x88apk Privacy Policy

01. Introduction & Scope

x88apk ("we", "us", "our") is committed to protecting the privacy and personal data of all players who access and use the x88apk platform at https://x88apk.net (the "Platform"). This Privacy Policy applies to all personal data collected from you in connection with your registration, account use, financial transactions, customer support interactions, and any other engagement with x88apk's services.

This policy applies to all individuals who access the Platform from Indonesia or any other jurisdiction, including registered account holders, prospective players browsing the Platform without an account, and individuals who contact x88apk via support channels without holding an active account. References to "you" and "your" throughout this document refer to any such individual.

This Privacy Policy should be read alongside the x88apk Terms & Conditions and, where applicable, the Responsible Gaming policy. Together, these documents govern the full relationship between x88apk and its players.

02. Data Controller

For the purposes of applicable data protection law, x88apk acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, x88apk determines the purposes for which your personal data is processed and the means by which that processing takes place.

Where x88apk engages third-party service providers — such as payment processors, identity verification providers, or game studios — to process data on its behalf, those providers act as Data Processors and are contractually obligated to process your data only on x88apk's documented instructions, to maintain appropriate security standards, and to refrain from using your data for their own independent purposes.

03. Data We Collect

3.1 Registration Data

When you create an x88apk account, we collect the personal information you provide in the registration form, including your full legal name, date of birth, residential address in Indonesia, email address, chosen username, and phone number where provided. This data is required to create and maintain your account and to verify your identity in accordance with our KYC obligations.

3.2 Identity Verification (KYC) Documents

To comply with international anti-money laundering (AML) standards and age verification requirements, x88apk may request copies of government-issued identity documents. These typically include your Indonesian National Identity Card (KTP or Kartu Tanda Penduduk), valid Indonesian passport, and supporting proof-of-address documentation such as a recent utility bill or bank statement. KYC documents are stored in an encrypted, access-controlled environment and are used exclusively for identity verification purposes.

3.3 Financial Transaction Data

x88apk records all financial transactions conducted through your account, including deposit amounts, withdrawal requests, transaction timestamps, and the payment method identifiers associated with each transaction (such as partially masked bank account numbers or e-wallet registered phone numbers for BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja). Full payment credentials — such as complete bank account numbers — are not stored by x88apk; these are handled directly by the relevant payment processor.

3.4 Gameplay & Betting Data

x88apk retains a complete record of your betting and gaming activity on the Platform, including bet amounts, game selections, sportsbook market choices, outcomes, session durations, and account balance changes. This data is used for account management, responsible gaming monitoring, dispute resolution, and, in aggregate anonymised form, for platform improvement analytics.

3.5 Technical & Device Data

When you access the Platform, x88apk's servers automatically collect technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This information is used for fraud prevention, security monitoring, and improving Platform performance.

3.6 Communications Data

If you contact x88apk via live chat, email, or any other support channel, we retain records of those communications — including the content of your messages and our responses — for quality assurance, staff training, dispute resolution, and compliance record-keeping purposes.

3.7 Marketing Preferences

Where you have opted in to receive promotional communications from x88apk, we store your marketing preferences, the communications you have received, and data on whether and how you engaged with those communications (e.g., email open events). You may update or withdraw your marketing consent at any time through your account settings or by contacting support.

04. How We Use Your Data

x88apk uses your personal data for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and securing your x88apk account; processing login authentication; enabling account recovery.
KYC & Age Verification	Verifying that you are at least 21 years of age and meet the eligibility criteria to use the Platform as an Indonesian resident.
Payment Processing	Facilitating deposits and withdrawals via your chosen local payment method; detecting and preventing fraudulent transactions.
Game & Bet Delivery	Delivering the sportsbook, casino, poker, slots, and other gaming services you have selected; recording and settling bets accurately.
Responsible Gaming	Monitoring gameplay patterns to identify potential problem gambling behaviours; enforcing deposit limits, session timers, and self-exclusion instructions.
Legal Compliance	Meeting obligations under applicable AML, KYC, and financial crime prevention frameworks; responding to lawful requests from competent authorities.
Customer Support	Responding to your enquiries, resolving disputes, and providing technical assistance via live chat and email support.
Security & Fraud Prevention	Detecting, investigating, and preventing unauthorised account access, bonus abuse, collusion, and other prohibited activities.
Marketing (Opt-in Only)	Sending promotional offers, bonus announcements, and platform news to players who have actively opted in to receive such communications.
Platform Analytics	Analysing aggregated, anonymised usage patterns to improve the Platform's performance, game selection, and user experience for Indonesian players.

05. Legal Basis for Processing

x88apk processes your personal data on one or more of the following legal bases, depending on the category of data and the purpose of processing:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your x88apk account, settle bets, and process financial transactions.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, AML, and financial record-keeping requirements.
• Legitimate Interests: Processing carried out to pursue x88apk's legitimate business interests, including fraud prevention, platform security, dispute resolution, and analytical improvement of the Platform — provided those interests are not overridden by your fundamental rights.
• Consent: Processing of data for optional purposes — such as sending you marketing communications — which is carried out only where you have given clear, freely-given, and specific consent. You may withdraw consent at any time.

06. Cookies & Tracking Technologies

6.1 What Cookies We Use

x88apk uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform effectively. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without preventing you from using the Platform.
• Functional Cookies: Used to remember your preferences — such as your preferred language display, last-used payment method, and game lobby view settings — so you do not need to reconfigure them on each visit.
• Analytics Cookies: Used in aggregate, anonymised form to understand how players navigate the Platform, which games and markets are most popular, and where technical performance issues arise. x88apk does not use third-party analytics platforms that transmit your personal data to external servers.
• Security Cookies: Support x88apk's fraud detection systems by helping identify unusual login patterns or suspicious session behaviour.

6.2 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please be aware that disabling strictly necessary cookies will impair or entirely prevent your ability to use the x88apk Platform, including logging in to your account. Functional and analytics cookies may be disabled without affecting core Platform access.

07. Data Sharing & Disclosure

7.1 Payment Processors

To process deposits and withdrawals in Indonesian Rupiah (IDR), x88apk shares the minimum necessary transaction data with its payment processing partners, including local bank transfer facilitators and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers receive only the data required to execute the specific transaction and are prohibited from using that data for any other purpose.

7.2 Identity Verification Providers

x88apk may use specialist third-party KYC verification services to authenticate identity documents you submit. These providers process your identity data exclusively on x88apk's instructions and under strict data processing agreements that prohibit secondary use.

7.3 Game Studios

Third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — receive a session token and anonymised player identifier to deliver their game content within the x88apk Platform. They do not receive your name, contact details, or financial data.

7.4 Legal Authorities

x88apk will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by a lawful order, court direction, or applicable legal obligation. Where legally permissible, x88apk will notify you of such a disclosure.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of x88apk's assets, your personal data may be transferred to the successor entity as part of that transaction. x88apk will provide advance notice of any such transfer and the successor will be bound to honour this Privacy Policy or provide you with a replacement policy of equivalent standard.

08. International Data Transfers

x88apk's primary platform infrastructure is hosted in a secure international data centre environment. As a result, some personal data processed by x88apk may be transferred to and stored in countries outside Indonesia. Where such transfers occur, x88apk ensures that appropriate safeguards are in place, including contractual data processing clauses that impose data protection obligations equivalent to those described in this policy on the receiving party.

By registering an account with x88apk, you acknowledge and consent to the transfer of your personal data to servers located outside Indonesia as necessary to deliver the Platform's services to you.

09. Data Retention

x88apk retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following category-specific retention periods:

Data Category	Retention Period	Basis
Account & Registration Data	Duration of account + 5 years post-closure	Legal / AML compliance
KYC Identity Documents	Duration of account + 7 years post-closure	Financial crime prevention regulations
Financial Transaction Records	7 years from transaction date	Financial record-keeping obligations
Gameplay & Betting History	5 years from each session date	Dispute resolution / responsible gaming
Support Communications	3 years from last interaction	Legitimate interests / dispute records
Marketing Preferences	30 days post account closure	Consent-based
Technical & Device Logs	90 days on a rolling basis	Security / fraud prevention

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify you.

10. Your Rights

As a player whose personal data is processed by x88apk, you hold the following rights in respect of your information. To exercise any of these rights, please contact x88apk's support team using the details provided in Section 14.

• Right of Access: You may request a copy of the personal data x88apk holds about you, together with information on how it is used and with whom it has been shared.
• Right to Rectification: If any personal data x88apk holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to x88apk's legal retention obligations — data that must be kept for AML or financial compliance reasons cannot be deleted on request.
• Right to Restriction of Processing: You may request that x88apk restricts the processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: You may request a copy of the personal data you provided to x88apk in a structured, commonly-used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests — including marketing profiling — at any time. x88apk will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

x88apk will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 30 days, in which case x88apk will notify you of the extension and its reason within the initial 30-day window.

11. Children & Minors

The x88apk Platform is strictly restricted to individuals who are 21 years of age or older. x88apk does not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has registered an x88apk account or submitted personal data to the Platform, please contact our support team immediately. Upon receiving a verified report, x88apk will promptly close the account, delete the minor's personal data, and process a refund of any deposited funds to the payment method used.

12. Security Measures

x88apk implements a layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key measures in place include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and x88apk servers is encrypted in transit using TLS 1.3, the current industry standard for web communication security.
• Data Encryption at Rest: Sensitive data categories — including KYC documents, financial records, and account credentials — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within x88apk's internal systems is strictly role-based and limited to personnel who require that access to perform their job function. All internal access is logged and audited.
• Two-Factor Authentication (2FA): x88apk strongly recommends enabling 2FA on your account for an additional layer of protection against unauthorised login attempts.
• Penetration Testing: x88apk conducts periodic third-party security assessments and penetration tests of its Platform infrastructure to identify and remediate vulnerabilities proactively.
• Incident Response: x88apk maintains a documented data breach response procedure. In the event of a confirmed breach affecting player data, impacted players will be notified via registered email within 72 hours, along with guidance on protective steps they can take.

13. Policy Amendments

x88apk reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. When material changes are made, x88apk will notify registered players via email to their registered address and will display a prominent notice on the Platform for a minimum of 14 days prior to the effective date of the revised policy.

The version date displayed at the top of this document reflects the date of the most recent revision. Your continued use of the x88apk Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised terms, you must cease using the Platform and contact support to close your account and request deletion of your personal data in accordance with Section 10.

14. Contact & Data Requests

For any questions, concerns, or formal requests relating to this Privacy Policy or x88apk's handling of your personal data, please contact the x88apk Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line and your registered account username to expedite processing.
• Live Chat: Available 24/7 via the live chat widget accessible from any page of the x88apk Platform.
• Response Time: x88apk aims to acknowledge all privacy-related enquiries within 48 hours and to fully resolve data rights requests within 30 days of receiving sufficient information to verify your identity.