Api288 is committed to protecting the privacy and personal data of every user. This document clearly explains how we collect, use, store, and safeguard your information.
Our Commitment
Six pillars of data protection we practise to keep your personal information safe at all times.
All data transmitted between your device and api288 servers is protected with industry-standard 256-bit SSL encryption, ensuring your information cannot be intercepted by unauthorized parties.
Your personal data is stored on servers protected by multi-layered firewalls, strict access controls, and 24-hour monitoring systems. Only authorised personnel may access this information.
You have the full right to access, amend, or request the deletion of your personal data. api288 provides a control panel that makes it easy to manage your account privacy settings at any time.
Api288 has never and will never sell your personal data to any third party for marketing purposes. Your information is used only for the purposes clearly stated in this Privacy Policy.
We provide clear notice about the use of cookies on the api288 platform. You can manage your cookie settings through your web browser or account settings panel, including choosing to decline non-essential cookies.
In the event of any data breach affecting your information, api288 is committed to notifying affected users within 72 hours and taking immediate action to contain the damage.
This Privacy Policy is issued by api288, an online gaming platform operating in Malaysia under the domain api288.fun. We understand that your trust is our most valuable asset, and protecting your personal data is our primary responsibility.
This document explains in detail how api288 collects, processes, stores, shares, and protects your personal information when you use our platform — whether through the website, mobile app, or any of our other service channels. By using the api288 platform, you agree to the practices described in this Privacy Policy.
This Privacy Policy applies to all users who register, browse, or interact with the api288 platform, including slot games, sports, bingo, and all other products available under the api288 brand. It should be read together with Terms and Conditions and Responsible Gaming Policy us.
This Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices for the protection of online users' data.
Api288 collects various types of information to ensure our platform operates securely, smoothly, and in line with user needs. The following are the main categories of data we collect:
A. Information You Provide Directly
B. Automatically Collected Information
| Data Type | Purpose of Collection | Retention Period |
|---|---|---|
| Identity Data | Account verification, KYC compliance | 7 years after account closure |
| Financial Data | Payment processing, financial audits | 7 years (legal requirement) |
| Gaming Data | Result verification, dispute resolution | 5 years after transaction |
| Technical Data | Security, platform improvements | 12 rolling months |
| Communication Data | Customer support, complaint records | 3 years after resolution |
Api288 uses the personal data collected solely for legitimate purposes related to the provision of our platform services. The following are the primary purposes for which your data is used:
Important: api288 does not use your personal data to make automated decisions that affect your legal rights without human intervention. Any action taken on your account involves review by our team.
Api288 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are limited situations where we need to share certain information with trusted third parties:
All third parties that receive api288 user data are bound by data protection agreements and are required to comply with security standards equal to or exceeding those we apply ourselves.
Api288 uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and analyze platform usage. Cookies are small text files stored on your device when you visit our website.
Below are the types of cookies we use:
You can manage your cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality or security of the api288 platform.
The security of your personal data is api288's highest priority. We implement multiple layers of technical and organisational protection to ensure your data remains safe at all times:
The api288 security infrastructure is independently audited and complies with ISO 27001 standards for information security management, giving you confidence that your data is handled in accordance with global best practices.
Api288 retains your personal data only for as long as necessary to fulfill the original purpose of collection, or as required by applicable Malaysian law. When data is no longer needed, it will be securely deleted or anonymized in accordance with industry-standard procedures.
The key data retention period guidelines are as stated in the table in Section 2. In general:
When your account is closed at your own request, api288 will initiate the data deletion or anonymisation process within 30 days, subject to applicable legal retention obligations.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and data protection best practices, you have the following rights regarding your personal data held by api288:
Request a copy of all personal data we hold about you in a readable format.
Request correction of any inaccurate or incomplete data.
Request deletion of your personal data, subject to legal retention requirements.
Object to the processing of your data for direct marketing purposes at any time.
Receive your data in a structured format that can be transferred to another platform.
Request restriction of your data processing under certain specified circumstances.
To exercise any of the above rights, please contact the api288 Data Protection Officer (DPO) team via our support email. We will process your request within 30 days of receipt, and may require identity verification before the request is fulfilled.
The api288 platform is an online gaming service exclusively for adult users aged 18 years and above. api288 does not intentionally collect, process, or store any personal data from individuals under the age of 18.
Strict Warning: If api288 discovers or is notified that personal information of a child has been collected without parental or guardian consent, we will promptly delete that information and close the account in question. Parents or guardians who find that their child has registered on our platform are encouraged to contact our support team immediately.
Api288 employs multi-layered age verification technology including date-of-birth checks during registration, identity document verification during the KYC process, and continuous monitoring to detect suspicious usage patterns that may indicate underage access.
Api288 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. Any significant amendments will be communicated to registered users via:
We encourage you to review this page periodically, at least once every few months, to stay informed about how api288 manages your personal data. Continued use of the platform after any changes take effect constitutes your acceptance of the updated Privacy Policy.
The current version of this Privacy Policy takes effect from 1 January 2026. It supersedes all previous versions published by api288.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how api288 handles your personal data, please contact our Data Protection Officer (DPO). Our team is available to assist you 24 hours a day, 7 days a week in both Malay and English.
You can reach us via:
We are committed to responding to all privacy-related inquiries within 5 working days. For more complex requests such as data access or deletion, the processing period is up to 30 working days.