Api77 Privacy Policy — Player Personal Data Protection

Api77 ("us", "Platform" or "api77.fun") values the privacy of every player using our services. This Privacy Policy transparently explains how we collect, process, use, and protect your personal information when you register, log in, or use any service offered through the api77 platform.

We comply with the Malaysia Personal Data Protection Act 2010 (PDPA) and all applicable related regulations. Our commitment is to ensure that every piece of data you entrust to us is handled responsibly, securely, and transparently.

This Policy applies to all personal information collected through the api77.fun website, the api77 mobile app, our customer support services, and all official communication channels. If you disagree with any part of this Privacy Policy, we advise you not to use our platform.

Api77 only collects personal data that is strictly necessary to provide you with a safe, fair, and seamless service. The data we collect can be grouped into several main categories:

We not collect your credit or debit card numbers directly. All payment processing is handled by authorized third-party payment providers with their own PCI-DSS security standards.

Api77 collects your personal information through various channels throughout your experience using our platform:

• Account Registration: When you complete the registration form, you provide basic information such as your name, email, phone number, and password.
• KYC Process: During identity verification, you upload supporting documents such as a MyKad copy and bank statement to enable your withdrawal to be processed.
• Financial Transactions: Your bank account or digital wallet details are collected when you make a deposit or submit a withdrawal request.
• Platform Usage: Our system automatically records your gaming activity, login times, pages visited, and general interactions with the platform.
• Contact Us: Every time you contact our customer support team via live chat or email, the conversation is stored for quality and security purposes.
• Cookies & Similar Technologies: Your browser automatically sends certain technical information to our servers when you visit the api77 platform.

Api77 uses your personal data solely for legitimate and stated purposes. We do not process your data for any other purpose without your prior consent. The following are the primary purposes for data use:

• Account Management: Creating, verifying, and managing your player account including security settings and personal preferences.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions related to your account securely and accurately.
• Identity Verification (KYC): Verifying your identity to comply with anti-money laundering laws and applicable financial regulations.
• Platform Security: Identifying and preventing fraud, system abuse, unauthorised access attempts, and other illegal activities.
• Customer Support: Resolving complaints, responding to enquiries, and providing effective technical support to you.
• Service Communications: Sending important account-related notifications such as transaction confirmations, security alerts, and policy updates.
• Marketing (with consent): Sending promotional offers, bonuses, and the latest game updates — only if you have consented to receive marketing communications from us.
• Platform Improvements: Analysing usage patterns on an aggregated and anonymised basis to improve platform performance, interface, and overall experience.
• Legal Compliance: Meeting legal obligations, complying with regulatory authority directives, and maintaining records as required by applicable regulations.

Api77 takes a highly cautious approach when it comes to data sharing. We does not sell and does not trade your personal information. However, in certain limited situations, we may share your data with the following parties:

• Authorised Payment Providers: To process your deposit and withdrawal transactions, the required information is shared with payment gateway providers who have signed a confidentiality agreement with api77 and comply with PCI-DSS standards.
• Game Software Providers: Live casino, slots, and sports betting game providers may receive the minimum technical information required to deliver the gaming experience to you.
• Authorities & Enforcement Agencies: We will disclose the required information if mandated by a court order, subpoena, or valid request from a competent authority.
• Identity Verification Services: Third-party KYC service providers used to verify the authenticity of your identity documents are subject to strict data protection agreements.
• Analytics Services: Non-personally identifiable technical data may be shared with analytics platforms for website performance improvement purposes.

All third parties receiving data from api77 are required to comply with data protection standards equal to or exceeding Malaysia's PDPA requirements. We are not responsible for the privacy practices of third parties that fall outside the scope of our service agreements with them.

Api77 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Strictly Necessary Cookies: These cookies are required for core platform functions such as login authentication, session management, and security. Without them, the platform cannot operate properly. These cookies cannot be disabled.
• Performance Cookies: Used to collect information about how visitors use our platform, such as the most frequently visited pages and any error messages. This information is used in aggregated form to improve the platform.
• Functional Cookies: Allows the platform to remember your preferences such as language, location, and display settings to deliver a more personalised experience.
• Marketing Cookies: Used to display relevant ads to you based on your interests and usage patterns. We only use this type of cookie with your consent.

You can manage or disable cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of some parts of the api77 platform.

Api77 does not retain your personal data longer than necessary for the purposes stated in this Privacy Policy or as required by applicable law.

• Active Account Data: Retained for the duration your account is active and up to 7 years after account closure to meet financial and tax legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction occurs, in compliance with the Companies Act requirements and anti-money laundering regulations.
• KYC Documents: Retained throughout the active account period and 5 years after account closure or the date of the last transaction, whichever is later.
• Support Chat Logs: Retained for 2 years from the date of interaction for reference and quality control purposes.
• Technical Log Data: Retained for 12 months for security and investigation purposes if required.

Once the retention period expires, your data will be securely deleted or anonymized in a manner that can no longer be linked to your identity.

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data that we hold:

Api77 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, damage, or accidental disclosure.

• Data Encryption: All data transmitted between your device and our servers is protected by SSL/TLS 256-bit encryption. Sensitive data stored on our servers is also encrypted using AES-256 standards.
• Access Control: Access to players' personal data is restricted to staff who require it to perform their duties only. All access is logged and continuously monitored.
• Two-Factor Authentication: api77's internal systems use two-factor authentication (2FA) for all staff access to players' personal data.
• Regular Security Audits: We conduct regular penetration testing and security audits by independent third parties to identify and address any system vulnerabilities.
• Staff Training: All api77 staff with access to personal data receive regular data protection and information security training.
• Incident Response Plan: api77 has a detailed incident response procedure to address any security breaches quickly and effectively.

Api77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or industry standards. Whenever we make significant changes, we will:

• Displaying a clear notice on the api77 platform home page at least 14 days before the changes take effect.
• Sending a notification to your registered email address informing you of the changes.
• Updating the "Last Updated" date at the top of this document.

Your continued use of the api77 platform after the effective date of any changes will be considered your acceptance of the amended Privacy Policy. If you do not agree to the amendments, please contact us to close your account before the changes take effect.

We encourage you to review this page regularly to stay up to date on how we protect your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you at any time.

For more information about your rights and responsibilities as an api77 player, please also read Terms and Conditions, Responsible Gaming and FAQ us.