Minimum Necessary Collection
api88 collects only the personal information that is genuinely needed to register accounts, process MYR transactions, prevent fraud and operate customer support.
Data protection & your rights
api88 Privacy Policy
This Privacy Policy explains exactly what personal information api88 collects from Malaysian members, how it is used, who it may be shared with, how it is kept secure, and the rights you hold over your own data.
About This Document
This Privacy Policy applies to all persons who register for, access or interact with api88. By creating an account or continuing to use the platform you confirm that you have read and understood how api88 handles your personal data. If you have questions or wish to exercise any data right, please contact support@api88.lat.
Privacy at a glance
Our Core Data Principles
Secure Storage
Account, identity and payment data is stored with appropriate technical and organisational controls. Access within api88 is limited to personnel who need it.
No Selling of Data
api88 does not sell, rent or trade personal data to third-party advertisers or data brokers. Sharing with providers is limited to what is necessary to operate the platform.
Member Rights
You may request access to your data, correction of inaccuracies, deletion where applicable or restriction of certain processing by contacting api88 support.
Defined Retention
Data is retained only for as long as it is needed for the stated purpose or required by applicable legal, regulatory or financial obligations, after which it is securely disposed of.
Transparent Updates
When this Privacy Policy changes in a material way, api88 will update the effective date and, where appropriate, notify affected members before the change takes effect.
Introduction
api88 operates the online gaming platform accessible at api88.lat. This Privacy Policy describes how api88 collects, uses, stores, shares and otherwise processes personal data provided by members and visitors. It applies to all interactions with the platform, including account registration, MYR deposits and withdrawals, gaming activity, support enquiries and marketing preferences.
api88 takes data protection seriously. Personal data is processed only for purposes that are necessary, proportionate and consistent with this Policy. Where api88 engages third-party service providers, they are required to handle data in a manner consistent with this Policy and applicable data protection standards.
This Policy should be read alongside the api88 Terms and Conditions, which govern the contractual relationship between api88 and each member. Where a conflict arises, the more specific provision shall apply in context.
Definitions
In this Privacy Policy, the following terms carry the meanings set out below:
- Personal Data
- Any information relating to an identified or identifiable natural person, including name, contact details, payment identifiers and device data.
- Processing
- Any operation performed on personal data, including collection, storage, use, transmission, amendment, retrieval and deletion.
- Member or You
- An eligible person who has registered an api88 account or who interacts with the platform as a visitor.
- Service Provider
- A third-party organisation engaged by api88 to assist in delivering platform functions under appropriate data protection obligations.
- MYR
- Malaysian Ringgit, the local currency used for account transactions on api88.
- Cookies
- Small text files placed on a device by a website to remember preferences, support analytics and maintain session state.
Data We Collect
api88 collects personal data through account registration, payment processing, platform activity and support interactions. The specific categories collected depend on how you use the platform.
3.1 Registration and Identity Data
When you create an api88 account, you provide your name, date of birth, email address, mobile number and, where required for verification, identification document details and proof of address. This information is used to confirm eligibility, operate the account and satisfy applicable identity and age verification requirements.
3.2 Financial and Payment Data
Deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank or cryptocurrency wallets generate transaction records including payment method identifiers, MYR amounts, timestamps and status. api88 does not store full card or bank-login credentials. Payment tokens or masked references may be retained for reconciliation and fraud prevention.
3.3 Activity and Usage Data
Gaming activity including wager history, sports market selections, settlement records, session durations, device type, browser, operating system, IP address and approximate location may be logged. This data supports account security, responsible gambling monitoring, fraud detection and platform improvement.
3.4 Communications Data
When you contact api88 support by live chat, email or messaging channel, the content of those communications is recorded. This helps api88 respond accurately, manage complaints and retain records of agreed actions.
3.5 Verification Documents
api88 may request copies of an identity document, proof of address or payment ownership confirmation. Submitted documents are reviewed to complete the verification process and retained in accordance with applicable regulatory obligations.
How We Use Your Data
The table below summarises the principal purposes for which api88 processes personal data:
| Purpose | Data Used | Why It Is Necessary |
|---|---|---|
| Account creation and management | Registration and identity data | Required to provide the gaming service and verify eligibility |
| Processing MYR deposits and withdrawals | Financial and payment data | Necessary to execute and record transactions |
| Identity and age verification (21+) | Identity documents, date of birth | Legal and operational obligation to confirm eligible membership |
| Fraud prevention and security | Activity, payment and device data | Protects members and the platform from unlawful conduct |
| Responsible gambling monitoring | Activity and usage data | Identifies potential signs of harmful play behaviour |
| Customer support | Communications and account data | Enables api88 to respond to and resolve enquiries |
| Service improvement and analytics | Aggregated usage data | Helps api88 improve platform performance and features |
| Legal and regulatory compliance | All relevant categories | Meeting applicable legal retention and reporting requirements |
Legal Bases for Processing
api88 processes personal data on one or more of the following bases:
- Contractual necessity: Processing is required to register your account, process transactions and provide gaming services under the api88 Terms and Conditions.
- Legal obligation: Certain processing — including identity verification, transaction records and security monitoring — may be required by applicable law or regulation.
- Legitimate interests: api88 processes data for fraud prevention, security, responsible gambling monitoring and service improvement, where such processing is proportionate and does not override your reasonable data privacy expectations.
- Consent: Where api88 requests consent for a specific processing activity, that activity will only proceed with a clear and freely given affirmation. Consent may be withdrawn, though withdrawal does not affect lawfulness of prior processing.
Sharing Personal Data
api88 does not sell personal data. Sharing is limited to the following categories of recipients, and only to the extent necessary for the stated purpose:
- Payment providers: Malaysian e-wallet operators, DuitNow, FPX-connected banks such as Maybank, CIMB, Public Bank and Hong Leong Bank, and cryptocurrency settlement providers receive the data necessary to process individual transactions.
- Identity and fraud verification services: Third-party providers that assist api88 in confirming document authenticity, age and identity.
- Technology and infrastructure providers: Hosting, monitoring and analytics providers that operate under confidentiality and data protection obligations aligned with this Policy.
- Legal and regulatory authorities: Applicable authorities may receive data where api88 is under a binding legal obligation to disclose. api88 will seek to disclose only the minimum information required.
- Professional advisers: Legal, audit and security professionals who are bound by confidentiality obligations in the course of advising api88.
api88 requires third-party service providers to implement appropriate data handling standards. api88 does not authorise service providers to use personal data for their own independent purposes.
Cookies and Tracking Technologies
api88 uses cookies and similar technologies to maintain session state, remember login preferences, collect aggregated usage analytics and detect security anomalies. The primary categories are:
- Strictly necessary cookies: Required for the platform to function correctly. These cannot be disabled without affecting core functionality such as secure login and payment initiation.
- Functional cookies: Remember language preferences, display settings and voluntary configurations between sessions.
- Analytics cookies: Aggregate usage data — such as page frequency and session duration — to help api88 understand how the platform is used and where improvements may benefit members.
- Security cookies: Support fraud detection and login monitoring without identifying individual members by name.
Most modern browsers allow you to review, block or delete cookies through settings. Disabling strictly necessary cookies may impair or prevent access to certain api88 functions.
Data Retention
api88 retains personal data for as long as required for the purposes described in this Policy, including account operation, transaction records, regulatory compliance, fraud prevention and dispute resolution. Specific retention periods depend on the nature of the data and applicable legal obligations.
Identity verification documents and transaction records associated with financial activity may be required by applicable law to be kept for a defined period after account closure. Once the retention period expires, data is securely deleted or anonymised in a manner that prevents re-identification.
Activity data related to responsible gambling monitoring may be retained to fulfil api88's obligations to identify and act on harmful patterns, even after an account closure request. Member contact preferences and support communication records may be retained to manage any ongoing complaints or enquiries.
Your Rights Over Your Personal Data
Depending on applicable data protection law, you may hold one or more of the following rights in relation to personal data that api88 holds about you:
- Right of Access
- Request a copy of personal data api88 holds about you, along with information on how it is used.
- Right of Rectification
- Ask api88 to correct inaccurate or incomplete personal information held in your account or records.
- Right to Erasure
- Request deletion of personal data where it is no longer necessary for the purpose it was collected and no legal obligation requires retention.
- Right to Restrict Processing
- Ask api88 to pause certain processing activities while a complaint or accuracy query is under review.
- Right to Data Portability
- Request personal data you provided to api88 in a structured, commonly used machine-readable format where technically feasible.
- Right to Object
- Object to processing based on legitimate interests, including direct marketing, where your individual circumstances warrant it.
- Withdraw Consent
- Where api88 relies on consent, withdraw it at any time. This does not affect the lawfulness of prior consent-based processing.
- Lodge a Complaint
- Raise a concern with the appropriate data protection authority in your jurisdiction if you believe api88 has processed your data unlawfully.
To exercise any of these rights, contact api88 support at support@api88.lat. Please include your account identifier and a clear description of the request. api88 will respond within a reasonable timeframe and may need to verify your identity before disclosing or modifying personal data.
Security Measures
api88 implements appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, loss or destruction. These include access controls, encryption of sensitive data in transit, system monitoring and defined internal data handling procedures.
No method of electronic transmission or storage is completely infallible. Members are also responsible for maintaining the security of their own devices, keeping credentials confidential and notifying api88 promptly if they suspect unauthorised account activity. Members should not share login details with any other person, including family members.
In the event of a security incident that materially affects personal data, api88 will take reasonable steps to contain the incident, investigate its scope and notify affected members or relevant authorities in accordance with applicable obligations.
Minors and Age Restrictions
api88 does not knowingly collect personal data from persons under 21 years of age. Participation in any api88 gaming activity is restricted to adults aged 21 and above. If api88 determines that data belonging to an underage person has been collected without awareness, the relevant account will be closed and associated data removed in accordance with applicable obligations.
Account holders are responsible for ensuring that personal devices and login credentials are not accessible to underage persons. If you believe an underage person has registered or accessed an api88 account, please notify api88 support without delay.
Changes to This Privacy Policy
api88 may update this Privacy Policy to reflect changes in how data is processed, services are delivered, or applicable legal requirements. The effective date at the top of the Policy will be updated with each revision. Material changes that affect member rights in a significant way will be communicated to registered members before they take effect, where practicable.
Continued use of api88 after a revised Policy takes effect constitutes acceptance of the updated terms. If you disagree with material changes, you may close your account and request deletion of your personal data to the extent permitted by applicable retention obligations.
Contact Us
For questions about this Privacy Policy, to exercise a data right or to raise a privacy concern regarding api88, please contact the support team. The api88 contact email is support@api88.lat. This address is for written enquiries only — please do not transmit sensitive documents such as identity copies through unencrypted email unless api88 support has confirmed a secure channel.
Enquiries will be acknowledged promptly and responded to within a reasonable period. For complex data access or deletion requests, api88 may need to verify your identity before processing the request. If you remain unsatisfied after raising a concern with api88, you retain the right to contact the applicable data protection supervisory authority in your jurisdiction.
Continue with confidence
Your Privacy Is Taken Seriously at api88
Return to the homepage to explore api88, or review our Terms and Conditions and Responsible Gambling page for a complete picture of how we operate. Participation is open to adults aged 21 and above only.