Privacy Policy — apk66

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

apk66 acts as the Data Controller in respect of all Personal Data collected through the Platform. This means apk66 is responsible for deciding what Personal Data is collected, for what purpose it is used, and how long it is retained.

For all data protection enquiries, requests to exercise your rights, or complaints relating to the handling of your Personal Data, you may contact the apk66 data protection team at:

apk66 collects Personal Data in several categories, each serving a distinct operational purpose. The categories and specific data points we collect are described below:

apk66 collects Personal Data through the following channels:

• Direct Collection: Information you provide when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a promotional survey.
• Automated Collection: Technical and usage data collected automatically when you access and navigate the Platform, including data gathered through cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for full details on cookies.
• Third-Party Sources: Identity and sanctions-screening data received from authorised KYC and fraud-prevention service providers when verifying your identity. Financial confirmation data received from Indonesian payment network partners (e.g., the BCA, BRI, BNI, or Mandiri inter-bank transfer network, or OVO/DANA/GoPay confirmation APIs) when processing your deposits and withdrawals.
• Publicly Available Sources: In limited circumstances and strictly for fraud-prevention and compliance purposes, apk66 may cross-reference your information against publicly available databases such as sanctions lists, politically exposed persons (PEP) registries, and adverse media records.

apk66 processes your Personal Data only where a valid legal basis exists for doing so. The table below sets out the primary purposes for which we process your data and the corresponding legal basis:

apk66 does not sell, rent, or trade your Personal Data to any third party. We share data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: Indonesian bank transfer networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, Bank Danamon, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data required to authenticate and execute your transactions.
• KYC & Identity Verification Providers: Authorised third-party KYC service providers receive the identity documents and personal information you submit during verification. These providers are bound by strict data processing agreements and are not permitted to use your data for any purpose beyond completing the verification.
• Game Studio Partners: Certain game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive a limited session token and player pseudonym to facilitate your game session. Full identity data is never shared with game studios.
• Fraud & Security Vendors: Specialist fraud-detection and cybersecurity providers may process technical data (such as IP address and device fingerprint) to detect and prevent fraudulent activity on the Platform.
• Professional Advisers: Legal counsel, auditors, and insurers may access relevant Personal Data on a strictly confidential, need-to-know basis in the course of providing professional services to apk66.
• Regulatory and Law Enforcement Authorities: apk66 will disclose Personal Data to government bodies, regulators, or law enforcement agencies when required to do so by applicable law, court order, or regulatory direction. Where legally permissible, we will notify you of such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of apk66's assets, your Personal Data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection obligations being maintained.

All third parties with whom apk66 shares Personal Data are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose beyond what is specified in their data processing agreement with apk66.

The apk66 Platform serves Players located in Indonesia. In order to provide our services, certain Personal Data may be transferred to and processed in countries outside of Indonesia, in particular where our technology infrastructure, KYC providers, or game studio partners operate data centres or offices internationally.

Where such international transfers occur, apk66 takes steps to ensure that your Personal Data receives an equivalent level of protection to that which it would receive in Indonesia. These steps may include entering into standard contractual data transfer clauses with the recipient, verifying that the recipient operates under a recognised data protection framework, and conducting transfer impact assessments where appropriate.

The apk66 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse how the Platform is used so that we can continue to improve it.

The types of cookies we use are described below:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, security cookies that prevent cross-site request forgery (CSRF), and load-balancing cookies that distribute your requests across our server infrastructure. No Personal Data beyond your session token is stored in these cookies.
• Preference Cookies: These cookies remember your language settings, display preferences (such as odds format), and last-visited game categories, so that the Platform presents a consistent experience each time you visit.
• Analytics Cookies: These cookies collect aggregated, pseudonymised data about how Players interact with the Platform — which pages are visited most, where Players encounter errors, and how navigation flows are used. This data is used solely to improve Platform performance and is not used to identify individual Players.
• Security & Fraud-Detection Cookies: These cookies support our fraud-detection systems by helping us identify unusual device behaviour, multiple simultaneous sessions from different locations, and other patterns associated with fraudulent activity.

apk66 does not use third-party advertising cookies or retargeting pixels. We do not share cookie data with advertising networks or social media platforms.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. Disabling preference or analytics cookies will not affect your ability to use the core Platform features.

apk66 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption in Transit: All data transmitted between your device and the apk66 Platform is encrypted using 256-bit SSL/TLS protocols. Our servers enforce HTTPS on all connections, and HTTP traffic is automatically redirected to HTTPS.
• Encryption at Rest: Sensitive Personal Data — including identity documents, financial account details, and KYC records — is encrypted at rest using AES-256 encryption on our secure servers.
• Access Controls: Access to Player Personal Data within apk66 is restricted on a strict need-to-know basis. Only authorised personnel whose roles require access to specific data categories are granted access, and all access is logged and audited.
• Two-Factor Authentication (2FA): All internal apk66 administrative accounts are protected by mandatory two-factor authentication. Players are strongly encouraged to enable 2FA on their own accounts for an additional layer of protection.
• Intrusion Detection & Monitoring: apk66 operates continuous real-time monitoring of our infrastructure for signs of unauthorised access, data exfiltration, or other security incidents. Our security team responds to alerts on a 24/7 basis.
• Penetration Testing: The Platform undergoes regular third-party penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights, apk66 will notify affected Players and relevant authorities within the timeframes required by applicable law. We will provide clear information about the nature of the breach and the steps you can take to protect yourself.

As a Player whose Personal Data is processed by apk66, you hold the following rights with respect to your information. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and we will respond within 30 days:

• Right of Access: You have the right to request a copy of the Personal Data that apk66 holds about you, along with information about how it is being used, where it comes from, and with whom it has been shared.
• Right to Rectification: If any of the Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data in circumstances where: (a) the data is no longer necessary for the purpose it was collected; (b) you withdraw Consent and no other legal basis applies; or (c) the data has been processed unlawfully. Please note that this right is subject to overriding legal obligations — for example, we are required to retain certain financial and KYC records for a legally prescribed period even after account closure.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: Where processing is based on your Consent or performance of a contract and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing based on legitimate interests. If you raise an objection, apk66 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your Consent, you may withdraw that Consent at any time by contacting [email protected] or adjusting your Account communication preferences. Withdrawal of Consent does not affect the lawfulness of processing carried out before the withdrawal.

apk66 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your Account's active status and for a period of five (5) years following account closure.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of submission, in line with standard anti-money laundering record-keeping obligations.
• Financial Transaction Records: Deposit and withdrawal records are retained for a minimum of five (5) years from the date of each transaction.
• Gaming & Bet History: Retained for three (3) years from the date of each wager, after which records are anonymised or deleted.
• Customer Support Records: Retained for two (2) years from the date of the last interaction, unless the record relates to an ongoing dispute or legal claim.
• Marketing Preferences & Consent Records: Retained for three (3) years from the date Consent was given, or until Consent is withdrawn, whichever occurs first. Proof of Consent (opt-in records) is retained for the full retention period to demonstrate compliance.
• Server Logs & Technical Data: Retained for a rolling 12-month period and then automatically purged, unless a security incident or legal hold requires extended retention.

When the applicable retention period expires, Personal Data is securely deleted or anonymised using industry-standard methods. Anonymised data (which can no longer be used to identify any individual) may be retained indefinitely for statistical and analytical purposes.

The apk66 Platform is strictly intended for adults aged 21 years and over. apk66 does not knowingly collect Personal Data from any person under the age of 21. Our registration process requires all applicants to confirm their date of birth, and our KYC process independently verifies the ages of all Players before withdrawal privileges are activated.

If apk66 discovers or has reasonable grounds to believe that an Account has been registered by a person under 21 years of age, we will immediately:

• Suspend the Account and freeze any Balance held therein.
• Delete all Personal Data associated with the Account, subject to any legal obligation to retain records of the incident.
• Refund any deposited funds to the original payment source after deducting any winnings derived from bets placed while underage, which will be voided.
• Refer the matter to the relevant authorities where required by applicable law.

If you believe that a person under 21 has registered an Account on the apk66 Platform, please contact us immediately at [email protected]. We take our obligations in this area with the utmost seriousness.

apk66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, we will notify registered Players by email to the address held on their Account and/or by displaying a prominent notice on the Platform.

The effective date at the top of this Policy will be updated whenever changes are made. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the Platform and may request account closure by contacting [email protected].

We recommend that you review this Policy periodically. The current version is always accessible at https://apk66.bet/privacy-policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or apk66's handling of your Personal Data, please contact our data protection team using the details below. We are committed to resolving all privacy-related enquiries fairly, transparently, and promptly.

If you are not satisfied with our response to your complaint, you may be entitled to lodge a complaint with the relevant data protection authority in your jurisdiction. For Players located in Indonesia, the relevant authority is the Ministry of Communication and Information Technology (Kementerian Komunikasi dan Informatika — Kominfo).

This Privacy Policy was last reviewed and updated on 1 January 2026. This document supersedes all prior versions of the apk66 Privacy Policy. apk66 reserves the right to update this Policy at any time in accordance with Section 13.