api100 Privacy Policy

1. Introduction

Welcome to the api100 Privacy Policy. This document explains how api100 (hereinafter "we", "us", "our") collects, uses, stores, and protects personal information from users (hereinafter "you", "your") of our online gaming platform accessible at https://api100.cam. api100 is committed to protecting your privacy and ensuring the security of your personal data in compliance with applicable data protection laws and international best practices for online gaming operators.

This Privacy Policy applies to all users who access or use api100 services, including sports betting, live casino games, slot machines, and togel (traditional lottery games). By creating an account on api100 or using our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must not use our services.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of api100 services. Together, these documents form the complete agreement between you and api100 regarding data handling and service usage.

2. Information We Collect

api100 collects various types of information to provide, maintain, and improve our services, verify user identity as required by anti-money laundering regulations, and ensure platform security. The categories of information we collect include:

2.1 Personal Identification Information

When you register an account on api100, we collect personal information including:

• Full Legal Name: As it appears on your government-issued identification document
• Date of Birth: To verify you meet the minimum age requirement of 21 years
• Email Address: Your primary contact email for account communications
• Mobile Phone Number: For account security and verification purposes
• Residential Address: Your current address in Indonesia
• Identity Documents: Copy of your KTP (Indonesian national ID card) or passport for KYC (Know Your Customer) verification
• Photograph: A clear photo from your identity document for age and identity verification

2.2 Financial Information

To process deposits and withdrawals, we collect payment-related information:

• Bank Account Details: Bank name, account number, and account holder name for Indonesian bank transfers (BCA, BRI, BNI, Mandiri, etc.)
• E-wallet Information: Registered account details for OVO, DANA, GoPay, or other supported e-wallets
• Transaction History: Records of all deposits, withdrawals, bets placed, and winnings for account management and regulatory compliance
• Payment Verification Documents: Bank statements or screenshots as needed to verify payment method ownership

Please note: api100 does not store complete credit card numbers or CVV codes. Payment processing is handled through secure third-party payment processors who maintain PCI-DSS compliance.

2.3 Technical and Usage Information

When you access api100, we automatically collect certain technical information:

• IP Address: Your device's internet protocol address for security and fraud prevention
• Device Information: Device type, operating system, browser type and version, screen resolution
• Login Data: Login timestamps, session duration, logout times
• Gameplay Data: Games played, bet amounts, win/loss records, RTP performance
• Website Usage: Pages visited, features used, clicks, navigation patterns
• Cookies and Tracking Technologies: Information collected via cookies, web beacons, and similar technologies (see Section 5)

2.4 Communications

We retain records of communications between you and api100 including:

• Customer support chat transcripts and email correspondence
• Survey responses and feedback submissions
• Marketing communication preferences and responses

3. How We Use Your Information

api100 uses the collected information for the following legitimate business purposes:

3.1 Account Management and Service Provision

• Creating and maintaining your gaming account
• Processing deposits, withdrawals, and bets
• Providing customer support and responding to inquiries
• Communicating important account updates, transaction confirmations, and service notifications
• Managing your VIP tier status and loyalty rewards

3.2 Identity Verification and Compliance

• Verifying your age to ensure compliance with the 21+ age restriction
• Conducting KYC (Know Your Customer) verification as required by anti-money laundering regulations
• Preventing identity theft and fraudulent account creation
• Complying with legal and regulatory obligations in the online gaming industry
• Responding to lawful requests from government authorities or law enforcement

3.3 Security and Fraud Prevention

• Detecting and preventing fraudulent activity, bonus abuse, and account manipulation
• Monitoring for suspicious betting patterns and collusion
• Protecting against unauthorized access and cyber threats
• Enforcing our Terms and Conditions and fair play policies

3.4 Platform Improvement and Analytics

• Analyzing usage patterns to improve user experience and platform performance
• Developing new features and gaming products based on player preferences
• Conducting A/B testing to optimize interface design and functionality
• Generating aggregated, anonymized statistics for business intelligence

3.5 Marketing and Promotions (With Your Consent)

• Sending promotional emails about bonuses, special offers, and new games (you can opt out at any time)
• Personalizing marketing content based on your gaming preferences
• Notifying you about loyalty program benefits and VIP tier advancements

3.6 Responsible Gaming

• Implementing deposit limits, time-out periods, and self-exclusion requests
• Monitoring gambling behavior patterns to identify potential problem gambling
• Providing access to responsible gaming tools and resources

4. Data Sharing and Disclosure

api100 respects your privacy and does not sell or rent your personal information to third parties. However, we may share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to assist with platform operations. These providers have access to personal information only as necessary to perform their functions and are contractually obligated to maintain confidentiality. Service providers include:

• Payment Processors: To facilitate deposits and withdrawals via banks and e-wallets
• Identity Verification Services: To conduct KYC verification and fraud screening
• Cloud Hosting Providers: To store data securely on protected servers
• Customer Support Software Providers: To manage live chat and support ticket systems
• Analytics Providers: To analyze platform usage and performance (data is anonymized where possible)

4.2 Legal Obligations and Law Enforcement

We may disclose your information when required by law or in response to valid legal processes including:

• Court orders, subpoenas, or other legal demands
• Requests from government regulators or gaming authorities
• Law enforcement investigations into suspected criminal activity
• Anti-money laundering (AML) or counter-terrorism financing (CTF) reporting obligations

4.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. You will be notified via email or prominent notice on the website of any change in ownership or use of your personal information.

4.4 With Your Consent

We may share your information with other third parties if you provide explicit consent for a specific purpose not covered by this Privacy Policy.

4.5 What We Do NOT Do

api100 explicitly does not:

• Sell your personal information to data brokers or marketing companies
• Share your information with third parties for their own marketing purposes
• Display your personal information publicly on the website (except username in leaderboards if you opt in)
• Provide your gambling history to credit reporting agencies

5. Cookies and Tracking Technologies

api100 uses cookies, web beacons, and similar tracking technologies to enhance user experience, maintain login sessions, and analyze platform usage.

5.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. They allow websites to recognize your device on subsequent visits and remember preferences, login status, and other information.

5.2 Types of Cookies We Use

5.3 Managing Cookie Preferences

You can control and delete cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored on your device
• Delete all or specific cookies
• Block third-party cookies
• Block all cookies from specific websites
• Delete all cookies when you close your browser

Please note that blocking or deleting essential cookies may impair your ability to access certain features of api100 and you may need to log in each time you visit.

6. Data Security Measures

api100 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

6.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) encryption
• Secure Data Storage: Personal information is stored on secure servers with restricted physical and digital access
• Firewall Protection: Advanced firewall systems protect against external cyber threats
• Regular Security Audits: Third-party penetration testing and vulnerability assessments conducted quarterly
• Multi-Factor Authentication: Optional two-factor authentication available for enhanced account security
• Password Hashing: Passwords are hashed using bcrypt or similar one-way cryptographic algorithms and never stored in plain text

6.2 Organizational Security Measures

• Access Controls: Only authorized personnel with legitimate business need can access personal information
• Employee Training: All staff undergo regular data protection and security awareness training
• Confidentiality Agreements: Employees and contractors sign strict confidentiality agreements
• Incident Response Plan: Documented procedures for responding to data breaches and security incidents

6.3 Your Security Responsibilities

While we implement robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password that combines letters, numbers, and special characters
• Never share your password or login credentials with anyone
• Log out of your account after each session, especially on shared devices
• Keep your contact email and phone number secure
• Report suspicious activity to customer support immediately
• Keep your device's operating system and browser updated with the latest security patches

7. Data Retention

api100 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements.

7.1 Active Account Data

While your account remains active, we retain all personal information, transaction history, and gameplay records to provide ongoing services and maintain account integrity.

7.2 Closed Account Data

After voluntary account closure, we retain certain information for:

• Financial Records: 7 years (as required by financial regulations and tax laws)
• Identity Verification Documents: 5 years (anti-money laundering compliance)
• Communication Records: 3 years (for dispute resolution purposes)
• Marketing Data: Immediately deleted or anonymized upon unsubscribe request

7.3 Legal and Regulatory Requirements

Certain data must be retained for specific periods to comply with Indonesian financial regulations, international gaming licensing requirements, and anti-money laundering laws. We cannot delete this information even upon request until the required retention period expires.

7.4 Anonymized Data

After the retention period expires, personal information may be anonymized and aggregated for statistical analysis and business intelligence purposes. Anonymized data cannot be linked back to individual users.

8. Your Privacy Rights

As an api100 user, you have the following rights regarding your personal information:

8.1 Right of Access

You have the right to request a copy of the personal information we hold about you. You can download a data export from your account settings or request one by contacting customer support. We will provide the information in a commonly used electronic format within 30 days of your verified request.

8.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings. For changes to verified information (name, date of birth), you must contact customer support and provide updated identity documents.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information. However, this right is not absolute and we may need to retain certain information to:

• Comply with legal and regulatory retention obligations
• Resolve outstanding disputes or claims
• Prevent fraud and protect platform security
• Complete pending transactions or withdrawals

8.4 Right to Restrict Processing

You may request that we limit how we process your information in certain circumstances, such as while we verify data accuracy or investigate a complaint.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and transmit it to another service provider without hindrance from api100.

8.6 Right to Object

You can object to:

• Marketing Communications: Unsubscribe from promotional emails via the link in each message or adjust preferences in account settings
• Analytics and Profiling: Opt out of non-essential data processing (note: this may limit personalization features)

8.7 Exercising Your Rights

To exercise any of these rights, contact api100 customer support at [email protected] with your request. We will verify your identity and respond within 30 days. Some requests may require additional time depending on complexity. You will not be charged for exercising your privacy rights unless requests are manifestly unfounded or excessive.

9. Children's Privacy

api100 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process requires age verification, and all users must confirm they meet the minimum age requirement.

If we become aware that we have inadvertently collected information from a person under 21, we will take immediate steps to delete such information from our systems and permanently close the associated account. If you believe a minor has created an account on api100, please contact us immediately at [email protected].

Parents and guardians should monitor their children's internet usage and ensure minors do not access online gambling platforms. We recommend using parental control software to restrict access to gambling websites.

10. International Data Transfers

api100 operates internationally and may store or process your personal information in countries outside of Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Our servers and data centers are located in jurisdictions with robust data protection laws. Third-party service providers who process data on our behalf are selected based on their security standards and compliance with international data protection regulations.

By using api100 services, you acknowledge and consent to the international transfer of your personal information as described in this Privacy Policy.

11. Changes to This Privacy Policy

api100 reserves the right to modify, update, or revise this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this document
• Notify you via email to the address registered on your account
• Display a prominent notice on the api100 website homepage
• Request your consent if required by law for specific changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of api100 services following notification of changes constitutes acceptance of the revised Privacy Policy. If you do not agree with any changes, you must stop using our services and may request account closure.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact api100 through the following channels:

• Email: [email protected] (for general privacy inquiries)
• Data Protection Officer Email: [email protected] (for formal data subject requests)
• Live Chat: Available 24/7 on the api100 platform for immediate assistance
• Response Time: We aim to respond to all privacy-related inquiries within 24-48 hours during business days

When contacting us about privacy matters, please provide:

• Your full name and registered email address
• Detailed description of your inquiry or request
• Proof of identity (to prevent unauthorized disclosure of personal information)
• Preferred contact method for our response

Acknowledgment: By using api100 services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. This Privacy Policy forms an integral part of our Terms and Conditions.