Privacy Policy — ape777

ape777 is an online betting and gaming platform serving players across Indonesia and other permitted jurisdictions. We take the protection of your personal data seriously and are committed to handling it responsibly, transparently, and in accordance with internationally recognized data protection principles.

This Policy applies to all personal data collected through the ape777 website (ape777.cam), mobile applications (where applicable), customer support channels (live chat, email), and any other interaction you have with our platform or team. It applies to all current and former Members, as well as visitors who browse the Platform without registering.

We recognize that our Members in Indonesia entrust us with sensitive financial and personal information. That trust is not taken lightly. Our data practices are designed to be minimal, purposeful, and secure — we collect only what we need, use it only for the purposes stated, and protect it with robust technical and organizational safeguards.

If you have any questions about this Policy or how we handle your data, our Data Protection contact details are provided in Section 14 of this document.

For the purposes of this Policy, ape777 acts as the data controller in respect of all personal data collected from Members and visitors to ape777.cam. As data controller, ape777 determines the purposes for which and the means by which personal data is processed.

Where ape777 engages third-party service providers to process personal data on its behalf (such as KYC verification partners, payment processors, and fraud detection vendors), those providers act as data processors under ape777's instruction and are bound by contractual data processing agreements that require them to maintain confidentiality and process data only as directed.

ape777 is licensed and regulated internationally. Our registered business address and primary data protection contact are available upon request through our support channels.

We collect personal data from you directly (when you register, transact, or contact us), automatically (through cookies and usage tracking), and from third parties (such as KYC verification and fraud prevention services). The categories of data we collect are as follows:

We do not collect sensitive special-category data (such as racial origin, religious beliefs, or health data) unless you voluntarily provide such information in the context of a responsible gaming support request, in which case it is handled with the highest degree of confidentiality and used solely to provide appropriate assistance.

ape777 uses your personal data for the following purposes. Each purpose is matched to a legal basis set out in Section 5:

1. Account creation and management: To register your account, verify your identity and age (21+ requirement), maintain your account settings, and provide you with access to all Platform features.
2. Payment processing: To facilitate deposits and withdrawals via your nominated Indonesian bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate transaction records.
3. KYC and age verification: To verify that you are at least 21 years old and that your identity and payment methods are genuine, in compliance with our anti-fraud and anti-money-laundering obligations.
4. Platform operation and improvement: To deliver the games, odds, betting markets, and services you request; to troubleshoot technical issues; and to analyze usage patterns to improve the Platform's performance, design, and product offering.
5. Fraud and security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, multi-accounting, bonus abuse, and money laundering.
6. Customer support: To respond to your inquiries, resolve disputes, and provide after-sales assistance through our 24/7 Indonesian-speaking support team.
7. Responsible gaming: To monitor betting behavior for indicators of problem gambling and to enforce self-exclusion, deposit limit, and session-time settings you have activated.
8. Legal and regulatory compliance: To meet our obligations under applicable licensing conditions, AML regulations, and other applicable international legal requirements.
9. Marketing communications (opt-in only): To send you promotions, bonus offers, and Platform updates via email or SMS, but only if you have explicitly opted in. You may opt out at any time at no cost.
10. Personalization: To tailor the Platform experience to your preferences, such as surfacing BRI Liga 1 markets if you frequently bet on Indonesian football, or recommending high-RTP slot titles based on your play history.

ape777 processes your personal data under the following legal bases, consistent with internationally recognized data protection frameworks:

• Contractual necessity: Processing is necessary to perform our contract with you — i.e., to operate your account, process bets, and pay winnings. This basis covers identity verification, payment processing, and account management.
• Legal obligation: Processing is required to comply with anti-money-laundering laws, licensing conditions, KYC requirements, and other applicable regulations. This basis covers KYC record-keeping, transaction monitoring, and fraud reporting.
• Legitimate interests: Processing is necessary for ape777's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This basis covers fraud prevention, platform security, usage analytics, and responsible gaming monitoring.
• Consent: Where processing is not covered by the above bases, we will ask for your explicit consent. This applies to marketing communications and optional personalization features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ape777 does not sell, rent, or trade your personal data to unaffiliated third parties. We share your data only in the following limited circumstances, and only to the minimum extent necessary:

All third-party data processors engaged by ape777 are vetted for their security practices and are required to sign binding data processing agreements that prohibit unauthorized use, onward transfer, or retention of your personal data beyond what is strictly necessary for their designated purpose.

ape777 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and gather analytics data. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, load-balancing cookies, and security tokens. You cannot opt out of these cookies while using the Platform.
• Functional Cookies: Remember your preferences such as language settings, preferred sports markets, and account display options. These improve your experience but are not essential to core Platform operation.
• Analytics Cookies: Collect anonymized data about how visitors use the Platform — pages visited, time spent, navigation paths — to help us improve performance and content. Data collected is aggregated and does not identify you personally.
• Marketing & Retargeting Cookies: Used only if you have consented to marketing communications. These help us deliver relevant promotional content and measure the effectiveness of our campaigns. You may opt out via account settings at any time.

Most web browsers allow you to manage, block, or delete cookies through browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in or using core Platform features. Instructions for managing cookies are available in your browser's help documentation.

ape777 does not use fingerprinting, pixel tracking, or other covert tracking technologies beyond the standard cookie and server-log mechanisms described above. We do not permit third-party advertising networks to place tracking cookies on ape777.cam.

ape777 retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active account data: Retained for the duration of your membership plus a minimum of 5 years after account closure, to satisfy AML record-keeping requirements.
• KYC identity documents: Retained for a minimum of 5 years from the date of verification, as required by international AML standards.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support records: Retained for 3 years from the date of the last interaction, unless the record relates to an ongoing dispute or complaint.
• Marketing preference records: Retained for 2 years from the date your consent was recorded or last updated. Proof of consent is retained for 5 years.
• Technical and usage logs: Typically retained for 12 months in active storage, then archived for up to 3 years for security investigation purposes.

Once a retention period expires, data is securely deleted or anonymized in a manner that prevents re-identification. Anonymized aggregate data (e.g., statistical reports on betting volume) may be retained indefinitely for business intelligence purposes, as it no longer constitutes personal data.

ape777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. Our key security controls include:

• Encryption in transit: All data transmitted between your device and our servers uses TLS 1.3 with 256-bit cipher suites. HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: All personal data stored on our servers and backups is encrypted using AES-256. Encryption keys are managed separately from the data they protect.
• Access controls: Personal data is accessible only to authorized ape777 personnel who require it to perform their job functions. Access rights are reviewed quarterly and revoked immediately upon staff departure.
• Two-factor authentication (2FA): All internal administrative systems require multi-factor authentication. Members are strongly encouraged to enable 2FA on their ape777 accounts via account settings.
• Penetration testing: Independent third-party security firms conduct penetration tests on our infrastructure on a regular schedule. Critical findings are remediated within 72 hours of discovery.
• Intrusion detection: Real-time intrusion detection and anomaly monitoring systems run continuously across all Platform infrastructure, with 24/7 security operations center coverage.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, ape777 will notify affected Members by email within 72 hours of becoming aware of the breach, and will provide clear guidance on protective steps you should take.

While ape777 takes every reasonable precaution to protect your data, no system is entirely immune to attack. You also play a role in keeping your account secure: use a strong, unique password, enable 2FA, and never share your login credentials with anyone.

As a Member of ape777, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our Data Protection team via live chat or at [email protected]. We will respond within 30 calendar days of receiving a valid request.

To submit a data rights request, please provide your registered username, the email address on file, and a clear description of your request. Identity verification may be required before we can fulfill access, portability, or erasure requests.

ape777 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires users to declare their date of birth, and we verify age through our KYC process using government-issued Indonesian identity documents.

If we become aware that personal data has been collected from a person under the age of 21 — whether through a false declaration or any other means — we will immediately:

• Suspend the associated account.
• Refund any net real-money deposits (after deducting any withdrawals already processed) to the payment source.
• Permanently delete all personal data associated with the underage user, subject only to the minimum retention required to document the incident for regulatory purposes.
• Forfeit any winnings generated by the underage account.

If you are a parent or guardian and believe your child has accessed or registered on ape777, contact us immediately at [email protected]. We treat such reports as high-priority and will investigate within 24 hours.

As an internationally operating platform, ape777 may transfer your personal data to servers, processors, or affiliates located outside of Indonesia. When such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Safeguards for cross-border transfers include:

• Binding contractual clauses (standard contractual clauses or equivalent) with all international data processors and recipients.
• Transfers only to countries or organizations that maintain data protection standards recognized as adequate by relevant international frameworks.
• Regular review of all international data-sharing arrangements to ensure continued compliance with evolving data protection standards.

Where data is transferred to game content providers (such as Pragmatic Play, Evolution Gaming, or Spribe) for game session authentication, those transfers are limited to pseudonymized session identifiers and do not include your full identity or financial records.

ape777 reviews this Privacy Policy at least once per year and whenever there are material changes to our data practices, applicable law, or the services we offer. When we make significant changes to this Policy, we will notify you by:

• Displaying a prominent notice on the ape777 homepage for a minimum of 14 days prior to the changes taking effect.
• Sending a notification to your registered email address at least 7 calendar days before the new Policy comes into force.
• Updating the "Last Updated" date at the top of this page.

Minor changes — such as corrections of typographical errors, clarifications that do not alter the substance of the Policy, or updated contact details — may be made without advance notice, though the "Last Updated" date will always reflect the most recent revision.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the changes, you should cease using the Platform and contact us to close your account.

For any privacy-related questions, data rights requests, or concerns about how ape777 handles your personal data, please reach out through the following channels: