Privacy Policy

1 Introduction

This Privacy Policy (the "Policy") describes how ApeTuBet (the "Platform", "we", "us", or "our"), operating the website at https://apetubet.cam, collects, processes, stores, uses, and protects the personal data of individuals ("Players", "Users", or "you") who access or use the Platform's services. These services include online casino games, sports betting, live dealer tables, loyalty programmes, promotional offers, and customer support functions.

ApeTuBet is an international online gaming platform primarily serving players in Malaysia and internationally. We are committed to handling your personal data with care, transparency, and in compliance with the data protection principles embedded in our international operating licence and applicable international privacy standards.

By creating an account, depositing funds, placing a wager, or otherwise using the ApeTuBet Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of and should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, residential address, payment details, and identity document information.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means ApeTuBet, the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of ApeTuBet under a contractual obligation and in accordance with our instructions.
• "Sensitive Data" means a subcategory of Personal Data requiring enhanced protection, including identity documents, financial account details, and any data revealing health, religious, or political information.
• "Cookies" means small text files placed on your device by the Platform for session management, security, and analytical purposes.
• "KYC" refers to the Know Your Customer identity and address verification process.

3 Data We Collect

ApeTuBet collects and processes the following categories of Personal Data in connection with the services provided through the Platform:

3.1 Account Registration Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address (including city, state, and postcode)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (Malaysian Ringgit, MYR, or supported cryptocurrency)

3.2 Identity Verification (KYC) Data

• Scanned or photographed copy of a valid government-issued identity document (Malaysian IC / MyKad, Passport, or Driver's License)
• Proof of residential address (utility bill, bank statement, or telecommunications bill dated within three months)
• Selfie photograph holding identity document
• Any additional documents requested under enhanced due diligence procedures

3.3 Financial & Transaction Data

• Payment method details (e-wallet IDs, bank account numbers, FPX references, cryptocurrency wallet addresses)
• Deposit and withdrawal transaction records, including amounts in MYR or cryptocurrency equivalent
• Bonus allocation and wagering history
• Account balance at given points in time

3.4 Gaming & Betting Activity Data

• Game session records (titles played, session duration, bet amounts, outcomes)
• Sports betting records (markets, wager amounts, odds accepted, outcomes)
• Live dealer table participation records
• VIP and loyalty tier progression data

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps and platform navigation logs
• Cookie and tracking technology data (as described in Section 11)

3.6 Communications Data

• Records of live chat conversations with our support team
• Email correspondence with ApeTuBet
• Feedback, complaint, or dispute submissions
• Responses to satisfaction surveys (where voluntarily provided)

4 How We Collect Data

We collect Personal Data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit, place a wager, contact support, or respond to a promotion.
• Automatically through technology — when you use the Platform, our systems automatically record device data, IP address, session data, and interaction logs via cookies and server-side logging.
• From payment service providers — when you initiate a transaction via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency networks, relevant transaction confirmation data is passed to us by the payment processor.
• From identity verification services — third-party KYC and anti-fraud platforms may provide us with verification results and risk signals as part of our compliance obligations.
• From publicly available sources — where required for AML/CFT screening, we may supplement profile data with information from publicly accessible databases.

5 Purposes of Processing

ApeTuBet processes your Personal Data for the following clearly defined purposes:

• Account creation and management — registering your account, maintaining your profile, and enabling you to access Platform services.
• Age and identity verification — confirming that you are aged 21 or above and that your identity matches the information provided, in compliance with our licensing obligations.
• Payment processing — facilitating deposits and withdrawals through your chosen payment method, including MYR bank transfers and cryptocurrency transactions.
• Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) compliance — monitoring transactions and account behaviour to detect and prevent financial crime, as required by our international licence.
• Fraud prevention and security — identifying and preventing unauthorised access, multi-accounting, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• Provision of gaming and betting services — enabling you to play games, place sports bets, participate in promotions, and access your transaction and gaming history.
• Customer support — responding to your queries, resolving disputes, and providing assistance via live chat or email.
• Responsible gambling — monitoring gaming patterns to identify at-risk behaviour, applying requested deposit limits or self-exclusions, and fulfilling our duty of care obligations.
• Platform improvement and analytics — analysing aggregated and anonymised usage data to improve the performance, design, and features of the Platform.
• Legal and regulatory compliance — retaining records and responding to requests from regulatory or law enforcement authorities as required by applicable law.

6 Legal Basis for Processing

ApeTuBet processes your Personal Data on the following legal grounds:

• Contractual necessity — processing required to provide services under the Terms & Conditions you accepted at registration, including account management, payment processing, and game provision.
• Legal obligation — processing required to comply with AML/CTF legislation, age verification requirements, and other mandatory regulatory obligations imposed by our licensing authority.
• Legitimate interests — processing necessary for fraud prevention, security, responsible gambling monitoring, and platform improvement, where such interests are not overridden by your rights and freedoms.
• Consent — where required by applicable law (e.g., for optional marketing communications), we will seek your explicit consent prior to processing.

7 Data Sharing & Disclosure

ApeTuBet does not sell, rent, or trade your Personal Data. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment service providers — Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network processors, solely to facilitate transactions you initiate.
• Identity verification and KYC partners — specialist compliance platforms engaged to assist with document verification, age confirmation, and AML screening.
• Game content providers — third-party casino game studios (such as Evolution, PG Soft, Playtech, and Microgaming) may receive anonymised session data as part of their game operation infrastructure. These providers do not receive your personal account data.
• IT and platform infrastructure providers — cloud hosting, cybersecurity, and technical operations partners who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities — where we are required by law, court order, or licensing authority directive to disclose data, we will comply while notifying you to the extent legally permissible.
• Professional advisers — lawyers, auditors, and compliance consultants engaged under professional confidentiality obligations.

8 International Data Transfers

As an international platform, ApeTuBet may transfer your Personal Data to servers and processors located outside Malaysia. Where such transfers occur, we apply appropriate safeguards including contractual clauses, data processing agreements, and security standards consistent with our licensing jurisdiction's requirements.

By using the ApeTuBet Platform from Malaysia or any other location, you acknowledge that your Personal Data may be transferred to, stored in, and processed in jurisdictions other than your country of residence, where data protection laws may differ from those in your home jurisdiction.

9 Data Retention

We retain Personal Data for as long as necessary to fulfil the processing purposes described in Section 5 of this Policy, or as required by applicable law. Specific retention periods include:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in compliance with AML/CTF record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years in accordance with financial reporting and regulatory obligations.
• Support communications: Retained for two (2) years following resolution of the relevant enquiry or dispute.
• Technical and device data: Retained for up to twelve (12) months, unless required for ongoing fraud or security investigations.
• Cookie data: Session cookies are deleted when you close your browser. Persistent cookies expire within the timeframes set out in our cookie notice, typically between 30 days and 12 months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

10 Data Security

ApeTuBet implements comprehensive technical and organisational measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our Platform
• Encryption of sensitive data at rest, including identity documents and payment information
• Access controls and role-based permissions limiting staff access to Personal Data on a strict need-to-know basis
• Multi-factor authentication options for player accounts
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Intrusion detection systems and real-time security monitoring
• Staff training on data protection obligations and secure data handling practices

In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify affected users without undue delay and take all reasonable steps to contain and remediate the breach.

11 Cookies & Tracking Technologies

ApeTuBet uses cookies and similar technologies (including local storage and web beacons) to provide a secure, functional, and improved experience on the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly — enabling login sessions, navigation, and security features. These cannot be disabled without disrupting core Platform functionality.
• Performance and analytics cookies: Used to measure how users interact with the Platform, including page visit frequency, error encounters, and navigation paths. Data is aggregated and anonymised.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and session configuration.

We do not use third-party advertising or behavioural targeting cookies. You may manage cookie preferences through your browser's settings panel; however, disabling strictly necessary cookies may impair your ability to use the Platform.

12 Your Rights

Subject to applicable law and our legitimate processing obligations, you have the following rights regarding your Personal Data held by ApeTuBet:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. Minor corrections (such as address changes) can be made directly via your Account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances, such as while a data accuracy dispute is under review.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request your Personal Data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team via live chat or by email at the address provided in Section 16 of this Policy. We will respond to all valid requests within thirty (30) calendar days of receipt. We may need to verify your identity before processing a data rights request.

13 Protection of Minors

The ApeTuBet Platform is strictly for individuals aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory component of our KYC process and is enforced prior to the activation of withdrawal capabilities.

If we become aware that Personal Data has been collected from a person under the age of 21, we will immediately close the associated account, forfeit any balance in accordance with our Terms & Conditions, and securely delete the personal data collected, except where retention is required by law.

If you are a parent or guardian and believe your minor child has registered an account with ApeTuBet, please contact our support team immediately via live chat or email.

14 Third-Party Links

The ApeTuBet Platform may contain references to third-party services, payment processors, and game providers. This Privacy Policy applies solely to data processed by ApeTuBet. We are not responsible for the privacy practices, policies, or security standards of third-party operators, even where we reference or integrate their services.

When you initiate a payment via a third-party processor such as Touch 'n Go eWallet, DuitNow, or a bank's FPX interface, the data processing that occurs within that third party's own systems is governed by their respective privacy policies, not this Policy.

15 Policy Amendments

ApeTuBet reserves the right to update, amend, or replace this Privacy Policy at any time. Material changes that affect how we use your Personal Data will be communicated by email notification to your registered address and/or by a prominent notice on the Platform prior to the effective date of the change, with a minimum notice period of seven (7) calendar days.

The "Last Updated" date at the top of this Policy will be revised whenever changes are made. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

16 Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy, or wish to exercise any of your data rights described in Section 12, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the Platform. Please indicate that your query relates to data protection or privacy for fastest routing to the appropriate team.
• Email: [email protected]
  Please include "Privacy Request" in the subject line. We will acknowledge receipt within 2 business days and respond fully within 30 calendar days.

For responsible gambling-related requests — including self-exclusion, deposit limits, or account cooling-off periods — please visit our Responsible Gambling page or contact our support team via live chat for immediate assistance.