At api55, your privacy is a foundational commitment, not an afterthought. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a registered Member of Indonesia's premier internationally licensed online casino and sportsbook.
Six core principles that govern every decision we make about your personal data — from the moment you register to the day you close your account.
We collect only the personal data that is strictly necessary for account management, identity verification (KYC), fraud prevention, and the delivery of our gaming services. We do not harvest data speculatively.
All data transmitted between your browser and api55 servers is protected by TLS 1.3 with AES-256 encryption. Stored personal data is encrypted at rest on PCI-DSS compliant offshore infrastructure.
api55 will never sell, rent, or trade your personal data to unaffiliated third parties for commercial purposes. Data sharing with service providers is strictly limited to what is necessary for platform operation.
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a data request to [email protected] and our compliance team will respond within 30 days.
Promotional emails, SMS notifications, and in-platform marketing communications are only sent to Members who have explicitly opted in. You can withdraw consent at any time from your account settings or by emailing us.
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, comply with legal obligations, and resolve disputes. Account data is deleted within 90 days of verified account closure.
In this Privacy Policy, the following terms carry the meanings defined below:
| "api55" / "We" / "Us" | The api55 platform, an internationally licensed offshore gaming operator accessible at https://api55.lat and all associated sub-domains and mobile-optimised interfaces. |
| "Member" / "You" | Any individual who has registered, or who attempts to register, an account on the api55 Platform and whose personal data is collected and processed under this Policy. |
| "Personal Data" | Any information that identifies or can reasonably be used to identify a specific individual, including name, email address, phone number, Indonesian National Identity Card (KTP) number, bank account details, IP address, and device identifiers. |
| "Processing" | Any operation performed on Personal Data — including collection, storage, retrieval, use, disclosure, transmission, and deletion. |
| "KYC" | Know Your Customer — the identity and age verification process mandatory for all Members prior to withdrawal processing. |
| "Cookies" | Small text files placed on your device by the api55 Platform or its authorised third-party analytics and functionality providers for the purposes described in Clause 10. |
| "Service Providers" | Vetted third-party companies that process Personal Data on api55's behalf under binding data processing agreements, including payment processors, game studios, KYC verification providers, and infrastructure partners. |
| "WIB" | Western Indonesia Time (UTC+7), the default operational time zone for api55 customer support and data request response windows. |
This Privacy Policy applies to all Personal Data collected by api55 in connection with your use of the Platform, including data collected during account registration, KYC verification, deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications.
api55 acts as the data controller for all Personal Data it collects directly from Members. Where api55 engages Service Providers to process data on its behalf, those providers act as data processors under binding contractual arrangements that restrict their use of your data to the specific services they provide to api55.
This Policy does not apply to third-party websites, payment processors, or game studio platforms that you may access via links from the api55 Platform. Those services are governed by their own privacy policies, which we encourage you to review.
api55 collects the following categories of Personal Data, depending on how you interact with the Platform:
The majority of the Personal Data we hold is provided directly by you during the following interactions:
When you access the Platform, our servers and analytics infrastructure automatically collect certain Technical Data, including your IP address, device type, operating system, browser version, session timestamps, and pages visited. This data is collected via server logs, session cookies, and first-party analytics tools.
In certain circumstances, api55 receives Personal Data from third-party sources, including:
api55 processes your Personal Data only for defined, specific purposes. The table below sets out each processing purpose, the data categories involved, and the legal basis on which we rely:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration & management | Identity, Contact | Contract performance CONTRACTUAL |
| Identity verification (KYC) & age check (21+) | Identity, Financial | Legal obligation LEGAL OBLIGATION |
| Processing deposits & withdrawals in IDR | Financial, Identity | Contract performance CONTRACTUAL |
| Delivering gaming services (sportsbook, slots, live casino, Domino QQ, Dragon Tiger) | Gaming Activity, Technical | Contract performance CONTRACTUAL |
| Fraud detection & platform security | Technical, Financial, Identity | Legitimate interests LEGITIMATE INTEREST |
| Anti-Money Laundering (AML) monitoring | Financial, Identity | Legal obligation LEGAL OBLIGATION |
| Customer support & dispute resolution | Communications, Identity, Gaming Activity | Contract performance CONTRACTUAL |
| Responsible gaming monitoring & intervention | Gaming Activity, Communications | Legitimate interests LEGITIMATE INTEREST |
| Sending promotional communications (bonuses, seasonal offers for Idul Fitri, Ramadhan, Imlek) | Contact, Communications | Consent (opt-in only) CONSENT |
| Platform analytics & product improvement | Technical, Gaming Activity (anonymised) | Legitimate interests LEGITIMATE INTEREST |
api55 shares Personal Data with carefully vetted Service Providers that assist us in operating the Platform. These providers are contractually bound to process your data only for the purposes specified by api55 and to maintain security standards commensurate with those described in Clause 9. Current categories of Service Provider include:
api55 may disclose Personal Data to law-enforcement agencies, courts, regulatory authorities, or other government bodies where required to do so by applicable law or a valid legal order. In such cases, api55 will disclose only the minimum data necessary to comply with the legal requirement and will, where legally permitted, notify the affected Member of the disclosure.
In the event that api55 undergoes a merger, acquisition, restructuring, or sale of assets, Member Personal Data may be transferred to the acquiring entity as part of that transaction. api55 will provide advance notice of any such transfer via email to registered Members and will ensure that the acquiring entity agrees to honour this Privacy Policy or provide Members with the opportunity to delete their accounts prior to the transfer.
api55 operates as an internationally licensed offshore gaming platform. Your Personal Data may be transferred to, stored in, and processed by our servers and Service Providers located outside of Indonesia. Such transfers are necessary to deliver the gaming services you have contracted for.
Where Personal Data is transferred internationally, api55 ensures that appropriate safeguards are in place, including:
By registering an account with api55, you acknowledge and consent to the transfer of your Personal Data to offshore locations for the purposes described in Clause 5.
api55 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. The following default retention periods apply:
| Account & Identity Data | Retained for the duration of the active account relationship and for 5 years after account closure, to comply with AML record-keeping obligations. |
| Financial Transaction Records | Retained for 7 years from the date of each transaction, in accordance with international AML and financial crime prevention standards. |
| KYC Documents | Retained for 5 years after account closure or last transaction, whichever is later. |
| Gaming Activity Logs | Retained for 2 years after the session date for dispute resolution purposes; anonymised aggregate data may be retained indefinitely for analytics. |
| Customer Support Records | Retained for 2 years from the date of the last support interaction. |
| Marketing Preferences & Opt-In Records | Retained for the duration of active consent and for 3 years after consent is withdrawn, as evidence of the consent record. |
| Server Logs & Technical Data | Retained for 90 days in raw form; retained in anonymised aggregated form indefinitely for security monitoring. |
Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.
api55 implements a comprehensive, layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our key security controls include:
Cookies are small text files stored on your device when you visit the api55 Platform. They allow the Platform to recognise your browser across sessions, maintain your login state, remember your preferences, and collect analytics data to improve the user experience.
| Strictly Necessary | Essential for the Platform to function. These include session authentication tokens, load-balancing cookies, and security cookies. They cannot be disabled without rendering the Platform unusable. No consent is required for these cookies. |
| Functional | Remember your language preference (English), your responsible gaming settings (session time limit), and your last-used payment method to streamline your experience. Enabled by default; may be disabled in your browser settings. |
| Analytics | First-party analytics cookies that collect anonymised data about which pages you visit, how long you spend on each page, and which features you use. This data informs Platform improvements. No personally identifiable data is included in analytics reports . |
| Marketing / Preference | Used only if you have opted in to promotional communications. These cookies help us deliver relevant bonus offers and seasonal promotions (e.g., Idul Fitri reload bonuses, Ramadhan special events) without repeating messages you have already seen. Strictly opt-in; disabled by default. |
You can control and delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear existing cookies, and set preferences for specific sites. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling functional cookies will reset your preferences on each visit.
api55 does not use cross-site tracking cookies, fingerprinting scripts that identify you across unrelated websites, or any advertising network pixels on the Platform.
As a Member of api55, you have the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". Our compliance team will acknowledge your request within 5 business days (WIB) and provide a full response within 30 calendar days.
| Right of Access | You may request a copy of all Personal Data we hold about you, along with information about how it is processed and with whom it is shared. |
| Right to Rectification | You may request correction of any inaccurate or incomplete Personal Data. For KYC-verified data (name, date of birth), corrections require re-submission of supporting identity documents. |
| Right to Erasure | You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to api55's legal retention obligations under Clause 8 (AML and financial record-keeping requirements may override erasure requests for specific data categories). |
| Right to Restriction | You may request that api55 restrict processing of your data to storage only, pending resolution of an accuracy dispute or an objection to processing. |
| Right to Data Portability | You may request an export of your Personal Data in a structured, machine-readable format (JSON or CSV) covering account profile data, transaction history, and gaming session history. |
| Right to Object | You may object at any time to processing based on legitimate interests (including responsible gaming monitoring analytics and platform improvement profiling). api55 will assess whether its legitimate interests are overridden by your objection and respond within 30 days. |
| Right to Withdraw Consent | Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing. Update your preferences in your account settings or email [email protected]. |
api55 will not charge a fee for exercising your data rights in the vast majority of cases. api55 reserves the right to charge a reasonable administrative fee for manifestly repetitive or unfounded requests, or to decline such requests entirely, in which case we will inform you of the reason.
The api55 Platform is strictly intended for adults aged 21 years and older. api55 does not knowingly collect, store, or process Personal Data belonging to individuals under the age of 21. Age verification is a mandatory step in the KYC process, and accounts found to belong to individuals under 21 will be immediately suspended and any balance returned.
If you are a parent or guardian and believe that a minor has registered an account with api55 using false information, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate the report within 2 business days and, if confirmed, permanently close the account and securely delete all associated Personal Data without delay.
The api55 Platform integrates with a number of third-party services to deliver its full functionality, including game software from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. When you interact with games or features powered by these providers, certain session data (such as anonymised player identifiers, game outcome records, and stake amounts) may be transmitted to those providers' systems for the purpose of delivering certified game outcomes and resolving disputes.
api55 also integrates with Indonesian payment processors and e-wallet providers — including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja — to process deposits and withdrawals in Indonesian Rupiah (IDR / Rp). When you initiate a financial transaction, your bank account details or e-wallet identifier are shared with the relevant payment processor solely to execute that transaction.
These third-party integrations are governed by those providers' own privacy policies. api55 is not responsible for the data practices of third-party game studios or payment processors beyond its contractual obligations as described in Clause 6. We recommend reviewing the privacy policies of any third-party service with which you interact directly.
api55 does not embed third-party advertising networks, social media tracking pixels, or behavioural advertising SDKs on the Platform. Any data collected via the integrations described above is used exclusively for functional and operational purposes.
api55 reserves the right to update or replace this Privacy Policy at any time. When material changes are made — including changes to the categories of data we collect, the purposes for which we process data, the third parties with whom we share data, or your rights — api55 will notify registered Members by email to their registered address and by displaying a prominent notice on the Platform for a minimum of 7 calendar days prior to the updated Policy taking effect.
Minor amendments — such as typographical corrections, clarifications that do not alter the substance of your rights or our obligations, and updates to the list of payment providers or game studios — may be made without advance notice and will take effect immediately upon publication.
Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the revised Policy, you must cease using the Platform and contact [email protected] to close your Account prior to the amended Policy taking effect. Upon confirmed account closure, api55 will process data deletion in accordance with Clause 8.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way api55 handles your Personal Data, please contact our Data Protection team through any of the following channels:
| Email (Privacy) | [email protected] — use subject line "Privacy Request — [Your Username]" for fastest routing. |
| Live Chat | Available 00:00 – 24:00 WIB, 7 days a week. Indonesian-speaking and English-speaking agents on duty at all times. |
| Response Time | Acknowledgement within 5 business days (WIB); full written response to data rights requests within 30 calendar days. |
| Language | Requests may be submitted in English or Indonesian. Responses will be provided in the language of your request where operationally possible; English is the governing language for all formal determinations. |
| Complaints | If you are unsatisfied with api55's response to a privacy request or concern, you have the right to escalate your complaint to a relevant data protection supervisory authority in your jurisdiction. |
api55's registered legal entity details and correspondence address are available upon written request to verified Members. Please contact [email protected] with the subject line "Legal Entity Inquiry" and our compliance team will respond within 5 business days.
Now that you understand how api55 handles your data, explore our full range of games and sports markets — all backed by enterprise-grade security and a genuine commitment to your privacy.