Privacy Policy api888 – Member Personal Data Protection in Malaysia

This Privacy Policy is issued by api888, an online gaming platform operating through the domain api888.vin. We are committed to protecting the privacy and security of every member's personal information when using our services in Malaysia.

This document explains in detail how api888 collects, processes, stores, discloses, and protects your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and international online gaming industry best practices.

This policy applies to all users who:

• Browsing or using the api888.vin website.
• Registering and holding an api888 member account.
• Making a deposit, withdrawal, or any financial transaction on the platform.
• Contacting the api888 customer support team through any channel.
• Participating in any api888 promotion, loyalty program, or lucky draw.

Api888 collects various categories of personal information depending on the type of interaction you have with our platform. Below is a summary of the types of data collected:

We do not collect sensitive information such as biometric data, medical records, religious beliefs, or political views unless required by law.

Your personal data is collected through the following main channels:

• Account Registration — information you provide when creating a new account, including your name, email, and phone number.
• Identity Verification (KYC) — supporting documents you upload to fulfill account verification requirements.
• Financial transactions — details provided when making deposits or fund withdrawals.
• Platform interactions — data generated automatically as you use the platform, including activity logs and game history.
• Support Communication — information you share when contacting our customer support team via live chat, Telegram, or email.
• Cookies and Tracking Technologies — technical data collected automatically to improve platform performance and the user experience.

Api888 uses the personal data collected for the following purposes, all of which are directly related to the operation of our online gaming platform:

• Account Management — creating, verifying, and maintaining your member account.
• Transaction Processing — to securely and accurately process deposits, withdrawals, and other financial activities.
• Legal Compliance — to meet KYC (Know Your Customer), AML (Anti-Money Laundering), and other applicable regulatory requirements.
• Platform Security — to detect and prevent fraudulent activity, money laundering, and platform abuse.
• Customer Support — to help you resolve any account or platform-related issues.
• Service Communication — sending important notices related to your account, transactions, and policy updates.
• Marketing (with consent) — to inform you about the latest promotions and offers if you have agreed to receive them.
• Platform Improvements — to analyze usage patterns in order to improve the gaming experience and platform performance.

Api888 respects your privacy and will not sell, rent, or transfer your personal data to third parties for their marketing purposes. However, there are certain situations where we may need to share your information:

• Payment Service Providers — payment gateways, banks, and digital wallet providers that process your financial transactions. These parties are bound by strict confidentiality agreements.
• Technology Service Providers — server hosting companies, gaming software providers, and IT service vendors that support our platform's operations.
• Anti-fraud agency — bodies that assist us in detecting and preventing fraud and money laundering activities.
• Legal Authorities — government agencies, regulatory bodies, or courts entitled to obtain such information when required by law.
• Business Acquisition — in the event of a merger, acquisition, or sale of company assets, data may be transferred as part of that transaction.

In all data sharing cases, we ensure that recipients comply with data protection standards equal to or higher than those we uphold.

Your personal data security is api888's highest priority. We implement multiple layers of technical and organizational protection to keep your data safe at all times:

• 256-bit SSL/TLS Encryption for all data transmitted between your browser and our servers.
• Static Data Encryption for all sensitive records stored in our database.
• Role-based access control (RBAC) — only authorized personnel may access member personal data, and only to the extent necessary for their duties.
• 24/7 Security Monitoring — intrusion detection systems and anomaly monitoring operate around the clock.
• Regular security audits by independent third parties to assess and strengthen our security posture.
• Staff Security Training — all staff who handle personal data receive comprehensive information security training.
• Incident Response Plan — clear procedures for handling any data security incidents promptly and effectively.

As an api888 member, you have the following rights regarding your personal data, in accordance with Malaysia's PDPA and our policy:

• Right to Access — you may request a copy of the personal data we hold about you.
• Right to Rectification — you may request the correction of any inaccurate or outdated information.
• Right to Erasure — you may request the deletion of your personal data under certain conditions (subject to legal requirements for data retention).
• Right to Restriction of Processing — you may request that we restrict the processing of your data in certain circumstances.
• Right to Data Portability — you may request your personal data in a machine-readable format.
• Right to Object — you may object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent — you may withdraw consent previously given for specific data processing activities.

To exercise any of the above rights, please contact our customer support team. We will process your request within 14 working days. If further review is required, we will notify you and provide an estimated resolution time.

Api888 uses cookies and similar tracking technologies to improve the user experience and analyze platform performance. The following are the types of cookies we use:

• Necessary Cookies (Essential Cookies) — required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Performance Cookies — collecting information on how you use our platform to help us improve the user experience. This data is gathered anonymously.
• Functional Cookies — to allow the platform to remember your preferences such as language, region, and display settings.
• Analytics Cookies — to help us understand platform traffic patterns and usage using trusted third-party analytics tools.

You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the api888 platform.

Api888 retains your personal data only for as long as necessary to fulfill the processing purpose or as required by law. The following are our general data retention guidelines:

• Active account data — retained for as long as your account remains active and in use.
• Financial records & transaction data — retained for a minimum of 7 years after a transaction occurs, in line with Malaysia's financial legal requirements.
• KYC and identity verification data — retained for 5 years after account closure to meet AML compliance requirements.
• Support Communication Logs — retained for 2 years for service review and improvement purposes.
• Technical log data — retained for 90 days and then automatically deleted or anonymized.

After the relevant retention period expires, your data will be securely deleted or anonymized so it can no longer be personally linked to you.

The api888 platform may contain links or integrations with third-party services such as payment providers and partner gaming platforms. Please note that:

• Api888 privacy policy not applicable to third-party websites or services.
• Api888 is not responsible for the privacy practices or content of third-party websites.
• You are encouraged to read the privacy policy of each third party before providing them with any personal information.
• Third-party payment integrations on our platform are governed by binding data protection agreements to ensure your data is handled securely.

Api888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your personal data.

When we make significant changes, we will:

• Displaying a clear notice on the api888 platform homepage.
• Sending a notification to your registered email for material changes.
• Updating the "Last Updated" date shown at the top of this document.

Continued use of the api888 platform after any amendments are published means you accept the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is here to help:

• Live Chat: Available 24/7 directly on the api888 platform for immediate responses.
• Telegram: Reach our dedicated privacy agent via Telegram for more detailed enquiries.
• Email: [email protected] — for written requests related to personal data.

For requests related to personal data rights (access, correction, deletion), please clearly state the type of request and include the required identity verification information. We are committed to responding within 14 working days.