api666 ("api666", "we", "us", "our") operates the online betting and casino platform accessible at https://api666.bet and all associated interfaces (the "Platform"). api666 is committed to protecting the privacy and personal data of every individual who accesses or uses the Platform.
This Privacy Policy ("Policy") sets out in clear terms what personal data we collect from players based in Indonesia, how we use that data, the circumstances in which we share it with third parties, and the rights you hold in respect of your personal data. This Policy should be read alongside the api666 Terms & Conditions, which together form the complete legal framework governing your relationship with api666.
api666 is primarily designed to serve adult players (21+) resident in Indonesia, conducting transactions in Indonesian Rupiah (IDR) via local banking channels — including BCA, BRI, BNI, Mandiri, CIMB Niaga, and OCBC NISP — and digital e-wallets including OVO, DANA, GoPay, ShopeePay, and LinkAja. References to Indonesia in this Policy are therefore central to understanding the context in which your data is processed.
The following defined terms apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a living individual, including name, national identity number, contact details, financial account information, IP address, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, and destruction. |
| "Data Controller" | api666, as the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third-party service provider that processes Personal Data on behalf of api666 under a written data-processing agreement, strictly in accordance with api666's instructions. |
| "KYC Data" | Identity and age-verification documents submitted by a Player as part of the Know Your Customer process, including government-issued ID (KTP, passport, driver's licence), proof of address, and payment method ownership documentation. |
| "Platform" | The api666 website at https://api666.bet, including all product areas: sportsbook, live casino, slots, and togel (Indonesia's traditional numbers lottery) markets. |
| "Player" / "You" | Any natural person who registers an Account on the api666 Platform or otherwise uses the Platform's services. |
| "Cookies" | Small text files or similar tracking technologies placed on your device when you access the Platform, used to remember preferences and analyse usage patterns. |
api666 collects only the Personal Data that is necessary to operate the Platform, verify player identity, process transactions, and comply with applicable legal and regulatory obligations. The categories of data we collect are described below.
When you create an api666 Account, we collect your full legal name, date of birth, Indonesian nationality details, residential address, email address, and mobile phone number. This information is required to open your Account, enforce our 21+ age restriction, and personalise your experience on the Platform.
To comply with Know Your Customer obligations and to process withdrawal requests, we may collect copies of your Indonesian National Identity Card (KTP), passport, driver's licence, proof of address documents (such as a bank statement or utility bill issued within the last 90 days), and evidence of ownership of the payment method you have registered with api666.
We collect records of every deposit, withdrawal, bet placement, and winnings payment processed through your Account. This includes the payment method type and masked account number (e.g., last four digits of a bank account), transaction amounts denominated in Indonesian Rupiah (IDR), timestamps, and transaction status logs. We do not store full bank account numbers or e-wallet PINs.
We collect a complete record of your activity on the Platform, including bets placed on the sportsbook (BRI Liga 1, EPL, La Liga, Champions League, Timnas Indonesia fixtures, and other markets), live casino game sessions with providers such as Evolution Gaming and Pragmatic Play Live, slot game sessions, and togel number selections. This data is used for account settlement, dispute resolution, fraud prevention, and responsible gaming monitoring.
When you access the Platform, we automatically collect your IP address, device type and operating system, browser type and version, screen resolution, referring URL, session duration, pages visited within the Platform, and time zone settings. This data helps us deliver a consistent experience across desktop and mobile devices, detect suspicious access patterns, and diagnose technical issues.
We retain records of all communications you send to or receive from api666, including live chat transcripts, email correspondence, and any feedback or complaints submitted through customer support channels. These records are retained for quality assurance and dispute resolution purposes.
If you use api666's responsible gaming tools — including deposit limits, loss limits, session time reminders, or self-exclusion requests — we record the settings you apply and the dates on which they were activated or modified. This data is retained for a minimum of five years to ensure that self-exclusion decisions are respected even if a Player subsequently requests Account reinstatement.
api666 collects Personal Data through the following channels:
api666 processes your Personal Data for the following specific purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and closing your api666 Account; verifying your identity and age (21+); processing login authentication. |
| Transaction Processing | Executing deposit and withdrawal transactions via Indonesian banks and e-wallets; reconciling financial records; issuing winnings payments in IDR. |
| Regulatory Compliance | Fulfilling KYC, anti-money-laundering (AML), and counter-terrorism-financing (CTF) obligations; responding to lawful requests from regulatory authorities and law enforcement agencies. |
| Fraud & Security | Detecting, investigating, and preventing fraudulent activity, account takeovers, bonus abuse, collusion, and unauthorised access to the Platform. |
| Customer Support | Handling enquiries, complaints, and dispute resolution in both English and Indonesian; maintaining support-ticket records. |
| Responsible Gaming | Monitoring gameplay patterns for signs of problem gambling; administering deposit limits, loss limits, self-exclusion, and reality-check features as selected by the Player. |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve the Platform's design, game selection, sports markets, payment options, and overall user experience. |
| Marketing (opt-in only) | Sending promotional offers, bonus notifications, and seasonal campaign communications (e.g., Idul Fitri, Chinese New Year / Imlek, Indonesian Independence Day) to Players who have explicitly opted in to marketing communications. |
api666 processes your Personal Data under one or more of the following legal bases, depending on the purpose of processing:
api666 does not sell your Personal Data to any third party, and we do not share your data for third-party marketing purposes without your explicit consent. We share Personal Data only in the following limited circumstances:
We engage carefully selected third-party service providers who process data strictly on our behalf and under written data-processing agreements. These include: payment gateway operators facilitating IDR transactions via Indonesian banks and e-wallets; identity and KYC verification vendors; cloud infrastructure providers hosting the Platform's servers; customer support platform operators; and analytics providers processing anonymised usage data. Each provider is contractually prohibited from using your data for any purpose beyond the specific service they provide to api666.
Game studios whose content is hosted on the api666 Platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — receive session identifiers and wager data necessary to operate their games and return RNG-certified outcomes to our Platform. These providers do not receive your full name, Indonesian national ID, or payment details.
api666 will disclose your Personal Data to law enforcement agencies, courts, regulatory bodies, or financial intelligence units when required to do so by a lawful order, court judgment, or mandatory regulatory obligation. We will notify you of any such disclosure to the extent permitted by law.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of api666's assets, Player Personal Data may be transferred to the successor entity as part of that transaction. We will provide reasonable advance notice of any such transfer and ensure that the successor entity is bound by equivalent privacy protections.
api666 operates the Platform using internationally hosted infrastructure. Your Personal Data may be stored or processed on servers located outside Indonesia, including in data centres in Singapore, Hong Kong, or the European Economic Area, depending on which cloud service regions are active at a given time.
Wherever your data is processed, api666 implements appropriate safeguards to ensure that it receives protection at least equivalent to the standards described in this Policy. These safeguards include contractual data-transfer clauses, data-processing agreements with service providers, and encryption of data in transit and at rest.
api666 retains your Personal Data for as long as your Account is active, plus an additional retention period following Account closure as set out below. Retention periods reflect our legal obligations and the practical need to resolve disputes, detect recurring fraud, and honour self-exclusion decisions.
| Data Category | Retention Period |
|---|---|
| Registration & Account Data | 5 years from Account closure or last login, whichever is later. |
| KYC / Identity Documents | 5 years from Account closure, in accordance with standard AML retention requirements. |
| Transaction Records | 5 years from the date of each transaction, to support financial audits and dispute resolution. |
| Gameplay & Betting History | 3 years from Account closure; anonymised aggregated data may be retained indefinitely for statistical purposes. |
| Customer Support Communications | 3 years from the date of the final communication in each support thread. |
| Responsible Gaming Records | 5 years from Account closure; self-exclusion records are retained for a minimum of 5 years regardless of Account status. |
| Marketing Consent Records | Retained for the duration of the consent and for 2 years after consent is withdrawn, to demonstrate compliance. |
| Server & Access Logs | 12 months from the date of each log entry, unless extended by an active security investigation. |
Once the applicable retention period expires, your Personal Data is securely deleted or irreversibly anonymised so that it can no longer be attributed to you.
api666 takes the security of your Personal Data seriously and implements a layered set of technical and organisational safeguards designed to protect your data against unauthorised access, disclosure, alteration, and destruction.
api666 uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences, maintain your login session, and analyse how Players use the Platform. The following categories of cookies are in use:
These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens that keep you logged in during an active session, CSRF protection tokens, and load-balancing cookies that route your requests to the appropriate server. Without these cookies, core Platform features — including placing bets, making deposits, and accessing your Account — would not function.
Functional cookies remember your preferences, such as your preferred language setting, display preferences, and the most recently viewed product area (sportsbook, slots, live casino). These cookies improve your experience but are not strictly required for the Platform to operate.
api666 uses analytics cookies to collect anonymised data about how Players navigate the Platform — including which pages are visited most frequently, session durations, device types, and geographic regions (at city level, e.g., Jakarta, Surabaya, Bandung, Bali). This data is processed in aggregate form and is used to improve the Platform's layout, content, and performance. No individual Player is identified in analytics reports.
You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the browser's privacy or settings menu. Note that disabling strictly necessary cookies will impair your ability to use core Platform features. For detailed instructions on managing cookies in your specific browser, refer to your browser's official help documentation.
As a data subject whose Personal Data is processed by api666, you hold the following rights. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 3 business days and provide a substantive response within 30 calendar days, or notify you if additional time is required for complex requests.
You may request a copy of all Personal Data we hold about you, along with information about how it is being used and who it has been shared with.
You may request that we correct any inaccurate or incomplete Personal Data we hold about you. Many details can be updated directly through your Account dashboard.
You may request deletion of your Personal Data where we no longer have a legal basis for retaining it. Note that certain data must be retained for legal compliance purposes even after Account closure.
You may request that we restrict processing of your data — for example, while we investigate a dispute about its accuracy — without deleting it entirely.
You may request a machine-readable export of the Personal Data you have provided to api666, such as Account registration details and transaction history, in CSV or JSON format.
You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring, where you believe your fundamental rights override our legitimate interests.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
If you believe api666 has handled your Personal Data unlawfully, you have the right to lodge a complaint with the relevant data protection authority or supervisory body in your jurisdiction.
The api666 Platform is strictly for adults aged 21 years and above. api666 does not knowingly collect Personal Data from individuals under the age of 21. The registration process includes a mandatory date-of-birth declaration, and api666 reserves the right to request KYC age-verification documentation from any Player at any time.
If api666 discovers or has reasonable grounds to believe that a Player is under 21 years of age, we will immediately suspend the Account, void any pending bets, withhold or return the Account balance (excluding Bonus funds) to the registered payment method, and permanently delete the minor's Personal Data from our active systems within 30 days, subject only to any minimum legal retention obligations.
The api666 Platform may contain references to third-party services — for example, game studios, payment processors, or sports data providers — that operate their own websites and privacy policies. api666 does not control the privacy practices of these third parties, and this Policy does not apply to any data collected by external services you access independently of the Platform.
We encourage you to review the privacy policy of any third-party service before providing your Personal Data to that service. api666's responsibility extends only to Personal Data processed within the api666 Platform environment.
api666 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, we will notify registered Players via the email address associated with their Account at least 7 calendar days before the revised Policy takes effect. The effective date at the top of this Policy will be updated with every revision.
The most current version of this Privacy Policy is always accessible at https://api666.bet/privacy-policy. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with a material change, you must cease using the Platform and may request Account closure before the change takes effect.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by api666, please contact our Data Privacy team using the following details:
For responsible gaming enquiries — including self-exclusion, deposit limits, or concerns about problem gambling — please visit the Responsible Gaming page or include "Responsible Gaming" in your email subject line to ensure your message is routed to the appropriate team immediately.
Every clause in the api666 Privacy Policy reflects a concrete commitment to securing your personal data and giving you meaningful control over how it is used.
All data transmitted between your device and the api666 Platform is protected by TLS 1.2+ encryption. Stored data — including KYC documents and transaction records — is encrypted at rest using AES-256, the same standard used by international financial institutions.
api666 has never sold and will never sell your Personal Data to advertisers, data brokers, or any commercial third party. Your data is shared only with service providers who need it to operate the Platform — under strict contractual obligations.
Our Know Your Customer process verifies every Player's identity, age (21+), and payment method ownership before processing withdrawal requests — protecting you against fraud and ensuring your winnings are paid only to you.
Marketing communications at api666 are strictly opt-in. You can withdraw consent at any time through your Account settings or by emailing [email protected]. We act on withdrawal requests within 48 hours.
api666 retains your data only for as long as legally required or operationally necessary. Once retention periods expire, data is securely deleted or irreversibly anonymised — no indefinite storage of personal records.
Access, rectify, export, restrict, or erase your Personal Data at any time. api666 responds to all privacy rights requests within 30 calendar days, with a 3-business-day acknowledgement guarantee for every submission.
Now that you understand how api666 handles your personal data, dive into the action. From BRI Liga 1 sportsbook markets and Timnas Indonesia fixtures to Pragmatic Play slots and live casino tables — it's all waiting for you.