apigacor Privacy Policy

This Privacy Policy ("Policy") is issued by apigacor ("we", "us", "our", or "the Company"), the operator of the online gaming and sports betting platform accessible at https://apigacor.cam ("the Platform"). This Policy governs the collection, use, storage, disclosure, and protection of personal data belonging to registered players and visitors ("you", "the User", or "the Player") in connection with your access to and use of the Platform.

apigacor is committed to protecting the privacy and confidentiality of all personal information entrusted to us. This Policy has been prepared in accordance with applicable data protection principles and reflects our obligation to handle your data lawfully, fairly, and transparently.

This Policy forms part of your overall agreement with apigacor and must be read alongside our Terms & Conditions and our Responsible Gambling Policy. By registering an account, continuing to use the Platform, or otherwise submitting personal information to us, you acknowledge that you have read and understood this Policy.

For the purposes of this Policy, the following terms carry the meanings set out below unless context otherwise requires:

• "Account" — the individual player account created and maintained on the Platform following successful registration.
• "Cookie" — a small data file placed on your device by the Platform server for session management, analytics, or security purposes.
• "Data Controller" — apigacor, the entity that determines the purposes and means by which personal data is processed.
• "Data Subject" — any identifiable natural person whose personal data is collected or processed by apigacor, including registered players and website visitors.
• "Personal Data" — any information that directly or indirectly identifies a natural person, including name, identification number, contact details, financial information, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, erasure, or any combination thereof.
• "Third Party" — any individual or entity other than apigacor and the Data Subject, including payment processors, game content providers, and identity verification services.
• "KYC" — Know Your Customer, the identity and age verification process required prior to withdrawal processing and in response to specific account activity.

apigacor collects personal data only to the extent necessary for the lawful operation of the Platform and fulfilment of our obligations to you. The categories of personal data we may collect include the following:

apigacor collects personal data through the following channels:

• Direct collection from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to promotional offers, or submit any form on the Platform.
• Automated technical collection: Through server logs, cookies, and similar technologies that record your device and session information when you access the Platform. This includes IP addresses, browser identifiers, and page interaction data.
• Payment processor data: When you initiate a deposit or withdrawal via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or USDT TRC20, our payment processor partners may return transaction reference data to us to confirm the status of your transaction.
• Identity verification providers: Where third-party KYC services are used to verify the authenticity of identity documents or to screen against regulatory watchlists, those providers may return verification outcome data to apigacor.
• Fraud prevention services: Aggregated risk signals and device fingerprinting data provided by fraud prevention partners to help us detect and prevent account compromise and financial crime.

apigacor processes your personal data only where a lawful basis exists for doing so. The legal bases on which we rely are as follows:

• Contractual necessity: Processing required to fulfil our obligations under the account agreement with you — including account creation, transaction processing, KYC verification, bonus administration, and customer support.
• Compliance with legal obligations: Processing necessary to comply with applicable anti-money-laundering (AML) requirements, counter-terrorism financing (CTF) regulations, and other mandatory regulatory reporting obligations.
• Legitimate interests: Processing conducted for apigacor's legitimate operational interests where those interests are not overridden by your fundamental rights — including fraud detection, platform security, responsible gambling monitoring, and service improvement analytics.
• Consent: Where we send you optional marketing communications or deploy non-essential cookies, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

Personal data collected by apigacor is used for the following specific purposes:

• To create, verify, and manage your player Account on the Platform.
• To process deposits and withdrawals via your chosen payment methods, including Touch 'n Go eWallet, Boost, DuitNow, FPX, and cryptocurrency channels, and to maintain accurate transaction records in MYR.
• To conduct KYC and age verification as required prior to withdrawal processing and in response to elevated-risk account activity flags.
• To administer bonus offers, VIP tier progression, birthday bonuses, and referral rewards in accordance with applicable promotion terms.
• To detect, investigate, and prevent fraud, collusion, money laundering, account compromise, and other prohibited conduct as defined in our Terms & Conditions.
• To monitor for responsible gambling indicators and to contact players showing patterns associated with problematic gaming behaviour, in line with our Responsible Gambling Policy.
• To respond to customer support enquiries, live chat conversations, and formal complaints.
• To send transactional communications such as deposit confirmation, withdrawal status updates, and account security notifications.
• To send optional promotional communications where you have consented to receive them and have not subsequently opted out.
• To analyse platform usage patterns and improve the performance, layout, and features of the Platform.
• To comply with applicable legal and regulatory obligations including reporting requirements.

apigacor does not sell, rent, or commercially transfer your personal data to any third party. Your information is shared only in the following limited and controlled circumstances:

• Payment processors: Financial data necessary to process your deposit or withdrawal is transmitted to the relevant payment provider (such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency network providers). These providers operate under their own data protection obligations and are permitted to use your data only for transaction processing purposes.
• KYC and identity verification partners: Identity document data submitted for KYC purposes is shared with our designated verification service provider solely to confirm document authenticity and confirm your identity.
• Fraud prevention services: Limited technical identifiers may be shared with fraud detection partners to assess account risk signals. These partners are contractually prohibited from using this data for any purpose other than fraud prevention services for apigacor.
• Game content providers: Where games are provided by third-party studios, your Account identifier and wagering activity within those games may be shared with the respective provider for the sole purpose of game delivery and fair play audit.
• Legal and regulatory authorities: Where required by applicable law, court order, regulatory mandate, or anti-money-laundering reporting obligation, apigacor may disclose personal data to competent authorities. We will notify you of such disclosure where legally permitted to do so.

apigacor retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our general retention principles are as follows:

• Active account data — retained for the duration of the active account relationship and for a period of five (5) years following voluntary account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction records — retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping obligations.
• KYC documents — retained for a minimum of five (5) years from the date of verification, or longer if required by applicable regulatory authority.
• Customer support communications — retained for two (2) years from the date of the last interaction, unless the communication relates to an open dispute or regulatory matter.
• Marketing consent records — retained for the duration of the consent and for a reasonable period thereafter as evidence of the consent granted.
• Technical and device logs — retained for ninety (90) days unless they are linked to an ongoing security investigation or fraud inquiry.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. You may request early deletion of your data in accordance with your rights set out in Section 11 of this Policy, subject to our legal retention obligations.

apigacor implements a layered information security programme to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive personal data and payment information at rest.
• Two-factor authentication (2FA) options available to all registered players for account access.
• Role-based access controls limiting internal staff access to personal data strictly to personnel with a legitimate operational need.
• Regular security assessments and penetration testing conducted by independent third-party specialists.
• Incident response procedures to detect, contain, and remediate data security events, including notification obligations where a material breach affecting your data occurs.

Notwithstanding the foregoing, no security system is impenetrable. While apigacor takes all reasonable precautions to protect your data, we cannot guarantee absolute security against all possible threat vectors. You are responsible for maintaining the security of your account credentials and for notifying us promptly of any suspected unauthorised account access.

apigacor uses cookies and similar tracking technologies on the Platform for the following limited purposes:

• Strictly necessary cookies: Required for the Platform to function — including session management, login state maintenance, and security token handling. These cannot be disabled without preventing Platform access.
• Performance and analytics cookies: Used to collect anonymised data on how users navigate the Platform — including page views, session durations, and feature interactions — to allow us to identify performance bottlenecks and improve user experience.
• Security cookies: Used to detect and prevent fraudulent activity, including abnormal navigation patterns and automated bot access attempts.

You may configure your browser to refuse or delete cookies. Please be aware that disabling strictly necessary cookies will impair or prevent your ability to access the Platform. Instructions for managing cookie settings are available in your browser's help documentation.

As a Data Subject, you hold the following rights in respect of your personal data held by apigacor. Requests to exercise any of these rights should be submitted to [email protected] with the subject line "Privacy Rights Request" and your registered account username.

apigacor will respond to all valid privacy rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves multiple data categories, we may extend this period by a further thirty (30) days with written notification of the extension. We will not charge a fee for handling rights requests unless they are manifestly unfounded or excessive.

The apigacor Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of our KYC process, and access to gambling features is restricted pending successful age confirmation.

If we become aware that personal data has been submitted by or on behalf of a person under the age of 21, we will immediately suspend the associated account, delete the personal data, and reverse any financial transactions associated with that account to the extent technically possible. Parents or guardians who believe a minor may have accessed apigacor are encouraged to contact us immediately at [email protected].

apigacor reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing activities, or platform features. All revisions will be published on this page with an updated effective date.

Where amendments are material in nature — for example, where we introduce a new category of data collection or a new third-party data sharing arrangement — we will provide advance notice through a platform announcement or email notification to your registered address where practicable.

Your continued use of the Platform following publication of an amended Policy constitutes your acceptance of the revised terms. If you object to any amendment, you should discontinue use of the Platform and contact us to request voluntary account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which apigacor processes your personal data, please contact us through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week, directly on the Platform. Average response time is under 2 minutes. This is the fastest channel for general privacy enquiries.
• Email: [email protected] — responses within 4 hours under normal operational conditions. For formal privacy rights requests, please use the subject line "Privacy Rights Request" and include your registered account username.

Our support team provides English-language assistance and serves Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions at all times.