Privacy Policy

1 Introduction

1.1 apk488 ("we", "us", "our", "the Company") operates an online betting and gaming platform accessible at https://apk488.cam and associated mobile applications. We are committed to protecting the privacy and security of our users' personal data in accordance with applicable data protection laws and international best practices.

1.2 This Privacy Policy sets out the types of personal data we collect, the purposes for which we process that data, how we store and protect it, and the rights you have in relation to your data. This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy.

1.3 We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Material changes will be communicated to registered users via email or prominent platform notice.

2 Data Controller

2.1 For the purposes of applicable data protection legislation, the data controller responsible for your personal data is the legal entity operating the apk488 platform under its international gaming license.

2.2 If you have any questions about how your personal data is handled, or wish to exercise your data subject rights, please contact our Data Protection Officer using the contact details provided in Section 14 of this Privacy Policy.

3 Information We Collect

3.1 Information You Provide Directly. When you register an account, we collect the following personal information:

• Full legal name as it appears on your government-issued identity document;
• Date of birth (to verify you are at least 21 years of age);
• Residential address (street, city, province, postal code);
• Email address and mobile phone number;
• Username and password (password is stored in hashed form only);
• Payment account details (bank account number, e-wallet identifier) for deposits and withdrawals;
• Identity verification documents (KTP/national ID card, passport, driver's license, utility bills, bank statements) submitted during the KYC process.

3.2 Information Collected Automatically. When you use the apk488 platform, we automatically collect certain technical and usage data:

• IP address, device type, operating system, and browser type;
• Pages visited, features used, time spent on the platform, and clickstream data;
• Betting history, game play records, and transaction history (deposits, withdrawals, wagers, winnings);
• Geolocation data (approximate location based on IP address) to verify regional eligibility;
• Cookies and similar tracking technologies (see Section 10 for details).

3.3 Information from Third Parties. We may receive information from third-party service providers, including:

• Payment processors (to verify deposit and withdrawal transactions);
• Identity verification services (to authenticate your identity and prevent fraud);
• Fraud detection and prevention partners (to identify suspicious activity and protect against money laundering);
• Marketing partners (only if you have opted in to receive promotional communications).

3.4 Sensitive Data. We do not intentionally collect sensitive personal data such as health information, political opinions, religious beliefs, or trade union membership. If such data is inadvertently provided, we will delete it immediately upon discovery.

4 How We Use Your Data

4.1 We process your personal data for the following purposes:

• Account Management: To create and maintain your user account, authenticate your identity, and manage your login credentials;
• Service Provision: To enable you to place bets, play games, make deposits and withdrawals, claim bonuses, and access customer support;
• Identity Verification (KYC): To verify your age, identity, and residential address in compliance with our licensing obligations and anti-money-laundering (AML) regulations;
• Payment Processing: To process deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja;
• Fraud Prevention: To detect and prevent fraudulent activity, money laundering, bonus abuse, collusion, and other prohibited activities outlined in our Terms & Conditions;
• Responsible Gaming: To monitor account activity for signs of problem gambling and to enforce self-exclusion requests, deposit limits, and other responsible gaming controls;
• Legal Compliance: To comply with regulatory reporting requirements, respond to law enforcement requests, and fulfill our obligations under applicable gaming, tax, and AML legislation;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance;
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the user experience;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates (only if you have opted in to receive such communications).

4.2 We do not use automated decision-making (including profiling) in ways that produce legal effects concerning you or similarly significantly affect you, except for fraud detection algorithms that may flag accounts for manual review.

5 Legal Basis for Processing

5.1 We process your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our obligations under the account agreement and to provide the services you have requested (e.g., account management, payment processing, game access);
• Legal Obligation: Processing is required to comply with applicable laws and regulatory requirements, including KYC/AML obligations, tax reporting, and gaming license conditions;
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, security monitoring, platform improvement, and direct marketing (where not overridden by your fundamental rights and freedoms);
• Consent: For certain processing activities (e.g., marketing communications, non-essential cookies), we rely on your explicit consent, which you may withdraw at any time.

6 Data Sharing and Disclosure

6.1 Service Providers. We share personal data with trusted third-party service providers who perform services on our behalf, including:

• Payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja, and aggregator platforms);
• Identity verification and KYC service providers;
• Cloud hosting and data storage providers;
• Customer support platforms (email, live chat, ticketing systems);
• Fraud detection and cybersecurity firms;
• Marketing and analytics partners (only for users who have opted in).

All third-party service providers are contractually bound to process your data only as instructed by apk488 and to implement appropriate security measures.

6.2 Regulatory Authorities. We may disclose personal data to regulatory bodies, law enforcement agencies, and other governmental authorities where required by law or where necessary to protect our legal rights, prevent fraud, or ensure the safety and security of the platform.

6.3 Business Transfers. In the event of a merger, acquisition, reorganization, or sale of assets, personal data may be transferred to the acquiring entity, provided that the new controller agrees to honor the commitments made in this Privacy Policy.

6.4 No Sale of Data. apk488 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

7 Data Security

7.1 apk488 implements industry-standard technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or damage. Our security measures include:

• Encryption: All data transmitted between your device and our servers is protected using SSL/TLS encryption. Personal data stored in our databases is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, with role-based access controls and multi-factor authentication;
• Secure Data Centers: Data is stored in secure, geographically distributed data centers with 24/7 physical security monitoring;
• Regular Security Audits: Our systems undergo regular penetration testing and security audits conducted by independent third-party cybersecurity firms;
• Incident Response: We maintain an incident response plan to detect, respond to, and recover from data security incidents.

7.2 While we take all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect unauthorized access to your account.

8 Data Retention

8.1 We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with our legal, regulatory, and contractual obligations.

8.2 Active Accounts. Personal data associated with active accounts is retained for the duration of your account relationship with apk488.

8.3 Closed Accounts. Following voluntary account closure or termination by apk488, personal data is retained for a period of 90 days to allow for the resolution of any pending disputes or regulatory inquiries, after which it is securely deleted or anonymized, except where longer retention is required by law.

8.4 Legal Retention Requirements. Certain data must be retained for extended periods to comply with tax, AML, and gaming regulatory obligations. For example:

• Transaction records (deposits, withdrawals, wagers) are retained for a minimum of 5 years;
• Identity verification documents (KYC records) are retained for a minimum of 5 years from the date of last account activity;
• Customer support communications are retained for 3 years.

8.5 Data retained for compliance purposes is stored securely with restricted access and is not used for any other purpose.

9 Your Data Protection Rights

9.1 Under applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed;
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (subject to legal retention obligations);
• Right to Restriction: You have the right to request restriction of processing in certain circumstances, such as while we verify the accuracy of disputed data;
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller;
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time (without affecting the lawfulness of processing prior to withdrawal).

9.2 To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 14. We will respond to your request within 30 days.

9.3 You also have the right to lodge a complaint with a supervisory data protection authority if you believe that our processing of your personal data violates applicable law.

10 Cookies and Tracking Technologies

10.1 The apk488 platform uses cookies and similar tracking technologies to enhance your user experience, maintain session state, and analyze platform performance.

10.2 Types of Cookies We Use:

• Essential Cookies: These cookies are necessary for the platform to function properly and cannot be disabled. They include session cookies that maintain your login state and preference cookies that remember your language and display settings;
• Performance Cookies: These cookies collect anonymous data about how you use the platform, including which pages you visit and any errors you encounter. This helps us identify technical issues and improve platform performance;
• Functional Cookies: These cookies remember your preferences (e.g., username, preferred odds format) to provide a more personalized experience;
• Marketing Cookies: These cookies track your activity across the platform and may be used to deliver targeted promotional offers (only if you have opted in to marketing communications).

10.3 Managing Cookies. You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, but please note that disabling essential cookies may prevent certain platform features from functioning correctly.

10.4 Third-Party Cookies. We use third-party analytics services (e.g., Google Analytics) to track aggregated usage statistics. These services may set their own cookies subject to their respective privacy policies.

11 International Data Transfers

11.1 apk488 is an international platform, and your personal data may be transferred to, stored in, and processed in countries other than Indonesia, including jurisdictions that may not provide the same level of data protection as Indonesian law.

11.2 Where data is transferred outside Indonesia, we ensure that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses approved by relevant data protection authorities;
• Transfer to jurisdictions recognized as providing adequate data protection;
• Binding corporate rules and other approved transfer mechanisms.

11.3 By using the apk488 platform, you acknowledge and consent to the international transfer of your personal data as described in this Privacy Policy.

12 Children's Privacy

12.1 apk488 does not knowingly collect personal data from individuals under the age of 21. Our platform is designed exclusively for adults, and account registration requires age verification.

12.2 If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and permanently close the associated account.

12.3 Parents and guardians are encouraged to monitor their children's internet use and to employ parental control software to prevent minors from accessing gambling websites.

13 Changes to This Privacy Policy

13.1 apk488 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations.

13.2 Material changes will be communicated to registered users via email to the address on file, and/or via a prominent notice displayed on the platform, with a minimum of 7 days' advance notice before the changes take effect.

13.3 Your continued use of the platform following the effective date of any updated Privacy Policy constitutes your acceptance of those changes. If you do not agree to the revised Privacy Policy, you must cease using the platform and may request account closure.

13.4 The date of the most recent revision is shown in the "Last Updated" notice at the top of this page. We recommend reviewing this page periodically to stay informed of any updates.

14 Contact Us

14.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, or if you wish to exercise your data protection rights, please contact our Data Protection Officer:

14.2 For general customer support inquiries unrelated to data protection, please use the standard support channels listed on our homepage or FAQ page.