Data Protection Documents

Api5000 Privacy Policy — Our Commitment to Protecting the Personal Data of Malaysian Players

Your privacy is not an afterthought at api5000 — it is the foundation of the trust you place in us. This document clearly explains how we collect, use, store, and protect your personal information as a member of our platform.

Updated: 1 January 2026  |  Version 3.1
256-Bit SSL Encryption
No Data Sales
Restricted Access
Right to Data Deletion

Section 01Introduction and Scope of This Policy

Api5000 takes the responsibility of protecting your personal data very seriously. This Privacy Policy outlines the data collection, usage, and protection practices we follow in relation to personal information you provide when registering or using our platform.

This policy applies to all users of api5000.bar, our mobile app, and all services provided by the api5000 platform. By registering or continuing to use the platform, you agree to the terms set out in this Privacy Policy.

Our Commitment: api5000 has never sold, rented, or traded your personal data to any third party for marketing purposes. Your data is used solely for the purposes explicitly stated in this document.

If you have any questions about how we handle your personal data, you may contact our privacy team by email at [email protected] at any time.

Section 02Types of Personal Data We Collect

Data You Provide Directly

During registration and use of the api5000 platform, we collect the following information that you provide voluntarily:

Data Types Example Primary Purpose
Identity Data Full name, date of birth, MyKad number KYC identity verification
Contact Data Email address, phone number Account communications
Financial Data Bank details, digital wallet numbers Deposit & withdrawal processing
Location Data Residential address, state Eligibility verification & KYC
Technical Data IP address, device type, web browser Security & Fraud Detection
Activity Data Game history, betting records Regulatory compliance & support

Automatically Collected Data

While you browse the api5000 platform, our systems automatically record certain technical information including your IP address, browser type, operating system, pages visited, and session duration. This data is used solely for security purposes, fraud detection, and improving the user experience.

Section 03How We Use Your Data

Api5000 uses your personal data only for legitimate purposes that are transparently stated. The following covers all data usage purposes we practise:

  • Service Provision: Managing your account, processing deposits and withdrawals, and enabling access to all games and features on the platform.
  • Identity Verification (KYC): Meeting legal compliance requirements by verifying your identity and age before authorising withdrawals.
  • Security and Fraud Prevention: Detecting and investigating suspicious activity, account misuse, or fraud attempts to protect you and the platform.
  • Service Communications: Sending important notifications related to your account, transactions, terms changes, and security information.
  • Marketing (With Consent): Sending promotional information and exclusive offers only where you have given explicit consent. You may unsubscribe at any time.
  • Platform Improvements: Analysing usage patterns in aggregate and anonymised form to improve the overall user experience.
  • Legal Compliance: Fulfilling legal obligations and reporting requirements to relevant authorities when required.
api5000 does not use your personal data for fully automated decision-making that materially affects you without human intervention, except for real-time fraud detection which is a security necessity.

Section 04Data Sharing and Disclosure

api5000 does not sell, rent, or trade your personal data. However, under the following limited circumstances, we may share your information with carefully selected third parties:

Trusted Service Providers

We work with a number of third-party service providers that help us operate the platform — including payment processors (DuitNow, FPX, digital wallets), cloud service providers, and analytics platforms. All third parties are bound by strict confidentiality agreements and may only use your data for specified purposes.

Legal Requirements

Api5000 may be required to disclose certain information to government authorities, regulatory bodies, or law enforcement agencies when lawfully requested. In such situations, we will endeavour to notify you in advance where permitted by law.

Additional Protection: Before sharing data with any third party, api5000 ensures that the party maintains a level of data protection equivalent to our own standards. All data sharing is recorded and can be reviewed upon request.

Section 05Data Retention Period

Api5000 retains your personal data only for as long as necessary for the stated purposes or as required by applicable law. The following are our data retention guidelines:

  • Active Account Data: Retained for as long as your account remains active and in continued use.
  • Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysian financial legal requirements.
  • KYC Data: Retained for a minimum of 5 years after account closure to comply with anti-money laundering requirements.
  • Security Logs: Retained for 2 years for fraud investigation and technical support purposes.
  • Closed Account Data: Once the mandatory retention period expires, data will be securely deleted or anonymised.

When data is no longer required, it is deleted using secure, irreversible methods to protect your privacy.

Section 06Data Security Measures

Api5000 consistently invests in security infrastructure to ensure your personal data remains protected at all times. The security measures we implement include:

  • Encryption of Data at Rest and in Transit: All data is encrypted using AES-256 standards at rest and SSL/TLS 256-bit encryption in transit.
  • Strict Access Control: Only staff with a legitimate business need may access member personal data. Every access is logged and audited on a regular basis.
  • 24/7 Security Monitoring: Our cybersecurity team monitors the infrastructure in real time to detect any threats or unusual activity.
  • Regular Penetration Testing: We conduct regular security testing through independent third parties to identify and patch any vulnerabilities.
  • Staff Training: All api5000 staff with access to personal data undergo regular data protection training.
Data Breach: In the event of any security breach affecting your personal data, api5000 will notify you within 72 hours of the breach being detected, in line with industry best practices.

Section 07Cookie Policy

Api5000 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

Cookie Types Purpose Duration Status
Essential Cookies Login sessions, security, core functionality Session / 1 year Required
Functional Cookies Language, theme, display settings 1 year Preferences
Analytics Cookies Anonymous usage statistics for platform improvement 2 years Preferences

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect platform functionality, including the ability to log in.

Section 08Your Rights as a Data Subject

As an api5000 member, you have the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected]:

01
Data Access Rights

You have the right to request a copy of all personal data we hold about you. This request will be processed within 30 calendar days.

02
Right to Data Rectification

If there are any errors or outdated information in your records, you may request a correction at any time through your account settings or customer support.

03
Right to Data Deletion ("Right to be Forgotten")

You may request the deletion of your personal data when it is no longer needed for its original purpose, provided this does not conflict with our legal obligations.

04
Right to Restriction of Processing

Under certain circumstances, you may request that we restrict the processing of your data while an investigation or dispute is ongoing.

05
Data Portability Rights

You may request your personal data in a machine-readable format for transfer to another service provider, subject to technical compatibility.

06
Right to Object to Marketing

You may withdraw your marketing consent at any time by clicking the unsubscribe link in any marketing email or by contacting our support team.

Section 09Child Protection

The api5000 platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data from anyone under the age of 18.

If you discover that a minor has registered an account on our platform, please contact us immediately at [email protected]. We will take immediate action to close the account and permanently delete all associated data.

api5000 conducts age verification as part of the KYC process to ensure that only eligible individuals (18 and above) can access all platform features including deposits and withdrawals.

Section 10How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Privacy Officer through the following channels:

We are committed to responding to all privacy-related inquiries within 5 working days. For more complex requests such as data access or data deletion, this process may take up to 30 calendar days.

Policy Updates: api5000 reserves the right to update this Privacy Policy from time to time. Any material changes will be communicated to you via email or an in-platform notice. We recommend reviewing this document periodically.

6 Layers of Privacy Protection at api5000

Privacy is more than a document at api5000 — it is a multi-layered protection system built into every aspect of our platform to keep your data safe.

End-to-End Encryption

All communication between your device and api5000 servers is protected with 256-bit SSL encryption — the same standard used by leading banks worldwide.

Tiered Access Control

Your personal data is only accessible to staff with a legitimate business need. Every access is recorded in logs that are audited periodically by an independent party.

No Data Sales

Api5000 has never and will never sell, rent, or trade your personal data to any third party for marketing or any other purposes.

Independent Security Audit

The api5000 security infrastructure is regularly audited by accredited independent cybersecurity firms to ensure data protection standards remain up to date.

Secure Data Deletion

When data is no longer required, it is deleted using methods that meet industry security standards — not merely removed from view, but permanently and irreversibly erased.

72-Hour Breach Notification

In the event of any security incident affecting your data, api5000 will notify you within 72 hours — far faster than most other platforms.

Privacy FAQs at api5000

Game providers integrated into the api5000 platform receive only the minimum technical data required to run the games — such as anonymised session IDs. Your full name, bank details, or sensitive personal data are never shared with game providers. All providers are bound by strict confidentiality agreements as a condition of partnering with api5000.

You may submit a data access request by emailing [email protected] with your full name, account number, and the type of data you wish to access. We will verify your identity before processing the request. This process is typically completed within 14–30 calendar days depending on the complexity of the request.

Yes, you may request data deletion by closing your account and submitting a formal request. However, certain data may need to be retained for a specified period under Malaysian legal requirements — specifically financial transaction records (7 years) and KYC data (5 years after account closure). Once these mandatory periods have lapsed, all data will be permanently deleted.

Yes. The api5000 mobile app applies the same level of security as the desktop site — including 256-bit SSL encryption for all network communications. In addition, our app supports biometric authentication (fingerprint / facial recognition) as an extra security layer to prevent unauthorised access to your account.

Play with Peace of Mind — Your Privacy is Fully Protected at api5000

Now you know how we protect your data. Join over 500,000 members who have trusted api5000 as their preferred casino and betting platform in Malaysia.

By registering, you agree to the Terms and Conditions and Privacy Policy api5000.  |  Age limit: 18+

Bahasa Melayu