Privacy Policy

This Privacy Policy ("Policy") explains how apslot ("apslot", "we", "us", "our") collects, uses, stores, discloses, and protects personal information provided by users ("User", "Player", "you", "your") of the apslot online gaming platform and associated services (collectively, the "Platform"). By creating an account, depositing funds, or using any apslot services, you acknowledge that you have read, understood, and consent to the data collection and processing practices described in this Policy. If you do not agree with any aspect of this Policy, you must not use apslot services.

1. Information We Collect

1.1 Information You Provide Directly

When you register an account with apslot, we collect the following personal information that you voluntarily provide:

• Identity Information: Full legal name, date of birth, gender, and nationality as required to verify you meet the minimum age requirement of 21 years and comply with Know Your Customer (KYC) regulations.
• Contact Information: Email address, Indonesian phone number (mobile or landline), and residential address (street address, city, postal code, province) for account communication, payment processing, and identity verification.
• Account Credentials: Username and password you create for accessing your apslot account. Passwords are encrypted using industry-standard hashing algorithms and are never stored or transmitted in plain text.
• Financial Information: Bank account details (bank name, account number, account holder name) and e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers) for processing deposits and withdrawals. Credit card information, if provided, is processed through secure third-party payment gateways and is not stored on apslot servers.
• Verification Documents: Government-issued identification documents such as KTP (Indonesian Identity Card), passport, or driver's license, and proof of address documents (utility bills, bank statements) submitted during the KYC verification process. These documents are stored securely and accessed only by authorized personnel for verification purposes.

1.2 Information We Collect Automatically

When you access or use the apslot Platform, we automatically collect certain technical and usage information:

• Device Information: Device type (smartphone, tablet, desktop computer), operating system (Android, iOS, Windows, macOS, Linux), browser type and version, screen resolution, and device identifiers to optimize platform performance for your specific device configuration.
• Connection Information: IP address, internet service provider, approximate geographic location (city and region level, not precise GPS coordinates), and time zone to detect fraudulent activity, prevent multiple account creation from the same device, and comply with geo-restriction requirements where applicable.
• Usage Data: Pages visited, features accessed, games played, bets placed, time spent on various sections of the Platform, navigation patterns, and interaction with promotional content to improve user experience, identify technical issues, and develop new features based on player preferences.
• Transaction History: Complete record of deposits, withdrawals, wagers, wins, losses, bonus claims, and payment method usage to maintain accurate account balances, resolve disputes, detect unusual activity patterns indicative of fraud or problem gambling, and comply with financial reporting obligations.
• Communication Records: Customer support chat logs, email correspondence, WhatsApp message history, and phone call recordings (when applicable and with prior notice) for quality assurance, training purposes, and dispute resolution.

1.3 Information from Third Parties

apslot may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment status, and fraud risk assessment data from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers to verify deposit and withdrawal legitimacy.
• Identity Verification Services: Confirmation of identity document authenticity from third-party KYC verification providers to prevent identity fraud and account takeover.
• Gaming Providers: Game session data, win/loss records, and gameplay statistics from slot providers, live casino studios, and sports betting data suppliers to calculate accurate account balances and detect gaming anomalies.
• Marketing Partners: If you access apslot through an affiliate link or promotional campaign, we may receive referral information and campaign identifiers to track marketing performance and attribute sign-ups correctly.

2. How We Use Your Information

2.1 Account Management and Service Delivery

apslot uses your personal information to provide, maintain, and improve our services:

• Create and manage your player account, authenticate your identity during login, and maintain accurate account records.
• Process deposits and withdrawals via your chosen payment methods (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Provide access to gaming products including slots, live casino games (baccarat, blackjack, roulette), sports betting markets (BRI Liga 1, EPL, La Liga, badminton, MotoGP), and togel (Indonesian numbers lottery).
• Calculate and display accurate account balances, bet history, win/loss statements, and transaction records.
• Administer bonuses, promotions, and loyalty programs you have opted into, including tracking wagering requirements and bonus expiration dates.
• Respond to customer support inquiries via live chat, email, or WhatsApp, troubleshoot technical issues, and resolve account disputes.

2.2 Security and Fraud Prevention

Protecting our Platform and players from fraud, abuse, and security threats is a critical use of your information:

• Verify your identity to prevent underage gambling, account takeover, identity theft, and fraudulent registration using stolen or fake documents.
• Monitor gameplay patterns, betting behavior, and transaction history to detect suspicious activity such as money laundering, collusion, bonus abuse, or use of automated betting software.
• Analyze device fingerprints, IP addresses, and connection patterns to identify and block multiple account creation from the same individual in violation of our Terms and Conditions.
• Implement security measures including two-factor authentication, session timeouts, and encryption protocols to protect your account from unauthorized access.
• Investigate reported incidents of fraud, cheating, harassment, or Terms violations, and take appropriate enforcement action including account suspension or closure.

2.3 Legal and Regulatory Compliance

apslot is subject to various legal and regulatory obligations that require collection and retention of personal information:

• Comply with anti-money laundering (AML) regulations requiring customer due diligence, transaction monitoring, and suspicious activity reporting to relevant authorities.
• Maintain records of financial transactions for audit and tax purposes as mandated by applicable gaming regulations and financial reporting requirements.
• Respond to valid legal requests including court orders, subpoenas, search warrants, and government inquiries from law enforcement or regulatory agencies.
• Enforce our Terms and Conditions, Privacy Policy, and responsible gaming policies, including implementing deposit limits, self-exclusion requests, and age verification measures.
• Retain records for legally mandated periods (typically 5-7 years for financial records) even after account closure to satisfy regulatory obligations.

2.4 Marketing and Communications

With your consent, apslot may use your contact information for promotional purposes:

• Send promotional emails about new games, bonus offers, tournaments, and special events tailored to your gaming preferences and activity history.
• Deliver push notifications (if you have opted in via mobile browser or app) about time-sensitive promotions, jackpot alerts, or important account updates.
• Contact you via SMS or WhatsApp regarding exclusive offers, account security alerts, or responsible gaming reminders (frequency limits apply).
• Display personalized banner ads and game recommendations within the apslot Platform based on your gameplay history and preferences.

You may opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting notification settings in your account preferences, or contacting customer support. Opting out of marketing will not affect transactional communications such as deposit confirmations, withdrawal notifications, or account security alerts, which are essential to service delivery.

3. How We Protect Your Information

3.1 Technical Security Measures

apslot implements comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and apslot servers is encrypted using industry-standard 256-bit Secure Sockets Layer (SSL) technology, the same encryption standard used by banks and financial institutions worldwide.
• Secure Server Infrastructure: Personal information is stored on secure servers located in protected data centers with physical access controls, 24/7 surveillance monitoring, redundant power supplies, and fire suppression systems.
• Database Encryption: Sensitive data fields including passwords, financial information, and identification documents are encrypted at rest using advanced encryption algorithms (AES-256) to prevent unauthorized access even if server security is compromised.
• Firewall Protection: Multi-layer firewalls protect apslot systems from external threats including distributed denial-of-service (DDoS) attacks, malware, and unauthorized intrusion attempts.
• Regular Security Audits: Third-party security firms conduct regular penetration testing and vulnerability assessments to identify and remediate potential security weaknesses before they can be exploited.

3.2 Access Controls and Internal Policies

apslot restricts access to personal information through strict internal policies:

• Access to customer data is limited to authorized personnel who require such information to perform their job duties (customer support, KYC verification, fraud investigation, payment processing).
• All employees with data access undergo background checks, sign confidentiality agreements, and receive regular training on data protection best practices and privacy regulations.
• User activity logs track all access to sensitive data, creating an audit trail that enables detection of unauthorized internal access attempts.
• Two-factor authentication and strong password policies are enforced for all employee accounts with access to customer information systems.

3.3 Third-Party Data Processors

When apslot engages third-party service providers (payment processors, KYC verification services, game providers, hosting infrastructure), we ensure they maintain adequate data protection standards:

• All third-party processors sign data processing agreements contractually obligating them to protect personal information and use it solely for specified purposes.
• We conduct due diligence to verify third parties implement appropriate security measures before entrusting them with customer data.
• Third-party access is limited to the minimum data necessary to perform their contracted services and does not include permission to use data for their own purposes.

4. Information Sharing and Disclosure

4.1 When We Share Your Information

apslot does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:

• Service Providers: Payment processors (banks and e-wallets) receive financial information necessary to process deposits and withdrawals. KYC verification services receive identity documents to authenticate your identity. Game providers receive username and gameplay data to deliver gaming services. Hosting and infrastructure providers may have technical access to systems storing customer data.
• Legal Obligations: We disclose information when required by law, court order, subpoena, or government request from law enforcement or regulatory authorities investigating fraud, money laundering, or other criminal activity.
• Business Transfers: If apslot undergoes a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity as part of the business assets, subject to the same privacy protections outlined in this Policy.
• Consent: We may share your information with other third parties if you provide explicit consent for such disclosure, with clear explanation of the purpose and scope of information sharing.

4.2 International Data Transfers

apslot primarily serves Indonesian players, and your data is primarily processed and stored within Indonesia or nearby regions. However, some service providers (game studios, payment gateways, cloud hosting infrastructure) may be located in other countries, necessitating international data transfers. When transferring data internationally, we ensure adequate protections are in place through contractual safeguards, standard data protection clauses, or verification that recipient countries maintain data protection laws substantially equivalent to international standards.

5. Your Privacy Rights and Choices

5.1 Access and Correction

You have the right to access, review, and correct your personal information held by apslot. To exercise this right, log into your account and navigate to the account settings page where you can view and update your contact information, address, and payment methods. For access to other categories of data (KYC documents, transaction history, support communications), contact our customer support team via email at [email protected] with your request. We will respond within 14 business days and provide the requested information in a commonly used electronic format.

5.2 Account Deletion and Data Erasure

You may request deletion of your apslot account and erasure of associated personal information by contacting customer support. Please note that complete data erasure may not be immediately possible due to legal obligations requiring retention of financial records for regulatory periods (typically 5-7 years). After account closure, we will delete or anonymize non-essential data while retaining only information required for legal compliance, fraud prevention, and dispute resolution. Deleted accounts cannot be recovered, and any remaining account balance must be withdrawn before deletion.

5.3 Marketing Opt-Out

You may opt out of receiving promotional communications by clicking the unsubscribe link in marketing emails, adjusting notification preferences in your account settings, or contacting customer support with your opt-out request. Opt-out requests are processed within 10 business days. Note that opting out of marketing does not affect transactional communications essential to service delivery (deposit confirmations, withdrawal notifications, account security alerts, responsible gaming notifications).

5.4 Cookie Management

The apslot Platform uses cookies and similar technologies (web beacons, local storage) to enhance user experience, remember login status, save preferences, and analyze platform usage. Most web browsers allow you to manage cookie settings through browser preferences, enabling you to block or delete cookies. However, disabling cookies may impair certain platform functionality such as persistent login, personalized game recommendations, and proper display of preferred language or currency settings.

6. Children's Privacy

apslot services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that a user is below the minimum age requirement, we will immediately suspend the account, void all transactions, and delete associated personal information from our systems. Parents or guardians who believe their child has provided information to apslot should contact customer support immediately at [email protected] so we can take appropriate action.

7. Data Retention

apslot retains personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Information is retained for the entire duration your account remains active plus any legally mandated retention period following account closure.
• Financial Records: Transaction history, deposit/withdrawal records, and payment information are retained for a minimum of 5-7 years after the transaction date to comply with financial regulations and tax laws.
• KYC Documents: Identity verification documents are retained for 5 years following account closure or the end of the business relationship to satisfy anti-money laundering regulations.
• Communication Records: Customer support chat logs, emails, and call recordings are retained for 2-3 years for quality assurance and dispute resolution purposes.
• Marketing Data: If you opt out of marketing communications, your contact information is retained on a suppression list to ensure we do not inadvertently contact you again in future campaigns.

8. Changes to This Privacy Policy

apslot reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Updated versions will be posted on this page with a revised "Last Updated" date at the top of the document. Material changes affecting your rights or how we handle sensitive personal information will be communicated via email to the address associated with your account, with a notice period before the changes take effect. Your continued use of apslot services following the posting of revised Privacy Policy constitutes acceptance of the updated terms. We recommend reviewing this Policy periodically to stay informed of our current privacy practices.

9. Contact Information for Privacy Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or how apslot handles your personal information, please contact our data protection team:

• Email: [email protected] (dedicated privacy inquiry address, typical response time 2-5 business days)
• Customer Support: Live chat available 24/7 via apslot website (fastest response time for urgent privacy concerns)
• WhatsApp: +62 812-3456-7890 (Indonesian and English privacy inquiry support)

When contacting us regarding privacy matters, please include your full name, registered email address, and a detailed description of your inquiry or request so we can respond effectively. For account-specific privacy requests (data access, correction, deletion), we may require identity verification to prevent unauthorized disclosure of personal information to third parties.