Your privacy matters to us. This Privacy Policy explains precisely what personal data apo88 collects from players in Indonesia, how that data is used, how it is protected, with whom it may be shared, and what rights you hold over your own information. By creating an account or continuing to use the Platform, you acknowledge and accept the practices described below.
This Privacy Policy applies to all services provided by apo88 at https://apo88.vip and constitutes a binding part of the apo88 Terms & Conditions. Where this Policy uses the terms "apo88", "we", "us", or "our", it refers to the operator of the apo88 Platform. Where it uses "you", "your", or "player", it refers to any individual who accesses, registers on, or uses the apo88 Platform. This Policy should be read alongside our Terms & Conditions.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, national identity number, contact details, IP address, and payment account details. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction. |
| "Platform" | The apo88 website accessible at https://apo88.vip, including all sub-pages, account areas, betting interfaces, game lobbies, and customer support channels. |
| "KYC" | Know Your Customer — the identity and document verification process that apo88 conducts before activating full account functionality. |
| "Cookie" | A small text file placed on your device by the apo88 Platform for session management, performance, and security purposes. |
| "Third-Party Supplier" | A licensed external provider of game content, payment processing, fraud detection, or analytics services that operates under contract with apo88. |
apo88 collects Personal Data through three principal channels: information you provide directly, information generated automatically by your use of the Platform, and information received from third-party verification and payment service providers.
apo88 processes your Personal Data for the following purposes. Each purpose is linked to a specific legal basis, which is identified in Section 4.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, KYC documents | Contract performance |
| Identity verification (KYC) | KYC documents, selfie, payment method evidence | Legal obligation; contract performance |
| Processing deposits and withdrawals | Payment data, account data | Contract performance |
| Fraud prevention and AML compliance | All categories of data | Legal obligation; legitimate interest |
| Delivering betting and gaming services | Usage data, account data | Contract performance |
| Customer support and complaint handling | Communications, account data | Contract performance; legitimate interest |
| Responsible gaming monitoring | Usage data, preference settings | Legal obligation; legitimate interest |
| Platform security and abuse prevention | Device data, log data, IP/geolocation | Legitimate interest |
| Platform performance and improvement | Usage data, cookie data | Legitimate interest |
| Promotional communications (opt-in only) | Contact data, betting preferences | Consent |
Marketing communications: apo88 only sends promotional emails, SMS, or WhatsApp messages to players who have explicitly opted in during registration or via their account notification settings. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account settings or by contacting support.
apo88 processes Personal Data on the following legal bases, as applicable to each processing activity described in Section 3:
apo88 does not sell or rent your Personal Data to any third party. We share your data only in the limited circumstances described below, and only with recipients who are contractually bound to handle your data with an equivalent standard of care.
apo88 shares data with licensed Third-Party Suppliers who provide integral components of the Platform, including: game content providers (such as Evolution Gaming, Pragmatic Play, and Pocket Games Soft); payment processing intermediaries that facilitate IDR transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja; KYC and identity verification services; and fraud detection and AML screening platforms. Each supplier receives only the minimum data necessary to perform their contracted function.
apo88 may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where disclosure is required by law, court order, or where apo88 has reasonable grounds to believe that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. apo88 will notify affected players of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of apo88's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the terms governing the use of your data at least 30 days prior to the effective date of the transfer.
apo88 may share aggregated, anonymised statistical data with business partners, regulators, or in published reports. Anonymised data cannot be used to identify individual players and does not constitute Personal Data for the purposes of this Policy.
apo88's primary data infrastructure is hosted in secure data centres operating under internationally recognised ISO 27001 information security standards. Some of our Third-Party Suppliers — particularly game content providers and fraud detection services — may process data in jurisdictions outside Indonesia.
Where Personal Data is transferred internationally, apo88 ensures that such transfers are subject to appropriate safeguards, which may include: contractual clauses requiring the recipient to handle your data to the same standard as apo88; processing only in jurisdictions with an adequate level of data protection as recognised by applicable international standards; or with your explicit informed consent where required.
Your data rights travel with you. Regardless of where your Personal Data is processed, apo88 is committed to ensuring that you retain the rights described in Section 9 of this Policy. If you have concerns about the international transfer of your data, please contact our support team at [email protected].
apo88 uses cookies and similar browser-based storage technologies to operate the Platform, maintain session security, and monitor Platform performance. We do not use third-party advertising cookies or cross-site tracking technologies. The following table describes the categories of cookies deployed on the apo88 Platform:
| Cookie Category | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Maintains your authenticated session, stores login state, and enables core Platform functionality such as bet placement and account navigation. | Session | No — disabling these cookies will prevent the Platform from functioning. |
| Performance & Analytics | Collects anonymised data on page load times, error rates, and feature usage to help apo88 identify and fix technical issues and improve the player experience. | Up to 12 months | Yes — via your browser's cookie settings. |
| Security & Fraud Prevention | Stores device fingerprint signals used to detect account sharing, automated bot activity, and multi-account registration. | Up to 24 months | No — these are required for Platform security. |
| Preference | Remembers your language display preferences, notification settings, and responsible gaming configurations across sessions. | Up to 12 months | Yes — disabling these will reset your preferences on each visit. |
You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary or security cookies will impair your ability to use the Platform and may result in your account being flagged for security review.
apo88 retains your Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable law and our licensing obligations. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML compliance, dispute resolution |
| KYC documents | Duration of account + 5 years post-closure | Regulatory obligation |
| Transaction records | Minimum 5 years from transaction date | AML compliance, financial audit |
| Betting and gaming history | Duration of account + 3 years post-closure | Dispute resolution, responsible gaming monitoring |
| Support communications | 3 years from last interaction | Quality assurance, complaint escalation |
| Log and security data | Up to 24 months from creation | Fraud investigation, platform security |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with apo88's data destruction procedures. Where anonymisation is not technically feasible, data is placed in a restricted archive accessible only for audit purposes.
As a player on the apo88 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team as described in Section 14. apo88 will respond to all valid data rights requests within 14 business days of receipt.
Important: Exercising certain rights — particularly the right to erasure or restriction of processing — may limit apo88's ability to continue providing betting and gaming services to you, and may necessitate account closure. apo88 will advise you of any such impact before processing your request.
The apo88 Platform is strictly intended for adults aged 21 years and above. apo88 does not knowingly collect Personal Data from any individual under the age of 21. All players are required to complete KYC age verification before deposit and withdrawal functionality is activated on their account.
If apo88 becomes aware that Personal Data has been collected from a player who was under 21 at the time of registration, the following steps will be taken immediately: the account will be suspended; all wagers placed while underage will be voided; any balance remaining in the account (net of voided winnings) will be returned to the originating payment method; and all Personal Data associated with the underage account will be securely deleted, except where retention is required for regulatory purposes.
If you are a parent or guardian and you believe your child has created an account on apo88, please contact us immediately at [email protected] or via live chat. We take underage access reports with the utmost seriousness and will act on all credible reports within 24 hours.
21+ Only. apo88 is exclusively for adults aged 21 and above. By registering, you confirm that you are at least 21 years of age. Please gamble responsibly. Visit our Responsible Gaming page for tools and resources if gambling is becoming a concern.
apo88 implements a layered, defence-in-depth approach to data security. Our technical and organisational measures include the following:
While apo88 applies industry-leading security practices, no digital system can be guaranteed to be entirely immune from compromise. You are responsible for maintaining the security of your own login credentials and for notifying apo88 support immediately if you suspect unauthorised access to your account.
The apo88 Platform integrates services provided by licensed third-party game studios, payment processors, and security vendors. These integrations are necessary to deliver the full range of betting, gaming, and payment functionality available on the Platform. Each third-party integration is governed by a data processing agreement that requires the supplier to process player data only for the purposes specified by apo88 and to maintain appropriate security standards.
Third-party game studios — including Evolution Gaming, Pragmatic Play, Pocket Games Soft (PG Soft), Spribe, NetEnt, and Microgaming — may collect limited technical data (such as session identifiers and game event logs) directly through their game client software. This data is used solely for game integrity, dispute resolution, and regulatory reporting purposes. apo88 does not permit third-party game studios to use this data for independent marketing or profiling purposes.
The apo88 Platform does not contain links to unaffiliated external websites. In the event that any external links are added in future, apo88 is not responsible for the privacy practices of those external sites, and you should review their privacy policies independently.
apo88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we provide. The current version of this Policy is always available at https://apo88.vip/privacy-policy, with the version number and effective date displayed at the top of the document.
Where a proposed amendment materially affects your rights or the manner in which we process your Personal Data, apo88 will provide at least 14 days' advance notice via on-site notification and/or email to your registered address before the change takes effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
If you do not agree with an amendment to this Policy, you may request account closure before the amendment's effective date by contacting our support team. In such cases, apo88 will continue to process your data under the prior version of the Policy until account closure is completed.
For all privacy-related enquiries, data rights requests, or to report a suspected data breach, please contact the apo88 data team through the channels listed below. All contact information is provided as plain text only and is not clickable:
apo88 aims to acknowledge all data rights requests within 2 business days and to resolve them within 14 business days. Complex requests involving large volumes of data or coordination with third-party suppliers may take up to 30 calendar days; in such cases, apo88 will notify you of the extended timeline and the reason for the delay.
Data Access Request Process: To verify your identity before processing a data access, rectification, or erasure request, apo88 may ask you to confirm your registered email address, mobile number, and one piece of KYC information. This step is required to protect your data from unauthorised access requests made by third parties claiming to act on your behalf.
Now that you understand how apo88 protects your privacy, explore our full range of sports betting, live casino, and slot games — all secured with 256-bit SSL encryption and backed by 24/7 Indonesian-speaking support.