Your privacy is a foundational commitment at ap288, not a compliance checkbox. This Privacy Policy explains in plain, professional English exactly what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what rights you have over it. By registering an Account or using any Service on the ap288 Platform, you confirm that you have read and accepted this policy.
Six core principles underpin everything ap288 does with your personal information. These are not aspirational statements — they are operational standards applied to every system that touches Member data.
Every connection between your device and the ap288 Platform is protected by industry-standard TLS/SSL encryption. Data in transit cannot be intercepted or read by third parties. Data stored on our servers is encrypted at rest using AES-256.
ap288 collects only the personal data that is strictly necessary to deliver the Services, verify your identity, process your transactions, and comply with applicable legal obligations. We do not collect data speculatively or for purposes unrelated to your membership.
ap288 does not sell, rent, lease, or otherwise transfer your personal information to third parties for marketing, advertising, or commercial profiling purposes. Your data belongs to you; it is used to serve you, not to monetise your profile.
Identity documents submitted for KYC purposes — KTP, passport, SIM, bank statements — are used exclusively for age and identity verification and fraud prevention. They are never shared with affiliates, advertisers, or data brokers.
ap288 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. When data is no longer needed, it is securely deleted or anonymised.
As an ap288 Member, you have the right to access, correct, and request deletion of your personal data. You can exercise these rights at any time by contacting our support team. Requests are acknowledged within 48 hours and fulfilled within 30 days.
The following terms have the meanings set out below throughout this Privacy Policy:
ap288 acts as the data controller in respect of all Personal Data collected from Members and visitors to the Platform. As data controller, ap288 determines the purposes and means of processing your Personal Data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
All data protection enquiries, access requests, and complaints should be directed to the ap288 data protection contact at [email protected]. We aim to acknowledge all privacy-related correspondence within 48 hours of receipt.
Note: ap288 operates the Platform for players resident in Indonesia. If you are accessing the Platform from outside Indonesia, you do so at your own risk and in accordance with the laws applicable to your own jurisdiction. ap288 makes no representation that this policy satisfies the data protection requirements of jurisdictions other than those in which it is licensed to operate.
When you create an ap288 Account, we collect the following information:
To comply with our identity verification obligations, we may collect:
When you make deposits or withdrawals, we collect:
We record your activity on the Platform, including:
When you access the Platform, our systems automatically collect:
When you contact ap288 support, we collect the content of your messages, live chat transcripts, email correspondence, and records of any complaint or dispute raised, together with the resolution applied.
| Data Category | Examples | Purpose |
|---|---|---|
| Registration Data | Name, email, phone, DOB | Account creation & eligibility |
| KYC Data | KTP, passport, selfie | Identity & age verification |
| Financial Data | Bank name, transaction amounts | Payment processing & AML |
| Gaming Data | Bets, session history | Service delivery & responsible gaming |
| Technical Data | IP address, device type | Security, fraud prevention |
| Communications Data | Support chat, emails | Customer service & dispute resolution |
The majority of Personal Data ap288 holds is provided directly by you — during account registration, KYC submission, payment transactions, support interactions, and voluntary participation in promotions or surveys.
Technical and device data is collected automatically through our server logs, cookies, and similar tracking technologies when you visit or interact with the Platform. This collection is passive and occurs regardless of whether you are logged in to an Account.
In limited circumstances, ap288 may receive Personal Data from authorised third parties, including:
ap288 uses your Personal Data for the following purposes:
Important: ap288 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human review. Responsible gaming intervention decisions are reviewed by trained human agents before action is taken on your Account.
ap288 processes your Personal Data on the following legal grounds:
ap288 shares Personal Data with carefully selected third-party service providers who process data on our behalf under contractual obligations that require them to maintain confidentiality and implement appropriate security measures. These providers include:
ap288 may disclose your Personal Data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required to do so, or where we reasonably believe that disclosure is necessary to prevent fraud, protect the safety of any person, or defend ap288's legal rights.
In the event of a merger, acquisition, restructuring, or sale of all or part of ap288's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being transferred.
ap288 will never:
The ap288 Platform uses the following categories of cookies and similar tracking technologies:
You may configure your browser to refuse or delete cookies at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your ap288 Account and will significantly impair your use of the Platform. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and Samsung Internet.
ap288 does not place third-party advertising or retargeting cookies on the Platform. We do not allow external advertising networks to collect data about your Platform activity for the purpose of serving targeted advertisements on other websites.
ap288 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security programme includes:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, ap288 will notify affected Members promptly — and in any event within 72 hours of becoming aware of the breach — by email to the address registered on your Account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures ap288 has taken or proposes to take to address it.
Your Responsibility: You are responsible for keeping your ap288 Account password confidential and for logging out of your Account when using shared or public devices. ap288 cannot be held liable for unauthorised access resulting from your failure to maintain the security of your own credentials.
ap288 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law or regulation. The following standard retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of Account + 5 years after closure | Legal & regulatory obligation |
| KYC Documents | 5 years from date of submission | AML regulatory requirement |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping standards |
| Gaming & Betting History | 3 years from session date | Responsible gaming monitoring |
| Support Communications | 3 years from last interaction | Dispute resolution & quality review |
| Technical & Device Logs | 90 days from collection | Security monitoring |
| Marketing Preferences | Until consent is withdrawn | Consent-based processing |
Upon expiry of the applicable retention period, Personal Data is either permanently deleted from ap288's systems or irreversibly anonymised so that it can no longer be associated with any identifiable individual.
As an ap288 Member, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact ap288 at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 48 hours and respond substantively within 30 calendar days.
Identity Verification for Rights Requests: To protect your data from unauthorised disclosure, ap288 requires that all privacy rights requests be made from the email address registered on your Account, or that you verify your identity before we process the request. This is for your protection.
The ap288 Platform is strictly for adults aged 21 and over. ap288 does not knowingly collect Personal Data from individuals under 21 years of age. Age verification is performed as part of the registration and KYC process to enforce this restriction.
If ap288 becomes aware that Personal Data has been collected from a person under 21 years of age, that data will be deleted promptly, the associated Account will be closed, and any Real Funds deposited will be returned to the payment source following confirmation of the payment method owner's identity.
If you are a parent or guardian and believe that a minor may have registered an Account on ap288 using false information, please contact us immediately at [email protected]. We take all such reports seriously and will act on them without delay.
ap288 operates servers and infrastructure in data centres that may be located outside Indonesia. When your Personal Data is transferred to or processed in a country that does not provide the same level of data protection as the jurisdiction in which you are located, ap288 ensures that appropriate safeguards are in place to protect your data. These safeguards include:
Game studio partners — including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe — operate under their own privacy and data security frameworks. ap288 shares only pseudonymous session identifiers with these studios; your full Personal Data is not disclosed to them.
ap288 reserves the right to update this Privacy Policy at any time. Material changes — meaning changes that significantly affect your rights or the way we use your Personal Data — will be communicated to you by email to your registered address and by a prominent notice on the Platform at least seven (7) calendar days before they take effect.
Minor changes (such as clarifications of existing practices, correction of typographical errors, or updates to contact details) may be made without advance notice. The effective date and last-updated date at the top of this document will always reflect the current version.
Your continued use of the ap288 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the amended policy, you must cease using the Platform and may request Account closure in accordance with the Terms & Conditions.
The current version of this Privacy Policy is always accessible at https://ap288.bet/privacy-policy.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how ap288 has handled your Personal Data, please contact us using the details below. Our support team is available 24 hours a day, seven days a week, and includes agents who are fluent in both English and Bahasa Indonesia.
Privacy Enquiries & Rights Requests: [email protected]
Live Chat: Available on the ap288 Platform when you are logged in to your Account — ideal for urgent privacy concerns.
Response Times: Acknowledgement within 48 hours; substantive response within 30 calendar days for rights requests; 5 business days for general enquiries.
If you are not satisfied with ap288's response to a privacy concern, you may escalate the matter by emailing [email protected] with the subject line "Formal Privacy Complaint". A senior data protection officer will review your complaint and provide a written response within ten (10) business days.
If you remain dissatisfied following ap288's internal complaint resolution process, you may refer the matter to the data protection supervisory authority or gaming regulatory body in the jurisdiction in which ap288 holds its operating licence. ap288 will cooperate fully with any regulatory investigation.
Your privacy is protected by SSL encryption, strict data minimisation, and a team dedicated to responsible, transparent data handling. Ready to play? Log in to your Account or explore our full game library.
Login to ap288 Explore the Casino