Privacy Policy

This Privacy Policy ("Policy") is published by apigacor88 ("the Platform", "we", "us", or "our") and applies to all users ("you", "your", or "User") who access or use the services available at apigacor88.buzz, including our online casino, sports betting, live casino, and associated gaming services.

apigacor88 is committed to protecting the privacy and personal data of all its Users, with particular regard to the expectations of Malaysian users under applicable data protection principles, including those aligned with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect and process personal data only to the extent necessary to deliver our services, comply with legal obligations, and maintain the security and integrity of our platform.

By registering an Account on apigacor88, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue your use of the Platform and contact our support team at [email protected] to have your Account closed.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that relates to an identified or identifiable individual, including name, identification number, contact information, financial data, and online identifiers.
• "Data Controller" means apigacor88, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party organisation or service provider that processes personal data on behalf of apigacor88, under contractual instruction.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, modification, or deletion.
• "Consent" means freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their personal data for a stated purpose.
• "KYC" means Know Your Customer procedures, being the identity and age verification processes mandated for regulated gaming platforms.
• "Sensitive Personal Data" means a subcategory of personal data afforded heightened protection, including financial account details, identity document data, and information relating to health or gambling behaviour.
• "PDPA" means Malaysia's Personal Data Protection Act 2010 and its associated regulations and guidelines as amended from time to time.

apigacor88 collects the minimum amount of personal data necessary to deliver, secure, and improve our services. The categories of data we collect are set out in the table below:

We do not collect special categories of sensitive personal data beyond what is necessary for regulatory compliance — specifically, we do not collect religious beliefs, political opinions, biometric data, or medical records. Gambling-related behaviour data is treated as sensitive and handled under heightened security protocols.

apigacor88 collects personal data through the following channels:

Data you provide directly when you register an Account, complete KYC verification, make a deposit or withdrawal request, contact our support team, submit feedback, or participate in a promotion. This includes all information entered into online forms, chat interfaces, or email correspondence.

Technical and usage data collected automatically when you access or interact with the Platform, including via browser cookies, session tokens, server logs, and analytics tools embedded in the Platform. This data is collected passively and does not require any active action on your part.

In limited circumstances, we may receive personal data about you from third-party sources, including: payment service providers (for transaction verification and fraud checks), identity verification services (for KYC processing), and publicly available sources (for sanctions screening and anti-money laundering checks). All third-party data sources used by apigacor88 are subject to contractual data protection obligations.

apigacor88 processes your personal data for the following primary purposes:

To create and maintain your Account, process deposits and withdrawals in MYR via your chosen payment method (Maybank, CIMB, DuitNow, Touch 'n Go eWallet, FPX, etc.), settle bets and gaming transactions, deliver customer support, and provide access to all gaming categories available on the Platform.

To verify your identity, confirm your age (21+), and fulfil obligations under applicable anti-money laundering (AML) regulations, including customer due diligence and enhanced due diligence procedures where required. This processing is mandatory and cannot be opted out of while you hold an active Account.

To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, multi-accounting, money laundering, and other security threats to the Platform and its Users. This includes automated monitoring of transaction patterns and gameplay behaviour.

To monitor gambling behaviour indicators, identify Users who may be exhibiting signs of problem gambling, and proactively apply responsible gambling safeguards. This processing is carried out in the interest of player welfare and is treated with the highest level of sensitivity and confidentiality. Details of our responsible gambling tools are available on our Responsible Gambling page.

To send you personalised promotional communications, bonus offers, and news about apigacor88 — but only if you have provided explicit consent to receive such communications. You may withdraw this consent at any time by updating your communication preferences in your Account settings or by contacting our support team.

To analyse aggregated, anonymised usage data to improve Platform performance, user experience, game selection, and customer support quality. This analysis is conducted using pseudonymised or fully anonymised data where possible.

apigacor88 processes personal data on the following legal bases, in alignment with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contractual Necessity: Processing required to fulfil your Account agreement with apigacor88, including account management, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including AML requirements, KYC obligations, tax reporting duties, and gaming regulatory requirements.
• Legitimate Interests: Processing carried out for purposes that serve the legitimate business interests of apigacor88, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit, freely given consent — primarily for direct marketing communications. You may withdraw consent at any time without detriment to your Account status.

apigacor88 does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only with parties who are contractually required to handle it in accordance with applicable data protection standards:

• Payment Service Providers: Financial institutions and payment processors through which your deposits and withdrawals are processed (e.g., Maybank, CIMB, Public Bank, Hong Leong, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX). These providers receive only the data necessary to process your specific transaction.
• Identity Verification Services: Third-party KYC providers engaged to verify identity documents, confirm age, and screen against sanctions lists as required under AML regulations.
• IT Infrastructure Providers: Cloud hosting, database management, and platform security providers who process data solely as data processors under the instruction of apigacor88 and under binding data processing agreements.
• Regulatory Authorities: Malaysian and international regulatory bodies, law enforcement agencies, and financial intelligence units to the extent required by law or legal process, including court orders and statutory investigations.
• Fraud Prevention Networks: Shared fraud intelligence databases used to identify and block fraudulent account activity, accessed and contributed to in accordance with applicable data sharing agreements.

All third-party data processors engaged by apigacor88 are subject to written data processing agreements that require them to implement appropriate security measures, process data only for authorised purposes, and comply with applicable data protection law.

apigacor88 uses cookies and similar tracking technologies to operate core Platform functions, improve user experience, and analyse usage patterns. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cookies cannot be disabled without affecting your ability to use the Platform.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and recently viewed games to enhance your experience. These are enabled by default but can be adjusted in your browser settings.
• Analytics Cookies: Collect anonymised data about how Users navigate the Platform — pages visited, time spent, features used — to help us identify and address usability issues. This data is aggregated and does not personally identify you.
• Session Cookies: Temporary cookies that expire when you close your browser session, used to maintain your logged-in state and preserve your active game session.

You may manage cookie preferences through your browser's privacy settings. Please note that disabling certain cookies may limit your access to Platform features. apigacor88 does not use third-party advertising cookies or permit external advertising networks to place tracking cookies on our Platform.

apigacor88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our standard data retention periods are as follows:

• Active Account Data: Retained for the duration of your Account registration and for a minimum of five (5) years following Account closure, in accordance with AML and financial record-keeping requirements.
• Transaction Records: Retained for a minimum of seven (7) years to satisfy financial reporting, tax compliance, and AML audit obligations.
• KYC Documentation: Retained for the duration of your Account plus a minimum of five (5) years following Account closure.
• Support & Communication Records: Retained for a maximum of three (3) years from the date of the communication, or longer where the communication relates to an ongoing dispute or regulatory matter.
• Marketing Consent Records: Retained until consent is withdrawn, plus a short administrative period to process the withdrawal.

Following the expiry of applicable retention periods, personal data will be securely deleted or irreversibly anonymised. Data retained beyond minimum periods for legitimate business purposes will be subject to an internal periodic review and justification process.

apigacor88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and the Platform is protected using 256-bit SSL/TLS encryption. Data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorised apigacor88 personnel who require it to perform their duties. Role-based access controls and multi-factor authentication are enforced for all staff systems.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services. Regular penetration testing is conducted by independent security auditors.
• Two-Factor Authentication (2FA): All registered Users are encouraged to enable 2FA on their apigacor88 Account as an additional layer of protection against unauthorised access.
• Incident Response: apigacor88 maintains a formal data breach response procedure. In the event of a confirmed data breach that poses a risk to your rights, we will notify affected Users and relevant regulatory authorities within the timeframes required by applicable law.

While we take all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and notifying us immediately if you suspect any unauthorised use of your Account.

As a User of apigacor88, you hold the following rights in respect of your personal data held by the Platform. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data we hold about you, along with information on how it is being used and with whom it has been shared.
• Right of Rectification: You have the right to request the correction of any inaccurate or incomplete personal data held in your Account.
• Right of Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations (e.g., AML record-keeping requirements that may prevent immediate deletion).
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, subject to apigacor88's right to demonstrate compelling grounds.
• Right to Data Portability: Where processing is based on your consent or a contractual necessity, you may request a machine-readable copy of the personal data you have provided to us, for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

apigacor88 operates a strict 21+ minimum age policy. The Platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. Age verification is a mandatory step in the Account registration process, and apigacor88 reserves the right to request government-issued identity documents (such as a Malaysian MyKad or passport) to confirm a User's age at any point.

Where apigacor88 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant Account, delete the associated personal data where legally permissible, and refund any outstanding withdrawable balance to the verified payment source used for deposits.

If you are a parent or guardian and believe that your child may have registered an Account with apigacor88, please contact us immediately at [email protected] so we can investigate and take appropriate action without delay.

In the course of operating the Platform, your personal data may be processed by apigacor88's service providers and partners in jurisdictions outside Malaysia. Where such cross-border transfers occur, apigacor88 ensures that adequate safeguards are in place to protect your data, including:

• Transfer only to jurisdictions recognised as providing an adequate level of data protection;
• Implementation of contractual data transfer agreements with all international data processors, incorporating standard data protection clauses;
• Regular assessment of the data protection standards applicable in recipient jurisdictions.

We do not transfer personal data to jurisdictions that do not offer adequate protections without first implementing appropriate contractual safeguards. Details of the safeguards applicable to specific cross-border transfers are available upon request by contacting [email protected].

apigacor88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered Users via email notification or a prominent notice on the Platform, with a minimum of fourteen (14) days' advance notice prior to the effective date.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated Policy. We encourage you to review this page periodically to stay informed of any changes. The current version of this Privacy Policy is always accessible at apigacor88.buzz/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by apigacor88, please contact our Data Protection team through the following channels:

We are committed to resolving all data protection queries promptly and transparently. If you are dissatisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in Malaysia or your country of residence.