Privacy Policy

1. Introduction

apk8id ("we," "us," "our") operates an online betting and gaming platform accessible at apk8id.cam, primarily serving players based in Indonesia. This Privacy Policy describes how we collect, process, store, and protect the personal data of all registered users and website visitors.

By accessing or using apk8id's platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing practices described herein. If you do not agree to this policy, you must not use our services.

This policy applies to all personal data processed in connection with the apk8id platform, including our website, mobile interface, customer support channels, payment systems, and any related services or communications.

2. Definitions

• "Personal Data" means any information that identifies or could identify a natural person, including name, email address, date of birth, bank account details, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means apk8id, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of apk8id under a data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.
• "Cookies" means small text files placed on your device by apk8id's platform for functional, analytical, or marketing purposes.
• "KYC" means Know Your Customer — the identity and address verification process required for account activation and withdrawals.

3. Data We Collect

3.1 Registration Data

When you create an account on apk8id, we collect:

• Full legal name
• Date of birth
• Email address
• Residential address (including city, province, and postal code in Indonesia)
• Mobile phone number
• Username and encrypted password
• Preferred currency (Indonesian Rupiah / IDR)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) regulations and our responsible gaming obligations, we may collect:

• Government-issued photo identification (KTP, passport, or driver's license)
• Proof of residential address (utility bill, bank statement, or official correspondence)
• Proof of payment method ownership (bank statement, e-wallet screenshot)
• Selfie or live photo for facial identity confirmation

3.3 Financial Data

To process deposits and withdrawals, we collect:

• Bank account details (bank name, account number, account holder name) for transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, and other supported Indonesian banks
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Cryptocurrency wallet addresses for USDT and BTC transactions
• Transaction history and amounts (in IDR)

apk8id does not store full card numbers or CVV codes. Payment card data, where applicable, is processed exclusively by PCI-DSS-compliant third-party payment processors.

3.4 Gaming and Behavioural Data

We collect data related to your activity on the platform, including:

• Bet history, wager amounts, game sessions, and outcomes
• Bonus claims, wagering progress, and promotional participation
• Self-imposed deposit limits, time-out requests, and responsible gaming settings
• Customer support ticket history and communication logs

3.5 Technical Data

Our servers automatically collect technical information when you access the platform:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Pages visited, time on site, and navigation paths
• Referring URL and session duration
• Cookie identifiers and similar tracking data

4. How We Collect Your Data

apk8id collects personal data through the following channels:

• Directly from you: Registration forms, KYC document submissions, deposit/withdrawal requests, live chat conversations, and email correspondence.
• Automatically: Server logs, cookies, session trackers, and analytics tools when you access and interact with the platform.
• From third parties: Identity verification providers (for KYC), payment processors (for transaction confirmation), and fraud-detection services — all operating under contractual data processing agreements with apk8id.

5. How We Use Your Data

apk8id uses collected personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your player account.
• Service Delivery: Processing deposits and withdrawals, settling bets, and delivering gaming services.
• Identity Verification: Fulfilling KYC obligations and preventing fraud, money laundering, and underage gambling.
• Customer Support: Responding to queries, resolving disputes, and providing technical assistance.
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling and applying self-imposed restrictions.
• Marketing Communications: Sending promotional emails, bonus notifications, and product updates — where you have consent ed to receive them. You may unsubscribe at any time.
• Legal Compliance: Meeting our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection regulations.
• Platform Improvement: Analysing usage patterns and technical performance to enhance the platform experience.
• Security: Detecting and preventing fraud, unauthorised access, and other malicious activity.

6. Legal Basis for Processing

apk8id processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil the agreement between you and apk8id — including account registration, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable law, including AML regulations, KYC mandates, and responsible gaming requirements.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

apk8id does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and under contractual data protection obligations:

7.1 Service Providers

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate deposits and withdrawals.
• KYC and Identity Verification Partners: Third-party providers that validate government-issued identification documents.
• Fraud Prevention Services: Providers that analyse transaction and behavioural patterns to detect suspicious activity.
• Cloud Infrastructure Providers: Hosting and storage providers that maintain apk8id's server infrastructure under strict security protocols.
• Customer Support Tools: Live chat and ticketing platforms used to manage your support requests.

7.2 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required by law, a valid legal process, or to protect the rights, property, and safety of apk8id, its users, or the public.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of apk8id's assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and the choices available to you at that time.

8. Data Retention

apk8id retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of your account and for a period thereafter as required by law:

• Active Account Data: Retained for the full duration of your account relationship with apk8id.
• Closed Account Data: Retained for a minimum of five (5) years after account closure to comply with AML regulations and legal obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements.
• KYC Documents: Retained for the duration of the account relationship plus five (5) years following closure.
• Marketing Data: Retained until you withdraw consent or for three (3) years from your last interaction with our platform, whichever occurs first.
• Technical Logs: Retained for up to twelve (12) months for security and performance monitoring purposes.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.

9. Data Security

apk8id implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• Transport Security: All data in transit is protected by TLS 1.2 / TLS 1.3 encryption.
• Storage Encryption: Sensitive data at rest, including passwords (hashed with bcrypt) and financial identifiers, is encrypted using AES-256.
• Access Controls: Strict role-based access controls ensure that only authorised apk8id personnel can access personal data, and only to the extent necessary for their role.
• Two-Factor Authentication (2FA): Available and strongly recommended for all player accounts to prevent unauthorised logins.
• Regular Security Audits: Independent third-party security audits and penetration tests are conducted regularly to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, apk8id will notify affected users promptly and take immediate remediation steps.

While we take every reasonable precaution to protect your data, no system is entirely immune to security risks. You are responsible for keeping your account credentials confidential and notifying us immediately if you suspect unauthorised access to your account.

10. Cookies and Tracking Technologies

apk8id uses cookies and similar tracking technologies to provide a functional and personalised experience on the platform. Cookies are small text files stored on your device when you access our website.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function correctly, including session management, login state, and security tokens. These cannot be disabled.
• Analytical Cookies: Used to understand how users navigate the platform — such as pages visited, session duration, and error occurrences — to improve platform performance.
• Functional Cookies: Used to remember your preferences, such as language settings, currency display (IDR), and responsible gaming limits.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our campaigns. These require your consent.

10.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies at any time. Note that disabling essential cookies may impair the functionality of the apk8id platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

11. Your Data Rights

Subject to applicable law, you have the following rights regarding your personal data held by apk8id:

• Right of Access: You may request a copy of all personal data we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, such as while a dispute is under investigation.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you provided to us.
• Right to Object: You may object to processing based on legitimate interests or direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our Data Protection team at [email protected]. We will respond to verified requests within 30 days. We may require proof of identity before processing your request.

12. International Data Transfers

apk8id operates internationally, and your personal data may be transferred to and processed in countries outside Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place — including contractual data protection clauses — to provide a level of protection for your data consistent with applicable international standards.

Transfers to payment processors, KYC partners, and cloud infrastructure providers are covered by data processing agreements that bind those parties to strict data protection obligations.

13. Minors and Age Restriction

apk8id's services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered an account or provided personal data, we will immediately close the account and delete all associated data.

Parents and guardians are encouraged to use parental control tools and monitor their children's online activity to prevent access to gambling platforms. If you believe a minor has accessed our platform, please contact us immediately at [email protected].

14. Amendments to This Policy

apk8id reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how we collect, use, or share your personal data — will be communicated to you via email and a prominent notice on the platform no fewer than 14 days before the changes take effect.

Non-material changes (such as typographic corrections or clarifications that do not affect your rights) may be made without prior notice. The "Effective Date" at the top of this policy will always reflect the date of the most recent revision. Continued use of apk8id after an update constitutes your acceptance of the revised policy.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection team:

• Email: [email protected]
• Response Time: Within 30 business days of receiving a verified request
• Support Hours: 24/7 (WIB / UTC+7)
• Language Support: English and Indonesian-speaking agents available at all times