Privacy Policy

The following terms carry specific meanings throughout this Privacy Policy:

• "apk898", "we", "us", or "our" — refers to the operator of the online sportsbook and casino platform accessible at https://apk898.app.
• "Member", "you", or "your" — any individual who has registered an account on the Platform or who visits and uses any part of it.
• "Personal Data" — any information that, alone or in combination with other information, can directly or indirectly identify a living natural person.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Platform" — the apk898 website at https://apk898.app, its mobile-optimized interfaces, and any associated member dashboard or application.
• "KYC" — Know Your Customer; the identity and address verification process required for regulatory compliance and fraud prevention.
• "Third Party" — any natural or legal person, public authority, agency, or body other than the Member and apk898.
• "Cookie" — a small text file placed on a Member's device by the Platform for the purposes of session management, analytics, and personalization.

apk898 collects only the data that is necessary to deliver a safe, compliant, and personalized betting and gaming experience. The categories of Personal Data we collect are set out in the table below:

apk898 collects Personal Data through the following mechanisms:

• Direct interactions: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated technologies: When you access the Platform, our servers automatically log Technical Data and Usage Data via cookies, server-side access logs, and similar tracking technologies. See Section 9 (Cookies & Tracking) for full details.
• Third-party payment processors: When you initiate a deposit or withdrawal, our payment-processor partners confirm transaction status and, where required for anti-money-laundering (AML) compliance, share limited identity confirmation data with us.
• KYC verification providers: apk898 uses certified third-party identity verification services to cross-reference the documents you submit during KYC against government and commercial databases. These providers return a verification result to us; they do not retain your documents beyond the verification window.
• Publicly available sources: In certain AML or fraud-investigation contexts, apk898 may supplement its records with information from publicly available sanctions lists, politically exposed persons (PEP) registries, or adverse media databases.

We process your Personal Data only for defined, documented purposes. The table below maps each processing purpose to the data categories it involves:

apk898 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human review. Where automated systems flag an account for investigation (for example, AML screening), a trained compliance officer reviews the flag before any action is taken.

apk898 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to create and administer your account, execute deposits and withdrawals, settle bets, and deliver the core Platform services you have signed up for.
• Legal obligation: Processing required for KYC verification, AML compliance, age verification (21+ mandatory), and any other obligations imposed by applicable law on apk898 as a licensed gaming operator.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, detect and prevent fraud, improve our products and services, and manage risk — where those interests are not overridden by your fundamental data rights.
• Consent: Where we rely on consent (for example, sending optional marketing communications), you may withdraw that consent at any time by updating your notification preferences in the account dashboard or by contacting support. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

6.1 General Principle. apk898 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. Data is shared only to the extent necessary to deliver Platform services, comply with legal requirements, or protect the integrity of the Platform.

6.2 Service Providers. We engage carefully vetted third-party service providers who process data on our behalf under strict contractual data-processing agreements. These include:

• Payment processors and local Indonesian bank settlement partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja).
• KYC and identity verification service providers.
• Cloud hosting and content delivery network (CDN) providers.
• Customer support platform providers (live chat infrastructure).
• Game studio partners — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft — who supply game software and, where relevant, aggregate session data for RTP certification purposes. These studios do not receive personally identifiable information beyond a tokenized session identifier.
• Fraud detection and cybersecurity providers.

6.3 Legal Disclosures. apk898 may disclose your Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by a binding legal order, warrant, or applicable statute. We will notify you of such a disclosure where permitted by law and where doing so does not compromise an active investigation.

6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of assets involving apk898, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified via the registered email address associated with your account at least 30 days before any such transfer takes effect, and the acquiring entity will be contractually bound to honor this Privacy Policy.

apk898 retains your Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law. Our standard retention schedule is:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized such that it can no longer be linked to an identifiable individual. Anonymized aggregate data may be retained indefinitely for statistical and product improvement purposes.

8.1 Technical Safeguards. All data transmitted between your device and apk898's servers is protected by 256-bit TLS/SSL encryption — the same standard used by Indonesia's major financial institutions, including BCA and BRI. Data at rest is encrypted using AES-256. Our infrastructure is hosted in ISO 27001-certified data centers with continuous intrusion detection monitoring.

8.2 Access Controls. Access to systems containing Personal Data is restricted to authorized personnel on a strict need-to-know basis, enforced via role-based access control (RBAC) and multi-factor authentication (MFA). All internal data access is logged and audited on a regular basis.

8.3 Third-Party Security Standards. Every service provider that handles Personal Data on behalf of apk898 is contractually required to maintain security standards equivalent to or exceeding those described in this section. We conduct periodic due-diligence assessments of critical third-party providers.

8.4 Incident Response. In the event of a data breach that is reasonably likely to result in risk to your rights and freedoms, apk898 will notify affected Members without undue delay and in no case later than 72 hours after becoming aware of the breach, via the registered email address on your account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the remedial steps we have taken.

8.5 Your Responsibilities. You are responsible for maintaining the confidentiality of your account password and for ensuring that your device's operating system and browser software are kept up to date. apk898 will never ask for your password through any channel, including live chat or email.

apk898 uses cookies and similar technologies to operate the Platform efficiently and improve your experience. The categories of cookies we deploy are:

apk898 does not deploy third-party advertising or retargeting cookies. We do not share cookie-derived behavioral data with advertising networks or data brokers.

You may manage cookie preferences through your browser settings. Note that disabling Functional or Analytics cookies will not prevent you from using the Platform but may affect the quality of your experience. Disabling Strictly Necessary or Security cookies will impair Platform functionality and may prevent login.

As a Member of apk898, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond within 30 days of a verified request.

• Right of Access: You may request a copy of all Personal Data we hold about you, together with a description of the purposes for which it is being processed and the categories of recipients to whom it has been disclosed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold. For contact and preference data, you can make corrections directly within your account dashboard without contacting support.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing was unlawful. This right is subject to legal retention obligations — for example, AML regulations require us to retain KYC and financial transaction records for a minimum of five years.
• Right to Restriction: You may request that we restrict processing of your Personal Data while a rectification or erasure request is under review, or where you contest the lawfulness of our processing.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a machine-readable export of the Personal Data you provided to us directly (Identity, Contact, and Preference Data categories).
• Right to Object: You may object at any time to processing based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.

The apk898 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. All registration applications are subject to mandatory age verification as part of the KYC process.

If apk898 discovers that it has inadvertently collected Personal Data from a person under the age of 21, it will immediately suspend the relevant account, void all associated balances, and permanently delete the minor's data from its systems without any retention period applying. Any deposits made by a verified minor will be refunded to the originating payment account.

If you are a parent or guardian and believe that your child under 21 has registered an account on apk898, please contact us immediately at [email protected] so that we can take prompt corrective action.

apk898 operates globally and may transfer your Personal Data to service providers located outside Indonesia, including to jurisdictions that may not provide the same level of data protection as Indonesian law. Where such transfers occur, apk898 ensures appropriate safeguards are in place, including:

• Binding contractual clauses in data-processing agreements with all third-party processors receiving data in third countries.
• Transfer only to processors located in jurisdictions recognized as providing an adequate level of data protection, or to processors certified under equivalent international frameworks.
• Regular review of cross-border data flows to confirm that safeguards remain adequate as laws and circumstances change.

By registering an account with apk898, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia as described in this section.

13.1 Right to Update. apk898 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. All amendments will be published on this page with an updated "Last Updated" date at the top of the document.

13.2 Material Changes. Where a proposed amendment materially affects your rights or the way in which we process your Personal Data, we will provide at least 14 days' advance notice via the registered email address associated with your account before the change takes effect.

13.3 Continued Use. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not accept an amendment, you must cease using the Platform and close your account before the amendment takes effect.

For any questions, concerns, or formal requests relating to this Privacy Policy or our data processing practices, please contact the apk898 data team through the following channels:

• Live Chat: Available 24/7 from within your member dashboard — average first-response time under 90 seconds. Live chat is the fastest route for urgent data access or erasure requests.
• Email: [email protected] — formal written requests and complaints relating to data processing are acknowledged within 3 business days and resolved within 30 days.

When submitting a data rights request, please include your Member ID, the email address registered to your account, and a clear description of the right you wish to exercise. This enables our team to locate your records and respond efficiently without unnecessary delay.