Privacy Policy – ap8my

1. Introduction & Scope

This Privacy Policy ("Policy") is issued by ap8my ("ap8my", "we", "us", "our"), the operator of the online gambling platform accessible at ap8my.app and any associated sub-domains or mobile interfaces (collectively, the "Platform"). This Policy applies to all personal data processed by ap8my in connection with the operation of the Platform and the services offered thereon.

This Policy should be read alongside ap8my's Terms & Conditions and Responsible Gaming Policy. Terms used but not defined in this Policy have the meanings assigned to them in ap8my's Terms & Conditions.

ap8my is committed to handling the personal data of its members and website visitors with transparency, care, and in accordance with applicable data protection laws. We process personal data only for the purposes described in this Policy and only to the extent necessary for those purposes.

2. Data We Collect

ap8my collects the following categories of personal data from members and platform visitors:

2.1 Identity Data — Full legal name, date of birth, gender, nationality, and government-issued identification document details (collected during KYC verification for applicable accounts).

2.2 Contact Data — Malaysian mobile telephone number (used as your ap8my account identifier), and any email address you voluntarily provide when contacting support.

2.3 Financial Data — Payment method details linked to your ap8my account (e.g., registered Touch n Go eWallet account reference, Boost account reference, bank account or online banking identifier, or cryptocurrency wallet address for USDT TRC20 transactions). ap8my does not store full bank card numbers; payment instrument data is tokenised by the relevant payment processor.

2.4 Transaction Data — Records of all deposits, withdrawals, bonus credits, and bet settlements processed through your ap8my account, including amounts in Malaysian Ringgit (MYR) and timestamps.

2.5 Gameplay Data — Records of bets placed, games played, wagering history, session durations, and responsible gaming tool usage (deposit limits, self-exclusion periods, etc.).

2.6 Technical Data — IP address, device type and model, operating system, browser type and version, screen resolution, time zone, and other technical identifiers collected automatically when you access the Platform.

2.7 Usage Data — Information about how you navigate and interact with the Platform, including pages viewed, time spent on pages, clickstream data, and referral sources.

2.8 Communications Data — Records of your communications with ap8my's customer support team, including live chat transcripts and support ticket history.

3. How We Collect Data

ap8my collects personal data through the following channels:

• Direct interactions — data you provide when registering your ap8my account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion;
• Automated technologies — cookies, server logs, and similar tracking technologies that capture Technical Data and Usage Data automatically when you visit or interact with the Platform;
• Payment processors — transaction confirmation data shared by Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and cryptocurrency processing services as part of normal payment settlement;
• Identity verification providers — identity and document verification data from third-party KYC services engaged by ap8my to fulfil regulatory obligations;
• Fraud and security tools — device fingerprint and behavioural data collected by ap8my's fraud prevention systems to protect members and the integrity of the Platform.

4. How We Use Your Data

ap8my uses the personal data it collects for the following purposes:

• Account management — to create, maintain, and administer your ap8my account, process logins, and verify your identity;
• Service delivery — to process deposits and withdrawals, settle bets, deliver casino game sessions, and provide the full ap8my platform functionality;
• Customer support — to respond to your queries, resolve disputes, and manage feedback received through ap8my's support channels;
• Compliance and KYC — to verify your age (21+ requirement), identity, and source of funds as required by applicable anti-money laundering and know-your-customer obligations;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, unauthorised account access, and abuse of ap8my's promotions or platform;
• Responsible gaming — to administer deposit limits, loss limits, session reminders, cooling-off periods, and self-exclusion requests made through your account settings;
• Platform improvement — to analyse usage patterns, identify technical issues, and improve the design and functionality of the ap8my platform for Malaysian members;
• Communications — to send account-related notifications (e.g., deposit confirmations, withdrawal status updates, security alerts) to your registered mobile number or contact details. Marketing communications are sent only where you have not opted out.

5. Legal Basis for Processing

ap8my processes personal data on the following legal bases, depending on the purpose:

• Contractual necessity — processing required to perform the contract between ap8my and you as a member (account creation, game delivery, payment processing);
• Legal obligation — processing required to comply with applicable laws including anti-money laundering regulations, age verification requirements, and record-keeping obligations;
• Legitimate interests — processing carried out to pursue ap8my's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests;
• Consent — processing based on your explicit consent, including for optional marketing communications. You may withdraw consent at any time by contacting ap8my support.

6. Sharing Your Data

ap8my does not sell personal data to third parties. ap8my may share personal data with the following categories of recipients where necessary to provide the Platform or comply with legal obligations:

• Payment processors — Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and cryptocurrency processors, for the purpose of processing deposits and withdrawals on your behalf;
• Game studios and software providers — licensed third-party providers that supply live casino tables, slots, and sportsbook data feeds to the ap8my platform;
• KYC and identity verification providers — third-party services engaged by ap8my to conduct age and identity checks in compliance with applicable regulations;
• Fraud prevention and security services — providers of fraud detection, device fingerprinting, and cybersecurity tools used to protect ap8my and its members;
• IT infrastructure providers — cloud hosting, content delivery, and database services that host and operate the ap8my platform;
• Regulatory and law enforcement authorities — where ap8my is required by law, court order, or regulatory direction to disclose member data.

All third-party service providers engaged by ap8my are contractually required to process personal data only for the purposes specified by ap8my and to implement appropriate data security measures.

7. Cookies & Tracking Technologies

ap8my uses cookies and similar tracking technologies on the Platform to ensure the platform functions correctly, to remember your preferences, to maintain your logged-in session, and to collect Usage Data for platform analytics and improvement.

Essential cookies are required for the Platform to operate and cannot be disabled without affecting core functionality such as login sessions and cashier access.

Analytics cookies collect anonymous usage data to help ap8my understand how members navigate the platform and identify areas for improvement. No personally identifiable information is included in analytics data shared with third-party analytics providers.

Fraud prevention cookies are used to detect suspicious activity and protect the integrity of your ap8my account and financial transactions.

You may manage cookie preferences through your browser settings. Disabling essential cookies may impair your ability to use the Platform.

8. Data Retention

ap8my retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. Specifically:

• Account data and transaction records are retained for a minimum of five (5) years following account closure to satisfy anti-money laundering record-keeping requirements;
• KYC documentation is retained in accordance with applicable regulatory requirements, typically for a minimum of five (5) years;
• Customer support communications are retained for two (2) years;
• Technical and Usage Data collected via cookies and server logs is retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Data Security

ap8my implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the ap8my platform;
• AES-256 encryption for sensitive data stored in ap8my's databases;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular penetration testing and security audits of ap8my's infrastructure;
• Multi-factor authentication for administrative access to systems holding personal data.

While ap8my takes data security seriously, no online platform can guarantee absolute security. Members are encouraged to use strong, unique passwords and to enable two-factor authentication on their ap8my account.

10. Your Rights

Subject to applicable law, ap8my members have the following rights in relation to their personal data:

• Right of access — the right to request a copy of the personal data ap8my holds about you;
• Right of rectification — the right to request correction of inaccurate or incomplete personal data;
• Right of erasure — the right to request deletion of your personal data, subject to ap8my's legal and regulatory retention obligations;
• Right to restrict processing — the right to request that ap8my limits the processing of your personal data in certain circumstances;
• Right to object — the right to object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent — where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact ap8my's customer support team through the live chat function in your account or via the support email address displayed in the footer of this website. ap8my will respond to valid requests within thirty (30) days.

11. Children & Minors

The ap8my platform is strictly intended for adults aged twenty-one (21) years and over. ap8my does not knowingly collect personal data from persons under the age of 21. If ap8my becomes aware that it has inadvertently collected personal data from a person under the minimum age, that account will be closed immediately and the associated personal data deleted, subject to any legal retention requirements.

If you have reason to believe that a minor has registered an account on ap8my, please notify ap8my's support team immediately.

12. International Data Transfers

ap8my may transfer personal data to service providers or infrastructure located outside Malaysia in connection with the operation of the Platform. Where such transfers occur, ap8my ensures that appropriate safeguards are in place, including contractual data protection obligations with the relevant recipient, to maintain a standard of protection equivalent to that provided under this Policy.

13. Third-Party Links

The ap8my platform does not contain links to external third-party websites. In the event that any such links are present, ap8my is not responsible for the privacy practices or content of those third-party sites. This Policy applies solely to data processed by ap8my in connection with the Platform.

14. Changes to This Policy

ap8my reserves the right to update this Privacy Policy at any time. Where changes are material, ap8my will notify registered members via their registered contact details or through a prominent notice on the Platform prior to the effective date of the change. The date of the most recent revision is displayed at the top of this Policy. Continued use of the ap8my platform following notification of any change constitutes your acceptance of the revised Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or ap8my's handling of your personal data, please contact ap8my's customer support team through the live chat function available within your ap8my account. ap8my's support team operates in Malaysian Standard Time (MYT), 24 hours a day, 7 days a week.

ap8my's registered support email address is displayed as plain text in the footer of this website. Alternatively, you may raise a data-related query directly from the account settings panel after logging in to your ap8my account.