Privacy Policy — apkh89

Definitions

In this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or can be used to identify a natural person, including name, identity document number, date of birth, email address, mobile phone number, Indonesian bank account details, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Member" means any individual who has registered an account on the apkh89 platform.
• "KYC Data" means identity verification documents submitted by a Member in fulfillment of the Know Your Customer (KYC) process, including copies of government-issued identity documents such as the Indonesian National Identity Card (KTP) and selfie photographs.
• "Transaction Data" means financial records relating to deposits, withdrawals, bonus claims, bets placed, and winnings credited through the apkh89 platform, denominated in Indonesian Rupiah (IDR).
• "Technical Data" means device and connection information automatically collected when you access the platform, including IP address, browser type and version, operating system, device identifiers, session duration, and pages visited.
• "Third-Party Processor" means any external service provider that processes Personal Data on behalf of apkh89 under a data processing agreement, including payment processors, game studio partners, and fraud detection service providers.

Personal Data We Collect

apkh89 collects the minimum Personal Data necessary to provide a secure, compliant, and high-quality betting and gaming service to Members across Indonesia. The categories of data we collect are as follows:

How We Collect Personal Data

apkh89 collects Personal Data through the following channels:

3.1 Directly from You

The majority of your Personal Data is collected directly from you when you register an account, complete the KYC verification process, make a deposit or withdrawal request, contact customer support via Live Chat or email, or update your Account Settings. You are always informed of what data is required and why it is needed at the point of collection.

3.2 Automatically During Platform Use

Technical Data is collected automatically each time you visit the apkh89 platform, regardless of whether you are logged into an account. This includes IP address logging, browser session recording, and device fingerprinting, which are used for fraud prevention, security monitoring, and platform performance analytics. See Section 8 for details on cookies and tracking technologies.

3.3 From Third-Party Processors

In limited circumstances, apkh89 receives Personal Data from authorized Third-Party Processors. Examples include: identity verification results returned by our KYC service provider following a document check; fraud risk scores returned by our payment processor following a deposit or withdrawal request; and game history data returned by game studio APIs (Evolution Gaming, Pragmatic Play, PG Soft, and others) for the purpose of resolving disputes and auditing fair play compliance.

Purpose and Legal Basis for Processing

apkh89 processes your Personal Data only for specific, legitimate purposes. The table below outlines our primary processing activities and the legal basis for each:

apkh89 does not sell Personal Data to third parties for their own marketing purposes. We do not use Personal Data to build advertising profiles or share data with social media platforms for targeted advertising without explicit Member consent.

Data Sharing and Disclosure

apkh89 shares Personal Data only where strictly necessary to deliver our services, meet legal obligations, or protect the security of the platform and its Members. We do not sell, rent, or trade Personal Data to any third party for commercial purposes.

5.1 Authorized Third-Party Processors

apkh89 engages a limited number of carefully vetted Third-Party Processors who handle Personal Data solely on our instructions and under binding data processing agreements. These include:

• Payment processors and local bank partners — BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallet operators (OVO, DANA, GoPay, ShopeePay) receive the minimum financial data required to execute deposit and withdrawal transactions in IDR.
• KYC and identity verification providers — Our third-party KYC partner receives KTP images and selfie photographs solely for the purpose of identity verification. Verified results are returned to apkh89; raw document images are not retained beyond the period required for regulatory compliance.
• Game studio partners — Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, Habanero, Spribe, and other certified studios receive anonymized session tokens and game-round identifiers necessary to deliver game content and resolve disputes. These studios do not receive your full name, KTP number, or financial details.
• Fraud detection and cybersecurity providers — Technical Data (including IP address and device fingerprints) may be shared with our security partners for the purpose of detecting bot activity, account takeover attempts, and money laundering patterns.
• Cloud infrastructure providers — apkh89 uses internationally certified cloud hosting services. All data stored with infrastructure providers is encrypted at rest using AES-256 and in transit using TLS 1.3.

5.2 Legal Disclosure

apkh89 may disclose Personal Data to relevant governmental, regulatory, or law enforcement authorities where required by applicable law, court order, or regulatory direction — including disclosures related to anti-money laundering (AML) investigations, fraud prosecutions, or compliance audits conducted by the jurisdiction in which apkh89 holds its international gaming license. Where legally permissible, apkh89 will notify the affected Member of any such disclosure in advance.

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or corporate restructuring involving apkh89, Member Personal Data may be transferred to the successor entity as part of the transaction. In such circumstances, apkh89 will provide at least 30 days' advance notice to all affected Members via platform announcement or email, and will ensure that the successor entity assumes equivalent data protection obligations.

Data Retention

apkh89 retains Personal Data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account and Registration Data: Retained for the duration of active membership, plus a minimum of five (5) years following account closure, in compliance with international AML record-keeping requirements.
• KYC Data: Retained for a minimum of five (5) years from the date of verification, or for the full duration of membership plus five (5) years, whichever is longer. KTP and passport images are stored in encrypted form with restricted internal access.
• Transaction Data and Financial Records: Retained for a minimum of five (5) years following the date of each transaction, consistent with international gaming license requirements and financial record-keeping standards.
• Communications Data: Live Chat transcripts and support email correspondence are retained for two (2) years from the date of the interaction, after which they are anonymized or deleted.
• Technical Data: Server logs containing IP addresses and session data are retained for ninety (90) days for security monitoring purposes, after which they are automatically purged.
• Marketing Preferences: Retained until you withdraw consent or close your account, after which marketing records are deleted within thirty (30) days.

Security Measures

apkh89 implements a layered security architecture to protect Personal Data against unauthorized access, disclosure, alteration, and destruction. Our technical and organizational security measures include, but are not limited to:

• Transport Encryption: All data exchanged between your browser or device and the apkh89 platform is encrypted using TLS 1.3. apkh89 does not permit unencrypted HTTP connections.
• Data-at-Rest Encryption: All Personal Data stored on apkh89 servers — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256.
• Password Security: Member passwords are never stored in plain text. They are hashed using a modern cryptographic hashing algorithm with individual salting per account.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable SMS OTP two-factor authentication, available in Account Settings. apkh89 may require 2FA for high-value withdrawal requests.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff with access to KYC documents or financial records undergo background checks and are subject to confidentiality obligations.
• Intrusion Detection: apkh89 operates 24/7 automated intrusion detection systems and security monitoring tools that alert our security team to anomalous access patterns in real time.
• Penetration Testing: The apkh89 platform undergoes periodic penetration testing by independent cybersecurity professionals. Critical vulnerabilities identified during testing are remediated within a defined SLA.
• Incident Response: In the event of a confirmed data breach affecting Member Personal Data, apkh89 will notify affected Members without undue delay and will take all reasonable steps to contain and remediate the incident.

Cookies and Tracking Technologies

apkh89 uses cookies and similar client-side tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyze how the platform is used. The following categories of cookies are deployed on the apkh89 platform:

8.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They maintain your authenticated login session, store your Wallet balance display preferences, and preserve your language and currency display settings. Strictly necessary cookies cannot be disabled without impairing core platform functionality. No consent is required for these cookies.

8.2 Analytics Cookies

apkh89 uses first-party analytics tools to understand how Members navigate the platform — including which game categories receive the most engagement, typical session durations, and common navigation paths. Analytics data is aggregated and anonymized before analysis. No individual browsing profiles are built or shared with advertising networks.

8.3 Security and Fraud Prevention Cookies

Certain cookies are deployed specifically to support fraud detection and account security. These cookies help identify whether a login attempt originates from a previously recognized device, flag unusual geographic access patterns, and support bot-detection systems. These are classified as strictly necessary and cannot be disabled.

8.4 Cookie Management

You can manage non-essential cookie preferences through your browser settings. Note that disabling analytics cookies will not affect your ability to use the apkh89 platform. A full list of cookies deployed by apkh89, including their names, durations, and purposes, is available on request by emailing [email protected].

Your Privacy Rights

As a Member of the apkh89 platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request" and a description of your request. We will acknowledge your request within three (3) business days and respond in full within thirty (30) days.

• Right of Access: You have the right to request a copy of all Personal Data apkh89 holds about you, including your registration details, KYC status, transaction history, and communications records.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. For changes to your registered name or identity document number, you will be required to submit updated KYC documentation.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected and where no legal retention obligation applies. Note that apkh89 is required to retain KYC and Transaction Data for a minimum of five (5) years under AML regulations; these records cannot be deleted within that retention window even upon request.
• Right to Restrict Processing: You may request that apkh89 pause certain processing activities — for example, while a rectification request is being resolved — without requiring full deletion of your data.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the Personal Data you provided to apkh89 (such as your registration details and transaction history) for the purpose of transferring it to another service provider.
• Right to Withdraw Consent: Where apkh89 processes your Personal Data on the basis of your consent (primarily for promotional communications), you may withdraw that consent at any time by updating your Marketing Preferences in Account Settings or by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.
• Right to Object: You may object to processing carried out on the basis of legitimate interest, including certain uses of Technical Data for platform analytics. apkh89 will assess your objection and respond within the required timeframe.

Children's Privacy

The apkh89 platform is strictly intended for adults aged 21 and above. apkh89 does not knowingly collect Personal Data from any person under the age of 21. If we become aware that Personal Data has been collected from a person under 21, we will immediately close the associated account, void all bets and balances, and permanently delete all Personal Data associated with that account.

If you believe a person under the age of 21 has registered an account on the apkh89 platform — whether a family member, minor in your household, or otherwise — please contact our support team immediately via Live Chat or at [email protected]. We take underage access extremely seriously and will act on all credible reports without delay.

We encourage parents and guardians in Indonesian households to use parental control software to restrict access to online gambling platforms. apkh89 supports filtering tools that help prevent minors from accessing betting and casino content.

Third-Party Links and Embedded Content

The apkh89 platform may contain links to third-party game studio interfaces or embedded game content frames served by our certified studio partners (including Evolution Gaming, Pragmatic Play, and PG Soft). While these studios are engaged under data processing agreements with apkh89, their own privacy practices within their game interfaces may differ from those of apkh89.

apkh89 is not responsible for the privacy practices of any third-party service whose content is embedded on or linked from the platform, beyond the contractual obligations we have imposed on our authorized Third-Party Processors. We recommend reviewing the privacy policies of any third-party service you interact with directly.

Updates to This Privacy Policy

apkh89 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made — particularly changes that affect how we use or share your Personal Data — we will notify you in advance via a platform announcement or by email to your registered address, with a minimum of 14 days' notice before the changes take effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage Members to review this Privacy Policy periodically. Your continued use of the apkh89 platform following the effective date of any updated Privacy Policy constitutes acceptance of the revised terms.

If you have any concerns about a proposed change to this Privacy Policy, please contact our support team before the effective date of the change to discuss your options, including account closure if you do not wish to accept the revised terms.

Contact Our Data Protection Team

For all privacy-related inquiries, Personal Data requests, or concerns about how apkh89 handles your data, please contact us using the details below. All contact information is provided as plain text and is not a clickable link.

• Email (Privacy Requests): [email protected] — subject line: "Privacy Rights Request"
• Email (General Support): [email protected]
• WhatsApp Support: +62 811 0000 0000
• Live Chat: Available 24/7 via the apkh89 platform — average response time 2–5 minutes during peak WIB hours
• Serving: Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and all of Indonesia

We aim to acknowledge all privacy requests within three (3) business days and resolve them within thirty (30) days. Complex requests involving large volumes of data or requiring legal review may take up to sixty (60) days; we will notify you of any extension and the reason for it.