This Privacy Policy describes how ap888 collects, uses, stores, and protects your personal data when you access our platform and use our services. We are committed to handling your information with transparency, care, and in accordance with applicable data protection principles.
ap888 (hereinafter referred to as "ap888", "we", "us", or "our") operates the online gaming and sports betting platform accessible at https://ap888.cam. We understand that privacy is important to our members, and we are committed to protecting the personal data you entrust to us when you register, deposit, play, and interact with our platform.
This Privacy Policy (the "Policy") sets out in clear, formal terms how ap888 collects, processes, stores, shares, and protects personal data in connection with your use of the Platform. It also explains your rights in relation to that data and how you may exercise those rights.
This Policy applies to all users of the ap888 platform, including registered members, users who browse without registering, and any individual whose personal data ap888 processes in connection with the provision of its services. It applies to all data collected through the website at https://ap888.cam, any mobile-optimised interfaces, and any communications between you and ap888 via live chat, email, or other supported channels.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the complete framework governing your relationship with ap888.
For the purposes of this Privacy Policy, the following terms carry the meanings ascribed to them below:
ap888 collects personal data through several channels in the course of providing its services. The categories of data we collect, and the circumstances under which they are collected, are set out below.
When you register an account, undergo KYC verification, contact support, or interact with the Platform in other ways, you may provide the following categories of personal data:
| Data Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Registration, KYC verification |
| Contact Data | Email address, Malaysian phone number, residential address (Kuala Lumpur, Penang, Johor Bahru, etc.) | Registration, support communications |
| Identification Documents | MyKad copy, passport scan, utility bill, bank statement header | KYC verification process |
| Financial Data | Payment method details, bank account identifiers, e-wallet account information (Touch 'n Go, Boost, GrabPay), transaction history | Deposit and withdrawal processing |
| Account Credentials | Username (passwords are stored in encrypted hashed form only — never in plain text) | Registration, account settings |
| Support Communications | Live chat transcripts, email correspondence, complaint records | Customer support interactions |
When you access the Platform, certain technical data is collected automatically through cookies, server logs, and similar technologies:
ap888 may receive personal data about you from third-party sources in limited circumstances, including:
ap888 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
ap888 uses the personal data we collect for the following purposes:
To create and manage your account, process deposits and withdrawals via your chosen Malaysian payment methods (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank), verify your identity for KYC compliance, allow you to place bets and participate in casino games, and provide customer support.
To detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, and other unlawful or prohibited activities. This includes monitoring betting patterns, transaction behaviour, and login activity to identify anomalies that may indicate account compromise or abuse.
To fulfil our legal and regulatory obligations as a licensed gaming operator, including record-keeping, suspicious transaction reporting, responding to lawful requests from competent authorities, and age verification to ensure all players are 21 years of age or older.
To operate our responsible gambling programme effectively, including monitoring player behaviour for signs consistent with problem gambling, enforcing self-exclusion requests, applying deposit and loss limits set by users, and directing players to appropriate support resources where necessary.
To analyse usage patterns, game preferences, and platform performance data in order to improve the ap888 experience — including expanding sports betting markets relevant to Malaysian users (Liga Super Malaysia, EPL, AFC competitions) and optimising mobile performance for Malaysian devices and network conditions.
Where you have provided consent, to send promotional offers, bonus notifications, and news about ap888 services via email or other channels. You may withdraw marketing consent at any time by updating your notification preferences within your account settings or by contacting support. Withdrawal of marketing consent does not affect your ability to use the Platform.
ap888 does not sell, rent, or trade your personal data to third parties. However, in the course of providing our services and fulfilling our legal obligations, we may share specific categories of data with the following types of recipients:
We share financial and identity data with payment processors necessary to execute your deposits and withdrawals. This includes Malaysian e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), banks operating via FPX and DuitNow (Maybank, CIMB, Public Bank, RHB, Hong Leong, and others), and cryptocurrency processing infrastructure for USDT and BTC transactions. These providers act as Data Processors under contractual data processing agreements with ap888.
We share identity documents and related data with third-party KYC verification services to authenticate your identity and age as required by our regulatory obligations. These providers are bound by strict confidentiality and data processing agreements.
Certain technical infrastructure supporting the Platform — including cloud hosting, database management, security monitoring, and customer support tooling — is provided by third-party vendors who process data on ap888's behalf under binding data processor agreements. These vendors are not permitted to use your data for any purpose other than providing services to ap888.
ap888 may disclose personal data to competent regulatory authorities, law enforcement agencies, courts, or other public bodies where required by law, pursuant to a valid legal order, or where disclosure is reasonably necessary to prevent fraud, money laundering, or other serious unlawful activity.
In the event of a merger, acquisition, sale of assets, or restructuring involving ap888, personal data may be transferred to the relevant acquiring entity as part of the transaction, subject to the receiving party assuming the data protection obligations set out in this Policy.
ap888 uses cookies and similar tracking technologies to operate the Platform, maintain session states, and improve user experience. The following categories of cookies are in use:
You may manage cookie preferences through your browser settings. Disabling certain categories of cookies may impair some Platform features. Strictly necessary cookies cannot be disabled through browser settings without preventing Platform use.
ap888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
ap888 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we hold. These measures are designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure.
Our security measures include, but are not limited to:
ap888 operates as an international gaming platform. In the course of providing services, your personal data may be transferred to, stored in, or processed in jurisdictions outside Malaysia. This may occur when we use cloud infrastructure, technology vendors, or KYC service providers based in other countries.
Where personal data is transferred outside Malaysia, ap888 takes steps to ensure that appropriate safeguards are in place — including contractual protections in the form of data processing agreements with recipient entities — to ensure that your data is afforded a level of protection equivalent to that described in this Policy.
By using the ap888 Platform and providing your personal data, you acknowledge and consent to these international data transfers as described herein.
As a data subject, you have the following rights in relation to the personal data ap888 holds about you. To exercise any of these rights, please contact ap888 via live chat or by email at the address in Section 15. We will respond to all requests within a reasonable timeframe, typically within 30 calendar days of receipt.
You have the right to request a copy of the personal data ap888 holds about you, together with information about how it is being used, who it has been shared with, and the basis on which it is being processed.
You have the right to request correction of inaccurate or incomplete personal data held by ap888. You may update basic account information directly within your account settings; for KYC-verified data, please contact support.
You may request deletion of your personal data where: it is no longer necessary for the purpose it was collected; you withdraw consent and no other legal basis applies; or you object to processing based on legitimate interests and no overriding grounds exist. This right is subject to legal retention obligations — ap888 may be required to retain certain data for regulatory compliance even following a deletion request.
You have the right to request that ap888 restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved, or where you have objected to processing and a determination is pending.
Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format for transmission to another controller.
You have the right to object to processing of your personal data based on ap888's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. You may also object at any time to processing for direct marketing purposes, and such processing will cease immediately upon receipt of a valid objection.
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. You can withdraw marketing consent via account settings or by contacting support.
The ap888 Platform is strictly intended for individuals aged 21 years and above. ap888 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered members.
Parents and guardians are encouraged to use parental control software and monitoring tools to prevent underage access to online gambling platforms. ap888 supports the use of these tools as part of our commitment to the welfare of young people.
The ap888 Platform may contain references or links to third-party services, including payment processors and game studios whose services are embedded within the platform. These third parties operate under their own privacy policies, which are separate from and independent of this Policy.
ap888 is not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform. In particular, payment providers such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank will process transaction data in accordance with their own privacy frameworks.
ap888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — we will provide advance notice via the Platform or by email to your registered address, a minimum of 14 days before the changes take effect.
The "Last Updated" date at the top of this document will be revised each time the Policy is amended. We recommend reviewing this Policy periodically to remain informed of how ap888 is protecting your data.
Your continued use of the Platform following the effective date of an amended Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way ap888 processes your personal data, please contact our Data Protection team through the following channels:
For requests to exercise your data subject rights (access, erasure, rectification, portability, etc.), please include your full registered name, account username, and a description of the specific right you wish to exercise. We may require identity verification before processing data subject requests to protect against fraudulent submissions.
Six principles that shape how ap888 handles your personal data — summarised clearly so you know exactly what you can expect from us.
ap888 collects only the personal data that is strictly necessary to provide our services and meet our regulatory obligations. We do not collect data speculatively or for purposes not described in this Policy. If we don't need it, we don't collect it.
Your data is protected with 256-bit SSL/TLS encryption in transit and stored using industry-standard security protocols. Passwords are hashed — no ap888 employee can ever read your password in plain text.
ap888 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Data shared with partners (payment providers, KYC vendors) is subject to strict contractual data protection obligations.
Access, rectification, erasure, portability — your data rights are real at ap888. Submit a request via live chat or email and we will respond within 30 calendar days. We don't obstruct or delay legitimate data requests.
We keep your data only as long as legally required or operationally necessary. Transaction records are retained 7 years for AML compliance. Marketing data is deleted promptly upon consent withdrawal. We don't hold data indefinitely.
This Policy describes every category of data we collect, every purpose we use it for, and every category of recipient we share it with. There are no hidden data practices at ap888. If we change how we use your data, we tell you first.
Our support team is available 24/7 to address any privacy concern, data request, or question about how ap888 uses your information. You can also visit our FAQ for quick answers.
🔞 For players aged 21 and above only. ap888 processes personal data in accordance with this Privacy Policy and applicable data protection law.