Privacy Policy

1 Introduction

This Privacy Policy (hereinafter "the Policy") sets out how Apek88 (referred to as "Apek88", "we", "us", or "the Platform") collects, uses, stores, shares, and protects personal data relating to individuals who access or use the Apek88 online gaming platform athttps://apek88.lat and all associated services.

Apek88 takes the privacy and security of personal data seriously. We recognise that players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang and Johor Bahru — trust us with sensitive personal and financial information, and we treat that trust as a core responsibility.

This Policy applies to all personal data processed in connection with account registration, account use, customer support interactions, payment processing, KYC verification, and marketing communications (where applicable). It covers data collected via the website, mobile platform, and any other channel through which Apek88 services are delivered.

2 Definitions

For the purposes of this Policy, the following definitions shall apply:

• "Personal Data" means any information that can be used, directly or indirectly, to identify a natural person — including name, email address, phone number, date of birth, identification number, IP address, device identifiers, and financial information.
• "Data Subject" means the individual to whom Personal Data relates — in most cases, you as the registered user of the Apek88 platform.
• "Data Controller" means Apek88, which determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of Apek88, under a data processing agreement, for defined purposes only.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "KYC" means Know Your Customer — the mandatory identity and age verification process required by Apek88 before a withdrawal can be processed.
• "Cookies" means small text files placed on your device by the Apek88 platform for the purposes described in Section 10 of this Policy.

3 Data We Collect

Apek88 collects the following categories of personal data from users:

We do not collect special categories of sensitive personal data (such as racial or ethnic origin, health data, religious beliefs, or biometric data) unless explicitly required for a specific regulatory compliance purpose and with your explicit consent.

4 How We Collect Data

Apek88 collects personal data through the following channels:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, updating your account profile, or contacting customer support.
• Automated Collection: Technical and Usage Data collected automatically when you interact with the platform, via cookies, log files, pixel tags, and analytics tools. See Section 10 for full details on cookies.
• Third-Party Sources: Identity verification data from KYC verification service providers; fraud prevention data from anti-fraud screening services; payment verification data from payment processors such as DuitNow, FPX, and supported e-wallet providers.
• Public Sources: Publicly available records where relevant to fraud prevention, anti-money laundering (AML) screening, or sanctions list checks.

5 Purpose of Data Processing

Apek88 processes personal data for the following defined purposes only:

• Account Management: Creating, maintaining, and operating your player account, including authentication and access control.
• KYC and Age Verification: Verifying that all account holders are aged 21 or above and confirming identity in compliance with applicable platform policies.
• Payment Processing: Processing deposits and withdrawals via supported Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and supported cryptocurrencies.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover attempts, and other security threats.
• Customer Support: Responding to your queries, resolving disputes, processing complaints, and providing technical assistance.
• Legal and Regulatory Compliance: Meeting obligations under applicable anti-money laundering (AML) regulations, sanctions screening requirements, and international licensing conditions.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, payment flows, and user experience.
• Responsible Gambling: Monitoring play behaviour to identify indicators of problem gambling and facilitating the deployment of responsible gambling tools where appropriate.
• Direct Communications: Sending account-related notifications, security alerts, and — where you have opted in — promotional communications about Apek88 offers.

6 Legal Basis for Processing

Apek88 processes personal data only where a valid legal basis exists. The primary legal bases applicable to our processing activities are:

• Contractual Necessity: Processing required to perform the contract between Apek88 and you as a registered user — including account creation, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, AML screening, and record-keeping requirements.
• Legitimate Interests: Processing where Apek88 has a legitimate interest that is not overridden by your privacy rights — including fraud prevention, platform security, and internal analytics.
• Consent: Processing based on your explicit, freely given consent — specifically, the sending of optional promotional marketing communications. You may withdraw consent at any time by contacting our support team.

7 Data Sharing & Disclosure

Apek88 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment Processors: Data shared with payment gateway providers (including e-wallet operators, banks, and cryptocurrency processors) to process your transactions. These providers are contractually obligated to use your data solely for transaction processing.
• KYC and Identity Verification Providers: Document and identity data shared with third-party verification service providers for the purpose of conducting mandatory KYC checks.
• Fraud Prevention and AML Services: Data shared with anti-fraud and anti-money laundering screening services where required for compliance purposes.
• IT and Infrastructure Providers: Technical data shared with cloud hosting, security, and infrastructure providers who process data on Apek88's behalf under strict data processing agreements.
• Legal and Regulatory Authorities: Data disclosed to competent law enforcement agencies, courts, or regulatory bodies where required by applicable law, court order, or lawful regulatory demand.

8 Your Data Rights

As a Data Subject, you have the following rights in relation to your personal data held by Apek88. To exercise any of these rights, please contact our support team at the email address provided in Section 15.

We will acknowledge all data subject requests within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days, of which we will notify you.

9 Data Retention

Apek88 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply as general guide:

• Active Account Data: Retained for the duration of the account plus 12 months following account closure, unless a longer retention period is required by law.
• KYC and Identity Documents: Retained for a minimum of 5 years following account closure, in compliance with applicable anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in compliance with financial regulatory obligations.
• Customer Support Records: Retained for 3 years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained until consent is withdrawn, plus 12 months for audit purposes.
• Technical and Usage Data: Retained in anonymised or aggregated form indefinitely for analytical purposes; identifiable technical data retained for up to 24 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with Apek88's data destruction procedures.

10 Cookies & Tracking Technologies

Apek88 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that help us deliver a personalised, functional, and secure gaming experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies and security cookies. They cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Used to remember your preferences — such as language settings, currency display, and game lobby layout — to improve your experience across sessions.
• Analytical Cookies: Used to collect aggregated, anonymised data about how users interact with the platform. This data helps us identify performance issues and improve platform design.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic, account takeover attempts, and suspicious login behaviour.

You may manage cookie preferences via your browser settings. Disabling certain categories of cookies may affect the functionality of the Apek88 platform. Strictly necessary cookies cannot be disabled via browser settings as they are required for basic platform operation.

11 Security Measures

Apek88 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between user devices and Apek88 servers.
• Encryption of sensitive personal data and financial data stored in Apek88's databases.
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access personal data.
• Multi-factor authentication (MFA) for internal administrative access to systems containing personal data.
• Regular security vulnerability assessments, penetration testing, and security audits conducted by independent third parties.
• Formal data breach response procedures, including user notification protocols as described in Section 1.
• Regular training of Apek88 staff on data protection obligations and secure data handling practices.

12 Children & Minors

Apek88 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. The platform is intended exclusively for adults aged 21 and above. Strict age verification procedures are applied at the account registration and KYC verification stages to enforce this requirement.

If Apek88 becomes aware that personal data has been collected from a person under the age of 21, that account will be closed immediately, all associated balances returned to the originating payment source, and the personal data deleted from our systems without undue delay.

If you have reason to believe that a person under 21 has registered an account on Apek88, please notify us immediately by contacting our support team at the address in Section 15.

13 International Data Transfers

As an internationally operating online platform, Apek88 may process and store personal data on servers located outside of Malaysia. Where personal data is transferred to countries that may not provide the same level of data protection as Malaysia, Apek88 ensures that appropriate safeguards are in place to protect your information.

Safeguards for international transfers include contractual protections (such as data processing agreements incorporating standard contractual clauses), transfer to jurisdictions with adequate data protection frameworks, and technical security measures applied uniformly regardless of data location.

By using the Apek88 platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia. If you have concerns about international data transfers relating to your personal data, please contact us as described in Section 15.

14 Amendments to This Policy

Apek88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform functionality. Where amendments are material — meaning they affect how we collect or use your personal data in ways that differ significantly from what was previously disclosed — we will notify you via the registered email address on your account and/or a prominent notice on the platform prior to the changes taking effect.

Continued use of the Apek88 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. The date of the most recent update is displayed at the top of this page. Players are encouraged to review this Policy periodically.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, have concerns about how your personal data is being processed, or need to report a potential data protection issue, please contact the Apek88 data protection team through the following channel:

When submitting a data subject access request or any right-to-erasure request, please include your registered account email address and a brief description of your request so that we can locate your records efficiently. Identity verification may be required before we can action your request, to protect your data from unauthorised third-party requests.

Apek88 is committed to resolving all privacy-related queries promptly and transparently. Players in Kuala Lumpur, Shah Alam, Penang, Johor Bahru, Petaling Jaya, and across Malaysia can reach our support team at any time.