Privacy Policy AP95 – Our Full Commitment to Protecting User Data & Privacy Malaysia

This Privacy Policy is published by AP95, an online gambling platform operating through the domain ap95.my, and applies to all users who access or use AP95's services from Malaysia. It sets out our privacy practices in a comprehensive and honest manner — not in hard-to-understand legal language, but in plain, clear terms that all our Malaysian users can readily understand.

At AP95, we understand that your trust in us depends greatly on how we handle your personal data. Every time you register a new account, make a deposit via DuitNow or Touch 'n Go eWallet, play slots like 888 Pots of Gold or Ted, or reach out to our support team — your personal data is involved in one or more ways. We want you to know exactly what happens to that data.

This Privacy Policy applies to all AP95 services, including the ap95.my website, all slots games, live casino, Sports Betting on the Malaysia Super League and EPL, badminton, e-sports, and all customer support communication channels. By using any AP95 service, you agree to the data collection and usage practices described in this document.

AP95 collects several categories of personal data from our users. Below is a full explanation of the types of data collected and how they are obtained:

Data You Provide Directly:

• Identity Full name, date of birth, Malaysian identity card number (MyKad) or passport number — collected during registration and the identity verification (KYC) process.
• Relationship Malaysian phone number, email address, and residential address — required for account verification and important communications relating to your account.
• Finance Information related to the payment method you use — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, or CIMB Clicks — including the account name, which must match your registered identity. AP95 does not store full credit or debit card numbers directly.
• Documents A copy of your MyKad or passport submitted during the identity verification process for withdrawals or regulatory compliance monitoring.

Automatically Collected Data:

• Technical IP address, device type, operating system, web browser type, and screen resolution — collected automatically each time you access the AP95 platform.
• Activity Gaming records including dates, times, game types played (such as slots Ted, Book of Cleopatra, or Liga Super betting), stake amounts, and outcomes — retained for account and compliance purposes.
• Transactions A complete history of deposits and withdrawals, including payment method, amount in MYR, and the date and time of each transaction.
• Communication Records of conversations with the AP95 support team via Live Chat, WhatsApp, or email — retained for quality control and dispute resolution purposes.

Every piece of data collected by AP95 serves a specific, justifiable purpose. Below is a full breakdown of how your data is used in AP95's day-to-day operations:

AP95 processes users' personal data on valid legal grounds in accordance with applicable data protection legislation. Below are the legal bases we rely on for each category of processing:

• Performance of Contract: Processing required to enable you to use AP95's services — including account verification, processing of deposits and withdrawals in MYR, and user account maintenance.
• Legal Obligations: Processing required to comply with applicable Malaysian legal obligations — including KYC requirements, anti-money laundering (AML) transaction reporting, and compliance with valid enforcement directives.
• AP95's Legitimate Interests: Processing for the purposes of fraud detection, platform security, abuse prevention, and service improvement analysis — where these legitimate interests do not override users' fundamental privacy rights.
• Consent: For optional marketing communications such as promotional offers and the latest AP95 bonuses — you may withdraw this consent at any time through your account settings or by contacting our support team.

AP95 does not sell, rent, or trade users' personal data to any third party for their own marketing or commercial purposes. Full stop. That said, there are limited situations where data may be shared with other parties in the context of AP95's operations:

• Payment Service Providers: Required transaction data is shared with Malaysian payment service providers including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX providers (Maybank2u, CIMB Clicks) to process your deposits and withdrawals. Such sharing is kept to the minimum necessary and is subject to strict data protection agreements.
• Gaming Technology Provider: Game software providers that supply slots and Live Casino content to AP95 may receive non-personally identifiable gameplay data for the purposes of technical maintenance and game fairness auditing.
• Identity Verification Services: During the KYC process, identity documents may be verified through approved third-party verification service providers — subject to strict confidentiality agreements with AP95.
• Legal Requirement: AP95 may be required to disclose user data to the relevant authorities when mandated by a valid court order, a directive from Malaysian law enforcement, or other binding statutory reporting requirements.

Protecting user personal data is AP95's highest technical priority. We continuously invest in robust security infrastructure to ensure your data is protected against unauthorised access, loss, or unintended disclosure:

• 256-bit SSL Encryption: All communication between your device and AP95's servers is protected by 256-bit SSL/TLS encryption — rendering your data completely unreadable to anyone who might intercept it in transit.
• Data Encryption at Rest: Personal data stored in AP95's databases is also encrypted at rest — meaning that even in the unlikely event of unauthorised server access, the data cannot be read without the appropriate decryption key.
• Strict Access Controls: Access to user personal data within AP95 is restricted solely to staff with a legitimate operational need. All access is logged and audited on a regular basis.
• Continuous Threat Monitoring: AP95's security monitoring system operates 24 hours a day to detect unauthorised access attempts, activity anomalies, and cyber threats in real time.
• Regular Security Testing: AP95 conducts regular penetration testing and security vulnerability assessments to ensure there are no exploitable weaknesses in our infrastructure.
• User Fund Segregation: AP95 user funds are held in accounts that are segregated from the company's operational funds — with additional security measures in place to protect users' financial records.

AP95 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Below is an explanation of the types of cookies used:

• Essential Cookies (Required): Cookies required for the core functionality of the AP95 platform — including login session authentication, language preference storage, and transaction security. These cookies cannot be disabled without affecting the overall functionality of the platform.
• Performance Cookies: Helps AP95 understand how users interact with the platform — which pages are visited most, how long pages take to load, and where users encounter technical issues. This data is used solely for technical improvements and does not identify individual users.
• Functional Cookies: Stores your personal preferences such as text size, game preferences, and display settings to deliver a more personalised experience each time you log in to AP95.
• Session Cookies: A temporary cookie that exists only for the duration of your active browsing session and is automatically deleted when you close your browser. It is used to maintain the state of your game session and your AP95 wallet while you are active.

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect your ability to log in or use certain AP95 platform features properly. We recommend keeping at least essential cookies enabled for a smooth and secure AP95 experience.

As an AP95 user, you hold the following rights regarding your personal data. AP95 is committed to facilitating the exercise of these rights without unnecessary complication:

• Right of Access: You have the right to request a copy of all personal data held by AP95 about you. This request will be fulfilled within 30 days of receipt.
• Right to Rectification: If any personal data held by AP95 about you is inaccurate or incomplete, you have the right to request a correction. For straightforward data such as your phone number, this can be done directly through AP95 support.
• Right to Erasure: Under certain circumstances, you have the right to request that AP95 delete your personal data — particularly when that data is no longer required for its original collection purpose and there is no legal obligation to retain it.
• Right to Restrict Processing: Under certain circumstances, you have the right to request that AP95 restrict the processing of your personal data — for example, while you are disputing the accuracy of that data or during a dispute investigation.
• Data Portability Right: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider where applicable.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing communications. AP95 will cease such processing immediately upon receiving a valid objection.

To exercise any of the rights above, please contact the AP95 support team via email at [email protected] or through Live Chat. We will acknowledge your request within 24 hours and provide a full response within 30 days.

AP95 does not retain personal data for longer than is necessary for the purpose for which it was collected, or to meet applicable legal requirements. The following is a general guide to our data retention periods:

• Active Account Data: For the duration of your active AP95 account, plus a defined period following account closure for legal compliance purposes and resolution of any disputes that may arise.
• Financial Transaction Records: Retained for the minimum period required under applicable Malaysian financial laws, typically between 5 and 7 years from the transaction date.
• KYC & Identity Verification Records: Retained for the duration of your active account and for any period required under applicable anti-money laundering (AML) compliance obligations.
• Support Communication Records: Retained for 3 years from the date of communication for quality control purposes and as evidence in dispute resolution if required.
• Cookie Data: Session cookies are deleted when you close your browser. Persistent cookies are stored for the duration specified in their respective cookie settings, typically not exceeding 12 months.

AP95 takes child protection extremely seriously. Our platform is exclusively for individuals aged 18 and above, and we do not knowingly collect or process the personal data of anyone under the age of 18.

Should we discover that personal data belonging to an underage individual has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. AP95's identity verification process is specifically designed to prevent minors from registering an account.

If you have reason to believe that a minor has accessed or registered an account on AP95, please contact our support team immediately at [email protected] with the relevant information. We will investigate and take appropriate action promptly.

AP95 reserves the right to amend and update this Privacy Policy from time to time to reflect changes in our privacy practices, technological developments, or new legal requirements.

• Any material changes to this Privacy Policy will be published on this page with a clearly stated new "Updated" date.
• For material changes that affect how we use your data, AP95 will endeavour to provide advance notice by email or in-platform notification at least 14 days before the changes take effect.
• Your continued use of the AP95 platform after an updated Privacy Policy takes effect will be considered your acceptance of the changes.
• If you disagree with any material changes, you have the right to close your AP95 account before those changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how AP95 protects your privacy. The latest version of the Privacy Policy is always available on this page.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how AP95 handles your personal data, we strongly encourage you to reach out to us directly. The AP95 privacy team is ready to assist you in Bahasa Melayu:

• Email: [email protected] — Please state "Privacy Enquiry" in your email subject line to ensure it is directed to the right team. We will respond within 24 business hours.
• Live Chat: Available 24/7 via the chat icon within the AP95 platform. For urgent privacy concerns such as suspected unauthorised access, Live Chat is the fastest channel to reach us.
• WhatsApp: Contact the AP95 support WhatsApp number listed in the Contact Us section of the platform for immediate privacy-related assistance.

AP95 is committed to handling all privacy-related enquiries seriously, with empathy and without judgement. Your privacy matters to us, and we want to ensure you feel fully comfortable and protected while using the AP95 platform.