Privacy Policy

This Privacy Policy ("Policy") describes how api69 ("we", "us", "our") collects, processes, stores, and discloses personal data in connection with the operation of the api69 online casino and sportsbook platform accessible at https://api69.pro (the "Platform"). It applies to all individuals who visit, register on, or use any service provided through the Platform ("you", "Member").

api69 is committed to handling personal data responsibly and in a manner consistent with internationally recognized data protection principles. We operate primarily in the Indonesian market, serving players across Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, Yogyakarta, and throughout the archipelago. Our data practices reflect the expectations of both our members and the broader international regulatory environment within which we are licensed.

By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

For the purposes of this Policy, the data controller responsible for your personal data is the entity operating the api69 Platform, licensed and regulated internationally. The controller determines the purposes and means by which your personal data is processed and is accountable for ensuring that processing activities comply with applicable data protection standards.

All inquiries regarding the processing of personal data, including requests to exercise your data rights, should be directed to the api69 Data Protection contact at support@api69.pro. This email address is for plain-text communication only — please do not send sensitive documents (such as identity cards) via email without first confirming a secure submission channel with our support team.

api69 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and in limited circumstances from trusted third-party sources such as payment processors and fraud prevention services. The categories of personal data we collect are set out in the table below.

api69 does not knowingly collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes (i.e., a facial photograph matched against a government ID during KYC).

api69 processes personal data for the following specific purposes. We process only the minimum data necessary for each purpose and do not use personal data for any purpose that is materially incompatible with those stated below.

• Account creation and management: To register your account, verify your identity through KYC, maintain your member profile, and provide access to all Platform services.
• Financial transaction processing: To process deposits and withdrawals in Indonesian Rupiah (IDR) via your nominated bank account (BCA, BRI, BNI, Mandiri, or others) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), to reconcile balances, and to maintain accurate financial records.
• Game provision and integrity: To deliver casino games, live dealer tables, sportsbook markets, and specialty game categories; to record game outcomes for dispute resolution; and to detect and prevent cheating, collusion, and use of prohibited software.
• Regulatory compliance and AML: To comply with anti-money-laundering (AML) obligations, perform sanctions screening, maintain mandatory transaction records, and respond to lawful requests from regulatory authorities.
• Responsible gaming: To monitor gaming behavior for signs of problem gambling, to enforce voluntary deposit limits and self-exclusion requests, and to provide access to responsible gaming resources as detailed in our Responsible Gaming Policy.
• Customer support: To respond to inquiries, resolve complaints, and provide technical assistance through live chat and email in a timely manner.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent account activity, unauthorized access, bonus abuse, and any other conduct that violates our Terms & Conditions.
• Platform improvement: To analyze aggregated usage patterns, improve the user experience, test new features, and optimize Platform performance — always using anonymized or pseudonymized data where feasible.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or sportsbook markets — but only where you have provided explicit consent. You may opt out at any time without affecting your account status.

api69 processes personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Performance of a contract: Processing that is necessary to provide the services you have requested — including account management, game provision, and payment processing — is carried out on the basis that it is necessary for the performance of the contract between you and api69.
• Legal obligation: Processing required to comply with applicable laws — including KYC identity verification, AML record-keeping, and responding to lawful regulatory or law enforcement requests — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, Platform security, and internal analytics is carried out on the basis of our legitimate interests, balanced against your privacy rights. We conduct proportionality assessments to ensure our legitimate interests do not override your fundamental rights.
• Consent: Processing for optional marketing communications and certain non-essential cookies is carried out on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time with no adverse effect on your account.

api69 does not sell, rent, or otherwise commercially disclose your personal data to unaffiliated third parties. We share personal data with third parties only in the following limited circumstances:

• Payment service providers: Banks and e-wallet operators (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others) receive the minimum financial data necessary to process your deposit and withdrawal transactions.
• Game content providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive technical session data (e.g., session tokens, wager amounts) to deliver and record game outcomes. These providers are contractually bound to use this data only for game operation and audit purposes.
• Identity verification and KYC providers: Third-party KYC service providers process identity documents and facial verification data on our behalf to confirm your eligibility to use the Platform. These providers operate under strict data processing agreements and are not permitted to use your data for any independent purpose.
• Fraud prevention and security partners: We share technical data (IP addresses, device fingerprints, behavioral patterns) with specialized fraud detection providers to identify and prevent unauthorized access, bonus abuse, and money laundering.
• Regulatory and law enforcement authorities: We will disclose personal data to competent authorities where required by applicable law, a court order, or a lawful regulatory request. We will notify you of any such disclosure to the extent permitted by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of the api69 business, your personal data may be transferred to the acquiring entity. We will notify you of any material change in data controller identity prior to the transfer taking effect.

The api69 Platform uses cookies and similar tracking technologies (collectively "Cookies") to deliver a functional, personalized, and secure user experience. A cookie is a small text file placed on your device by our servers when you visit the Platform.

api69 uses the following categories of Cookies:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your authenticated session, remember your language preferences, and ensure that security measures operate correctly. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: These cookies remember your preferences (such as your preferred deposit method and display settings) to provide a more convenient experience on return visits. They do not track your behavior across other websites.
• Analytics cookies: These cookies collect anonymized information about how visitors use the Platform — which pages are visited most frequently, how long sessions last, and where users navigate from. This data is used exclusively to improve Platform performance and content.
• Marketing cookies: Where you have consented, these cookies record your visit to api69 and may be used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. You may withdraw consent for marketing cookies at any time via your account settings.

You can control the use of non-essential cookies through your browser settings or through the cookie preference center accessible within your api69 account dashboard. Please note that disabling strictly necessary cookies may prevent you from accessing certain Platform features.

api69 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and identity data: Retained for a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations and to support any post-closure dispute resolution process.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with internationally recognized financial record-keeping standards.
• KYC documents: Retained for a minimum of five (5) years following KYC verification completion or account closure, whichever is later.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session, to support dispute resolution, responsible gaming monitoring, and regulatory audits.
• Support communications: Retained for two (2) years from the date of the most recent interaction, to support quality assurance and dispute resolution processes.
• Marketing consent records: Retained for the duration of the consent and for two (2) years after consent is withdrawn, as evidence of the consent having been properly obtained.
• Technical and analytics data: Anonymized or aggregated data may be retained indefinitely for statistical analysis and Platform improvement; identifiable technical data (e.g., IP logs) is retained for twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents identification of the individual to whom it related.

api69 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Transport layer security: All data exchanged between your browser or app and the api69 Platform is encrypted using TLS 1.2 or higher with 256-bit encryption, ensuring that data in transit cannot be intercepted or read by unauthorized parties.
• Data encryption at rest: Sensitive personal data stored in our databases — including identity documents, financial records, and account credentials — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to systems containing personal data is restricted to authorized personnel on a strict need-to-know basis. Multi-factor authentication (MFA) is enforced for all internal administrative access.
• Regular security audits: api69 conducts periodic penetration testing, vulnerability assessments, and security code reviews to identify and remediate potential weaknesses in our infrastructure before they can be exploited.
• Incident response: api69 maintains a documented data breach response procedure. In the event of a confirmed personal data breach that poses a risk to affected members, we will notify impacted individuals within a timeframe consistent with applicable law and best practice.

You also play an important role in keeping your account secure. We strongly recommend using a unique, strong password for your api69 account, enabling two-factor authentication where available, and never sharing your login credentials with any other person. api69 will never ask for your password via live chat, email, or any other communication channel.

As a member of the api69 Platform, you hold the following data rights. You may exercise any of these rights by contacting our support team at support@api69.pro. api69 commits to acknowledging all valid requests within five (5) business days and completing the requested action within thirty (30) calendar days.

The api69 Platform is strictly intended for adults aged 21 years and older. api69 does not knowingly collect personal data from any person under the age of 21, and registration is prohibited for individuals below this age threshold.

api69 enforces mandatory KYC age verification for all new members prior to authorizing real-money play. Where api69 discovers or reasonably suspects that an account has been registered by a person under 21 years of age, that account will be immediately suspended, all pending transactions will be cancelled, and any deposited funds may be returned to the originating payment method at api69's sole discretion.

api69 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the Platform for a reasonable period following the change.
• Where required by applicable law or where changes are particularly significant, notify registered members directly via their registered email address.

Your continued use of the api69 Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the Platform and may request account closure by contacting our support team.

We encourage all members to review this Policy periodically to stay informed of how api69 protects their personal data. The most current version of this Policy is always available at https://api69.pro/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by api69, please reach out to us through the following channels:

• Email: support@api69.pro — all privacy-related inquiries are handled by our dedicated data protection team, with responses provided within 24 hours on business days (WIB, UTC+7).
• Live chat: Available 24 hours a day, 7 days a week directly within the api69 Platform after signing in via api69 Login. Our Indonesian-speaking support agents are available at all hours, including during Idul Fitri, Nyepi, and other Indonesian public holidays.
• FAQ: Answers to common questions about data privacy, account security, and KYC verification are available at api69.pro/faq.

For formal data subject access requests or to exercise any of the rights described in Section 10 of this Policy, please submit your request in writing to support@api69.pro with the subject line "Data Rights Request" and include your registered member username and a description of your request. We may require identity verification before processing your request to protect the security of your account.