Privacy Policy

1. Introduction

api66 ("we", "us", "our", "the Company") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our online betting platform at https://api66.cam, including any associated mobile applications, services, and features (collectively, "the Platform").

This Privacy Policy applies to all users ("you", "your", "User", "Player") who access or use api66 services. By creating an account, accessing our website, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

If you do not agree with the practices described in this Privacy Policy, please do not use api66. We encourage you to read this Privacy Policy carefully and review it periodically for any updates.

2. Data Controller

For the purposes of applicable data protection laws, the data controller responsible for your personal information is:

api66
Email: [email protected]
Website: https://api66.cam

The data controller determines the purposes and means of processing personal data. If you have any questions, concerns, or requests regarding your personal information, please contact us using the details provided in Section 11 of this Privacy Policy.

3. Information We Collect

We collect various types of information to provide, maintain, and improve our services, ensure platform security, comply with legal obligations, and enhance your user experience. The categories of information we collect include:

3.1 Information You Provide Directly

When you register an account or use our services, you voluntarily provide us with personal information, including but not limited to:

• Registration Information: Full legal name, date of birth, email address, mobile phone number, residential address, username, password, and preferred currency (Indonesian Rupiah / IDR).
• Identity Verification (KYC) Information: Government-issued identification documents (Indonesian KTP, passport, driver's license), proof of address documents (utility bills, bank statements, government correspondence), payment method verification documents, and biometric data (selfie photographs for facial verification).
• Financial Information: Bank account details (account holder name, account number, bank name, branch information), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja account information), payment card details (if applicable), transaction history, deposit and withdrawal records.
• Communication Information: Content of customer support inquiries, live chat conversations, email correspondence, feedback submissions, and any other communications you send to us.
• Marketing Preferences: Your consent status for receiving promotional communications, newsletter subscriptions, and bonus offers.

3.2 Information We Collect Automatically

When you access or use api66, we automatically collect certain technical and usage information through cookies, server logs, and similar technologies:

• Device Information: Device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, device identifiers (IMEI, advertising ID).
• Usage Information: Pages visited, features used, time spent on the Platform, navigation paths, clickstream data, games played, bets placed, search queries, and interaction patterns.
• Technical Information: IP address, geographic location (country, city, region based on IP geolocation), internet service provider, referring/exit pages, date and time stamps of access, and cookie identifiers.
• Transaction Data: Betting history, game outcomes, bonus claims, wagering activity, win/loss records, and account balance changes.

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment method validation, and fraud detection data from banks, e-wallet providers, and payment gateways.
• Identity Verification Providers: Document authentication results, age verification confirmations, and fraud prevention data from KYC service providers.
• Marketing Partners: Referral sources, affiliate tracking data, and campaign performance metrics (with your consent where required).
• Public Databases: Information from publicly available sources to verify identity and comply with anti-money laundering regulations.

4. How We Use Your Information

We use the collected information for the following purposes, based on legitimate business interests, contractual necessity, legal compliance, and your consent (where required):

4.1 Account Management and Service Provision

• Create, maintain, and manage your account on api66;
• Process registrations, logins, and authenticate your identity;
• Enable you to place bets, play games, and access platform features;
• Process deposits, withdrawals, and other financial transactions;
• Apply bonuses, promotions, and loyalty rewards to your account;
• Provide customer support and respond to your inquiries.

4.2 Compliance and Legal Obligations

• Verify your age (21+ requirement) and identity to prevent underage gambling;
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations;
• Detect and prevent fraud, money laundering, and other illegal activities;
• Enforce our Terms and Conditions and Responsible Gaming policies;
• Respond to legal requests from law enforcement, regulators, and courts;
• Maintain records required by gaming licenses and regulatory bodies.

4.3 Platform Security and Risk Management

• Monitor for suspicious account activity, unauthorized access attempts, and security breaches;
• Detect and prevent multi-accounting, bonus abuse, and collusion;
• Protect against technical vulnerabilities, malware, and cyberattacks;
• Conduct risk assessments and implement fraud prevention measures;
• Investigate disputes, complaints, and potential Terms violations.

4.4 Service Improvement and Personalization

• Analyze user behavior and preferences to enhance platform functionality;
• Personalize your experience with tailored game recommendations and content;
• Conduct internal research, analytics, and performance testing;
• Develop new features, products, and services based on user feedback;
• Optimize website performance, speed, and mobile compatibility.

4.5 Marketing and Communications (with Consent)

• Send promotional offers, bonus notifications, and personalized marketing messages (email, SMS, push notifications) where you have provided consent;
• Deliver newsletters, game announcements, and platform updates;
• Conduct surveys, polls, and request feedback on our services;
• Inform you about changes to policies, terms, and important account notices.

You can opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account notification settings, or contacting customer support.

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with trusted third parties in the following circumstances:

5.1 Service Providers and Business Partners

We engage third-party service providers to perform functions on our behalf, including:

• Payment Processors: Banks, e-wallet providers, and payment gateways (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) to process deposits and withdrawals;
• Identity Verification Providers: KYC/AML compliance service providers to verify your identity and age;
• Game Providers: Third-party software developers and live casino studios that supply games and betting markets;
• Customer Support Services: Live chat platforms and communication tools used to assist you;
• Marketing and Analytics Partners: Email marketing platforms, analytics services (e.g., Google Analytics), and advertising networks (where you have consented);
• Cloud Storage and Hosting Providers: Secure servers and data storage infrastructure providers;
• Security and Fraud Prevention Services: Cybersecurity firms and fraud detection platforms.

All third-party service providers are contractually obligated to handle your personal information securely, use it only for the specified purposes, and comply with applicable data protection laws.

5.2 Legal and Regulatory Compliance

We may disclose your information to regulatory authorities, law enforcement agencies, courts, and government bodies when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory investigations;
• Protect our rights, property, safety, or the rights and safety of our users;
• Detect, prevent, or address fraud, money laundering, security breaches, or illegal activity;
• Enforce our Terms and Conditions and resolve disputes.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and/or prominent notice on our website of any such change in ownership or control of your personal information.

5.4 With Your Consent

We may share your information with third parties for purposes not covered in this Privacy Policy if we obtain your explicit consent before doing so.

6. Data Security

api66 takes data security seriously and implements industry-standard technical, administrative, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All sensitive data transmitted between your device and our servers is protected using 256-bit SSL (Secure Socket Layer) encryption, the same technology used by banks and financial institutions;
• Secure Storage: Personal information is stored on secure servers with access controls, firewalls, and intrusion detection systems;
• Access Controls: Only authorized personnel with a legitimate business need can access your personal information. All staff undergo confidentiality training;
• Authentication: Strong password requirements, account lockout mechanisms after failed login attempts, and optional two-factor authentication (2FA);
• Regular Security Audits: Periodic vulnerability assessments, penetration testing, and security reviews by independent experts;
• Data Minimization: We collect and retain only the minimum amount of personal information necessary for our stated purposes.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect any unauthorized access to your account.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention Periods

• Active Accounts: Information is retained for the duration of your account's active status and usage of our services;
• Closed Accounts: Following voluntary account closure, we retain certain information for up to 7 years to comply with financial record-keeping requirements, anti-money laundering regulations, and tax laws;
• Transaction Records: Financial transaction data is retained for 7 years as required by Indonesian accounting and tax regulations;
• Marketing Data: If you unsubscribe from marketing communications, we retain minimal information to ensure we do not contact you again;
• Legal Holds: Information subject to ongoing legal proceedings, regulatory investigations, or disputes is retained until the matter is resolved.

After the applicable retention period expires, personal information is securely deleted or anonymized so that it can no longer identify you.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you, including details about how it is used and shared;
• Right to Rectification: You can request correction of inaccurate or incomplete personal information;
• Right to Erasure: You can request deletion of your personal information in certain circumstances (e.g., when it is no longer necessary for the purposes collected, or if you withdraw consent). Note that legal retention obligations may prevent immediate deletion;
• Right to Restrict Processing: You can request that we limit how we use your personal information under certain conditions;
• Right to Data Portability: You can request a copy of your personal information in a structured, machine-readable format and have it transferred to another service provider where technically feasible;
• Right to Object: You can object to processing of your personal information based on legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days and may require identity verification to protect your information from unauthorized access. Please note that certain rights may not apply in all circumstances or jurisdictions.

9. Cookies and Tracking Technologies

api66 uses cookies and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content. A cookie is a small text file stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly. These enable core features like login authentication, secure connections, and session management. You cannot opt out of essential cookies;
• Performance Cookies: Collect anonymous information about how visitors use our Platform, such as which pages are most popular and error messages. This helps us improve website performance;
• Functional Cookies: Remember your preferences (language, currency, username) and personalize your experience;
• Marketing and Analytics Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. These require your consent.

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can delete existing cookies, block new cookies, or receive warnings before cookies are set. However, disabling certain cookies may limit your ability to use some features of api66. For more information on managing cookies, visit your browser's help documentation.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make significant changes, we will notify you by:

• Posting a prominent notice on our website with the updated effective date;
• Sending an email notification to the address associated with your account;
• Displaying an in-app notification upon your next login.

Your continued use of api66 after the updated Privacy Policy becomes effective constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your information.

11. Contact Information

If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or our data protection practices, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on our website
• Support Hours: 24/7 (Western Indonesia Time / WIB, UTC+7)

We are committed to resolving your privacy concerns promptly and transparently. We will acknowledge receipt of your inquiry within 24 hours and provide a substantive response within 30 days.