Your privacy matters to apo338. This Privacy Policy explains precisely what personal data we collect from members across Indonesia, how that data is used, who it may be shared with, and the rights you hold over your information at all times.
Your Data, Your Rights: This Privacy Policy forms part of the apo338 Terms & Conditions and is incorporated therein by reference. By registering a Member Account or otherwise using the apo338 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
apo338 is committed to protecting the privacy and personal data of every individual who interacts with our Platform, whether as a registered Member, a visitor browsing our website, or a person contacting our support team. This Privacy Policy has been drafted in accordance with internationally recognised data protection principles and is designed to be transparent, clear, and easy to navigate.
We understand that our members across Jakarta, Surabaya, Medan, Bandung, Bali, and throughout Indonesia trust us with sensitive personal and financial information. That trust is something we take seriously. We collect only the data that is genuinely necessary to deliver our services, protect the integrity of our platform, and comply with applicable legal obligations. We do not sell your personal data, and we never will.
This policy covers all personal data processed in connection with the apo338 website at https://apo338.bet, including all associated pages, interfaces, mobile-optimised views, live chat interactions, and email communications.
For the purposes of this Privacy Policy, the data controller — that is, the entity that determines the purposes for which and the means by which your personal data is processed — is apo338, operating through its internationally licensed gaming entity. Correspondence regarding data protection matters should be directed to the contact details set out in Section 16 of this policy.
apo338 has appointed a designated Data Protection point of contact responsible for overseeing compliance with this policy and for handling data subject rights requests, complaints, and enquiries. You may reach this contact via the support channels described in Section 16.
The categories of personal data apo338 may collect about you are set out in the table below. Not all data categories apply to every interaction — the data collected depends on how you engage with the Platform.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, gender, national ID number, passport number, KTP/SIM scan | Account registration, KYC verification, age verification, fraud prevention |
| Contact Data | Email address, mobile phone number, residential address, city (e.g., Jakarta, Surabaya, Bandung) | Account communications, transaction notifications, support interactions |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records | Payment processing, anti-money laundering (AML) compliance, withdrawal verification |
| Account Data | Username, encrypted password hash, account balance, bet history, game session records, bonus redemption history, responsible gaming settings | Service delivery, account management, dispute resolution, responsible gaming tools |
| Technical Data | IP address, device fingerprint, browser type and version, operating system, screen resolution, time zone (WIB/WITA/WIT), session timestamps | Security monitoring, fraud detection, platform optimisation, regulatory compliance |
| Usage Data | Pages visited, games played, betting patterns, click paths, session duration, search queries on platform | Service improvement, personalisation, responsible gaming monitoring |
| Marketing Data | Promotion preferences, communication opt-in/opt-out status, bonus campaign engagement | Targeted promotions, seasonal campaigns (e.g., Idul Fitri, Ramadhan), preference management |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Support delivery, dispute resolution, quality assurance, staff training |
Minimisation Principle: apo338 applies strict data minimisation practices. We collect only the data categories that are demonstrably necessary for the specific purposes listed above. We do not collect data speculatively or for undefined future uses.
apo338 collects personal data through the following channels:
You provide data to us directly when you: register a Member Account; complete the KYC identity verification process; make a deposit or request a withdrawal via a local Indonesian payment method; contact our support team via live chat or email; respond to a promotion or complete a bonus claim form; update your account profile or responsible gaming settings.
When you access the apo338 Platform, our systems automatically collect Technical Data and Usage Data through server logs, cookies, and similar tracking technologies. This includes your IP address, the device and browser you are using, the pages you visit, and the duration of your session. This data collection is necessary for the secure operation of the Platform and for fraud detection purposes.
We may receive data about you from third parties in limited circumstances, including: identity verification providers who assist with our KYC process; payment processors and Indonesian banking institutions that facilitate your deposits and withdrawals; fraud prevention and AML screening services; and analytics providers operating under strict data processing agreements with apo338.
apo338 processes your personal data only where a recognised lawful basis exists. The primary lawful bases we rely upon are as follows:
The personal data apo338 collects is used for the following purposes:
To create and manage your Member Account; to verify your identity and age (21+ requirement); to process deposits and withdrawals through your chosen Indonesian payment method (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others); to provide access to all Platform games and betting markets; and to deliver live customer support in Indonesian and English 24/7.
To detect and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited activities. apo338 uses automated risk-scoring systems and manual review processes to analyse account behaviour and flag anomalies for investigation. Where fraud is confirmed, we may share relevant data with law enforcement authorities or our licensing body.
To fulfil our obligations under our international gaming licence, including maintaining KYC records, conducting AML screening, filing required reports, and cooperating with any lawful regulatory or law enforcement request for information.
To monitor betting and deposit patterns that may indicate problem gambling behaviour; to administer self-exclusion requests, deposit limits, cooling-off periods, and session time alerts; and to suppress marketing communications to self-excluded Members as required.
Where you have given your consent, to send you personalised promotional offers, bonus notifications, seasonal campaigns (such as Idul Fitri, Ramadhan, and Indonesian Independence Day specials), and platform news. You may opt out of marketing communications at any time by contacting our support team or adjusting your account notification settings.
To analyse aggregated usage data in order to improve Platform performance, user experience, game selection, and the quality of our support service. Where data is used for analytical purposes, it is aggregated and de-identified wherever possible.
apo338 does not sell, rent, or trade your personal data to any third party. We disclose personal data only in the following limited circumstances:
No Data Sales: apo338 has never sold Member personal data and will never do so. Any third-party access to your data is strictly limited, contractually controlled, and purpose-specific.
apo338 operates as an internationally licensed platform, and some of our service providers and infrastructure partners are located in jurisdictions outside Indonesia. As a result, your personal data may be transferred to and processed in countries other than your country of residence.
Where such international transfers occur, apo338 ensures that appropriate safeguards are in place to protect your data. These safeguards may include: standard contractual clauses approved by recognised data protection authorities; binding corporate rules for intra-group transfers; or transfers to jurisdictions that maintain an adequate level of data protection as recognised by relevant international standards.
By using the apo338 Platform, you acknowledge and consent to these international data transfers, subject always to the protections described in this policy.
apo338 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention guidelines apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | AML regulatory requirement |
| Financial transaction records | 7 years after each transaction | Financial record-keeping obligations |
| Account & betting history | Duration of membership + 5 years | Dispute resolution, regulatory audit |
| Support communications | 3 years after last interaction | Quality assurance, dispute evidence |
| Marketing preferences | Until consent withdrawn or account closed | Consent management |
| Technical / log data | 13 months rolling | Security monitoring, fraud detection |
| Self-exclusion records | Permanently | Responsible gaming obligation — prevents re-registration during exclusion period |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.
apo338 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security controls include:
Your Responsibilities: While apo338 maintains robust security controls, you also play an important role in keeping your account secure. Never share your password, use a strong and unique password for your apo338 account, and contact support immediately if you suspect your credentials have been compromised. apo338 will never ask for your password via any communication channel.
Cookies are small text files placed on your device by a website you visit. They are widely used to make websites function correctly, operate more efficiently, and to provide analytical information to website operators. apo338 uses cookies and similar technologies (such as local storage and session tokens) to deliver a functional, secure, and personalised experience on our Platform.
You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair or prevent your ability to use the apo338 Platform. For instructions on managing cookies in your browser, consult your browser's help documentation. Disabling cookies does not affect the processing of personal data collected through other means as described in this policy.
apo338 respects your rights over your personal data. Depending on your jurisdiction and the legal basis for processing, you may be entitled to exercise the following rights:
To exercise any of the above rights, please contact our data protection point of contact using the details in Section 16. We may require you to verify your identity before processing a rights request to prevent unauthorised disclosure of another person's data. We will not charge a fee for rights requests unless they are manifestly unfounded or excessive.
Response Timeframes: apo338 aims to acknowledge all data rights requests within 5 business days and to fulfill them within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further 60 days, in which case we will notify you of the extension within the initial 30-day period.
The apo338 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. All registration applicants are required to confirm their age at the point of registration and to provide government-issued proof of age as part of the KYC verification process.
If apo338 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, permanently delete all personal data collected in relation to that individual, and forfeit any Account Balance in accordance with our Terms & Conditions.
Parents or guardians who believe their child has registered an account with apo338 are encouraged to contact our support team immediately so that the account can be investigated and closed without delay.
The apo338 Platform may contain references to third-party services, payment providers (such as BCA internet banking, OVO, or DANA), and game studio interfaces. This Privacy Policy applies exclusively to personal data processed by apo338 in connection with the Platform. apo338 is not responsible for the privacy practices of any third-party service you access in connection with using our Platform, and we encourage you to review the privacy policies of any third-party service you engage with.
Our certified game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — operate their game engines within the apo338 environment under strict technical integration agreements. They do not independently receive or process your personally identifiable information.
apo338 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When material changes are made, we will update the "Last updated" date at the top of this page and, where required, notify active Members via the Platform's internal notification system or via email to your registered account address.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of the apo338 Platform following the publication of any amended Privacy Policy constitutes your acceptance of the changes. If you do not agree with any changes to this policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the apo338 Data Protection team through the following channels:
To ensure the security of your data, all formal data rights requests must be submitted with sufficient information to verify your identity. We may request a copy of a government-issued photo ID before processing access, rectification, or erasure requests.
Six core commitments that define how we handle your personal data on the apo338 Platform.
Every byte of data exchanged between your device and apo338 is secured by 256-bit SSL/TLS encryption — the same standard used by BCA, Mandiri, and Indonesia's top banking institutions.
apo338 does not and will never sell your personal data to advertisers, data brokers, or any third party. Your data exists solely to deliver and improve our service to you.
You retain the right to access, correct, delete, and port your personal data at any time. Submit a request to our support team and we will respond within 30 calendar days.
Promotional communications — including Idul Fitri bonuses, Ramadhan specials, and reload campaigns — are only sent where you have explicitly opted in. Opt out at any time, instantly.
We publish exactly how long we keep each category of your data and why. When the retention period expires, data is securely deleted or anonymised — no indefinite data hoarding.
Our Indonesian-speaking support team is available around the clock to handle privacy enquiries and data rights requests. Average first-response time via live chat: under 60 seconds.
You've reviewed how apo338 keeps your data safe. Now explore everything our platform has to offer — from live casino tables and slot gacor (high-payout slots) to sportsbook betting on BRI Liga 1, the EPL, and beyond.