1. Introduction
ap888 ("ap888", "we", "us", "our") operates the online casino and sports betting platform accessible at ap888.asia (the "Platform"). We are committed to protecting the privacy and personal data of everyone who uses the Platform, including registered players, prospective players who browse the Platform without registering, and individuals who contact our support team.
This Privacy Policy explains what personal data ap888 collects, why we collect it, how we use and store it, with whom we may share it, and what rights you have in relation to your personal data. Please read this policy carefully before registering an account or otherwise using the Platform. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.
This policy should be read alongside our Terms & Conditions and Responsible Gaming pages, which together govern the relationship between ap888 and its players.
2. Data We Collect
ap888 collects personal data in the following categories:
- Registration Data: When you open an ap888 account, we collect your full legal name, date of birth, residential address, nationality, email address, and mobile phone number. This data is required to create and administer your account and to fulfil our Know Your Customer ("KYC") and Anti-Money Laundering ("AML") obligations.
- Identity Verification Data: As part of our KYC process, we may collect copies of government-issued identity documents (such as your MyKad or passport), proof of address documentation, and where required by our licensing conditions, source-of-funds documentation. These documents may be reviewed by ap888's compliance team and/or authorised third-party verification service providers.
- Financial Data: We collect records of your deposits, withdrawals, transaction history, and the payment methods you use (FPX bank accounts, Touch n Go eWallet credentials at the token level, Boost eWallet details). We do not store full bank account numbers or full card numbers on our systems; these are processed and tokenised by our certified payment service providers.
- Gaming Activity Data: We maintain records of your gaming activity on the Platform, including games played, stakes placed, outcomes, session durations, and responsible gaming tool settings (deposit limits, loss limits, self-exclusion status). This data is retained for regulatory compliance, dispute resolution, and responsible gaming purposes.
- Communications Data: Records of your interactions with ap888's support team via Live Chat, email, or any other communication channel, including the content of those communications.
- Technical Data: IP address, device type, operating system, browser type and version, referring URL, pages visited on the Platform, session duration, and clickstream data. This data is collected automatically when you access the Platform.
- Marketing Preference Data: Your stated preferences regarding receipt of promotional communications from ap888, and records of your interactions with marketing emails or on-Platform promotional content.
3. How We Use Your Data
ap888 uses the personal data it collects for the following purposes:
- Account Management: Creating, maintaining, and administering your ap888 player account, processing your deposits and withdrawals, and providing access to the Platform's games and sportsbook.
- Identity Verification and Compliance: Verifying your identity and age (21+ requirement), performing AML and counter-terrorist financing checks, complying with our gaming licence obligations, and responding to lawful requests from regulatory authorities.
- Fraud Prevention and Security: Detecting and investigating suspected fraud, cheating, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions. Protecting the security and integrity of the Platform.
- Responsible Gaming: Monitoring gaming activity for indicators of problem gambling, enforcing deposit limits and self-exclusion settings requested by players, and fulfilling our responsible gaming obligations under applicable licensing conditions.
- Customer Support: Responding to your queries, complaints, and support requests, and maintaining records of our communications with you for quality assurance and dispute resolution purposes.
- Platform Improvement: Analysing aggregated and anonymised usage data to understand how players use the Platform, identify technical issues, and improve game offerings, navigation, and user experience.
- Marketing Communications: Sending you promotional offers, bonus notifications, and news about ap888 products and services, where you have consented to receive such communications or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time by contacting support.
4. Legal Basis for Processing
ap888 processes your personal data on the following legal bases:
- Performance of a Contract: Processing necessary to create and administer your account, process transactions, and provide the Platform services you have requested.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, gaming licence conditions, and lawful requests from competent authorities.
- Legitimate Interests: Processing undertaken to detect and prevent fraud, protect the security of the Platform, conduct analytics for Platform improvement, and send certain service communications. We balance our legitimate interests against your privacy rights; where our interests do not override your rights, we will seek your consent instead.
- Consent: Where none of the above bases applies — in particular, for non-essential cookies and for direct marketing communications — we will seek your explicit consent before processing your data. You may withdraw consent at any time, though withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
5. Data Sharing
ap888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:
- Payment Service Providers: FPX, Touch n Go eWallet, Boost, and other payment processors, to facilitate deposits and withdrawals. These providers process your payment data under their own privacy policies and are independently responsible for compliance with applicable data protection requirements.
- Identity Verification Providers: Third-party KYC and AML service providers engaged to verify the identity and age of ap888 players in accordance with our licensing obligations.
- Game Studios and Platform Providers: Licensed game providers whose titles are integrated into the ap888 lobby may receive limited technical data (e.g., player session tokens) necessary to deliver game functionality. They do not receive your full personal profile.
- Regulatory and Legal Authorities: Competent gaming regulators, law enforcement agencies, and courts where ap888 is required by law or by the terms of its gaming licence to disclose player information.
- Professional Advisers: Lawyers, auditors, and insurers where necessary for the conduct of ap888's business operations, subject to confidentiality obligations.
All third-party service providers engaged by ap888 are contractually required to handle personal data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific service they provide to ap888.
6. International Data Transfers
ap888 operates internationally, and your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. Where such transfers occur, ap888 takes appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy, including the use of standard contractual clauses or other approved transfer mechanisms where required.
7. Data Retention
ap888 retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy and to comply with our legal and regulatory obligations. Specifically:
- Account and transaction records are retained for a minimum of 5 years following account closure, in accordance with standard AML record-keeping requirements.
- KYC documents are retained for the period required by ap888's gaming licence conditions, typically 5 years from the date of the relevant transaction or account activity.
- Support communications are retained for up to 3 years from the date of the interaction, for dispute resolution and quality assurance purposes.
- Technical and analytics data is typically retained in aggregated, anonymised form and does not count as personal data once anonymisation is complete.
When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, ap888 will securely delete or anonymise that data.
8. Cookies & Tracking Technologies
ap888 uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform. Cookies are small text files stored on your device that help us deliver a functional, personalised, and secure Platform experience.
ap888 uses the following categories of Cookies:
- Strictly Necessary Cookies: Required for the Platform to function correctly, including maintaining your login session, storing your language and currency preferences, and enabling security features. These cannot be disabled.
- Performance and Analytics Cookies: Collect aggregated, anonymised data about how visitors use the Platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve Platform performance.
- Functional Cookies: Remember your preferences and personalisation settings to provide a more tailored experience on return visits.
- Marketing Cookies: Used to deliver relevant promotional content within the Platform, based on your gaming activity and stated preferences. These are deployed only with your consent.
You may manage your Cookie preferences through your browser settings. Note that disabling strictly necessary Cookies may impair Platform functionality.
9. Security Measures
ap888 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform's servers, encryption of sensitive data fields at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, regular security audits and penetration testing conducted by independent security specialists, and multi-factor authentication for administrative access to systems containing personal data.
While ap888 takes every reasonable precaution to secure your data, no method of internet transmission or electronic storage is 100% secure. In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, ap888 will notify affected players without undue delay in accordance with applicable legal requirements.
10. Your Rights
Subject to applicable data protection law, you have the following rights in relation to your personal data held by ap888:
- Right of Access: You may request a copy of the personal data ap888 holds about you.
- Right to Rectification: You may request correction of inaccurate or incomplete personal data.
- Right to Erasure: You may request deletion of your personal data where ap888 no longer has a lawful basis to retain it. Note that certain data must be retained for regulatory compliance purposes and cannot be deleted on request.
- Right to Restriction of Processing: You may request that ap888 restrict processing of your personal data in certain circumstances, for example while a rectification request is being resolved.
- Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that ap888 provide your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You may object to processing based on ap888's legitimate interests, including the use of your data for direct marketing purposes. Where you object to direct marketing, ap888 will cease that processing immediately.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact ap888 using the contact details in Section 13. ap888 will respond to all rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case ap888 will notify you of the extension and the reason for it.
11. Children's Privacy
The ap888 Platform is strictly intended for individuals aged 21 and above. ap888 does not knowingly collect personal data from persons under 21. If ap888 becomes aware that it has collected personal data from a person under 21, it will immediately suspend the relevant account, delete the personal data collected, and report the matter to its compliance team. 21+
If you are a parent or guardian and believe that a minor has registered an ap888 account or provided personal data to ap888, please contact us immediately at the address in Section 13 so that we can take appropriate action.
12. Changes to This Privacy Policy
ap888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. When we make material changes, we will post the updated policy on the Platform and notify registered players via email or in-Platform notification. The "Last Updated" date at the top of this policy reflects the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how we protect your data.
13. Contact & Complaints
For any queries, concerns, or requests relating to this Privacy Policy or to the personal data ap888 holds about you, please contact our support team through the following channels:
- Live Chat: Available 24/7 directly on the ap888 Platform — the fastest way to reach us for urgent data concerns.
- Email: [email protected] — please allow up to 30 calendar days for a full response to data rights requests.
If you are not satisfied with ap888's response to your data privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.