Privacy Policy — api69

This Privacy Policy ("Policy") is published by api69, accessible at https://api69.cam, and applies to all users who access, register on, or interact with the api69 online betting platform (the "Platform"). api69 is committed to protecting the privacy of every individual whose personal data passes through our systems, and we take that responsibility seriously.

We have written this Policy to be as clear and straightforward as possible. It explains exactly what personal data we collect from you, why we need it, how it is stored and protected, and what choices you have. If you have any questions after reading this document, our support team is available 24/7 via live chat and can be reached by email at [email protected] (plain text — not a clickable link).

By registering an account on api69 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

This Policy applies to:

• All registered Members of the api69 Platform, regardless of their location within Indonesia — including players based in Jakarta, Surabaya, Bandung, Bali, Medan, Semarang, Makassar, Yogyakarta, Palembang, and all other Indonesian regions.
• Visitors who browse the api69 website without creating an account, to the extent that browsing data (such as cookies and server logs) is automatically collected.
• All individuals who contact api69 via live chat, email, or any other support channel, whether or not they hold a registered account.

This Policy does not apply to third-party websites, services, or applications that may be linked to or integrated with the Platform (such as individual game studios' privacy practices). api69 is not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third-party service you engage with through or alongside the Platform.

api69 collects personal data across three broad categories: data you provide directly, data collected automatically through your use of the Platform, and data obtained from third-party verification services.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and time zone.
• Usage Data: Pages viewed, features used, search queries entered, games launched, wagers placed, session duration, and click-path data.
• Transaction Data: Deposit amounts, withdrawal requests, bonus activations, wager history, and account balance movements.
• Cookie & Tracking Data: Data collected through first-party cookies, session tokens, and similar technologies as described in Section 10.

3.3 Data from Third Parties

• Identity verification results from KYC service providers used to authenticate documents submitted during account verification.
• Fraud-screening signals from payment processors used to detect unauthorized transactions or suspicious funding patterns.
• Technical data from our hosting and content delivery infrastructure, including server-side access logs.

api69 collects personal data through the following channels and mechanisms:

• Account Registration: When you complete the registration form on api69, you provide your name, contact details, date of birth, and payment method information.
• KYC Submission: When you upload identity and address verification documents as part of the KYC process required before your first withdrawal is processed.
• Platform Interaction: Through your ongoing use of the Platform — placing wagers, navigating pages, launching games such as togel (Indonesia's traditional numbers lottery), slot gacor (high-payout slot titles), or live casino tables — usage data is captured automatically.
• Payment Processing: When you initiate a deposit or withdrawal, our payment processors capture the transaction details necessary to execute and record the transfer.
• Support Interactions: When you contact our support team through live chat or email, the content of that interaction is recorded to allow follow-up and for quality-assurance purposes.
• Cookies & Session Tokens: Your browser or device stores cookies and session tokens that allow the Platform to recognize you between visits, maintain your login state, and remember your preferences.

api69 processes personal data only for clearly defined, legitimate purposes. The table below maps each processing activity to its purpose and the category of data it involves:

api69 does not use your personal data for automated decision-making that produces significant legal effects without human oversight, except where such processing is required by law or expressly consented to by you.

Each processing activity described in Section 5 is grounded in one of the following legal bases:

• Contractual Necessity: Processing that is required to perform the contract between you and api69 — for example, processing your payment details to execute a deposit or withdrawal, or using your identity data to maintain your account.
• Legal Obligation: Processing that is required to comply with applicable law — for example, retaining financial records in accordance with anti-money laundering regulations, or sharing data with law enforcement in response to a lawful order.
• Legitimate Interests: Processing that serves api69's legitimate business interests, provided those interests are not overridden by your rights — for example, using usage data to improve the Platform, or employing fraud-detection analytics to protect Members and the business from financial crime.
• Consent: Processing that is based on your freely given, informed, and specific consent — for example, sending you promotional communications about bonuses and new game launches. You may withdraw consent at any time by contacting our support team.

api69 does not sell or rent your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose:

• Payment Processors: Financial data (bank account details, e-wallet identifiers, transaction amounts) is shared with our authorized payment partners — including processors handling transfers to and from BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja — solely for the purpose of processing your deposit or withdrawal.
• KYC & Identity Verification Providers: Identity and address documents submitted during the KYC process are shared with our licensed third-party identity verification partner. This partner processes your documents under their own binding data processing agreement with api69 and may not use your data for any other purpose.
• Game Studios: When you launch a game from a third-party provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft), limited session data (such as a pseudonymous session token and your wager activity) is shared with that studio to render and operate the game. Game studios do not receive your full identity or financial data.
• Fraud Prevention & Security Services: Technical data and transaction data may be shared with fraud-screening services to protect the Platform and its Members from financial crime and unauthorized access.
• Law Enforcement & Regulatory Authorities: api69 will disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or valid legal process. api69 will notify you of any such disclosure where permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of api69's business, your personal data may be transferred to the acquiring entity as part of the business assets. You will be notified of any such transfer via your registered email address.

api69 retains personal data for no longer than is necessary for the purposes for which it was collected. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with our internal data destruction procedures.

api69 implements a layered set of technical and organizational security controls to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and our servers uses 256-bit SSL/TLS encryption. This includes login sessions, payment processing, and KYC document uploads.
• Encryption at Rest: Sensitive fields within our databases — including identity numbers, financial account details, and hashed passwords — are encrypted at the storage level.
• Password Hashing: Account passwords are stored exclusively as salted cryptographic hashes. api69 staff are unable to view your plaintext password, and we will never request it from you.
• Access Controls: Access to personal data within our internal systems is restricted on a strict need-to-know basis. Staff access rights are reviewed regularly and are revoked immediately upon role change or departure.
• Two-Factor Authentication (2FA): api69 offers optional 2FA for Member accounts. We strongly encourage all Members to enable this feature from within their account security settings.
• Penetration Testing: Our platform undergoes regular third-party security assessments, including penetration testing and vulnerability scanning, to identify and address potential security weaknesses.
• Incident Response: api69 maintains a documented data breach response plan. In the event of a confirmed breach affecting your personal data, we will notify impacted Members within 72 hours of confirming the incident and detail the steps taken to contain it.

api69 uses cookies and similar session technologies to operate the Platform effectively and to improve your experience. The following types of cookies may be set when you use api69:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They include session authentication tokens that keep you logged in across page navigations and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, last-visited game category, or display settings — so you do not need to reconfigure them on every visit. Retention: up to 12 months.
• Analytics Cookies: api69 uses first-party analytics to understand aggregate usage patterns, such as which pages are visited most frequently, where users encounter navigation friction, and which features drive engagement. These cookies collect anonymized data and do not identify individual users. Retention: up to 24 months.
• Fraud-Prevention Tokens: Technical tokens used by our fraud-detection systems to identify unusual activity patterns, such as multiple login attempts from different IP addresses. These are strictly functional and do not serve any advertising purpose.

api69 does not use third-party advertising cookies or behavioral tracking cookies for the purpose of serving targeted advertisements on external websites. We do not participate in cross-site advertising networks.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. For instructions on managing cookies in your specific browser, consult your browser's help documentation.

As a data subject, you have the following rights regarding your personal data held by api69. To exercise any of these rights, contact our support team via live chat or email. All requests will be acknowledged within 72 hours and resolved within 30 days, subject to identity verification:

• Right of Access: You have the right to request a copy of all personal data api69 holds about you, together with a description of the purposes for which it is being processed and the categories of recipients to whom it has been disclosed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Where personal details change — such as your registered email address or bank account — you should notify our support team promptly.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other lawful basis for processing), or where the data has been processed unlawfully. This right is subject to our legal data retention obligations — we may be required to retain certain records under applicable anti-money laundering law even after your request.
• Right to Restriction of Processing: You may request that api69 restricts processing of your personal data in specific circumstances — for example, while the accuracy of the data is contested, or while a complaint regarding processing is under investigation.
• Right to Data Portability: You have the right to receive the personal data you provided to api69 in a structured, commonly used, machine-readable format, and to transmit that data to another service provider, where technically feasible.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on api69's legitimate interests, though we may continue processing where we can demonstrate compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

api69 is strictly an adults-only platform. Registration and participation are permitted only for individuals aged 21 years or older. api69 does not knowingly collect personal data from individuals under the age of 21.

If api69 becomes aware that personal data has been collected from a person under the age of 21, we will immediately:

• Suspend the associated account pending investigation.
• Delete all personal data collected from the underage individual, to the extent permitted by law.
• Return any deposited funds to the payment method used, subject to completion of identity verification procedures.
• Void any wagers placed and any winnings generated while the account was active.

If you are a parent or guardian and believe your child has registered an account on api69, please contact our support team immediately via live chat or at [email protected]. We take all such reports seriously and will act on them promptly.

The api69 Platform integrates with a range of third-party service providers to deliver a full gaming and payment experience. Each of these providers is bound by a data processing agreement with api69, and none are permitted to use your personal data beyond the scope required to deliver their contracted service.

Categories of third-party services used by api69 include:

• Game Studios: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft supply the games accessible on the Platform. When you launch a game, a pseudonymous session is established between your browser and the studio's game server. The studio receives game-session data but not your full personal profile.
• Payment Infrastructure: Payment processors that facilitate transfers between your bank or e-wallet (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) and your api69 account. These processors receive the financial data strictly necessary to execute each transaction.
• Identity Verification: A licensed KYC partner that processes the identity documents you submit. This partner is engaged under strict contractual data-use limitations and holds its own certification under recognized data security standards.
• Hosting & Infrastructure: Cloud hosting and content delivery network (CDN) providers that store and serve Platform data. These providers are contractually prohibited from accessing the content of your personal data beyond what is technically necessary to deliver the hosting service.

api69 reviews its third-party provider relationships periodically to ensure continued compliance with data protection standards. If a provider's security posture is found to be inadequate, we will terminate the relationship and migrate to an alternative provider.

Some of the third-party service providers described in Section 13 — including game studios and cloud infrastructure providers — may process data in countries outside Indonesia. Where your personal data is transferred internationally, api69 ensures that appropriate safeguards are in place to protect it to a standard at least equivalent to that required under applicable Indonesian data protection law.

Safeguards used for international transfers include:

• Data Processing Agreements (DPAs) with contractual obligations on the recipient regarding data protection and security.
• Transfers only to jurisdictions or organizations that maintain recognized data protection standards.
• Technical controls — including encryption of data at rest and in transit — that apply regardless of the jurisdiction in which data is processed or stored.

If you have questions about where your personal data is processed or wish to obtain a copy of the safeguards we have put in place, please contact our support team.

api69 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered Members via their registered email address where the change materially affects how their personal data is used.
• Display a prominent notice on the Platform for a reasonable period following the change.

We encourage you to review this Privacy Policy periodically so that you remain aware of our current practices. Your continued use of the Platform following the posting of an amended Policy constitutes your acceptance of those changes.

For any questions, concerns, or formal requests relating to this Privacy Policy or your personal data, please contact the api69 Privacy & Compliance team through the following channels:

• Live Chat: Available 24/7 directly on the Platform. For urgent data security concerns — such as suspected unauthorized account access — live chat is the fastest channel.
• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Request — [Your Account ID]" for all data rights requests. Allow up to 72 hours for acknowledgment.
• Support Hours: Our compliance and support teams operate on WIB (UTC+7) as the primary timezone, with coverage extended across WITA (UTC+8) and WIT (UTC+9). Live chat and email are monitored around the clock, 365 days a year.

Formal legal correspondence regarding data protection matters should be submitted via email to the address above with the subject line "Legal — Data Protection Notice". api69 will acknowledge formal legal notices within 3 business days and respond substantively within the timeframes required by applicable law.