At apa7, your privacy is more than a legal formality — it is a moral responsibility we take seriously. Every piece of personal information you entrust to us is protected with the latest security technology and managed according to strict principles. Here is a full explanation of how we safeguard your privacy.
Every aspect of data management at apa7 is built on six core principles that keep your privacy protected at all times.
All data transmitted between your device and apa7's servers is protected with 256-bit SSL encryption — the same technology used by Maybank, CIMB and Malaysia's leading banks. Your data never travels unprotected.
Members' personal information is stored on servers protected by multiple layers of physical and digital security. Access to the database is restricted to staff who genuinely require it to carry out their duties.
Apa7 only collects information that is strictly necessary to operate our services safely and efficiently. We do not collect excessive data or information that is irrelevant to the services we provide to you.
Apa7 has never sold, rented, or transferred your personal data to any third party for commercial purposes, and never will. Your data is not a commodity — it is personal information we hold in trust.
You have full control over your personal data at apa7. You may request to view, update or delete your information at any time by contacting our support team through official channels.
All data management practices at apa7 comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We operate within the boundaries set by law and uphold the rights guaranteed by the PDPA to every Malaysian.
Important Note: This Privacy Policy explains in detail how apa7 collects, uses, stores and protects your personal information. By using the apa7 platform, you agree to the practices described in this document. Please read it carefully and contact us with any questions at [email protected].
This Privacy Policy ("Policy") is published by apa7 ("we", "Platform") operating under the domain apa7.my. This document outlines our commitment to the privacy and personal data protection of every individual who uses the apa7 platform and its services.
This policy applies to:
This Policy is to be read together with Terms & Conditions and Responsible Gaming Policy apa7. Together, these three documents form the complete framework governing the relationship between apa7 and each of its users.
PDPA Compliance: apa7 is in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We recognise and respect the rights granted to individuals under the PDPA and are committed to upholding our responsibilities as a responsible data processor.
Apa7 follows a data minimisation principle – we only collect information that is genuinely necessary to deliver our services safely, fairly and efficiently. The following are the categories of data we collect:
| Data Category | Type of Information | How It Is Collected |
|---|---|---|
| Identity | Full name, date of birth, MyKad/passport number | Registration & KYC |
| Contact | Phone number, email address | Registration |
| Finance | Bank account number, bank name, digital wallet details | Deposits & Withdrawals |
| Technical | IP address, device type, web browser, operating system | Automatic (system logs) |
| Games | Betting history, game preferences, account balance | In-platform activity |
| Communications | Customer support interaction records and feedback | Support interactions |
Apa7 does not collect sensitive information such as biometric data, medical information, political views or religious beliefs, unless specifically required by applicable law.
Apa7 uses the personal data it collects solely for the following legitimate and stated purposes:
Legal Basis: All data processing carried out by apa7 has a valid legal basis under Malaysia's PDPA — whether based on your consent, contractual necessity, apa7's legitimate interests that do not override your rights, or applicable legal obligations.
Apa7 does not sell, rent or transfer your personal data to any third party for commercial or marketing purposes. Your data may be shared only in the following limited and controlled circumstances:
Our Guarantee: In all cases of data sharing with third parties, apa7 ensures that the receiving party is bound by confidentiality and data protection obligations no less stringent than those in this Privacy Policy. We do not permit third parties to use your data for any purpose beyond the defined scope.
Apa7 invests seriously in data security infrastructure to ensure your personal information is always protected against increasingly sophisticated cyber threats. The security measures we have implemented include:
Apa7 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our data retention guidelines are as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account information | For as long as the account remains active | Service requirements |
| Financial transaction records | 7 years | AMLA & PDPA Legal Requirements |
| KYC Documents | 5 years after closure | Regulatory requirements |
| Support communication logs | 3 years | Dispute resolution |
| Technical & security logs | 90 days | Security monitoring |
| Marketing data (with consent) | Until consent is withdrawn | Based on member consent |
Once the retention period expires, apa7 will securely delete or anonymise your personal data using industry-recognised methods to ensure it cannot be recovered or misused.
The apa7.my website uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:
You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the full functionality of the apa7 platform. We do not use third-party tracking cookies for remarketing advertising purposes.
Under Malaysia's PDPA and apa7's internal policies, you have the following rights regarding your personal data that we hold:
You have the right to request a copy of the personal data we hold about you at any time. We will provide this information within 21 business days.
If the data we hold is inaccurate or out of date, you have the right to request a correction by submitting the accurate information to our support team.
You may request the deletion of your personal data under certain circumstances, subject to apa7's legal obligations to retain specific records.
You may object to the processing of your data for direct marketing purposes at any time. Requests to opt out of marketing communications will be processed within 7 days.
You have the right to receive your personal data in a machine-readable format for transfer to another service provider should you choose to do so.
In certain situations — such as during a dispute over data accuracy — you may request that we temporarily restrict the processing of your data.
How to Exercise Your Rights: To exercise any of the rights above, send a written request to [email protected] with the subject line "Personal Data Rights Request". Include your full name, apa7 account number, and a description of the right you wish to exercise. We will verify your identity and process the request within the timeframe stipulated by the PDPA.
The apa7 platform is an adult service designed exclusively for individuals aged 18 and above. apa7 does not knowingly collect or process personal data from anyone under the age of 18.
Should apa7 discover that personal data of a child has been collected without our knowledge, we will immediately take the following steps:
Parents or guardians who have reason to believe their minor has registered for or used the apa7 platform are advised to contact us immediately at [email protected] so that prompt action can be taken.
Apa7 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technology or our business practices. Any material amendments will be handled as follows:
We encourage you to review this Privacy Policy periodically to stay informed about how apa7 protects your personal information. If you disagree with any amendments, you have the right to close your account before the changes take effect.
If you have any questions, concerns or complaints regarding this Privacy Policy or the way apa7 handles your personal data, please contact us through the following channels:
Data Protection Officer: apa7 has appointed a dedicated officer responsible for matters relating to members' personal data protection. Any formal privacy complaint will be handled by a team that is qualified and knowledgeable in Malaysia's PDPA, ensuring every case is resolved fairly, promptly, and in accordance with applicable law.
In today's digital world, personal data is among the most valuable assets — and the most vulnerable to misuse if not properly managed. When you register an account at apa7 and entrusting your personal information to us, you are making an act of trust that we never take lightly, not even for a moment. That trust is the foundation of the entire relationship between apa7 and its more than 500,000 members across Malaysia.
One important reality to understand is that whenever you use online financial services — whether to play slots at apa7, making a bank transfer via Maybank2u, or paying bills through Touch 'n Go eWallet — you are always sharing sensitive financial data. The difference lies in how each platform handles that data once received. At apa7, we implement security measures on par with banking institutions to keep your financial data safe at all times.
Many online entertainment platforms on the market treat their users' data as a secondary revenue stream — selling or sharing user profiles with advertising networks for targeted marketing purposes. At apa7, we firmly reject that business model. Your data is not a product we sell. apa7's revenue comes from the entertainment services we provide — not from our members' personal data.
This is not merely a polished marketing statement — it is a commitment we reinforce through the technical infrastructure we have built. The apa7 designed with strict data separation: financial data, identity data and gaming data are stored in separate systems with distinct access controls. Even in the highly unlikely event that one system is compromised, this separation ensures your data is not exposed in its entirety.
Apa7's approach to privacy also means we only collect what we need — nothing more. When you register with apa7, we ask for your phone number and email address for communication and account security purposes. We do not ask for your full home address unless there is a specific situation requiring the delivery of a physical prize. We do not ask for your income details. We do not ask for information about your family members. Only what is necessary, only what is relevant.
Every time you make a deposit using DuitNow, FPX via Maybank2u or CIMB Clicks, Touch 'n Go eWallet, GrabPay, Boost or ShopeePay at apa7, that transaction is safeguarded by multiple layers of security. First, the connection between your device and apa7's servers is encrypted with 256-bit SSL, ensuring data cannot be intercepted in transit. Second, all payment information is processed through certified payment gateways meeting the highest industry standards. Third, apa7 does not store complete credit card numbers or full payment details in its systems — only encrypted tokens are used for transaction reference.
Real-time monitoring system apa7 continuously monitors activity on the platform to detect unusual or suspicious patterns. If our system flags anything out of the ordinary on your account – such as login attempts from unfamiliar locations or irregular transaction patterns – we will send an immediate alert and may require additional verification to protect your account. This may occasionally feel like an inconvenience, but it is an essential part of the protection apa7 extends to every member.
We also encourage all members apa7 to take smart personal security precautions — use a strong, unique password for your apa7 account, enable two-factor authentication (2FA) where available, and never share your login details with anyone. Digital security is a shared responsibility between the platform and its users, and apa7 is fully committed to playing our part in ensuring a safe gaming experience for all our Malaysian members.
Ultimately, the Privacy Policy apa7 is more than a legally required document — it is a reflection of the core values we uphold in running this platform. Your trust is something we work to deserve every single day, through concrete actions and practices that protect your privacy and personal data security. If you have any questions or concerns, our lines of communication are always open — because we believe transparency is the foundation of genuine trust between apa7 and the Malaysian player community we deeply value.
Answers to the most frequently asked questions about personal data protection at apa7.
Play with peace of mind knowing your personal data is always secure at apa7. Register now, claim your RM100 welcome bonus and start enjoying the best slots in Malaysia with guaranteed privacy!