1. Introduction
apo338 ("we", "us", "our") operates the online betting platform accessible at https://apo338.cam and is committed to protecting the privacy and security of our users' personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding your personal information.
By registering for an account or using apo338 services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this policy, please do not use our services.
This Privacy Policy applies to all users of apo338 services, including Indonesian residents accessing our platform for sports betting, live casino games, slots, and related entertainment services. It covers data collected through our website, mobile-optimized platform, and any communication channels we operate including email, Live Chat, and WhatsApp customer support.
apo338 collects several categories of personal information necessary to provide our services, verify your identity, process transactions, and comply with legal obligations including anti-money laundering and responsible gaming requirements.
2.1 Information You Provide Directly
When you register for an account with apo338, you provide the following information:
- Identity Information: Full legal name (as it appears on your Indonesian KTP national identification card), date of birth, gender, nationality, and place of birth
- Contact Information: Residential address, email address, and mobile phone number
- Account Credentials: Username and password (stored in encrypted format)
- Financial Information: Bank account details (account number, account holder name, bank name) or e-wallet information (OVO, DANA, GoPay, ShopeePay account identifiers) for processing deposits and withdrawals
- Verification Documents: Copies of your Indonesian national ID (KTP), proof of address (utility bills, bank statements), and selfie photographs for Know Your Customer (KYC) verification
- Communication Content: Messages you send through our customer support channels including Live Chat, email, and WhatsApp
2.2 Information We Collect Automatically
When you use apo338 services, we automatically collect certain technical and behavioral information:
- Device Information: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and device identifiers
- Usage Data: Pages visited, features used, time spent on platform, betting patterns, game selections, deposit and withdrawal history, and clickstream data
- Location Data: Geographic location derived from your IP address to verify you are accessing services from within Indonesian territory as required by our terms of service
- Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar technologies to maintain login sessions, remember preferences, and analyze platform usage (see Section 6 for details)
- Transaction Records: Complete history of deposits, withdrawals, bets placed, bet outcomes, bonus activations, and account balance changes for financial reconciliation and fraud prevention
2.3 Information From Third Parties
We may receive information about you from:
- Payment Processors: Confirmation of successful deposits or withdrawals from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers
- Identity Verification Services: Third-party services that verify the authenticity of identity documents you submit during KYC procedures
- Fraud Prevention Partners: Information from specialized services that help us detect suspicious activity, prevent account takeovers, and identify potential money laundering
3. How We Use Your Data
apo338 processes your personal information for the following legitimate purposes:
3.1 Service Provision and Account Management
- Creating and maintaining your account
- Processing deposits, withdrawals, and gaming transactions in Indonesian Rupiah (IDR)
- Providing access to sports betting, live casino, slots, and other gaming products
- Calculating and crediting bonuses, cashback, and promotional rewards
- Processing customer support requests and resolving disputes
- Communicating important account notifications, transaction confirmations, and service updates
3.2 Verification and Compliance
- Verifying your identity and age (21+ requirement) through KYC procedures
- Confirming you are a resident of Indonesia as required by our terms of service
- Preventing underage gambling, identity fraud, and account duplication
- Complying with anti-money laundering (AML) and counter-terrorist financing (CTF) obligations
- Meeting regulatory requirements imposed by our international gaming licenses
- Responding to legal requests from law enforcement or judicial authorities
3.3 Security and Fraud Prevention
- Detecting and preventing fraudulent transactions, bonus abuse, and collusion
- Monitoring for suspicious betting patterns that may indicate match-fixing or insider information
- Protecting against unauthorized account access, phishing attempts, and cyber attacks
- Enforcing our Terms & Conditions and maintaining platform integrity
- Investigating reports of Terms violations or suspected criminal activity
3.4 Responsible Gaming
- Monitoring betting behavior to identify potential problem gambling patterns
- Implementing deposit limits, session time limits, and self-exclusion tools you configure
- Providing responsible gaming resources and support when problematic gambling is detected
- Enforcing cooling-off periods and permanent self-exclusion commitments
3.5 Marketing and Personalization
- Sending promotional emails about bonuses, tournaments, and special offers relevant to Indonesian players
- Customizing platform experience based on your gaming preferences (sports vs. casino vs. slots)
- Recommending games or betting markets based on your historical activity
- Measuring effectiveness of marketing campaigns and improving promotional strategies
Note: You may opt out of marketing communications at any time by clicking "unsubscribe" in any promotional email or adjusting your communication preferences in account settings.
3.6 Platform Improvement and Analytics
- Analyzing platform usage patterns to identify popular features and pain points
- Optimizing website performance, load times, and mobile responsiveness for Indonesian networks
- Testing new features and game integrations before full release
- Generating aggregated, anonymized statistics about user behavior for business intelligence
Legal Basis for Processing
We process your personal data based on: (1) contractual necessity to provide services you requested, (2) legal obligations including AML/KYC compliance, (3) legitimate business interests in fraud prevention and service improvement, and (4) your explicit consent for marketing communications.
4. Data Sharing and Disclosure
apo338 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality obligations:
4.1 Service Providers and Business Partners
- Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process your deposits and withdrawals
- Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Playtech, Ezugi, and other software developers whose games you play (they receive minimal data necessary for game operation)
- Identity Verification Services: Third-party KYC specialists who verify the authenticity of identity documents you submit
- Cloud Hosting Providers: Secure server infrastructure providers who store encrypted data on our behalf
- Customer Support Tools: Live Chat platform providers and email service providers used for customer communication
- Analytics Providers: Services that help us understand platform usage through aggregated, anonymized data
4.2 Legal and Regulatory Authorities
We may disclose your information to government authorities, law enforcement agencies, or courts when:
- Required by applicable law, regulation, or legal process (court order, subpoena, warrant)
- Necessary to comply with gaming license obligations or regulatory investigations
- Needed to cooperate with anti-money laundering investigations by Indonesian financial authorities
- Required to protect our legal rights, property, or safety, or those of other users
- Requested in connection with suspected criminal activity including fraud, match-fixing, or identity theft
4.3 Business Transfers
In the event of a merger, acquisition, sale of assets, or bankruptcy involving apo338, your personal information may be transferred to the acquiring entity. You will be notified via email and prominent website notice before any such transfer, and the new entity will be bound by this Privacy Policy.
4.4 With Your Consent
We may share your information with additional third parties if you provide explicit consent for specific purposes not covered in this policy.
5. Data Security Measures
apo338 implements industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:
5.1 Technical Safeguards
- Encryption: 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
- Secure Storage: Personal data stored on encrypted servers in secure data centers with restricted physical access
- Password Protection: Account passwords hashed using industry-standard algorithms (bcrypt or similar) – we cannot view your plaintext password
- Firewall Protection: Network-level firewalls and intrusion detection systems monitor for suspicious activity
- Regular Security Audits: Third-party penetration testing and vulnerability assessments conducted quarterly
5.2 Organizational Safeguards
- Access Controls: Personal data accessible only to authorized employees who require it for job functions
- Staff Training: All employees receive data protection and security awareness training
- Confidentiality Agreements: Employees and contractors sign strict non-disclosure agreements
- Incident Response Plan: Documented procedures for responding to data breaches or security incidents
5.3 Your Security Responsibilities
While we implement robust security measures, you also play a crucial role in protecting your account:
- Choose a strong, unique password and never share it with anyone
- Log out completely after each session, especially on shared or public devices
- Enable two-factor authentication (2FA) if available in your account settings
- Avoid accessing your account from public Wi-Fi networks or unsecured internet connections
- Be vigilant against phishing emails – apo338 will never request your password via email
- Report suspicious activity or unauthorized access immediately to our customer support team
Data Breach Notification
In the unlikely event of a data breach affecting your personal information, we will notify you via email within 72 hours and provide detailed information about the breach, affected data, and steps you should take to protect yourself.
6. Cookies and Tracking Technologies
apo338 uses cookies and similar tracking technologies to enhance your experience, maintain login sessions, and analyze platform usage.
6.1 What Are Cookies?
Cookies are small text files stored on your device by your web browser. They contain information that can be read by web servers to remember your preferences, maintain login status, and track your interactions with the website.
6.2 Types of Cookies We Use
- Essential Cookies: Required for basic platform functionality including login sessions, shopping cart management, and security features. These cannot be disabled without breaking core functionality.
- Performance Cookies: Collect anonymous data about how visitors use the website (pages visited, time spent, error messages encountered) to help us improve performance and user experience.
- Functionality Cookies: Remember your preferences such as language selection, preferred odds format, and favorite games to personalize your experience.
- Marketing Cookies: Track your visits across websites to build a profile of your interests and show you relevant promotional content. These are used only with your consent.
6.3 Managing Cookie Preferences
Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling essential cookies may prevent you from using key platform features. To manage cookies:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Options → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions → Manage and delete cookies
7. Your Privacy Rights
You have the following rights regarding your personal information held by apo338:
7.1 Right to Access
You may request a copy of all personal data we hold about you, including your account information, transaction history, and verification documents. We will provide this information in a commonly used electronic format within 30 days of your request.
7.2 Right to Rectification
You may update or correct inaccurate personal information directly through your account settings or by contacting customer support. We will verify your identity before processing correction requests.
7.3 Right to Erasure ("Right to Be Forgotten")
You may request deletion of your personal data under certain circumstances. However, we may retain information when required by law (e.g., financial transaction records must be retained for 7 years for tax purposes) or when necessary to defend legal claims.
7.4 Right to Restrict Processing
You may request that we limit how we use your data, for example, if you contest the accuracy of your personal information or object to our processing activities.
7.5 Right to Data Portability
You have the right to receive your personal data in a structured, machine-readable format and transmit it to another service provider.
7.6 Right to Object
You may object to processing of your personal data for direct marketing purposes at any time by clicking "unsubscribe" in promotional emails or contacting customer support. You may also object to processing based on legitimate interests by explaining your specific situation.
7.7 Right to Withdraw Consent
Where we rely on your consent to process personal data (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
7.8 Exercising Your Rights
To exercise any of these rights, please contact our Data Protection Officer at [email protected] or through customer support channels. We will respond within 30 days and verify your identity before processing requests.
8. Data Retention
apo338 retains your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law:
- Active Accounts: Data retained while your account remains active and for the duration necessary to provide services
- Closed Accounts: After voluntary account closure, most data is deleted within 90 days, except for records required by law
- Financial Records: Transaction history and payment information retained for 7 years to comply with Indonesian tax and accounting regulations
- KYC Documents: Identity verification documents retained for 5 years after account closure as required by anti-money laundering regulations
- Self-Excluded Users: Minimal data retained to enforce self-exclusion commitments and prevent re-registration
- Legal Obligations: Data may be retained longer if required by law, regulatory directive, or pending legal proceedings
9. Children's Privacy
apo338 services are strictly restricted to adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process includes age verification, and we implement KYC procedures to confirm users meet minimum age requirements.
If we discover that we have inadvertently collected information from someone under 21, we will immediately delete that information, close the account, void all wagers, and confiscate any remaining balance. Parents or guardians who believe their child has provided information to apo338 should contact us immediately at [email protected].
We encourage parents and guardians to monitor their children's internet usage and use parental control software to block access to gambling websites.
10. International Data Transfers
apo338 operates internationally and may transfer your personal data to servers located outside Indonesia, including in jurisdictions that may not provide the same level of data protection as Indonesian law. When we transfer data internationally, we implement appropriate safeguards including:
- Using data centers that comply with international security certifications (ISO 27001, SOC 2)
- Implementing standard contractual clauses approved by data protection authorities
- Ensuring all service providers maintain equivalent data protection standards through contractual obligations
- Encrypting data during transmission and storage regardless of server location
By using apo338 services, you consent to the transfer of your information to countries outside Indonesia for the purposes described in this Privacy Policy.
11. Changes to This Privacy Policy
apo338 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. The "Last Updated" date at the top of this policy indicates when the most recent changes were made.
Material changes to this Privacy Policy will be communicated through:
- Email notification to your registered email address
- Prominent notice on the apo338 website homepage
- In-account notification upon your next login
Your continued use of apo338 services after notification of changes constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you may close your account by contacting customer support.
For questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us through the following channels:
We aim to respond to all privacy-related inquiries within 30 days. For urgent security concerns or suspected data breaches, please mark your communication as "URGENT" and we will prioritize your request.
Acknowledgment: By continuing to use apo338 services, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. This policy is incorporated into and forms part of our Terms & Conditions.