Your data. Your control. Our commitment.
We handle your account information, payment details and gaming activity with the same care we put into every lobby feature. This policy shows exactly how we collect, use...
What we collect and why
When you open an account with api288, we collect your name, email, phone number and identity details to verify your account and meet local regulatory requirements in supported regions. We also track your gaming activity, session history and payment transactions to maintain account security, prevent fraud and deliver your winnings. Your DANA, OVO, GoPay and QRIS payment information is encrypted and never
stored on our servers after each transaction completes. We use cookies and device identifiers to remember your preferences and keep you logged in across sessions.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Questions about your privacy
Email Support
Reach our privacy team at [email protected] with any data requests, deletion inquiries or concerns about how we handle your information.
Account Settings
Review and update your personal details, communication preferences and data-sharing choices directly from your api288 account dashboard.
Data Access Request
Submit a formal request to download all data we hold about you, including account history, transactions and device logs, within 30 days.
How we earn your trust
Encryption Standard
All data in transit and at rest uses TLS 1.3 and AES-256 encryption, matching banking-grade security protocols for payment and identity information.
Third-Party Audit
Our privacy and security practices are reviewed annually by independent auditors to verify compliance with data protection standards in supported regions.
No Data Selling
We never sell your personal information to advertisers, brokers or third parties. Your data stays within api288 and our trusted payment processors.
Transparent Logging
Every access to your account data is logged and timestamped. You can request a full audit trail of who viewed your information and when.
Deletion Rights
Close your account and request permanent deletion of your personal data within 90 days, except where local law requires us to retain records.
Breach Notification
If we detect unauthorized access to your account or payment details, we notify you within 24 hours and provide guidance on next steps.
Consistency across our policies
| Terms of Service | Outlines account rules, game rules and dispute resolution; complements this privacy policy with conduct expectations. |
|---|---|
| Cookie Policy | Details every tracking cookie, analytics tool and device identifier we use; lets you opt out of non-essential tracking. |
| Payment Security | Explains how DANA, OVO, GoPay and QRIS transactions are encrypted, verified and reconciled with your account balance. |
| Responsible Account Use | Covers account limits, session timeouts and data retention when you pause or close your account with api288. |
| Third-Party Integrations | Lists game providers, payment gateways and analytics partners who access your data; shows what each one receives. |
| Dispute & Complaint | Describes how we handle privacy complaints, data disputes and requests for correction or deletion of inaccurate information. |
| Policy Updates | Shows how we notify you of changes to this privacy policy and what rights you have if we alter data handling practices. |
What defines our privacy approach
Account Verification
We verify your identity once at signup using your phone number and email. This one-time check keeps your account secure and meets local requirements.
Session Privacy
Your gaming activity is private to your account. We don't share session logs, bet history or game choices with other players or external parties.
Payment Isolation
DANA, OVO, GoPay and QRIS details are processed by certified payment partners. We never store full card or wallet numbers on our servers.
Minimal Tracking
We track only what's needed: your login times, game selections and payout requests. No behavioral profiling or cross-site tracking.
Data Retention
Account data stays active while you play. After closure, we retain transaction records for 7 years per local law, then delete everything else.
Jurisdiction Clarity
This policy applies to api288 operations in supported Indonesian regions. Local law governs data rights and dispute resolution.