closure and data deletion (subject to legal retention requirements).

If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or how api288 handles your personal information, please contact our Data Protection Team through the following channels:

We take all privacy inquiries seriously and will investigate and respond to your concerns promptly. Most privacy requests are resolved within 30 days, though complex requests may require additional time. We will keep you informed throughout the process.