Privacy Policy

This Privacy Policy ("Policy") issued by AP88 ("we", "us", "our", "the Company", "the Platform") and applies to all users ("you", "your", "the User", "the Player") who access the AP88 website atap88.cam, register an account, deposit funds, use any game or betting service, or otherwise interact with any feature of the Platform.

AP88 operates as an online casino and sports betting service primarily serving players in Malaysia and other jurisdictions where such access is not prohibited by applicable law. We understand that Malaysian players — from Kuala Lumpur and Penang to Johor Bahru and beyond — entrust us with sensitive personal information as part of the account registration and KYC verification process. We take that responsibility seriously.

This Policy is incorporated by reference into our Terms & Conditions. By using the AP88 Platform, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of this Policy, the following terms carry the meanings set out below:

AP88 is the Data Controller for all personal data collected through the Platform. As Data Controller, we determine the purposes for which your personal data is processed and the means by which that processing occurs. We are responsible for ensuring that all processing activities comply with applicable data protection laws in the jurisdictions in which we operate.

Where AP88 engages third-party service providers to process personal data on our behalf — such as payment processors, identity verification vendors, or cloud hosting providers — those parties act as Data Processors under contractual agreements that require them to process data only on our instructions and to maintain appropriate security standards.

For all privacy-related enquiries, requests, or complaints, please contact us via email at [email protected]. We aim to respond to all data-related correspondence within 14 days of receipt.

AP88 collects the following categories of personal data from users of the Platform:

AP88 collects personal data through the following means:

• Directly from you — when you create an account, complete the KYC process, make a deposit or withdrawal, contact our support team, opt in to promotions, or update your profile settings.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies that operate when you access the Platform. This includes your IP address, device identifiers, and browsing behaviour on the Platform.
• From third-party verification providers — where we engage identity verification services to cross-check the accuracy of documents submitted during KYC.
• From payment processors — confirmation data returned by Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Maybank2u, CIMB Clicks, and others solely to confirm the status of deposit and withdrawal transactions.
• From fraud prevention and AML screening services — where regulatory obligations or our own risk management procedures require us to screen your identity against relevant watchlists or databases.

AP88 processes your personal data for the following specific, documented purposes:

• Account Management: Creating, maintaining, and securing your AP88 account, including password resets, account verification, and the administration of your balance, wager history, and bonus entitlements.
• KYC & Age Verification: Verifying that you are aged 21 or above and that your identity matches the information provided at registration — as required under our responsible gambling commitments and international licensing conditions.
• Payment Processing: Processing deposits and withdrawals through your chosen Malaysian payment method — whether that is Touch 'n Go eWallet, DuitNow, FPX, or a supported bank (Maybank, CIMB, Public Bank, Hong Leong) — including confirming transaction status and reconciling your account balance.
• Fraud Prevention & AML Compliance: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling: Monitoring account activity to identify indicators of problem gambling behaviour, administering self-exclusion requests, enforcing deposit limits, and delivering responsible gambling communications.
• Customer Support: Responding to queries, resolving complaints, and maintaining records of our support interactions for quality assurance and audit purposes.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the performance, design, and feature set of the AP88 Platform.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to marketing communications. You may withdraw marketing consent at any time via your account settings or by contacting support.
• Legal & Regulatory Compliance: Fulfilling any reporting or disclosure obligations imposed by applicable law, licensing conditions, or court order.

AP88 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and AP88 — including account creation, payment processing, game provision, and KYC verification — would not be possible without your personal data. Refusal to provide data necessary for contractual performance may prevent us from offering you our services.
• Legitimate interests: Processing carried out for the legitimate business interests of AP88 where those interests are not overridden by your rights — including fraud prevention, platform security, AML screening, and product analytics.
• Legal obligation: Processing necessary to comply with legal obligations applicable to AP88, including licensing requirements, anti-money laundering regulations, and any lawful order from a competent authority.
• Consent: Where we rely on your consent — specifically for marketing communications and non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

AP88 does not sell, rent, or trade your personal data to any third party for their own commercial marketing purposes. We may share your personal data with the following categories of third parties solely to the extent necessary for the purposes described in this Policy:

• Payment processors and financial institutions: To facilitate deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Boost, GrabPay, and supported cryptocurrency networks.
• Identity verification service providers: Third-party KYC vendors engaged to validate the authenticity of documents and confirm identity information submitted by Players.
• Cloud hosting and infrastructure providers: Providers of server infrastructure, database storage, and content delivery services upon which the AP88 Platform depends — all bound by data processing agreements.
• Fraud and AML screening services: Providers of watchlist screening, device fingerprinting, and behavioural analytics tools used to detect and prevent fraudulent activity on the Platform.
• Customer support platforms: Providers of live chat and ticketing tools used by our support team — limited to the data necessary to resolve your query.
• Regulatory and law enforcement authorities: Where AP88 is required by a lawful court order, subpoena, or applicable legal obligation to disclose personal data. We will notify the affected user where permitted to do so by law.
• Business successors: In the event of a merger, acquisition, or sale of all or part of AP88's business, your personal data may be transferred to the acquiring entity, subject to continuity of this Privacy Policy.

AP88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or licensing conditions. The following retention periods apply as general guide:

• Active account data: Retained for the duration of your account and for a minimum of 5 years following permanent account closure, in accordance with standard anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 2 years from the date of the last interaction, unless the communication relates to an unresolved dispute.
• Marketing preference data: Retained until you withdraw consent or request deletion, and for a reasonable period thereafter to demonstrate compliance with your request.
• Technical and usage data (logs): Retained for up to 12 months for security, fraud detection, and performance monitoring purposes.

Where retention beyond these periods is required by a specific legal obligation — such as a regulatory investigation, litigation hold, or court order — AP88 will retain the relevant data until that obligation is discharged.

AP88 implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our current security measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the AP88 Platform is encrypted using 256-bit SSL/TLS encryption. Look for the padlock icon in your browser when visiting ap88.cam.
• Password security: User passwords are stored as salted cryptographic hashes. Plaintext passwords are never stored or transmitted internally. We recommend choosing a strong, unique password and enabling two-factor authentication on your account.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. AP88 staff undergo background screening and are bound by confidentiality obligations.
• Infrastructure security: Our Platform is hosted on hardened server infrastructure with regular penetration testing, vulnerability scanning, and security patching cycles.
• Data breach response: AP88 maintains a documented data breach response procedure. In the event of a breach likely to result in a high risk to your rights and freedoms, we will notify affected users without undue delay.

AP88 uses cookies and similar tracking technologies to operate the Platform, improve your experience, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for core Platform functionality — including user authentication, session management, and security. These cannot be disabled without impairing your use of the Platform.
• Functional cookies: Remember your language preference, display settings, and other personalisation options to improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how visitors interact with the Platform — including pages visited, session duration, and navigation paths — to help us understand usage patterns and improve the Platform over time.
• Security cookies: Used for fraud detection and session integrity purposes — including identifying unusual login locations or device changes that may indicate account compromise.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform. Disabling analytics cookies will not affect your ability to use the Platform.

AP88 does not use third-party advertising cookies or serve targeted advertising based on your Platform activity to external ad networks.

Subject to applicable data protection law and any overiding legal obligations binding on AP88, you have the following rights in respect of your personal data:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and fulfil it within 30 days of receipt, unless a longer period is permitted by applicable law.

The AP88 Platform is strictly intended for adults aged21 years and above. We do not knowingly collect personal data from any person under the age of 21. All account registrations are subject to age verification as part of the KYC process.

If AP88 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will immediately close the relevant account, forfeit any associated balance in accordance with our Terms & Conditions, and permanently delete the data concerned from our systems — subject to any overiding legal obligation to retain it.

Parents and guardians are encouraged to use parental control and internet filtering software to prevent minors from accessing gambling websites. If you believe a minor has accessed the AP88 Platform, please contact us immediately at [email protected].

AP88 operates globally and may transfer your personal data to countries outside Malaysia for the purposes of data storage, processing, or service delivery. In such cases, we ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required in the jurisdiction from which the data originates.

Safeguards used for international transfers include contractual provisions (standard data protection clauses) incorporated into our agreements with third-party Data Processors, and the selection of processors located in jurisdictions that maintain adequate data protection standards.

Where you are Malaysian user, please be aware that Malaysian data protection law — including the Personal Data Protection Act 2010 (PDPA) — may impose specific requirements on the cross-border transfer of personal data. AP88 takes reasonable steps to ensure transfers comply with applicable legal requirements, but cannot guarantee that every jurisdiction to which data may be transferred offers protections identical to those in Malaysia.

AP88 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our processing activities, or the services we offer. When material changes are made, we will:

• Update the "Last Updated" date at the top of this document;
• Notify registered Players via the email address on file or via an in-platform notification; and
• Where required by law, seek fresh consent before processing data under the revised terms.

Your continued use of the AP88 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We therefore encourage you to review this Policy periodically.

For all privacy-related enquiries, data rights requests, complaints, or questions about this Policy, please contact AP88 using the following channels:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via the AP88 Platform — please state that your query is privacy-related so it can be routed to the appropriate team member
• Languages: English, Bahasa Melayu, Mandarin Chinese
• Response time: Email — within 14 business days formal data rights requests; Live chat — 3 to 5 minutes average for general enquiries

If you are not satisfied with our response to a privacy complaint, you may lodge a complaint with the relevant data protection authority in your jurisdiction. Malaysian users may also contact the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi) under the Ministry of Communications and Digital for guidance on your rights under the Personal Data Protection Act 2010.