Privacy Policy API77 — Player Personal Data Protection

1. Introduction and Scope of This Privacy Policy

API77 ("we", "Platform") values your privacy as a registered player or visitor using our online betting platform. This Privacy Policy explains in detail how we collect, use, store, protect, and share your personal data when you use the services provided by API77.

This policy covers all your interactions with the API77 platform — whether through our official website, mobile app, or any official communication channels we operate. We are committed to ensuring that all processing of your personal data is carried out transparently, responsibly, and in compliance with applicable data protection laws.

We encourage you to read this document carefully and contact us if you have any questions or concerns about how we handle your personal data. Your trust is our most valuable asset, and we take this responsibility seriously.

2. Personal Data We Collect

We only collect data that is strictly necessary to provide you with a safe, fair, and high-quality service. Below are the categories of data we collect:

We do not collect sensitive data such as health information, political views, religious beliefs, or biometric data unless specifically required by applicable law. In such cases, we will obtain your explicit consent beforehand.

3. How We Use Your Personal Data

The data we collect is used solely for legitimate purposes directly related to delivering API77's services. The following are the primary purposes for which your data is used:

• Account Management: Create and maintain your account, process registrations, and handle account-related requests.
• Financial Transaction Processing: Verify and process deposits and withdrawals securely and promptly through supported payment methods.
• Identity Verification (KYC): Conduct identity checks required to comply with anti-money laundering and counter-terrorism financing legal requirements.
• Platform Security: Detect and prevent fraud, unauthorized access, duplicate accounts, and any activity that violates our terms of use.
• Customer Support: Respond to inquiries, resolve complaints, and provide technical support to players.
• Service Improvement: Analyze usage patterns anonymously to improve platform design, performance, and the overall user experience.
• Marketing Communications: Send promotional offers, the latest updates, and VIP-related information — only to players who have given their consent to receive them.
• Legal Compliance: Fulfill reporting and record-keeping obligations required by licensing authorities and applicable law.

We will not use your data for any purpose not stated here without first obtaining your explicit consent. Whenever we wish to use your data for a new purpose, we will notify you and obtain the appropriate permission.

4. Legal Basis for Data Processing

The processing of your personal data by api77 is based on one or more of the following valid legal grounds:

• Contract Fulfillment: Processing necessary to provide the services you requested — including account management, payment processing, and participation in games.
• Legal Obligation: Processing necessary to comply with applicable laws, including KYC requirements, transaction reporting, and financial record retention.
• Legitimate Interest: Processing necessary for our legitimate interests — such as fraud prevention, platform security improvements, and business analytics — provided these interests do not override your fundamental rights.
• Consent: For certain purposes such as marketing communications and the use of non-essential cookies, we require your explicit consent. You may withdraw this consent at any time without any negative impact on your account.

5. Data Sharing with Third Parties

API77 does not sell, rent, or disclose your personal data to third parties for their own marketing or commercial purposes. However, there are limited situations where we may need to share your data with certain parties:

• Payment Service Provider: Transaction information required to process your deposits and withdrawals is shared with approved payment gateways and the relevant financial institutions.
• KYC Service Provider: Your identity documents may be processed by third-party identity verification service providers who have signed strict data processing agreements with us.
• Game Provider: Limited game data is shared with game software providers to ensure game integrity and resolve any technical disputes.
• Legal Authority: We may be required to disclose data to government agencies, law enforcement, or regulatory bodies when required by law or a valid court order.
• Analytics Service: De-identified and aggregated usage data may be shared with analytics providers to help us understand and improve the user experience.

All third parties with whom we share data are bound by strict confidentiality and data protection agreements. They are only permitted to use your data for the specific purposes defined in those agreements and may not use it for any other purpose.

6. Data Security Measures

The security of your personal data is api77's highest priority. We implement multiple layers of technical and organizational protection to keep your data safe from unauthorized access, alteration, disclosure, or accidental destruction.

• Encryption in Transit: All communications between your device and api77 servers are secured by TLS 1.3 encryption with a 256-bit SSL certificate. Your browser's address bar will display a padlock icon to confirm a secure connection.
• Encryption at Rest: Sensitive data stored in our databases — including financial information and KYC documents — is encrypted using AES-256 algorithms.
• Strict Access Control: Only api77 staff with a legitimate business need are permitted to access player personal data. All access is logged and continuously monitored.
• Real-Time Threat Monitoring: Our intrusion detection system operates 24/7 to identify and block any unauthorized access attempts.
• Periodic Security Testing: We conduct regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• Staff Training: All staff who handle player personal data undergo comprehensive data protection training and sign confidentiality agreements.

While we take all necessary steps to protect your data, no security system is entirely foolproof. In the event of a data breach that may affect your rights, we will notify you and the relevant authorities within the timeframe required by law.

7. Data Retention Period

API77 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with legal requirements. The following is a general guide to our data retention periods:

• Active Account Data: Retained for the duration of your active account and continuously updated to ensure accuracy.
• Financial Transaction Records: Retained for a minimum of 7 years following a transaction, as required by applicable accounting and anti-money laundering laws.
• KYC Documents: Retained for the duration of the active account period plus 5 years after account closure to fulfil audit obligations.
• Security Logs: Retained for 2 years for security incident investigation and dispute verification purposes.
• Marketing Data: Retained until you withdraw consent to receive marketing communications from us.

After the applicable retention period expires, your data will be securely deleted or anonymized using methods that ensure the data cannot be recovered.

8. Your Rights as an API77 Player

You have clear and enforceable rights regarding your personal data. API77 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact our privacy team via email at [email protected] or via Live Chat, available 24/7. We will process your request within 30 business days. For complex cases, this period may be extended by up to 60 days, with notification provided to you.

9. Cookies and Tracking Technologies

API77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Remember your preferences such as language, display settings, and game preferences to deliver a more personalized experience.
• Analytics Cookies: Helps us understand how players use our platform — most visited pages, time spent, and navigation patterns — for continuous improvement.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the API77 platform. For more information on managing cookies, refer to your web browser's help documentation.

10. International Data Transfers

As a global online platform, your data may be transferred to and stored on servers located outside Malaysia. We ensure that any international data transfers are conducted with adequate safeguards, including:

• Use of approved standard contractual clauses to ensure an equivalent level of protection.
• Selection of partners and service providers operating in jurisdictions with equivalent or stricter data protection laws.
• End-to-end encryption during data transfers to ensure your information cannot be intercepted or read by unauthorized parties.
• Legally binding data processing agreements with all international partners handling api77 player data.

We continually review and evaluate existing protection measures to ensure your data receives a consistent level of protection regardless of its physical storage location.

11. Children's Privacy and Age Restrictions

The api77 platform is intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Our registration process is designed to screen out applicants who do not meet this minimum age requirement.

If we find that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the relevant account. If you believe a minor has registered on our platform, please contact us immediately via [email protected].

12. Contact Us About Privacy

If you have any questions, concerns, or requests regarding your privacy and personal data protection, our Data Protection Officer (DPO) team is ready to assist you. We are committed to providing accurate and satisfactory responses to every privacy inquiry.

• Privacy Email: [email protected] (with "Privacy Inquiry" in the subject line)
• Live Chat Support: Available 24/7 via the api77 platform
• Target Response Time: 3 working days for general enquiries; 30 days for formal rights requests

We encourage you to contact us first before filing a complaint with the data protection authority. We are confident we can resolve most issues directly and to your satisfaction. However, if you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.

This Privacy Policy may be updated from time to time to reflect changes in our practices, legal requirements, or feedback from our player community. The latest version will always be available on this page with the update date clearly displayed.