Your privacy is a priority at api68. This Privacy Policy explains in plain terms what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a Member. Please read this document carefully before registering an account.
Last Updated: January 2026Six core principles that define how api68 handles your personal data — responsibly, securely, and transparently.
All data transmitted between your device and the api68 Platform is protected by industry-standard SSL/TLS encryption. Your personal details, payment credentials, and account activity are never transmitted in plain text over any network.
api68 collects only the personal data that is strictly necessary to provide our Services, comply with KYC and anti-money laundering obligations, and improve the Member experience. We do not collect data for the purpose of selling it to third parties.
Your personal data is never sold, rented, or traded to third-party marketers. Data is shared externally only where required by law, necessary to process your transactions via verified Indonesian bank partners, or mandated by our international licensing authority.
As an api68 Member, you have the right to access, correct, and request deletion of your personal data at any time, subject to our legal retention obligations. Submit a data request to our support team and we will respond within 30 days.
Member data is stored on encrypted servers with access restricted to authorised api68 personnel on a strict need-to-know basis. Internal access logs are maintained and reviewed regularly. Physical and logical access controls meet international security standards.
Whenever this Privacy Policy is materially updated, api68 will notify affected Members via the registered email address at least seven days before changes take effect. The current version and its effective date are always displayed at the top of this page.
api68 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every individual who accesses, registers with, or uses the api68 online casino and sports betting platform at https://api68.onl. This Privacy Policy sets out in full the types of personal data we collect, the purposes for which that data is processed, the circumstances under which it may be shared with third parties, how long we retain it, and the rights available to you as a Member or visitor.
This Privacy Policy applies to all personal data processed in connection with your use of the api68 Platform, including data collected through the website, through our customer support channels, and through any related communications we send to you by email or other electronic means.
By registering an account on the api68 Platform or by continuing to use the Platform after this Privacy Policy has been updated, you confirm that you have read and understood this document and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you must not register an account or continue to use the Platform.
Indonesia Notice: api68 primarily serves Members located across Indonesia, including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and other major cities. Where Indonesian law imposes specific data protection requirements applicable to our operations, api68 will make reasonable efforts to comply with those requirements. All personal data submitted via Indonesian local payment channels — including bank transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI (Bank Syariah Indonesia), OCBC NISP, and Bank Permata, and e-wallet transactions via OVO, DANA, GoPay, ShopeePay, and LinkAja — is handled in accordance with this Privacy Policy.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including but not limited to name, email address, phone number, date of birth, payment account details, IP address, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, restriction, erasure, or destruction. |
| "Member" | Any individual who has completed the api68 registration process and holds an active or inactive account on the Platform. |
| "KYC" | Know Your Customer — the identity and payment verification process applied to all api68 accounts as required by our international licensing obligations and anti-money laundering compliance framework. |
| "Controller" | api68, acting as the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Third-Party Processor" | Any external service provider that processes Personal Data on behalf of api68 under a written data processing agreement, including payment processors, identity verification providers, and fraud prevention services. |
| "Sensitive Data" | A subset of Personal Data that requires a heightened level of protection, including government-issued identity document numbers, bank account details, and financial transaction records. |
api68 collects the following categories of Personal Data in the course of providing its Services:
api68 collects Personal Data through the following means:
api68 processes your Personal Data for the following clearly defined purposes:
| Purpose | Description |
|---|---|
| Account creation and management | To register your account, verify your identity, manage your account settings, and communicate essential account information to you. |
| Payment processing | To process deposits and withdrawals via Indonesian local banks and e-wallets and to maintain accurate financial records in IDR. |
| KYC and AML compliance | To verify your identity and payment methods, satisfy anti-money laundering obligations, and prevent the use of the Platform for financial crime. |
| Service delivery | To enable you to access and play slot games, live dealer tables, sportsbook markets, and other api68 products. |
| Fraud prevention and security | To detect and prevent fraudulent activity, multi-accounting, bonus abuse, and unauthorized access to Member accounts. |
| Responsible gaming | To monitor gameplay patterns and enforce deposit limits, cooling-off periods, and self-exclusion requests in support of our responsible gaming program. |
| Customer support | To respond to your inquiries and resolve disputes efficiently, using correspondence records as a reference throughout the support process. |
| Marketing communications | To send promotional offers, seasonal bonuses (e.g., Ramadhan, Idul Fitri / Lebaran, Indonesian Independence Day promotions), and platform updates — only where you have provided consent and only to your registered email address. |
| Platform improvement | To analyze aggregated usage data for the purpose of improving site performance, game selection, and user experience — using anonymized datasets wherever possible. |
api68 processes your Personal Data under one or more of the following legal bases, depending on the specific processing activity:
api68 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Personal Data is shared externally only in the following limited and controlled circumstances:
api68 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and licensing obligations. The following retention schedule applies:
| Data Category | Retention Period |
|---|---|
| Account registration data | For the duration of active membership, plus five (5) years following account closure. |
| KYC verification documents | Five (5) years from the date of verification, or from the date of account closure — whichever is later — as required by anti-money laundering compliance standards. |
| Transaction and financial records | Five (5) years from the date of each transaction, in accordance with financial record-keeping requirements applicable under our international gaming license. |
| Game history records | Three (3) years from the date of each gaming session, retained for dispute resolution purposes. |
| Customer support correspondence | Three (3) years from the date of the most recent communication in each support thread. |
| Technical and analytics data | Thirteen (13) months from the date of collection, after which data is aggregated and anonymized. |
| Marketing consent records | Until consent is withdrawn, plus one (1) year following withdrawal as evidence of consent history. |
At the end of the applicable retention period, Personal Data is securely deleted or anonymized in a manner that prevents reconstruction of the original data. Where deletion is not immediately technically feasible (for example, due to backup cycle constraints), the data will be isolated from active processing until deletion can be completed.
api68 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Key security controls include:
While api68 takes all reasonable steps to protect your Personal Data, no electronic transmission over the internet or method of electronic storage is completely secure. You are responsible for maintaining the security of your own account credentials. If you suspect that your account has been accessed without your authorization, contact api68 support immediately at [email protected].
api68 uses cookies and similar tracking technologies on the Platform to deliver core functionality, maintain session state, and gather analytical data to improve the Member experience. The following categories of cookies are used:
| Cookie Type | Required? | Purpose |
|---|---|---|
| Essential cookies | Yes | Maintain your login session, remember your language and currency preferences, and enable core Platform features such as the cashier and game loader. Cannot be disabled without impairing Platform functionality. |
| Analytics cookies | No (consent) | Collect anonymized or pseudonymized data on how Members navigate the Platform — pages visited, session duration, entry and exit pages — used to improve site architecture and content relevance. |
| Security cookies | Yes | Support fraud detection and bot mitigation by associating behavioral signals with your session. These cookies contribute to the risk scoring used to protect your account and the Platform from unauthorized access. |
| Preference cookies | No (consent) | Remember your display preferences, game category filters, and notification settings between sessions to provide a personalized experience. |
api68 does not use third-party advertising cookies or tracking pixels for the purpose of serving behavioral advertising on external websites. You may adjust your cookie preferences at any time by contacting our support team. Withdrawing consent for non-essential cookies will not affect your ability to access the core api68 Platform or gaming Services.
As an api68 Member, you have the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected]. api68 will acknowledge receipt within two (2) business days and respond substantively within thirty (30) calendar days.
The api68 Platform is strictly for adults aged 21 and over. api68 does not knowingly collect, process, or retain any Personal Data from individuals under the age of 21. The registration process includes mandatory age verification steps, and all accounts are subject to KYC age verification prior to the processing of any withdrawal request.
If api68 discovers or is informed that Personal Data belonging to an individual under the age of 21 has been collected — whether through deliberate misrepresentation during registration or through any other means — the affected account will be immediately suspended, all associated balances will be frozen pending review, and the Personal Data in question will be deleted as soon as technically practicable, subject to any contrary legal obligation.
If you are a parent or guardian and believe that a person under your care has registered an api68 account without your knowledge, please contact our support team immediately at [email protected]. We will respond to all such notifications as a matter of priority.
The api68 Platform may, from time to time, reference or display content from third-party game studios, payment providers, and sports data feed partners as part of the core Service delivery. This Privacy Policy applies exclusively to Personal Data processed by api68 in connection with the api68 Platform and Services.
api68 accepts no responsibility for the privacy practices of any third-party service providers, game studios, or payment processors with whom you may independently interact. Where a third-party service requires you to submit Personal Data directly to that provider — for example, in the context of a dedicated e-wallet app or a banking application — you should review that provider's own privacy policy before doing so.
api68 operates as an internationally licensed offshore gaming platform. As a result, certain Personal Data processing activities — including cloud infrastructure hosting, identity verification services, and game platform operations — may involve the transfer of Personal Data to servers or processors located outside of Indonesia.
Where Personal Data is transferred internationally, api68 takes appropriate steps to ensure that such transfers are subject to equivalent data protection standards. These steps may include the use of standard contractual clauses, binding data processing agreements, or transfers to jurisdictions that are recognized as providing an adequate level of data protection consistent with our international licensing framework.
By using the api68 Platform, you acknowledge that your Personal Data may be transferred to, stored in, and processed in jurisdictions outside of Indonesia. api68 will at all times apply the protections described in this Privacy Policy regardless of where your data is physically processed.
api68 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or licensing requirements, or improvements to our security and compliance framework. The date of the most recent revision is always displayed at the top of this page.
Where an amendment materially affects the rights of existing Members — for example, by expanding the categories of data collected, introducing new third-party data sharing arrangements, or changing the legal basis for a processing activity — api68 will provide at least seven (7) days' advance notice via the email address registered to each affected Member's account before the revised Privacy Policy takes effect.
For minor amendments — including typographical corrections, clarifications of existing practices, or updates required by law on short notice — api68 may update this Privacy Policy without advance notification. Your continued use of the api68 Platform after any amendment takes effect constitutes your acceptance of the revised Privacy Policy. If you do not accept a material amendment, your sole remedy is to close your account in accordance with the account termination provisions in the api68 Terms & Conditions.
For all privacy-related inquiries — including requests to exercise your data rights, questions about this Privacy Policy, or concerns about the way your Personal Data is being processed — please contact the api68 Data Protection team through the following channel:
api68 Data Protection & Privacy Team
Email: [email protected] (plain text — not a clickable link)
Availability: 24 hours a day, 7 days a week, including all Indonesian public holidays
Response Time: Acknowledgment within 2 business days; substantive response within 30 calendar days
Language: Native Indonesian-speaking agents available at all hours
When submitting a data rights request, please include your registered email address, your registered username, and a brief description of the request type (e.g., "access request", "erasure request", "rectification request") to help us process your inquiry efficiently. api68 may request additional information to verify your identity before processing a data rights request — this is a security measure to protect your Personal Data from unauthorized disclosure.
With your privacy secured under our comprehensive data protection framework, explore everything api68 has to offer — from 1,500+ slot titles and live dealer tables to competitive sportsbook markets and fast IDR payments. 21+ only. Gamble responsibly.