Last Updated: 1 January 2026

Ap88 Privacy Policy – Our Commitment to Protecting Your Personal Data in Malaysia

ap88 takes every member's privacy seriously. This document clearly explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We believe transparency is the foundation of trust — and your trust is our top priority.

Contents of This Document

1
Data We CollectTypes of information collected during registration
2
How We Use Your DataPurposes for processing your personal data
3
Data SharingWhen and with whom data is shared
4
Data SecurityThe protection measures we take
5
Your RightsRight to access, correct, and delete data
6
Cookie PolicyUse of cookies and tracking technologies

Ap88's Six Privacy Commitments to You

Ap88's Privacy Policy is built on six core commitments that ensure the personal data of every Malaysian member is fully protected.

PDPA 2010 Compliance

Ap88 operates in full compliance with Malaysia's Personal Data Protection Act 2010. All data processing is carried out on a valid and clearly defined legal basis.

256-bit SSL Encryption

All data transmitted between your device and ap88's servers is encrypted using 256-bit SSL – the same security standard used by leading banking institutions.

No Sale of Data to Third Parties

Ap88 has never and will never sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes without your consent.

Right of Access & Correction

You have the right to access, amend and correct your personal data held by ap88 at any time through your account settings or by contacting support.

Right to Data Erasure

Once an account is closed and there is no legal obligation to retain the data, ap88 will securely delete or anonymise your personal data in accordance with established procedures.

Policy Change Notifications

Ap88 will notify you via email or platform notification whenever there are significant changes to this Privacy Policy, so you are always informed about how your data is handled.

Ap88 Privacy Policy – Your Complete Guide to Personal Data Protection

At ap88, we understand that your personal data is something deeply valuable and sensitive. Whether you are registering an account, making a deposit via DuitNow or Touch 'n Go eWallet, or simply browsing our platform, you are entrusting us with important information about yourself. We take that trust very seriously.

This Privacy Policy is written in plain, easy-to-understand language – not confusing legal jargon – because we want every member ap88 in Malaysia truly understand how their data is managed. This document explains what types of data we collect, why we need it, how we protect it, and what rights you have as a member regarding your personal data.

1. Personal Data We Collect

ap88 collects your personal data through several means — primarily when you register an account, use our services, or contact customer support. The following are the categories of data we collect:

Data You Provide Directly:

  • Identity information: Full name as per Malaysian identity card (MyKad), MyKad number, date of birth and gender.
  • Contact information: Malaysian mobile phone number, email address and residential address.
  • Financial information: Bank account numbers (Maybank, CIMB, RHB, Public Bank, Hong Leong Bank, and others), e-wallet numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) linked to your ap88 account.
  • KYC verification documents: MyKad copy, bank statements, or other documents requested during the identity verification process.
  • Contact: Records of correspondence and conversations with the ap88 customer support team.

Data Collected Automatically:

  • Platform usage data: Login history, betting records, deposit and withdrawal transaction history, games played, and session duration.
  • Technical data: IP address, device type, operating system, web browser type, screen resolution, and language settings.
  • Location data: General location based on IP address for region verification and security purposes.
  • Cookie data: Information collected through cookies and similar tracking technologies used on the ap88 platform (see Section 6 for more details).
Data Minimisation Principle: ap88 only collects data that is strictly necessary to provide services to you. We do not collect excessive or irrelevant data. Every category of data we collect has a clear and legitimate purpose.

2. How ap88 Uses Your Personal Data

Personal data that ap88 collected is used for the following purposes, all of which are necessary to provide a secure, fair and high-quality platform experience:

Purpose of Use Data Used Legal Basis
Ap88 account registration and management Name, phone number, email, password Contract performance
Identity verification (KYC) MyKad, supporting documents Legal obligation
Deposit and withdrawal processing Bank/e-wallet details, transaction records Contract performance
Fraud prevention and security IP address, device data, usage patterns Legitimate interest
Customer support Communication records, account information Contract performance
Legal compliance (AML/KYC) Transaction records, identity information Legal obligation
Ap88 platform improvements Usage data, feedback Legitimate interest
Promotional communications (with consent) Email, phone number Member consent

Ap88 will not use your personal data for any purpose other than those stated above without first obtaining your consent. You may withdraw consent for marketing communications at any time through your ap88 account settings or by contacting customer support.

3. Sharing of Personal Data

ap88 does not sell or transfer members' personal data to third parties for marketing purposes. However, in certain situations where it is necessary to deliver our services, your data may be shared with the following parties:

Payment Service Providers: When you make a deposit using DuitNow, FPX (Maybank2u, CIMB Clicks, RHB Online, Hong Leong Online), Touch 'n Go eWallet, GrabPay, Boost or ShopeePay, the necessary transaction information will be shared with the relevant payment processor to complete the transaction. These providers are bound by strict confidentiality agreements and payment industry security standards.

Technology Service Providers: ap88 engages third-party technical service providers for platform infrastructure, secure data storage and analytics. All such providers are subject to data processing agreements that ensure your data is protected to the same or higher standards as ap88's own.

Authorities and Regulatory Bodies: ap88 may be required to disclose your personal data to the relevant Malaysian authorities when mandated by law — for example, in financial crime investigations, anti-money laundering (AML) investigations, or pursuant to a court order. In such cases, ap88 will only disclose the minimum data necessary and will notify you where permitted to do so by law.

Data Protection Agreement: Every third party that receives ap88 members' personal data in the course of legitimate business is required to sign a Data Processing Agreement that sets out strict data protection standards, prohibits use of the data for any other purpose, and obliges them to notify ap88 promptly in the event of any security incident.

4. Data Security – How ap88 Protects Your Information

ap88 continuously invests in industry-grade information security infrastructure to ensure every member's personal data is protected against unauthorised access, loss or misuse.

Technical Security Measures:

  • 256-bit SSL Encryption: All communications between your browser or app and ap88's servers are encrypted using 256-bit TLS/SSL protocol. This means that even if someone were to intercept your connection, they would be unable to read any of the information transmitted.
  • Secure password storage: ap88 account passwords are never stored in plain text. We use a strong hashing algorithm (bcrypt) with a unique random salt for each password.
  • Two-factor authentication (2FA): ap88 offers two-factor authentication using SMS OTP as an additional layer of security during login.
  • 24/7 security monitoring: ap88's automated monitoring system detects and responds to suspicious account activity in real time — from unauthorised login attempts to unusual transaction patterns.
  • Secure data storage: Personal data is stored on secured servers in high-performance data centres with strict physical and digital access controls.
  • Regular security testing: ap88 conducts regular penetration testing and security audits to identify and address any system vulnerabilities.

Procedural Security Measures:

  • Access to ap88 members' personal data among staff is restricted on a need-to-know basis.
  • All ap88 staff who handle personal data have undergone data protection training and are bound by strict confidentiality agreements.
  • A clear security incident response procedure is in place to ensure any data breach is handled promptly and appropriately.

While ap88 takes all reasonable steps to protect your data, no security system is entirely foolproof. We encourage you to play your part in securing your account by using a strong and unique password, keeping your login credentials confidential, and enabling two-factor authentication.

5. Your Rights Regarding Personal Data at ap88

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a member ap88 have the following rights regarding your personal data:

Your Rights as an ap88 Member – Your Data Privacy

Under Malaysia's PDPA 2010, you have clearly defined rights regarding personal data held by ap88. Learn what your rights are and how to exercise them.

Right of Access

You have the right to request a copy of all personal data held by ap88 in relation to your account. Requests can be submitted by email to support@ap88-khelo.com and will be processed within 14 business days.

Right to Rectification

If you find that any personal data held by ap88 is inaccurate or outdated, you have the right to request an immediate correction. Some data can be updated directly through your account settings.

Right to Erasure

Once your data is no longer needed for the purpose it was collected and there is no legal obligation to retain it, you may request its deletion. Financial records may need to be kept for a specified period as required by law.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on ap88's legitimate interests in certain circumstances.

Data Portability Rights

You have the right to receive your personal data in a machine-readable format (such as CSV) and transfer it to another service provider, for data you have provided directly to ap88.

Right to Withdraw Consent

For data processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time through your account settings or by contacting ap88 support.

How to Exercise Your Rights: To exercise any of the above rights, submit a written request to support@ap88-khelo.com by clearly stating the right you wish to exercise and your ap88 account details. ap88 will process your request within 14 business days and may require additional identity verification before acting on it.

Ap88 Cookie Policy – What You Need to Know

Cookies are small text files stored on your device when you visit the platform ap88. Cookies help us deliver a better, more personalised, and more secure experience to every member.

Ap88 uses four different types of cookies, each serving a specific purpose. You can manage your cookie settings through your web browser, though disabling certain cookies may affect some features of the ap88 platform.

Essential Cookies Performance Cookies Functional Cookies Marketing Cookies
Types of Cookies Used by ap88

Essential Cookies (Required)

Required for core ap88 platform functions — login, session management and security. Cannot be disabled.

Performance & Analytics Cookies

Helps ap88 understand how members use the platform for improvement purposes. Data is collected in aggregate and anonymised form.

Functional Cookies

Stores your preferences such as language, display settings and login information for a smoother experience on return visits.

Marketing Cookies (with consent)

Used to display relevant ap88 promotions. Only active with your consent. Can be disabled via account settings.

Data Retention Period

Ap88 retains your personal data for as long as your account is active and for a defined period after account closure, depending on the type of data:

  • Financial transaction records: A minimum of 7 years as required under Malaysian law.
  • KYC documents: Throughout the period the account is active and for 5 years after closure.
  • Platform usage data: 2 years from the date of last activity.
  • Support communication records: 3 years from the date of communication.
  • Marketing data (with consent): Until consent is withdrawn.

Cross-Border Data Transfers

In some cases, your personal data may be processed by servers or service providers operating outside Malaysia, particularly for platform infrastructure and cloud services.

When this occurs, ap88 ensures that a level of data protection equivalent to Malaysia's PDPA standards is maintained through:

  • Data processing agreements compliant with international standards.
  • Use of certified cloud providers meeting high-grade security standards.
  • Privacy Impact Assessment conducted prior to any data transfer.

Protection of Children's Data

Platform ap88 is intended for individuals aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18. Should we discover that personal data of a minor has been collected inadvertently, such data will be deleted immediately and the relevant account will be closed.

If you believe your child or someone underage has registered an account at ap88, please contact us immediately at support@ap88-khelo.com and we will take prompt action.

Marketing Communications

By registering an ap88 account, you may receive communications relating to promotions, bonuses, and the latest offers from ap88 via SMS or email. You may opt out of marketing communications at any time by:

  • Clicking the "Unsubscribe" link in any ap88 marketing email.
  • Update your communication preferences under the "Profile" section of your ap88 account.
  • Contacting ap88 customer support by email at support@ap88-khelo.com.

Please note that unsubscribing from marketing communications will not stop important transactional communications such as deposit confirmations, withdrawal notifications and account security alerts — these are essential to the operation of your account and cannot be disabled.

Changes to This Privacy Policy

ap88 reserves the right to update or amend this Privacy Policy at any time when necessary — for example, in response to relevant changes in law, updates to our data processing practices, or platform enhancements that require the collection of new data.

When significant changes occur, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Notifying members via their registered email address where a change is significant.
  • Displaying a notice on the ap88 platform for a reasonable period.

Continued use of the platform ap88 after the updated Privacy Policy takes effect will be considered your acceptance of the revised policy. We encourage you to revisit this page from time to time to stay informed about how ap88 protects your personal data.

Your Data Is Safe at ap88 – Play with Greater Peace of Mind

Ap88 is committed to protecting every member's privacy in accordance with Malaysia's Personal Data Protection Act 2010. With over 850,000 members who trust us, register for free today and enjoy a safe, fair, and enjoyable online Sports Betting and casino experience.

Frequently Asked Questions – ap88 Privacy Policy

Answers to the most frequently asked questions from Malaysian members about data privacy on the ap88 platform.

Absolutely not. ap88 has never and will never sell, rent, or trade members' personal data to third parties for any marketing or commercial purpose. Your data is only shared with parties that genuinely need it to provide services to you — such as payment processors when you make a deposit using DuitNow, FPX, or Touch 'n Go eWallet — and all such parties are bound by strict confidentiality agreements. The only exception is where we are required by Malaysian law to disclose information to the relevant authorities.

To request a copy of your personal data, send an email to support@ap88-khelo.com with the subject line "Personal Data Access Request" and include your ap88 account number and registered phone number. ap88 will first verify your identity before processing the request to ensure your data remains secure. Requests will be processed within 14 business days. Your data will be delivered in a readable format (such as PDF or CSV) via your verified email address.

If you suspect your ap88 account has been accessed without authorisation, take the following steps immediately: First, change your account password right away using the "Forgot Password" function if you still have access to your registered email or phone number. Second, contact ap88 customer support via live chat or email at support@ap88-khelo.com to report the incident. Third, review your account transaction history for any unrecognised activity. ap88 will investigate your report promptly, may suspend your account as a precautionary measure during the investigation, and will assist in recovering your account if unauthorised access is confirmed.

Yes, you may request the deletion of your personal data. However, please note that some data cannot be deleted immediately due to legal obligations — for example, financial transaction records must be retained for a minimum of 7 years under Malaysian law for audit and compliance purposes. When you close your ap88 account, we will delete or anonymise data that is not subject to legal retention requirements within a reasonable timeframe. To request data deletion, close your account through your account settings and submit a written request to support@ap88-khelo.com. ap88 will inform you of which data can be deleted and which must be retained for a specified period, along with the reasons.

Your Privacy Is Protected – Play with Confidence at ap88 Malaysia!

Ap88 safeguards your personal data in compliance with Malaysia's PDPA 2010. Over 850,000 members have trusted us. Register for free today and enjoy a 100% Welcome Bonus up to RM 500.

Bahasa Melayu