api228 is committed to protecting your personal information. This policy explains exactly what data we collect, why we collect it, how it is used, and the rights you hold over your own information.
A quick snapshot of how api228 handles your data — full details are in the policy document below
All personal data stored by api228 is encrypted using AES-256 at rest. Every connection between your browser or app and our servers is secured by TLS 1.3, ensuring your information cannot be intercepted in transit.
You may request access to, correction of, or deletion of your personal data at any time. We respond to all verified data requests within 30 calendar days in accordance with applicable international data protection standards.
api228 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Data sharing is strictly limited to what is necessary for service delivery, regulatory compliance, and fraud prevention.
We retain account data for no longer than 5 years following account closure, in line with anti-money-laundering obligations. KYC identity documents are held for the duration required by our licensing authority and then securely destroyed.
We apply a data-minimization principle — only the information genuinely required to operate your account, verify your identity, process payments, and comply with regulations is collected. We do not gather unnecessary personal data.
Promotional emails and SMS alerts are sent only to players who have opted in. You can withdraw marketing consent at any time via your account settings or by contacting support, and we will process your opt-out within 5 business days.
Last Updated: 1 January 2026 | Effective Date: 1 January 2026
This Privacy Policy ("Policy") describes how api228 ("api228", "we", "us", "our"), operator of the website at https://api228.cam, collects, processes, stores, and protects the personal data of users ("you", "Player", "Data Subject") who access our Platform or use any of our Services. This Policy forms an integral part of the api228 Terms & Conditions. By registering an account or continuing to use our Platform, you confirm that you have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact support to close your account.
This Policy applies to all Personal Data collected by api228 in connection with your use of the Platform and Services, regardless of whether you access the Platform via desktop browser, mobile browser, or any application interface. It applies to registered players, prospective players who have commenced but not completed registration, and visitors who browse the Platform without registering.
api228 acts as the Data Controller in respect of your Personal Data. All questions, requests, or complaints relating to your Personal Data should be directed to our Data Protection contact as set out in Clause 15 of this Policy.
This Platform is directed exclusively at adults aged 21 and over who are residents of Indonesia or otherwise legally permitted to access online gaming services in their jurisdiction. We do not knowingly collect Personal Data from individuals under the age of 21.
The categories of Personal Data we collect depend on how you interact with the Platform. The following table summarizes the main data types and their purpose:
| Data Category | Examples | When Collected |
|---|---|---|
| Registration Data | Full name, date of birth, email address, phone number, residential address, chosen username | Account sign-up |
| KYC Identity Data | KTP scan/photo, selfie with ID, proof of address document | Identity verification request |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records | Deposit or withdrawal processing |
| Transactional Data | Bet history, game session records, wagering amounts, win/loss records, bonus usage | Ongoing platform use |
| Technical Data | IP address, browser type and version, operating system, device model, session timestamps, referring URLs | Each platform visit |
| Communications Data | Live chat transcripts, support email correspondence, complaint records | Customer support interactions |
| Marketing Preferences | Email and SMS opt-in/opt-out status, preferred promotional categories, language preferences | Account settings or consent forms |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, session time limits, problem-gambling assessment responses | Responsible gaming tool usage |
The majority of Personal Data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or interact with any feature of the Platform that requires you to submit information.
When you visit or use the Platform, we automatically collect Technical Data through server logs, cookies, and similar tracking technologies. This includes your IP address, the pages you visit, the duration of each session, and the actions you take within the Platform. This data is collected to maintain Platform security, optimize performance, and detect fraudulent behavior. Please refer to Clause 10 for full details on our use of cookies.
We may receive Personal Data about you from the following categories of third parties:
api228 processes your Personal Data only where a valid legal basis exists. The primary purposes for which we process your data, and the corresponding legal bases, are as follows:
We do not use your Personal Data to make fully automated decisions that produce significant legal effects on you without providing a mechanism for human review. If automated risk-scoring affects your account status, you may request a manual review by contacting support.
api228 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share your data only in the following limited circumstances:
We engage carefully vetted third-party service providers to assist in operating the Platform. These include payment gateway operators, cloud hosting providers, KYC verification services, customer support platform vendors, and email delivery systems. All such providers operate under written data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to api228.
Live casino and slot game content is delivered through licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers receive only the minimum session and stake data required to deliver fair game outcomes and verify bet integrity. They do not receive your KYC documents or full financial profile.
We may disclose your Personal Data to licensing authorities, financial intelligence units, or law enforcement agencies where we are legally compelled to do so, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or harm to persons. Where legally permitted, we will notify you of any such disclosure request.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of api228's assets, your Personal Data may be transferred to the successor entity. We will notify affected users via email and a prominent notice on the Platform at least 30 days before any such transfer, and the receiving entity will be bound by privacy commitments no less protective than those in this Policy.
Our firm commitment: api228 will never share your Personal Data with any unaffiliated third party for their own advertising, profiling, or direct-marketing purposes — period.
api228 operates infrastructure across multiple jurisdictions to ensure Platform performance and redundancy for users across Indonesia, including those in Jakarta, Surabaya, Medan, Bandung, Bali, and Semarang. Consequently, your Personal Data may be processed on servers located outside Indonesia. Where such transfers occur, api228 ensures that adequate safeguards are in place, including:
By using the Platform, you acknowledge that your data may be transferred internationally under these safeguards. You may request details of the specific transfer mechanisms applicable to your data by contacting our Data Protection team.
We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, satisfy our legal and regulatory obligations, and resolve any outstanding disputes. Our standard retention periods are as follows:
Upon expiry of the applicable retention period, your data is either permanently deleted from our systems or irreversibly anonymized so that it can no longer be attributed to you as an individual.
api228 implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Key measures include:
While we apply rigorous security standards, no system connected to the internet can be guaranteed completely immune from breach. You play an important role in your own account security by using a strong, unique password and enabling 2FA. Report any suspected unauthorized access immediately to our support team.
api228 uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate the Platform, remember your preferences, maintain your session, and analyze aggregate usage patterns. The categories of cookies we use are described below:
These cookies are essential for the Platform to function. They maintain your logged-in session, enable secure page transitions, and prevent cross-site request forgery (CSRF) attacks. You cannot opt out of these cookies while continuing to use the Platform, as doing so would prevent core functionality from operating correctly.
These cookies collect anonymized data about how visitors use the Platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This information is used exclusively to improve the Platform's performance and user experience. No individually identifying information is transmitted to analytics providers.
These cookies remember your preferences — such as your preferred language, time zone (WIB by default for Indonesia), odds format, and interface layout — so that you do not need to re-select these settings each time you visit.
Where you have provided consent, marketing cookies allow us to deliver promotional messages and bonus offers that are relevant to your betting activity and interests. These cookies may also be used to limit how frequently you see a particular promotion. You may withdraw consent for marketing cookies at any time through your account settings.
You may control cookie settings through your browser's privacy settings. Disabling non-essential cookies will not prevent you from using the Platform's core features, but it may affect personalization and session continuity. For detailed guidance on managing cookies in popular browsers, please consult your browser's official help documentation.
Subject to applicable law and our regulatory obligations, you hold the following rights in relation to your Personal Data held by api228:
You may request a copy of the Personal Data we hold about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of receiving a verified request.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. Many details (such as phone number and email address) can be updated directly through your account settings. For KYC-linked data corrections, please contact our support team with supporting documentation.
You may request deletion of your Personal Data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and no other legal basis exists; or (c) you object to processing and there are no overriding legitimate grounds. Note that erasure requests may be partially declined where retention is required by law — for example, AML regulations require us to retain certain financial records for a minimum of 5 years regardless of account closure.
You may request that we restrict processing of your data (i.e., continue to store it but not actively use it) while the accuracy of data is contested, while an objection is being assessed, or where processing is unlawful but you prefer restriction over erasure.
Where processing is based on your consent or on contract performance, and is carried out by automated means, you may request that we transmit your Personal Data directly to another service provider in a machine-readable format, where technically feasible.
You may object at any time to processing of your Personal Data based on legitimate interests, including profiling for responsible gaming monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests. You may object to direct marketing processing unconditionally and at any time.
To exercise any of the rights above, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". Include your registered username and a description of the right you wish to exercise. We may ask you to verify your identity before processing the request. We will respond within 30 calendar days; complex requests may be extended by a further 30 days with notification to you.
The api228 Platform and all its Services are strictly restricted to individuals aged 21 years or older. We do not knowingly collect, store, or process Personal Data from anyone under the age of 21. Our registration process and KYC verification are specifically designed to detect and prevent underage access.
If you are a parent or guardian and you believe that a minor in your care has submitted Personal Data to api228, please contact us immediately at [email protected]. Upon verification of the complaint, we will promptly delete all associated Personal Data, close the account, and return any deposited funds to their source payment method.
The Platform may contain references to third-party game studios, payment providers, or informational resources. Any interaction you have with those third parties — including data you submit directly to them — is governed by their own privacy policies and terms of service, not by this Policy. api228 does not accept responsibility for the privacy practices of any third party, and we encourage you to review the privacy policies of all third-party services you use in connection with your api228 account.
api228 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made — for example, changes to how we share data with third parties or the introduction of new processing purposes — we will:
Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and request account closure before the effective date.
If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how we handle your Personal Data, please contact our Data Protection team through the following channels. All contact details are provided as plain text only:
If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in the jurisdiction in which api228 holds its operating licence, or to seek independent legal advice regarding your rights under applicable data protection law.
api228 takes every privacy inquiry seriously. We are committed to resolving data-related concerns transparently and promptly, in the spirit of building lasting trust with every player across Indonesia.
Our support team is available around the clock to answer any data-related questions. You can also review our Terms & Conditions or visit our FAQ for more information about how api228 operates.