Official Documents

Privacy Policy api288 — Malaysian User Data Protection

Api288 takes your privacy seriously. This policy transparently explains how we collect, store, use, and protect your personal information every time you use our platform. We are committed to keeping your data secure and ensuring it is never misused by any party.

Updated: 1 January 2026

1. Introduction & Scope of Privacy Policy

Welcome to api288, an online entertainment platform built exclusively for Malaysian users. This Privacy Policy is our written commitment to you — explaining in detail how your personal information is handled from the moment you first access our website to the time you make your final withdrawal.

This policy applies to all users accessing the api288 platform on any device — whether a laptop, smartphone, or tablet. It covers all data collected through the api288.pro website, the official mobile app, and any support services associated with our platform.

Api288 operates in strict compliance with data protection standards. We do not sell, rent, or disclose your personal information to third parties for marketing purposes without your explicit consent. Every decision regarding the management of your data is made with your interests and security as our priority.

By using the api288 platform, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact customer support to close your account.

This Privacy Policy should be read together with Terms and Conditions api288 which forms the entire agreement between you and us. We encourage you to read both documents carefully before registering an account.

2. Types of Personal Data We Collect

Api288 only collects data that is strictly necessary to provide a safe, efficient, and regulatory-compliant service. We do not collect excessive or irrelevant data beyond the stated purposes.

2.1 Information You Provide Directly

This is data you entered directly while interacting with our platform:

Full name as per MyKad or Passport
Active email address
Malaysian mobile phone number
Identity Card Number (MyKad)
Current residential address
Date of birth
KYC Documents (MyKad / Passport image)
Bank account / digital wallet information

2.2 Automatically Collected Data

When you use the api288 platform, our systems automatically record certain technical information for security and service improvement purposes:

  • IP address and estimated location based on IP
  • Device type, operating system, and browser version
  • Login session history including date, time, and session duration
  • Gaming activity data — betting, wins, losses, and transaction history
  • Communication logs with the customer support team
  • Cookie data and device identifiers

2.3 Data from Third-Party Sources

In certain cases, we may receive information about you from trusted third-party sources, such as digital identity verification providers or financial institutions used to process your payments. This information is used solely to verify your identity and ensure the security of financial transactions.

Ensure all information you provide is accurate and up to date. Incorrect information may cause delays in processing your withdrawal and KYC verification. You are responsible for updating your information should any changes occur.

3. How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. api288 does not use your data for purposes unrelated to the services you use.

3.1 Account & Service Management

  • Processing new account registrations and verifying user identity through the KYC process
  • Managing login sessions, active sessions, and your account security
  • Processing deposits, withdrawals, and all financial transactions quickly and securely
  • Providing effective customer support via live chat and email

3.2 Security & Regulatory Compliance

  • Detecting and preventing fraud, money laundering, and other illegal activities
  • Complying with legal obligations and the requirements of relevant regulatory bodies
  • Investigating any complaints, disputes, or reported security incidents
  • Keeping the platform free from exploitation, hacking, and system abuse

3.3 User Experience Improvement

  • Analysing usage patterns to improve platform design and functionality
  • Personalising the content and promotions displayed according to your preferences
  • Testing new features and ensuring platform performance remains optimal at all times

3.4 Marketing Communications

With your consent, we send information about the latest promotions, exclusive bonuses, and special offers via email or app notifications. You may withdraw this consent at any time through your account settings or by contacting our customer support.

Api288 does not use your data to make fully automated decisions that significantly affect you without human intervention. Every important decision such as account closure or withdrawal rejection involves a manual review by our team.

4. Data Sharing & Disclosure

Api288 does not sell or rent your personal data to third parties. However, there are limited situations where we need to share your information with certain parties for legitimate operational purposes.

4.1 Approved Service Providers

We work with trusted third-party service providers to help us run our operations. These include:

  • Payment Providers — DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost for processing financial transactions
  • Identity Verification Services — Licensed KYC and digital identity verification companies
  • Game Providers — Internationally licensed gaming software companies providing game content
  • Cloud Computing Services — Secure server infrastructure and data storage

All these service providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific agreed purposes.

4.2 Legal Requirements

Api288 may be required to disclose your information to government authorities or law enforcement agencies when lawfully requested via court order, writ, or other legal process. In such situations, we will endeavour to notify you in advance unless prohibited from doing so by law.

4.3 Business Transfers

In the event of a company merger, acquisition, or asset sale, user data may be transferred as part of the business assets. We will notify you via email and a prominent notice on the website before your data is transferred and becomes subject to a different privacy policy.

Api288 NEVER shares your personal data with third-party advertisers, data brokers, or any entity without a legitimate operational need. If you receive a marketing offer claiming to be from api288 but not through our official channels, it may be a fraud attempt — please contact our support immediately.

5. Data Storage & Security

The security of your data is api288's top priority. We continuously invest in enterprise-grade security infrastructure to ensure your information is always protected against unauthorised access, data breaches, and cyber threats.

5.1 Technical Security Measures

  • 256-Bit SSL Encryption — All data transmitted between your device and our servers is protected with military-grade encryption
  • Data-at-Rest Encryption — Sensitive data such as identification card numbers and banking information is stored in encrypted form
  • Two-Factor Authentication (2FA) — An additional security layer to protect your account login
  • 24/7 Monitoring — A real-time threat detection system that monitors suspicious activity around the clock
  • Multi-Layered Firewall — Multi-layered protection against DDoS attacks and intrusion attempts
  • Periodic Security Audits — Independent security assessments conducted periodically by cybersecurity experts

5.2 Data Retention Period

Api288 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy. Generally:

  • Active account data is retained for the duration the account remains active plus 5 years after account closure
  • Financial transaction records are retained for a minimum of 7 years for legal compliance purposes
  • Customer support communication logs are retained for 2 years
  • Cookie data and web access logs are retained for 12 months

Api288's primary servers are located in Tier III-certified data centres compliant with ISO 27001. Data backups are performed automatically every day and stored at separate geographic locations to ensure service continuity.

6. Cookies & Tracking Technologies

Api288 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

6.1 Types of Cookies Used

6.2 Managing Cookie Settings

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, or block cookies from specific websites. Please note, however, that blocking essential cookies may affect certain functions of the api288 platform and prevent you from logging in to your account properly.

7. Your Rights as a User

Api288 recognises your rights over your personal data and is committed to making it easy for you to exercise those rights without unnecessary obstacles.

Your Rights Description How to Proceed
Access Rights Request a copy of all personal data we hold about you Contact customer support
Right to Rectification Request correction of inaccurate or incomplete data Account settings or support
Right to Erasure Request deletion of your personal data (subject to legal obligations) Contact customer support
Right to Restriction Request restriction of your data processing under certain circumstances Contact customer support
Right to Portability Receive your data in a machine-readable format for portability Contact customer support
Right to Object Object to data processing for direct marketing purposes Account settings or support

We will process every user rights request within 30 days from the date the request is received. In complex cases, this period may be extended by up to 60 days with notification to you.

There is no charge for exercising these rights. However, for repeated or clearly unreasonable requests, api288 reserves the right to impose a reasonable processing fee or decline the request with clear justification.

8. Children's Data Protection

Api288 is an adult entertainment platform restricted to users aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

All registration applications go through a strict age verification process. Should we discover that we have inadvertently collected personal information from underage children or minors, we will take immediate action to delete that information and close the relevant account without compensation.

If you believe that your child or someone under the age of 18 has registered an account on api288, please contact our support team immediately. We will investigate and take appropriate action within 24 business hours.

9. Third-Party Links & Services

The api288 platform may contain links or integrations with third-party services such as payment providers, game suppliers, and social media platforms. Please note that the api288 Privacy Policy applies solely to our platform.

When you click links to third-party websites or services, or use payment services such as Touch 'n Go eWallet or GrabPay, you will be subject to the privacy policy of that respective company, which may differ from ours. api288 is not responsible for the privacy practices or content of those third-party websites.

We encourage you to read and understand the privacy policy of each third-party service you use in the context of the api288 platform. If you have any doubts, do not hesitate to contact our customer support for further clarification.

10. Privacy Policy Amendments

Api288 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The "Updated" date at the top of this page will always reflect the date of the latest amendment.

10.1 Material Change Notifications

For changes deemed material — such as changes to how we collect or use your data, or changes to your rights as a user — we will notify you via:

  • An email will be sent to your registered address at least 14 days before the changes take effect
  • Prominent notifications on the api288 home page and login page
  • In-app notifications if you are using the api288 mobile app

10.2 Continued Consent

Continued use of the api288 platform after an amended Privacy Policy takes effect will be considered your acceptance of the latest version. If you do not agree with the changes made, you have the right to close your account before the amendment comes into effect.

11. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the api288 Data Protection Officer (DPO) team is ready to assist you.

You can reach us via:

  • Live Chat — Available 24 hours a day, 7 days a week via the api288 platform
  • Official Email[email protected] (response within 1–2 business days)
  • In-App Complaint Form — The "Contact Us" section in your account settings

We are committed to responding to every privacy-related enquiry within a reasonable timeframe and providing clear, satisfactory explanations. Your satisfaction and trust are api288's top priority.

The api288 support team is fluent in Malay and English, ready to help you understand your privacy rights and guide you through any process related to your personal data.

Why Your Privacy Is Safe with api288

Every layer of the api288 platform is designed to ensure your personal data remains protected, controlled, and never misused.

Military-Grade 256-Bit SSL Encryption

Every connection to the api288 platform is secured with 256-bit SSL encryption — the same level of security used by leading banks in Malaysia. Your data cannot be read by unauthorised parties even if they manage to intercept network traffic.

Tiered KYC Verification

Our identity verification process ensures that only the legitimate account owner can access and manage their account. Submitted documents are stored in a secured environment and accessible only to specifically authorised personnel.

"Need to Know" Basis Only

Internal api288 staff may only access user data relevant to the scope of their role. All data access is logged and audited regularly to prevent any misuse from within the organisation.

Real-Time Threat Monitoring

The api288 security monitoring system operates 24 hours a day, 7 days a week. Any suspicious activity on your account will trigger an immediate alert and automatic protective measures to safeguard your data and funds.

Privacy Controls at Your Fingertips

Through the api288 account settings panel, you can manage your marketing preferences, manage active sessions, change your password, and request data deletion — all in under 5 minutes without needing to contact support.

Periodic Independent Security Audits

Api288 conducts periodic independent security audits by accredited third-party cybersecurity firms. These audit reports ensure our data protection infrastructure consistently meets the latest international standards.

Your Privacy Is Protected — Play with Confidence

Register your api288 account today and enjoy a safe, fair, and fun online entertainment experience. Your data is fully protected from the moment you sign up.

By registering, you agree to the Terms and Conditions as well as our Privacy Policy. Minimum age requirement: 18 years.

Bahasa Melayu