api500 Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you register an account with api500, we collect personal information that you voluntarily provide to us. This includes:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (Indonesian KTP, passport, or driver's license number).
• Contact Information: Email address, phone number, residential address, city, province, and postal code.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay account details), and transaction history including deposits, withdrawals, and payment method verification documents.
• Verification Documents: Copies of government-issued identification, proof of address documents (utility bills, bank statements), selfie photos for identity verification, and any other documents requested for KYC (Know Your Customer) compliance.

1.2 Information Automatically Collected

When you access and use api500 services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (such as IP address and device ID), and mobile network information.
• Usage Data: Pages visited, features used, time spent on pages, games played, bets placed, deposit and withdrawal patterns, links clicked, search queries, and interaction with promotional offers.
• Location Data: IP address, which provides approximate geographic location information. We use this to verify that you are accessing our services from within Indonesia and to comply with geo-location restrictions.
• Communication Records: Records of customer support interactions including live chat transcripts, email correspondence, WhatsApp messages, and phone call recordings (with your consent).
• Cookies and Similar Technologies: We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior and preferences. See Section 7 for detailed information about our cookie practices.

1.3 Information from Third Parties

We may receive additional information about you from third-party sources, including:

• Payment Processors: Information related to your transactions, including payment confirmation, processing times, and any payment disputes or chargebacks.
• Identity Verification Services: Information used to verify your identity, age, and address from third-party verification providers.
• Fraud Prevention Services: Information about suspicious or fraudulent activity patterns from specialized fraud detection and prevention services.
• Public Databases: Information available in public records or databases that helps us verify your identity or comply with legal obligations.

2. How We Use Your Personal Data

2.1 Primary Purposes

api500 uses your personal information for the following primary purposes:

• Account Management: To create and manage your account, authenticate your identity when you log in, maintain your account settings and preferences, and enable you to access all features of our platform.
• Service Provision: To provide our sports betting, live casino, slots, togel, and other gaming services, process your bets and wagers, calculate and credit your winnings, maintain your transaction history, and display your account balance.
• Payment Processing: To process deposits and withdrawals, verify ownership of payment methods, prevent payment fraud, comply with anti-money laundering regulations, and maintain accurate financial records.
• Identity Verification: To verify that you are over 21 years of age, confirm your identity and address, prevent underage gambling, detect and prevent multiple account creation, and comply with KYC regulations.
• Customer Support: To respond to your inquiries and support requests, resolve technical issues, investigate and address complaints, and improve our customer service quality.
• Communication: To send you important account notifications, transaction confirmations, security alerts, updates to our terms and policies, and responses to your support requests.

2.2 Secondary Purposes

With your consent or where permitted by law, we may also use your information for:

• Marketing and Promotions: To send you information about bonuses, promotions, special offers, tournaments, and new games or features that may interest you. You can opt out of marketing communications at any time.
• Personalization: To customize your experience by recommending games and betting markets based on your preferences and gaming history, displaying relevant promotions, and adapting our platform interface to your device and location.
• Analytics and Improvement: To analyze usage patterns and trends, understand player behavior and preferences, improve our services and user experience, develop new features and products, and conduct research and statistical analysis.
• Responsible Gaming: To monitor your gaming behavior for signs of problem gambling, implement responsible gaming tools and limits, provide information and resources about responsible gambling, and enforce self-exclusion requests.

2.3 Legal and Compliance Purposes

We may use your information to comply with legal obligations and protect our legitimate interests:

• Legal Compliance: To comply with Indonesian laws and regulations, respond to legal requests and court orders, fulfill reporting obligations to regulatory authorities, and maintain records required by law.
• Fraud Prevention and Security: To detect and prevent fraud, abuse, and illegal activity, protect against security threats and unauthorized access, investigate suspicious transactions or account activity, and enforce our Terms & Conditions.
• Business Operations: To manage business risks, perform accounting and auditing functions, resolve disputes, establish and defend legal claims, and conduct business transactions such as mergers or acquisitions.

3. Information Sharing and Disclosure

3.1 We Do Not Sell Your Data

api500 does not sell, rent, or trade your personal information to third parties for their marketing purposes. Your data is valuable to us because it enables us to provide you with excellent service, not because it can be monetized through sales to others.

3.2 Service Providers and Business Partners

We share your information with trusted third-party service providers who help us operate our business and provide services to you. These parties are contractually obligated to use your information only for the specific purposes we authorize and to protect your data with appropriate security measures. Categories of service providers include:

• Payment Processors: Banks and payment gateways that process your deposits and withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Game Providers: Casino game and sports betting platform providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and others who power our gaming content.
• Identity Verification Services: Third-party services that verify your identity, age, and address as part of our KYC compliance.
• Customer Support Tools: Live chat, email, and communication platforms that help us provide customer service.
• Cloud Hosting and Infrastructure: Technology providers that host our servers, databases, and applications.
• Analytics and Marketing Services: Tools that help us understand user behavior and deliver relevant content (only with your consent for marketing purposes).
• Fraud Prevention and Security: Services that help detect and prevent fraudulent activity, money laundering, and security threats.

3.3 Legal Requirements and Protection

We may disclose your information when required by law or when necessary to protect our rights and the safety of others:

• To comply with legal processes such as court orders, subpoenas, or government requests.
• To enforce our Terms & Conditions and investigate potential violations.
• To detect, prevent, or address fraud, security, or technical issues.
• To protect the rights, property, or safety of api500, our users, or the public.
• In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business (in which case we will require the receiving party to honor this Privacy Policy).

3.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, for example when you choose to participate in third-party promotions or connect your api500 account with external services.

4. Data Security Measures

api500 takes the security of your personal information seriously and implements comprehensive technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

4.1 Technical Security Measures

• Encryption: We use industry-standard 256-bit SSL (Secure Socket Layer) encryption to protect data transmitted between your device and our servers. All sensitive data, including passwords and financial information, is encrypted both in transit and at rest using advanced encryption algorithms.
• Secure Infrastructure: Our servers and databases are hosted in secure data centers with physical access controls, 24/7 monitoring, redundant power supplies, and disaster recovery systems.
• Firewall Protection: Multiple layers of firewalls protect our systems from external attacks and unauthorized access attempts.
• Access Controls: We implement strict role-based access controls, ensuring that only authorized personnel can access personal data, and only to the extent necessary for their job functions.
• Authentication Security: Multi-factor authentication options are available for your account, and we enforce strong password requirements.
• Regular Security Audits: We conduct regular security assessments, penetration testing, and vulnerability scans to identify and address potential weaknesses.

4.2 Organizational Security Measures

• Employee Training: All api500 staff members receive regular training on data protection, privacy practices, and security protocols.
• Confidentiality Agreements: Employees and contractors with access to personal data are bound by strict confidentiality obligations.
• Data Minimization: We collect and retain only the personal information necessary for the purposes identified in this Privacy Policy.
• Incident Response Plan: We maintain a comprehensive data breach response plan to quickly detect, contain, and remediate any security incidents.

4.3 Your Role in Security

While we implement strong security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password and never share it with anyone.
• Enable two-factor authentication if available.
• Log out of your account when using shared or public devices.
• Never respond to phishing emails or messages asking for your password or personal information.
• Keep your contact information up to date so we can reach you about security matters.
• Report any suspicious account activity to our support team immediately.

5. Data Retention Policy

5.1 General Retention Principles

api500 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The specific retention periods vary depending on the type of information and the purposes for which it is used.

5.2 Retention Periods by Data Category

Data Category	Retention Period	Reason for Retention
Account Information	Duration of account plus 7 years	Legal compliance, financial regulations
Transaction Records	7 years from transaction date	Tax compliance, anti-money laundering
KYC Documents	7 years after account closure	Regulatory requirements, fraud prevention
Marketing Consent	Until withdrawal of consent	GDPR and privacy law compliance
Customer Support Records	3 years from last interaction	Dispute resolution, service improvement
Website Analytics	26 months	Statistical analysis, platform improvement

5.3 Account Closure and Data Deletion

When you close your api500 account, we will deactivate it and remove your personal information from active databases. However, certain information may be retained in backup systems or archives for the periods specified above to comply with legal obligations. After the applicable retention period expires, we will securely delete or anonymize your personal information so that it can no longer be associated with you.

6. Your Privacy Rights

Under Indonesian data protection laws and international privacy standards, you have certain rights regarding your personal information. api500 respects these rights and provides mechanisms for you to exercise them.

6.1 Right to Access

You have the right to request access to the personal information we hold about you. You can view most of your account information directly through your api500 account dashboard. For additional information or a comprehensive data report, contact our support team at [email protected]. We will provide the requested information within thirty (30) days of your request.

6.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update your contact information, address, and payment methods directly through your account settings. For changes to identity information (name, date of birth) that require verification, contact our support team with appropriate documentation.

6.3 Right to Erasure

You have the right to request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when the processing is unlawful. However, this right is not absolute—we may need to retain certain information to comply with legal obligations or for legitimate business purposes such as fraud prevention.

6.4 Right to Restrict Processing

You have the right to request that we limit how we use your personal information in certain situations, such as when you contest the accuracy of the data or object to our processing. During the restriction period, we will store your data but not actively use it except with your consent or for specific legal purposes.

6.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to request that we transmit this data to another service provider where technically feasible.

6.6 Right to Object

You have the right to object to our processing of your personal information for direct marketing purposes at any time. You can opt out of marketing communications by clicking the unsubscribe link in any marketing email, adjusting your account preferences, or contacting support.

6.7 Right to Withdraw Consent

Where our processing is based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

6.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your full name, username, and a clear description of your request. We will verify your identity before processing requests that involve access to or deletion of personal information. We aim to respond to all requests within thirty (30) days, though complex requests may require additional time.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us recognize your device, remember your preferences, understand how you use our site, and provide a better user experience. We also use similar technologies such as web beacons, pixel tags, and local storage.

7.2 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the website to function and cannot be disabled. They enable core functionality such as security, authentication, and access to secure areas.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, which pages are visited most often, and any error messages. This information is aggregated and anonymous, helping us improve website performance.
• Functionality Cookies: These cookies remember your preferences and choices (such as language, region, or display settings) to provide a more personalized experience.
• Marketing and Advertising Cookies: These cookies track your browsing habits to deliver relevant advertisements and measure campaign effectiveness. We only use these cookies with your consent.

7.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling certain cookies may affect your ability to use some features of our website. To manage cookies, access your browser settings and select your preferences for accepting, blocking, or deleting cookies. You can also use third-party tools to opt out of targeted advertising.

8. International Data Transfers

api500 primarily operates in Indonesia and stores data within Indonesian data centers. However, some of our service providers and technology partners may be located outside Indonesia, which means your personal information may be transferred to, stored in, or processed in other countries.

When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information, such as standard contractual clauses approved by relevant data protection authorities, adequacy decisions recognizing equivalent data protection standards, or your explicit consent. We require all third parties to implement equivalent security measures to protect your personal information.

9. Children's Privacy

api500 services are intended exclusively for individuals who are twenty-one (21) years of age or older. We do not knowingly collect personal information from anyone under the age of 21. Our registration process includes age verification steps to prevent underage access.

If we become aware that we have inadvertently collected personal information from someone under 21 years of age, we will take immediate steps to delete that information from our systems and close the associated account. If you believe we have collected information from a minor, please contact us immediately at [email protected].

10. Changes to This Privacy Policy

api500 may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will notify you by updating the "Last Updated" date at the top of this document and by sending you an email to the address associated with your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of api500 services after any changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the updated Privacy Policy, you must stop using our services and close your account.

11. Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Data Protection Officer:

We take all privacy concerns seriously and will investigate any complaints or inquiries promptly. We aim to respond to all privacy-related communications within seven (7) business days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant Indonesian data protection authority.