Official Documents

Privacy Policy ApatuData Protection Malaysian Users

Your privacy is our priority. This document transparently explains how apatu collects, uses, stores, and protects your personal information at all times.

Last Updated: January 2026
256-bit SSL
PDPA 2010

1. Introduction

Apatu is an online gaming and betting platform fully committed to protecting the privacy of every user. This Privacy Policy is designed to ensure you have a clear understanding of what information we collect, how it is used, and who may have access to it.

This document applies to all Apatu services including the official website, mobile app, and all related communication channels. By using the Apatu platform, you agree that your information will be processed in accordance with the policy stated here.

Apatu fully complies with Malaysia Personal Data Protection Act 2010 (PDPA) and international data protection best practices. We take every aspect of your privacy seriously — not merely to fulfil legal requirements, but because it is the foundation of trust that builds a lasting relationship between apatu and our player community across Malaysia.

apatu's Commitment: We never sell user personal data to any third party for marketing or commercial purposes. Your data belongs to you — we only use it to provide you with the best service.

2. Types of Personal Data We Collect

Apatu collects your personal data through various methods to ensure the services we offer run safely, smoothly, and in line with your needs. The following are the categories of data collected:

Data Category Example Information Primary Purpose
Identity Data Full name, date of birth, identification card number, gender KYC verification, fraud prevention
Contact Data Email address, phone number, residential address Service communications, account verification
Financial Data Bank account number, e-wallet details, transaction history Deposit and withdrawal processing
Technical Data IP address, device type, browser, operating system Account security, platform improvements
Usage Data Games played, session duration, betting patterns Personalize your experience, play responsibly
Communication Data Support chat logs, incoming emails, user feedback Complaint resolution, service improvement
Data Minimisation Principle: Apatu only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant information beyond what is required for the services you use.

3. How Your Personal Data Is Used

Every piece of data collected by apatu is used for a clear and legitimate purpose. We do not use your data for purposes unrelated to the services you have agreed to. Our data use includes:

  • Account Management: Creating, verifying, and managing your user account, including the KYC process required for legal compliance.
  • Transaction Processing: Processing all deposits, withdrawals, and other financial transactions securely and efficiently using your chosen payment method.
  • Platform Security: Detecting and preventing fraudulent activity, unauthorised access, money laundering, and other security threats that could affect the platform and other users.
  • Personalise Your Experience: Tailoring content, promotions, and game recommendations based on your preferences and playing habits for a more enjoyable experience.
  • Service Communications: Sending important notifications related to your account, platform updates, policy changes, and transaction information.
  • Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and providing appropriate support to users who need it.
  • Legal Compliance: Fulfilling reporting obligations to the relevant authorities in accordance with anti-money laundering (AML) laws and other regulatory requirements.
  • Platform Improvements: Analysing aggregated usage data to improve the performance, interface, and usability of the apatu platform.
Direct Marketing: Apatu only sends you promotional communications if you have given explicit consent. You may withdraw this consent at any time through your account settings or by contacting our support team.

4. Data Retention & Security Measures

Apatu employs industry-grade security infrastructure to protect your personal data from unauthorised access, loss, or misuse. Key security measures we use include:

  • 256-bit SSL Encryption: All data transmitted between your device and apatu servers is encrypted using the strongest available 256-bit TLS/SSL protocol.
  • Data at Rest Encryption: Sensitive data stored in our database is encrypted using AES-256 algorithms, ensuring protection even in the event of a physical security breach.
  • Two-Factor Authentication (2FA): 2FA is available and encouraged for all user accounts to add an extra layer of security.
  • Strict Access Control: Only specifically authorised apatu staff may access user data, and all access is continuously logged and monitored.
  • Regular Security Audits: The apatu platform undergoes regular penetration testing and security audits by independent third-party experts.

Data Retention Period: Apatu retains your personal data for as long as necessary to fulfil the purpose of collection, or as required by applicable law. Generally, active account data is retained for the duration of the active account plus seven years to meet audit and legal compliance requirements. After this period, your data will be securely deleted or anonymised.

Secure Data Centre: apatu servers are housed in ISO 27001-certified data centres with physical protection, climate control, and power backup systems that ensure 24/7 uninterrupted platform availability.

5. Data Sharing & Disclosure to Third Parties

Apatu does not sell, rent, or disclose your personal data to third parties for commercial purposes without your consent. However, there are limited situations where we may need to share your information with trusted parties:

  • Payment Service Providers: Payment processing partners such as FPX, Touch 'n Go, GrabPay, and banking institutions need to receive the information required to complete your transactions securely.
  • Game Providers: Third-party gaming companies that provide slots, Live Casino, and other games may receive the minimum session data required for them to function correctly.
  • KYC Verification Service: Registered and certified third-party identity verification service providers that assist us in verifying user identities in accordance with legal requirements.
  • Legal Authority: Where required by law, court order, or a valid request from a law enforcement agency, Apatu will disclose the necessary information.
  • Business Transfer: In the event of a merger, acquisition, or asset transfer, user data may be transferred to the new entity with prior notice to users.
Data Processing Agreement: All third parties receiving apatu user data are required to sign binding data protection agreements, ensuring they uphold the same high privacy standards as apatu.

6. Cookies & Tracking Technologies

Apatu uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you on subsequent visits and personalise your experience.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information on how users interact with our platform to help us identify issues and improve performance.
  • Functional Cookies: Remembering your preferences such as language, display settings, and game preferences for a more personalised experience.
  • Analytics Cookies: Used to understand aggregate user behaviour for platform improvement purposes. This data is not linked to individual users.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality and user experience of the Apatu platform.

Third-Party Cookies: Some of our service providers may set their own cookies on your device. These cookies are subject to the respective provider's privacy policy, not apatu's. We do not control cookies set by third parties.

7. Your Rights as a User

Under the Malaysia Personal Data Protection Act 2010 and best data protection practices, you have the following rights regarding your personal data held by Apatu:

01
Right of Access

You may request a copy of the personal data we hold about you at any time.

02
Right to Rectification

You have the right to correct any inaccurate or incomplete personal data held in our records.

03
Right to Erasure

You may request deletion of your personal data, subject to our legal obligations.

04
Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

05
Right to Restriction

You may request that we restrict how we process your data under certain circumstances.

06
Right to Data Portability

You have the right to receive your data in a structured, machine-readable format for portability.

To exercise any of the above rights, please contact the apatu privacy team by email at [email protected]. We will process your request within 30 business days. Some requests may require identity verification before we can proceed.

8. Children's Privacy & Age Policy

The apatu platform is exclusively for individuals aged 21 years and above only. We do not knowingly collect, use, or store personal data from children or teenagers below the stipulated age limit.

Apatu uses a strict age verification system during the registration and KYC process. Should we discover that we have inadvertently collected data from an individual below the required age, the account in question will be closed immediately and all related data will be deleted from our systems as quickly as possible.

Important Notice: If you become aware that a child or teenager has registered on apatu using false information, please contact us immediately at [email protected] so we can take the appropriate action promptly.

9. Links to Third-Party Websites

The apatu platform may contain links to third-party websites or services in certain contexts, such as game providers or payment partners. These links are provided solely for your convenience.

Apatu is not responsible for the privacy practices or content of those third-party websites. Each third-party website has its own privacy policy independent of Apatu. We encourage you to read the privacy policy of every website you visit.

Partner Assessment: While we are not responsible for third-party privacy policies, apatu conducts thorough assessments of all business partners to ensure they meet reasonable data protection standards before any integration is approved.

10. Changes to This Privacy Policy

Apatu reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant changes will be communicated to you via:

  • In-platform notification the next time you log in.
  • Email to the address registered in your account.
  • Updates are effective as of the date shown in the "Last Updated" field at the top of this document.

Continued use of the apatu platform after changes take effect is considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account before the changes take effect.

We encourage you to review this Privacy Policy from time to time to stay informed about how we protect your information.

11. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the apatu privacy team is ready to assist you.

  • Privacy Email: [email protected] (response within 24–48 business hours)
  • Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform
  • Official Telegram: apatu support channels for faster response

For complaints relating to personal data processing that cannot be resolved directly with apatu, you have the right to submit a complaint to Personal Data Protection Department (PDPD) Malaysia which is the relevant supervisory authority.

Guaranteed Response Time: Apatu is committed to responding to all privacy-related enquiries within two business days. Data access or deletion requests will be fulfilled within 30 calendar days in accordance with PDPA requirements.

Why Your Privacy Play Safe With Apatu

We invest in the best technology and processes to ensure every Malaysian user's personal data is always protected.

256-bit Military-Grade SSL Encryption

The same encryption technology used by the world's leading banks. Every bit of data moving between your device and apatu servers is fully protected from interception.

Full Malaysia PDPA Compliance

Apatu fully complies with the Personal Data Protection Act 2010. Our compliance team ensures that all data collection and processing activities meet local legal requirements.

No Sale of Personal Data

Unlike some other platforms, Apatu never sells or rents user data to advertisers or marketing companies. Your privacy is not our commodity.

Periodic Independent Security Audits

The apatu platform undergoes regular penetration testing and comprehensive security audits by independent specialist firms to ensure no exploitable security vulnerabilities exist.

High-Level Access Control

Only specifically authorised staff may access user data. Every access is automatically logged and monitored, and any anomalies are detected immediately.

Privacy Controls in Your Hands

Apatu provides easy-to-use privacy controls directly from your account dashboard — from managing cookies to requesting data deletion, everything is in your hands.


Trusted Platform

Play with Peace of Mind — Your Data Is Always Safe

Now that you know apatu's commitment to privacy and data protection, register your free account today and enjoy a safe, fair, and exciting gaming experience.

Free registration, no hidden fees 256-bit SSL encrypted data Secure KYC verification 24/7 Support

Bahasa Melayu