Privacy Policy

1. Introduction

apg99 is committed to protecting the privacy and personal data of every player who uses our platform. As an online gaming operator serving the Indonesian market, we recognize that you are entrusting us with sensitive financial and personal information, and we take that responsibility seriously. This Policy describes our data practices in plain, transparent terms so you always know exactly how your information is handled.

This Policy applies to all personal data collected through the apg99 website at https://apg99.cam, our mobile-optimized platform, customer support channels (including live chat, email, and WhatsApp), and any other touchpoints through which you interact with apg99. It does not apply to third-party websites or services that may be linked to or from our platform.

We encourage you to read this Policy carefully alongside our Terms & Conditions. If you have any questions about our data practices, please contact us using the details provided in Section 15.

2. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, email address, phone number, bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, or deletion.
• "Data Controller" means apg99, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of apg99 under a data processing agreement.
• "KYC" (Know Your Customer) means the identity verification process used to confirm a Player's age, identity, and payment method ownership, as required for account management and withdrawal processing.
• "Cookies" means small text files placed on your device by the apg99 platform to enable essential functionality and collect anonymized usage analytics.
• "IDR" means Indonesian Rupiah (Rp), the currency in which all apg99 transactions are conducted.

3. Data We Collect

apg99 collects the following categories of personal data. We collect only what is necessary for the stated purpose and do not maintain excessive data holdings.

apg99 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond KYC photo ID), or health data, unless specifically required by law or with your explicit consent.

4. How We Collect Your Data

4.1 Data You Provide Directly

Most of the personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to surveys, or participate in promotional activities.

4.2 Data Collected Automatically

When you access the apg99 platform, our servers automatically collect certain technical data including your IP address, browser user-agent string, the pages you visit, the duration of your sessions, and the device you use to connect. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 10.

4.3 Data from Third Parties

We may receive limited personal data from third-party payment processors (such as your bank or e-wallet provider) to verify the source of deposits and confirm the identity of withdrawal recipients. We may also receive data from identity verification service providers engaged to support our KYC process. Any third party that shares data with us is contractually required to have lawful authority to do so.

5. Purpose & Legal Basis for Processing

apg99 processes your personal data only where a valid legal basis exists. The following table summarizes our processing activities and their corresponding legal bases:

Where we rely on your consent as the legal basis for processing (for example, to send promotional emails or SMS messages), you may withdraw that consent at any time by contacting support or updating your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Data

apg99 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. We share your data only in the following limited circumstances:

6.1 Payment Processors

To process deposits and withdrawals, we share the minimum necessary financial information with your chosen payment provider — such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja. Each payment provider operates under its own privacy policy and is independently responsible for data it holds.

6.2 Identity Verification Partners

To fulfill our KYC obligations, we may share your identity documents and biographical data with accredited third-party identity verification service providers. These providers are contractually bound to process your data solely for the purpose of identity verification and may not use it for any other purpose.

6.3 Technology Service Providers

We engage technology partners — including cloud hosting providers, database administrators, fraud detection systems, and customer support platform providers — who may access personal data in the course of providing services to apg99. All such providers are engaged under data processing agreements that restrict their use of your data to the specific services contracted.

6.4 Legal and Regulatory Disclosures

We may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, lawful order, or legal process. In such cases, we will disclose only the data specifically requested and will notify you where legally permitted to do so.

6.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of apg99's assets, your personal data may be transferred to the successor entity. We will provide notice of any such transfer and the new entity will be required to honor the commitments made in this Policy.

7. International Data Transfers

apg99 primarily stores and processes data on servers located in secure data centers with strong data protection standards. In some cases, data may be transferred to and processed in countries outside Indonesia, for example when engaging cloud infrastructure providers or identity verification partners with global operations.

Wherever international data transfers occur, apg99 ensures that appropriate safeguards are in place — including contractual data transfer agreements based on internationally recognized standard contractual clauses — to provide a level of protection for your personal data equivalent to that described in this Policy. By using the apg99 platform, you acknowledge and consent to such international transfers where necessary for service delivery.

8. Data Retention

apg99 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our standard retention periods are as follows:

• Active account data: Retained for the full duration your account remains active on the platform.
• Closed account data: Retained for up to 24 months following account closure, after which it is securely deleted or irreversibly anonymized.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in line with standard financial record-keeping obligations applicable to online gaming operators.
• KYC documents: Retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Customer support communications: Retained for 2 years from the date of the last interaction, to support dispute resolution and quality assurance.
• Technical and server log data: Retained for up to 12 months from the date of collection, then automatically purged.

When retention periods expire, personal data is securely deleted, destroyed, or anonymized in accordance with our internal data disposal procedures. Anonymized data (which can no longer identify you) may be retained indefinitely for statistical and analytics purposes.

9. Security Measures

apg99 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the apg99 platform
• AES-256 encryption for sensitive data stored in our databases, including financial information and identity documents
• Two-factor authentication (2FA) options available for account login to prevent unauthorized access
• Role-based access controls ensuring that staff access to personal data is limited strictly to those with a legitimate operational need
• Regular security audits and penetration testing conducted by qualified third-party security professionals
• Intrusion detection systems and real-time monitoring to identify and respond to threats promptly
• Secure data centers with physical access controls, redundant power supplies, and environmental safeguards

While we take every reasonable precaution to protect your data, no method of electronic transmission or storage is completely immune to risk. We strongly encourage you to use a strong, unique password for your apg99 account and to enable two-factor authentication. If you suspect your account has been compromised, contact our support team immediately at [email protected].

10. Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the apg99 platform. They allow the platform to recognize your device across sessions, maintain your login state, and collect anonymized usage data to improve the service.

10.2 Cookies We Use

10.3 Managing Cookies

You may manage or disable cookies at any time through your browser settings. Please note that disabling essential cookies may impair the functionality of the apg99 platform, including your ability to log in and maintain an active session. Disabling analytics or functional cookies will not affect your ability to play or transact on the platform.

apg99 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on its platform.

11. Your Privacy Rights

As a user of the apg99 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team using the details in Section 15. We will respond to verified requests within 14 business days.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that we temporarily cease active processing of your personal data while a complaint or correction request is under review.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.

Please note that exercising certain rights — such as requesting erasure of your account data — may require us to close your account, as we cannot maintain an active account without the minimum personal data necessary to operate it securely and lawfully.

12. Minors

The apg99 platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. Registration is subject to age verification, and we reserve the right to request identity documents confirming date of birth at any stage of the account lifecycle.

If we become aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on our platform, please notify us immediately at [email protected] so we can investigate and act accordingly.

13. Third-Party Links

The apg99 platform may contain references to third-party services, including game studios (such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Pocket Games Soft) and payment providers. While we take care to partner only with reputable organizations, apg99 is not responsible for the privacy practices of any third party and this Policy does not apply to external websites or services.

We encourage you to review the privacy policies of any third-party services you interact with through or in connection with the apg99 platform. If you access a third-party service via a link on our platform, you do so at your own risk and under that third party's terms.

14. Changes to This Privacy Policy

apg99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via a prominent notice on the platform and, where practicable, by email to your registered address at least 7 days before the changes take effect.

The effective date at the top of this Policy will be updated each time a revision is published. We encourage you to review this Policy periodically so you remain informed about how we protect your personal data. Your continued use of the apg99 platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the revised terms, you must cease using the platform and may request account closure by contacting support.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact the apg99 Privacy Team using any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the chat interface on the platform
• WhatsApp: +62 812-3456-7890 (plain text — not a clickable link), available 08:00–24:00 WIB

For data access, rectification, erasure, or portability requests, please include your registered account email address and a brief description of your request. We will acknowledge receipt within 2 business days and complete our response within 14 business days of identity verification.

For further details on our platform rules, please review our Terms & Conditions and our Responsible Gaming policy. Common questions are also addressed on our FAQ page.