ap8my Privacy Policy

1. Introduction

This Privacy Policy (the "Policy") is issued by ap8my ("ap8my", "We", "Us", or "Our") and applies to all personal data collected from individuals ("You", "User", or "Member") who access, register on, or otherwise interact with the ap8my platform at ap8my.net and any associated web or mobile interfaces (collectively, the "Service").

ap8my takes the privacy of its members seriously. This Policy sets out the categories of personal data we process, the purposes and legal bases for that processing, and the rights available to you regarding your data. It should be read alongside the ap8my Terms & Conditions.

By creating an ap8my account or continuing to use the Service after any update to this Policy, you acknowledge that you have read and understood the practices described herein.

2. Personal Data We Collect

ap8my collects the following categories of personal data from members:

2.1 Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (for age verification — ap8my requires members to be 21 years of age or older)
• Nationality and country of residence
• Government-issued ID number (Malaysian MyKad or passport number)
• Copies of identification and proof-of-address documents submitted during Know Your Customer (KYC) verification

2.2 Contact Data

• Email address
• Mobile phone number
• Residential or mailing address

2.3 Financial Data

• Payment method identifiers (e.g., Touch n Go eWallet account reference, Boost account reference, bank account number where applicable)
• Transaction records including deposit amounts, withdrawal amounts, dates, and method used
• Balance history and bonus credit records

2.4 Technical and Usage Data

• IP address and geolocation data at the time of login and transactions
• Device type, operating system, and browser information
• Session logs including login times, session duration, pages visited, and features accessed
• Betting history, game play records, and wager outcomes

2.5 Communications Data

• Records of your correspondence with ap8my support via live chat or email, including the content of those communications
• Responses to surveys or feedback requests

3. How We Collect Personal Data

ap8my collects personal data through the following means:

• Direct submission — information you provide when creating an ap8my account, completing KYC verification, making a deposit or withdrawal, or contacting ap8my support.
• Automated collection — technical and usage data collected automatically via server logs, cookies, and similar tracking technologies as you interact with the ap8my platform.
• Third-party sources — identity verification data obtained from certified identity verification service providers during KYC processing; payment confirmation data received from payment processors including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank.

4. Purposes of Processing

ap8my processes personal data for the following purposes:

• Account management — to create, maintain, and administer your ap8my member account and ap8my login credentials.
• Identity and age verification — to comply with international gaming authority requirements mandating KYC checks and confirmation that all members are 21 years of age or older.
• Transaction processing — to process deposits and withdrawals via Malaysian payment methods, record transaction history, and resolve payment disputes.
• Service delivery — to operate the ap8my casino, sportsbook, slots, roulette, and rewards features and to deliver the gaming experience you access after ap8my login.
• Security and fraud prevention — to detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access.
• Responsible gaming compliance — to enforce deposit limits, loss limits, self-exclusion requests, and age restrictions; to monitor for indicators of problem gambling behaviour.
• Legal and regulatory compliance — to meet obligations imposed by applicable gaming authority regulations, anti-money laundering requirements, and data protection laws.
• Customer support — to respond to your enquiries, resolve disputes, and maintain records of support interactions.
• Marketing communications — to send you promotional offers, ap8my Rewards updates, and platform announcements, where you have provided consent or where ap8my has a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Platform improvement — to analyse usage patterns, diagnose technical issues, and improve the ap8my platform features and user experience.

5. Legal Basis for Processing

ap8my processes personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract between ap8my and you as a member (e.g., account management, transaction processing, game delivery).
• Legal obligation — processing required to comply with applicable law, including KYC/AML obligations imposed by relevant gaming and financial authorities.
• Legitimate interests — processing for fraud prevention, security monitoring, platform improvement, and responsible gaming enforcement, where those interests are not overridden by your data protection rights.
• Consent — processing for marketing communications and non-essential cookies, where your prior consent has been obtained. You may withdraw consent at any time.

6. Data Sharing and Disclosure

ap8my does not sell your personal data to third parties. ap8my may share personal data with the following categories of recipients where necessary:

• Identity verification providers — certified KYC and AML screening services that process identity document data on ap8my's behalf.
• Payment processors — Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment infrastructure providers involved in processing your deposits and withdrawals.
• Game content providers — game studios and live casino platform operators (e.g., Evolution Gaming, Pragmatic Play) who supply content to ap8my and who may receive session and gameplay data necessary to deliver game functionality.
• Regulatory and law enforcement authorities — where ap8my is required by law, court order, or gaming authority directive to disclose personal data.
• Fraud prevention and security services — third-party providers that assist ap8my in identifying and preventing fraudulent activity, with data sharing limited to what is necessary for that purpose.
• Professional advisers — legal counsel, auditors, and compliance consultants who are bound by confidentiality obligations.

All third parties with whom ap8my shares personal data are required to process that data in accordance with applicable data protection obligations and ap8my's data processing instructions.

7. International Data Transfers

ap8my may transfer personal data to recipients located outside of Malaysia in connection with the operation of the Service, including to game content providers and infrastructure providers operating internationally. Where such transfers occur, ap8my ensures that appropriate safeguards are in place — including contractual clauses equivalent to applicable data protection standards — to protect your personal data to a standard no less protective than what is described in this Policy.

8. Data Retention

ap8my retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law and regulatory obligations. Specifically:

• Account data and KYC documentation are retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Support correspondence is retained for three (3) years from the date of the interaction.
• Marketing preference records are retained until you withdraw consent or request erasure, whichever is earlier.

Following the applicable retention period, personal data is securely deleted or anonymised.

9. Cookies and Tracking Technologies

ap8my uses cookies and similar tracking technologies on the ap8my platform for the following purposes:

• Essential cookies — required to operate the platform, maintain your ap8my login session, and enable core functionality. These cannot be disabled without affecting the Service.
• Analytics cookies — used to collect aggregated data on how members interact with the ap8my platform, enabling ap8my to identify performance issues and improve user experience.
• Security cookies — used to detect and prevent fraudulent access attempts, including session hijacking and bot activity.

Non-essential cookies are only placed with your prior consent. You may withdraw your cookie consent and manage your cookie preferences at any time via your ap8my account settings. Note that disabling essential cookies will impair your ability to use the Service, including the ap8my login function.

10. Your Data Protection Rights

Subject to applicable law and certain exemptions, you have the following rights with respect to your personal data held by ap8my:

• Right of Access — you may request a copy of the personal data ap8my holds about you.
• Right to Rectification — you may request correction of inaccurate or incomplete personal data.
• Right to Erasure — you may request deletion of your personal data where ap8my no longer has a legal basis or legitimate need to retain it.
• Right to Restriction — you may request that ap8my restrict processing of your data in certain circumstances.
• Right to Data Portability — you may request your personal data in a structured, commonly used machine-readable format where technically feasible.
• Right to Object — you may object to processing based on ap8my's legitimate interests, including processing for direct marketing purposes.
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact ap8my via live chat (available 24/7) or email ap8my support at [email protected]. ap8my will respond to verified requests within 30 calendar days.

11. Security Measures

ap8my implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/HTTPS encryption for all data transmitted between your device and the ap8my platform, including during ap8my login and all transactions.
• Encryption of sensitive data at rest, including financial credentials and identity documents.
• Access controls limiting personal data access to ap8my staff who have a legitimate operational need.
• Two-factor authentication options for member accounts to prevent unauthorised ap8my login.
• Regular security assessments and penetration testing of the ap8my platform infrastructure.

No online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, ap8my will notify affected members without undue delay in accordance with applicable data protection obligations.

12. Minors

The ap8my Service is strictly for individuals aged 21 years and above. ap8my does not knowingly collect personal data from persons under 21 years of age. Where ap8my discovers or is notified that personal data has been collected from a person under 21, ap8my will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on ap8my, please contact support immediately.

13. Changes to This Privacy Policy

ap8my may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. Where a change is material, ap8my will notify registered members via their registered email address or via a notice displayed upon ap8my login. The updated Policy will take effect on the date specified in the notice. Continued use of the Service after that date constitutes acceptance of the revised Policy.

14. Contact and Data Enquiries

For any questions, complaints, or requests relating to this Privacy Policy or ap8my's handling of your personal data, please contact the ap8my Data Support team:

• Live Chat: Available 24/7 via the ap8my platform
• Support Email: [email protected]

Please include your registered ap8my username and a brief description of your request. Do not include sensitive authentication credentials in written correspondence. ap8my support agents will verify your identity before processing any data access or deletion request.