Privacy Policy

idn303 ("we", "us", "our") is committed to protecting the personal information of everyone who interacts with our platform. This Privacy Policy ("Policy") sets out the basis on which any personal data that idn303 collects from Members, or that Members provide to idn303, will be processed by idn303.

This Policy applies to:

• All registered Members of the idn303 platform, including individuals who have registered but not yet completed KYC verification.
• All visitors to the idn303 website at idn303.cam, regardless of whether they complete a registration.
• All individuals who contact idn303 via live chat, email, or any other support channel.

This Policy does not apply to the data practices of any third-party service providers, payment processors, or linked websites that operate independently of idn303. idn303 is not responsible for the privacy practices of such third parties, and we encourage you to review their respective privacy policies before providing them with any personal information.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to names, identity document numbers, email addresses, phone numbers, IP addresses, and financial account details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means idn303, which determines the purposes and means of processing personal data collected through the idn303 platform.
• "Data Processor" means any third party that processes personal data on idn303's behalf and under idn303's documented instructions.
• "Member" means any individual who has registered a verified or unverified account on the idn303 platform.
• "Cookies" means small text files placed on a user's device by a website to store browsing preferences and session information.
• "KYC" means the Know Your Customer identity and age verification process required of all Members prior to processing withdrawals.

idn303 collects personal data through several channels and for distinct operational purposes. The categories of personal data we collect include:

3.1 Registration Data

• Full legal name as it appears on a government-issued identification document.
• Date of birth (used for mandatory age verification — Members must be 21 or older).
• Email address and Indonesian mobile telephone number.
• Chosen username and encrypted password.
• Current residential address in Indonesia (city, province, postal code).

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (KTP, passport, or equivalent).
• Proof of address documents (utility bills, bank statements, or equivalent).
• Proof of payment method ownership where required by idn303's compliance team.
• Facial verification photographs or video, where required for enhanced KYC procedures.

3.3 Financial Transaction Data

• Bank account details for deposit and withdrawal transactions (account holder name, account number, bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga).
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions.
• Transaction amounts, timestamps, and reference numbers.
• Deposit and withdrawal history associated with your account.

3.4 Platform Usage Data

• Betting and gaming history, including all wagers placed, game sessions, and outcomes.
• Bonus claims, promotional participation records, and wagering progress data.
• Login history, session durations, and device information (device type, operating system, browser type and version).
• IP address and approximate geolocation data derived from the IP address at the time of each login and transaction.
• Customer support communications, including live chat transcripts and email correspondence.

3.5 Automatically Collected Technical Data

• Cookie identifiers and session tokens (see Section 8 for full details).
• Referral source data indicating how you arrived at the idn303 platform.
• Clickstream data and page interaction analytics collected in anonymised or aggregated form.
• Error logs and crash reports used for platform stability and quality assurance purposes.

idn303 uses the personal data it collects for the following clearly defined purposes:

• Account Management: To create, maintain, authenticate, and administer your idn303 account, including the processing of deposits and withdrawals in Indonesian Rupiah (IDR).
• Identity & Age Verification: To verify that you are at least 21 years of age and to confirm your identity in accordance with our KYC obligations. idn303 does not accept Members who cannot confirm they are 21 or older.
• Transaction Processing: To process deposits and withdrawals via supported local bank transfer methods (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate financial records.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming Monitoring: To identify patterns of behaviour that may indicate a Member is experiencing difficulties related to gambling, and to proactively offer responsible gaming tools where appropriate.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat, email, and WhatsApp channels.
• Promotional Communications: To send you information about bonuses, promotions, and platform updates — only where you have opted in to marketing communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, stability, and user experience of the idn303 platform.
• Legal Compliance: To fulfil our obligations under applicable international gaming regulations and AML requirements, and to respond to lawful requests from regulatory or law enforcement authorities.

idn303 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between idn303 and you (i.e., your idn303 account agreement and these Terms & Conditions). This covers account registration, KYC verification, deposit and withdrawal processing, and customer support.
• Legal Obligation: Processing is required to comply with idn303's obligations under applicable anti-money laundering regulations, gaming licensing requirements, and lawful instructions from competent regulatory or law enforcement authorities.
• Legitimate Interests: Processing is necessary for idn303's legitimate business interests, provided those interests are not overridden by your fundamental rights. Legitimate interests include fraud prevention, platform security, responsible gaming monitoring, and aggregate platform analytics.
• Consent: Where processing is based on your consent — principally in respect of marketing communications and non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

idn303 does not sell, rent, or commercially distribute your personal data to any unaffiliated third party. We may, however, share your personal data with the following categories of recipients under strictly controlled conditions:

• Payment Service Providers: Indonesian bank transfer processors and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy and data security policies.
• KYC & Identity Verification Partners: Third-party identity verification service providers may process your KYC documentation on idn303's behalf. These providers are contractually bound to process data solely in accordance with idn303's documented instructions and applicable data protection standards.
• IT Infrastructure & Cloud Service Providers: idn303 uses third-party cloud hosting and infrastructure providers to store and process platform data. All such providers are subject to contractual data processing agreements and are required to maintain security standards no less stringent than those applied by idn303 itself.
• Fraud Prevention & AML Screening Services: Where necessary to fulfil our AML obligations, idn303 may share transaction data with international fraud prevention databases and screening services.
• Regulatory & Law Enforcement Authorities: idn303 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, a valid legal order, or where idn303 reasonably believes disclosure is necessary to prevent imminent harm or criminal activity.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of idn303's assets, personal data held by idn303 may be transferred to the acquiring entity, subject to the same level of data protection as described in this Policy. Members will be notified of any such transfer via email or in-platform notification.

idn303 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where deletion is not immediately technically feasible (e.g., data held in encrypted backup archives), the data will be isolated from active processing and scheduled for deletion at the earliest practicable opportunity.

idn303 uses cookies and similar tracking technologies to operate the platform effectively and to improve the Member experience. The categories of cookies used by idn303 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the operation of the idn303 platform. They enable core functions such as user authentication, session management, and security enforcement. These cookies cannot be disabled without severely impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences and settings (such as your preferred language and display configuration) to provide a more personalised experience on return visits.
• Analytics Cookies: These cookies collect anonymised data about how Members navigate and use the idn303 platform, helping us identify areas for improvement. We use this data only in aggregated form and it is never linked to individually identifiable Member profiles without your explicit consent.
• Marketing Cookies: Where you have opted in to promotional communications, these cookies may be used to assess the effectiveness of idn303's promotional campaigns. idn303 does not use third-party advertising networks or retargeting pixels.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair or prevent access to the idn303 platform. Disabling functional or analytics cookies will not prevent you from using core platform features.

idn303 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and idn303's servers is encrypted using TLS 1.2 or higher. Our platform enforces HTTPS across all pages and API endpoints.
• At-Rest Encryption: Personal data stored in idn303's databases is encrypted using AES-256 encryption. Encryption keys are stored separately from the data they protect and are subject to regular rotation.
• Access Controls: Access to personal data is restricted to authorised idn303 personnel who require access to perform their designated functions. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication (2FA): All idn303 administrative systems require two-factor authentication for access. Members are also strongly encouraged to enable 2FA on their individual accounts.
• Regular Security Audits: idn303 commissions periodic penetration testing and vulnerability assessments conducted by independent third-party security specialists.
• Incident Response: idn303 maintains a documented data breach response plan. In the event of a confirmed personal data breach that poses a risk to Members' rights and freedoms, affected Members will be notified without undue delay.

As a Member of idn303 and a data subject whose personal information we process, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact idn303 support using the details in Section 15:

• Right of Access: You have the right to request a copy of the personal data that idn303 holds about you. idn303 will provide this within thirty (30) calendar days of receiving a verified request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by idn303. Some data fields (such as your registered full legal name) may require supporting documentation before amendment is possible.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to idn303's legal retention obligations. Note that data we are legally required to retain (e.g., AML transaction records) cannot be deleted until the applicable retention period has elapsed.
• Right to Restrict Processing: You may request that idn303 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that idn303 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of idn303's legitimate interests. idn303 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

idn303 will respond to all data subject requests within thirty (30) calendar days. In cases of complexity or high volume, this period may be extended by a further thirty (30) days, of which you will be informed in advance.

The idn303 platform is strictly intended for adults aged 21 and above. idn303 does not knowingly collect, process, or store personal data relating to any individual under the age of 21. If idn303 becomes aware that personal data belonging to an individual under 21 has been collected — whether through registration, KYC, or any other channel — that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor in your care has registered on or interacted with the idn303 platform, please contact our support team immediately using the details in Section 15. idn303 takes the protection of minors extremely seriously and will act promptly on all such reports.

idn303 operates as an internationally licensed platform and may store or process personal data on servers located outside of Indonesia. Where personal data is transferred to jurisdictions outside Indonesia, idn303 ensures that appropriate safeguards are in place to protect the data, including:

• Contractual data processing agreements with all third-party processors that impose data protection obligations no less stringent than those described in this Policy.
• Transfer only to jurisdictions or service providers that maintain internationally recognised information security certifications (such as ISO 27001) or equivalent standards.
• Regular review of cross-border transfer arrangements to ensure continued compliance with applicable data protection requirements.

By using the idn303 platform, you consent to the transfer of your personal data to servers and processors located outside Indonesia, subject to the safeguards described above.

The idn303 platform may contain references to or integrations with third-party services, including payment providers such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja. When you interact with these third-party services — for example, when completing a deposit or withdrawal — you will be subject to their respective privacy policies and data practices.

idn303 does not control and is not responsible for the content, privacy practices, or data security of any third-party service. We strongly recommend that you review the privacy policy of any third-party service before submitting personal or financial information to that service. idn303 accepts no liability for any harm arising from your use of third-party platforms, even where you accessed those platforms via the idn303 interface.

idn303 reserves the right to amend this Privacy Policy at any time. Where amendments are material — meaning they meaningfully affect how idn303 collects, uses, or shares your personal data — we will notify registered Members via email or in-platform notification at least seven (7) calendar days before the revised Policy takes effect.

Minor amendments, such as clarifications of existing language or corrections of typographical errors, may take effect immediately upon publication without prior notice. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent amendment.

Your continued use of the idn303 platform following the effective date of any amendment to this Policy constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must immediately cease using the platform and contact support to initiate account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of the data subject rights described in Section 10, please contact the idn303 data protection team using the details below. All contact details are displayed as plain text only — these are not clickable links.

• Email: [email protected]
• WhatsApp (plain text only): +62 811 303 0303
• Live Chat: Available 24/7 via the in-platform chat widget. Indonesian-speaking agents are available 08:00–24:00 WIB daily.

idn303 aims to acknowledge all data subject requests within five (5) business days and to fulfil them within thirty (30) calendar days. For urgent account-security concerns — such as suspected unauthorised access — please use the live chat channel for priority handling.