Privacy Policy

1. Introduction

This Privacy Policy describes how api200 ("we", "us", "our") collects, uses, processes, and protects personal information from users ("you", "your") of our online gaming platform located at https://api200.cam. This policy applies to all Indonesian residents who register accounts and use our services, including casino games, sports betting, togel lottery, and other gaming products.

By creating an account on api200 and using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, you must not use our platform.

api200 is committed to complying with applicable data protection laws and international privacy standards. We implement appropriate technical and organizational measures to ensure the security and confidentiality of your personal data.

2. Information We Collect

api200 collects various types of personal information to provide, maintain, and improve our services. The information we collect includes:

2.1 Information You Provide Directly

When you register an account on api200, you provide the following information:

• Personal Identification Information: Full legal name, date of birth, gender, nationality, and Indonesian ID number (KTP number) or passport number
• Contact Information: Email address, mobile phone number, residential address (street address, city, province, postal code)
• Account Credentials: Username, password, and security questions/answers
• Financial Information: Indonesian bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, or other supported banks; e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja); payment transaction history including deposits and withdrawals
• Verification Documents: Copies of government-issued identification (KTP, passport), selfie photographs holding identification, proof of address documents (utility bills, bank statements), and any additional documentation requested during KYC (Know Your Customer) verification
• Communication Records: Messages sent to customer support via live chat, email, WhatsApp, or other communication channels; feedback, complaints, and inquiries submitted through our platform

2.2 Information Collected Automatically

When you access and use the api200 platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, UDID)
• Connection Information: IP address, internet service provider (ISP), geographic location (country, city), time zone settings
• Usage Data: Pages visited, links clicked, games played, bets placed, session duration, login timestamps, feature interactions, navigation paths through our website
• Transaction Data: Deposit amounts, withdrawal requests, bonus claims, wagering activity, bet history, game outcomes, balance changes
• Cookies and Tracking Technologies: Data collected via cookies, web beacons, pixel tags, local storage, and similar technologies (see Section 6 for details)

2.3 Information from Third-Party Sources

api200 may receive information about you from third-party sources including:

• Identity verification services that confirm your identity and age
• Payment processors (Indonesian banks, e-wallet providers) that process your deposits and withdrawals
• Fraud prevention and security services that help detect suspicious activity
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, etc.) that provide gaming software and report game outcomes
• Marketing and analytics platforms that provide aggregated demographic and interest data

3. How We Use Your Data

api200 uses your personal information for the following purposes:

3.1 Account Management and Service Provision

• Creating, maintaining, and managing your api200 account
• Processing your deposits, withdrawals, and other financial transactions
• Verifying your identity, age (21+ requirement), and eligibility to use our services
• Providing access to casino games, sports betting, togel lottery, and other gaming products
• Recording and settling your bets, wagers, and game transactions
• Calculating and crediting winnings, bonuses, and promotional offers
• Maintaining accurate account balances and transaction histories

3.2 Customer Support and Communication

• Responding to your inquiries, questions, and support requests via live chat, email, or WhatsApp
• Sending account-related notifications including registration confirmation, password resets, withdrawal approvals, and security alerts
• Providing updates about your account status, transaction confirmations, and important service changes
• Resolving disputes, investigating complaints, and addressing technical issues
• Conducting customer satisfaction surveys and gathering feedback to improve our services

3.3 Security, Fraud Prevention, and Compliance

• Preventing, detecting, and investigating fraudulent activities, money laundering, underage gambling, and other illegal or prohibited conduct
• Monitoring betting patterns and account activity to detect irregular play, bonus abuse, collusion, and other terms violations
• Enforcing our Terms and Conditions, Responsible Gaming policies, and other rules
• Complying with Know Your Customer (KYC), Anti-Money Laundering (AML), and Counter-Terrorist Financing (CTF) regulations
• Responding to legal requests, court orders, and regulatory inquiries from government authorities
• Protecting the security and integrity of our platform, systems, and networks

3.4 Marketing and Promotional Activities

• Sending promotional emails, SMS messages, and push notifications about bonuses, special offers, new games, and tournaments (you can opt out at any time)
• Personalizing your gaming experience by recommending games, betting markets, and promotions based on your preferences and activity
• Conducting targeted advertising campaigns on social media and third-party websites (using aggregated, non-personally identifiable data)
• Measuring the effectiveness of marketing campaigns and promotional offers

3.5 Analytics and Service Improvement

• Analyzing user behavior, preferences, and trends to improve our platform, games, and features
• Conducting research and statistical analysis to optimize user experience, game performance, and betting markets
• Testing new features, game variations, and promotional strategies
• Identifying and fixing technical bugs, errors, and performance issues

4. Data Sharing and Disclosure

api200 does not sell or rent your personal information to third parties. However, we may share your data with the following categories of recipients for the purposes described in this Privacy Policy:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) that process deposits and withdrawals
• Game Providers: Software companies (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.) that supply casino games, slots, and live dealer platforms
• Identity Verification Services: Third-party KYC and AML compliance providers that verify your identity and screen for fraud
• Customer Support Tools: Live chat platforms, email service providers, and CRM systems that help us communicate with you
• Analytics Providers: Web analytics, user behavior tracking, and data analysis platforms that help us understand platform usage
• Hosting and Infrastructure: Cloud storage providers, servers, CDN services, and IT infrastructure companies that host our platform and data

All third-party service providers are contractually required to protect your personal information, use it only for the specific purposes we authorize, and comply with applicable data protection laws.

4.2 Legal and Regulatory Authorities

api200 may disclose your personal information to government authorities, law enforcement agencies, regulatory bodies, and courts when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or government requests
• Enforce our Terms and Conditions and protect our legal rights
• Prevent, detect, or investigate fraud, money laundering, or other illegal activities
• Protect the safety, security, and rights of api200, our users, or the public
• Respond to emergency situations involving threats to health or safety

4.3 Business Transfers

In the event that api200 is involved in a merger, acquisition, corporate restructuring, asset sale, or bankruptcy, your personal information may be transferred to the acquiring or successor entity. We will notify you of any such transfer and any changes to this Privacy Policy.

5. Data Security Measures

api200 implements comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

5.1 Technical Security Controls

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Secure Servers: Our infrastructure is hosted on secure, redundant servers located in protected data centers with physical security controls (24/7 monitoring, biometric access, surveillance cameras).
• Firewalls and Intrusion Detection: We use advanced firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to monitor and block unauthorized access attempts.
• Regular Security Audits: Our systems undergo regular security assessments, penetration testing, and vulnerability scans conducted by independent security experts.
• Secure Payment Processing: We use PCI DSS-compliant payment gateways and do not store full credit/debit card numbers or CVV codes on our servers.

5.2 Organizational Security Measures

• Access Controls: Employee access to personal data is restricted on a need-to-know basis using role-based access control (RBAC). All access is logged and monitored.
• Staff Training: Our employees receive regular training on data protection, privacy regulations, and security best practices.
• Confidentiality Agreements: All employees, contractors, and partners sign strict confidentiality agreements prohibiting unauthorized disclosure of personal information.
• Incident Response Plan: We maintain a comprehensive data breach response plan to quickly detect, contain, and remediate security incidents.

5.3 Account Security Recommendations

While api200 implements strong security measures, you also play a critical role in protecting your account:

• Use a strong, unique password that combines uppercase and lowercase letters, numbers, and special characters
• Enable two-factor authentication (2FA) for an additional layer of security
• Never share your login credentials with anyone, including family members or friends
• Log out of your account when using shared or public computers
• Regularly monitor your account activity and report suspicious transactions immediately
• Keep your email account secure, as it is used for password resets and account recovery
• Avoid accessing your api200 account over unsecured public Wi-Fi networks

6. Cookies and Tracking Technologies

api200 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your user experience, analyze platform usage, and deliver personalized content.

6.1 What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, tablet) when you visit our website. Cookies help us recognize your browser, remember your preferences, and provide personalized features. Cookies do not contain personally identifiable information and cannot access other files on your device.

6.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality including account login, session management, and security features. These cookies cannot be disabled as they are necessary for the site to work.
• Performance Cookies: Collect anonymous usage data to help us understand how visitors interact with our platform, which pages are most popular, and where errors occur. This helps us improve site performance.
• Functionality Cookies: Remember your preferences (language, currency, game favorites) to provide a more personalized experience.
• Advertising Cookies: Track your browsing behavior to deliver relevant advertisements on third-party websites. These cookies may be set by our advertising partners.

6.3 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. However, disabling essential cookies may prevent you from using certain features of the api200 platform. To learn how to manage cookies in your specific browser, consult your browser's help documentation.

7. Your Privacy Rights

Under applicable data protection laws, you have certain rights regarding your personal information:

• Right of Access: You can request a copy of the personal information we hold about you, including account details, transaction history, and communication records.
• Right to Rectification: If your personal information is inaccurate or incomplete, you can request corrections. You can update most information directly in your account settings.
• Right to Erasure: You can request deletion of your personal information, subject to legal retention requirements for financial transactions, KYC records, and regulatory compliance.
• Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances, such as while disputing data accuracy.
• Right to Data Portability: You can request your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You can object to processing of your data for marketing purposes. You can opt out of promotional emails by clicking the "unsubscribe" link in any marketing email.
• Right to Withdraw Consent: Where we rely on your consent to process data, you can withdraw that consent at any time.

To exercise any of these rights, please contact our support team at [email protected] or via live chat. We will respond to your request within 30 days.

8. Data Retention

api200 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

8.1 Active Account Data

While your account remains active, we retain all personal information, transaction history, betting records, and communication logs to provide ongoing services and support.

8.2 Closed Account Data

After you close your account, we retain certain information for legal and regulatory compliance:

• Financial Records: Transaction history, deposit and withdrawal records are retained for 7 years to comply with anti-money laundering regulations and tax reporting requirements.
• Identity Verification Documents: KYC documents (ID copies, proof of address) are retained for 5 years after account closure for regulatory compliance and fraud prevention.
• Betting History: Game outcomes, bet placements, and wagering activity are retained for 5 years for dispute resolution and regulatory audits.
• Communication Records: Customer support chat logs and email correspondence are retained for 3 years for quality assurance and legal purposes.

After the applicable retention period expires, personal information is securely deleted or anonymized so it can no longer be associated with you.

9. International Data Transfers

api200 primarily serves Indonesian players and stores data within secure facilities. However, some of our service providers (payment processors, game providers, cloud hosting companies) may be located outside Indonesia. When we transfer personal data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules and privacy frameworks
• Explicit consent from users where required

All international data transfers are conducted in compliance with applicable data protection laws and regulations.

10. Changes to This Privacy Policy

api200 reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or technological developments. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on the api200 platform

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of api200 services after changes are posted constitutes your acceptance of the updated Privacy Policy.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how api200 handles your personal information, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 on the api200 website (click the chat icon)
• WhatsApp: Contact our Indonesian-speaking support team via WhatsApp (available 24/7)

Our customer support team is available around the clock to assist you with privacy-related inquiries in Bahasa Indonesia or English. We aim to respond to all requests within 24-48 hours.