At api22, we handle your personal information with the same care and integrity we bring to every aspect of our platform. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and the rights you hold over it — in plain, straightforward English.
These six principles underpin every decision api22 makes regarding your personal data. They are not aspirational statements — they are operational standards enforced across the platform.
api22 collects personal data only for clearly defined, legitimate purposes — account administration, payment processing, KYC verification, fraud prevention, and customer support. We do not collect data speculatively or repurpose it without your knowledge.
We collect only the minimum data necessary for each purpose. We do not request information beyond what is genuinely required to operate your account, process your payments via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or ShopeePay, or comply with applicable law.
All data stored and transmitted on the api22 platform is protected by industry-standard SSL/TLS encryption. Sensitive fields — including payment credentials and identity documents — are stored in encrypted form and access-controlled to authorised personnel only.
api22 does not sell, rent, or trade your personal data to third parties for commercial purposes. Data is shared only with service partners who are contractually bound to handle it in accordance with this Privacy Policy and applicable data protection standards.
We maintain a clear, readable Privacy Policy and update it whenever our practices change. When we make material changes, we notify registered players via their email address or through an in-platform notification before the new version takes effect.
You have meaningful rights over your personal data — including the right to access, correct, delete, and object to its processing. api22 has established straightforward processes for exercising all of these rights, outlined in full in Section 8 of this Policy.
Throughout this Privacy Policy, the following terms have the meanings set out below.
| Term | Meaning |
|---|---|
| "api22" / "we" / "us" / "our" | The api22 online gaming platform, accessible at https://api22.vip, including all associated services, products, and customer-facing systems operated under the api22 brand. |
| "Player" / "you" / "your" | Any individual who registers an account with api22 or who accesses the platform in any capacity, whether as a registered member or as a guest visitor. |
| "Personal Data" | Any information that identifies or could reasonably be used to identify a natural person, directly or in combination with other data. This includes your name, email address, IP address, device identifiers, payment account details, and gameplay transaction records. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, archiving, deletion, or destruction. |
| "KYC" | Know Your Customer — the identity and age verification process conducted to confirm a Player's legal identity, age (21+), and payment method ownership. |
| "Service Partners" | Third-party providers that api22 engages to deliver specific platform functions, including payment processors, identity verification services, fraud prevention tools, game content providers, and cloud infrastructure operators. All Service Partners are bound by data processing agreements consistent with this Policy. |
| "Cookies" | Small text files placed on your device by the api22 platform to support session management, preference storage, analytics, and security functions. |
This Privacy Policy applies to all Personal Data collected and processed by api22 in connection with your use of the platform at https://api22.vip, including all subdomains, mobile-optimised versions, and any future application interfaces made available under the api22 brand.
This Policy covers data collected through the following channels:
This Policy does not apply to third-party websites or services that may be referenced in content on the api22 platform. api22 is not responsible for the privacy practices of any third party.
api22 collects the following categories of Personal Data. The specific data points collected in each category depend on your level of interaction with the platform.
| Category | Data Points Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (e.g., KTP number), photograph or scan of identity document. | At registration and KYC verification. |
| Contact Data | Email address, mobile phone number, city and province of residence (e.g., Jakarta, Surabaya, Bandung, Bali, Medan). | At registration; updated when you modify your profile. |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet account name and number (OVO, DANA, GoPay, ShopeePay), deposit and withdrawal transaction records, balance history. | When you make a deposit or request a withdrawal; during KYC verification of payment methods. |
| Gameplay Data | Game session records, bet amounts, win/loss history, bonus usage and wagering progress, game type preferences, session duration. | Automatically during gameplay and betting activity. |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone (WIB/WITA/WIT), session timestamps, referring URL. | Automatically on each platform visit via server logs and cookies. |
| Communications Data | Content of live chat transcripts, email correspondence with support, account notes relating to complaints or queries. | When you contact api22 customer support. |
| Marketing Preferences | Your opt-in or opt-out status for promotional emails, SMS notifications, and platform push notifications. | At registration and whenever you update your communication preferences. |
api22 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for age verification purposes.
api22 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity involved.
api22 uses the Personal Data described in Section 3 for the following purposes. Each purpose is linked to the legal basis described in Section 4.
api22 does not sell your Personal Data. We share Personal Data with third parties only in the circumstances described below, and only to the extent necessary for the stated purpose.
api22 retains your Personal Data for as long as necessary to fulfil the purposes described in this Policy, and in compliance with applicable legal retention obligations. The following retention periods apply.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years after closure. | AML record-keeping obligation and legal defence. |
| Financial Transaction Records | 5 years from the date of each transaction. | AML and financial compliance mandate. |
| KYC Documents | 5 years from account closure or from the date documents were superseded by updated verification. | AML regulatory requirement. |
| Gameplay Records | 3 years from account closure. | Dispute resolution and responsible gaming monitoring. |
| Customer Support Records | 2 years from the date of the interaction. | Quality assurance and complaint resolution. |
| Marketing Preferences | Until you withdraw consent or close your account, whichever is earlier. | Consent-based processing. |
| Technical / Log Data | 13 months from collection. | Security monitoring and fraud detection. |
Following expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to any individual. Anonymised aggregate data may be retained indefinitely for statistical purposes.
As a Player on the api22 platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected]. api22 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.
You have the right to request a copy of the Personal Data api22 holds about you, along with information about how it is being used, who it has been shared with, and how long it will be retained.
If any Personal Data api22 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections (e.g., contact details), you may update these directly in your account settings.
You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent and no other legal basis applies, or where you believe the data has been processed unlawfully. Note that api22 is required to retain certain data for the statutory periods described in Section 7, and deletion requests cannot override these legal obligations.
You may request that api22 restrict processing of your Personal Data — meaning we retain it but do not actively use it — while a dispute about its accuracy or lawfulness is being resolved.
Where processing is based on consent or contractual necessity and carried out by automated means, you may request that api22 provide your Personal Data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
You have the right to object to processing based on api22's legitimate interests. api22 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights. You may also object to processing for direct marketing purposes at any time, with immediate effect.
api22 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how players interact with the site. The following types of cookies are used.
api22 does not use third-party advertising cookies or cross-site tracking cookies. No cookie data is sold or shared with advertising networks.
You may manage cookie preferences via your browser settings. Disabling essential cookies will prevent you from logging into and using the api22 platform. Disabling functional or analytics cookies will not affect your ability to play but may reduce personalisation features.
api22 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction.
api22 operates a strict 21+ policy. The platform is not intended for, marketed to, or accessible by any person under the age of 21. api22 does not knowingly collect Personal Data from individuals under 21 years of age.
Age verification is conducted as part of the KYC process for every registered account. Where api22 has reason to believe that a Player may be under 21, the account will be suspended pending verification, and any pending withdrawal will be withheld until age has been confirmed.
If api22 discovers that it has inadvertently collected Personal Data from a person under 21 years of age, that data will be deleted promptly and the associated account will be permanently closed. Any funds deposited by an underage player will be returned via the original payment method, net of any bonuses claimed, subject to applicable law.
If you are a parent or guardian and believe that your child has registered an account with api22, please contact us immediately at [email protected] so that we can take appropriate action.
api22 reviews this Privacy Policy periodically and updates it when our data practices change, when we introduce new platform features that involve new data processing activities, or when applicable legal requirements change.
When we make material changes — meaning changes that could significantly affect your rights or the way we process your data — we will notify you by sending a notice to your registered email address at least 14 days before the updated Policy takes effect. We will also display a prominent notification on the api22 platform homepage during this notice period.
For non-material changes (such as corrections to typos, clarifications of existing language, or the addition of examples that do not alter the substance of the Policy), we will update the Policy without prior notice but will update the "Effective Date" shown at the top of the Policy.
Your continued use of the api22 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you may close your account before the change takes effect by contacting [email protected].
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact api22 using the details below. All privacy-related enquiries are handled by api22's compliance team.
api22 protects your privacy at every step. From your first deposit via BCA or GoPay to your biggest sportsbook win, your data stays secure. Explore our full game library and bet with confidence.